Skip to content

Latest commit

 

History

History
19 lines (13 loc) · 964 Bytes

README.md

File metadata and controls

19 lines (13 loc) · 964 Bytes
Raw

Cross-infra CDK stacks

This project contains infrastructure setup that might be required by multiple applications and therefore cannot be placed in one of the application-specific stacks.

SSO Stack

This stack creates permissions sets and permission set assignments resources in IAM Identity Center (previously known as AWS SSO). Since permissions are app-dependant, for each app, a configuration class must be implemented (AppConfig) in order to:

  • provide the desired policies
  • provide the group display name in IAM Identity Center to which attach the policies
  • provide the target account IDs which the permission sets should be enabled for

Useful commands

  • cdk ls list all stacks in the app
  • cdk synth emits the synthesized CloudFormation template
  • cdk deploy deploy this stack to your default AWS account/region
  • cdk diff compare deployed stack with current state
  • cdk docs open CDK documentation