aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap

AWS::SSO::Assignment

Open
#660 3 comments 10 reactions 0 assignees View on GitHub
enhancement
Dominant language
No language data
Stars
1.1k
Forks
62
PR merge metrics
No merged PRs in 30d

Description

1. Title
Create AWS::SSO::Assignment

2. Scope of request
It is possible to assign AWS SSO permission sets via CloudFormation to accounts.

However is you assign multiple permissionsets in parallel to (>10) accounts it fails.
If you assign them in smaller batches it works.
It seems there is some throttling occurring on one of the API calls related to CloudFormation and the SSO service.

3. Expected behavior
Ability to assign a permissionset to 10 accounts or more via Cloudformation, without the use of **[`DependsOn`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html)** to serialize.

4. Suggest specific test cases
Assign mulitple permissionsets, each to at least 10 accounts

5. Helpful Links to speed up research and evaluation
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_SSO.html
https://docs.aws.amazon.com/singlesignon/latest/userguide/permissionsetsconcept.html

6. Category
Security

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.