aws-samples / aws-samples/sample-developer-tutorials

059-amazon-datazone-gs: requires Identity Center + DataZone integration

Open
#76 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Shell
Stars
175
Forks
42
PR merge metrics
No merged PRs in 30d

Description

## Problem
CreateEnvironmentProfile requires the calling principal to be a DataZone project member via Identity Center. DataZone uses its own authorization model separate from IAM.

## Current state
- Script creates domain and projects successfully
- Fails at CreateEnvironmentProfile with AccessDeniedException
- `--managed` flag fix applied for blueprint listing

## Steps to resolve
1. Configure DataZone domain to use Identity Center for user management
2. Map an IC user as a DataZone project owner
3. Run the script as that IC user
4. Test end-to-end
5. Add back to the non-interactive PR

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.