AWS services in this solution

Amazon CloudFront

Core. This solution uses CloudFront with an Amazon S3 bucket as the origin. This restricts access to the Amazon S3 bucket so that it is not publicly accessible and prevents direct access from the bucket.

AWS IAM Identity Center

Core. The solution uses AWS IAM to authenticate users for the web application, and role based access to sandbox accounts for solution users.

AWS AppConfig

Core. The solution uses AWS AppConfig to store configuration data for the solution.

AWS Organizations

Core. The solution uses AWS Organizations to centrally manage and govern multiple AWS accounts required by the solution.

Amazon DynamoDB

Core. This solution uses DynamoDB to store state for the solution.

AWS Secrets Manager

Core. This solution uses AWS Secrets Manager to manage, and store secrets for the SAML2.0 application.

AWS Lambda

Core. This solution uses serverless Lambda functions, with Node.js to handle API calls.

AWS CodeBuild

Core. This solution uses CodeBuild for the account clean-up process.

Amazon Simple Storage Service

Core. This solution uses Amazon S3 for frontend and backend storage purposes.

AWS Key Management Service (AWS KMS)

Core. This solution uses AWS KMS to manage creation and control of encryption keys, required to encrypt various AWS resources used in the solution.

Amazon Simple Queue Service (Amazon SQS)

Core. This solution uses Amazon SQS to manage message queues.