Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feat: Added flexibility to super-easy deployment mode #318

Merged
merged 14 commits into from
May 28, 2024

Conversation

msalheb
Copy link
Contributor

@msalheb msalheb commented May 19, 2024

Description of changes:

New Features

  • Flexible Deployment Options for super-easy mode: You can now customize the deployment with the following parameters:
    • TEMPERATURE: Adjust the language model temperature to control output creativity.
    • ALLOW_SELF_REGISTER: Option to disable self-registration for increased security.
    • IPV4_RANGES: Restrict access to specific IPv4 address ranges.
    • IPV6_RANGES: Restrict access to specific IPv6 address ranges.
    • ALLOWED_SIGN_UP_EMAIL_DOMAINS: Restrict sign-ups to specific email domains.

Benefits

  • Enhanced Security: The new options allow for stricter access control, making your deployment more secure.
  • Customization: Easily adjust the language model’s temperature setting and control who can sign up for the service.
  • Ease of Use: These options provide a straightforward way to enhance security without requiring deep technical knowledge.

By leveraging these new parameters, you can tailor the deployment to better meet your security requirements and operational needs.

Copy link
Contributor

@statefb statefb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for your kind coding including some validations!

README.md Outdated Show resolved Hide resolved
README.md Outdated Show resolved Hide resolved
README.md Show resolved Hide resolved
bin.sh Show resolved Hide resolved
deploy.yml Outdated Show resolved Hide resolved
README.md Outdated Show resolved Hide resolved
README.md Outdated Show resolved Hide resolved
bin.sh Show resolved Hide resolved
cdk/lib/constructs/auth.ts Outdated Show resolved Hide resolved
bin.sh Outdated Show resolved Hide resolved
@@ -29,6 +29,7 @@ describe("Fine-grained Assertions Test", () => {
start: {},
},
enableMistral: false,
selfSignUpEnabled: true,
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fix the indent

@@ -84,6 +85,7 @@ describe("Fine-grained Assertions Test", () => {
start: {},
},
enableMistral: false,
selfSignUpEnabled: true,
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fix the indent

@statefb statefb merged commit 4ced922 into aws-samples:main May 28, 2024
7 checks passed
@@ -34,8 +35,8 @@ export class Auth extends Construct {
requireDigits: true,
minLength: 8,
},
// Disable if identity providers are configured
selfSignUpEnabled: !props.idp.isExist(),
// Disable id selfSignUpEnabled is given as false or if selfSignUpEnabled is true and idp is provided
Copy link
Contributor

@Taikono-Himazin Taikono-Himazin Jun 24, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

今更で申し訳ないのですが、この変更にはどのような意味があるのでしょうか?
外部idpを使用している場合でも、自己登録をONにしたい需要はあると思うのと、これで制限されているのがどこかに明文化されているのでしょうか?
よく分からない仕様になってしまわないかな?と思っていたりするのですが。

普通にREADMEに記載されていました。すみません。

外部 ID プロバイダーを構成すると、値は無視され、自動的に無効になります。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants