Skip to content

Latest commit

 

History

History
47 lines (34 loc) · 1.92 KB

README.md

File metadata and controls

47 lines (34 loc) · 1.92 KB
Raw

AWS IAM Identity Center (successor to AWS SSO) GroupSync Filter Automation

iaac sprache coto

Description

This solution establishes a Lambda function to oversee Ad-Group Sync Filters within the AWS IAM Identity Center (the successor to AWS SSO). Using LDAPs as the source, it synchronises designated groups with your AWS IAM Identity Center. The Lambda works autonomously, automatically generating documentation and sending notifications to Microsoft Teams.

Architecture

Architecture

Example Notification

Message

Example Documentation

Documentation


Author's
David Krohn
Linkedin - Blog
Marcell Jobs
Linkedin

Prerequisites

Configuration

Configuration Parameters of this solution are store in value files. You can find an example in: 'values/sandbox'. To securly store Passwort and Username for LDAPs login credentials we are using (cdk-sops)[https://github.com/dbsystel/cdk-sops-secrets]. Please ensure to encrypt your SecretFile and adjust the values before deploying.

Deployment

  1. Open shell
  2. Adjust parameters in value files
  3. Add your KMS key to sops.yaml
  4. Encrypt SecretFile via sops -e <filename>
  5. execute command: assume <accountname>
  6. execute command: cdk deploy <stackname>