diff --git a/org-formation/650-identity-providers/_tasks.yaml b/org-formation/650-identity-providers/_tasks.yaml index 0194e653..d7affac4 100644 --- a/org-formation/650-identity-providers/_tasks.yaml +++ b/org-formation/650-identity-providers/_tasks.yaml @@ -122,6 +122,28 @@ GithubOidcSageBionetworksSchematicInfra: - !Ref DCAProdAccount Region: us-east-1 +GithubOidcSageBionetworksItSchematicInfraV2: + Type: update-stacks + DependsOn: GithubOidcSageBionetworks + Template: https://raw.githubusercontent.com/Sage-Bionetworks/aws-infra/v0.7.6/templates/IAM/github-oidc-provider.j2 + StackName: !Sub ${resourcePrefix}-${appName}-sage-bionetworks-it-schematic-infra-v2 + Parameters: + ProviderArn: !CopyValue [ !Sub '${resourcePrefix}-${appName}-ProviderArn' ] + ProviderRoleName: !Sub ${resourcePrefix}-${appName}-sage-bionetworks-it-schematic-infra-v2 + ManagedPolicyArns: + - "arn:aws:iam::aws:policy/AdministratorAccess" + - "arn:aws:iam::aws:policy/AWSKeyManagementServicePowerUser" + TemplatingContext: + GitHubOrg: "Sage-Bionetworks-IT" + Repositories: + - name: "schematic-infra-v2" + branches: ["dev", "stage", "prod"] + DefaultOrganizationBinding: + Account: + - !Ref DnTDevAccount + - !Ref DCAProdAccount + Region: us-east-1 + GithubOidcSageBionetworksSynapseDockerRegistry: Type: update-stacks DependsOn: GithubOidcSageBionetworks