GetAccountAssignment gets an existing AccountAssignment resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

GetApplication gets an existing Application resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

GetApplicationAccessScope gets an existing ApplicationAccessScope resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

GetApplicationAssignment gets an existing ApplicationAssignment resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

GetApplicationAssignmentConfiguration gets an existing ApplicationAssignmentConfiguration resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

Data source for managing AWS SSO Admin Application Assignments.

Data source for managing AWS SSO Admin Application Providers.

GetCustomerManagedPolicyAttachment gets an existing CustomerManagedPolicyAttachment resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

GetInstanceAccessControlAttributes gets an existing InstanceAccessControlAttributes resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

Use this data source to get ARNs and Identity Store IDs of Single Sign-On (SSO) Instances.

GetManagedPolicyAttachment gets an existing ManagedPolicyAttachment resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

GetPermissionsBoundaryAttachment gets an existing PermissionsBoundaryAttachment resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

GetPermissionSet gets an existing PermissionSet resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

GetPermissionSetInlinePolicy gets an existing PermissionSetInlinePolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

Data source returning the ARN of all AWS SSO Admin Permission Sets.

Data source for viewing AWS SSO Admin Principal Application Assignments.

GetTrustedTokenIssuer gets an existing TrustedTokenIssuer resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

Data source for managing an AWS SSO Admin Application.

Use this data source to get a Single Sign-On (SSO) Permission Set.

NewAccountAssignment registers a new resource with the given unique name, arguments, and options.

NewApplication registers a new resource with the given unique name, arguments, and options.

NewApplicationAccessScope registers a new resource with the given unique name, arguments, and options.

NewApplicationAssignment registers a new resource with the given unique name, arguments, and options.

NewApplicationAssignmentConfiguration registers a new resource with the given unique name, arguments, and options.

NewCustomerManagedPolicyAttachment registers a new resource with the given unique name, arguments, and options.

NewInstanceAccessControlAttributes registers a new resource with the given unique name, arguments, and options.

NewManagedPolicyAttachment registers a new resource with the given unique name, arguments, and options.

NewPermissionsBoundaryAttachment registers a new resource with the given unique name, arguments, and options.

NewPermissionSet registers a new resource with the given unique name, arguments, and options.

NewPermissionSetInlinePolicy registers a new resource with the given unique name, arguments, and options.

NewTrustedTokenIssuer registers a new resource with the given unique name, arguments, and options.

Provides a Single Sign-On (SSO) Account Assignment resource ## Example Usage ### Basic Usage ```go package main import ( "github.com/pulumi/pulumi-aws/sdk/v6/go/aws/identitystore" "github.com/pulumi/pulumi-aws/sdk/v6/go/aws/ssoadmin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { example, err := ssoadmin.GetInstances(ctx, map[string]interface{}{}, nil) if err != nil { return err } exampleGetPermissionSet, err := ssoadmin.LookupPermissionSet(ctx, &ssoadmin.LookupPermissionSetArgs{ InstanceArn: example.Arns[0], Name: pulumi.StringRef("AWSReadOnlyAccess"), }, nil) if err != nil { return err } exampleGetGroup, err := identitystore.LookupGroup(ctx, &identitystore.LookupGroupArgs{ IdentityStoreId: example.IdentityStoreIds[0], AlternateIdentifier: identitystore.GetGroupAlternateIdentifier{ UniqueAttribute: identitystore.GetGroupAlternateIdentifierUniqueAttribute{ AttributePath: "DisplayName", AttributeValue: "ExampleGroup", }, }, }, nil) if err != nil { return err } _, err = ssoadmin.NewAccountAssignment(ctx, "example", &ssoadmin.AccountAssignmentArgs{ InstanceArn: pulumi.String(example.Arns[0]), PermissionSetArn: pulumi.String(exampleGetPermissionSet.Arn), PrincipalId: pulumi.String(exampleGetGroup.GroupId), PrincipalType: pulumi.String("GROUP"), TargetId: pulumi.String("123456789012"), TargetType: pulumi.String("AWS_ACCOUNT"), }) if err != nil { return err } return nil }) } ``` ### With Managed Policy Attachment > Because destruction of a managed policy attachment resource also re-provisions the associated permission set to all accounts, explicitly indicating the dependency with the account assignment resource via the `dependsOn` meta argument is necessary to ensure proper deletion order when these resources are used together.

The set of arguments for constructing a AccountAssignment resource.

Resource for managing an AWS SSO Admin Application.

Resource for managing an AWS SSO Admin Application Access Scope.

The set of arguments for constructing a ApplicationAccessScope resource.

The set of arguments for constructing a Application resource.

Resource for managing an AWS SSO Admin Application Assignment.

The set of arguments for constructing a ApplicationAssignment resource.

Resource for managing an AWS SSO Admin Application Assignment Configuration.

The set of arguments for constructing a ApplicationAssignmentConfiguration resource.

Provides a customer managed policy attachment for a Single Sign-On (SSO) Permission Set resource > **NOTE:** Creating this resource will automatically [Provision the Permission Set](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ProvisionPermissionSet.html) to apply the corresponding updates to all assigned accounts.

The set of arguments for constructing a CustomerManagedPolicyAttachment resource.

A collection of arguments for invoking getApplicationAssignments.

A collection of arguments for invoking getApplicationAssignments.

A collection of values returned by getApplicationAssignments.

A collection of values returned by getApplicationAssignments.

A collection of arguments for invoking getApplicationProviders.

A collection of arguments for invoking getApplicationProviders.

A collection of values returned by getApplicationProviders.

A collection of values returned by getApplicationProviders.

A collection of values returned by getInstances.

A collection of values returned by getInstances.

A collection of arguments for invoking getPermissionSets.

A collection of arguments for invoking getPermissionSets.

A collection of values returned by getPermissionSets.

A collection of values returned by getPermissionSets.

A collection of arguments for invoking getPrincipalApplicationAssignments.

A collection of arguments for invoking getPrincipalApplicationAssignments.

A collection of values returned by getPrincipalApplicationAssignments.

A collection of values returned by getPrincipalApplicationAssignments.

Provides a Single Sign-On (SSO) ABAC Resource: https://docs.aws.amazon.com/singlesignon/latest/userguide/abac.html ## Example Usage ```go package main import ( "github.com/pulumi/pulumi-aws/sdk/v6/go/aws/ssoadmin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { example, err := ssoadmin.GetInstances(ctx, map[string]interface{}{}, nil) if err != nil { return err } _, err = ssoadmin.NewInstanceAccessControlAttributes(ctx, "example", &ssoadmin.InstanceAccessControlAttributesArgs{ InstanceArn: pulumi.String(example.Arns[0]), Attributes: ssoadmin.InstanceAccessControlAttributesAttributeArray{ &ssoadmin.InstanceAccessControlAttributesAttributeArgs{ Key: pulumi.String("name"), Values: ssoadmin.InstanceAccessControlAttributesAttributeValueArray{ &ssoadmin.InstanceAccessControlAttributesAttributeValueArgs{ Sources: pulumi.StringArray{ pulumi.String("${path:name.givenName}"), }, }, }, }, &ssoadmin.InstanceAccessControlAttributesAttributeArgs{ Key: pulumi.String("last"), Values: ssoadmin.InstanceAccessControlAttributesAttributeValueArray{ &ssoadmin.InstanceAccessControlAttributesAttributeValueArgs{ Sources: pulumi.StringArray{ pulumi.String("${path:name.familyName}"), }, }, }, }, }, }) if err != nil { return err } return nil }) } ``` ## Import Using `pulumi import`, import SSO Account Assignments using the `instance_arn`.

The set of arguments for constructing a InstanceAccessControlAttributes resource.

A collection of arguments for invoking getApplication.

A collection of arguments for invoking getApplication.

A collection of values returned by getApplication.

A collection of values returned by getApplication.

A collection of arguments for invoking getPermissionSet.

A collection of arguments for invoking getPermissionSet.

A collection of values returned by getPermissionSet.

A collection of values returned by getPermissionSet.

Provides an IAM managed policy for a Single Sign-On (SSO) Permission Set resource > **NOTE:** Creating this resource will automatically [Provision the Permission Set](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ProvisionPermissionSet.html) to apply the corresponding updates to all assigned accounts.

The set of arguments for constructing a ManagedPolicyAttachment resource.

Attaches a permissions boundary policy to a Single Sign-On (SSO) Permission Set resource.

The set of arguments for constructing a PermissionsBoundaryAttachment resource.

Provides a Single Sign-On (SSO) Permission Set resource > **NOTE:** Updating this resource will automatically [Provision the Permission Set](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ProvisionPermissionSet.html) to apply the corresponding updates to all assigned accounts.

The set of arguments for constructing a PermissionSet resource.

## Example Usage ```go package main import ( "github.com/pulumi/pulumi-aws/sdk/v6/go/aws/iam" "github.com/pulumi/pulumi-aws/sdk/v6/go/aws/ssoadmin" "github.com/pulumi/pulumi/sdk/v3/go/pulumi" ) func main() { pulumi.Run(func(ctx *pulumi.Context) error { example, err := ssoadmin.GetInstances(ctx, map[string]interface{}{}, nil) if err != nil { return err } examplePermissionSet, err := ssoadmin.NewPermissionSet(ctx, "example", &ssoadmin.PermissionSetArgs{ Name: pulumi.String("Example"), InstanceArn: pulumi.String(example.Arns[0]), }) if err != nil { return err } exampleGetPolicyDocument, err := iam.GetPolicyDocument(ctx, &iam.GetPolicyDocumentArgs{ Statements: []iam.GetPolicyDocumentStatement{ { Sid: pulumi.StringRef("1"), Actions: []string{ "s3:ListAllMyBuckets", "s3:GetBucketLocation", }, Resources: []string{ "arn:aws:s3:::*", }, }, }, }, nil) if err != nil { return err } _, err = ssoadmin.NewPermissionSetInlinePolicy(ctx, "example", &ssoadmin.PermissionSetInlinePolicyArgs{ InlinePolicy: pulumi.String(exampleGetPolicyDocument.Json), InstanceArn: pulumi.String(example.Arns[0]), PermissionSetArn: examplePermissionSet.Arn, }) if err != nil { return err } return nil }) } ``` ## Import Using `pulumi import`, import SSO Permission Set Inline Policies using the `permission_set_arn` and `instance_arn` separated by a comma (`,`).

The set of arguments for constructing a PermissionSetInlinePolicy resource.

Resource for managing an AWS SSO Admin Trusted Token Issuer.

The set of arguments for constructing a TrustedTokenIssuer resource.

AccountAssignmentArrayInput is an input type that accepts AccountAssignmentArray and AccountAssignmentArrayOutput values.

AccountAssignmentMapInput is an input type that accepts AccountAssignmentMap and AccountAssignmentMapOutput values.

ApplicationAccessScopeArrayInput is an input type that accepts ApplicationAccessScopeArray and ApplicationAccessScopeArrayOutput values.

ApplicationAccessScopeMapInput is an input type that accepts ApplicationAccessScopeMap and ApplicationAccessScopeMapOutput values.

ApplicationArrayInput is an input type that accepts ApplicationArray and ApplicationArrayOutput values.

ApplicationAssignmentArrayInput is an input type that accepts ApplicationAssignmentArray and ApplicationAssignmentArrayOutput values.

ApplicationAssignmentConfigurationArrayInput is an input type that accepts ApplicationAssignmentConfigurationArray and ApplicationAssignmentConfigurationArrayOutput values.

ApplicationAssignmentConfigurationMapInput is an input type that accepts ApplicationAssignmentConfigurationMap and ApplicationAssignmentConfigurationMapOutput values.

ApplicationAssignmentMapInput is an input type that accepts ApplicationAssignmentMap and ApplicationAssignmentMapOutput values.

ApplicationMapInput is an input type that accepts ApplicationMap and ApplicationMapOutput values.

ApplicationPortalOptionsInput is an input type that accepts ApplicationPortalOptionsArgs and ApplicationPortalOptionsOutput values.

ApplicationPortalOptionsPtrInput is an input type that accepts ApplicationPortalOptionsArgs, ApplicationPortalOptionsPtr and ApplicationPortalOptionsPtrOutput values.

ApplicationPortalOptionsSignInOptionsInput is an input type that accepts ApplicationPortalOptionsSignInOptionsArgs and ApplicationPortalOptionsSignInOptionsOutput values.

ApplicationPortalOptionsSignInOptionsPtrInput is an input type that accepts ApplicationPortalOptionsSignInOptionsArgs, ApplicationPortalOptionsSignInOptionsPtr and ApplicationPortalOptionsSignInOptionsPtrOutput values.

CustomerManagedPolicyAttachmentArrayInput is an input type that accepts CustomerManagedPolicyAttachmentArray and CustomerManagedPolicyAttachmentArrayOutput values.

CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceInput is an input type that accepts CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceArgs and CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceOutput values.

CustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrInput is an input type that accepts CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceArgs, CustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtr and CustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrOutput values.

CustomerManagedPolicyAttachmentMapInput is an input type that accepts CustomerManagedPolicyAttachmentMap and CustomerManagedPolicyAttachmentMapOutput values.

GetApplicationAssignmentsApplicationAssignmentArrayInput is an input type that accepts GetApplicationAssignmentsApplicationAssignmentArray and GetApplicationAssignmentsApplicationAssignmentArrayOutput values.

GetApplicationAssignmentsApplicationAssignmentInput is an input type that accepts GetApplicationAssignmentsApplicationAssignmentArgs and GetApplicationAssignmentsApplicationAssignmentOutput values.

GetApplicationPortalOptionArrayInput is an input type that accepts GetApplicationPortalOptionArray and GetApplicationPortalOptionArrayOutput values.

GetApplicationPortalOptionInput is an input type that accepts GetApplicationPortalOptionArgs and GetApplicationPortalOptionOutput values.

GetApplicationPortalOptionSignInOptionArrayInput is an input type that accepts GetApplicationPortalOptionSignInOptionArray and GetApplicationPortalOptionSignInOptionArrayOutput values.

GetApplicationPortalOptionSignInOptionInput is an input type that accepts GetApplicationPortalOptionSignInOptionArgs and GetApplicationPortalOptionSignInOptionOutput values.

GetApplicationProvidersApplicationProviderArrayInput is an input type that accepts GetApplicationProvidersApplicationProviderArray and GetApplicationProvidersApplicationProviderArrayOutput values.

GetApplicationProvidersApplicationProviderDisplayDataArrayInput is an input type that accepts GetApplicationProvidersApplicationProviderDisplayDataArray and GetApplicationProvidersApplicationProviderDisplayDataArrayOutput values.

GetApplicationProvidersApplicationProviderDisplayDataInput is an input type that accepts GetApplicationProvidersApplicationProviderDisplayDataArgs and GetApplicationProvidersApplicationProviderDisplayDataOutput values.

GetApplicationProvidersApplicationProviderInput is an input type that accepts GetApplicationProvidersApplicationProviderArgs and GetApplicationProvidersApplicationProviderOutput values.

GetPrincipalApplicationAssignmentsApplicationAssignmentArrayInput is an input type that accepts GetPrincipalApplicationAssignmentsApplicationAssignmentArray and GetPrincipalApplicationAssignmentsApplicationAssignmentArrayOutput values.

GetPrincipalApplicationAssignmentsApplicationAssignmentInput is an input type that accepts GetPrincipalApplicationAssignmentsApplicationAssignmentArgs and GetPrincipalApplicationAssignmentsApplicationAssignmentOutput values.

InstanceAccessControlAttributesArrayInput is an input type that accepts InstanceAccessControlAttributesArray and InstanceAccessControlAttributesArrayOutput values.

InstanceAccessControlAttributesAttributeArrayInput is an input type that accepts InstanceAccessControlAttributesAttributeArray and InstanceAccessControlAttributesAttributeArrayOutput values.

InstanceAccessControlAttributesAttributeInput is an input type that accepts InstanceAccessControlAttributesAttributeArgs and InstanceAccessControlAttributesAttributeOutput values.

InstanceAccessControlAttributesAttributeValueArrayInput is an input type that accepts InstanceAccessControlAttributesAttributeValueArray and InstanceAccessControlAttributesAttributeValueArrayOutput values.

InstanceAccessControlAttributesAttributeValueInput is an input type that accepts InstanceAccessControlAttributesAttributeValueArgs and InstanceAccessControlAttributesAttributeValueOutput values.

InstanceAccessControlAttributesMapInput is an input type that accepts InstanceAccessControlAttributesMap and InstanceAccessControlAttributesMapOutput values.

ManagedPolicyAttachmentArrayInput is an input type that accepts ManagedPolicyAttachmentArray and ManagedPolicyAttachmentArrayOutput values.

ManagedPolicyAttachmentMapInput is an input type that accepts ManagedPolicyAttachmentMap and ManagedPolicyAttachmentMapOutput values.

PermissionsBoundaryAttachmentArrayInput is an input type that accepts PermissionsBoundaryAttachmentArray and PermissionsBoundaryAttachmentArrayOutput values.

PermissionsBoundaryAttachmentMapInput is an input type that accepts PermissionsBoundaryAttachmentMap and PermissionsBoundaryAttachmentMapOutput values.

PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceInput is an input type that accepts PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceArgs and PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceOutput values.

PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferencePtrInput is an input type that accepts PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceArgs, PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferencePtr and PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferencePtrOutput values.

PermissionsBoundaryAttachmentPermissionsBoundaryInput is an input type that accepts PermissionsBoundaryAttachmentPermissionsBoundaryArgs and PermissionsBoundaryAttachmentPermissionsBoundaryOutput values.

PermissionsBoundaryAttachmentPermissionsBoundaryPtrInput is an input type that accepts PermissionsBoundaryAttachmentPermissionsBoundaryArgs, PermissionsBoundaryAttachmentPermissionsBoundaryPtr and PermissionsBoundaryAttachmentPermissionsBoundaryPtrOutput values.

PermissionSetArrayInput is an input type that accepts PermissionSetArray and PermissionSetArrayOutput values.

PermissionSetInlinePolicyArrayInput is an input type that accepts PermissionSetInlinePolicyArray and PermissionSetInlinePolicyArrayOutput values.

PermissionSetInlinePolicyMapInput is an input type that accepts PermissionSetInlinePolicyMap and PermissionSetInlinePolicyMapOutput values.

PermissionSetMapInput is an input type that accepts PermissionSetMap and PermissionSetMapOutput values.

TrustedTokenIssuerArrayInput is an input type that accepts TrustedTokenIssuerArray and TrustedTokenIssuerArrayOutput values.

TrustedTokenIssuerMapInput is an input type that accepts TrustedTokenIssuerMap and TrustedTokenIssuerMapOutput values.

TrustedTokenIssuerTrustedTokenIssuerConfigurationInput is an input type that accepts TrustedTokenIssuerTrustedTokenIssuerConfigurationArgs and TrustedTokenIssuerTrustedTokenIssuerConfigurationOutput values.

TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationInput is an input type that accepts TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationArgs and TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationOutput values.

TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrInput is an input type that accepts TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationArgs, TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtr and TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrOutput values.

TrustedTokenIssuerTrustedTokenIssuerConfigurationPtrInput is an input type that accepts TrustedTokenIssuerTrustedTokenIssuerConfigurationArgs, TrustedTokenIssuerTrustedTokenIssuerConfigurationPtr and TrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutput values.