granted sso-tokens clear -all does not appear to remove "session-credentials"

[JohnPolansky]

I'm trying to find a command to remove all granted credentials both SSO/CLI/SESSION. When using SSO to sign in in Keychain you see the following created:

• granted-aws-sso-tokens And when u run an aws cli command aws sts get-caller-identity --profile <profile> you will see the following created:
• granted-aws-session-credentials

Unfortunately it appears the command:

granted sso-tokens clear -all
[✔] Cleared all saved tokens

ONLY removes the granted-aws-sso-tokens and misses the granted-aws-session-credentials this means you are not fully logged out since the aws sts get-caller-identity --profile <profile> command STILL works.

Is there a way to properly remove all sign-in information? or can we updated it to have granted sso-sesssions clear -all or the like?

[Eddie023]

@JohnPolansky There is a granted cache clear command from where you can select specific cached granted-aws-session-credentials and clear it.

However, as you mentioned, a single command to clear all should be an excellent addition.