General

• Components Overview
• China Region Adaptations

Authorization API

• Requester
  • Permissions for the requesting user
  • Utilized cookies and staging
  • Permissions on behalf of other users
  • Guest roles
  • User-centric permissions
• Visibility
  • Basic Principles
  • Dataset Visibility
  • Account Visibility
  • Environment Visibility
  • Hub Visibility
  • Environment Group Visibility
  • Minimal permissions from IDP
  • Visibility for CDH Admins and Privileged Technical Callers
  • Examples
• Permissions
  • User Dataset Participation Permissions
  • Environment Group Participation Permissions
  • Dataset Permissions
  • Resource Permissions
  • Environment Group Permissions
  • QuickSight Permissions
  • Hub membership
  • Dataset Access Role Permissions
  • Contexts Permissions
  • Admin and writer roles
• Data sources
• Authorization API Reference
  • General

Authentication API

• Authentication flow
  • IDP Configuration
  • Checks at Login
  • Logout functionality
  • JWT Scopes
  • Token endpoint
• Support for CLI Applications
  • CLI authentication flow
• Federation Support for Services
  • Service configuration
  • Federation flow
  • Example service
• Authentication SNS topics
  • user metadata topic
  • user id change topic
• BMW IDP Specifics
• Authentication API Reference
  • General
  • Technical users

Users API

• Permission Model
  • Namespaces and actions
  • Meta-permissions
  • Impact Permissions
• User Metadata
  • External metadata API
  • User metadata configuration
• User deactivation
• Users API Reference
  • General
  • Storage Format
  • Permission Origin
  • Return values
  • Pagination

SAML IDP

• Custom IDP Usage
  • General
  • Authentication flow
  • Configuration
  • AWS console login
  • Impact integration
• IDP Staging
• SAML IDP Reference
• Custom SAML Configurations
  • Configuration endpoints
  • Custom IDP Endpoints
  • Metadata Endpoint
  • SAML Attributes
• Dataset Access Role
• Testing the Dataset Access Role

Shared packages

• JWT Verification
  • Interface
  • Example

Developer & DevOps Documentation

• CDH Auth Business Overview
  • Repository Scope
  • Authentication API
  • Users API
  • Authorization API
  • SAML IDP And Dataset Access Role
  • QuickSight
  • Infrastructure
• CDH Auth Code Style Guide
  • Repository Structure
  • Layering
  • Python Style
  • Tests
  • Documentation
  • Terraform Style
  • Dependencies
• CDH Auth Review Checklist
  • Scope
  • Business Correctness
  • High-Risk Findings
• CDH Auth Testing And Validation
  • Unit Tests
  • Functional Tests
  • Terraform
  • Dependency Changes
  • Final Verification
• Developer setup
  • Prerequisites
  • Setup Steps
  • Pre-commit Hooks
• Unit Tests
• Functional Tests
• Dependency Upgrades
• Prefix Deployment and Pipeline
• First Task: Setting Up Your Development Environment
  • Prefix Authentication API
• Running on Your Local Machine
  • Locally run functional tests
  • Locally run performance tests
• Local Deployments
  • Prefix to Prefix Deployments
• Conventions
  • Documentation
  • Executable Scripts
  • Package Imports
  • Builder Pattern
• Operations Manual
  • Event Monitoring
  • Repositories
  • AWS Access Requirements
  • Continuous Integration / Continuous Deployment
  • Service & Support Model
  • Release Process & Deployment
  • Regular Activities (Housekeeping)
  • Manual Tasks
  • Possible Failures
  • Remediative Actions
  • Staging
  • Emergency sign-in to AWS accounts for cn/hk hub
  • Emergency user deactivation
• Custom GitHub Actions
  • Setup Environment
  • Terraform Setup
  • Unit Test
  • Pre-Commit Hooks
  • Compile Docs
  • SonarQube Scan
  • Pull Request Updater
  • ECR Image Builder
  • Additional Actions
• Prerequisites
• Security Concept
  • Operations security
  • Failure Handling
• Dependencies
  • Internal Modules
  • External Modules
  • Audit logging
  • Backups

AWS SSO Documentation

• AWS SSO Flow
  • Prerequisites
  • Flow Overview
  • Endpoints
  • Flow Diagrams