Updating scim api endpoint regex

awslabs · Dec 6, 2024 · 0d97a4a · 0d97a4a
1 parent 4694c56
commit 0d97a4a
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 3 deletions.
diff --git a/.gitignore b/.gitignore
@@ -42,3 +42,4 @@ staging.yaml
 *.rej
 cicd/.DS_Store
 *.swo
+cicd/.DS_Store
diff --git a/cicd/cloudformation/secrets.yaml b/cicd/cloudformation/secrets.yaml
@@ -56,13 +56,13 @@ Parameters:
   SCIMEndpointUrl:
     Description: AWS IAM Identity Center SCIM Endpoint Url
     Type: String
-    AllowedPattern: "https://scim.(us(-gov)?|ap|ca|cn|eu|sa)-(central|(north|south)?(east|west)?)-([0-9]{1}).amazonaws.com/(.*)-([a-z0-9]{4})-([a-z0-9]{4})-([a-z0-9]{12})/scim/v2/"
+    AllowedPattern: "https://scim.(us(-gov)?|ap|ca|cn|eu|sa)-(central|(north|south)?(east|west)?)-([0-9]{1}).amazonaws.com/([A-Za-z0-9]{11})-([A-Za-z0-9]{4})-([A-Za-z0-9]{4})-([A-Za-z0-9]{4})-([A-Za-z0-9]{12})/scim/v2/?"
     NoEcho: true
 
   SCIMEndpointAccessToken:
     Description: AWS IAM Identity Center SCIM AccessToken
     Type: String
-    AllowedPattern: '([0-9a-zA-Z/=+-\\]{500,600})'
+    AllowedPattern: '([0-9a-zA-Z/=+-\\]{500,620})'
     NoEcho: true  
 
   IdentityStoreId:

diff --git a/template.yaml b/template.yaml
@@ -148,7 +148,7 @@ Parameters:
     Description: |
       AWS IAM Identity Center - SCIM Endpoint Url
     Default: ""
-    AllowedPattern: '(?!.*\s)|(https://scim.(us(-gov)?|ap|ca|cn|eu|sa)-(central|(north|south)?(east|west)?)-([0-9]{1}).amazonaws.com/(.*)-([a-z0-9]{4})-([a-z0-9]{4})-([a-z0-9]{12})/scim/v2/?)'
+    AllowedPattern: '"(?!.*\s)|(https://scim.(us(-gov)?|ap|ca|cn|eu|sa)-(central|(north|south)?(east|west)?)-([0-9]{1}).amazonaws.com/([A-Za-z0-9]{11})-([A-Za-z0-9]{4})-([A-Za-z0-9]{4})-([A-Za-z0-9]{4})-([A-Za-z0-9]{12})/scim/v2/?)"gm'
 
   SCIMEndpointAccessToken:
     Type: String
-Original file line number
+Diff line change
@@ Expand Up / @@ -42,3 +42,4 @@ staging.yaml @@
     *.rej
     cicd/.DS_Store
     *.swo
+    cicd/.DS_Store