{ "$schema": "https://json-schema.org/draft/2020-12/schema", "$id": "https://raw.githubusercontent.com/api-evangelist/amazon-iam-identity-center/refs/heads/main/json-schema/sso-admin-account-assignment-schema.json", "title": "AccountAssignment", "description": "

The assignment that indicates a principal's limited access to a specified AWS account with a specified permission set.

The term principal here refers to a user or group that is defined in IAM Identity Center.

", "type": "object", "properties": { "AccountId": { "allOf": [ { "$ref": "#/components/schemas/AccountId" }, { "description": "The identifier of the AWS account." } ] }, "PermissionSetArn": { "allOf": [ { "$ref": "#/components/schemas/PermissionSetArn" }, { "description": "The ARN of the permission set. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference." } ] }, "PrincipalType": { "allOf": [ { "$ref": "#/components/schemas/PrincipalType" }, { "description": "The entity type for which the assignment will be created." } ] }, "PrincipalId": { "allOf": [ { "$ref": "#/components/schemas/PrincipalId" }, { "description": "An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the IAM Identity Center Identity Store API Reference." } ] } } }