Skip to content

Commit

Permalink
Update template.yaml
Browse files Browse the repository at this point in the history
Reinstate Region parameter for continuity, postpone retirement until v3.x
  • Loading branch information
ChrisPates committed Oct 27, 2023
1 parent 69ca6df commit 6bce498
Showing 1 changed file with 11 additions and 6 deletions.
17 changes: 11 additions & 6 deletions template.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -5,10 +5,11 @@ Metadata:
AWS::CloudFormation::Interface:
ParameterGroups:
- Label:
default: AWS IAM Identity Center
default: AWS IAM Identity Center (Successor to AWS Single Sign-On)
Parameters:
- SCIMEndpointUrl
- SCIMEndpointAccessToken
- Region
- IdentityStoreID
- Label:
default: Google Workspace Credentials
Expand Down Expand Up @@ -91,18 +92,22 @@ Parameters:
NoEcho: true
SCIMEndpointUrl:
Type: String
Description: AWS SSO SCIM Endpoint Url
Description: AWS IAM Identity Center - SCIM Endpoint Url
NoEcho: true
AllowedPattern: "https://scim.(us(-gov)?|ap|ca|cn|eu|sa)-(central|(north|south)?(east|west)?)-([0-9]{1}).amazonaws.com/(.*)-([a-z0-9]{4})-([a-z0-9]{4})-([a-z0-9]{12})/scim/v2/"
SCIMEndpointAccessToken:
Type: String
Description: AWS SSO SCIM AccessToken
Description: AWS IAM Identity Center - SCIM AccessToken
NoEcho: true
Region:
Type: String
Description: AWS Region where AWS IAM Identity Center is enabled
AllowedPattern: '(us(-gov)?|ap|ca|cn|eu|sa)-(central|(north|south)?(east|west)?)-\d'
IdentityStoreID:
Type: String
Description: Identifier of Identity Store in AWS SSO
Description: Identifier of Identity Store in AWS IAM Identity Center
NoEcho: true
AllowedPattern: "d-[1-z0-9]{10}"
AllowedPattern: 'd-[1-z0-9]{10}'

GoogleUserMatch:
Type: String
Expand Down Expand Up @@ -235,7 +240,7 @@ Resources:
Type: "AWS::SecretsManager::Secret"
Properties:
Name: SSOSyncRegion
SecretString: !Select [1, !Split [".", !Ref SCIMEndpointUrl]]
SecretString: !Ref Region

AWSIdentityStoreIDSecret:
Type: "AWS::SecretsManager::Secret"
Expand Down

0 comments on commit 6bce498

Please sign in to comment.