Question - How to get the Base/Org level account as an option?

[tyu0912]

Hello good peoples. Wondering if anyone knows how to do this. I'm having some trouble getting the base account to show up as a potential choice for switching. Is this possible?

Currently, my setup looks something like this and basically I can't get Base to show up as an option. I'm wondering if it has something to do with how I've defined role_name under Base which is a federated role that begins with AWSReservedSSO.

Any help is appreciated!

[Base]
aws_account_id = 000000000
target_role_name = MySwapRole
role_name = MySuperRole

[Account1]
aws_account_id = 1111111111
source_profile = Base

[Account2]
aws_account_id = 222222222
source_profile = Base

[tilfin]

For SSO login, only the permission set name must be specified in the role_name.

Perhaps the following logic is not working correctly due to a specification I am not yet aware of.

aws-extend-switch-roles/src/lib/profile_set.js

Lines 86 to 94 in 56f8717

	const RESERVED_SSO_PREFIX = "AWSReservedSSO_";
	function extractLoginRole(role) {
	if (role.startsWith(RESERVED_SSO_PREFIX)) {
	// extract permission set from SSO role
	const lastUnderscore = role.lastIndexOf('_');
	return role.substr(RESERVED_SSO_PREFIX.length, lastUnderscore - RESERVED_SSO_PREFIX.length);
	}
	return role;
	}