When will AWS SSO resource be supported?

[Leectan]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

New or Affected Resource(s)

• aws_XXXXX

Potential Terraform Configuration

Terraform supports for AWS SSO resource

References

• #0000

[gdavison]

Hi @Leectan. Could you provide some more detail on what resources you'd like to see from Terraform support for AWS Single Sign-On, please?

Enabling and configuring AWS SSO requires manual steps in the AWS Console and the API operations in the AWS SDK seem to be related to authenticating with AWS SSO

[Leectan]

@gdavison Being able to assisgn users and permissions and possibly map the APIs that are provided by AWS. The intend is to fully deploy it using Terraform and not manually.

[gdavison]

Hi @Leectan. Unfortunately, the AWS API does not expose those operations, so the Terraform AWS provider is not able to configure AWS SSO. It needs to be done using the SSO Portal.

However, nearly everything else can be done using Terraform, either with the AWS provider or others. For example, the AWS provider can configure AWS Organizations and Directory Services. Terraform can also configure identity providers such as Active Directory (in preview), Azure AD, and Okta.

You might also be able to suggest to AWS that they add API access by opening a support request with AWS.

I'm going to close this issue. If there are more developments around this service, please open another issue.

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thanks!