Skip to content

Commit

Permalink
Merge branch 'master' of github.e.it.census.gov:terraform/support
Browse files Browse the repository at this point in the history
  • Loading branch information
badra001 committed Feb 6, 2025
2 parents 5777ecf + 190c996 commit f0a002f
Showing 1 changed file with 49 additions and 0 deletions.
49 changes: 49 additions & 0 deletions docs/how-to/aws-sso/create-sso-group.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,49 @@
# AWS SSO: Creating SSO Groups

# About

# Creating SSO Group from existing System Common

# Details

* Below steps documented are for creating a new group called csvd-iac-poc in Lab.

* Every group uses a data resource to find the user id, so the user has to be in idc already
* Anyone in the below yml needs to be in users.csv (infrastructure/global/sso/users.csv)

* Network Account
* Choose the appropriate network account.
* in `infrastructure/global/sso/permissionsets/{TEMPLATE}`.
* Make new directory
* eg. `infrastructure/global/sso/permissionsets/sc-developer`
* mkdir csvd-iac-poc
* copy TEMPLATE/* {new_directory}
* cp TEMPLATE/* csvd-iac-poc
* cd to the new directory
* eg. cd csvd-iac-poc
## Initialize the environment
```script
tf-run init
tf-run apply
`````
```script
COMMAND rename GROUP csvd-iac-poc GROUP*
``````
* edit `new-directory*.tf and yml and put in the proper values`
* eg csvd-iac-poc-sc-developer.yml
* group: csvd-iac-poc-sc-developer
* description: "CSVD IAC POC SC Developer"
* all: false
* account_names:
- lab-dev-ew
* account_ids: []
* org_ous: []
* users: []
* csvd-iac-poc-sc-developer.group.tf
* locals- add the correct group
* rename module name

## Once changes are completed
* tf-plan
* tf-plan summary
* commit, push, and PR

0 comments on commit f0a002f

Please sign in to comment.