Use this data source to get an Identity Store Group.
data "aws_ssoadmin_instances" "example" {}
data "aws_identitystore_group" "example" {
identity_store_id = tolist(data.aws_ssoadmin_instances.example.identity_store_ids)[0]
alternate_identifier {
unique_attribute {
attribute_path = "DisplayName"
attribute_value = "ExampleGroup"
}
}
}
output "group_id" {
value = data.aws_identitystore_group.example.group_id
}
The following arguments are required:
identity_store_id
- (Required) Identity Store ID associated with the Single Sign-On Instance.The following arguments are optional:
alternate_identifier
(Optional) A unique identifier for the group that is not the primary identifier. Conflicts with group_id
and filter
. Detailed below.filter
- (Optional, Deprecated use the alternate_identifier
attribute instead) Configuration block for filtering by a unique attribute of the group. Detailed below.group_id
- (Optional) The identifier for a group in the Identity Store.alternate_identifier
Configuration BlockThe alternate_identifier
configuration block supports the following arguments:
external_id
- (Optional) Configuration block for filtering by the identifier issued by an external identity provider. Detailed below.unique_attribute
- (Optional) An entity attribute that's unique to a specific entity. Detailed below.external_id
Configuration BlockThe external_id
configuration block supports the following arguments:
id
- (Required) The identifier issued to this resource by an external identity provider.issuer
- (Required) The issuer for an external identifier.filter
Configuration BlockThe following arguments are supported by the filter
configuration block:
attribute_path
- (Required) Attribute path that is used to specify which attribute name to search. Currently, DisplayName
is the only valid attribute path.attribute_value
- (Required) Value for an attribute.unique_attribute
Configuration BlockThe unique_attribute
configuration block supports the following arguments:
attribute_path
- (Required) Attribute path that is used to specify which attribute name to search. For example: DisplayName
. Refer to the Group data type.attribute_value
- (Required) Value for an attribute.This data source exports the following attributes in addition to the arguments above:
id
- Identifier of the group in the Identity Store.description
- Description of the specified group.display_name
- Group's display name value.external_ids
- List of identifiers issued to this resource by an external identity provider.
id
- The identifier issued to this resource by an external identity provider.issuer
- The issuer for an external identifier.