[IT-4529] Remove bmgfki account (#1444)

Remove access to BMGF-Ki account and removing the account
as well.

depends on #1443

Author: zaro0508

org-formation/650-identity-providers/_tasks.yaml

@@ -572,7 +572,6 @@ GithubOidcSciPoolProdSageBionetworksSynapseLoginAwsInfra:
   DefaultOrganizationBinding:
     Account:
       - !Ref ScipoolProdAccount
-      - !Ref BmgfkiAccount
     Region: us-east-1
 
 GithubOidcSciPoolDevSageBionetworksSynapseLoginAwsInfra:

org-formation/700-aws-sso/_tasks.yaml

@@ -153,14 +153,6 @@ Parameters:
     Type: String
     Default: 'f4d84498-c0e1-70e7-215b-49089082ecaa'
 
-  bmgfkiAdminGroup:      #JC aws-bmgfki-admins
-    Type: String
-    Default: '906769aa66-dfc5248b-3d5d-44ce-81ae-6759ee284e59'
-
-  bmgfkiCommunityManagerGroup:  #JC aws-bmgfki-community-managers
-    Type: String
-    Default: '906769aa66-0a6a0177-d4cf-47e4-a5bc-4ba5297995ff'
-
   cnbAdminGroup:      #JC aws-cnb-admins
     Type: String
     Default: '906769aa66-911ad81b-8331-4670-a8eb-d53c63d6a0e1'
@@ -1503,41 +1495,6 @@ SsoHtanDevDeveloper:
     principalId: !Ref htanDevDeveloperGroup
     permissionSetArn: !CopyValue [ !Sub '${resourcePrefix}-${appName}-developer-permission-set-arn' ]
 
-
-SsoBmgfkiAdmin:
-  Type: update-stacks
-  DependsOn: SsoAdministrator
-  Template: https://raw.githubusercontent.com/Sage-Bionetworks/aws-infra/v0.3.8/templates/SSO/aws-sso.yaml
-  StackName: !Sub '${resourcePrefix}-${appName}-bmgf-admin'
-  StackDescription: 'SSO: admin role used by BMGF KI admin group'
-  DefaultOrganizationBindingRegion: !Ref primaryRegion
-  DefaultOrganizationBinding:
-    IncludeMasterAccount: true
-  OrganizationBindings:
-    TargetBinding:
-      Account: !Ref BmgfkiAccount
-  Parameters:
-    instanceArn: !Ref instanceArn
-    principalId: !Ref bmgfkiAdminGroup
-    permissionSetArn: !CopyValue [ !Sub '${resourcePrefix}-${appName}-admin-permission-set-arn' ]
-
-SsoBmgfkiCommunityManager:
-  Type: update-stacks
-  DependsOn: [ SsoScipoolDevCommunityManager ]
-  Template: https://raw.githubusercontent.com/Sage-Bionetworks/aws-infra/v0.3.8/templates/SSO/aws-sso.yaml
-  StackName: !Sub '${resourcePrefix}-${appName}-bmgfki-community-manager'
-  StackDescription: 'SSO: community manager role used by BMGF KI community manager group'
-  DefaultOrganizationBindingRegion: !Ref primaryRegion
-  DefaultOrganizationBinding:
-    IncludeMasterAccount: true
-  OrganizationBindings:
-    TargetBinding:
-      Account: !Ref BmgfkiAccount
-  Parameters:
-    instanceArn: !Ref instanceArn
-    principalId: !Ref bmgfkiCommunityManagerGroup
-    permissionSetArn: !CopyValue [ !Sub '${resourcePrefix}-${appName}-scipooldev-community-manager-permission-set-arn' ]
-
 SsoCnbAdmin:
   Type: update-stacks
   DependsOn: SsoAdministrator

org-formation/organization.yaml

@@ -106,7 +106,6 @@ Organization:
       ServiceControlPolicies:
         - !Ref RestrictDnsRegistrationSCP
       Accounts:
-        - !Ref BmgfkiAccount
         - !Ref ScipoolDevAccount
         - !Ref ScipoolProdAccount
 
@@ -286,17 +285,6 @@ Organization:
       Tags:
         <<: !Include ./_default_org_tags.yaml
 
-  BmgfkiAccount:
-    Type: OC::ORG::Account
-    Properties:
-      AccountName: org-sagebase-bmgfki
-      AccountId: '464102568320'
-      RootEmail: aws.bmgfki@sagebase.org
-      Alias: org-sagebase-bmgfki
-      Tags:
-        <<: !Include ./_default_org_tags.yaml
-        CostCenter: 'BMGF-Ki / 30144'
-
   ScicompAccount:
     Type: OC::ORG::Account
     Properties: