{"repo":"fivexl/terraform-aws-sso-elevator","free":true,"listed":false,"github":"https://github.com/fivexl/terraform-aws-sso-elevator","clone":"git clone https://github.com/fivexl/terraform-aws-sso-elevator.git","description":"Slack bot to temporary assign AWS SSO Permission set to a user","language":"Python","stars":63,"topics":["aws","aws-lambda","sso","terraform","terraform-module","python","slack","iam-identity-center","just-in-time-access","security"],"license":"Apache-2.0","category":"auth-billing-email","readme_excerpt":"Want practical AWS infrastructure insights? 👉 Subscribe to our newsletter to get: - Real stories from real AWS projects - No-nonsense DevOps tactics - Cost, security & compliance patterns that actually work - Expert guidance from engineers in the field ========================================================================= Terraform module for implementing temporary elevated access via AWS IAM Identity Center (Successor to AWS Single Sign-On) and Slack - Terraform module for implementing temporary elevated access via AWS IAM Identity Center (Successor to AWS Single Sign-On) and Slack - Introduction - Functionality - Group Assignments Mode - Attribute-Based Group Sync - Important Considerations and Assumptions - Module configuration, and features - Configuration structure - Explicit Deny - Automatic Approval - Aggregation of Rules - Single Approver - Diagram of processing a request: - Secondary Subdomain Fallback Feature: - Sending direct messages to users feature - API gateway feature - Deployment and Usage - SSO Delegation - Build Process - Terraform deployment example - Slack App creation - Terraform docs - Requirements - Providers - Modules - Resources - Inputs - Outputs - More info - Development - Post review Introduction Currently, AWS IAM Identity Center does not support the temporary assignment of permission sets to users. As a result, teams using AWS IAM Identity Center are forced to either create highly restricted permission sets or rely on AWS IAM role chaining. ","default_branch":null,"files":null,"tree":[],"storefront":"/r/fivexl","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/fivexl/terraform-aws-sso-elevator/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}