Class IamConfigValidator

IAM Configuration validator. Validates iam configuration

Hierarchy

IamConfigValidator

Index

Constructors

Methods

getAccountNames getIdentityCenterAssignmentDeployAccountNames getKmsKeyNames getOuIdNames getVpcSubnetLists validateAssignmentAccountNames validateAssignmentDeploymentTargetOUs validateAssignmentPrincipalsForIamRoles validateDeploymentTargetAccountNames validateDeploymentTargetOUs validateGroupSetsAccountNames validateGroupSetsDeploymentTargetOUs validateIamGroupTarget validateIamPolicyTargets validateIamRoleTarget validateIamUserTarget validateIdentityCenter validateIdentityCenterPermissionSetAssignmentsForManagement validateIdentityCenterPermissionSetInAssignments validateIdentityCenterPermissionSetNameForUniqueness validateIdentityCenterPermissionSetPermissionsBoundary validateIdentityCenterPermissionSetPolicies validatePolicies validatePolicyFileExists validatePolicyNames validatePolicySetsAccountNames validatePolicySetsDeploymentTargetOUs validateRoleNames validateRoleSetsAccountNames validateRoleSetsDeploymentTargetOUs validateRoles validateUserSetsAccountNames validateUserSetsDeploymentTargetOUs

Constructors

constructor

new IamConfigValidator(values: IamConfig, accountsConfig: AccountsConfig, networkConfig: NetworkConfig, organizationConfig: OrganizationConfig, securityConfig: SecurityConfig, configDir: string): IamConfigValidator
Parameters
- values: IamConfig
- accountsConfig: AccountsConfig
- networkConfig: NetworkConfig
- organizationConfig: OrganizationConfig
- securityConfig: SecurityConfig
- configDir: string
Returns IamConfigValidator

Methods

`Private` getAccountNames

getAccountNames(accountsConfig: AccountsConfig): string[]
Prepare list of Account names from account config file

Returns
Parameters
- accountsConfig: AccountsConfig
Returns string[]

`Private` getIdentityCenterAssignmentDeployAccountNames

getIdentityCenterAssignmentDeployAccountNames(identityCenter: {
    delegatedAdminAccount: undefined | string;
    identityCenterAssignments: undefined | ({ permissionSetName: string; principalId: string | undefined; principalType: "USER" | "GROUP" | undefined; principals: { type: string; name: string; }[] | undefined; deploymentTargets: { ...; }; name: string; })[];
    identityCenterPermissionSets: undefined | ({ name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | undefined; sessionDuration: number | undefined; })[];
    name: string;
}, accountsConfig: AccountsConfig, identityCenterPermissionSetName: string): string[]
Function to get Identity Center Assignment deploy target account names

Returns
Parameters
- identityCenter: {
      delegatedAdminAccount: undefined | string;
      identityCenterAssignments: undefined | ({ permissionSetName: string; principalId: string | undefined; principalType: "USER" | "GROUP" | undefined; principals: { type: string; name: string; }[] | undefined; deploymentTargets: { ...; }; name: string; })[];
      identityCenterPermissionSets: undefined | ({ name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | undefined; sessionDuration: number | undefined; })[];
      name: string;
  }
  - delegatedAdminAccount: undefined | string
  - identityCenterAssignments: undefined | ({ permissionSetName: string; principalId: string | undefined; principalType: "USER" | "GROUP" | undefined; principals: { type: string; name: string; }[] | undefined; deploymentTargets: { ...; }; name: string; })[]
  - identityCenterPermissionSets: undefined | ({ name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | undefined; sessionDuration: number | undefined; })[]
  - name: string
- accountsConfig: AccountsConfig
- identityCenterPermissionSetName: string
Returns string[]

`Private` getKmsKeyNames

getKmsKeyNames(keyNames: string[], securityConfig: SecurityConfig): void
Prepare list of kms key names from security config file
Parameters
- keyNames: string[]
- securityConfig: SecurityConfig
Returns void

`Private` getOuIdNames

getOuIdNames(organizationConfig: OrganizationConfig): string[]
Prepare list of OU ids from organization config file

Returns
Parameters
- organizationConfig: OrganizationConfig
Returns string[]

`Private` getVpcSubnetLists

getVpcSubnetLists(networkConfig: NetworkConfig): VpcSubnetListsType[]
Function to create vpc and subnet lists

Returns
Parameters
- networkConfig: NetworkConfig
Returns VpcSubnetListsType[]

`Private` validateAssignmentAccountNames

validateAssignmentAccountNames(values: {
    groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
    identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
    managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
    policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
    providers: undefined | ({ name: string; metadataDocument: string; })[];
    roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
    userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
}, accountNames: string[], errors: string[]): void
Function to validate existence of Assignment target account names Make sure deployment target accounts are part of account config file
Parameters
- values: {
      groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
      identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
      managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
      policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
      providers: undefined | ({ name: string; metadataDocument: string; })[];
      roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
      userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
  }
  - groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]
  - identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...)
  - managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[]
  - policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]
  - providers: undefined | ({ name: string; metadataDocument: string; })[]
  - roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[]
  - userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[]
- accountNames: string[]
- errors: string[]
Returns void

`Private` validateAssignmentDeploymentTargetOUs

validateAssignmentDeploymentTargetOUs(values: {
    groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
    identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
    managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
    policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
    providers: undefined | ({ name: string; metadataDocument: string; })[];
    roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
    userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
}, ouIdNames: string[], errors: string[]): void
Function to validate existence of Assignment deployment target OUs Make sure deployment target OUs are part of Organization config file
Parameters
- values: {
      groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
      identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
      managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
      policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
      providers: undefined | ({ name: string; metadataDocument: string; })[];
      roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
      userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
  }
  - groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]
  - identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...)
  - managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[]
  - policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]
  - providers: undefined | ({ name: string; metadataDocument: string; })[]
  - roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[]
  - userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[]
- ouIdNames: string[]
- errors: string[]
Returns void

`Private` validateAssignmentPrincipalsForIamRoles

validateAssignmentPrincipalsForIamRoles(values: {
    groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
    identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
    managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
    policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
    providers: undefined | ({ name: string; metadataDocument: string; })[];
    roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
    userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
}, accountNames: string[], errors: string[]): void
Function to validate existence of Assignment target account names exist for IAM policies or that arn or account ids match correct format Make sure deployment target accounts are part of account config file
Parameters
- values: {
      groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
      identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
      managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
      policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
      providers: undefined | ({ name: string; metadataDocument: string; })[];
      roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
      userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
  }
  - groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]
  - identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...)
  - managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[]
  - policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]
  - providers: undefined | ({ name: string; metadataDocument: string; })[]
  - roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[]
  - userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[]
- accountNames: string[]
- errors: string[]
Returns void

`Private` validateDeploymentTargetAccountNames

validateDeploymentTargetAccountNames(values: {
    groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
    identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
    managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
    policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
    providers: undefined | ({ name: string; metadataDocument: string; })[];
    roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
    userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
}, accountNames: string[], errors: string[]): void
Function to validate Deployment targets OU name for IAM services
Parameters
- values: {
      groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
      identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
      managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
      policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
      providers: undefined | ({ name: string; metadataDocument: string; })[];
      roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
      userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
  }
  - groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]
  - identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...)
  - managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[]
  - policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]
  - providers: undefined | ({ name: string; metadataDocument: string; })[]
  - roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[]
  - userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[]
- accountNames: string[]
- errors: string[]
Returns void

`Private` validateDeploymentTargetOUs

validateDeploymentTargetOUs(values: {
    groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
    identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
    managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
    policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
    providers: undefined | ({ name: string; metadataDocument: string; })[];
    roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
    userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
}, ouIdNames: string[], errors: string[]): void
Function to validate Deployment targets OU name for IAM services
Parameters
- values: {
      groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
      identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
      managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
      policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
      providers: undefined | ({ name: string; metadataDocument: string; })[];
      roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
      userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
  }
  - groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]
  - identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...)
  - managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[]
  - policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]
  - providers: undefined | ({ name: string; metadataDocument: string; })[]
  - roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[]
  - userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[]
- ouIdNames: string[]
- errors: string[]
Returns void

`Private` validateGroupSetsAccountNames

validateGroupSetsAccountNames(values: {
    groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
    identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
    managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
    policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
    providers: undefined | ({ name: string; metadataDocument: string; })[];
    roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
    userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
}, accountNames: string[], errors: string[]): void
Function to validate existence of group sets target account names Make sure deployment target accounts are part of account config file
Parameters
- values: {
      groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
      identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
      managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
      policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
      providers: undefined | ({ name: string; metadataDocument: string; })[];
      roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
      userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
  }
  - groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]
  - identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...)
  - managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[]
  - policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]
  - providers: undefined | ({ name: string; metadataDocument: string; })[]
  - roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[]
  - userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[]
- accountNames: string[]
- errors: string[]
Returns void

`Private` validateGroupSetsDeploymentTargetOUs

validateGroupSetsDeploymentTargetOUs(values: {
    groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
    identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
    managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
    policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
    providers: undefined | ({ name: string; metadataDocument: string; })[];
    roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
    userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
}, ouIdNames: string[], errors: string[]): void
Function to validate existence of group sets deployment target OUs Make sure deployment target OUs are part of Organization config file
Parameters
- values: {
      groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
      identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
      managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
      policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
      providers: undefined | ({ name: string; metadataDocument: string; })[];
      roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
      userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
  }
  - groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]
  - identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...)
  - managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[]
  - policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]
  - providers: undefined | ({ name: string; metadataDocument: string; })[]
  - roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[]
  - userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[]
- ouIdNames: string[]
- errors: string[]
Returns void

`Private` validateIamGroupTarget

validateIamGroupTarget(values: {
    groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
    identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
    managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
    policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
    providers: undefined | ({ name: string; metadataDocument: string; })[];
    roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
    userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
}, accountsConfig: AccountsConfig, policyItem: PolicySetConfig, errors: string[]): void
Function to validate managed policy availability for IAM Groups
Parameters
- values: {
      groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
      identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
      managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
      policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
      providers: undefined | ({ name: string; metadataDocument: string; })[];
      roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
      userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
  }
  - groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]
  - identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...)
  - managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[]
  - policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]
  - providers: undefined | ({ name: string; metadataDocument: string; })[]
  - roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[]
  - userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[]
- accountsConfig: AccountsConfig
- policyItem: PolicySetConfig
  
  PolicySetConfig
- errors: string[]
Returns void

`Private` validateIamPolicyTargets

validateIamPolicyTargets(values: {
    groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
    identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
    managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
    policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
    providers: undefined | ({ name: string; metadataDocument: string; })[];
    roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
    userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
}, accountsConfig: AccountsConfig, errors: string[]): void
Function to validate managed policy availability for IAM resources
Parameters
- values: {
      groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
      identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
      managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
      policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
      providers: undefined | ({ name: string; metadataDocument: string; })[];
      roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
      userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
  }
  - groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]
  - identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...)
  - managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[]
  - policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]
  - providers: undefined | ({ name: string; metadataDocument: string; })[]
  - roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[]
  - userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[]
- accountsConfig: AccountsConfig
- errors: string[]
Returns void

`Private` validateIamRoleTarget

validateIamRoleTarget(values: {
    groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
    identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
    managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
    policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
    providers: undefined | ({ name: string; metadataDocument: string; })[];
    roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
    userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
}, accountsConfig: AccountsConfig, policyItem: PolicySetConfig, errors: string[]): void
Function to validate managed policy availability for IAM Roles
Parameters
- values: {
      groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
      identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
      managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
      policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
      providers: undefined | ({ name: string; metadataDocument: string; })[];
      roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
      userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
  }
  - groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]
  - identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...)
  - managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[]
  - policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]
  - providers: undefined | ({ name: string; metadataDocument: string; })[]
  - roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[]
  - userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[]
- accountsConfig: AccountsConfig
- policyItem: PolicySetConfig
  
  PolicySetConfig
- errors: string[]
Returns void

`Private` validateIamUserTarget

validateIamUserTarget(values: {
    groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
    identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
    managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
    policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
    providers: undefined | ({ name: string; metadataDocument: string; })[];
    roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
    userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
}, accountsConfig: AccountsConfig, policyItem: PolicySetConfig, errors: string[]): void
Function to validate managed policy availability for IAM users
Parameters
- values: {
      groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
      identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
      managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
      policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
      providers: undefined | ({ name: string; metadataDocument: string; })[];
      roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
      userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
  }
  - groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]
  - identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...)
  - managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[]
  - policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]
  - providers: undefined | ({ name: string; metadataDocument: string; })[]
  - roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[]
  - userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[]
- accountsConfig: AccountsConfig
- policyItem: PolicySetConfig
  
  PolicySetConfig
- errors: string[]
Returns void

`Private` validateIdentityCenter

validateIdentityCenter(iamConfig: {
    groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
    identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
    managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
    policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
    providers: undefined | ({ name: string; metadataDocument: string; })[];
    roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
    userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
}, accountsConfig: AccountsConfig, errors: string[]): void
Function to validate Identity Center object
Parameters
- iamConfig: {
      groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
      identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
      managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
      policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
      providers: undefined | ({ name: string; metadataDocument: string; })[];
      roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
      userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
  }
  - groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]
  - identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...)
  - managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[]
  - policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]
  - providers: undefined | ({ name: string; metadataDocument: string; })[]
  - roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[]
  - userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[]
- accountsConfig: AccountsConfig
- errors: string[]
Returns void

`Private` validateIdentityCenterPermissionSetAssignmentsForManagement

validateIdentityCenterPermissionSetAssignmentsForManagement(iamConfig: {
    groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
    identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
    managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
    policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
    providers: undefined | ({ name: string; metadataDocument: string; })[];
    roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
    userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
}, errors: string[]): void
Function to validate Identity Center Permission set assignments are not deployed to management account
Parameters
- iamConfig: {
      groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
      identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
      managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
      policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
      providers: undefined | ({ name: string; metadataDocument: string; })[];
      roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
      userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
  }
  - groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]
  - identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...)
  - managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[]
  - policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]
  - providers: undefined | ({ name: string; metadataDocument: string; })[]
  - roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[]
  - userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[]
- errors: string[]
Returns void

`Private` validateIdentityCenterPermissionSetInAssignments

validateIdentityCenterPermissionSetInAssignments(iamConfig: {
    groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
    identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
    managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
    policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
    providers: undefined | ({ name: string; metadataDocument: string; })[];
    roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
    userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
}, errors: string[]): void
Function to validate Identity Center Permission set names in assignment
Parameters
- iamConfig: {
      groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
      identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
      managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
      policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
      providers: undefined | ({ name: string; metadataDocument: string; })[];
      roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
      userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
  }
  - groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]
  - identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...)
  - managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[]
  - policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]
  - providers: undefined | ({ name: string; metadataDocument: string; })[]
  - roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[]
  - userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[]
- errors: string[]
Returns void

`Private` validateIdentityCenterPermissionSetNameForUniqueness

validateIdentityCenterPermissionSetNameForUniqueness(iamConfig: {
    groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
    identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
    managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
    policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
    providers: undefined | ({ name: string; metadataDocument: string; })[];
    roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
    userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
}, errors: string[]): void
Function to validate PermissionSet and Assignment names are unique
Parameters
- iamConfig: {
      groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
      identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
      managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
      policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
      providers: undefined | ({ name: string; metadataDocument: string; })[];
      roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
      userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
  }
  - groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]
  - identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...)
  - managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[]
  - policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]
  - providers: undefined | ({ name: string; metadataDocument: string; })[]
  - roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[]
  - userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[]
- errors: string[]
Returns void

`Private` validateIdentityCenterPermissionSetPermissionsBoundary

validateIdentityCenterPermissionSetPermissionsBoundary(iamConfig: {
    groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
    identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
    managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
    policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
    providers: undefined | ({ name: string; metadataDocument: string; })[];
    roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
    userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
}, errors: string[]): void
Function to validate Identity Center Permission set permissionsBoundary
Parameters
- iamConfig: {
      groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
      identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
      managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
      policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
      providers: undefined | ({ name: string; metadataDocument: string; })[];
      roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
      userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
  }
  - groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]
  - identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...)
  - managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[]
  - policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]
  - providers: undefined | ({ name: string; metadataDocument: string; })[]
  - roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[]
  - userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[]
- errors: string[]
Returns void

`Private` validateIdentityCenterPermissionSetPolicies

validateIdentityCenterPermissionSetPolicies(iamConfig: {
    groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
    identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
    managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
    policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
    providers: undefined | ({ name: string; metadataDocument: string; })[];
    roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
    userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
}, accountsConfig: AccountsConfig, errors: string[]): void
Parameters
- iamConfig: {
      groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
      identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
      managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
      policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
      providers: undefined | ({ name: string; metadataDocument: string; })[];
      roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
      userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
  }
  - groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]
  - identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...)
  - managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[]
  - policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]
  - providers: undefined | ({ name: string; metadataDocument: string; })[]
  - roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[]
  - userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[]
- accountsConfig: AccountsConfig
- errors: string[]
Returns void

`Private` validatePolicies

validatePolicies(configDir: string, values: IamConfig, errors: string[]): void
Validate IAM policies
Parameters
- configDir: string
- values: IamConfig
- errors: string[]
Returns void

`Private` validatePolicyFileExists

validatePolicyFileExists(configDir: string, values: {
    groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
    identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
    managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
    policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
    providers: undefined | ({ name: string; metadataDocument: string; })[];
    roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
    userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
}, errors: string[]): void
Validate policy file existence

Returns
Parameters
- configDir: string
- values: {
      groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
      identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
      managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
      policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
      providers: undefined | ({ name: string; metadataDocument: string; })[];
      roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
      userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
  }
  - groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]
  - identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...)
  - managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[]
  - policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]
  - providers: undefined | ({ name: string; metadataDocument: string; })[]
  - roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[]
  - userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[]
- errors: string[]
Returns void

`Private` validatePolicyNames

validatePolicyNames(values: IamConfig, errors: string[]): void
Checks policy names for duplicate values
Parameters
- values: IamConfig
- errors: string[]
Returns void

`Private` validatePolicySetsAccountNames

validatePolicySetsAccountNames(values: {
    groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
    identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
    managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
    policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
    providers: undefined | ({ name: string; metadataDocument: string; })[];
    roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
    userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
}, accountNames: string[], errors: string[]): void
Function to validate existence of policy sets target account names Make sure deployment target accounts are part of account config file
Parameters
- values: {
      groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
      identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
      managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
      policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
      providers: undefined | ({ name: string; metadataDocument: string; })[];
      roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
      userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
  }
  - groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]
  - identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...)
  - managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[]
  - policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]
  - providers: undefined | ({ name: string; metadataDocument: string; })[]
  - roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[]
  - userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[]
- accountNames: string[]
- errors: string[]
Returns void

`Private` validatePolicySetsDeploymentTargetOUs

validatePolicySetsDeploymentTargetOUs(values: {
    groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
    identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
    managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
    policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
    providers: undefined | ({ name: string; metadataDocument: string; })[];
    roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
    userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
}, ouIdNames: string[], errors: string[]): void
Function to validate existence of policy sets deployment target OUs Make sure deployment target OUs are part of Organization config file
Parameters
- values: {
      groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
      identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
      managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
      policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
      providers: undefined | ({ name: string; metadataDocument: string; })[];
      roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
      userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
  }
  - groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]
  - identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...)
  - managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[]
  - policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]
  - providers: undefined | ({ name: string; metadataDocument: string; })[]
  - roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[]
  - userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[]
- ouIdNames: string[]
- errors: string[]
Returns void

`Private` validateRoleNames

validateRoleNames(values: IamConfig, errors: string[]): void
Checks role names for duplicate values
Parameters
- values: IamConfig
- errors: string[]
Returns void

`Private` validateRoleSetsAccountNames

validateRoleSetsAccountNames(values: {
    groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
    identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
    managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
    policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
    providers: undefined | ({ name: string; metadataDocument: string; })[];
    roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
    userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
}, accountNames: string[], errors: string[]): void
Function to validate existence of role sets target account names Make sure deployment target accounts are part of account config file
Parameters
- values: {
      groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
      identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
      managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
      policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
      providers: undefined | ({ name: string; metadataDocument: string; })[];
      roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
      userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
  }
  - groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]
  - identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...)
  - managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[]
  - policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]
  - providers: undefined | ({ name: string; metadataDocument: string; })[]
  - roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[]
  - userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[]
- accountNames: string[]
- errors: string[]
Returns void

`Private` validateRoleSetsDeploymentTargetOUs

validateRoleSetsDeploymentTargetOUs(values: {
    groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
    identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
    managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
    policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
    providers: undefined | ({ name: string; metadataDocument: string; })[];
    roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
    userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
}, ouIdNames: string[], errors: string[]): void
Function to validate existence of role sets deployment target OUs Make sure deployment target OUs are part of Organization config file
Parameters
- values: {
      groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
      identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
      managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
      policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
      providers: undefined | ({ name: string; metadataDocument: string; })[];
      roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
      userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
  }
  - groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]
  - identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...)
  - managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[]
  - policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]
  - providers: undefined | ({ name: string; metadataDocument: string; })[]
  - roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[]
  - userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[]
- ouIdNames: string[]
- errors: string[]
Returns void

`Private` validateRoles

validateRoles(values: IamConfig, errors: string[]): void
Validate IAM roles
Parameters
- values: IamConfig
- errors: string[]
Returns void

`Private` validateUserSetsAccountNames

validateUserSetsAccountNames(values: {
    groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
    identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
    managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
    policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
    providers: undefined | ({ name: string; metadataDocument: string; })[];
    roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
    userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
}, accountNames: string[], errors: string[]): void
Function to validate existence of user sets target account names Make sure deployment target accounts are part of account config file
Parameters
- values: {
      groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
      identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
      managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
      policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
      providers: undefined | ({ name: string; metadataDocument: string; })[];
      roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
      userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
  }
  - groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]
  - identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...)
  - managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[]
  - policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]
  - providers: undefined | ({ name: string; metadataDocument: string; })[]
  - roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[]
  - userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[]
- accountNames: string[]
- errors: string[]
Returns void

`Private` validateUserSetsDeploymentTargetOUs

validateUserSetsDeploymentTargetOUs(values: {
    groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
    identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
    managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
    policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
    providers: undefined | ({ name: string; metadataDocument: string; })[];
    roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
    userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
}, ouIdNames: string[], errors: string[]): void
Function to validate existence of user sets deployment target OUs Make sure deployment target OUs are part of Organization config file
Parameters
- values: {
      groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[];
      identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...);
      managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[];
      policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[];
      providers: undefined | ({ name: string; metadataDocument: string; })[];
      roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[];
      userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[];
  }
  - groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]
  - identityCenter: undefined | ({ name: string; delegatedAdminAccount: string | undefined; identityCenterPermissionSets: { name: string; policies: { awsManaged: string[] | undefined; customerManaged: string[] | undefined; acceleratorManaged: string[] | undefined; inlinePolicy: string | undefined; permissionsBoundary: { ...; } | undefined; } | unde...)
  - managedActiveDirectories: undefined | ({ name: string; account: string; region: string; dnsName: string; netBiosDomainName: string; description: string | undefined; edition: string; vpcSettings: { vpcName: string; subnets: string[]; }; ... 5 more ...; activeDirectoryConfigurationInstance: { ...; } | undefined; })[]
  - policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]
  - providers: undefined | ({ name: string; metadataDocument: string; })[]
  - roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[]
  - userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[]
- ouIdNames: string[]
- errors: string[]
Returns void

Class IamConfigValidator

Hierarchy

Index

Constructors

Methods

Constructors

constructor

Parameters

values: IamConfig

accountsConfig: AccountsConfig

networkConfig: NetworkConfig

organizationConfig: OrganizationConfig

securityConfig: SecurityConfig

configDir: string

Returns IamConfigValidator

Methods

Private getAccountNames

Returns

Parameters

accountsConfig: AccountsConfig

Returns string[]

Private getIdentityCenterAssignmentDeployAccountNames

Returns

Parameters

delegatedAdminAccount: undefined | string

identityCenterAssignments: undefined | ({ permissionSetName: string; principalId: string | undefined; principalType: "USER" | "GROUP" | undefined; principals: { type: string; name: string; }[] | undefined; deploymentTargets: { ...; }; name: string; })[]

name: string

accountsConfig: AccountsConfig

identityCenterPermissionSetName: string

Returns string[]

Private getKmsKeyNames

Parameters

keyNames: string[]

securityConfig: SecurityConfig

Returns void

Private getOuIdNames

Returns

Parameters

organizationConfig: OrganizationConfig

Returns string[]

Private getVpcSubnetLists

Returns

Parameters

networkConfig: NetworkConfig

Returns VpcSubnetListsType[]

Private validateAssignmentAccountNames

Parameters

groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]

policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]

providers: undefined | ({ name: string; metadataDocument: string; })[]

roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[]

userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[]

accountNames: string[]

errors: string[]

Returns void

Private validateAssignmentDeploymentTargetOUs

Parameters

groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]

policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]

providers: undefined | ({ name: string; metadataDocument: string; })[]

roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[]

userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[]

ouIdNames: string[]

errors: string[]

Returns void

Private validateAssignmentPrincipalsForIamRoles

Parameters

groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]

policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]

providers: undefined | ({ name: string; metadataDocument: string; })[]

roleSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; path: string | undefined; roles: { ...; }[]; })[]

userSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; users: { ...; }[]; })[]

accountNames: string[]

errors: string[]

Returns void

Private validateDeploymentTargetAccountNames

Parameters

groupSets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; groups: { ...; }[]; })[]

policySets: undefined | ({ deploymentTargets: { organizationalUnits: string[] | undefined; accounts: string[] | undefined; excludedRegions: string[] | undefined; excludedAccounts: string[] | undefined; }; identityCenterDependency: boolean | undefined; policies: { ...; }[]; })[]

providers: undefined | ({ name: string; metadataDocument: string; })[]

`Private` getAccountNames

`Private` getIdentityCenterAssignmentDeployAccountNames

`Private` getKmsKeyNames

`Private` getOuIdNames

`Private` getVpcSubnetLists

`Private` validateAssignmentAccountNames

`Private` validateAssignmentDeploymentTargetOUs

`Private` validateAssignmentPrincipalsForIamRoles

`Private` validateDeploymentTargetAccountNames

`Private` validateDeploymentTargetOUs

`Private` validateGroupSetsAccountNames

`Private` validateGroupSetsDeploymentTargetOUs

`Private` validateIamGroupTarget