Provision SSO user via Cloudformation AWS::SageMaker::UserProfile is not working
I have issue that when running a CloudFormation stack with AWS::SageMaker::UserProfile in it, it did create the user profile under sagemaker domain, but when I tried to login to the sagemaker with the specified user via SSO, it always got rejected and saying the user is not added to the domain.
While if I add the user manually with AWS Console GUI, it works. So I suspect it's an issue of CloudFormation with AWS::SageMaker::UserProfile resource.
And I also found this github issue https://github.com/aws-cloudformation/cloudformation-coverage-roadmap/issues/1128
Could someone help me confirm it? Or I misunderstand something?
The symptoms you are describing aligns to the github issue. Are you able to workaround this issue by manually associating the same User referenced via CloudFormation User Profile with the Domain. Ignore the error you will see when doing this action, but internally it will call AssociateProfile API. Also, can you confirm whether you are using domainID in the CloudFormation template:
UserProfile:
Type: AWS::SageMaker::UserProfile
Properties:
DomainId: !GetAtt StudioDomain.DomainId
UserProfileName: !Ref UserProfileName
UserSettings:
ExecutionRole: !GetAtt SageMakerExecutionRole.Arn
Relevant questions
Create a notification once CloudFormation StackSet is finished
asked 5 months agoCreating stack from CloudFormation - instance type (t2.small) is not supported
asked 4 months agoUsing tags with spaces with cloudformation deploy
asked 3 years agoCloudformation exports exists after stack is deleted
asked 6 months agoCloudformation changesets
Accepted Answerasked 6 months agoHow to provision CloudFront distribution with ACM certificate in CloudFormation?
asked 4 months agobuild for CodeCommit backed Amplify website creation via CloudFormation not triggered
asked 5 months agoCloudFormation reference the userId that is running the Template
asked 2 months agoCloudformation Stack Stuck in UPDATE_ROLLBACK_COMPLETE_CLEANUP_IN_PROGRESS
asked a year agoProvision SSO user via Cloudformation AWS::SageMaker::UserProfile is not working
asked 3 months ago
I did use the domainId in my clouformation, here is the code snippet, but I'll also tried the workaround to see if it works.