Skip to content

iam: SamlConsolePrincipal does not work in China #22091

@ganhuang

Description

@ganhuang

Describe the bug

While creating the SAML federation principal as below, the SAML attribute is hardcoded with https://signin.aws.amazon.com/saml, which breaks in aws-cn partition since the SAML attribute should be changed to https://signin.amazonaws.cn/saml in AWS CN partition.

  const principal = new iam.SamlConsolePrincipal(provider);

Expected Behavior

The construct SamlConsolePrincipal should allow to customize the SAML attribute for this case. This could be an option to change it.

Current Behavior

Currently it's hardcoded and can't be customized while using the construct.

Reproduction Steps

  const principal = new iam.SamlConsolePrincipal(provider);

Possible Solution

No response

Additional Information/Context

No response

CDK CLI Version

2.39.0

Framework Version

No response

Node.js Version

v16.16.0

OS

Mac

Language

Typescript

Language Version

No response

Other information

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    @aws-cdk/aws-iamRelated to AWS Identity and Access ManagementbugThis issue is a bug.effort/smallSmall work item – less than a day of effortp1

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions