How to create AppInstanceAdmin using chime-sdk-identity cli

Question

I am trying to create an AppInstanceAdmin using the aws chime-sdk-identity CLI.

1. I created an application instance using the command: aws chime-sdk-identity create-app-instance.
2. I try to create an AppInstanceAdmin using the command: aws chime-sdk-identity create-app-instance-admin --app-instance-arn <arn> --app-instance-admin-arn ?

And here's the problem. I can't create an admin instance because I need an admin account to do so.

My IAM user has the AdministratorAccess policy assigned.

I need AppInstanceAdmin to manage other accounts from my application. Now I am using a normal account, but I get an error 403 forbidden request when trying to create a channel for a messaging session.

Answer 1

CreateAppInstanceAdmin has a misleading name.

It doesn't create an admin, it promotes a user/bot to admin.

CreateAppInstanceAdmin
Promotes an AppInstanceUser or AppInstanceBot to an AppInstanceAdmin.

The description for the AppInstanceAdminArn could also be improved, as it incorrectly insinuates that you need to have the value from somewhere. I've provided feedback to the Chime team for its improvement.

AppInstanceAdminArn
The ARN of the administrator of the current AppInstance.

--app-instance-admin-arn is used to specify the ARN for the instance user / bot to be promoted.

➜  ~ aws chime-sdk-identity create-app-instance-user \
     --no-cli-pager \
     --name my-user-name 
     --app-instance-arn arn:aws:chime:xxx:yyy:app-instance/zzz \
     --app-instance-user-id my-user-id
{
    "AppInstanceUserArn": "arn:aws:chime:xxx:yyy:app-instance/zzz/user/my-user-id"
}

➜  ~ aws chime-sdk-identity create-app-instance-admin \
     --no-cli-pager \
     --app-instance-admin-arn arn:aws:chime:xxx:yyy:app-instance/zzz/user/my-user-id \
     --app-instance-arn arn:aws:chime:xxx:yyy:app-instance/zzz
{
    "AppInstanceAdmin": {
        "Arn": "arn:aws:chime:xxx:yyy:app-instance/zzz/user/my-user-id",
        "Name": "my-user-name"
    },
    "AppInstanceArn": "arn:aws:chime:xxx:yyy:app-instance/zzz"
}