Hi does anyone have any tips how I can dynamically get the A

Question

Hi does anyone have any tips how I can dynamically get the AWS account ID and pass it to a function to use to generate a JSON snippet

damp-school-17708 · Answer

Inside a pulumi script or elsewhere In Typescript we do ```import as aws from pulumi aws const current = aws getCallerIdentity const accountId = current then current = gt current accountId ```

damp-school-17708 · Answer

in lambdas we do ``` import GetCallerIdentityCommand STSClient from aws sdk client sts const client = new STSClient region const Account accountId = await client send new GetCallerIdentityCommand ```

red-football-97286 · Answer

Sorry in pulumi I ve tried the top one but it returns a Promise lt string gt so when I pass it to the function and run pulumi up I get Promise Object instead of the account number

red-football-97286 · Answer

```const accountId Promise lt string gt Argument of type Promise lt string gt is not assignable to parameter of type string | number Type Promise lt string gt is not assignable to type number ts 2345 Okta Default Roles ts 18 34 Did you forget to use await ```

damp-school-17708 · Answer

oh yes we then use interpolation ```const sqsQueueUrl = interpolate` $ region ````

red-football-97286 · Answer

This is the separate function that account id is passed to ```export function setPolicyDocument accountId any string return ` Version 2012 10 17 Statement Effect Allow Principal Federated arn aws iam $ accountId saml provider sgn okta emea com Action sts AssumeRoleWithSAML Condition StringEquals SAML aud <https signin aws amazon com saml> ` ```

red-football-97286 · Answer

I m changing the `any` just trying to get it to work first

damp-school-17708 · Answer

yep we do something similar but use interpolate which resolves promises ``` accessPolicies pulumi interpolate` Statement Action es Effect Allow Principal AWS $ this cognito authenticatedRole arn Resource arn aws es $ region $ accountId domain link $ env Version 2012 10 17 ` ```

red-football-97286 · Answer

keep getting this error < damp school 17708> ```pulumi pulumi Stack Okta AWS Setup dev error Running program C SGN Patterns Okta AWS Setup application failed with an unhandled exception Error invocation of aws index getCallerIdentity getCallerIdentity returned an error could not validate provider configuration 1 error occurred Invalid or unknown key```

damp-school-17708 · Answer

We do have a section in our Pulumi configs ```config aws region us east 1``` Maybe is that

damp-school-17708 · Answer

I assume btw you use aws I have no idea on other cloud providers

red-football-97286 · Answer

I am using AWS Think i ve sorted it As per normal it was something simple I had double quotes inside my pulumi lt stack gt yaml file But the pulumi interpolate also helped slightly smiling face Thank you kindly for your help

little-cartoon-10569 · Answer

Aside there is the `aws iam PolicyDocument` class that creates the JSON for you You don t need to do anything special sometimes you can even avoid interpolation ```new aws iam Policy name policy Version 2012 10 17 Statement Effect Allow Principal AWS this cognito authenticatedRole arn Resource pulumi interpololate`arn aws es $ region $ accountId domain link $ env ` as aws iam PolicyDocument ```

red-football-97286 · Answer

That looks cleaner thank you < little cartoon 10569>

colossal-australia-65039 · Answer

i would remove the `as aws iam PolicyDocument` casting since it removes type safety in this scenario and is not necessary for it to compile

little-cartoon-10569 · Answer

Yes it was added to show where the class is in the code It s best not to have it