aws-samples / aws-cudos-framework-deployment

Command Line Interface tool for Cloud Intelligence Dashboards deployment
https://catalog.workshops.aws/awscid
MIT No Attribution
399 stars 158 forks source link

cid-cmd unable to get QuickSight groups provisioned from IdentityCenter #724

Closed dnmll closed 8 months ago

dnmll commented 8 months ago

(CID) CLI 0.2.42 Beta

QuickSight first experience integration with AWS Identity Center. While deploying Cost Anomaly Dashboard via cid-cmd encounter issue that prevents dashboard deployment.

cid-cmd deploy -vv --dashboard-id aws-cost-anomalies --athena-database optimization_data CLOUD INTELLIGENCE DASHBOARDS (CID) CLI 0.2.42 Beta

Loading plugins... Core loaded

Logging level set to: DEBUG Checking AWS environment...

Discovering deployed dashboards... [####################################] 100% "Trusted Advisor Organizational View" (ta-organiza

Required datasets:

Looking by DataSetId defined in template...complete

There are still 1 datasets missing: ca_summary_view Creating dataset: ca_summary_view

? [athena-workgroup] Select Amazon Athena workgroup to use: CID Detected views: cost_anomalies

? [quicksight-owner-choice] You have not provided quicksight-user or quicksight-group. Do you what your objects to be owned by a user or a group? : select group

? [quicksight-group] Please select QuickSight Group to use: None (None, None) CRITICAL - Cannot get QuickSight group.

dnmll commented 8 months ago

While researching this issue I found that this bug did not have anything to do with QuickSight provisioned groups from IdentityCenter. The issue is caused by the "select_groups" definition incorrectly referencing a user variable that was not in scope and should have been the group variable.

dnmll commented 8 months ago

Issue resolved with the release of 0.2.44