Merge pull request #467 from jbuck/IAM-1373

IAM-1373: Add autograph-admin and autograph-dev groups to cloudservices AWS rule
mozilla-iam · Jun 26, 2024 · b6f9247 · b6f9247
2 parents d2a73b7 + cabb17b
commit b6f9247
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/rules/awsSaml.js b/rules/awsSaml.js
@@ -98,7 +98,9 @@ async function awsSaml(user, context, callback) {
       paramObj.accessKeyId = configuration.AWS_IDENTITYSTORE_ACCESS_ID_CLOUDSERVICES;
       paramObj.secretAccessKey = configuration.AWS_IDENTITYSTORE_ACCESS_KEY_CLOUDSERVICES;
       paramObj.awsGroups = [
-        "mozilliansorg_cloudservices_aws_admin"
+        "mozilliansorg_cloudservices_aws_admin",
+        "mozilliansorg_cloudservices_aws_autograph_admin",
+        "mozilliansorg_cloudservices_aws_autograph_dev"
       ];
       break;
     default: