Granted CLI
Mimic detects profiles generated by Granted (Common Fate).
Detection
A profile is recognized as Granted when it has granted_sso_* fields:
ini
[profile Testing/AdminAccess]
granted_sso_start_url = https://default.awsapps.com/start
granted_sso_region = us-east-1
granted_sso_account_id = 111122223333
granted_sso_role_name = AdminAccess
common_fate_generated_from = aws-sso
credential_process = granted credential-process --profile Testing/AdminAccessBehavior
- Appears with credential type
Granted/aws-sso - Grouped under the matching SSO org (matched by start URL)
- All metadata (label, tags, notes, star, hide, color) works normally
- Login opens the browser SSO flow (not via
credential_process) - The
credential_processline is preserved in~/.aws/config