aws-samples / aws-samples/sample-developer-tutorials
059-amazon-datazone-gs: requires Identity Center + DataZone integration
Open
- Dominant language
- Shell
- Stars
- 175
- Forks
- 42
- PR merge metrics
- No merged PRs in 30d
Description
## Problem
CreateEnvironmentProfile requires the calling principal to be a DataZone project member via Identity Center. DataZone uses its own authorization model separate from IAM.
## Current state
- Script creates domain and projects successfully
- Fails at CreateEnvironmentProfile with AccessDeniedException
- `--managed` flag fix applied for blueprint listing
## Steps to resolve
1. Configure DataZone domain to use Identity Center for user management
2. Map an IC user as a DataZone project owner
3. Run the script as that IC user
4. Test end-to-end
5. Add back to the non-interactive PR
Contributor guide
Assessment
This issue has not been assessed yet.