aws / aws/amazon-q-developer-cli

Assigned IAM profile doesn't show up

Open
#3,848 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
2k
Forks
439
PR merge metrics
No merged PRs in 30d

Description

### Checks

- [x] I have searched [github.com/aws/amazon-q-developer-cli/issues](https://github.com/aws/amazon-q-developer-cli/issues?q=) and there are no duplicates of my issue
- [x] I have run `q doctor` in the affected terminal session
- [x] I have run `q restart` and replicated the issue again

### Operating system

macOS 26.5.1 (25F80)

### Expected behaviour

I have two assigned profile in my Enterprise IAM identity center, I would expect it to be able to switch between them.

### Actual behaviour

Only one profile (the old one) is available via `kiro-cli profile`. The other one shows up on Kiro web or Kiro IDE, but when I select it I get `Access denied`

### Steps to reproduce

_No response_

### Environment

```yaml

[q-details]
version = "2.8.0"
hash = "63ca9ce0914a71fdf63af1de8458d7fd49fb6bf2"
date = "2026-06-17T03:19:51.788321Z (20h ago)"
variant = "full"

[system-info]
os = "macOS 26.5.1 (25F80)"
chip = "Apple M4 Pro"
total-cores = 12
memory = "48.00 GB"

[environment]
cwd = "/Users/USER/Workspace/nexmoclient-sdk-core-kmp"
cli-path = "/Users/USER/Workspace/nexmoclient-sdk-core-kmp"
os = "Mac"
shell-path = "/bin/zsh"
shell-version = "5.9"
terminal = "iTerm 2"
install-method = "unknown"

[env-vars]
PATH = "/opt/homebrew/opt/ruby/bin:/opt/homebrew/lib/ruby/gems/4.0.0/bin:/opt/homebrew/opt/coreutils/libexec/gnubin:/Users/USER/.bun/bin:/Users/USER/.git-ai/bin:/Users/USER/.local/bin:/Users/USER/.opencode/bin:/Users/USER/.asdf/shims:/Users/USER/.asdf/installs/android-sdk/20.0/cmdline-tools/20.0/bin:/Users/USER/.asdf/installs/android-sdk/20.0/platform-tools:/Users/USER/.asdf/installs/android-sdk/20.0/build-tools/36.0.0:/Users/USER/.asdf/installs/java/corretto-17.0.9.8.1/bin:/opt/homebrew/bin:/opt/homebrew/sbin:/usr/local/bin:/System/Cryptexes/App/usr/bin:/usr/bin:/bin:/usr/sbin:/sbin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/local/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/appleinternal/bin:/pkg/env/global/bin:/Library/Apple/usr/bin:/Applications/iTerm.app/Contents/Resources/utilities:/Users/USER/.local/bin:/Users/USER/.orbstack/bin:/Users/USER/.orbstack/bin"
QTERM_SESSION_ID = "c2daf24bec0044c5b97e1e6d2d1df092"
Q_SET_PARENT_CHECK = "1"
Q_TERM = "2.8.0"
SHELL = "/bin/zsh"
TERM = "xterm-256color"
__CFBundleIdentifier = "com.googlecode.iterm2"
```

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the profile listing with `kiro-cli profile` after running `q doctor` and `q restart`, using the reported two Enterprise IAM Identity Center profiles. Compare the CLI result with the profile available in Kiro web or IDE; done means both assigned profiles are selectable without `Access denied`.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, rust
Domain
authorization, cli
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.