Class CpSSOSetup

CloudKitext SSO Pattern It is used for setting up SSO with Groups, Permissions and Account associations based on best practice recommendations. It will create the following PermissionSets

1. Administrator PermissionSet
2. ViewOnly PermissionSet
3. SourceCode PermissionSet
4. SecurityAudit PermissionSet

It will create the following Groups

1. Admin Group
2. Security Group
3. Developer Group
4. Network Group

It will perform the following assignments

1. Administrator group is assigned to all accounts
2. Security group is assigned to security accounts
3. Network group gets admin access to infrastructure account
4. Developer group get access to source code account

Default Alarms

Examples

Default Usage

new CpSSOSetup(this, "LogicalId", {
    cpNetworkAccountId: '1',
    cpDevLogArchiveAccountId: '2',
    cpProdLogArchiveAccountId: '3',
    cpSourceCodeAccountId: '4'
});
Copy

Custom Configuration

new CpSSOSetup(this, "LogicalId", {
    cpNetworkAccountId: '1',
    cpDevLogArchiveAccountId: '2',
    cpProdLogArchiveAccountId: '3',
    cpSourceCodeAccountId: '4',
    cpNetworkSessionDuration: 'PT3H'
});
Copy

Compliance

It addresses the following compliance requirements