AWS IAM Roles Anywhere: ignore sync profile when listing profiles #60250
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
marcoandredinis
added
no-changelog
The AWS IAM Roles Anywhere integration syncs Profiles as Teleport AWS Apps. In order to use the API, Teleport uses a specific Profile which is configured as the Profile Syncer's Profile. This Profile is only meant to be used by Teleport for syncing profiles, and should not be available as an end-user Profile/Teleport AWS App. During the Sync set up, we show the user all the available profiles. This listing operation, wrongly, returns the Profile used for the Profile Syncer. We are showing a Profile that will not be available later on. This PR changes the listing to only show the profiles that will be synced, removing the Profile used in the Profile Syncer.
marcoandredinis
force-pushed
the
marco/awsra-access/ignore-syncprofile-listprofiles
branch
from
847c3ce to
388e1ce
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
The AWS IAM Roles Anywhere integration syncs Profiles as Teleport AWS Apps.
In order to use the API, Teleport uses a specific Profile which is configured as the Profile Syncer's Profile.
This Profile is only meant to be used by Teleport for syncing profiles, and should not be available as an end-user Profile/Teleport AWS App.
During the Sync set up, we show the user all the available profiles. This listing operation, wrongly, returns the Profile used for the Profile Syncer.
We are showing a Profile that will not be available later on.
This PR changes the listing to only show the profiles that will be synced, removing the Profile used in the Profile Syncer.
Before
After
