AWS CLIのdefaultプロファイルをIAMユーザーからIAM Identity Centerユーザーに変更する

$ aws sts get-caller-identity
{
    "Account": "123456789012",
    "UserId": "ABCDEFGHIJKLMNOPQRSTUV",
    "Arn": "arn:aws:iam::123456789012:user/test"
}

$ aws configure sso --profile default
SSO session name (Recommended): default
SSO start URL [None]: https://a-123456bcde.awsapps.com/start/
SSO region [None]: ap-northeast-1
SSO registration scopes [sso:account:access]: sso:account:access
Attempting to automatically open the SSO authorization page in your default browser.
If the browser does not open or you wish to use a different device to authorize this request, open the following URL:

https://device.sso.ap-northeast-1.amazonaws.com/

Then enter the code:

ABCD-EFGH
The only AWS account available to you is: 123456789012
Using the account ID 123456789012
The only role available to you is: AdministratorAccess
Using the role name "AdministratorAccess"
CLI default client Region [None]: ap-northeast-1
CLI default output format [None]: json

To use this profile, specify the profile name using --profile, as shown:

aws s3 ls --profile default

$ 

[default]
sso_session = default
sso_account_id = 123456789012
sso_role_name = AdministratorAccess
region = ap-northeast-1
output = json

[default]
# aws_access_key_id = ABCDEFGHIJKLMNOPQRSTUV
# aws_secret_access_key = hogehogehogehogehogehogehogehogehogehoge

$ aws sts get-caller-identity                     
{
    "UserId": "HOGEHOGEHOGEHOGEHOGE:test-user",
    "Account": "123456789012",
    "Arn": "arn:aws:sts::123456789012:assumed-role/AWSReservedSSO_AdministratorAccess_1234hogehoge1234hogehoge/test-user"
}