AwsIdentityCenterAssignmentCapabilityArgs

interface AwsIdentityCenterAssignmentCapabilityArgs extends Omit<awsNative.sso.AssignmentArgs, 'permissionSetArn'> {
instanceArn: Input<string>;
permissionSetArn?: Input<string>;
permissionSetKey?: string;
principalId: Input<string>;
principalType: Input<AssignmentPrincipalType>;
targetId: Input<string>;
targetType: Input<'AWS_ACCOUNT'>;
}

Capability arguments for direct assignment creation.

Example

CODE

{
  instanceArn: 'arn:aws:sso:::instance/ssoins-1234567890abcdef',
  permissionSetKey: 'readOnly',
  principalId: 'group-123',
  principalType: awsNative.types.enums.sso.AssignmentPrincipalType.Group,
  targetId: '000000000000',
  targetType: awsNative.types.enums.sso.AssignmentTargetType.AwsAccount,
}

Hierarchy

AssignmentArgs, "permissionSetArn">
AwsIdentityCenterAssignmentCapabilityArgs

Properties

`instanceArn: Input<string>`

Inherited from instanceArn

The sso instance that the permission set is owned.

`permissionSetArn: Input<string>`

Explicit permission set ARN for the assignment.

`permissionSetKey: string`

Permission set key from args.permissionSets to resolve permissionSetArn.

`principalId: Input<string>`

Inherited from principalId

The assignee's identifier, user id/group id

`principalType: Input<AssignmentPrincipalType>`

Inherited from principalType

The assignee's type, user/group

`targetId: Input<string>`

Inherited from targetId

The account id to be provisioned.

`targetType: Input<'AWS_ACCOUNT'>`

Inherited from targetType

The type of resource to be provisioned to, only aws account now