Permission set create/update behaviour bug with empty relayState / sessionDuration

aws-samples / aws-iam-identity-center-extensions

This solution is intended for enterprises that need a streamlined way of managing user access to their AWS accounts. Using this solution, your identity and access management teams can extend AWS SSO functionality by automating common access management and governance use cases

MIT License

65 stars 24 forks source link

Permission set create/update behaviour bug with empty relayState / sessionDuration #82

Closed leelalagudu closed 2 years ago

leelalagudu commented 2 years ago

The solution's current create/update operation of a permission set for an empty relayState/SessionDuration is incorrect , and needs to be fixed

leelalagudu commented 2 years ago

@jjleigh , fya

tamara-h commented 2 years ago

Inquiry: with the current issue, if you try to to provision the faulty pS and then creates another non-faulty one, what is the current execution?

jjleigh commented 2 years ago

The issue with the 'undefined' relay state is also an issue on version 3.14 just wanted to note that here.

leelalagudu commented 2 years ago

@jjleigh , with #89 , in case of an

empty permission set description, the solution would use permission set name for this value
empty session duration, the solution would not set anything. However, the SSO API would set this to a default of 60 minutes in case of an empty value
empty relay state, the solution would not set anything for this