This message was deleted.

sparse-intern-71089

11/16/2021, 2:39 AM

This message was deleted.

little-cartoon-10569

11/16/2021, 2:39 AM

I need to manage these myself using the AWS SDK?

little-cartoon-10569

11/16/2021, 2:40 AM

Or is it normal to get these from your IdP somehow?

little-cartoon-10569

11/16/2021, 2:59 AM

Found it, not particularly intuitive...

aws.identitystore.getGroup()

🎉 1

freezing-van-87649

11/16/2021, 3:20 AM

Yep, that one took me a while to figure out

rapid-raincoat-36492

11/16/2021, 3:41 AM

Of note, this is a limitation of AWS's SDK, there's just no way to manage those AWS identitystore principals without using an external idp, like Okta

little-cartoon-10569

11/16/2021, 4:09 AM

Not even the AWS-provided SSO identity store? Not that I want to, it's Okta here, but I thought you could do it natively...

rapid-raincoat-36492

11/16/2021, 2:37 PM

Unfortunately not: https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/welcome.html The only supported actions are

Describe...

and

List...

I'm not on Okta quite yet, so I'm managing in the AWS Console by hand 🙃

little-cartoon-10569

11/16/2021, 8:58 PM

I wouldn't expect it to work via the identitystore module. For AWS' identity store, the module would be whatever provides the default AWS SSO identities. directoryservice maybe? Or maybe even IAM, if that's what backs the identitystore (though I don't think it is).

little-cartoon-10569

11/16/2021, 8:59 PM

Woeful documentation on AWS in this area. I can't see any way of managing users and groups in the default identity store except via the console...

Open in Slack

Previous Next

Pulumi Community

No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.