feat: add certain sso resource to aws nuke exclusion

DataChefHQ · Jan 15, 2025 · 51be045 · 51be045
1 parent ce8ea4e
commit 51be045
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/src/scripts/aws-nuke/index.ts b/src/scripts/aws-nuke/index.ts
@@ -27,6 +27,16 @@ export async function awsNuke(props: DataLandingZoneProps, relativeDir: string,
       type: 'contains',
       value: 'aws-controltower',
     },
+
+    //Some AWS SSO and IAM Identity Center resources should nto be deleted, grouping them with the ControlTower filters
+    {
+      type: 'regex',
+      value: 'AWSSSO_.*_DO_NOT_DELETE',
+    },
+    {
+      type: 'glob',
+      value: 'AWSReservedSSO_*',
+    },
   ];
   const cdkFilters = [
     {