AwsIdentityCenter

Service-level AWS Identity Center component.

Remarks

Naming:

• Root type ${namespace}:aws:AwsIdentityCenter uses capability identity-center, logical-only args.identity, and shared buildComponentLogicalName(...): ${env}-${projectHash}-identity-center-${sanitised args.identity}.
• Qualified child type aws-native:sso:PermissionSet uses direct tuple [args.identity, args.permissionSets map key] or composite tuple [args.identity, args.permissions map key].
• Qualified child type aws-native:sso:Assignment uses direct tuple [args.identity, args.assignments map key] or composite tuple [args.identity, args.permissions map key, args.permissions.<permission key>.assignments map key]. One collision preflight covers both paths before any assignment is created.
• Exception: permission-set AWS names are the consumer-provided name literal with no ${env}-${projectHash} prefix, because permission sets are org-wide account-assignment constructs. Forwarded unchanged.
• Assignments set no AWS name (provider-generated/excluded).

Example

const identityCenter = new AwsIdentityCenter({
  identity: 'identity-center',
  permissionSets: {
    readOnly: {
      name: 'ReadOnly',
      instanceArn: 'arn:aws:sso:::instance/ssoins-1234567890abcdef',
    },
  },
});

Constructors

new AwsIdentityCenter( args: AwsIdentityCenterArgs, options?: ComponentResourceOptions, ): AwsIdentityCenter

Parameters

• args (AwsIdentityCenterArgs) — Capability maps for permission sets, assignments, and composite permissions.
• options (ComponentResourceOptions, optional) — Optional resource options for provider, parent, and dependency behaviour.

Returns

AwsIdentityCenter

Hierarchy

• ComponentResource
• AwsIdentityCenter

Properties

assignmentIds: Record<string, pulumi.Output<string>>

Direct assignment IDs keyed by args.assignments key.

assignments: Record<string, awsNative.sso.Assignment>

Direct assignment resources keyed by args.assignments key.

permissions: Record<string, AwsIdentityCenterPermissionOutputs>

Composite permission outputs keyed by args.permissions key.

permissionSetArns: Record<string, pulumi.Output<string>>

Direct permission set ARNs keyed by args.permissionSets key.

permissionSets: Record<string, awsNative.sso.PermissionSet>

Direct permission set resources keyed by args.permissionSets key.

urn: Output<string>

Inherited from urn

The stable logical URN used to distinctly address a resource, both before and after deployments.

Methods

getData(): Promise<any>

Inherited from getData

Retrieves the data produces by initialize. The data is immediately available in a derived class's constructor after the super(...) call to ComponentResource.

Returns

• Promise<any>

getProvider(moduleMember: string): ProviderResource | undefined

Inherited from getProvider

Returns the provider for the given module member, if one exists.

Parameters

• moduleMember (string)

Returns

• ProviderResource | undefined

initialize( args: Inputs, opts?: ComponentResourceOptions, name?: string, type?: string, ): Promise<any>

Inherited from initialize

Can be overridden by a subclass to asynchronously initialize data for this component automatically when constructed. The data will be available immediately for subclass constructors to use. To access the data use getData.

Parameters

• args (Inputs)
• opts (ComponentResourceOptions, optional)
• name (string, optional)
• type (string, optional)

Returns

• Promise<any>

registerOutputs( outputs?: Inputs | Promise<Inputs> | Output<Inputs>, ): void

Inherited from registerOutputs

Registers synthetic outputs that a component has initialized, usually by allocating other child sub-resources and propagating their resulting property values.

Component resources can call this at the end of their constructor to indicate that they are done creating child resources. This is not strictly necessary as this will automatically be called after the initialize method completes.

Parameters

• outputs (Inputs | Promise<Inputs> | Output<Inputs>, optional)

Returns

• void

Static Methods

isInstance(obj: any): obj is ComponentResource<any>

Inherited from isInstance

Returns true if the given object is a CustomResource. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.

Parameters

• obj (any)

Returns

• obj is ComponentResource<any>