When you configure AWS CLI to use an IAM user, the first thing it asks for is an SSO session name. Don’t put whitespace or punctuation in it. The command doesn’t tell you this, but it’s going to use what you enter as an identifier, and fail with a cryptic error:
$ aws configure sso SSO session name (Recommended): AWS CLI on Gary's Chromebook SSO start URL [None]: https://whatever.awsapps.com/start SSO region [None]: us-east-1 SSO registration scopes [sso:account:access]: An error occurred (InvalidClientMetadataException) when calling the RegisterClient operation:
You need to put something like “gbenson” in there.