sso
avlcloudtechnologies/sso/aws
Terraform module to manage AWS Single Sign-On (SSO) resources.
AWS SSO Terraform module !GitHub tag (latest by date) This module handles creation of AWS SSO permission sets and assignment to AWS SSO entities and AWS Accounts. Pre-requisites Before this module can be used, please ensure that the following pre-requisites are met: - Enable AWS Organizations and add AWS Accounts you want to be managed by SSO. Documentation - Enable AWS SSO. Documentation. - Create AWS SSO entities (Users and Groups) Documentation or use identitystore module. - Ensure that Terraform is using a role with permissions required for AWS SSO management. Documentation. Usage More complex examples can be found in the examples directory. Simple use case: ``hcl module "sso" { source = "avlcloudtechnologies/sso/aws" permission_sets = { AdministratorAccess = { description = "Provides
| Name | Type | Description | Default |
|---|---|---|---|
| identitystore_user_data_source_depends_on | list(string) | List of parameters that identitystore user data sources depend on, for example n | [] |
| permission_sets | any | Map of maps containing Permission Set names as keys. See permission_sets descrip | {
"AdministratorAccess": {
"descri |
| account_assignments | list(object({ principal_na | List of maps containing mapping between user/group, permission set and assigned | [] |
| identitystore_group_data_source_depends_on | list(string) | List of parameters that identitystore group data sources depend on, for example | [] |
aws_ssoadmin_permission_sets — Maps of permission sets with attributes listed in Terraform resource aws_ssoadmin_permission_set docaws_ssoadmin_account_assignments — Maps of account assignments to permission sets with keys user/group_name.permission_set_name.account