awslabs / ssosync

Populate AWS SSO directly with your G Suite users and groups using either a CLI or AWS Lambda
Apache License 2.0
512 stars 175 forks source link

DeletePolicy Protection for Secrets and Keys #182

Open ChrisPates opened 5 months ago

ChrisPates commented 5 months ago

Is your feature request related to a problem? Please describe. Currently the Secrets and Keys, created by the template for SSOSync have the default DeletionPolicy of Delete, but this risks loosing these secrets or access to the secrets when switch a deployment between one that contains secrets and one that does not.

Describe the solution you'd like

Describe alternatives you've considered Simply configuring DeletionPolicy to Retain or RetainExceptOnCreate would address this is you but then disrupt automated deployments as the retained resources would need to be cleaned up manual or manually import into a new stack.

Additional context Issue was highlighted by Leny1996 in issue #181