Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adds FriendlyName support for IC resources #50127

Open
wants to merge 3 commits into
base: master
Choose a base branch
from

Conversation

tcsc
Copy link
Contributor

@tcsc tcsc commented Dec 12, 2024

The IC Account and AccountAssignment resources do not have very user-friendly
ids, making it hard to know what access is actually being granted when reviewing
an access request. And they are about to get even less friendly as we replace the
account name with a numeric ID.

This patch adds support for generating a friendly resource name when reviewing
an access request with IC resources.

Before:

before

After

after

@tcsc tcsc added no-changelog Indicates that a PR does not require a changelog entry backport/branch/v17 aws-iam-identity-center labels Dec 12, 2024
Comment on lines 64 to 65
resourceID.Kind = types.KindApp
resourceIDs = append(resourceIDs, resourceID)
Copy link
Contributor

@smallinsky smallinsky Dec 12, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Does the GetResourceDetails->GetResourcesByResourceIDs->GetResourcesByKind->mapResourceKindToListResourcesType is not better place to overwrite the kind ?

@flyinghermit
Copy link
Contributor

Where do we set friendly name? For naming consistency, can we add double quote on the account and permission set name. So that Permset on Account becomes "Permset" on "Account". Because that is the format UI uses during enrollment, as well as in the access request cart.

@tcsc
Copy link
Contributor Author

tcsc commented Dec 16, 2024

@flyinghermit

can we add double quote on the account and permission set name

See gravitational/teleport.e#5693

@tcsc tcsc force-pushed the tcsc/idc-friendlynames branch from 0350b7c to f9f3273 Compare December 18, 2024 13:07
@tcsc tcsc requested a review from smallinsky December 18, 2024 13:12
The IC Account and AccountAssignment resources do not have very user-friendly
ids, making it hard to know what access is actually being granted when reviewing
an access request.

This patch adds support for
 - querying Identity Center accounts via `auth.ListResources`
 - generating a friendly resource name when reviewing an access request
   with IC resources.
@tcsc tcsc force-pushed the tcsc/idc-friendlynames branch from f9f3273 to fb656bd Compare December 18, 2024 21:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
aws-iam-identity-center backport/branch/v17 no-changelog Indicates that a PR does not require a changelog entry size/sm
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants