Merge pull request #465 from dividehex/IAM-1356

IAM-1356: set up cloudservices in awsSaml rule
mozilla-iam · Jun 18, 2024 · 78db8b3 · 78db8b3
2 parents 5903b26 + 538d292
commit 78db8b3
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/rules/awsSaml.js b/rules/awsSaml.js
@@ -91,6 +91,16 @@ async function awsSaml(user, context, callback) {
         "mozilliansorg_mofo_aws_secure",
       ];
       break;
+    case "c0x6EoLdp55H2g2OXZTIUuaQ4v8U4xf9":
+      // CloudServices billing account params
+      paramObj.region = "us-west-2";
+      paramObj.IdentityStoreId = configuration.AWS_IDENTITYSTORE_ID_CLOUDSERVICES;
+      paramObj.accessKeyId = configuration.AWS_IDENTITYSTORE_ACCESS_ID_CLOUDSERVICES;
+      paramObj.secretAccessKey = configuration.AWS_IDENTITYSTORE_ACCESS_KEY_CLOUDSERVICES;
+      paramObj.awsGroups = [
+        "mozilliansorg_cloudservices_aws_admin"
+      ];
+      break;
     default:
       return callback(null, user, context); // Not an AWS login, continue auth pipeline
   }