Change Issuer parameter sent to AWS from using AWS Account ID to using alias
gene1wood opened this issue · 0 comments
gene1wood commented
Currently the Issuer URL uses an account ID.
This results in users being shown on AWS's site (once their session expires) a message about the session expiring and a link that looks like this
https://aws.sso.mozilla.com/?account=123456789012&role=MAWS-Admin
To make this more human friendly, let's change the account ID to the account alias so it looks like
https://aws.sso.mozilla.com/?account=infosec-dev&role=MAWS-Admin
Once mozilla-iam/federated-aws-rp#14 is merged and deployed, we can make this change in mozilla-aws-cli