aws / aws/aws-cdk

(aws-sso): Context Provider for SSO Instances.

Open
#26,477 2 comments 2 reactions 0 assignees View on GitHub
@aws-cdk/aws-sso effort/medium feature-request p2
Dominant language
TypeScript
Stars
12.9k
Forks
4.6k
Avg merge
2d 3h
Merged PRs (30d)
83

Description

### Describe the feature

A context provider that will return the id of the identity source for SSO.

### Use Case

An Identity Center Group, requires the Id of the identity Store to create a Group.

```
const group = new aws_identitystore.CfnGroup(this, 'Resource', {
identityStoreId: props.identityStoreId,
description: props.description,
displayName: props.name,
});
```

Currently this can be provided, manually by providing a value in cdk.json, or a slightly anti-pattern custom resource lookup.

Groups are at the heart of creating policy for Verified Permissions and Verified Access.

### Proposed Solution

Implement a IdentityCenterStore Id Context Procider Plugin.. The can follow the pattern of other providers, such as [hosted-zones](https://github.com/aws/aws-cdk/blob/eea223b52f4445e6084b1fa1fa15a3a78f83fa18/packages/aws-cdk/lib/context-providers/hosted-zones.ts)

### Other Information

- A custom resource can be used to get the value, but this has the possiblity of non determinism if the value changed, so is anti-pattern.

- The value can be provided manually in cdk.context.

### Acknowledgements

- [X] I may be able to implement this feature request
- [ ] This feature might incur a breaking change

### CDK version used

2.85.0

### Environment details (OS name and version, etc.)

any

Contributor guide

Open the contributing guide

Research direction

Start by reading packages/aws-cdk/lib/context-providers/hosted-zones.ts to understand the existing context-provider pattern, then trace how a provider for an Identity Center identity store would be registered and queried. Done means the provider returns the identity store ID needed by an Identity Center Group without requiring a manual cdk.context value or custom resource.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, typescript
Domain
cloud, tooling
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.