├── .github └── workflows │ ├── .env │ ├── README.md │ ├── checkov-source.yaml │ ├── remote_terraform.yaml │ ├── terraform-apply-source.yaml │ ├── terraform-plan-source.yaml │ ├── terraform-workflow-source.yaml │ └── terraform.yaml ├── .gitignore ├── .gitlab ├── .gitlab-ci.yml ├── .pre-commit-config.yaml ├── Dockerfile ├── README.md ├── Terraform.gitlab-ci.yml └── gitlab_workflow.png ├── CODE_OF_CONDUCT.md ├── CONTRIBUTING.md ├── LICENSE ├── README.md ├── docs ├── buildspec.yaml ├── recommended_scps.json └── required_org_permissions.json ├── requirements-dev.txt ├── requirements.txt └── terraform ├── backend.tf ├── bootstrap ├── create_assignment_import_manifest.py ├── create_permission_sets_import_manifest.py ├── group_assignments_by_permission_set.py └── migrate_assignments_to_delegated_admin_model.py ├── data.tf ├── iam_identitycenter_validation_test.py ├── locals.tf ├── providers.tf ├── resolve_permission_sets_and_assignments.py ├── resolve_permission_sets_and_assignments_test.py ├── source ├── JSON_Structure.md ├── assignments │ └── templates │ │ └── EXAMPLEAWSSecurityAuditors-assignments.yaml.example └── permission_sets │ └── templates │ └── EXAMPLEViewOnlyAccess.json.example ├── terraform.tfvars ├── validation ├── __init__.py ├── iam_identitycenter_validation.py └── validate_policies.py └── variables.tf /.github/workflows/.env: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/.github/workflows/.env -------------------------------------------------------------------------------- /.github/workflows/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/.github/workflows/README.md -------------------------------------------------------------------------------- /.github/workflows/checkov-source.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/.github/workflows/checkov-source.yaml -------------------------------------------------------------------------------- /.github/workflows/remote_terraform.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/.github/workflows/remote_terraform.yaml -------------------------------------------------------------------------------- /.github/workflows/terraform-apply-source.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/.github/workflows/terraform-apply-source.yaml -------------------------------------------------------------------------------- /.github/workflows/terraform-plan-source.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/.github/workflows/terraform-plan-source.yaml -------------------------------------------------------------------------------- /.github/workflows/terraform-workflow-source.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/.github/workflows/terraform-workflow-source.yaml -------------------------------------------------------------------------------- /.github/workflows/terraform.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/.github/workflows/terraform.yaml -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/.gitignore -------------------------------------------------------------------------------- /.gitlab/.gitlab-ci.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/.gitlab/.gitlab-ci.yml -------------------------------------------------------------------------------- /.gitlab/.pre-commit-config.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/.gitlab/.pre-commit-config.yaml -------------------------------------------------------------------------------- /.gitlab/Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/.gitlab/Dockerfile -------------------------------------------------------------------------------- /.gitlab/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/.gitlab/README.md -------------------------------------------------------------------------------- /.gitlab/Terraform.gitlab-ci.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/.gitlab/Terraform.gitlab-ci.yml -------------------------------------------------------------------------------- /.gitlab/gitlab_workflow.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/.gitlab/gitlab_workflow.png -------------------------------------------------------------------------------- /CODE_OF_CONDUCT.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/CODE_OF_CONDUCT.md -------------------------------------------------------------------------------- /CONTRIBUTING.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/CONTRIBUTING.md -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/README.md -------------------------------------------------------------------------------- /docs/buildspec.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/docs/buildspec.yaml -------------------------------------------------------------------------------- /docs/recommended_scps.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/docs/recommended_scps.json -------------------------------------------------------------------------------- /docs/required_org_permissions.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/docs/required_org_permissions.json -------------------------------------------------------------------------------- /requirements-dev.txt: -------------------------------------------------------------------------------- 1 | pyfakefs 2 | -------------------------------------------------------------------------------- /requirements.txt: -------------------------------------------------------------------------------- 1 | botocore 2 | boto3 3 | PyYAML 4 | -------------------------------------------------------------------------------- /terraform/backend.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/terraform/backend.tf -------------------------------------------------------------------------------- /terraform/bootstrap/create_assignment_import_manifest.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/terraform/bootstrap/create_assignment_import_manifest.py -------------------------------------------------------------------------------- /terraform/bootstrap/create_permission_sets_import_manifest.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/terraform/bootstrap/create_permission_sets_import_manifest.py -------------------------------------------------------------------------------- /terraform/bootstrap/group_assignments_by_permission_set.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/terraform/bootstrap/group_assignments_by_permission_set.py -------------------------------------------------------------------------------- /terraform/bootstrap/migrate_assignments_to_delegated_admin_model.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/terraform/bootstrap/migrate_assignments_to_delegated_admin_model.py -------------------------------------------------------------------------------- /terraform/data.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/terraform/data.tf -------------------------------------------------------------------------------- /terraform/iam_identitycenter_validation_test.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/terraform/iam_identitycenter_validation_test.py -------------------------------------------------------------------------------- /terraform/locals.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/terraform/locals.tf -------------------------------------------------------------------------------- /terraform/providers.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/terraform/providers.tf -------------------------------------------------------------------------------- /terraform/resolve_permission_sets_and_assignments.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/terraform/resolve_permission_sets_and_assignments.py -------------------------------------------------------------------------------- /terraform/resolve_permission_sets_and_assignments_test.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/terraform/resolve_permission_sets_and_assignments_test.py -------------------------------------------------------------------------------- /terraform/source/JSON_Structure.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/terraform/source/JSON_Structure.md -------------------------------------------------------------------------------- /terraform/source/assignments/templates/EXAMPLEAWSSecurityAuditors-assignments.yaml.example: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/terraform/source/assignments/templates/EXAMPLEAWSSecurityAuditors-assignments.yaml.example -------------------------------------------------------------------------------- /terraform/source/permission_sets/templates/EXAMPLEViewOnlyAccess.json.example: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/terraform/source/permission_sets/templates/EXAMPLEViewOnlyAccess.json.example -------------------------------------------------------------------------------- /terraform/terraform.tfvars: -------------------------------------------------------------------------------- 1 | region = "us-east-2" # "YOUR_REGION_HERE" -------------------------------------------------------------------------------- /terraform/validation/__init__.py: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /terraform/validation/iam_identitycenter_validation.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/terraform/validation/iam_identitycenter_validation.py -------------------------------------------------------------------------------- /terraform/validation/validate_policies.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/terraform/validation/validate_policies.py -------------------------------------------------------------------------------- /terraform/variables.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/single-stage-aws-iam-identity-center-pipeline/HEAD/terraform/variables.tf --------------------------------------------------------------------------------