aws / aws/amazon-q-developer-cli
Assigned IAM profile doesn't show up
- Dominant language
- Rust
- Stars
- 2k
- Forks
- 439
- PR merge metrics
- No merged PRs in 30d
Description
### Checks
- [x] I have searched [github.com/aws/amazon-q-developer-cli/issues](https://github.com/aws/amazon-q-developer-cli/issues?q=) and there are no duplicates of my issue
- [x] I have run `q doctor` in the affected terminal session
- [x] I have run `q restart` and replicated the issue again
### Operating system
macOS 26.5.1 (25F80)
### Expected behaviour
I have two assigned profile in my Enterprise IAM identity center, I would expect it to be able to switch between them.
### Actual behaviour
Only one profile (the old one) is available via `kiro-cli profile`. The other one shows up on Kiro web or Kiro IDE, but when I select it I get `Access denied`
### Steps to reproduce
_No response_
### Environment
```yaml
[q-details]
version = "2.8.0"
hash = "63ca9ce0914a71fdf63af1de8458d7fd49fb6bf2"
date = "2026-06-17T03:19:51.788321Z (20h ago)"
variant = "full"
[system-info]
os = "macOS 26.5.1 (25F80)"
chip = "Apple M4 Pro"
total-cores = 12
memory = "48.00 GB"
[environment]
cwd = "/Users/USER/Workspace/nexmoclient-sdk-core-kmp"
cli-path = "/Users/USER/Workspace/nexmoclient-sdk-core-kmp"
os = "Mac"
shell-path = "/bin/zsh"
shell-version = "5.9"
terminal = "iTerm 2"
install-method = "unknown"
[env-vars]
PATH = "/opt/homebrew/opt/ruby/bin:/opt/homebrew/lib/ruby/gems/4.0.0/bin:/opt/homebrew/opt/coreutils/libexec/gnubin:/Users/USER/.bun/bin:/Users/USER/.git-ai/bin:/Users/USER/.local/bin:/Users/USER/.opencode/bin:/Users/USER/.asdf/shims:/Users/USER/.asdf/installs/android-sdk/20.0/cmdline-tools/20.0/bin:/Users/USER/.asdf/installs/android-sdk/20.0/platform-tools:/Users/USER/.asdf/installs/android-sdk/20.0/build-tools/36.0.0:/Users/USER/.asdf/installs/java/corretto-17.0.9.8.1/bin:/opt/homebrew/bin:/opt/homebrew/sbin:/usr/local/bin:/System/Cryptexes/App/usr/bin:/usr/bin:/bin:/usr/sbin:/sbin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/local/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/appleinternal/bin:/pkg/env/global/bin:/Library/Apple/usr/bin:/Applications/iTerm.app/Contents/Resources/utilities:/Users/USER/.local/bin:/Users/USER/.orbstack/bin:/Users/USER/.orbstack/bin"
QTERM_SESSION_ID = "c2daf24bec0044c5b97e1e6d2d1df092"
Q_SET_PARENT_CHECK = "1"
Q_TERM = "2.8.0"
SHELL = "/bin/zsh"
TERM = "xterm-256color"
__CFBundleIdentifier = "com.googlecode.iterm2"
```
Contributor guide
Research direction
Start by reproducing the profile listing with `kiro-cli profile` after running `q doctor` and `q restart`, using the reported two Enterprise IAM Identity Center profiles. Compare the CLI result with the profile available in Kiro web or IDE; done means both assigned profiles are selectable without `Access denied`.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, rust
- Domain
- authorization, cli
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100