Setting or changing your AWS account alias
The AWS account root user and AWS Identity and Access Management (IAM) users in the account sign in using a web URL.
If you want the URL for your IAM users to contain your company name (or another
easy-to-remember identifier) instead of the AWS account ID, you can create an account alias. This section provides information about
AWS account aliases and lists the API operations that you can use to create an
alias.
The sign-in page URL for your account's IAM users has the following format, by
default.
https://Your_Account_ID
.signin.aws.amazon.com/console/
If you create an AWS account alias for your AWS account ID, the IAM user sign-in
page URL looks like the following example.
https://Your_Account_Alias
.signin.aws.amazon.com/console/
The original URL containing your AWS account ID remains active and can still be used
after you create your AWS account alias.
To create a bookmark for your account sign-in page in your web browser, we recommend
that you manually type the sign-in URL in the bookmark entry. Don't use your web
browser's "bookmark this page" feature, because that can capture a lot of information
that relates only to your current browser session. That information can interfere with
future visits to the page.
Considerations
-
Your AWS account can have only one alias. If you create a new alias for your
AWS account, the new alias overwrites the previous alias. The URL containing the
previous alias stops working.
-
The account alias must be unique across all Amazon Web Services products. It must contain
only lowercase letters, digits, and hyphens.
Creating, deleting, and viewing the AWS account
alias
- AWS Management Console
-
Creating or editing an account alias
To perform the following steps, you must have at least the following IAM permissions:
-
iam:ListAccountAliases
-
iam:CreateAccountAlias
Sign in to
the AWS Management Console as either the AWS account root user or as an IAM user or
role that has the minimum permissions.
-
Open the IAM console at https://console.aws.amazon.com/iam/.
-
In the navigation pane, choose
Dashboard.
-
In the right-hand pane under AWS account,
for Sign-in URL for IAM users in this account,
choose Customize. If an alias already exists,
then choose Edit.
-
For Preferred alias, enter the name you want
to use for your alias, then choose Save
changes.
You can have only one alias associated with your AWS account
at a time. If you create a new alias, the previous alias is
removed, and the sign-in URL that was associated with the
previous alias stops working.
Deleting an account alias
To perform the following steps, you must have at least the following IAM permissions:
-
iam:ListAccountAliases
-
iam:CreateAccountAlias
-
iam:DeleteAccountAlias
Sign in to
the AWS Management Console as either the AWS account root user or as an IAM user or
role that has the minimum permissions.
-
Open the IAM console at https://console.aws.amazon.com/iam/.
-
In the navigation pane, choose
Dashboard.
-
In the right-hand pane under AWS account,
for Sign-in URL for IAM users in this account,
choose Delete.
- AWS CLI & SDKs
-
You can create, update, or delete an account alias by using the following
SDK API operations or their AWS CLI equivalents:
To perform the following steps, you must have at least the following IAM permissions:
-
iam:ListAccountAliases
-
iam:CreateAccountAlias
-
iam:DeleteAccountAlias
To display your AWS account ID alias, run the following command.
$
aws iam list-account-aliases
{
"AccountAliases": [
"myaccountalias"
]
}
To create an alias for your AWS Management Console sign-in, run the following
command:
$
aws iam create-account-alias \
--account-alias myaliasname
This command produces no output if it's successful.
To delete an AWS account ID alias, run the following command.
$
aws iam delete-account-alias \
--account-alias bisdavid
This command produces no output if it's successful.