Skip to content

awscc.sso.permission_set

CloudFormation Type: AWS::SSO::PermissionSet

Resource Type definition for SSO PermissionSet

Argument Reference

customer_managed_policy_references

description

  • Type: String(pattern, len: 1..=700)
  • Required: No

The permission set description.

inline_policy

  • Type: Map(String)
  • Required: No

The inline policy to put in permission set.

instance_arn

  • Type: Arn
  • Required: Yes
  • Create-only: Yes

The sso instance arn that the permission set is owned.

managed_policies

  • Type: List<String> (items: ..=20)
  • Required: No

name

  • Type: String(pattern, len: 1..=32)
  • Required: Yes
  • Create-only: Yes

The name you want to assign to this permission set.

permissions_boundary

relay_state_type

  • Type: String(pattern, len: 1..=240)
  • Required: No

The relay state URL that redirect links to any service in the AWS Management Console.

session_duration

  • Type: String(pattern, len: 1..=100)
  • Required: No

The length of time that a user can be signed in to an AWS account.

tags

  • Type: Map(String)
  • Required: No

Struct Definitions

CustomerManagedPolicyReference

FieldTypeRequiredDescription
nameString(pattern, len: 1..=128)Yes
pathString(pattern, len: 1..=512)No

PermissionsBoundary

FieldTypeRequiredDescription
customer_managed_policy_referenceStruct(CustomerManagedPolicyReference)No
managed_policy_arnArnNo

Attribute Reference

permission_set_arn

  • Type: Arn

The permission set that the policy will be attached to