View as Markdown

Onboarding quickstart

Audience

Read this page if you're an administrator who wants to onboard your team to Kiro and manage their subscriptions.

To onboard your team to Kiro

  1. Create an AWS account if you don't have one already (see Create an AWS account).

  2. Sign in to your AWS account. You can sign in as an AWS root user or as a user with a privileged role. Alternatively, allow administrators to use Kiro with minimum permissions.

  3. Connect to your identity provider. Add users to its directory from AWS IAM Identity Center, or connect it to an external identity provider (IdP) such as Okta, or Microsoft Entra ID. Follow the instructions on how to connect your identity provider to Kiro.

  4. Create a Kiro profile and choose its access path. Within the AWS console, navigate to the Kiro console and create a profile. New profiles, and existing profiles that have no subscriptions, use credit pooling: buy seats, then add users or groups to the shared pool. If your profile still uses individual subscriptions, subscribe your team to Kiro. In AWS GovCloud (US), profiles that use a custom OIDC provider skip this step; each user is subscribed at first sign-in.

  5. Share download instructions with your team. Once users are subscribed, they can download Kiro IDE or Kiro CLI from the Kiro downloads page and sign in with their identity provider credentials.

Find your AWS account ID

Several Kiro setup steps ask for a 12-digit AWS account ID. For a Kiro profile, use the ID of the AWS account where the profile was created. This is also the account where users are subscribed through that profile. If a step names another resource, such as an IAM Identity Center instance or AWS KMS key, use the account that owns that resource.

AWS Management Console

  1. Sign in to the AWS Management Console for the account that owns the resource.
  2. In the upper-right navigation bar, choose your account name, account number, or user name.
  3. If the menu shows Account, copy the 12-digit account ID.
  4. Otherwise, choose Security credentials. Under Account details, copy the AWS account ID.

AWS CLI

Run this command with credentials for the account:

bash
aws sts get-caller-identity --query Account --output text

If you use a named AWS CLI profile, add --profile <profile-name>.

For more details, see View AWS account identifiers.

Page updated: November 9, 2026