QuickSight CSPM time-series Dashboard - User management through Keycloak SSO

[kdesao-devops]

Describe the issue Right now the user access to the Quicksight is manually configured on the UI. As for the rest we want it to be managed through our Keycloak.

Additional context

• I don't know the feasibility of this ticket (learning debt exists, factor into estimate)
• The usage of group might probably help
• We need to be careful between the writer and readers right
• Use AWS Cognito user pool with Keycloak as the identity provider

Definition of done

• AWS and KeyCloak configuration done in Terraform where feasible (IaC first)
• The users that can access Quicksight are configured in Keycloak
• WIth distinction between reader and writers right and admin

[kdesao-devops]

I'm closing this ticket even though the definition of Done has not been matched. The proof of concept and the technical architecture has been created and confirmed. The reason is that we encounter some technical difficulties that makes us create a ticket for the implentation in IaC The link of the ticket