# Shonin

> Shonin gives your people access to your AWS accounts, like AWS IAM Identity Center, and lets you share single accounts with other companies, also across AWS…

Every page is also Markdown at the same address with .md. All pages in one file: https://docs.shonin.ai/llms-full.txt

## Overview

- [Shonin documentation](https://docs.shonin.ai/index.md): Shonin gives your people access to your AWS accounts, like AWS IAM Identity Center, and lets you share single accounts with other companies, also across AWS…

## Start here

- [Getting started](https://docs.shonin.ai/getting-started.md): From a new Shonin org to the first person opening the AWS console, in four steps.
- [Concepts](https://docs.shonin.ai/concepts.md): The words these pages use, and how they relate.

## Set up

- [Connect your AWS organization](https://docs.shonin.ai/connect-aws-organization.md): Your Shonin org uses the accounts of your AWS organization through the Shonin installation, which runs in your management account. You deploy it once, with one…
- [Single sign-on with Google Workspace](https://docs.shonin.ai/single-sign-on-google-workspace.md): Your people sign in to Shonin with their Google Workspace account. You create the OAuth client in your own Google Cloud, like you do for AWS IAM Identity…
- [Automatic updates](https://docs.shonin.ai/automatic-updates.md): The installation in your AWS account installs security fixes and new versions by itself, unless you turn it off.

## Manage access

- [People and groups](https://docs.shonin.ai/people-and-groups.md): Administrators manage people and groups by asking the Assistant in the dashboard. See Assistant.
- [Permission sets and assignments](https://docs.shonin.ai/permission-sets.md): A permission set is a name and its AWS managed policies, as in IAM Identity Center. Assigned to a person or a group on an account, it becomes an IAM role in…
- [Share accounts with another company](https://docs.shonin.ai/share-accounts.md): The Shonin org that owns an AWS organization can delegate single accounts to another Shonin org: a partner, a supplier or a customer. They assign their own…
- [Assistant](https://docs.shonin.ai/assistant.md): Administrators manage their Shonin org by chatting with the Assistant, in the dashboard: people, groups, permission sets, assignments and delegations. Users…

## Use AWS

- [Console access](https://docs.shonin.ai/console-access.md): Console access, in the dashboard, lists the accounts and permission sets assigned to you, also on accounts delegated to your Shonin org. Refresh updates the…
- [Command line and SDKs](https://docs.shonin.ai/command-line.md): The shonin command writes one AWS CLI profile for each permission set assigned to you. The AWS CLI, the SDKs, Terraform and CDK use them with no other setup,…
- [Second factor](https://docs.shonin.ai/second-factor.md): Shonin asks for a second factor when you sign in. Your installation checks it, in your AWS account. Once verified, the console, Access keys and the command…

## Reference

- [Security](https://docs.shonin.ai/security.md): The tokens AWS accepts are signed in your AWS account, by your installation, after it checks the second factor itself. Shonin alone cannot open your accounts.
- [FAQ](https://docs.shonin.ai/faq.md): Short answers, with links to the pages that explain more.