{ "uuid": "57f56a1d-4631-4153-9990-440679786e8c", "lastMigration": 29, "name": "AWS Single Sign-On Admin", "endpointPrefix": "", "latency": 0, "port": 3000, "hostname": "", "routes": [ { "uuid": "e7b53b08-8632-452a-a080-471f228447e8", "documentation": "
Attaches an IAM managed policy ARN to a permission set.
If the permission set is already referenced by one or more account assignments, you will need to call ProvisionPermissionSet
after this operation. Calling ProvisionPermissionSet
applies the corresponding IAM policy updates to all assigned accounts.
Assigns access to a principal for a specified Amazon Web Services account using a specified permission set.
The term principal here refers to a user or group that is defined in Amazon Web Services SSO.
As part of a successful CreateAccountAssignment
call, the specified permission set will automatically be provisioned to the account in the form of an IAM policy. That policy is attached to the SSO-created IAM role. If the permission set is subsequently updated, the corresponding IAM policies attached to roles in your accounts will not be updated automatically. In this case, you must call ProvisionPermissionSet
to make these updates.
Creates a permission set within a specified SSO instance.
To grant users and groups access to Amazon Web Services account resources, use CreateAccountAssignment
.
Attaches an IAM inline policy to a permission set.
If the permission set is already referenced by one or more account assignments, you will need to call ProvisionPermissionSet
after this action to apply the corresponding IAM policy updates to all assigned accounts.