IAM Identity Store

3 resource kinds. Generated from the operator's CRD schemas.

API Group: aws.konfig.io/v1alpha1

IdentityStoreGroup # CLOUD CONTROL · AWS::IdentityStore::Group

IdentityStoreGroup manages AWS::IdentityStore::Group through the AWS Cloud Control API.

kubectl get identitystoregroups · example on GitHub

Example

# IdentityStoreGroup — IAM Identity Store
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/identitystore.html#identitystoregroup
apiVersion: aws.konfig.io/v1alpha1
kind: IdentityStoreGroup
metadata:
  name: example-identitystoregroup
  namespace: default
spec:
  description: Managed by konfig-konector
  displayName: example-identitystoregroup
  identityStoreId: example-id
  providerRef:
    name: example-identitystoregroup
    region: us-east-1

Spec

Field	Type	Required	Description
`description`	string	—	A string containing the description of the group.
`displayName`	string	yes	A string containing the name of the group.
`identityStoreId`	string	yes	The globally unique identifier for the identity store.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`groupId`	string	—	The unique identifier for a group in the identity store.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

IdentityStoreGroupMembership # CLOUD CONTROL · AWS::IdentityStore::GroupMembership

IdentityStoreGroupMembership manages AWS::IdentityStore::GroupMembership through the AWS Cloud Control API.

kubectl get identitystoregroupmemberships · example on GitHub

Example

# IdentityStoreGroupMembership — IAM Identity Store
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/identitystore.html#identitystoregroupmembership
apiVersion: aws.konfig.io/v1alpha1
kind: IdentityStoreGroupMembership
metadata:
  name: example-identitystoregroupmembership
  namespace: default
spec:
  groupId: example-id
  identityStoreId: example-id
  memberId:
    userId: example-id
  providerRef:
    name: example-identitystoregroupmembership
    region: us-east-1

Spec

Field	Type	Required	Description
`groupId`	string	yes	The unique identifier for a group in the identity store.
`identityStoreId`	string	yes	The globally unique identifier for the identity store.
`memberId`	object	yes	An object containing the identifier of a group member.
`memberId.userId`	string	yes	The identifier for a user in the identity store.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`membershipId`	string	—	The identifier for a GroupMembership in the identity store.
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

IdentityStoreUser # CLOUD CONTROL · AWS::IdentityStore::User

IdentityStoreUser manages AWS::IdentityStore::User through the AWS Cloud Control API.

kubectl get identitystoreusers · example on GitHub

Example

# IdentityStoreUser — IAM Identity Store
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/identitystore.html#identitystoreuser
apiVersion: aws.konfig.io/v1alpha1
kind: IdentityStoreUser
metadata:
  name: example-identitystoreuser
  namespace: default
spec:
  addresses:
  - country: example
    formatted: example
    locality: example
    postalCode: example
    primary: false
    region: us-east-1
    streetAddress: example
    type: example
  birthdate: example
  displayName: example-identitystoreuser
  emails:
  - primary: false
    type: example
    value: example
  identityStoreId: example-id
  locale: example
  name:
    familyName: example-identitystoreuser
    formatted: example
    givenName: example-identitystoreuser
    honorificPrefix: example
    honorificSuffix: example
    middleName: example-identitystoreuser
  nickName: example-identitystoreuser
  phoneNumbers:
  - primary: false
    type: example
    value: example
  photos:
  - display: example
    primary: false
    type: example
    value: example
  preferredLanguage: example
  profileUrl: example
  providerRef:
    name: example-identitystoreuser
    region: us-east-1
  roles:
  - primary: false
    type: example
    value: example
  timezone: example
  title: example
  userName: example-identitystoreuser
  userType: example
  website: example

Spec

Field	Type	Required	Description
`addresses`	array<object>	—	A list of addresses associated with the user.
`addresses[].country`	string	—	The country of the address.
`addresses[].formatted`	string	—	A formatted version of the address for display.
`addresses[].locality`	string	—	A string of the address locality.
`addresses[].postalCode`	string	—	The postal code of the address.
`addresses[].primary`	boolean	—	Whether this is the primary address.
`addresses[].region`	string	—	The region of the address.
`addresses[].streetAddress`	string	—	The street of the address.
`addresses[].type`	string	—	The type of address.
`birthdate`	string	—	The user's birthdate in YYYY-MM-DD format.
`displayName`	string	—	A string containing the name of the user for display.
`emails`	array<object>	—	A list of email addresses associated with the user.
`emails[].primary`	boolean	—	Whether this is the primary email address.
`emails[].type`	string	—	The type of email address.
`emails[].value`	string	—	The email address.
`identityStoreId`	string	yes	The globally unique identifier for the identity store.
`locale`	string	—	The geographical region or location of the user.
`name`	object	—	The name of the user.
`name.familyName`	string	—	The family name of the user.
`name.formatted`	string	—	A string containing a formatted version of the name for display.
`name.givenName`	string	—	The given name of the user.
`name.honorificPrefix`	string	—	The honorific prefix of the user.
`name.honorificSuffix`	string	—	The honorific suffix of the user.
`name.middleName`	string	—	The middle name of the user.
`nickName`	string	—	An alternate name for the user.
`phoneNumbers`	array<object>	—	A list of phone numbers associated with the user.
`phoneNumbers[].primary`	boolean	—	Whether this is the primary phone number.
`phoneNumbers[].type`	string	—	The type of phone number.
`phoneNumbers[].value`	string	—	The phone number.
`photos`	array<object>	—	A list of photos associated with the user.
`photos[].display`	string	—	A display name for the photo.
`photos[].primary`	boolean	—	Whether this is the primary photo.
`photos[].type`	string	—	The type of photo.
`photos[].value`	string	yes	The photo data or URL.
`preferredLanguage`	string	—	The preferred language of the user.
`profileUrl`	string	—	A URL associated with the user.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`roles`	array<object>	—	A list of roles associated with the user.
`roles[].primary`	boolean	—	Whether this is the primary role.
`roles[].type`	string	—	The type of role.
`roles[].value`	string	—	The role name.
`timezone`	string	—	The time zone for the user.
`title`	string	—	The title of the user.
`userName`	string	—	A unique string used to identify the user.
`userType`	string	—	A string indicating the type of user.
`website`	string	—	The user's personal website or blog URL.

Status

Field	Type	Required	Description
`arn`	string	—	The Amazon Resource Name (ARN) of the user.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`createdAt`	string	—	The date and time the user was created.
`createdBy`	string	—	The identifier of the user or system that created the user.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`updatedAt`	string	—	The date and time the user was last updated.
`updatedBy`	string	—	The identifier of the user or system that last updated the user.
`userId`	string	—	The identifier for a user in the identity store.
`userStatus`	enum	—	The current status of the user account. Allowed: `ENABLED, DISABLED`