Describe the feature
OpenIdConnectProvider construct currently creates custom resource lambda and associated resources to create OIDC provider.
However, CloudFormation now supports it out of the box: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-oidcprovider.html
The construct can be significantly simplified by moving to use direct CloudFormation resource.
Use Case
Custom resource lambdas are more complex, harder to understand, and reduce visibility into what's being created. Using CloudFormation resource directly would reduce complexity.
Proposed Solution
Switch to AWS::IAM::OIDCProvider CloudFormation resource
Other Information
No response
Acknowledgements
CDK version used
2.32.1
Environment details (OS name and version, etc.)
Ubuntu 18
Describe the feature
OpenIdConnectProviderconstruct currently creates custom resource lambda and associated resources to create OIDC provider.However, CloudFormation now supports it out of the box: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-oidcprovider.html
The construct can be significantly simplified by moving to use direct CloudFormation resource.
Use Case
Custom resource lambdas are more complex, harder to understand, and reduce visibility into what's being created. Using CloudFormation resource directly would reduce complexity.
Proposed Solution
Switch to
AWS::IAM::OIDCProviderCloudFormation resourceOther Information
No response
Acknowledgements
CDK version used
2.32.1
Environment details (OS name and version, etc.)
Ubuntu 18