Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 0 additions & 6 deletions airflow/providers/amazon/aws/auth_manager/cli/definition.py
Original file line number Diff line number Diff line change
Expand Up @@ -55,12 +55,6 @@
################

AWS_AUTH_MANAGER_COMMANDS = (
ActionCommand(
name="init-identity-center",
help="Initialize AWS IAM identity Center resources to be used by AWS manager",
func=lazy_load_command("airflow.providers.amazon.aws.auth_manager.cli.idc_commands.init_idc"),
args=(ARG_INSTANCE_NAME, ARG_APPLICATION_NAME, ARG_DRY_RUN, ARG_VERBOSE),
),
ActionCommand(
name="init-avp",
help="Initialize Amazon Verified resources to be used by AWS manager",
Expand Down
153 changes: 0 additions & 153 deletions airflow/providers/amazon/aws/auth_manager/cli/idc_commands.py

This file was deleted.

Original file line number Diff line number Diff line change
Expand Up @@ -27,51 +27,23 @@ Create resources
================

The AWS auth manager needs two resources in AWS IAM Identity Center: an instance and an application.
You can create them either through the provided CLI command or manually.
You can must create them manually.

Create resources with CLI
-------------------------

.. note::
The CLI command is not compatible with AWS accounts that are managed through AWS organizations.
If your AWS account is managed through an AWS organization, please follow the
:ref:`manual configuration <identity_center_manual_configuration>`.

.. note::
To create all necessary resources for the AWS Auth Manager, you can utilize the CLI command provided as part of the
AWS auth manager. Before executing the command, ensure the AWS auth manager is configured as the auth manager
for the Airflow instance. See :doc:`/auth-manager/setup/config`.

To create the resources, please run the following command:

.. code-block:: bash

airflow aws-auth-manager init-identity-center

The CLI command will ask you to create any resources manually if they cannot be automatically created. Please look carefully at the CLI command output to understand which resource(s)
have or have not been created successfully. The resource(s) which have not been successfully created need to be
:ref:`created manually <identity_center_manual_configuration>`.

If the error message below is raised, please create the AWS IAM Identity Center application through the console
following :ref:`these instructions <identity_center_manual_configuration_application>`: ::

Creation of SAML applications is only supported in AWS console today. Please create the application through the console.

.. _identity_center_manual_configuration:
Create the instance
-------------------

Create resources manually
-------------------------
The AWS auth manager leverages SAML 2.0 as the underlying technology powering authentication against AWS Identity Center.

Create the instance
~~~~~~~~~~~~~~~~~~~
There are several instance types, but only Organization level instances can use SAML 2.0 applications. See more details
about instances types `here <https://docs.aws.amazon.com/singlesignon/latest/userguide/identity-center-instances.html>`_.

Please follow `AWS documentation <https://docs.aws.amazon.com/singlesignon/latest/userguide/identity-center-instances.html>`_
to create the AWS IAM Identity Center instance.
Please follow `AWS documentation <https://docs.aws.amazon.com/singlesignon/latest/userguide/get-set-up-for-idc.html>`_
to create the AWS IAM Identity Center instance at the organization level.

.. _identity_center_manual_configuration_application:

Create the application
~~~~~~~~~~~~~~~~~~~~~~
----------------------

Please follow the instructions below to create the AWS IAM Identity Center application.

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -21,4 +21,4 @@

class TestAwsCliDefinition:
def test_aws_auth_manager_cli_commands(self):
assert len(AWS_AUTH_MANAGER_COMMANDS) == 3
assert len(AWS_AUTH_MANAGER_COMMANDS) == 2
140 changes: 0 additions & 140 deletions tests/providers/amazon/aws/auth_manager/cli/test_idc_commands.py

This file was deleted.