Skip to content

Commit 51be045

Browse files
committed
feat: add certain sso resource to aws nuke exclusion
1 parent ce8ea4e commit 51be045

File tree

1 file changed

+10
-0
lines changed

1 file changed

+10
-0
lines changed

src/scripts/aws-nuke/index.ts

+10
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,16 @@ export async function awsNuke(props: DataLandingZoneProps, relativeDir: string,
2727
type: 'contains',
2828
value: 'aws-controltower',
2929
},
30+
31+
//Some AWS SSO and IAM Identity Center resources should nto be deleted, grouping them with the ControlTower filters
32+
{
33+
type: 'regex',
34+
value: 'AWSSSO_.*_DO_NOT_DELETE',
35+
},
36+
{
37+
type: 'glob',
38+
value: 'AWSReservedSSO_*',
39+
},
3040
];
3141
const cdkFilters = [
3242
{

0 commit comments

Comments
 (0)