Skip to content

(docs): Provide instructions for migrating from OpenIdConnectProvider to OidcProviderNative #35878

@TrevorBurnham

Description

@TrevorBurnham

Describe the issue

The docs for OpenIdConnectProvider says:

For new functionality, developers should use OidcProviderNative instead…

I'd hoped to migrate my CDK application from OpenIdConnectProvider to OidcProviderNative, but trying to do so caused a deployment error:

EntityAlreadyExistsException: Provider with url [my OpenID Connect endpoint] already exists

The issue seems to be that both constructs try to create the same low-level construct, which prevents CloudFormation from replacing one high-level construct with the other.

It'd be nice to have a documented solution to that migration problem.

Links

https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_iam.OpenIdConnectProvider.html

Metadata

Metadata

Assignees

No one assigned

    Labels

    @aws-cdk/aws-iamRelated to AWS Identity and Access ManagementdocumentationThis is a problem with documentation.effort/smallSmall work item – less than a day of effortp2

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions