Skip to content

Granted CLI

Mimic detects profiles generated by Granted (Common Fate).

Detection

A profile is recognized as Granted when it has granted_sso_* fields:

ini
[profile Testing/AdminAccess]
granted_sso_start_url      = https://default.awsapps.com/start
granted_sso_region         = us-east-1
granted_sso_account_id     = 111122223333
granted_sso_role_name      = AdminAccess
common_fate_generated_from = aws-sso
credential_process         = granted credential-process --profile Testing/AdminAccess

Behavior

  • Appears with credential type Granted/aws-sso
  • Grouped under the matching SSO org (matched by start URL)
  • All metadata (label, tags, notes, star, hide, color) works normally
  • Login opens the browser SSO flow (not via credential_process)
  • The credential_process line is preserved in ~/.aws/config