1 Answer
- Newest
- Most votes
- Most comments
7
Yes, your Deadline Cloud farms will survive.
Deadline Cloud farms and their configurations (queues, fleets, queue environments, run logs, etc.) are account-level resources. They are not tied to the lifecycle of the IAM Identity Center instance. If you delete the Identity Center account instance, the underlying farm infrastructure remains fully intact.
However, you will temporarily lose access to them via the Deadline Cloud monitor, and the existing access associations will break.
Because the UpdateMonitor API does not allow you to change the identityCenterInstanceArn, here is the required migration path:
- Clean up: Delete the existing Deadline Cloud monitor (optional, but recommended to avoid stale resources).
- Delete the existing IAM Identity Center account instance.
- Set up your new IAM Identity Center organization instance and provision your new users/groups.
- Create a new Monitor: Create a new Deadline Cloud monitor and associate it with the new Identity Center instance during creation.
- Re-associate Members: The existing farms will still be visible to you as an AWS administrator in the console. Because the previous farm associations referenced the old Identity Center's
PrincipalIds, you must grant your new SSO users/groups access to the existing farms. You can do this via the console or the CLI usingaws deadline associate-member-to-farm.
In short: No need to rebuild your farms. You "only" need to rebuild the monitor and re-map the access permissions.
See also:
- https://docs.aws.amazon.com/singlesignon/latest/userguide/delete-config.html
- https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_CreateMonitor.html
- https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_AssociateMemberToFarm.html
- https://docs.aws.amazon.com/cli/latest/reference/deadline/associate-member-to-farm.html
Relevant content
asked a month ago
- AWS OFFICIALUpdated 2 years ago
