winterbaume-sso

AWS SSO (IAM Identity Center) service implementation for winterbaume.

Coverage

Metric	Value
Service	SSO
AWS model	sso
Protocol	restJson1
winterbaume coverage	4/4 operations (100.0%)
stubs (routed, returns empty/default)	0/4 operations (0.0%)
moto coverage	0/4 operations (0.0%)
floci coverage	0/4 operations (0.0%)
kumo coverage	0/4 operations (0.0%)
Coverage report date	2026-05-13

Server-mode usage

Start winterbaume-server and point the AWS CLI at it:

cargo run -p winterbaume-server -- --host 127.0.0.1 --port 5555

export AWS_ENDPOINT_URL=http://localhost:5555
aws sso list-accounts --access-token dummy-token

Example

use aws_sdk_sso::config::BehaviorVersion;
use winterbaume_core::MockAws;
use winterbaume_sso::SsoService;

#[tokio::main]
async fn main() {
    let mock = MockAws::builder().with_service(SsoService::new()).build();

    let config = aws_config::defaults(BehaviorVersion::latest())
        .http_client(mock.http_client())
        .credentials_provider(mock.credentials_provider())
        .region(aws_sdk_sso::config::Region::new("us-east-1"))
        .load()
        .await;

    let client = aws_sdk_sso::Client::new(&config);

    let resp = client
        .list_accounts()
        .access_token("mock-token")
        .send()
        .await
        .expect("list_accounts should succeed");
    println!("SSO accounts: {}", resp.account_list().len());
}

Implemented APIs (4)

• GetRoleCredentials
• ListAccountRoles
• ListAccounts
• Logout