Add mozillansorg_sumo-{admins, devs}

See also: * https://mozilla-hub.atlassian.net/browse/IAM-1474 * mozilla-iam/sso-dashboard-configuration#850 Jira: OPS-1460
mozilla-iam · Nov 8, 2024 · b935930 · b935930
1 parent b020d39
commit b935930
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/tf/actions/awsSaml.js b/tf/actions/awsSaml.js
@@ -20,6 +20,7 @@ exports.onExecutePostLogin = async (event, api) => {
       paramObj.accessKeyId = event.secrets.AWS_IDENTITYSTORE_ACCESS_ID_IT;
       paramObj.secretAccessKey = event.secrets.AWS_IDENTITYSTORE_ACCESS_KEY_IT;
       paramObj.awsGroups = [
+        // TODO(bhee): delete as a part of https://mozilla-hub.atlassian.net/browse/IAM-1474
         "aws_095732026120_poweruser",
         "aws_104923852476_admin",
         "aws_320464205386_admin",
@@ -43,6 +44,8 @@ exports.onExecutePostLogin = async (event, api) => {
         "mozilliansorg_searchfox-aws",
         "mozilliansorg_secops-aws-admins",
         "mozilliansorg_sre",
+        "mozilliansorg_sumo-admins",
+        "mozilliansorg_sumo-devs",
         "mozilliansorg_voice_aws_admin_access",
         "mozilliansorg_web-sre-aws-access",
         "team_mdn",

diff --git a/tf/tests/awsSaml.test.js b/tf/tests/awsSaml.test.js
@@ -107,6 +107,8 @@ const clientGroupMaps = [
       "mozilliansorg_searchfox-aws",
       "mozilliansorg_secops-aws-admins",
       "mozilliansorg_sre",
+      "mozilliansorg_sumo-admins",
+      "mozilliansorg_sumo-devs",
       "mozilliansorg_voice_aws_admin_access",
       "mozilliansorg_web-sre-aws-access",
       "team_mdn",