AwsIdentityCenterPermissionSetCapabilityArgs

interface AwsIdentityCenterPermissionSetCapabilityArgs extends PermissionSetArgs {
customerManagedPolicyReferences?: Input<Input<PermissionSetCustomerManagedPolicyReferenceArgs>[] | undefined>;
description?: Input<string | undefined>;
inlinePolicy?: any;
instanceArn: Input<string>;
managedPolicies?: Input<Input<string>[] | undefined>;
name?: Input<string | undefined>;
permissionsBoundary?: Input<PermissionSetPermissionsBoundaryArgs | undefined>;
relayStateType?: Input<string | undefined>;
sessionDuration?: Input<string | undefined>;
tags?: Input<Input<TagArgs>[] | undefined>;
}

Capability arguments for direct permission set creation.

Example

CODE

{
  name: 'ReadOnly',
  instanceArn: 'arn:aws:sso:::instance/ssoins-1234567890abcdef',
}

Hierarchy

PermissionSetArgs
AwsIdentityCenterPermissionSetCapabilityArgs

Properties

`customerManagedPolicyReferences: Input<Input<PermissionSetCustomerManagedPolicyReferenceArgs>[] | undefined>`

Inherited from customerManagedPolicyReferences

Specifies the names and paths of the customer managed policies that you have attached to your permission set.

`description: Input<string | undefined>`

Inherited from description

The permission set description.

`inlinePolicy: any`

Inherited from inlinePolicy

The inline policy to put in permission set.

Search the CloudFormation User Guide for AWS::SSO::PermissionSet for more information about the expected schema for this property.

`instanceArn: Input<string>`

Inherited from instanceArn

The sso instance arn that the permission set is owned.

`managedPolicies: Input<Input<string>[] | undefined>`

Inherited from managedPolicies

A structure that stores a list of managed policy ARNs that describe the associated AWS managed policy.

`name: Input<string | undefined>`

Inherited from name

The name you want to assign to this permission set.

`permissionsBoundary: Input<PermissionSetPermissionsBoundaryArgs | undefined>`

Inherited from permissionsBoundary

Specifies the configuration of the AWS managed or customer managed policy that you want to set as a permissions boundary. Specify either CustomerManagedPolicyReference to use the name and path of a customer managed policy, or ManagedPolicyArn to use the ARN of an AWS managed policy. A permissions boundary represents the maximum permissions that any policy can grant your role. For more information, see Permissions boundaries for IAM entities in the IAM User Guide .

Policies used as permissions boundaries don't provide permissions. You must also attach an IAM policy to the role. To learn how the effective permissions for a role are evaluated, see IAM JSON policy evaluation logic in the IAM User Guide .

`relayStateType: Input<string | undefined>`

Inherited from relayStateType

The relay state URL that redirect links to any service in the AWS Management Console.

`sessionDuration: Input<string | undefined>`

Inherited from sessionDuration

The length of time that a user can be signed in to an AWS account.

`tags: Input<Input<TagArgs>[] | undefined>`

Inherited from tags

The tags to attach to the new PermissionSet .