@@ -166,6 +166,30 @@ GithubOidcSageBionetworksSynapseDockerRegistry:
166166 - !Ref SynapseProdAccount
167167 Region : us-east-1
168168
169+ GithubOidcSageBionetworksSynapse :
170+ Type : update-stacks
171+ DependsOn : GithubOidcSageBionetworks
172+ Template : https://raw.githubusercontent.com/Sage-Bionetworks/aws-infra/v0.7.6/templates/IAM/github-oidc-provider.j2
173+ StackName : !Sub ${resourcePrefix}-${appName}-sage-bionetworks-synapse
174+ Parameters :
175+ ProviderArn : !CopyValue [ !Sub '${resourcePrefix}-${appName}-ProviderArn' ]
176+ ProviderRoleName : !Sub ${resourcePrefix}-${appName}-sage-bionetworks-synapse
177+ ManagedPolicyArns :
178+ - " arn:aws:iam::aws:policy/AdministratorAccess"
179+ - " arn:aws:iam::aws:policy/AWSKeyManagementServicePowerUser"
180+ TemplatingContext :
181+ GitHubOrg : " Sage-Bionetworks"
182+ Repositories :
183+ - name : " synapse-docker-registry"
184+ branches : ["*"]
185+ - name : " nbconvert-webapp"
186+ branches : ["master", "develop"]
187+ DefaultOrganizationBinding :
188+ Account :
189+ - !Ref SynapseDevAccount
190+ - !Ref SynapseProdAccount
191+ Region : us-east-1
192+
169193GithubOidcSageBionetworksGenieBPCInfra :
170194 Type : update-stacks
171195 DependsOn : GithubOidcSageBionetworks
@@ -872,29 +896,6 @@ GithubOidcOpenChallengesDeploy:
872896 - !Ref OpenChallengesProdAccount
873897 Region : us-east-1
874898
875- GithubOidcNbConvertDeploy :
876- Type : update-stacks
877- DependsOn : GithubOidcSageBionetworks
878- Template : https://raw.githubusercontent.com/Sage-Bionetworks/aws-infra/v0.7.6/templates/IAM/github-oidc-provider.j2
879- StackName : !Sub ${resourcePrefix}-${appName}-nbconvert-deploy
880- Parameters :
881- ProviderArn : !CopyValue [ !Sub '${resourcePrefix}-${appName}-ProviderArn' ]
882- ProviderRoleName : !Sub ${resourcePrefix}-${appName}-nbconvert-deploy
883- MaxSessionDuration : 7200
884- ManagedPolicyArns :
885- - " arn:aws:iam::aws:policy/AdministratorAccess"
886- - " arn:aws:iam::aws:policy/AWSKeyManagementServicePowerUser"
887- TemplatingContext :
888- GitHubOrg : " Sage-Bionetworks"
889- Repositories :
890- - name : " nbconvert-webapp"
891- branches : ["master", "develop"]
892- DefaultOrganizationBinding :
893- Account :
894- - !Ref SynapseDevAccount
895- - !Ref SynapseProdAccount
896- Region : us-east-1
897-
898899# ############################## Managed Policies ###############################
899900# Managed policies used in github OIDC providers
900901# Note: Managed policies can be used as work around for the AWS cloudformation
0 commit comments