Failed to create Kiro subscription for IAM Identity Center user in AWS Console

[K4izuo]

Before opening, please confirm:

• I have searched for duplicate or closed issues

Operating System

Windows 10 / Windows 11, using AWS Console in browser

Kiro Version

N/A - issue occurs in AWS Kiro Console web subscription flow, not Kiro IDE

Bug Description

I am trying to add an IAM Identity Center user to Kiro from the AWS Kiro Console, but the subscription creation fails.

When I click Add user and try to assign a Kiro plan to my enabled IAM Identity Center user, the console shows this error:

"Failed to create Kiro subscription for 1 user"
"An error occurred while trying to create Kiro subscriptions."

The user is not added to Kiro. The Kiro users list remains empty.

My AWS Activate credits are active and available. IAM Identity Center is set up in us-east-1, the identity source is Identity Center directory, and the user is enabled.

I already contacted AWS Support, and they told me to contact the Kiro team through this GitHub issue tracker.

Steps to Reproduce

1. Open AWS Console.

2. Go to the Kiro Console / Kiro user management page.

3. IAM Identity Center is already configured in us-east-1.

4. Confirm there is an enabled IAM Identity Center user.

5. Click "Add user" in Kiro.

6. Select the IAM Identity Center user.

7. Select a Kiro plan.

8. Submit/assign the user.

9. The red error banner appears:

   "Failed to create Kiro subscription for 1 user"
   "An error occurred while trying to create Kiro subscriptions."

10. The user is not added to Kiro and the users list remains at 0.

Expected Behavior

The selected IAM Identity Center user should be successfully added to Kiro with the selected plan, and the user should appear in the Kiro users list.

Conversation ID

N/A - issue occurred in AWS Console, not inside Kiro IDE conversation

Additional Context

Additional details:

• AWS Region / IAM Identity Center region: us-east-1
• IAM Identity Center identity source: Identity Center directory
• Provisioning method: Direct
• Authentication method: Password
• IAM Identity Center user status: Enabled
• AWS Activate credits are active and available
• AWS Support reviewed the case and directed me to open an issue with the Kiro team

I can provide my AWS account ID or other identifiers privately to the Kiro team if needed, but I am not including them publicly in this GitHub issue.

[github-actions]

🤖 Potential Duplicate Detected

This issue appears to be similar to:

• #9987: unable to manage subscription (82% similar)
• #7089: Kiro subscription assignment fails on Organizations management account and routes to standalone CreateAssignment path (82% similar)
• #7068: Kiro subscription creation fails for all AWS Organizations accounts - wrong subscriptionType Q_DEVELOPER_STANDALONE_PRO used (80% similar)

What happens next?

• ⏰ This issue will be automatically closed in 3 days
• 🏷️ If this is not a duplicate, you can prevent automatic closure by adding a comment or reacting with 👎 to this message.
• 💬 Comment on the original issue if you have additional information

Why is this marked as duplicate?
Both issues report failures in managing/creating Kiro subscriptions through the AWS Console, involving IAM Identity Center users and subscription assignment errors. Issue #9987 is titled 'unable to manage subscription' which overlaps significantly with the new issue's core problem of subscription creation failure for IAM Identity Center users.

[github-actions]

This issue has been automatically closed as it appears to be a duplicate of #9987.

If you believe this is incorrect, please comment on this issue and a maintainer will review it.