You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The object/principal names are referenced throughout the module. Failure to follow this guidance may lead to unintentional errors such as the following:
The object/principal names are referenced throughout the module. Failure to follow this guidance may lead to unintentional errors such as the following:
| <aname="input_existing_sso_groups"></a> [existing\_sso\_groups](#input\_existing\_sso\_groups)| Names of the existing groups that you wish to reference from IAM Identity Center. | <pre>map(object({<br> group_name = string<br> }))</pre> |`{}`| no |
223
285
| <aname="input_existing_sso_users"></a> [existing\_sso\_users](#input\_existing\_sso\_users)| Names of the existing users that you wish to reference from IAM Identity Center. | <pre>map(object({<br> user_name = string<br> group_membership = optional(list(string), null) // only used if your IdP only syncs users, and you wish to manage which groups they should go in<br> }))</pre> |`{}`| no |
224
286
| <aname="input_permission_sets"></a> [permission\_sets](#input\_permission\_sets)| Permission Sets that you wish to create in IAM Identity Center. This variable is a map of maps containing Permission Set names as keys. See permission\_sets description in README for information about map values. |`any`|`{}`| no |
287
+
| <a name="input_sso_applications"></a> [sso\_applications](#input\_sso\_applications) | List of applications to be created in IAM Identity Center | <pre>map(object({<br> name = string<br> application_provider_arn = string<br> description = optional(string)<br> portal_options = optional(object({<br> sign_in_options = optional(object({<br> application_url = optional(string)<br> origin = string<br> }))<br> visibility = optional(string)<br> }))<br> status = string # acceptable values are "ENABLED" or "DISABLED"<br> client_token = optional(string)<br> tags = optional(map(string))<br> assignment_required = bool # Resource: aws_ssoadmin_application_assignment_configuration<br> assignments_access_scope = optional(<br> list(object({<br> authorized_targets = optional(list(string)) # List of application names<br> scope = string<br> }))<br> ) # Resource: aws_ssoadmin_application_access_scope<br> group_assignments = optional(list(string)) # Resource aws_ssoadmin_application_assignment, keeping it separated for groups<br> user_assignments = optional(list(string)) # Resource aws_ssoadmin_application_assignment, keeping it separated for users<br> }))</pre> | `{}` | no |
225
288
| <aname="input_sso_groups"></a> [sso\_groups](#input\_sso\_groups)| Names of the groups you wish to create in IAM Identity Center. | <pre>map(object({<br> group_name = string<br> group_description = optional(string, null)<br> }))</pre> |`{}`| no |
| <aname="output_account_assignment_data"></a> [account\_assignment\_data](#output\_account\_assignment\_data)| Tuple containing account assignment data |
233
296
| <aname="output_principals_and_assignments"></a> [principals\_and\_assignments](#output\_principals\_and\_assignments)| Map containing account assignment data |
297
+
| <aname="output_sso_applications_arns"></a> [sso\_applications\_arns](#output\_sso\_applications\_arns)| A map of SSO Applications ARNs created by this module |
298
+
| <aname="output_sso_applications_group_assignments"></a> [sso\_applications\_group\_assignments](#output\_sso\_applications\_group\_assignments)| A map of SSO Applications assignments with groups created by this module |
299
+
| <aname="output_sso_applications_user_assignments"></a> [sso\_applications\_user\_assignments](#output\_sso\_applications\_user\_assignments)| A map of SSO Applications assignments with users created by this module |
234
300
| <aname="output_sso_groups_ids"></a> [sso\_groups\_ids](#output\_sso\_groups\_ids)| A map of SSO groups ids created by this module |
This directory contains examples of using the module to **create** applications, application assignments configurations, users, groups and application assignments to both users and groups
2
+
3
+
**IMPORTANT:** Ensure that the name of your object matches the name of your principal (e.g. user name or group name). See the following example with object/principal names 'Admin' and 'nuzumaki':
4
+
5
+
```hcl
6
+
sso_groups = {
7
+
Admin : {
8
+
group_name = "Admin"
9
+
group_description = "Admin IAM Identity Center Group"
10
+
},
11
+
}
12
+
13
+
// Create desired USERS in IAM Identity Center
14
+
sso_users = {
15
+
nuzumaki : {
16
+
group_membership = ["Admin",]
17
+
user_name = "nuzumaki"
18
+
given_name = "Naruto"
19
+
family_name = "Uzumaki"
20
+
email = "nuzumaki@hiddenleaf.village"
21
+
},
22
+
}
23
+
24
+
// Create desired Applications in IAM Identity Center
This directory contains examples of using the module to **create** applications, application assignments configurations, users, groups and application assignments to both users and groups
3
+
4
+
**IMPORTANT:** Ensure that the name of your object matches the name of your principal (e.g. user name or group name). See the following example with object/principal names 'Admin' and 'nuzumaki':
5
+
6
+
```hcl
7
+
sso_groups = {
8
+
Admin : {
9
+
group_name = "Admin"
10
+
group_description = "Admin IAM Identity Center Group"
11
+
},
12
+
}
13
+
14
+
// Create desired USERS in IAM Identity Center
15
+
sso_users = {
16
+
nuzumaki : {
17
+
group_membership = ["Admin",]
18
+
user_name = "nuzumaki"
19
+
given_name = "Naruto"
20
+
family_name = "Uzumaki"
21
+
email = "nuzumaki@hiddenleaf.village"
22
+
},
23
+
}
24
+
25
+
// Create desired Applications in IAM Identity Center
0 commit comments