ssoadmin

package
v7.1.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jul 21, 2025 License: Apache-2.0 Imports: 7 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type AccountAssignment

type AccountAssignment struct {
	pulumi.CustomResourceState

	// The Amazon Resource Name (ARN) of the SSO Instance.
	InstanceArn pulumi.StringOutput `pulumi:"instanceArn"`
	// The Amazon Resource Name (ARN) of the Permission Set that the admin wants to grant the principal access to.
	PermissionSetArn pulumi.StringOutput `pulumi:"permissionSetArn"`
	// An identifier for an object in SSO, such as a user or group. PrincipalIds are GUIDs (For example, `f81d4fae-7dec-11d0-a765-00a0c91e6bf6`).
	PrincipalId pulumi.StringOutput `pulumi:"principalId"`
	// The entity type for which the assignment will be created. Valid values: `USER`, `GROUP`.
	PrincipalType pulumi.StringOutput `pulumi:"principalType"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
	// An AWS account identifier, typically a 10-12 digit string.
	TargetId pulumi.StringOutput `pulumi:"targetId"`
	// The entity type for which the assignment will be created. Valid values: `AWS_ACCOUNT`.
	TargetType pulumi.StringPtrOutput `pulumi:"targetType"`
}

Provides a Single Sign-On (SSO) Account Assignment resource

## Example Usage

### Basic Usage

```go package main

import (

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/identitystore"
"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ssoadmin"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := ssoadmin.GetInstances(ctx, &ssoadmin.GetInstancesArgs{}, nil)
		if err != nil {
			return err
		}
		exampleGetPermissionSet, err := ssoadmin.LookupPermissionSet(ctx, &ssoadmin.LookupPermissionSetArgs{
			InstanceArn: example.Arns[0],
			Name:        pulumi.StringRef("AWSReadOnlyAccess"),
		}, nil)
		if err != nil {
			return err
		}
		exampleGetGroup, err := identitystore.LookupGroup(ctx, &identitystore.LookupGroupArgs{
			IdentityStoreId: example.IdentityStoreIds[0],
			AlternateIdentifier: identitystore.GetGroupAlternateIdentifier{
				UniqueAttribute: identitystore.GetGroupAlternateIdentifierUniqueAttribute{
					AttributePath:  "DisplayName",
					AttributeValue: "ExampleGroup",
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = ssoadmin.NewAccountAssignment(ctx, "example", &ssoadmin.AccountAssignmentArgs{
			InstanceArn:      pulumi.String(example.Arns[0]),
			PermissionSetArn: pulumi.String(exampleGetPermissionSet.Arn),
			PrincipalId:      pulumi.String(exampleGetGroup.GroupId),
			PrincipalType:    pulumi.String("GROUP"),
			TargetId:         pulumi.String("123456789012"),
			TargetType:       pulumi.String("AWS_ACCOUNT"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

### With Managed Policy Attachment

> Because destruction of a managed policy attachment resource also re-provisions the associated permission set to all accounts, explicitly indicating the dependency with the account assignment resource via the `dependsOn` meta argument is necessary to ensure proper deletion order when these resources are used together.

```go package main

import (

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/identitystore"
"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ssoadmin"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := ssoadmin.GetInstances(ctx, &ssoadmin.GetInstancesArgs{}, nil)
		if err != nil {
			return err
		}
		examplePermissionSet, err := ssoadmin.NewPermissionSet(ctx, "example", &ssoadmin.PermissionSetArgs{
			Name:        pulumi.String("Example"),
			InstanceArn: pulumi.String(example.Arns[0]),
		})
		if err != nil {
			return err
		}
		exampleGroup, err := identitystore.NewGroup(ctx, "example", &identitystore.GroupArgs{
			IdentityStoreId: pulumi.String(example.IdentityStoreIds[0]),
			DisplayName:     pulumi.String("Admin"),
			Description:     pulumi.String("Admin Group"),
		})
		if err != nil {
			return err
		}
		_, err = ssoadmin.NewAccountAssignment(ctx, "account_assignment", &ssoadmin.AccountAssignmentArgs{
			InstanceArn:      pulumi.String(example.Arns[0]),
			PermissionSetArn: examplePermissionSet.Arn,
			PrincipalId:      exampleGroup.GroupId,
			PrincipalType:    pulumi.String("GROUP"),
			TargetId:         pulumi.String("123456789012"),
			TargetType:       pulumi.String("AWS_ACCOUNT"),
		})
		if err != nil {
			return err
		}
		_, err = ssoadmin.NewManagedPolicyAttachment(ctx, "example", &ssoadmin.ManagedPolicyAttachmentArgs{
			InstanceArn:      pulumi.String(example.Arns[0]),
			ManagedPolicyArn: pulumi.String("arn:aws:iam::aws:policy/AlexaForBusinessDeviceSetup"),
			PermissionSetArn: examplePermissionSet.Arn,
		}, pulumi.DependsOn([]pulumi.Resource{
			exampleAwsSsoadminAccountAssignment,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Using `pulumi import`, import SSO Account Assignments using the `principal_id`, `principal_type`, `target_id`, `target_type`, `permission_set_arn`, `instance_arn` separated by commas (`,`). For example:

```sh $ pulumi import aws:ssoadmin/accountAssignment:AccountAssignment example f81d4fae-7dec-11d0-a765-00a0c91e6bf6,GROUP,1234567890,AWS_ACCOUNT,arn:aws:sso:::permissionSet/ssoins-0123456789abcdef/ps-0123456789abcdef,arn:aws:sso:::instance/ssoins-0123456789abcdef ```

func GetAccountAssignment

func GetAccountAssignment(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *AccountAssignmentState, opts ...pulumi.ResourceOption) (*AccountAssignment, error)

GetAccountAssignment gets an existing AccountAssignment resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewAccountAssignment

func NewAccountAssignment(ctx *pulumi.Context,
	name string, args *AccountAssignmentArgs, opts ...pulumi.ResourceOption) (*AccountAssignment, error)

NewAccountAssignment registers a new resource with the given unique name, arguments, and options.

func (*AccountAssignment) ElementType

func (*AccountAssignment) ElementType() reflect.Type

func (*AccountAssignment) ToAccountAssignmentOutput

func (i *AccountAssignment) ToAccountAssignmentOutput() AccountAssignmentOutput

func (*AccountAssignment) ToAccountAssignmentOutputWithContext

func (i *AccountAssignment) ToAccountAssignmentOutputWithContext(ctx context.Context) AccountAssignmentOutput

type AccountAssignmentArgs

type AccountAssignmentArgs struct {
	// The Amazon Resource Name (ARN) of the SSO Instance.
	InstanceArn pulumi.StringInput
	// The Amazon Resource Name (ARN) of the Permission Set that the admin wants to grant the principal access to.
	PermissionSetArn pulumi.StringInput
	// An identifier for an object in SSO, such as a user or group. PrincipalIds are GUIDs (For example, `f81d4fae-7dec-11d0-a765-00a0c91e6bf6`).
	PrincipalId pulumi.StringInput
	// The entity type for which the assignment will be created. Valid values: `USER`, `GROUP`.
	PrincipalType pulumi.StringInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// An AWS account identifier, typically a 10-12 digit string.
	TargetId pulumi.StringInput
	// The entity type for which the assignment will be created. Valid values: `AWS_ACCOUNT`.
	TargetType pulumi.StringPtrInput
}

The set of arguments for constructing a AccountAssignment resource.

func (AccountAssignmentArgs) ElementType

func (AccountAssignmentArgs) ElementType() reflect.Type

type AccountAssignmentArray

type AccountAssignmentArray []AccountAssignmentInput

func (AccountAssignmentArray) ElementType

func (AccountAssignmentArray) ElementType() reflect.Type

func (AccountAssignmentArray) ToAccountAssignmentArrayOutput

func (i AccountAssignmentArray) ToAccountAssignmentArrayOutput() AccountAssignmentArrayOutput

func (AccountAssignmentArray) ToAccountAssignmentArrayOutputWithContext

func (i AccountAssignmentArray) ToAccountAssignmentArrayOutputWithContext(ctx context.Context) AccountAssignmentArrayOutput

type AccountAssignmentArrayInput

type AccountAssignmentArrayInput interface {
	pulumi.Input

	ToAccountAssignmentArrayOutput() AccountAssignmentArrayOutput
	ToAccountAssignmentArrayOutputWithContext(context.Context) AccountAssignmentArrayOutput
}

AccountAssignmentArrayInput is an input type that accepts AccountAssignmentArray and AccountAssignmentArrayOutput values. You can construct a concrete instance of `AccountAssignmentArrayInput` via:

AccountAssignmentArray{ AccountAssignmentArgs{...} }

type AccountAssignmentArrayOutput

type AccountAssignmentArrayOutput struct{ *pulumi.OutputState }

func (AccountAssignmentArrayOutput) ElementType

func (AccountAssignmentArrayOutput) Index

func (AccountAssignmentArrayOutput) ToAccountAssignmentArrayOutput

func (o AccountAssignmentArrayOutput) ToAccountAssignmentArrayOutput() AccountAssignmentArrayOutput

func (AccountAssignmentArrayOutput) ToAccountAssignmentArrayOutputWithContext

func (o AccountAssignmentArrayOutput) ToAccountAssignmentArrayOutputWithContext(ctx context.Context) AccountAssignmentArrayOutput

type AccountAssignmentInput

type AccountAssignmentInput interface {
	pulumi.Input

	ToAccountAssignmentOutput() AccountAssignmentOutput
	ToAccountAssignmentOutputWithContext(ctx context.Context) AccountAssignmentOutput
}

type AccountAssignmentMap

type AccountAssignmentMap map[string]AccountAssignmentInput

func (AccountAssignmentMap) ElementType

func (AccountAssignmentMap) ElementType() reflect.Type

func (AccountAssignmentMap) ToAccountAssignmentMapOutput

func (i AccountAssignmentMap) ToAccountAssignmentMapOutput() AccountAssignmentMapOutput

func (AccountAssignmentMap) ToAccountAssignmentMapOutputWithContext

func (i AccountAssignmentMap) ToAccountAssignmentMapOutputWithContext(ctx context.Context) AccountAssignmentMapOutput

type AccountAssignmentMapInput

type AccountAssignmentMapInput interface {
	pulumi.Input

	ToAccountAssignmentMapOutput() AccountAssignmentMapOutput
	ToAccountAssignmentMapOutputWithContext(context.Context) AccountAssignmentMapOutput
}

AccountAssignmentMapInput is an input type that accepts AccountAssignmentMap and AccountAssignmentMapOutput values. You can construct a concrete instance of `AccountAssignmentMapInput` via:

AccountAssignmentMap{ "key": AccountAssignmentArgs{...} }

type AccountAssignmentMapOutput

type AccountAssignmentMapOutput struct{ *pulumi.OutputState }

func (AccountAssignmentMapOutput) ElementType

func (AccountAssignmentMapOutput) ElementType() reflect.Type

func (AccountAssignmentMapOutput) MapIndex

func (AccountAssignmentMapOutput) ToAccountAssignmentMapOutput

func (o AccountAssignmentMapOutput) ToAccountAssignmentMapOutput() AccountAssignmentMapOutput

func (AccountAssignmentMapOutput) ToAccountAssignmentMapOutputWithContext

func (o AccountAssignmentMapOutput) ToAccountAssignmentMapOutputWithContext(ctx context.Context) AccountAssignmentMapOutput

type AccountAssignmentOutput

type AccountAssignmentOutput struct{ *pulumi.OutputState }

func (AccountAssignmentOutput) ElementType

func (AccountAssignmentOutput) ElementType() reflect.Type

func (AccountAssignmentOutput) InstanceArn

The Amazon Resource Name (ARN) of the SSO Instance.

func (AccountAssignmentOutput) PermissionSetArn

func (o AccountAssignmentOutput) PermissionSetArn() pulumi.StringOutput

The Amazon Resource Name (ARN) of the Permission Set that the admin wants to grant the principal access to.

func (AccountAssignmentOutput) PrincipalId

An identifier for an object in SSO, such as a user or group. PrincipalIds are GUIDs (For example, `f81d4fae-7dec-11d0-a765-00a0c91e6bf6`).

func (AccountAssignmentOutput) PrincipalType

func (o AccountAssignmentOutput) PrincipalType() pulumi.StringOutput

The entity type for which the assignment will be created. Valid values: `USER`, `GROUP`.

func (AccountAssignmentOutput) Region

Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

func (AccountAssignmentOutput) TargetId

An AWS account identifier, typically a 10-12 digit string.

func (AccountAssignmentOutput) TargetType

The entity type for which the assignment will be created. Valid values: `AWS_ACCOUNT`.

func (AccountAssignmentOutput) ToAccountAssignmentOutput

func (o AccountAssignmentOutput) ToAccountAssignmentOutput() AccountAssignmentOutput

func (AccountAssignmentOutput) ToAccountAssignmentOutputWithContext

func (o AccountAssignmentOutput) ToAccountAssignmentOutputWithContext(ctx context.Context) AccountAssignmentOutput

type AccountAssignmentState

type AccountAssignmentState struct {
	// The Amazon Resource Name (ARN) of the SSO Instance.
	InstanceArn pulumi.StringPtrInput
	// The Amazon Resource Name (ARN) of the Permission Set that the admin wants to grant the principal access to.
	PermissionSetArn pulumi.StringPtrInput
	// An identifier for an object in SSO, such as a user or group. PrincipalIds are GUIDs (For example, `f81d4fae-7dec-11d0-a765-00a0c91e6bf6`).
	PrincipalId pulumi.StringPtrInput
	// The entity type for which the assignment will be created. Valid values: `USER`, `GROUP`.
	PrincipalType pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// An AWS account identifier, typically a 10-12 digit string.
	TargetId pulumi.StringPtrInput
	// The entity type for which the assignment will be created. Valid values: `AWS_ACCOUNT`.
	TargetType pulumi.StringPtrInput
}

func (AccountAssignmentState) ElementType

func (AccountAssignmentState) ElementType() reflect.Type

type Application

type Application struct {
	pulumi.CustomResourceState

	// AWS account ID.
	ApplicationAccount pulumi.StringOutput `pulumi:"applicationAccount"`
	// (**Deprecated** Reference `arn` instead) ARN of the application.
	//
	// Deprecated: Use 'arn' instead. This attribute will be removed in a future verion of the provider.
	ApplicationArn pulumi.StringOutput `pulumi:"applicationArn"`
	// ARN of the application provider.
	ApplicationProviderArn pulumi.StringOutput `pulumi:"applicationProviderArn"`
	// ARN of the application.
	Arn pulumi.StringOutput `pulumi:"arn"`
	// A unique, case-sensitive ID that you provide to ensure the idempotency of the request. AWS generates a random value when not provided.
	ClientToken pulumi.StringPtrOutput `pulumi:"clientToken"`
	// Description of the application.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// ARN of the instance of IAM Identity Center.
	InstanceArn pulumi.StringOutput `pulumi:"instanceArn"`
	// Name of the application.
	//
	// The following arguments are optional:
	Name pulumi.StringOutput `pulumi:"name"`
	// Options for the portal associated with an application. See `portalOptions` below.
	PortalOptions ApplicationPortalOptionsPtrOutput `pulumi:"portalOptions"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
	// Status of the application. Valid values are `ENABLED` and `DISABLED`.
	Status pulumi.StringOutput `pulumi:"status"`
	// Key-value mapping of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapOutput `pulumi:"tags"`
	// Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	TagsAll pulumi.StringMapOutput `pulumi:"tagsAll"`
}

Resource for managing an AWS SSO Admin Application.

> The `CreateApplication` API only supports custom OAuth 2.0 applications. Creation of 3rd party SAML or OAuth 2.0 applications require setup to be done through the associated app service or AWS console. See this issue for additional context.

## Example Usage

### Basic Usage

```go package main

import (

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ssoadmin"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := ssoadmin.GetInstances(ctx, &ssoadmin.GetInstancesArgs{}, nil)
		if err != nil {
			return err
		}
		_, err = ssoadmin.NewApplication(ctx, "example", &ssoadmin.ApplicationArgs{
			Name:                   pulumi.String("example"),
			ApplicationProviderArn: pulumi.String("arn:aws:sso::aws:applicationProvider/custom"),
			InstanceArn:            pulumi.String(example.Arns[0]),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

### With Portal Options

```go package main

import (

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ssoadmin"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := ssoadmin.GetInstances(ctx, &ssoadmin.GetInstancesArgs{}, nil)
		if err != nil {
			return err
		}
		_, err = ssoadmin.NewApplication(ctx, "example", &ssoadmin.ApplicationArgs{
			Name:                   pulumi.String("example"),
			ApplicationProviderArn: pulumi.String("arn:aws:sso::aws:applicationProvider/custom"),
			InstanceArn:            pulumi.String(example.Arns[0]),
			PortalOptions: &ssoadmin.ApplicationPortalOptionsArgs{
				Visibility: pulumi.String("ENABLED"),
				SignInOptions: &ssoadmin.ApplicationPortalOptionsSignInOptionsArgs{
					ApplicationUrl: pulumi.String("http://example.com"),
					Origin:         pulumi.String("APPLICATION"),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Using `pulumi import`, import SSO Admin Application using the `id`. For example:

```sh $ pulumi import aws:ssoadmin/application:Application example arn:aws:sso::123456789012:application/id-12345678 ```

func GetApplication

func GetApplication(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApplicationState, opts ...pulumi.ResourceOption) (*Application, error)

GetApplication gets an existing Application resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApplication

func NewApplication(ctx *pulumi.Context,
	name string, args *ApplicationArgs, opts ...pulumi.ResourceOption) (*Application, error)

NewApplication registers a new resource with the given unique name, arguments, and options.

func (*Application) ElementType

func (*Application) ElementType() reflect.Type

func (*Application) ToApplicationOutput

func (i *Application) ToApplicationOutput() ApplicationOutput

func (*Application) ToApplicationOutputWithContext

func (i *Application) ToApplicationOutputWithContext(ctx context.Context) ApplicationOutput

type ApplicationAccessScope

type ApplicationAccessScope struct {
	pulumi.CustomResourceState

	// Specifies the ARN of the application with the access scope with the targets to add or update.
	ApplicationArn pulumi.StringOutput `pulumi:"applicationArn"`
	// Specifies an array list of ARNs that represent the authorized targets for this access scope.
	AuthorizedTargets pulumi.StringArrayOutput `pulumi:"authorizedTargets"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
	// Specifies the name of the access scope to be associated with the specified targets.
	//
	// The following arguments are optional:
	Scope pulumi.StringOutput `pulumi:"scope"`
}

Resource for managing an AWS SSO Admin Application Access Scope.

## Example Usage

### Basic Usage

```go package main

import (

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ssoadmin"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := ssoadmin.GetInstances(ctx, &ssoadmin.GetInstancesArgs{}, nil)
		if err != nil {
			return err
		}
		exampleApplication, err := ssoadmin.NewApplication(ctx, "example", &ssoadmin.ApplicationArgs{
			Name:                   pulumi.String("example"),
			ApplicationProviderArn: pulumi.String("arn:aws:sso::aws:applicationProvider/custom"),
			InstanceArn:            pulumi.String(example.Arns[0]),
		})
		if err != nil {
			return err
		}
		_, err = ssoadmin.NewApplicationAccessScope(ctx, "example", &ssoadmin.ApplicationAccessScopeArgs{
			ApplicationArn: exampleApplication.Arn,
			AuthorizedTargets: pulumi.StringArray{
				pulumi.String("arn:aws:sso::123456789012:application/ssoins-123456789012/apl-123456789012"),
			},
			Scope: pulumi.String("sso:account:access"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Using `pulumi import`, import SSO Admin Application Access Scope using the `id`. For example:

```sh $ pulumi import aws:ssoadmin/applicationAccessScope:ApplicationAccessScope example arn:aws:sso::123456789012:application/ssoins-123456789012/apl-123456789012,sso:account:access ```

func GetApplicationAccessScope

func GetApplicationAccessScope(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApplicationAccessScopeState, opts ...pulumi.ResourceOption) (*ApplicationAccessScope, error)

GetApplicationAccessScope gets an existing ApplicationAccessScope resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApplicationAccessScope

func NewApplicationAccessScope(ctx *pulumi.Context,
	name string, args *ApplicationAccessScopeArgs, opts ...pulumi.ResourceOption) (*ApplicationAccessScope, error)

NewApplicationAccessScope registers a new resource with the given unique name, arguments, and options.

func (*ApplicationAccessScope) ElementType

func (*ApplicationAccessScope) ElementType() reflect.Type

func (*ApplicationAccessScope) ToApplicationAccessScopeOutput

func (i *ApplicationAccessScope) ToApplicationAccessScopeOutput() ApplicationAccessScopeOutput

func (*ApplicationAccessScope) ToApplicationAccessScopeOutputWithContext

func (i *ApplicationAccessScope) ToApplicationAccessScopeOutputWithContext(ctx context.Context) ApplicationAccessScopeOutput

type ApplicationAccessScopeArgs

type ApplicationAccessScopeArgs struct {
	// Specifies the ARN of the application with the access scope with the targets to add or update.
	ApplicationArn pulumi.StringInput
	// Specifies an array list of ARNs that represent the authorized targets for this access scope.
	AuthorizedTargets pulumi.StringArrayInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// Specifies the name of the access scope to be associated with the specified targets.
	//
	// The following arguments are optional:
	Scope pulumi.StringInput
}

The set of arguments for constructing a ApplicationAccessScope resource.

func (ApplicationAccessScopeArgs) ElementType

func (ApplicationAccessScopeArgs) ElementType() reflect.Type

type ApplicationAccessScopeArray

type ApplicationAccessScopeArray []ApplicationAccessScopeInput

func (ApplicationAccessScopeArray) ElementType

func (ApplicationAccessScopeArray) ToApplicationAccessScopeArrayOutput

func (i ApplicationAccessScopeArray) ToApplicationAccessScopeArrayOutput() ApplicationAccessScopeArrayOutput

func (ApplicationAccessScopeArray) ToApplicationAccessScopeArrayOutputWithContext

func (i ApplicationAccessScopeArray) ToApplicationAccessScopeArrayOutputWithContext(ctx context.Context) ApplicationAccessScopeArrayOutput

type ApplicationAccessScopeArrayInput

type ApplicationAccessScopeArrayInput interface {
	pulumi.Input

	ToApplicationAccessScopeArrayOutput() ApplicationAccessScopeArrayOutput
	ToApplicationAccessScopeArrayOutputWithContext(context.Context) ApplicationAccessScopeArrayOutput
}

ApplicationAccessScopeArrayInput is an input type that accepts ApplicationAccessScopeArray and ApplicationAccessScopeArrayOutput values. You can construct a concrete instance of `ApplicationAccessScopeArrayInput` via:

ApplicationAccessScopeArray{ ApplicationAccessScopeArgs{...} }

type ApplicationAccessScopeArrayOutput

type ApplicationAccessScopeArrayOutput struct{ *pulumi.OutputState }

func (ApplicationAccessScopeArrayOutput) ElementType

func (ApplicationAccessScopeArrayOutput) Index

func (ApplicationAccessScopeArrayOutput) ToApplicationAccessScopeArrayOutput

func (o ApplicationAccessScopeArrayOutput) ToApplicationAccessScopeArrayOutput() ApplicationAccessScopeArrayOutput

func (ApplicationAccessScopeArrayOutput) ToApplicationAccessScopeArrayOutputWithContext

func (o ApplicationAccessScopeArrayOutput) ToApplicationAccessScopeArrayOutputWithContext(ctx context.Context) ApplicationAccessScopeArrayOutput

type ApplicationAccessScopeInput

type ApplicationAccessScopeInput interface {
	pulumi.Input

	ToApplicationAccessScopeOutput() ApplicationAccessScopeOutput
	ToApplicationAccessScopeOutputWithContext(ctx context.Context) ApplicationAccessScopeOutput
}

type ApplicationAccessScopeMap

type ApplicationAccessScopeMap map[string]ApplicationAccessScopeInput

func (ApplicationAccessScopeMap) ElementType

func (ApplicationAccessScopeMap) ElementType() reflect.Type

func (ApplicationAccessScopeMap) ToApplicationAccessScopeMapOutput

func (i ApplicationAccessScopeMap) ToApplicationAccessScopeMapOutput() ApplicationAccessScopeMapOutput

func (ApplicationAccessScopeMap) ToApplicationAccessScopeMapOutputWithContext

func (i ApplicationAccessScopeMap) ToApplicationAccessScopeMapOutputWithContext(ctx context.Context) ApplicationAccessScopeMapOutput

type ApplicationAccessScopeMapInput

type ApplicationAccessScopeMapInput interface {
	pulumi.Input

	ToApplicationAccessScopeMapOutput() ApplicationAccessScopeMapOutput
	ToApplicationAccessScopeMapOutputWithContext(context.Context) ApplicationAccessScopeMapOutput
}

ApplicationAccessScopeMapInput is an input type that accepts ApplicationAccessScopeMap and ApplicationAccessScopeMapOutput values. You can construct a concrete instance of `ApplicationAccessScopeMapInput` via:

ApplicationAccessScopeMap{ "key": ApplicationAccessScopeArgs{...} }

type ApplicationAccessScopeMapOutput

type ApplicationAccessScopeMapOutput struct{ *pulumi.OutputState }

func (ApplicationAccessScopeMapOutput) ElementType

func (ApplicationAccessScopeMapOutput) MapIndex

func (ApplicationAccessScopeMapOutput) ToApplicationAccessScopeMapOutput

func (o ApplicationAccessScopeMapOutput) ToApplicationAccessScopeMapOutput() ApplicationAccessScopeMapOutput

func (ApplicationAccessScopeMapOutput) ToApplicationAccessScopeMapOutputWithContext

func (o ApplicationAccessScopeMapOutput) ToApplicationAccessScopeMapOutputWithContext(ctx context.Context) ApplicationAccessScopeMapOutput

type ApplicationAccessScopeOutput

type ApplicationAccessScopeOutput struct{ *pulumi.OutputState }

func (ApplicationAccessScopeOutput) ApplicationArn

Specifies the ARN of the application with the access scope with the targets to add or update.

func (ApplicationAccessScopeOutput) AuthorizedTargets

Specifies an array list of ARNs that represent the authorized targets for this access scope.

func (ApplicationAccessScopeOutput) ElementType

func (ApplicationAccessScopeOutput) Region

Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

func (ApplicationAccessScopeOutput) Scope

Specifies the name of the access scope to be associated with the specified targets.

The following arguments are optional:

func (ApplicationAccessScopeOutput) ToApplicationAccessScopeOutput

func (o ApplicationAccessScopeOutput) ToApplicationAccessScopeOutput() ApplicationAccessScopeOutput

func (ApplicationAccessScopeOutput) ToApplicationAccessScopeOutputWithContext

func (o ApplicationAccessScopeOutput) ToApplicationAccessScopeOutputWithContext(ctx context.Context) ApplicationAccessScopeOutput

type ApplicationAccessScopeState

type ApplicationAccessScopeState struct {
	// Specifies the ARN of the application with the access scope with the targets to add or update.
	ApplicationArn pulumi.StringPtrInput
	// Specifies an array list of ARNs that represent the authorized targets for this access scope.
	AuthorizedTargets pulumi.StringArrayInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// Specifies the name of the access scope to be associated with the specified targets.
	//
	// The following arguments are optional:
	Scope pulumi.StringPtrInput
}

func (ApplicationAccessScopeState) ElementType

type ApplicationArgs

type ApplicationArgs struct {
	// ARN of the application provider.
	ApplicationProviderArn pulumi.StringInput
	// A unique, case-sensitive ID that you provide to ensure the idempotency of the request. AWS generates a random value when not provided.
	ClientToken pulumi.StringPtrInput
	// Description of the application.
	Description pulumi.StringPtrInput
	// ARN of the instance of IAM Identity Center.
	InstanceArn pulumi.StringInput
	// Name of the application.
	//
	// The following arguments are optional:
	Name pulumi.StringPtrInput
	// Options for the portal associated with an application. See `portalOptions` below.
	PortalOptions ApplicationPortalOptionsPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// Status of the application. Valid values are `ENABLED` and `DISABLED`.
	Status pulumi.StringPtrInput
	// Key-value mapping of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
}

The set of arguments for constructing a Application resource.

func (ApplicationArgs) ElementType

func (ApplicationArgs) ElementType() reflect.Type

type ApplicationArray

type ApplicationArray []ApplicationInput

func (ApplicationArray) ElementType

func (ApplicationArray) ElementType() reflect.Type

func (ApplicationArray) ToApplicationArrayOutput

func (i ApplicationArray) ToApplicationArrayOutput() ApplicationArrayOutput

func (ApplicationArray) ToApplicationArrayOutputWithContext

func (i ApplicationArray) ToApplicationArrayOutputWithContext(ctx context.Context) ApplicationArrayOutput

type ApplicationArrayInput

type ApplicationArrayInput interface {
	pulumi.Input

	ToApplicationArrayOutput() ApplicationArrayOutput
	ToApplicationArrayOutputWithContext(context.Context) ApplicationArrayOutput
}

ApplicationArrayInput is an input type that accepts ApplicationArray and ApplicationArrayOutput values. You can construct a concrete instance of `ApplicationArrayInput` via:

ApplicationArray{ ApplicationArgs{...} }

type ApplicationArrayOutput

type ApplicationArrayOutput struct{ *pulumi.OutputState }

func (ApplicationArrayOutput) ElementType

func (ApplicationArrayOutput) ElementType() reflect.Type

func (ApplicationArrayOutput) Index

func (ApplicationArrayOutput) ToApplicationArrayOutput

func (o ApplicationArrayOutput) ToApplicationArrayOutput() ApplicationArrayOutput

func (ApplicationArrayOutput) ToApplicationArrayOutputWithContext

func (o ApplicationArrayOutput) ToApplicationArrayOutputWithContext(ctx context.Context) ApplicationArrayOutput

type ApplicationAssignment

type ApplicationAssignment struct {
	pulumi.CustomResourceState

	// ARN of the application.
	ApplicationArn pulumi.StringOutput `pulumi:"applicationArn"`
	// An identifier for an object in IAM Identity Center, such as a user or group.
	PrincipalId pulumi.StringOutput `pulumi:"principalId"`
	// Entity type for which the assignment will be created. Valid values are `USER` or `GROUP`.
	PrincipalType pulumi.StringOutput `pulumi:"principalType"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
}

Resource for managing an AWS SSO Admin Application Assignment.

## Example Usage

### Basic Usage

```go package main

import (

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ssoadmin"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := ssoadmin.NewApplicationAssignment(ctx, "example", &ssoadmin.ApplicationAssignmentArgs{
			ApplicationArn: pulumi.Any(exampleAwsSsoadminApplication.Arn),
			PrincipalId:    pulumi.Any(exampleAwsIdentitystoreUser.UserId),
			PrincipalType:  pulumi.String("USER"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

### Group Type

```go package main

import (

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ssoadmin"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := ssoadmin.NewApplicationAssignment(ctx, "example", &ssoadmin.ApplicationAssignmentArgs{
			ApplicationArn: pulumi.Any(exampleAwsSsoadminApplication.Arn),
			PrincipalId:    pulumi.Any(exampleAwsIdentitystoreGroup.GroupId),
			PrincipalType:  pulumi.String("GROUP"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Using `pulumi import`, import SSO Admin Application Assignment using the `id`. For example:

```sh $ pulumi import aws:ssoadmin/applicationAssignment:ApplicationAssignment example arn:aws:sso::123456789012:application/id-12345678,abcd1234,USER ```

func GetApplicationAssignment

func GetApplicationAssignment(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApplicationAssignmentState, opts ...pulumi.ResourceOption) (*ApplicationAssignment, error)

GetApplicationAssignment gets an existing ApplicationAssignment resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApplicationAssignment

func NewApplicationAssignment(ctx *pulumi.Context,
	name string, args *ApplicationAssignmentArgs, opts ...pulumi.ResourceOption) (*ApplicationAssignment, error)

NewApplicationAssignment registers a new resource with the given unique name, arguments, and options.

func (*ApplicationAssignment) ElementType

func (*ApplicationAssignment) ElementType() reflect.Type

func (*ApplicationAssignment) ToApplicationAssignmentOutput

func (i *ApplicationAssignment) ToApplicationAssignmentOutput() ApplicationAssignmentOutput

func (*ApplicationAssignment) ToApplicationAssignmentOutputWithContext

func (i *ApplicationAssignment) ToApplicationAssignmentOutputWithContext(ctx context.Context) ApplicationAssignmentOutput

type ApplicationAssignmentArgs

type ApplicationAssignmentArgs struct {
	// ARN of the application.
	ApplicationArn pulumi.StringInput
	// An identifier for an object in IAM Identity Center, such as a user or group.
	PrincipalId pulumi.StringInput
	// Entity type for which the assignment will be created. Valid values are `USER` or `GROUP`.
	PrincipalType pulumi.StringInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
}

The set of arguments for constructing a ApplicationAssignment resource.

func (ApplicationAssignmentArgs) ElementType

func (ApplicationAssignmentArgs) ElementType() reflect.Type

type ApplicationAssignmentArray

type ApplicationAssignmentArray []ApplicationAssignmentInput

func (ApplicationAssignmentArray) ElementType

func (ApplicationAssignmentArray) ElementType() reflect.Type

func (ApplicationAssignmentArray) ToApplicationAssignmentArrayOutput

func (i ApplicationAssignmentArray) ToApplicationAssignmentArrayOutput() ApplicationAssignmentArrayOutput

func (ApplicationAssignmentArray) ToApplicationAssignmentArrayOutputWithContext

func (i ApplicationAssignmentArray) ToApplicationAssignmentArrayOutputWithContext(ctx context.Context) ApplicationAssignmentArrayOutput

type ApplicationAssignmentArrayInput

type ApplicationAssignmentArrayInput interface {
	pulumi.Input

	ToApplicationAssignmentArrayOutput() ApplicationAssignmentArrayOutput
	ToApplicationAssignmentArrayOutputWithContext(context.Context) ApplicationAssignmentArrayOutput
}

ApplicationAssignmentArrayInput is an input type that accepts ApplicationAssignmentArray and ApplicationAssignmentArrayOutput values. You can construct a concrete instance of `ApplicationAssignmentArrayInput` via:

ApplicationAssignmentArray{ ApplicationAssignmentArgs{...} }

type ApplicationAssignmentArrayOutput

type ApplicationAssignmentArrayOutput struct{ *pulumi.OutputState }

func (ApplicationAssignmentArrayOutput) ElementType

func (ApplicationAssignmentArrayOutput) Index

func (ApplicationAssignmentArrayOutput) ToApplicationAssignmentArrayOutput

func (o ApplicationAssignmentArrayOutput) ToApplicationAssignmentArrayOutput() ApplicationAssignmentArrayOutput

func (ApplicationAssignmentArrayOutput) ToApplicationAssignmentArrayOutputWithContext

func (o ApplicationAssignmentArrayOutput) ToApplicationAssignmentArrayOutputWithContext(ctx context.Context) ApplicationAssignmentArrayOutput

type ApplicationAssignmentConfiguration

type ApplicationAssignmentConfiguration struct {
	pulumi.CustomResourceState

	// ARN of the application.
	ApplicationArn pulumi.StringOutput `pulumi:"applicationArn"`
	// Indicates whether users must have an explicit assignment to access the application. If `false`, all users have access to the application.
	AssignmentRequired pulumi.BoolOutput `pulumi:"assignmentRequired"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
}

Resource for managing an AWS SSO Admin Application Assignment Configuration.

By default, applications will require users to have an explicit assignment in order to access an application. This resource can be used to adjust this default behavior if necessary.

> Deleting this resource will return the assignment configuration for the application to the default AWS behavior (ie. `assignmentRequired = true`).

## Example Usage

### Basic Usage

```go package main

import (

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ssoadmin"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := ssoadmin.NewApplicationAssignmentConfiguration(ctx, "example", &ssoadmin.ApplicationAssignmentConfigurationArgs{
			ApplicationArn:     pulumi.Any(exampleAwsSsoadminApplication.Arn),
			AssignmentRequired: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Using `pulumi import`, import SSO Admin Application Assignment Configuration using the `id`. For example:

```sh $ pulumi import aws:ssoadmin/applicationAssignmentConfiguration:ApplicationAssignmentConfiguration example arn:aws:sso::123456789012:application/id-12345678 ```

func GetApplicationAssignmentConfiguration

func GetApplicationAssignmentConfiguration(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApplicationAssignmentConfigurationState, opts ...pulumi.ResourceOption) (*ApplicationAssignmentConfiguration, error)

GetApplicationAssignmentConfiguration gets an existing ApplicationAssignmentConfiguration resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApplicationAssignmentConfiguration

func NewApplicationAssignmentConfiguration(ctx *pulumi.Context,
	name string, args *ApplicationAssignmentConfigurationArgs, opts ...pulumi.ResourceOption) (*ApplicationAssignmentConfiguration, error)

NewApplicationAssignmentConfiguration registers a new resource with the given unique name, arguments, and options.

func (*ApplicationAssignmentConfiguration) ElementType

func (*ApplicationAssignmentConfiguration) ToApplicationAssignmentConfigurationOutput

func (i *ApplicationAssignmentConfiguration) ToApplicationAssignmentConfigurationOutput() ApplicationAssignmentConfigurationOutput

func (*ApplicationAssignmentConfiguration) ToApplicationAssignmentConfigurationOutputWithContext

func (i *ApplicationAssignmentConfiguration) ToApplicationAssignmentConfigurationOutputWithContext(ctx context.Context) ApplicationAssignmentConfigurationOutput

type ApplicationAssignmentConfigurationArgs

type ApplicationAssignmentConfigurationArgs struct {
	// ARN of the application.
	ApplicationArn pulumi.StringInput
	// Indicates whether users must have an explicit assignment to access the application. If `false`, all users have access to the application.
	AssignmentRequired pulumi.BoolInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
}

The set of arguments for constructing a ApplicationAssignmentConfiguration resource.

func (ApplicationAssignmentConfigurationArgs) ElementType

type ApplicationAssignmentConfigurationArray

type ApplicationAssignmentConfigurationArray []ApplicationAssignmentConfigurationInput

func (ApplicationAssignmentConfigurationArray) ElementType

func (ApplicationAssignmentConfigurationArray) ToApplicationAssignmentConfigurationArrayOutput

func (i ApplicationAssignmentConfigurationArray) ToApplicationAssignmentConfigurationArrayOutput() ApplicationAssignmentConfigurationArrayOutput

func (ApplicationAssignmentConfigurationArray) ToApplicationAssignmentConfigurationArrayOutputWithContext

func (i ApplicationAssignmentConfigurationArray) ToApplicationAssignmentConfigurationArrayOutputWithContext(ctx context.Context) ApplicationAssignmentConfigurationArrayOutput

type ApplicationAssignmentConfigurationArrayInput

type ApplicationAssignmentConfigurationArrayInput interface {
	pulumi.Input

	ToApplicationAssignmentConfigurationArrayOutput() ApplicationAssignmentConfigurationArrayOutput
	ToApplicationAssignmentConfigurationArrayOutputWithContext(context.Context) ApplicationAssignmentConfigurationArrayOutput
}

ApplicationAssignmentConfigurationArrayInput is an input type that accepts ApplicationAssignmentConfigurationArray and ApplicationAssignmentConfigurationArrayOutput values. You can construct a concrete instance of `ApplicationAssignmentConfigurationArrayInput` via:

ApplicationAssignmentConfigurationArray{ ApplicationAssignmentConfigurationArgs{...} }

type ApplicationAssignmentConfigurationArrayOutput

type ApplicationAssignmentConfigurationArrayOutput struct{ *pulumi.OutputState }

func (ApplicationAssignmentConfigurationArrayOutput) ElementType

func (ApplicationAssignmentConfigurationArrayOutput) Index

func (ApplicationAssignmentConfigurationArrayOutput) ToApplicationAssignmentConfigurationArrayOutput

func (o ApplicationAssignmentConfigurationArrayOutput) ToApplicationAssignmentConfigurationArrayOutput() ApplicationAssignmentConfigurationArrayOutput

func (ApplicationAssignmentConfigurationArrayOutput) ToApplicationAssignmentConfigurationArrayOutputWithContext

func (o ApplicationAssignmentConfigurationArrayOutput) ToApplicationAssignmentConfigurationArrayOutputWithContext(ctx context.Context) ApplicationAssignmentConfigurationArrayOutput

type ApplicationAssignmentConfigurationInput

type ApplicationAssignmentConfigurationInput interface {
	pulumi.Input

	ToApplicationAssignmentConfigurationOutput() ApplicationAssignmentConfigurationOutput
	ToApplicationAssignmentConfigurationOutputWithContext(ctx context.Context) ApplicationAssignmentConfigurationOutput
}

type ApplicationAssignmentConfigurationMap

type ApplicationAssignmentConfigurationMap map[string]ApplicationAssignmentConfigurationInput

func (ApplicationAssignmentConfigurationMap) ElementType

func (ApplicationAssignmentConfigurationMap) ToApplicationAssignmentConfigurationMapOutput

func (i ApplicationAssignmentConfigurationMap) ToApplicationAssignmentConfigurationMapOutput() ApplicationAssignmentConfigurationMapOutput

func (ApplicationAssignmentConfigurationMap) ToApplicationAssignmentConfigurationMapOutputWithContext

func (i ApplicationAssignmentConfigurationMap) ToApplicationAssignmentConfigurationMapOutputWithContext(ctx context.Context) ApplicationAssignmentConfigurationMapOutput

type ApplicationAssignmentConfigurationMapInput

type ApplicationAssignmentConfigurationMapInput interface {
	pulumi.Input

	ToApplicationAssignmentConfigurationMapOutput() ApplicationAssignmentConfigurationMapOutput
	ToApplicationAssignmentConfigurationMapOutputWithContext(context.Context) ApplicationAssignmentConfigurationMapOutput
}

ApplicationAssignmentConfigurationMapInput is an input type that accepts ApplicationAssignmentConfigurationMap and ApplicationAssignmentConfigurationMapOutput values. You can construct a concrete instance of `ApplicationAssignmentConfigurationMapInput` via:

ApplicationAssignmentConfigurationMap{ "key": ApplicationAssignmentConfigurationArgs{...} }

type ApplicationAssignmentConfigurationMapOutput

type ApplicationAssignmentConfigurationMapOutput struct{ *pulumi.OutputState }

func (ApplicationAssignmentConfigurationMapOutput) ElementType

func (ApplicationAssignmentConfigurationMapOutput) MapIndex

func (ApplicationAssignmentConfigurationMapOutput) ToApplicationAssignmentConfigurationMapOutput

func (o ApplicationAssignmentConfigurationMapOutput) ToApplicationAssignmentConfigurationMapOutput() ApplicationAssignmentConfigurationMapOutput

func (ApplicationAssignmentConfigurationMapOutput) ToApplicationAssignmentConfigurationMapOutputWithContext

func (o ApplicationAssignmentConfigurationMapOutput) ToApplicationAssignmentConfigurationMapOutputWithContext(ctx context.Context) ApplicationAssignmentConfigurationMapOutput

type ApplicationAssignmentConfigurationOutput

type ApplicationAssignmentConfigurationOutput struct{ *pulumi.OutputState }

func (ApplicationAssignmentConfigurationOutput) ApplicationArn

ARN of the application.

func (ApplicationAssignmentConfigurationOutput) AssignmentRequired

Indicates whether users must have an explicit assignment to access the application. If `false`, all users have access to the application.

func (ApplicationAssignmentConfigurationOutput) ElementType

func (ApplicationAssignmentConfigurationOutput) Region

Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

func (ApplicationAssignmentConfigurationOutput) ToApplicationAssignmentConfigurationOutput

func (o ApplicationAssignmentConfigurationOutput) ToApplicationAssignmentConfigurationOutput() ApplicationAssignmentConfigurationOutput

func (ApplicationAssignmentConfigurationOutput) ToApplicationAssignmentConfigurationOutputWithContext

func (o ApplicationAssignmentConfigurationOutput) ToApplicationAssignmentConfigurationOutputWithContext(ctx context.Context) ApplicationAssignmentConfigurationOutput

type ApplicationAssignmentConfigurationState

type ApplicationAssignmentConfigurationState struct {
	// ARN of the application.
	ApplicationArn pulumi.StringPtrInput
	// Indicates whether users must have an explicit assignment to access the application. If `false`, all users have access to the application.
	AssignmentRequired pulumi.BoolPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
}

func (ApplicationAssignmentConfigurationState) ElementType

type ApplicationAssignmentInput

type ApplicationAssignmentInput interface {
	pulumi.Input

	ToApplicationAssignmentOutput() ApplicationAssignmentOutput
	ToApplicationAssignmentOutputWithContext(ctx context.Context) ApplicationAssignmentOutput
}

type ApplicationAssignmentMap

type ApplicationAssignmentMap map[string]ApplicationAssignmentInput

func (ApplicationAssignmentMap) ElementType

func (ApplicationAssignmentMap) ElementType() reflect.Type

func (ApplicationAssignmentMap) ToApplicationAssignmentMapOutput

func (i ApplicationAssignmentMap) ToApplicationAssignmentMapOutput() ApplicationAssignmentMapOutput

func (ApplicationAssignmentMap) ToApplicationAssignmentMapOutputWithContext

func (i ApplicationAssignmentMap) ToApplicationAssignmentMapOutputWithContext(ctx context.Context) ApplicationAssignmentMapOutput

type ApplicationAssignmentMapInput

type ApplicationAssignmentMapInput interface {
	pulumi.Input

	ToApplicationAssignmentMapOutput() ApplicationAssignmentMapOutput
	ToApplicationAssignmentMapOutputWithContext(context.Context) ApplicationAssignmentMapOutput
}

ApplicationAssignmentMapInput is an input type that accepts ApplicationAssignmentMap and ApplicationAssignmentMapOutput values. You can construct a concrete instance of `ApplicationAssignmentMapInput` via:

ApplicationAssignmentMap{ "key": ApplicationAssignmentArgs{...} }

type ApplicationAssignmentMapOutput

type ApplicationAssignmentMapOutput struct{ *pulumi.OutputState }

func (ApplicationAssignmentMapOutput) ElementType

func (ApplicationAssignmentMapOutput) MapIndex

func (ApplicationAssignmentMapOutput) ToApplicationAssignmentMapOutput

func (o ApplicationAssignmentMapOutput) ToApplicationAssignmentMapOutput() ApplicationAssignmentMapOutput

func (ApplicationAssignmentMapOutput) ToApplicationAssignmentMapOutputWithContext

func (o ApplicationAssignmentMapOutput) ToApplicationAssignmentMapOutputWithContext(ctx context.Context) ApplicationAssignmentMapOutput

type ApplicationAssignmentOutput

type ApplicationAssignmentOutput struct{ *pulumi.OutputState }

func (ApplicationAssignmentOutput) ApplicationArn

func (o ApplicationAssignmentOutput) ApplicationArn() pulumi.StringOutput

ARN of the application.

func (ApplicationAssignmentOutput) ElementType

func (ApplicationAssignmentOutput) PrincipalId

An identifier for an object in IAM Identity Center, such as a user or group.

func (ApplicationAssignmentOutput) PrincipalType

Entity type for which the assignment will be created. Valid values are `USER` or `GROUP`.

func (ApplicationAssignmentOutput) Region

Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

func (ApplicationAssignmentOutput) ToApplicationAssignmentOutput

func (o ApplicationAssignmentOutput) ToApplicationAssignmentOutput() ApplicationAssignmentOutput

func (ApplicationAssignmentOutput) ToApplicationAssignmentOutputWithContext

func (o ApplicationAssignmentOutput) ToApplicationAssignmentOutputWithContext(ctx context.Context) ApplicationAssignmentOutput

type ApplicationAssignmentState

type ApplicationAssignmentState struct {
	// ARN of the application.
	ApplicationArn pulumi.StringPtrInput
	// An identifier for an object in IAM Identity Center, such as a user or group.
	PrincipalId pulumi.StringPtrInput
	// Entity type for which the assignment will be created. Valid values are `USER` or `GROUP`.
	PrincipalType pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
}

func (ApplicationAssignmentState) ElementType

func (ApplicationAssignmentState) ElementType() reflect.Type

type ApplicationInput

type ApplicationInput interface {
	pulumi.Input

	ToApplicationOutput() ApplicationOutput
	ToApplicationOutputWithContext(ctx context.Context) ApplicationOutput
}

type ApplicationMap

type ApplicationMap map[string]ApplicationInput

func (ApplicationMap) ElementType

func (ApplicationMap) ElementType() reflect.Type

func (ApplicationMap) ToApplicationMapOutput

func (i ApplicationMap) ToApplicationMapOutput() ApplicationMapOutput

func (ApplicationMap) ToApplicationMapOutputWithContext

func (i ApplicationMap) ToApplicationMapOutputWithContext(ctx context.Context) ApplicationMapOutput

type ApplicationMapInput

type ApplicationMapInput interface {
	pulumi.Input

	ToApplicationMapOutput() ApplicationMapOutput
	ToApplicationMapOutputWithContext(context.Context) ApplicationMapOutput
}

ApplicationMapInput is an input type that accepts ApplicationMap and ApplicationMapOutput values. You can construct a concrete instance of `ApplicationMapInput` via:

ApplicationMap{ "key": ApplicationArgs{...} }

type ApplicationMapOutput

type ApplicationMapOutput struct{ *pulumi.OutputState }

func (ApplicationMapOutput) ElementType

func (ApplicationMapOutput) ElementType() reflect.Type

func (ApplicationMapOutput) MapIndex

func (ApplicationMapOutput) ToApplicationMapOutput

func (o ApplicationMapOutput) ToApplicationMapOutput() ApplicationMapOutput

func (ApplicationMapOutput) ToApplicationMapOutputWithContext

func (o ApplicationMapOutput) ToApplicationMapOutputWithContext(ctx context.Context) ApplicationMapOutput

type ApplicationOutput

type ApplicationOutput struct{ *pulumi.OutputState }

func (ApplicationOutput) ApplicationAccount

func (o ApplicationOutput) ApplicationAccount() pulumi.StringOutput

AWS account ID.

func (ApplicationOutput) ApplicationArn deprecated

func (o ApplicationOutput) ApplicationArn() pulumi.StringOutput

(**Deprecated** Reference `arn` instead) ARN of the application.

Deprecated: Use 'arn' instead. This attribute will be removed in a future verion of the provider.

func (ApplicationOutput) ApplicationProviderArn

func (o ApplicationOutput) ApplicationProviderArn() pulumi.StringOutput

ARN of the application provider.

func (ApplicationOutput) Arn

ARN of the application.

func (ApplicationOutput) ClientToken

func (o ApplicationOutput) ClientToken() pulumi.StringPtrOutput

A unique, case-sensitive ID that you provide to ensure the idempotency of the request. AWS generates a random value when not provided.

func (ApplicationOutput) Description

func (o ApplicationOutput) Description() pulumi.StringPtrOutput

Description of the application.

func (ApplicationOutput) ElementType

func (ApplicationOutput) ElementType() reflect.Type

func (ApplicationOutput) InstanceArn

func (o ApplicationOutput) InstanceArn() pulumi.StringOutput

ARN of the instance of IAM Identity Center.

func (ApplicationOutput) Name

Name of the application.

The following arguments are optional:

func (ApplicationOutput) PortalOptions

Options for the portal associated with an application. See `portalOptions` below.

func (ApplicationOutput) Region

Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

func (ApplicationOutput) Status

Status of the application. Valid values are `ENABLED` and `DISABLED`.

func (ApplicationOutput) Tags

Key-value mapping of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.

func (ApplicationOutput) TagsAll

Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.

func (ApplicationOutput) ToApplicationOutput

func (o ApplicationOutput) ToApplicationOutput() ApplicationOutput

func (ApplicationOutput) ToApplicationOutputWithContext

func (o ApplicationOutput) ToApplicationOutputWithContext(ctx context.Context) ApplicationOutput

type ApplicationPortalOptions

type ApplicationPortalOptions struct {
	// Sign-in options for the access portal. See `signInOptions` below.
	SignInOptions *ApplicationPortalOptionsSignInOptions `pulumi:"signInOptions"`
	// Indicates whether this application is visible in the access portal. Valid values are `ENABLED` and `DISABLED`.
	Visibility *string `pulumi:"visibility"`
}

type ApplicationPortalOptionsArgs

type ApplicationPortalOptionsArgs struct {
	// Sign-in options for the access portal. See `signInOptions` below.
	SignInOptions ApplicationPortalOptionsSignInOptionsPtrInput `pulumi:"signInOptions"`
	// Indicates whether this application is visible in the access portal. Valid values are `ENABLED` and `DISABLED`.
	Visibility pulumi.StringPtrInput `pulumi:"visibility"`
}

func (ApplicationPortalOptionsArgs) ElementType

func (ApplicationPortalOptionsArgs) ToApplicationPortalOptionsOutput

func (i ApplicationPortalOptionsArgs) ToApplicationPortalOptionsOutput() ApplicationPortalOptionsOutput

func (ApplicationPortalOptionsArgs) ToApplicationPortalOptionsOutputWithContext

func (i ApplicationPortalOptionsArgs) ToApplicationPortalOptionsOutputWithContext(ctx context.Context) ApplicationPortalOptionsOutput

func (ApplicationPortalOptionsArgs) ToApplicationPortalOptionsPtrOutput

func (i ApplicationPortalOptionsArgs) ToApplicationPortalOptionsPtrOutput() ApplicationPortalOptionsPtrOutput

func (ApplicationPortalOptionsArgs) ToApplicationPortalOptionsPtrOutputWithContext

func (i ApplicationPortalOptionsArgs) ToApplicationPortalOptionsPtrOutputWithContext(ctx context.Context) ApplicationPortalOptionsPtrOutput

type ApplicationPortalOptionsInput

type ApplicationPortalOptionsInput interface {
	pulumi.Input

	ToApplicationPortalOptionsOutput() ApplicationPortalOptionsOutput
	ToApplicationPortalOptionsOutputWithContext(context.Context) ApplicationPortalOptionsOutput
}

ApplicationPortalOptionsInput is an input type that accepts ApplicationPortalOptionsArgs and ApplicationPortalOptionsOutput values. You can construct a concrete instance of `ApplicationPortalOptionsInput` via:

ApplicationPortalOptionsArgs{...}

type ApplicationPortalOptionsOutput

type ApplicationPortalOptionsOutput struct{ *pulumi.OutputState }

func (ApplicationPortalOptionsOutput) ElementType

func (ApplicationPortalOptionsOutput) SignInOptions

Sign-in options for the access portal. See `signInOptions` below.

func (ApplicationPortalOptionsOutput) ToApplicationPortalOptionsOutput

func (o ApplicationPortalOptionsOutput) ToApplicationPortalOptionsOutput() ApplicationPortalOptionsOutput

func (ApplicationPortalOptionsOutput) ToApplicationPortalOptionsOutputWithContext

func (o ApplicationPortalOptionsOutput) ToApplicationPortalOptionsOutputWithContext(ctx context.Context) ApplicationPortalOptionsOutput

func (ApplicationPortalOptionsOutput) ToApplicationPortalOptionsPtrOutput

func (o ApplicationPortalOptionsOutput) ToApplicationPortalOptionsPtrOutput() ApplicationPortalOptionsPtrOutput

func (ApplicationPortalOptionsOutput) ToApplicationPortalOptionsPtrOutputWithContext

func (o ApplicationPortalOptionsOutput) ToApplicationPortalOptionsPtrOutputWithContext(ctx context.Context) ApplicationPortalOptionsPtrOutput

func (ApplicationPortalOptionsOutput) Visibility

Indicates whether this application is visible in the access portal. Valid values are `ENABLED` and `DISABLED`.

type ApplicationPortalOptionsPtrInput

type ApplicationPortalOptionsPtrInput interface {
	pulumi.Input

	ToApplicationPortalOptionsPtrOutput() ApplicationPortalOptionsPtrOutput
	ToApplicationPortalOptionsPtrOutputWithContext(context.Context) ApplicationPortalOptionsPtrOutput
}

ApplicationPortalOptionsPtrInput is an input type that accepts ApplicationPortalOptionsArgs, ApplicationPortalOptionsPtr and ApplicationPortalOptionsPtrOutput values. You can construct a concrete instance of `ApplicationPortalOptionsPtrInput` via:

        ApplicationPortalOptionsArgs{...}

or:

        nil

type ApplicationPortalOptionsPtrOutput

type ApplicationPortalOptionsPtrOutput struct{ *pulumi.OutputState }

func (ApplicationPortalOptionsPtrOutput) Elem

func (ApplicationPortalOptionsPtrOutput) ElementType

func (ApplicationPortalOptionsPtrOutput) SignInOptions

Sign-in options for the access portal. See `signInOptions` below.

func (ApplicationPortalOptionsPtrOutput) ToApplicationPortalOptionsPtrOutput

func (o ApplicationPortalOptionsPtrOutput) ToApplicationPortalOptionsPtrOutput() ApplicationPortalOptionsPtrOutput

func (ApplicationPortalOptionsPtrOutput) ToApplicationPortalOptionsPtrOutputWithContext

func (o ApplicationPortalOptionsPtrOutput) ToApplicationPortalOptionsPtrOutputWithContext(ctx context.Context) ApplicationPortalOptionsPtrOutput

func (ApplicationPortalOptionsPtrOutput) Visibility

Indicates whether this application is visible in the access portal. Valid values are `ENABLED` and `DISABLED`.

type ApplicationPortalOptionsSignInOptions

type ApplicationPortalOptionsSignInOptions struct {
	// URL that accepts authentication requests for an application.
	ApplicationUrl *string `pulumi:"applicationUrl"`
	// Determines how IAM Identity Center navigates the user to the target application.
	// Valid values are `APPLICATION` and `IDENTITY_CENTER`.
	// If `APPLICATION` is set, IAM Identity Center redirects the customer to the configured `applicationUrl`.
	// If `IDENTITY_CENTER` is set, IAM Identity Center uses SAML identity-provider initiated authentication to sign the customer directly into a SAML-based application.
	Origin string `pulumi:"origin"`
}

type ApplicationPortalOptionsSignInOptionsArgs

type ApplicationPortalOptionsSignInOptionsArgs struct {
	// URL that accepts authentication requests for an application.
	ApplicationUrl pulumi.StringPtrInput `pulumi:"applicationUrl"`
	// Determines how IAM Identity Center navigates the user to the target application.
	// Valid values are `APPLICATION` and `IDENTITY_CENTER`.
	// If `APPLICATION` is set, IAM Identity Center redirects the customer to the configured `applicationUrl`.
	// If `IDENTITY_CENTER` is set, IAM Identity Center uses SAML identity-provider initiated authentication to sign the customer directly into a SAML-based application.
	Origin pulumi.StringInput `pulumi:"origin"`
}

func (ApplicationPortalOptionsSignInOptionsArgs) ElementType

func (ApplicationPortalOptionsSignInOptionsArgs) ToApplicationPortalOptionsSignInOptionsOutput

func (i ApplicationPortalOptionsSignInOptionsArgs) ToApplicationPortalOptionsSignInOptionsOutput() ApplicationPortalOptionsSignInOptionsOutput

func (ApplicationPortalOptionsSignInOptionsArgs) ToApplicationPortalOptionsSignInOptionsOutputWithContext

func (i ApplicationPortalOptionsSignInOptionsArgs) ToApplicationPortalOptionsSignInOptionsOutputWithContext(ctx context.Context) ApplicationPortalOptionsSignInOptionsOutput

func (ApplicationPortalOptionsSignInOptionsArgs) ToApplicationPortalOptionsSignInOptionsPtrOutput

func (i ApplicationPortalOptionsSignInOptionsArgs) ToApplicationPortalOptionsSignInOptionsPtrOutput() ApplicationPortalOptionsSignInOptionsPtrOutput

func (ApplicationPortalOptionsSignInOptionsArgs) ToApplicationPortalOptionsSignInOptionsPtrOutputWithContext

func (i ApplicationPortalOptionsSignInOptionsArgs) ToApplicationPortalOptionsSignInOptionsPtrOutputWithContext(ctx context.Context) ApplicationPortalOptionsSignInOptionsPtrOutput

type ApplicationPortalOptionsSignInOptionsInput

type ApplicationPortalOptionsSignInOptionsInput interface {
	pulumi.Input

	ToApplicationPortalOptionsSignInOptionsOutput() ApplicationPortalOptionsSignInOptionsOutput
	ToApplicationPortalOptionsSignInOptionsOutputWithContext(context.Context) ApplicationPortalOptionsSignInOptionsOutput
}

ApplicationPortalOptionsSignInOptionsInput is an input type that accepts ApplicationPortalOptionsSignInOptionsArgs and ApplicationPortalOptionsSignInOptionsOutput values. You can construct a concrete instance of `ApplicationPortalOptionsSignInOptionsInput` via:

ApplicationPortalOptionsSignInOptionsArgs{...}

type ApplicationPortalOptionsSignInOptionsOutput

type ApplicationPortalOptionsSignInOptionsOutput struct{ *pulumi.OutputState }

func (ApplicationPortalOptionsSignInOptionsOutput) ApplicationUrl

URL that accepts authentication requests for an application.

func (ApplicationPortalOptionsSignInOptionsOutput) ElementType

func (ApplicationPortalOptionsSignInOptionsOutput) Origin

Determines how IAM Identity Center navigates the user to the target application. Valid values are `APPLICATION` and `IDENTITY_CENTER`. If `APPLICATION` is set, IAM Identity Center redirects the customer to the configured `applicationUrl`. If `IDENTITY_CENTER` is set, IAM Identity Center uses SAML identity-provider initiated authentication to sign the customer directly into a SAML-based application.

func (ApplicationPortalOptionsSignInOptionsOutput) ToApplicationPortalOptionsSignInOptionsOutput

func (o ApplicationPortalOptionsSignInOptionsOutput) ToApplicationPortalOptionsSignInOptionsOutput() ApplicationPortalOptionsSignInOptionsOutput

func (ApplicationPortalOptionsSignInOptionsOutput) ToApplicationPortalOptionsSignInOptionsOutputWithContext

func (o ApplicationPortalOptionsSignInOptionsOutput) ToApplicationPortalOptionsSignInOptionsOutputWithContext(ctx context.Context) ApplicationPortalOptionsSignInOptionsOutput

func (ApplicationPortalOptionsSignInOptionsOutput) ToApplicationPortalOptionsSignInOptionsPtrOutput

func (o ApplicationPortalOptionsSignInOptionsOutput) ToApplicationPortalOptionsSignInOptionsPtrOutput() ApplicationPortalOptionsSignInOptionsPtrOutput

func (ApplicationPortalOptionsSignInOptionsOutput) ToApplicationPortalOptionsSignInOptionsPtrOutputWithContext

func (o ApplicationPortalOptionsSignInOptionsOutput) ToApplicationPortalOptionsSignInOptionsPtrOutputWithContext(ctx context.Context) ApplicationPortalOptionsSignInOptionsPtrOutput

type ApplicationPortalOptionsSignInOptionsPtrInput

type ApplicationPortalOptionsSignInOptionsPtrInput interface {
	pulumi.Input

	ToApplicationPortalOptionsSignInOptionsPtrOutput() ApplicationPortalOptionsSignInOptionsPtrOutput
	ToApplicationPortalOptionsSignInOptionsPtrOutputWithContext(context.Context) ApplicationPortalOptionsSignInOptionsPtrOutput
}

ApplicationPortalOptionsSignInOptionsPtrInput is an input type that accepts ApplicationPortalOptionsSignInOptionsArgs, ApplicationPortalOptionsSignInOptionsPtr and ApplicationPortalOptionsSignInOptionsPtrOutput values. You can construct a concrete instance of `ApplicationPortalOptionsSignInOptionsPtrInput` via:

        ApplicationPortalOptionsSignInOptionsArgs{...}

or:

        nil

type ApplicationPortalOptionsSignInOptionsPtrOutput

type ApplicationPortalOptionsSignInOptionsPtrOutput struct{ *pulumi.OutputState }

func (ApplicationPortalOptionsSignInOptionsPtrOutput) ApplicationUrl

URL that accepts authentication requests for an application.

func (ApplicationPortalOptionsSignInOptionsPtrOutput) Elem

func (ApplicationPortalOptionsSignInOptionsPtrOutput) ElementType

func (ApplicationPortalOptionsSignInOptionsPtrOutput) Origin

Determines how IAM Identity Center navigates the user to the target application. Valid values are `APPLICATION` and `IDENTITY_CENTER`. If `APPLICATION` is set, IAM Identity Center redirects the customer to the configured `applicationUrl`. If `IDENTITY_CENTER` is set, IAM Identity Center uses SAML identity-provider initiated authentication to sign the customer directly into a SAML-based application.

func (ApplicationPortalOptionsSignInOptionsPtrOutput) ToApplicationPortalOptionsSignInOptionsPtrOutput

func (o ApplicationPortalOptionsSignInOptionsPtrOutput) ToApplicationPortalOptionsSignInOptionsPtrOutput() ApplicationPortalOptionsSignInOptionsPtrOutput

func (ApplicationPortalOptionsSignInOptionsPtrOutput) ToApplicationPortalOptionsSignInOptionsPtrOutputWithContext

func (o ApplicationPortalOptionsSignInOptionsPtrOutput) ToApplicationPortalOptionsSignInOptionsPtrOutputWithContext(ctx context.Context) ApplicationPortalOptionsSignInOptionsPtrOutput

type ApplicationState

type ApplicationState struct {
	// AWS account ID.
	ApplicationAccount pulumi.StringPtrInput
	// (**Deprecated** Reference `arn` instead) ARN of the application.
	//
	// Deprecated: Use 'arn' instead. This attribute will be removed in a future verion of the provider.
	ApplicationArn pulumi.StringPtrInput
	// ARN of the application provider.
	ApplicationProviderArn pulumi.StringPtrInput
	// ARN of the application.
	Arn pulumi.StringPtrInput
	// A unique, case-sensitive ID that you provide to ensure the idempotency of the request. AWS generates a random value when not provided.
	ClientToken pulumi.StringPtrInput
	// Description of the application.
	Description pulumi.StringPtrInput
	// ARN of the instance of IAM Identity Center.
	InstanceArn pulumi.StringPtrInput
	// Name of the application.
	//
	// The following arguments are optional:
	Name pulumi.StringPtrInput
	// Options for the portal associated with an application. See `portalOptions` below.
	PortalOptions ApplicationPortalOptionsPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// Status of the application. Valid values are `ENABLED` and `DISABLED`.
	Status pulumi.StringPtrInput
	// Key-value mapping of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
	// Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	TagsAll pulumi.StringMapInput
}

func (ApplicationState) ElementType

func (ApplicationState) ElementType() reflect.Type

type CustomerManagedPolicyAttachment

type CustomerManagedPolicyAttachment struct {
	pulumi.CustomResourceState

	// Specifies the name and path of a customer managed policy. See below.
	CustomerManagedPolicyReference CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceOutput `pulumi:"customerManagedPolicyReference"`
	// The Amazon Resource Name (ARN) of the SSO Instance under which the operation will be executed.
	InstanceArn pulumi.StringOutput `pulumi:"instanceArn"`
	// The Amazon Resource Name (ARN) of the Permission Set.
	PermissionSetArn pulumi.StringOutput `pulumi:"permissionSetArn"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
}

Provides a customer managed policy attachment for a Single Sign-On (SSO) Permission Set resource

> **NOTE:** Creating this resource will automatically [Provision the Permission Set](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ProvisionPermissionSet.html) to apply the corresponding updates to all assigned accounts.

## Example Usage

```go package main

import (

"encoding/json"

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/iam"
"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ssoadmin"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := ssoadmin.GetInstances(ctx, &ssoadmin.GetInstancesArgs{}, nil)
		if err != nil {
			return err
		}
		examplePermissionSet, err := ssoadmin.NewPermissionSet(ctx, "example", &ssoadmin.PermissionSetArgs{
			Name:        pulumi.String("Example"),
			InstanceArn: pulumi.String(example.Arns[0]),
		})
		if err != nil {
			return err
		}
		tmpJSON0, err := json.Marshal(map[string]interface{}{
			"Version": "2012-10-17",
			"Statement": []map[string]interface{}{
				map[string]interface{}{
					"Action": []string{
						"ec2:Describe*",
					},
					"Effect":   "Allow",
					"Resource": "*",
				},
			},
		})
		if err != nil {
			return err
		}
		json0 := string(tmpJSON0)
		examplePolicy, err := iam.NewPolicy(ctx, "example", &iam.PolicyArgs{
			Name:        pulumi.String("TestPolicy"),
			Description: pulumi.String("My test policy"),
			Policy:      pulumi.String(json0),
		})
		if err != nil {
			return err
		}
		_, err = ssoadmin.NewCustomerManagedPolicyAttachment(ctx, "example", &ssoadmin.CustomerManagedPolicyAttachmentArgs{
			InstanceArn:      examplePermissionSet.InstanceArn,
			PermissionSetArn: examplePermissionSet.Arn,
			CustomerManagedPolicyReference: &ssoadmin.CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceArgs{
				Name: examplePolicy.Name,
				Path: pulumi.String("/"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Using `pulumi import`, import SSO Managed Policy Attachments using the `name`, `path`, `permission_set_arn`, and `instance_arn` separated by a comma (`,`). For example:

```sh $ pulumi import aws:ssoadmin/customerManagedPolicyAttachment:CustomerManagedPolicyAttachment example TestPolicy,/,arn:aws:sso:::permissionSet/ssoins-2938j0x8920sbj72/ps-80383020jr9302rk,arn:aws:sso:::instance/ssoins-2938j0x8920sbj72 ```

func GetCustomerManagedPolicyAttachment

func GetCustomerManagedPolicyAttachment(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *CustomerManagedPolicyAttachmentState, opts ...pulumi.ResourceOption) (*CustomerManagedPolicyAttachment, error)

GetCustomerManagedPolicyAttachment gets an existing CustomerManagedPolicyAttachment resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewCustomerManagedPolicyAttachment

func NewCustomerManagedPolicyAttachment(ctx *pulumi.Context,
	name string, args *CustomerManagedPolicyAttachmentArgs, opts ...pulumi.ResourceOption) (*CustomerManagedPolicyAttachment, error)

NewCustomerManagedPolicyAttachment registers a new resource with the given unique name, arguments, and options.

func (*CustomerManagedPolicyAttachment) ElementType

func (*CustomerManagedPolicyAttachment) ToCustomerManagedPolicyAttachmentOutput

func (i *CustomerManagedPolicyAttachment) ToCustomerManagedPolicyAttachmentOutput() CustomerManagedPolicyAttachmentOutput

func (*CustomerManagedPolicyAttachment) ToCustomerManagedPolicyAttachmentOutputWithContext

func (i *CustomerManagedPolicyAttachment) ToCustomerManagedPolicyAttachmentOutputWithContext(ctx context.Context) CustomerManagedPolicyAttachmentOutput

type CustomerManagedPolicyAttachmentArgs

type CustomerManagedPolicyAttachmentArgs struct {
	// Specifies the name and path of a customer managed policy. See below.
	CustomerManagedPolicyReference CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceInput
	// The Amazon Resource Name (ARN) of the SSO Instance under which the operation will be executed.
	InstanceArn pulumi.StringInput
	// The Amazon Resource Name (ARN) of the Permission Set.
	PermissionSetArn pulumi.StringInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
}

The set of arguments for constructing a CustomerManagedPolicyAttachment resource.

func (CustomerManagedPolicyAttachmentArgs) ElementType

type CustomerManagedPolicyAttachmentArray

type CustomerManagedPolicyAttachmentArray []CustomerManagedPolicyAttachmentInput

func (CustomerManagedPolicyAttachmentArray) ElementType

func (CustomerManagedPolicyAttachmentArray) ToCustomerManagedPolicyAttachmentArrayOutput

func (i CustomerManagedPolicyAttachmentArray) ToCustomerManagedPolicyAttachmentArrayOutput() CustomerManagedPolicyAttachmentArrayOutput

func (CustomerManagedPolicyAttachmentArray) ToCustomerManagedPolicyAttachmentArrayOutputWithContext

func (i CustomerManagedPolicyAttachmentArray) ToCustomerManagedPolicyAttachmentArrayOutputWithContext(ctx context.Context) CustomerManagedPolicyAttachmentArrayOutput

type CustomerManagedPolicyAttachmentArrayInput

type CustomerManagedPolicyAttachmentArrayInput interface {
	pulumi.Input

	ToCustomerManagedPolicyAttachmentArrayOutput() CustomerManagedPolicyAttachmentArrayOutput
	ToCustomerManagedPolicyAttachmentArrayOutputWithContext(context.Context) CustomerManagedPolicyAttachmentArrayOutput
}

CustomerManagedPolicyAttachmentArrayInput is an input type that accepts CustomerManagedPolicyAttachmentArray and CustomerManagedPolicyAttachmentArrayOutput values. You can construct a concrete instance of `CustomerManagedPolicyAttachmentArrayInput` via:

CustomerManagedPolicyAttachmentArray{ CustomerManagedPolicyAttachmentArgs{...} }

type CustomerManagedPolicyAttachmentArrayOutput

type CustomerManagedPolicyAttachmentArrayOutput struct{ *pulumi.OutputState }

func (CustomerManagedPolicyAttachmentArrayOutput) ElementType

func (CustomerManagedPolicyAttachmentArrayOutput) Index

func (CustomerManagedPolicyAttachmentArrayOutput) ToCustomerManagedPolicyAttachmentArrayOutput

func (o CustomerManagedPolicyAttachmentArrayOutput) ToCustomerManagedPolicyAttachmentArrayOutput() CustomerManagedPolicyAttachmentArrayOutput

func (CustomerManagedPolicyAttachmentArrayOutput) ToCustomerManagedPolicyAttachmentArrayOutputWithContext

func (o CustomerManagedPolicyAttachmentArrayOutput) ToCustomerManagedPolicyAttachmentArrayOutputWithContext(ctx context.Context) CustomerManagedPolicyAttachmentArrayOutput

type CustomerManagedPolicyAttachmentCustomerManagedPolicyReference

type CustomerManagedPolicyAttachmentCustomerManagedPolicyReference struct {
	// Name of the customer managed IAM Policy to be attached.
	Name string `pulumi:"name"`
	// The path to the IAM policy to be attached. The default is `/`. See [IAM Identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-friendly-names) for more information.
	Path *string `pulumi:"path"`
}

type CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceArgs

type CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceArgs struct {
	// Name of the customer managed IAM Policy to be attached.
	Name pulumi.StringInput `pulumi:"name"`
	// The path to the IAM policy to be attached. The default is `/`. See [IAM Identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-friendly-names) for more information.
	Path pulumi.StringPtrInput `pulumi:"path"`
}

func (CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceArgs) ElementType

func (CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceArgs) ToCustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceOutput

func (CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceArgs) ToCustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceOutputWithContext

func (i CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceArgs) ToCustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceOutputWithContext(ctx context.Context) CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceOutput

func (CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceArgs) ToCustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrOutput

func (CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceArgs) ToCustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrOutputWithContext

func (i CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceArgs) ToCustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrOutputWithContext(ctx context.Context) CustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrOutput

type CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceInput

type CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceInput interface {
	pulumi.Input

	ToCustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceOutput() CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceOutput
	ToCustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceOutputWithContext(context.Context) CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceOutput
}

CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceInput is an input type that accepts CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceArgs and CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceOutput values. You can construct a concrete instance of `CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceInput` via:

CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceArgs{...}

type CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceOutput

type CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceOutput struct{ *pulumi.OutputState }

func (CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceOutput) ElementType

func (CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceOutput) Name

Name of the customer managed IAM Policy to be attached.

func (CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceOutput) Path

The path to the IAM policy to be attached. The default is `/`. See [IAM Identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-friendly-names) for more information.

func (CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceOutput) ToCustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceOutput

func (CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceOutput) ToCustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceOutputWithContext

func (o CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceOutput) ToCustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceOutputWithContext(ctx context.Context) CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceOutput

func (CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceOutput) ToCustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrOutput

func (CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceOutput) ToCustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrOutputWithContext

func (o CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceOutput) ToCustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrOutputWithContext(ctx context.Context) CustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrOutput

type CustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrInput

type CustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrInput interface {
	pulumi.Input

	ToCustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrOutput() CustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrOutput
	ToCustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrOutputWithContext(context.Context) CustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrOutput
}

CustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrInput is an input type that accepts CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceArgs, CustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtr and CustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrOutput values. You can construct a concrete instance of `CustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrInput` via:

        CustomerManagedPolicyAttachmentCustomerManagedPolicyReferenceArgs{...}

or:

        nil

type CustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrOutput

type CustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrOutput struct{ *pulumi.OutputState }

func (CustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrOutput) Elem

func (CustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrOutput) ElementType

func (CustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrOutput) Name

Name of the customer managed IAM Policy to be attached.

func (CustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrOutput) Path

The path to the IAM policy to be attached. The default is `/`. See [IAM Identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-friendly-names) for more information.

func (CustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrOutput) ToCustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrOutput

func (CustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrOutput) ToCustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrOutputWithContext

func (o CustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrOutput) ToCustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrOutputWithContext(ctx context.Context) CustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrOutput

type CustomerManagedPolicyAttachmentInput

type CustomerManagedPolicyAttachmentInput interface {
	pulumi.Input

	ToCustomerManagedPolicyAttachmentOutput() CustomerManagedPolicyAttachmentOutput
	ToCustomerManagedPolicyAttachmentOutputWithContext(ctx context.Context) CustomerManagedPolicyAttachmentOutput
}

type CustomerManagedPolicyAttachmentMap

type CustomerManagedPolicyAttachmentMap map[string]CustomerManagedPolicyAttachmentInput

func (CustomerManagedPolicyAttachmentMap) ElementType

func (CustomerManagedPolicyAttachmentMap) ToCustomerManagedPolicyAttachmentMapOutput

func (i CustomerManagedPolicyAttachmentMap) ToCustomerManagedPolicyAttachmentMapOutput() CustomerManagedPolicyAttachmentMapOutput

func (CustomerManagedPolicyAttachmentMap) ToCustomerManagedPolicyAttachmentMapOutputWithContext

func (i CustomerManagedPolicyAttachmentMap) ToCustomerManagedPolicyAttachmentMapOutputWithContext(ctx context.Context) CustomerManagedPolicyAttachmentMapOutput

type CustomerManagedPolicyAttachmentMapInput

type CustomerManagedPolicyAttachmentMapInput interface {
	pulumi.Input

	ToCustomerManagedPolicyAttachmentMapOutput() CustomerManagedPolicyAttachmentMapOutput
	ToCustomerManagedPolicyAttachmentMapOutputWithContext(context.Context) CustomerManagedPolicyAttachmentMapOutput
}

CustomerManagedPolicyAttachmentMapInput is an input type that accepts CustomerManagedPolicyAttachmentMap and CustomerManagedPolicyAttachmentMapOutput values. You can construct a concrete instance of `CustomerManagedPolicyAttachmentMapInput` via:

CustomerManagedPolicyAttachmentMap{ "key": CustomerManagedPolicyAttachmentArgs{...} }

type CustomerManagedPolicyAttachmentMapOutput

type CustomerManagedPolicyAttachmentMapOutput struct{ *pulumi.OutputState }

func (CustomerManagedPolicyAttachmentMapOutput) ElementType

func (CustomerManagedPolicyAttachmentMapOutput) MapIndex

func (CustomerManagedPolicyAttachmentMapOutput) ToCustomerManagedPolicyAttachmentMapOutput

func (o CustomerManagedPolicyAttachmentMapOutput) ToCustomerManagedPolicyAttachmentMapOutput() CustomerManagedPolicyAttachmentMapOutput

func (CustomerManagedPolicyAttachmentMapOutput) ToCustomerManagedPolicyAttachmentMapOutputWithContext

func (o CustomerManagedPolicyAttachmentMapOutput) ToCustomerManagedPolicyAttachmentMapOutputWithContext(ctx context.Context) CustomerManagedPolicyAttachmentMapOutput

type CustomerManagedPolicyAttachmentOutput

type CustomerManagedPolicyAttachmentOutput struct{ *pulumi.OutputState }

func (CustomerManagedPolicyAttachmentOutput) CustomerManagedPolicyReference

Specifies the name and path of a customer managed policy. See below.

func (CustomerManagedPolicyAttachmentOutput) ElementType

func (CustomerManagedPolicyAttachmentOutput) InstanceArn

The Amazon Resource Name (ARN) of the SSO Instance under which the operation will be executed.

func (CustomerManagedPolicyAttachmentOutput) PermissionSetArn

The Amazon Resource Name (ARN) of the Permission Set.

func (CustomerManagedPolicyAttachmentOutput) Region

Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

func (CustomerManagedPolicyAttachmentOutput) ToCustomerManagedPolicyAttachmentOutput

func (o CustomerManagedPolicyAttachmentOutput) ToCustomerManagedPolicyAttachmentOutput() CustomerManagedPolicyAttachmentOutput

func (CustomerManagedPolicyAttachmentOutput) ToCustomerManagedPolicyAttachmentOutputWithContext

func (o CustomerManagedPolicyAttachmentOutput) ToCustomerManagedPolicyAttachmentOutputWithContext(ctx context.Context) CustomerManagedPolicyAttachmentOutput

type CustomerManagedPolicyAttachmentState

type CustomerManagedPolicyAttachmentState struct {
	// Specifies the name and path of a customer managed policy. See below.
	CustomerManagedPolicyReference CustomerManagedPolicyAttachmentCustomerManagedPolicyReferencePtrInput
	// The Amazon Resource Name (ARN) of the SSO Instance under which the operation will be executed.
	InstanceArn pulumi.StringPtrInput
	// The Amazon Resource Name (ARN) of the Permission Set.
	PermissionSetArn pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
}

func (CustomerManagedPolicyAttachmentState) ElementType

type GetApplicationAssignmentsApplicationAssignment

type GetApplicationAssignmentsApplicationAssignment struct {
	// ARN of the application.
	ApplicationArn string `pulumi:"applicationArn"`
	// An identifier for an object in IAM Identity Center, such as a user or group.
	PrincipalId string `pulumi:"principalId"`
	// Entity type for which the assignment will be created. Valid values are `USER` or `GROUP`.
	PrincipalType string `pulumi:"principalType"`
}

type GetApplicationAssignmentsApplicationAssignmentArgs

type GetApplicationAssignmentsApplicationAssignmentArgs struct {
	// ARN of the application.
	ApplicationArn pulumi.StringInput `pulumi:"applicationArn"`
	// An identifier for an object in IAM Identity Center, such as a user or group.
	PrincipalId pulumi.StringInput `pulumi:"principalId"`
	// Entity type for which the assignment will be created. Valid values are `USER` or `GROUP`.
	PrincipalType pulumi.StringInput `pulumi:"principalType"`
}

func (GetApplicationAssignmentsApplicationAssignmentArgs) ElementType

func (GetApplicationAssignmentsApplicationAssignmentArgs) ToGetApplicationAssignmentsApplicationAssignmentOutput

func (i GetApplicationAssignmentsApplicationAssignmentArgs) ToGetApplicationAssignmentsApplicationAssignmentOutput() GetApplicationAssignmentsApplicationAssignmentOutput

func (GetApplicationAssignmentsApplicationAssignmentArgs) ToGetApplicationAssignmentsApplicationAssignmentOutputWithContext

func (i GetApplicationAssignmentsApplicationAssignmentArgs) ToGetApplicationAssignmentsApplicationAssignmentOutputWithContext(ctx context.Context) GetApplicationAssignmentsApplicationAssignmentOutput

type GetApplicationAssignmentsApplicationAssignmentArray

type GetApplicationAssignmentsApplicationAssignmentArray []GetApplicationAssignmentsApplicationAssignmentInput

func (GetApplicationAssignmentsApplicationAssignmentArray) ElementType

func (GetApplicationAssignmentsApplicationAssignmentArray) ToGetApplicationAssignmentsApplicationAssignmentArrayOutput

func (i GetApplicationAssignmentsApplicationAssignmentArray) ToGetApplicationAssignmentsApplicationAssignmentArrayOutput() GetApplicationAssignmentsApplicationAssignmentArrayOutput

func (GetApplicationAssignmentsApplicationAssignmentArray) ToGetApplicationAssignmentsApplicationAssignmentArrayOutputWithContext

func (i GetApplicationAssignmentsApplicationAssignmentArray) ToGetApplicationAssignmentsApplicationAssignmentArrayOutputWithContext(ctx context.Context) GetApplicationAssignmentsApplicationAssignmentArrayOutput

type GetApplicationAssignmentsApplicationAssignmentArrayInput

type GetApplicationAssignmentsApplicationAssignmentArrayInput interface {
	pulumi.Input

	ToGetApplicationAssignmentsApplicationAssignmentArrayOutput() GetApplicationAssignmentsApplicationAssignmentArrayOutput
	ToGetApplicationAssignmentsApplicationAssignmentArrayOutputWithContext(context.Context) GetApplicationAssignmentsApplicationAssignmentArrayOutput
}

GetApplicationAssignmentsApplicationAssignmentArrayInput is an input type that accepts GetApplicationAssignmentsApplicationAssignmentArray and GetApplicationAssignmentsApplicationAssignmentArrayOutput values. You can construct a concrete instance of `GetApplicationAssignmentsApplicationAssignmentArrayInput` via:

GetApplicationAssignmentsApplicationAssignmentArray{ GetApplicationAssignmentsApplicationAssignmentArgs{...} }

type GetApplicationAssignmentsApplicationAssignmentArrayOutput

type GetApplicationAssignmentsApplicationAssignmentArrayOutput struct{ *pulumi.OutputState }

func (GetApplicationAssignmentsApplicationAssignmentArrayOutput) ElementType

func (GetApplicationAssignmentsApplicationAssignmentArrayOutput) Index

func (GetApplicationAssignmentsApplicationAssignmentArrayOutput) ToGetApplicationAssignmentsApplicationAssignmentArrayOutput

func (GetApplicationAssignmentsApplicationAssignmentArrayOutput) ToGetApplicationAssignmentsApplicationAssignmentArrayOutputWithContext

func (o GetApplicationAssignmentsApplicationAssignmentArrayOutput) ToGetApplicationAssignmentsApplicationAssignmentArrayOutputWithContext(ctx context.Context) GetApplicationAssignmentsApplicationAssignmentArrayOutput

type GetApplicationAssignmentsApplicationAssignmentInput

type GetApplicationAssignmentsApplicationAssignmentInput interface {
	pulumi.Input

	ToGetApplicationAssignmentsApplicationAssignmentOutput() GetApplicationAssignmentsApplicationAssignmentOutput
	ToGetApplicationAssignmentsApplicationAssignmentOutputWithContext(context.Context) GetApplicationAssignmentsApplicationAssignmentOutput
}

GetApplicationAssignmentsApplicationAssignmentInput is an input type that accepts GetApplicationAssignmentsApplicationAssignmentArgs and GetApplicationAssignmentsApplicationAssignmentOutput values. You can construct a concrete instance of `GetApplicationAssignmentsApplicationAssignmentInput` via:

GetApplicationAssignmentsApplicationAssignmentArgs{...}

type GetApplicationAssignmentsApplicationAssignmentOutput

type GetApplicationAssignmentsApplicationAssignmentOutput struct{ *pulumi.OutputState }

func (GetApplicationAssignmentsApplicationAssignmentOutput) ApplicationArn

ARN of the application.

func (GetApplicationAssignmentsApplicationAssignmentOutput) ElementType

func (GetApplicationAssignmentsApplicationAssignmentOutput) PrincipalId

An identifier for an object in IAM Identity Center, such as a user or group.

func (GetApplicationAssignmentsApplicationAssignmentOutput) PrincipalType

Entity type for which the assignment will be created. Valid values are `USER` or `GROUP`.

func (GetApplicationAssignmentsApplicationAssignmentOutput) ToGetApplicationAssignmentsApplicationAssignmentOutput

func (GetApplicationAssignmentsApplicationAssignmentOutput) ToGetApplicationAssignmentsApplicationAssignmentOutputWithContext

func (o GetApplicationAssignmentsApplicationAssignmentOutput) ToGetApplicationAssignmentsApplicationAssignmentOutputWithContext(ctx context.Context) GetApplicationAssignmentsApplicationAssignmentOutput

type GetApplicationAssignmentsArgs

type GetApplicationAssignmentsArgs struct {
	// ARN of the application.
	ApplicationArn string `pulumi:"applicationArn"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region *string `pulumi:"region"`
}

A collection of arguments for invoking getApplicationAssignments.

type GetApplicationAssignmentsOutputArgs

type GetApplicationAssignmentsOutputArgs struct {
	// ARN of the application.
	ApplicationArn pulumi.StringInput `pulumi:"applicationArn"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput `pulumi:"region"`
}

A collection of arguments for invoking getApplicationAssignments.

func (GetApplicationAssignmentsOutputArgs) ElementType

type GetApplicationAssignmentsResult

type GetApplicationAssignmentsResult struct {
	// ARN of the application.
	ApplicationArn string `pulumi:"applicationArn"`
	// List of principals assigned to the application. See the `applicationAssignments` attribute reference below.
	ApplicationAssignments []GetApplicationAssignmentsApplicationAssignment `pulumi:"applicationAssignments"`
	Id                     string                                           `pulumi:"id"`
	Region                 string                                           `pulumi:"region"`
}

A collection of values returned by getApplicationAssignments.

func GetApplicationAssignments

func GetApplicationAssignments(ctx *pulumi.Context, args *GetApplicationAssignmentsArgs, opts ...pulumi.InvokeOption) (*GetApplicationAssignmentsResult, error)

Data source for managing AWS SSO Admin Application Assignments.

## Example Usage

### Basic Usage

```go package main

import (

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ssoadmin"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := ssoadmin.GetApplicationAssignments(ctx, &ssoadmin.GetApplicationAssignmentsArgs{
			ApplicationArn: exampleAwsSsoadminApplication.Arn,
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

type GetApplicationAssignmentsResultOutput

type GetApplicationAssignmentsResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getApplicationAssignments.

func (GetApplicationAssignmentsResultOutput) ApplicationArn

ARN of the application.

func (GetApplicationAssignmentsResultOutput) ApplicationAssignments

List of principals assigned to the application. See the `applicationAssignments` attribute reference below.

func (GetApplicationAssignmentsResultOutput) ElementType

func (GetApplicationAssignmentsResultOutput) Id

func (GetApplicationAssignmentsResultOutput) Region

func (GetApplicationAssignmentsResultOutput) ToGetApplicationAssignmentsResultOutput

func (o GetApplicationAssignmentsResultOutput) ToGetApplicationAssignmentsResultOutput() GetApplicationAssignmentsResultOutput

func (GetApplicationAssignmentsResultOutput) ToGetApplicationAssignmentsResultOutputWithContext

func (o GetApplicationAssignmentsResultOutput) ToGetApplicationAssignmentsResultOutputWithContext(ctx context.Context) GetApplicationAssignmentsResultOutput

type GetApplicationPortalOption

type GetApplicationPortalOption struct {
	SignInOptions []GetApplicationPortalOptionSignInOption `pulumi:"signInOptions"`
	Visibility    string                                   `pulumi:"visibility"`
}

type GetApplicationPortalOptionArgs

type GetApplicationPortalOptionArgs struct {
	SignInOptions GetApplicationPortalOptionSignInOptionArrayInput `pulumi:"signInOptions"`
	Visibility    pulumi.StringInput                               `pulumi:"visibility"`
}

func (GetApplicationPortalOptionArgs) ElementType

func (GetApplicationPortalOptionArgs) ToGetApplicationPortalOptionOutput

func (i GetApplicationPortalOptionArgs) ToGetApplicationPortalOptionOutput() GetApplicationPortalOptionOutput

func (GetApplicationPortalOptionArgs) ToGetApplicationPortalOptionOutputWithContext

func (i GetApplicationPortalOptionArgs) ToGetApplicationPortalOptionOutputWithContext(ctx context.Context) GetApplicationPortalOptionOutput

type GetApplicationPortalOptionArray

type GetApplicationPortalOptionArray []GetApplicationPortalOptionInput

func (GetApplicationPortalOptionArray) ElementType

func (GetApplicationPortalOptionArray) ToGetApplicationPortalOptionArrayOutput

func (i GetApplicationPortalOptionArray) ToGetApplicationPortalOptionArrayOutput() GetApplicationPortalOptionArrayOutput

func (GetApplicationPortalOptionArray) ToGetApplicationPortalOptionArrayOutputWithContext

func (i GetApplicationPortalOptionArray) ToGetApplicationPortalOptionArrayOutputWithContext(ctx context.Context) GetApplicationPortalOptionArrayOutput

type GetApplicationPortalOptionArrayInput

type GetApplicationPortalOptionArrayInput interface {
	pulumi.Input

	ToGetApplicationPortalOptionArrayOutput() GetApplicationPortalOptionArrayOutput
	ToGetApplicationPortalOptionArrayOutputWithContext(context.Context) GetApplicationPortalOptionArrayOutput
}

GetApplicationPortalOptionArrayInput is an input type that accepts GetApplicationPortalOptionArray and GetApplicationPortalOptionArrayOutput values. You can construct a concrete instance of `GetApplicationPortalOptionArrayInput` via:

GetApplicationPortalOptionArray{ GetApplicationPortalOptionArgs{...} }

type GetApplicationPortalOptionArrayOutput

type GetApplicationPortalOptionArrayOutput struct{ *pulumi.OutputState }

func (GetApplicationPortalOptionArrayOutput) ElementType

func (GetApplicationPortalOptionArrayOutput) Index

func (GetApplicationPortalOptionArrayOutput) ToGetApplicationPortalOptionArrayOutput

func (o GetApplicationPortalOptionArrayOutput) ToGetApplicationPortalOptionArrayOutput() GetApplicationPortalOptionArrayOutput

func (GetApplicationPortalOptionArrayOutput) ToGetApplicationPortalOptionArrayOutputWithContext

func (o GetApplicationPortalOptionArrayOutput) ToGetApplicationPortalOptionArrayOutputWithContext(ctx context.Context) GetApplicationPortalOptionArrayOutput

type GetApplicationPortalOptionInput

type GetApplicationPortalOptionInput interface {
	pulumi.Input

	ToGetApplicationPortalOptionOutput() GetApplicationPortalOptionOutput
	ToGetApplicationPortalOptionOutputWithContext(context.Context) GetApplicationPortalOptionOutput
}

GetApplicationPortalOptionInput is an input type that accepts GetApplicationPortalOptionArgs and GetApplicationPortalOptionOutput values. You can construct a concrete instance of `GetApplicationPortalOptionInput` via:

GetApplicationPortalOptionArgs{...}

type GetApplicationPortalOptionOutput

type GetApplicationPortalOptionOutput struct{ *pulumi.OutputState }

func (GetApplicationPortalOptionOutput) ElementType

func (GetApplicationPortalOptionOutput) SignInOptions

func (GetApplicationPortalOptionOutput) ToGetApplicationPortalOptionOutput

func (o GetApplicationPortalOptionOutput) ToGetApplicationPortalOptionOutput() GetApplicationPortalOptionOutput

func (GetApplicationPortalOptionOutput) ToGetApplicationPortalOptionOutputWithContext

func (o GetApplicationPortalOptionOutput) ToGetApplicationPortalOptionOutputWithContext(ctx context.Context) GetApplicationPortalOptionOutput

func (GetApplicationPortalOptionOutput) Visibility

type GetApplicationPortalOptionSignInOption

type GetApplicationPortalOptionSignInOption struct {
	ApplicationUrl string `pulumi:"applicationUrl"`
	Origin         string `pulumi:"origin"`
}

type GetApplicationPortalOptionSignInOptionArgs

type GetApplicationPortalOptionSignInOptionArgs struct {
	ApplicationUrl pulumi.StringInput `pulumi:"applicationUrl"`
	Origin         pulumi.StringInput `pulumi:"origin"`
}

func (GetApplicationPortalOptionSignInOptionArgs) ElementType

func (GetApplicationPortalOptionSignInOptionArgs) ToGetApplicationPortalOptionSignInOptionOutput

func (i GetApplicationPortalOptionSignInOptionArgs) ToGetApplicationPortalOptionSignInOptionOutput() GetApplicationPortalOptionSignInOptionOutput

func (GetApplicationPortalOptionSignInOptionArgs) ToGetApplicationPortalOptionSignInOptionOutputWithContext

func (i GetApplicationPortalOptionSignInOptionArgs) ToGetApplicationPortalOptionSignInOptionOutputWithContext(ctx context.Context) GetApplicationPortalOptionSignInOptionOutput

type GetApplicationPortalOptionSignInOptionArray

type GetApplicationPortalOptionSignInOptionArray []GetApplicationPortalOptionSignInOptionInput

func (GetApplicationPortalOptionSignInOptionArray) ElementType

func (GetApplicationPortalOptionSignInOptionArray) ToGetApplicationPortalOptionSignInOptionArrayOutput

func (i GetApplicationPortalOptionSignInOptionArray) ToGetApplicationPortalOptionSignInOptionArrayOutput() GetApplicationPortalOptionSignInOptionArrayOutput

func (GetApplicationPortalOptionSignInOptionArray) ToGetApplicationPortalOptionSignInOptionArrayOutputWithContext

func (i GetApplicationPortalOptionSignInOptionArray) ToGetApplicationPortalOptionSignInOptionArrayOutputWithContext(ctx context.Context) GetApplicationPortalOptionSignInOptionArrayOutput

type GetApplicationPortalOptionSignInOptionArrayInput

type GetApplicationPortalOptionSignInOptionArrayInput interface {
	pulumi.Input

	ToGetApplicationPortalOptionSignInOptionArrayOutput() GetApplicationPortalOptionSignInOptionArrayOutput
	ToGetApplicationPortalOptionSignInOptionArrayOutputWithContext(context.Context) GetApplicationPortalOptionSignInOptionArrayOutput
}

GetApplicationPortalOptionSignInOptionArrayInput is an input type that accepts GetApplicationPortalOptionSignInOptionArray and GetApplicationPortalOptionSignInOptionArrayOutput values. You can construct a concrete instance of `GetApplicationPortalOptionSignInOptionArrayInput` via:

GetApplicationPortalOptionSignInOptionArray{ GetApplicationPortalOptionSignInOptionArgs{...} }

type GetApplicationPortalOptionSignInOptionArrayOutput

type GetApplicationPortalOptionSignInOptionArrayOutput struct{ *pulumi.OutputState }

func (GetApplicationPortalOptionSignInOptionArrayOutput) ElementType

func (GetApplicationPortalOptionSignInOptionArrayOutput) Index

func (GetApplicationPortalOptionSignInOptionArrayOutput) ToGetApplicationPortalOptionSignInOptionArrayOutput

func (o GetApplicationPortalOptionSignInOptionArrayOutput) ToGetApplicationPortalOptionSignInOptionArrayOutput() GetApplicationPortalOptionSignInOptionArrayOutput

func (GetApplicationPortalOptionSignInOptionArrayOutput) ToGetApplicationPortalOptionSignInOptionArrayOutputWithContext

func (o GetApplicationPortalOptionSignInOptionArrayOutput) ToGetApplicationPortalOptionSignInOptionArrayOutputWithContext(ctx context.Context) GetApplicationPortalOptionSignInOptionArrayOutput

type GetApplicationPortalOptionSignInOptionInput

type GetApplicationPortalOptionSignInOptionInput interface {
	pulumi.Input

	ToGetApplicationPortalOptionSignInOptionOutput() GetApplicationPortalOptionSignInOptionOutput
	ToGetApplicationPortalOptionSignInOptionOutputWithContext(context.Context) GetApplicationPortalOptionSignInOptionOutput
}

GetApplicationPortalOptionSignInOptionInput is an input type that accepts GetApplicationPortalOptionSignInOptionArgs and GetApplicationPortalOptionSignInOptionOutput values. You can construct a concrete instance of `GetApplicationPortalOptionSignInOptionInput` via:

GetApplicationPortalOptionSignInOptionArgs{...}

type GetApplicationPortalOptionSignInOptionOutput

type GetApplicationPortalOptionSignInOptionOutput struct{ *pulumi.OutputState }

func (GetApplicationPortalOptionSignInOptionOutput) ApplicationUrl

func (GetApplicationPortalOptionSignInOptionOutput) ElementType

func (GetApplicationPortalOptionSignInOptionOutput) Origin

func (GetApplicationPortalOptionSignInOptionOutput) ToGetApplicationPortalOptionSignInOptionOutput

func (o GetApplicationPortalOptionSignInOptionOutput) ToGetApplicationPortalOptionSignInOptionOutput() GetApplicationPortalOptionSignInOptionOutput

func (GetApplicationPortalOptionSignInOptionOutput) ToGetApplicationPortalOptionSignInOptionOutputWithContext

func (o GetApplicationPortalOptionSignInOptionOutput) ToGetApplicationPortalOptionSignInOptionOutputWithContext(ctx context.Context) GetApplicationPortalOptionSignInOptionOutput

type GetApplicationProvidersApplicationProvider

type GetApplicationProvidersApplicationProvider struct {
	// ARN of the application provider.
	ApplicationProviderArn string `pulumi:"applicationProviderArn"`
	// An object describing how IAM Identity Center represents the application provider in the portal. See `displayData` below.
	DisplayDatas []GetApplicationProvidersApplicationProviderDisplayData `pulumi:"displayDatas"`
	// Protocol that the application provider uses to perform federation. Valid values are `SAML` and `OAUTH`.
	FederationProtocol string `pulumi:"federationProtocol"`
}

type GetApplicationProvidersApplicationProviderArgs

type GetApplicationProvidersApplicationProviderArgs struct {
	// ARN of the application provider.
	ApplicationProviderArn pulumi.StringInput `pulumi:"applicationProviderArn"`
	// An object describing how IAM Identity Center represents the application provider in the portal. See `displayData` below.
	DisplayDatas GetApplicationProvidersApplicationProviderDisplayDataArrayInput `pulumi:"displayDatas"`
	// Protocol that the application provider uses to perform federation. Valid values are `SAML` and `OAUTH`.
	FederationProtocol pulumi.StringInput `pulumi:"federationProtocol"`
}

func (GetApplicationProvidersApplicationProviderArgs) ElementType

func (GetApplicationProvidersApplicationProviderArgs) ToGetApplicationProvidersApplicationProviderOutput

func (i GetApplicationProvidersApplicationProviderArgs) ToGetApplicationProvidersApplicationProviderOutput() GetApplicationProvidersApplicationProviderOutput

func (GetApplicationProvidersApplicationProviderArgs) ToGetApplicationProvidersApplicationProviderOutputWithContext

func (i GetApplicationProvidersApplicationProviderArgs) ToGetApplicationProvidersApplicationProviderOutputWithContext(ctx context.Context) GetApplicationProvidersApplicationProviderOutput

type GetApplicationProvidersApplicationProviderArray

type GetApplicationProvidersApplicationProviderArray []GetApplicationProvidersApplicationProviderInput

func (GetApplicationProvidersApplicationProviderArray) ElementType

func (GetApplicationProvidersApplicationProviderArray) ToGetApplicationProvidersApplicationProviderArrayOutput

func (i GetApplicationProvidersApplicationProviderArray) ToGetApplicationProvidersApplicationProviderArrayOutput() GetApplicationProvidersApplicationProviderArrayOutput

func (GetApplicationProvidersApplicationProviderArray) ToGetApplicationProvidersApplicationProviderArrayOutputWithContext

func (i GetApplicationProvidersApplicationProviderArray) ToGetApplicationProvidersApplicationProviderArrayOutputWithContext(ctx context.Context) GetApplicationProvidersApplicationProviderArrayOutput

type GetApplicationProvidersApplicationProviderArrayInput

type GetApplicationProvidersApplicationProviderArrayInput interface {
	pulumi.Input

	ToGetApplicationProvidersApplicationProviderArrayOutput() GetApplicationProvidersApplicationProviderArrayOutput
	ToGetApplicationProvidersApplicationProviderArrayOutputWithContext(context.Context) GetApplicationProvidersApplicationProviderArrayOutput
}

GetApplicationProvidersApplicationProviderArrayInput is an input type that accepts GetApplicationProvidersApplicationProviderArray and GetApplicationProvidersApplicationProviderArrayOutput values. You can construct a concrete instance of `GetApplicationProvidersApplicationProviderArrayInput` via:

GetApplicationProvidersApplicationProviderArray{ GetApplicationProvidersApplicationProviderArgs{...} }

type GetApplicationProvidersApplicationProviderArrayOutput

type GetApplicationProvidersApplicationProviderArrayOutput struct{ *pulumi.OutputState }

func (GetApplicationProvidersApplicationProviderArrayOutput) ElementType

func (GetApplicationProvidersApplicationProviderArrayOutput) Index

func (GetApplicationProvidersApplicationProviderArrayOutput) ToGetApplicationProvidersApplicationProviderArrayOutput

func (GetApplicationProvidersApplicationProviderArrayOutput) ToGetApplicationProvidersApplicationProviderArrayOutputWithContext

func (o GetApplicationProvidersApplicationProviderArrayOutput) ToGetApplicationProvidersApplicationProviderArrayOutputWithContext(ctx context.Context) GetApplicationProvidersApplicationProviderArrayOutput

type GetApplicationProvidersApplicationProviderDisplayData

type GetApplicationProvidersApplicationProviderDisplayData struct {
	// Description of the application provider.
	Description string `pulumi:"description"`
	// Name of the application provider.
	DisplayName string `pulumi:"displayName"`
	// URL that points to an icon that represents the application provider.
	IconUrl string `pulumi:"iconUrl"`
}

type GetApplicationProvidersApplicationProviderDisplayDataArgs

type GetApplicationProvidersApplicationProviderDisplayDataArgs struct {
	// Description of the application provider.
	Description pulumi.StringInput `pulumi:"description"`
	// Name of the application provider.
	DisplayName pulumi.StringInput `pulumi:"displayName"`
	// URL that points to an icon that represents the application provider.
	IconUrl pulumi.StringInput `pulumi:"iconUrl"`
}

func (GetApplicationProvidersApplicationProviderDisplayDataArgs) ElementType

func (GetApplicationProvidersApplicationProviderDisplayDataArgs) ToGetApplicationProvidersApplicationProviderDisplayDataOutput

func (GetApplicationProvidersApplicationProviderDisplayDataArgs) ToGetApplicationProvidersApplicationProviderDisplayDataOutputWithContext

func (i GetApplicationProvidersApplicationProviderDisplayDataArgs) ToGetApplicationProvidersApplicationProviderDisplayDataOutputWithContext(ctx context.Context) GetApplicationProvidersApplicationProviderDisplayDataOutput

type GetApplicationProvidersApplicationProviderDisplayDataArray

type GetApplicationProvidersApplicationProviderDisplayDataArray []GetApplicationProvidersApplicationProviderDisplayDataInput

func (GetApplicationProvidersApplicationProviderDisplayDataArray) ElementType

func (GetApplicationProvidersApplicationProviderDisplayDataArray) ToGetApplicationProvidersApplicationProviderDisplayDataArrayOutput

func (GetApplicationProvidersApplicationProviderDisplayDataArray) ToGetApplicationProvidersApplicationProviderDisplayDataArrayOutputWithContext

func (i GetApplicationProvidersApplicationProviderDisplayDataArray) ToGetApplicationProvidersApplicationProviderDisplayDataArrayOutputWithContext(ctx context.Context) GetApplicationProvidersApplicationProviderDisplayDataArrayOutput

type GetApplicationProvidersApplicationProviderDisplayDataArrayInput

type GetApplicationProvidersApplicationProviderDisplayDataArrayInput interface {
	pulumi.Input

	ToGetApplicationProvidersApplicationProviderDisplayDataArrayOutput() GetApplicationProvidersApplicationProviderDisplayDataArrayOutput
	ToGetApplicationProvidersApplicationProviderDisplayDataArrayOutputWithContext(context.Context) GetApplicationProvidersApplicationProviderDisplayDataArrayOutput
}

GetApplicationProvidersApplicationProviderDisplayDataArrayInput is an input type that accepts GetApplicationProvidersApplicationProviderDisplayDataArray and GetApplicationProvidersApplicationProviderDisplayDataArrayOutput values. You can construct a concrete instance of `GetApplicationProvidersApplicationProviderDisplayDataArrayInput` via:

GetApplicationProvidersApplicationProviderDisplayDataArray{ GetApplicationProvidersApplicationProviderDisplayDataArgs{...} }

type GetApplicationProvidersApplicationProviderDisplayDataArrayOutput

type GetApplicationProvidersApplicationProviderDisplayDataArrayOutput struct{ *pulumi.OutputState }

func (GetApplicationProvidersApplicationProviderDisplayDataArrayOutput) ElementType

func (GetApplicationProvidersApplicationProviderDisplayDataArrayOutput) Index

func (GetApplicationProvidersApplicationProviderDisplayDataArrayOutput) ToGetApplicationProvidersApplicationProviderDisplayDataArrayOutput

func (GetApplicationProvidersApplicationProviderDisplayDataArrayOutput) ToGetApplicationProvidersApplicationProviderDisplayDataArrayOutputWithContext

func (o GetApplicationProvidersApplicationProviderDisplayDataArrayOutput) ToGetApplicationProvidersApplicationProviderDisplayDataArrayOutputWithContext(ctx context.Context) GetApplicationProvidersApplicationProviderDisplayDataArrayOutput

type GetApplicationProvidersApplicationProviderDisplayDataInput

type GetApplicationProvidersApplicationProviderDisplayDataInput interface {
	pulumi.Input

	ToGetApplicationProvidersApplicationProviderDisplayDataOutput() GetApplicationProvidersApplicationProviderDisplayDataOutput
	ToGetApplicationProvidersApplicationProviderDisplayDataOutputWithContext(context.Context) GetApplicationProvidersApplicationProviderDisplayDataOutput
}

GetApplicationProvidersApplicationProviderDisplayDataInput is an input type that accepts GetApplicationProvidersApplicationProviderDisplayDataArgs and GetApplicationProvidersApplicationProviderDisplayDataOutput values. You can construct a concrete instance of `GetApplicationProvidersApplicationProviderDisplayDataInput` via:

GetApplicationProvidersApplicationProviderDisplayDataArgs{...}

type GetApplicationProvidersApplicationProviderDisplayDataOutput

type GetApplicationProvidersApplicationProviderDisplayDataOutput struct{ *pulumi.OutputState }

func (GetApplicationProvidersApplicationProviderDisplayDataOutput) Description

Description of the application provider.

func (GetApplicationProvidersApplicationProviderDisplayDataOutput) DisplayName

Name of the application provider.

func (GetApplicationProvidersApplicationProviderDisplayDataOutput) ElementType

func (GetApplicationProvidersApplicationProviderDisplayDataOutput) IconUrl

URL that points to an icon that represents the application provider.

func (GetApplicationProvidersApplicationProviderDisplayDataOutput) ToGetApplicationProvidersApplicationProviderDisplayDataOutput

func (GetApplicationProvidersApplicationProviderDisplayDataOutput) ToGetApplicationProvidersApplicationProviderDisplayDataOutputWithContext

func (o GetApplicationProvidersApplicationProviderDisplayDataOutput) ToGetApplicationProvidersApplicationProviderDisplayDataOutputWithContext(ctx context.Context) GetApplicationProvidersApplicationProviderDisplayDataOutput

type GetApplicationProvidersApplicationProviderInput

type GetApplicationProvidersApplicationProviderInput interface {
	pulumi.Input

	ToGetApplicationProvidersApplicationProviderOutput() GetApplicationProvidersApplicationProviderOutput
	ToGetApplicationProvidersApplicationProviderOutputWithContext(context.Context) GetApplicationProvidersApplicationProviderOutput
}

GetApplicationProvidersApplicationProviderInput is an input type that accepts GetApplicationProvidersApplicationProviderArgs and GetApplicationProvidersApplicationProviderOutput values. You can construct a concrete instance of `GetApplicationProvidersApplicationProviderInput` via:

GetApplicationProvidersApplicationProviderArgs{...}

type GetApplicationProvidersApplicationProviderOutput

type GetApplicationProvidersApplicationProviderOutput struct{ *pulumi.OutputState }

func (GetApplicationProvidersApplicationProviderOutput) ApplicationProviderArn

ARN of the application provider.

func (GetApplicationProvidersApplicationProviderOutput) DisplayDatas

An object describing how IAM Identity Center represents the application provider in the portal. See `displayData` below.

func (GetApplicationProvidersApplicationProviderOutput) ElementType

func (GetApplicationProvidersApplicationProviderOutput) FederationProtocol

Protocol that the application provider uses to perform federation. Valid values are `SAML` and `OAUTH`.

func (GetApplicationProvidersApplicationProviderOutput) ToGetApplicationProvidersApplicationProviderOutput

func (o GetApplicationProvidersApplicationProviderOutput) ToGetApplicationProvidersApplicationProviderOutput() GetApplicationProvidersApplicationProviderOutput

func (GetApplicationProvidersApplicationProviderOutput) ToGetApplicationProvidersApplicationProviderOutputWithContext

func (o GetApplicationProvidersApplicationProviderOutput) ToGetApplicationProvidersApplicationProviderOutputWithContext(ctx context.Context) GetApplicationProvidersApplicationProviderOutput

type GetApplicationProvidersArgs

type GetApplicationProvidersArgs struct {
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region *string `pulumi:"region"`
}

A collection of arguments for invoking getApplicationProviders.

type GetApplicationProvidersOutputArgs

type GetApplicationProvidersOutputArgs struct {
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput `pulumi:"region"`
}

A collection of arguments for invoking getApplicationProviders.

func (GetApplicationProvidersOutputArgs) ElementType

type GetApplicationProvidersResult

type GetApplicationProvidersResult struct {
	// A list of application providers available in the current region. See `applicationProviders` below.
	ApplicationProviders []GetApplicationProvidersApplicationProvider `pulumi:"applicationProviders"`
	// AWS region.
	Id     string `pulumi:"id"`
	Region string `pulumi:"region"`
}

A collection of values returned by getApplicationProviders.

func GetApplicationProviders

func GetApplicationProviders(ctx *pulumi.Context, args *GetApplicationProvidersArgs, opts ...pulumi.InvokeOption) (*GetApplicationProvidersResult, error)

Data source for managing AWS SSO Admin Application Providers.

## Example Usage

### Basic Usage

```go package main

import (

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ssoadmin"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := ssoadmin.GetApplicationProviders(ctx, &ssoadmin.GetApplicationProvidersArgs{}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

type GetApplicationProvidersResultOutput

type GetApplicationProvidersResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getApplicationProviders.

func (GetApplicationProvidersResultOutput) ApplicationProviders

A list of application providers available in the current region. See `applicationProviders` below.

func (GetApplicationProvidersResultOutput) ElementType

func (GetApplicationProvidersResultOutput) Id

AWS region.

func (GetApplicationProvidersResultOutput) Region

func (GetApplicationProvidersResultOutput) ToGetApplicationProvidersResultOutput

func (o GetApplicationProvidersResultOutput) ToGetApplicationProvidersResultOutput() GetApplicationProvidersResultOutput

func (GetApplicationProvidersResultOutput) ToGetApplicationProvidersResultOutputWithContext

func (o GetApplicationProvidersResultOutput) ToGetApplicationProvidersResultOutputWithContext(ctx context.Context) GetApplicationProvidersResultOutput

type GetInstancesArgs

type GetInstancesArgs struct {
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region *string `pulumi:"region"`
}

A collection of arguments for invoking getInstances.

type GetInstancesOutputArgs

type GetInstancesOutputArgs struct {
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput `pulumi:"region"`
}

A collection of arguments for invoking getInstances.

func (GetInstancesOutputArgs) ElementType

func (GetInstancesOutputArgs) ElementType() reflect.Type

type GetInstancesResult

type GetInstancesResult struct {
	// Set of Amazon Resource Names (ARNs) of the SSO Instances.
	Arns []string `pulumi:"arns"`
	// The provider-assigned unique ID for this managed resource.
	Id string `pulumi:"id"`
	// Set of identifiers of the identity stores connected to the SSO Instances.
	IdentityStoreIds []string `pulumi:"identityStoreIds"`
	Region           string   `pulumi:"region"`
}

A collection of values returned by getInstances.

func GetInstances

func GetInstances(ctx *pulumi.Context, args *GetInstancesArgs, opts ...pulumi.InvokeOption) (*GetInstancesResult, error)

Use this data source to get ARNs and Identity Store IDs of Single Sign-On (SSO) Instances.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ssoadmin"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := ssoadmin.GetInstances(ctx, &ssoadmin.GetInstancesArgs{}, nil)
		if err != nil {
			return err
		}
		ctx.Export("arn", example.Arns[0])
		ctx.Export("identityStoreId", example.IdentityStoreIds[0])
		return nil
	})
}

```

type GetInstancesResultOutput

type GetInstancesResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getInstances.

func (GetInstancesResultOutput) Arns

Set of Amazon Resource Names (ARNs) of the SSO Instances.

func (GetInstancesResultOutput) ElementType

func (GetInstancesResultOutput) ElementType() reflect.Type

func (GetInstancesResultOutput) Id

The provider-assigned unique ID for this managed resource.

func (GetInstancesResultOutput) IdentityStoreIds

func (o GetInstancesResultOutput) IdentityStoreIds() pulumi.StringArrayOutput

Set of identifiers of the identity stores connected to the SSO Instances.

func (GetInstancesResultOutput) Region

func (GetInstancesResultOutput) ToGetInstancesResultOutput

func (o GetInstancesResultOutput) ToGetInstancesResultOutput() GetInstancesResultOutput

func (GetInstancesResultOutput) ToGetInstancesResultOutputWithContext

func (o GetInstancesResultOutput) ToGetInstancesResultOutputWithContext(ctx context.Context) GetInstancesResultOutput

type GetPermissionSetsArgs

type GetPermissionSetsArgs struct {
	// ARN of the SSO Instance associated with the permission set.
	InstanceArn string `pulumi:"instanceArn"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region *string `pulumi:"region"`
}

A collection of arguments for invoking getPermissionSets.

type GetPermissionSetsOutputArgs

type GetPermissionSetsOutputArgs struct {
	// ARN of the SSO Instance associated with the permission set.
	InstanceArn pulumi.StringInput `pulumi:"instanceArn"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput `pulumi:"region"`
}

A collection of arguments for invoking getPermissionSets.

func (GetPermissionSetsOutputArgs) ElementType

type GetPermissionSetsResult

type GetPermissionSetsResult struct {
	// Set of string contain the ARN of all Permission Sets.
	Arns        []string `pulumi:"arns"`
	Id          string   `pulumi:"id"`
	InstanceArn string   `pulumi:"instanceArn"`
	Region      string   `pulumi:"region"`
}

A collection of values returned by getPermissionSets.

func GetPermissionSets

func GetPermissionSets(ctx *pulumi.Context, args *GetPermissionSetsArgs, opts ...pulumi.InvokeOption) (*GetPermissionSetsResult, error)

Data source returning the ARN of all AWS SSO Admin Permission Sets.

## Example Usage

### Basic Usage

```go package main

import (

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ssoadmin"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := ssoadmin.GetInstances(ctx, &ssoadmin.GetInstancesArgs{}, nil)
		if err != nil {
			return err
		}
		_, err = ssoadmin.GetPermissionSets(ctx, &ssoadmin.GetPermissionSetsArgs{
			InstanceArn: example.Arns[0],
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

type GetPermissionSetsResultOutput

type GetPermissionSetsResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getPermissionSets.

func (GetPermissionSetsResultOutput) Arns

Set of string contain the ARN of all Permission Sets.

func (GetPermissionSetsResultOutput) ElementType

func (GetPermissionSetsResultOutput) Id

func (GetPermissionSetsResultOutput) InstanceArn

func (GetPermissionSetsResultOutput) Region

func (GetPermissionSetsResultOutput) ToGetPermissionSetsResultOutput

func (o GetPermissionSetsResultOutput) ToGetPermissionSetsResultOutput() GetPermissionSetsResultOutput

func (GetPermissionSetsResultOutput) ToGetPermissionSetsResultOutputWithContext

func (o GetPermissionSetsResultOutput) ToGetPermissionSetsResultOutputWithContext(ctx context.Context) GetPermissionSetsResultOutput

type GetPrincipalApplicationAssignmentsApplicationAssignment

type GetPrincipalApplicationAssignmentsApplicationAssignment struct {
	// ARN of the application.
	ApplicationArn string `pulumi:"applicationArn"`
	// An identifier for an object in IAM Identity Center, such as a user or group.
	PrincipalId string `pulumi:"principalId"`
	// Entity type for which the assignment will be created. Valid values are `USER` or `GROUP`.
	PrincipalType string `pulumi:"principalType"`
}

type GetPrincipalApplicationAssignmentsApplicationAssignmentArgs

type GetPrincipalApplicationAssignmentsApplicationAssignmentArgs struct {
	// ARN of the application.
	ApplicationArn pulumi.StringInput `pulumi:"applicationArn"`
	// An identifier for an object in IAM Identity Center, such as a user or group.
	PrincipalId pulumi.StringInput `pulumi:"principalId"`
	// Entity type for which the assignment will be created. Valid values are `USER` or `GROUP`.
	PrincipalType pulumi.StringInput `pulumi:"principalType"`
}

func (GetPrincipalApplicationAssignmentsApplicationAssignmentArgs) ElementType

func (GetPrincipalApplicationAssignmentsApplicationAssignmentArgs) ToGetPrincipalApplicationAssignmentsApplicationAssignmentOutput

func (GetPrincipalApplicationAssignmentsApplicationAssignmentArgs) ToGetPrincipalApplicationAssignmentsApplicationAssignmentOutputWithContext

func (i GetPrincipalApplicationAssignmentsApplicationAssignmentArgs) ToGetPrincipalApplicationAssignmentsApplicationAssignmentOutputWithContext(ctx context.Context) GetPrincipalApplicationAssignmentsApplicationAssignmentOutput

type GetPrincipalApplicationAssignmentsApplicationAssignmentArray

type GetPrincipalApplicationAssignmentsApplicationAssignmentArray []GetPrincipalApplicationAssignmentsApplicationAssignmentInput

func (GetPrincipalApplicationAssignmentsApplicationAssignmentArray) ElementType

func (GetPrincipalApplicationAssignmentsApplicationAssignmentArray) ToGetPrincipalApplicationAssignmentsApplicationAssignmentArrayOutput

func (GetPrincipalApplicationAssignmentsApplicationAssignmentArray) ToGetPrincipalApplicationAssignmentsApplicationAssignmentArrayOutputWithContext

func (i GetPrincipalApplicationAssignmentsApplicationAssignmentArray) ToGetPrincipalApplicationAssignmentsApplicationAssignmentArrayOutputWithContext(ctx context.Context) GetPrincipalApplicationAssignmentsApplicationAssignmentArrayOutput

type GetPrincipalApplicationAssignmentsApplicationAssignmentArrayInput

type GetPrincipalApplicationAssignmentsApplicationAssignmentArrayInput interface {
	pulumi.Input

	ToGetPrincipalApplicationAssignmentsApplicationAssignmentArrayOutput() GetPrincipalApplicationAssignmentsApplicationAssignmentArrayOutput
	ToGetPrincipalApplicationAssignmentsApplicationAssignmentArrayOutputWithContext(context.Context) GetPrincipalApplicationAssignmentsApplicationAssignmentArrayOutput
}

GetPrincipalApplicationAssignmentsApplicationAssignmentArrayInput is an input type that accepts GetPrincipalApplicationAssignmentsApplicationAssignmentArray and GetPrincipalApplicationAssignmentsApplicationAssignmentArrayOutput values. You can construct a concrete instance of `GetPrincipalApplicationAssignmentsApplicationAssignmentArrayInput` via:

GetPrincipalApplicationAssignmentsApplicationAssignmentArray{ GetPrincipalApplicationAssignmentsApplicationAssignmentArgs{...} }

type GetPrincipalApplicationAssignmentsApplicationAssignmentArrayOutput

type GetPrincipalApplicationAssignmentsApplicationAssignmentArrayOutput struct{ *pulumi.OutputState }

func (GetPrincipalApplicationAssignmentsApplicationAssignmentArrayOutput) ElementType

func (GetPrincipalApplicationAssignmentsApplicationAssignmentArrayOutput) Index

func (GetPrincipalApplicationAssignmentsApplicationAssignmentArrayOutput) ToGetPrincipalApplicationAssignmentsApplicationAssignmentArrayOutput

func (GetPrincipalApplicationAssignmentsApplicationAssignmentArrayOutput) ToGetPrincipalApplicationAssignmentsApplicationAssignmentArrayOutputWithContext

func (o GetPrincipalApplicationAssignmentsApplicationAssignmentArrayOutput) ToGetPrincipalApplicationAssignmentsApplicationAssignmentArrayOutputWithContext(ctx context.Context) GetPrincipalApplicationAssignmentsApplicationAssignmentArrayOutput

type GetPrincipalApplicationAssignmentsApplicationAssignmentInput

type GetPrincipalApplicationAssignmentsApplicationAssignmentInput interface {
	pulumi.Input

	ToGetPrincipalApplicationAssignmentsApplicationAssignmentOutput() GetPrincipalApplicationAssignmentsApplicationAssignmentOutput
	ToGetPrincipalApplicationAssignmentsApplicationAssignmentOutputWithContext(context.Context) GetPrincipalApplicationAssignmentsApplicationAssignmentOutput
}

GetPrincipalApplicationAssignmentsApplicationAssignmentInput is an input type that accepts GetPrincipalApplicationAssignmentsApplicationAssignmentArgs and GetPrincipalApplicationAssignmentsApplicationAssignmentOutput values. You can construct a concrete instance of `GetPrincipalApplicationAssignmentsApplicationAssignmentInput` via:

GetPrincipalApplicationAssignmentsApplicationAssignmentArgs{...}

type GetPrincipalApplicationAssignmentsApplicationAssignmentOutput

type GetPrincipalApplicationAssignmentsApplicationAssignmentOutput struct{ *pulumi.OutputState }

func (GetPrincipalApplicationAssignmentsApplicationAssignmentOutput) ApplicationArn

ARN of the application.

func (GetPrincipalApplicationAssignmentsApplicationAssignmentOutput) ElementType

func (GetPrincipalApplicationAssignmentsApplicationAssignmentOutput) PrincipalId

An identifier for an object in IAM Identity Center, such as a user or group.

func (GetPrincipalApplicationAssignmentsApplicationAssignmentOutput) PrincipalType

Entity type for which the assignment will be created. Valid values are `USER` or `GROUP`.

func (GetPrincipalApplicationAssignmentsApplicationAssignmentOutput) ToGetPrincipalApplicationAssignmentsApplicationAssignmentOutput

func (GetPrincipalApplicationAssignmentsApplicationAssignmentOutput) ToGetPrincipalApplicationAssignmentsApplicationAssignmentOutputWithContext

func (o GetPrincipalApplicationAssignmentsApplicationAssignmentOutput) ToGetPrincipalApplicationAssignmentsApplicationAssignmentOutputWithContext(ctx context.Context) GetPrincipalApplicationAssignmentsApplicationAssignmentOutput

type GetPrincipalApplicationAssignmentsArgs

type GetPrincipalApplicationAssignmentsArgs struct {
	// List of principals assigned to the application. See the `applicationAssignments` attribute reference below.
	ApplicationAssignments []GetPrincipalApplicationAssignmentsApplicationAssignment `pulumi:"applicationAssignments"`
	// ARN of the instance of IAM Identity Center.
	InstanceArn string `pulumi:"instanceArn"`
	// An identifier for an object in IAM Identity Center, such as a user or group.
	PrincipalId string `pulumi:"principalId"`
	// Entity type for which the assignment will be created. Valid values are `USER` or `GROUP`.
	PrincipalType string `pulumi:"principalType"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region *string `pulumi:"region"`
}

A collection of arguments for invoking getPrincipalApplicationAssignments.

type GetPrincipalApplicationAssignmentsOutputArgs

type GetPrincipalApplicationAssignmentsOutputArgs struct {
	// List of principals assigned to the application. See the `applicationAssignments` attribute reference below.
	ApplicationAssignments GetPrincipalApplicationAssignmentsApplicationAssignmentArrayInput `pulumi:"applicationAssignments"`
	// ARN of the instance of IAM Identity Center.
	InstanceArn pulumi.StringInput `pulumi:"instanceArn"`
	// An identifier for an object in IAM Identity Center, such as a user or group.
	PrincipalId pulumi.StringInput `pulumi:"principalId"`
	// Entity type for which the assignment will be created. Valid values are `USER` or `GROUP`.
	PrincipalType pulumi.StringInput `pulumi:"principalType"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput `pulumi:"region"`
}

A collection of arguments for invoking getPrincipalApplicationAssignments.

func (GetPrincipalApplicationAssignmentsOutputArgs) ElementType

type GetPrincipalApplicationAssignmentsResult

type GetPrincipalApplicationAssignmentsResult struct {
	// List of principals assigned to the application. See the `applicationAssignments` attribute reference below.
	ApplicationAssignments []GetPrincipalApplicationAssignmentsApplicationAssignment `pulumi:"applicationAssignments"`
	Id                     string                                                    `pulumi:"id"`
	InstanceArn            string                                                    `pulumi:"instanceArn"`
	// An identifier for an object in IAM Identity Center, such as a user or group.
	PrincipalId string `pulumi:"principalId"`
	// Entity type for which the assignment will be created. Valid values are `USER` or `GROUP`.
	PrincipalType string `pulumi:"principalType"`
	Region        string `pulumi:"region"`
}

A collection of values returned by getPrincipalApplicationAssignments.

func GetPrincipalApplicationAssignments

Data source for viewing AWS SSO Admin Principal Application Assignments.

## Example Usage

### Basic Usage

```go package main

import (

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ssoadmin"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := ssoadmin.GetPrincipalApplicationAssignments(ctx, &ssoadmin.GetPrincipalApplicationAssignmentsArgs{
			InstanceArn:   test.Arns[0],
			PrincipalId:   testAwsIdentitystoreUser.UserId,
			PrincipalType: "USER",
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

type GetPrincipalApplicationAssignmentsResultOutput

type GetPrincipalApplicationAssignmentsResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getPrincipalApplicationAssignments.

func (GetPrincipalApplicationAssignmentsResultOutput) ApplicationAssignments

List of principals assigned to the application. See the `applicationAssignments` attribute reference below.

func (GetPrincipalApplicationAssignmentsResultOutput) ElementType

func (GetPrincipalApplicationAssignmentsResultOutput) Id

func (GetPrincipalApplicationAssignmentsResultOutput) InstanceArn

func (GetPrincipalApplicationAssignmentsResultOutput) PrincipalId

An identifier for an object in IAM Identity Center, such as a user or group.

func (GetPrincipalApplicationAssignmentsResultOutput) PrincipalType

Entity type for which the assignment will be created. Valid values are `USER` or `GROUP`.

func (GetPrincipalApplicationAssignmentsResultOutput) Region

func (GetPrincipalApplicationAssignmentsResultOutput) ToGetPrincipalApplicationAssignmentsResultOutput

func (o GetPrincipalApplicationAssignmentsResultOutput) ToGetPrincipalApplicationAssignmentsResultOutput() GetPrincipalApplicationAssignmentsResultOutput

func (GetPrincipalApplicationAssignmentsResultOutput) ToGetPrincipalApplicationAssignmentsResultOutputWithContext

func (o GetPrincipalApplicationAssignmentsResultOutput) ToGetPrincipalApplicationAssignmentsResultOutputWithContext(ctx context.Context) GetPrincipalApplicationAssignmentsResultOutput

type InstanceAccessControlAttributes

type InstanceAccessControlAttributes struct {
	pulumi.CustomResourceState

	// See AccessControlAttribute for more details.
	Attributes InstanceAccessControlAttributesAttributeArrayOutput `pulumi:"attributes"`
	// The Amazon Resource Name (ARN) of the SSO Instance.
	InstanceArn pulumi.StringOutput `pulumi:"instanceArn"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region       pulumi.StringOutput `pulumi:"region"`
	Status       pulumi.StringOutput `pulumi:"status"`
	StatusReason pulumi.StringOutput `pulumi:"statusReason"`
}

Provides a Single Sign-On (SSO) ABAC Resource: https://docs.aws.amazon.com/singlesignon/latest/userguide/abac.html

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ssoadmin"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := ssoadmin.GetInstances(ctx, &ssoadmin.GetInstancesArgs{}, nil)
		if err != nil {
			return err
		}
		_, err = ssoadmin.NewInstanceAccessControlAttributes(ctx, "example", &ssoadmin.InstanceAccessControlAttributesArgs{
			InstanceArn: pulumi.String(example.Arns[0]),
			Attributes: ssoadmin.InstanceAccessControlAttributesAttributeArray{
				&ssoadmin.InstanceAccessControlAttributesAttributeArgs{
					Key: pulumi.String("name"),
					Values: ssoadmin.InstanceAccessControlAttributesAttributeValueArray{
						&ssoadmin.InstanceAccessControlAttributesAttributeValueArgs{
							Sources: pulumi.StringArray{
								pulumi.String("${path:name.givenName}"),
							},
						},
					},
				},
				&ssoadmin.InstanceAccessControlAttributesAttributeArgs{
					Key: pulumi.String("last"),
					Values: ssoadmin.InstanceAccessControlAttributesAttributeValueArray{
						&ssoadmin.InstanceAccessControlAttributesAttributeValueArgs{
							Sources: pulumi.StringArray{
								pulumi.String("${path:name.familyName}"),
							},
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Using `pulumi import`, import SSO Account Assignments using the `instance_arn`. For example:

```sh $ pulumi import aws:ssoadmin/instanceAccessControlAttributes:InstanceAccessControlAttributes example arn:aws:sso:::instance/ssoins-0123456789abcdef ```

func GetInstanceAccessControlAttributes

func GetInstanceAccessControlAttributes(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *InstanceAccessControlAttributesState, opts ...pulumi.ResourceOption) (*InstanceAccessControlAttributes, error)

GetInstanceAccessControlAttributes gets an existing InstanceAccessControlAttributes resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewInstanceAccessControlAttributes

func NewInstanceAccessControlAttributes(ctx *pulumi.Context,
	name string, args *InstanceAccessControlAttributesArgs, opts ...pulumi.ResourceOption) (*InstanceAccessControlAttributes, error)

NewInstanceAccessControlAttributes registers a new resource with the given unique name, arguments, and options.

func (*InstanceAccessControlAttributes) ElementType

func (*InstanceAccessControlAttributes) ToInstanceAccessControlAttributesOutput

func (i *InstanceAccessControlAttributes) ToInstanceAccessControlAttributesOutput() InstanceAccessControlAttributesOutput

func (*InstanceAccessControlAttributes) ToInstanceAccessControlAttributesOutputWithContext

func (i *InstanceAccessControlAttributes) ToInstanceAccessControlAttributesOutputWithContext(ctx context.Context) InstanceAccessControlAttributesOutput

type InstanceAccessControlAttributesArgs

type InstanceAccessControlAttributesArgs struct {
	// See AccessControlAttribute for more details.
	Attributes InstanceAccessControlAttributesAttributeArrayInput
	// The Amazon Resource Name (ARN) of the SSO Instance.
	InstanceArn pulumi.StringInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
}

The set of arguments for constructing a InstanceAccessControlAttributes resource.

func (InstanceAccessControlAttributesArgs) ElementType

type InstanceAccessControlAttributesArray

type InstanceAccessControlAttributesArray []InstanceAccessControlAttributesInput

func (InstanceAccessControlAttributesArray) ElementType

func (InstanceAccessControlAttributesArray) ToInstanceAccessControlAttributesArrayOutput

func (i InstanceAccessControlAttributesArray) ToInstanceAccessControlAttributesArrayOutput() InstanceAccessControlAttributesArrayOutput

func (InstanceAccessControlAttributesArray) ToInstanceAccessControlAttributesArrayOutputWithContext

func (i InstanceAccessControlAttributesArray) ToInstanceAccessControlAttributesArrayOutputWithContext(ctx context.Context) InstanceAccessControlAttributesArrayOutput

type InstanceAccessControlAttributesArrayInput

type InstanceAccessControlAttributesArrayInput interface {
	pulumi.Input

	ToInstanceAccessControlAttributesArrayOutput() InstanceAccessControlAttributesArrayOutput
	ToInstanceAccessControlAttributesArrayOutputWithContext(context.Context) InstanceAccessControlAttributesArrayOutput
}

InstanceAccessControlAttributesArrayInput is an input type that accepts InstanceAccessControlAttributesArray and InstanceAccessControlAttributesArrayOutput values. You can construct a concrete instance of `InstanceAccessControlAttributesArrayInput` via:

InstanceAccessControlAttributesArray{ InstanceAccessControlAttributesArgs{...} }

type InstanceAccessControlAttributesArrayOutput

type InstanceAccessControlAttributesArrayOutput struct{ *pulumi.OutputState }

func (InstanceAccessControlAttributesArrayOutput) ElementType

func (InstanceAccessControlAttributesArrayOutput) Index

func (InstanceAccessControlAttributesArrayOutput) ToInstanceAccessControlAttributesArrayOutput

func (o InstanceAccessControlAttributesArrayOutput) ToInstanceAccessControlAttributesArrayOutput() InstanceAccessControlAttributesArrayOutput

func (InstanceAccessControlAttributesArrayOutput) ToInstanceAccessControlAttributesArrayOutputWithContext

func (o InstanceAccessControlAttributesArrayOutput) ToInstanceAccessControlAttributesArrayOutputWithContext(ctx context.Context) InstanceAccessControlAttributesArrayOutput

type InstanceAccessControlAttributesAttribute

type InstanceAccessControlAttributesAttribute struct {
	// The name of the attribute associated with your identities in your identity source. This is used to map a specified attribute in your identity source with an attribute in AWS SSO.
	Key string `pulumi:"key"`
	// The value used for mapping a specified attribute to an identity source. See AccessControlAttributeValue
	Values []InstanceAccessControlAttributesAttributeValue `pulumi:"values"`
}

type InstanceAccessControlAttributesAttributeArgs

type InstanceAccessControlAttributesAttributeArgs struct {
	// The name of the attribute associated with your identities in your identity source. This is used to map a specified attribute in your identity source with an attribute in AWS SSO.
	Key pulumi.StringInput `pulumi:"key"`
	// The value used for mapping a specified attribute to an identity source. See AccessControlAttributeValue
	Values InstanceAccessControlAttributesAttributeValueArrayInput `pulumi:"values"`
}

func (InstanceAccessControlAttributesAttributeArgs) ElementType

func (InstanceAccessControlAttributesAttributeArgs) ToInstanceAccessControlAttributesAttributeOutput

func (i InstanceAccessControlAttributesAttributeArgs) ToInstanceAccessControlAttributesAttributeOutput() InstanceAccessControlAttributesAttributeOutput

func (InstanceAccessControlAttributesAttributeArgs) ToInstanceAccessControlAttributesAttributeOutputWithContext

func (i InstanceAccessControlAttributesAttributeArgs) ToInstanceAccessControlAttributesAttributeOutputWithContext(ctx context.Context) InstanceAccessControlAttributesAttributeOutput

type InstanceAccessControlAttributesAttributeArray

type InstanceAccessControlAttributesAttributeArray []InstanceAccessControlAttributesAttributeInput

func (InstanceAccessControlAttributesAttributeArray) ElementType

func (InstanceAccessControlAttributesAttributeArray) ToInstanceAccessControlAttributesAttributeArrayOutput

func (i InstanceAccessControlAttributesAttributeArray) ToInstanceAccessControlAttributesAttributeArrayOutput() InstanceAccessControlAttributesAttributeArrayOutput

func (InstanceAccessControlAttributesAttributeArray) ToInstanceAccessControlAttributesAttributeArrayOutputWithContext

func (i InstanceAccessControlAttributesAttributeArray) ToInstanceAccessControlAttributesAttributeArrayOutputWithContext(ctx context.Context) InstanceAccessControlAttributesAttributeArrayOutput

type InstanceAccessControlAttributesAttributeArrayInput

type InstanceAccessControlAttributesAttributeArrayInput interface {
	pulumi.Input

	ToInstanceAccessControlAttributesAttributeArrayOutput() InstanceAccessControlAttributesAttributeArrayOutput
	ToInstanceAccessControlAttributesAttributeArrayOutputWithContext(context.Context) InstanceAccessControlAttributesAttributeArrayOutput
}

InstanceAccessControlAttributesAttributeArrayInput is an input type that accepts InstanceAccessControlAttributesAttributeArray and InstanceAccessControlAttributesAttributeArrayOutput values. You can construct a concrete instance of `InstanceAccessControlAttributesAttributeArrayInput` via:

InstanceAccessControlAttributesAttributeArray{ InstanceAccessControlAttributesAttributeArgs{...} }

type InstanceAccessControlAttributesAttributeArrayOutput

type InstanceAccessControlAttributesAttributeArrayOutput struct{ *pulumi.OutputState }

func (InstanceAccessControlAttributesAttributeArrayOutput) ElementType

func (InstanceAccessControlAttributesAttributeArrayOutput) Index

func (InstanceAccessControlAttributesAttributeArrayOutput) ToInstanceAccessControlAttributesAttributeArrayOutput

func (o InstanceAccessControlAttributesAttributeArrayOutput) ToInstanceAccessControlAttributesAttributeArrayOutput() InstanceAccessControlAttributesAttributeArrayOutput

func (InstanceAccessControlAttributesAttributeArrayOutput) ToInstanceAccessControlAttributesAttributeArrayOutputWithContext

func (o InstanceAccessControlAttributesAttributeArrayOutput) ToInstanceAccessControlAttributesAttributeArrayOutputWithContext(ctx context.Context) InstanceAccessControlAttributesAttributeArrayOutput

type InstanceAccessControlAttributesAttributeInput

type InstanceAccessControlAttributesAttributeInput interface {
	pulumi.Input

	ToInstanceAccessControlAttributesAttributeOutput() InstanceAccessControlAttributesAttributeOutput
	ToInstanceAccessControlAttributesAttributeOutputWithContext(context.Context) InstanceAccessControlAttributesAttributeOutput
}

InstanceAccessControlAttributesAttributeInput is an input type that accepts InstanceAccessControlAttributesAttributeArgs and InstanceAccessControlAttributesAttributeOutput values. You can construct a concrete instance of `InstanceAccessControlAttributesAttributeInput` via:

InstanceAccessControlAttributesAttributeArgs{...}

type InstanceAccessControlAttributesAttributeOutput

type InstanceAccessControlAttributesAttributeOutput struct{ *pulumi.OutputState }

func (InstanceAccessControlAttributesAttributeOutput) ElementType

func (InstanceAccessControlAttributesAttributeOutput) Key

The name of the attribute associated with your identities in your identity source. This is used to map a specified attribute in your identity source with an attribute in AWS SSO.

func (InstanceAccessControlAttributesAttributeOutput) ToInstanceAccessControlAttributesAttributeOutput

func (o InstanceAccessControlAttributesAttributeOutput) ToInstanceAccessControlAttributesAttributeOutput() InstanceAccessControlAttributesAttributeOutput

func (InstanceAccessControlAttributesAttributeOutput) ToInstanceAccessControlAttributesAttributeOutputWithContext

func (o InstanceAccessControlAttributesAttributeOutput) ToInstanceAccessControlAttributesAttributeOutputWithContext(ctx context.Context) InstanceAccessControlAttributesAttributeOutput

func (InstanceAccessControlAttributesAttributeOutput) Values

The value used for mapping a specified attribute to an identity source. See AccessControlAttributeValue

type InstanceAccessControlAttributesAttributeValue

type InstanceAccessControlAttributesAttributeValue struct {
	// The identity source to use when mapping a specified attribute to AWS SSO.
	Sources []string `pulumi:"sources"`
}

type InstanceAccessControlAttributesAttributeValueArgs

type InstanceAccessControlAttributesAttributeValueArgs struct {
	// The identity source to use when mapping a specified attribute to AWS SSO.
	Sources pulumi.StringArrayInput `pulumi:"sources"`
}

func (InstanceAccessControlAttributesAttributeValueArgs) ElementType

func (InstanceAccessControlAttributesAttributeValueArgs) ToInstanceAccessControlAttributesAttributeValueOutput

func (i InstanceAccessControlAttributesAttributeValueArgs) ToInstanceAccessControlAttributesAttributeValueOutput() InstanceAccessControlAttributesAttributeValueOutput

func (InstanceAccessControlAttributesAttributeValueArgs) ToInstanceAccessControlAttributesAttributeValueOutputWithContext

func (i InstanceAccessControlAttributesAttributeValueArgs) ToInstanceAccessControlAttributesAttributeValueOutputWithContext(ctx context.Context) InstanceAccessControlAttributesAttributeValueOutput

type InstanceAccessControlAttributesAttributeValueArray

type InstanceAccessControlAttributesAttributeValueArray []InstanceAccessControlAttributesAttributeValueInput

func (InstanceAccessControlAttributesAttributeValueArray) ElementType

func (InstanceAccessControlAttributesAttributeValueArray) ToInstanceAccessControlAttributesAttributeValueArrayOutput

func (i InstanceAccessControlAttributesAttributeValueArray) ToInstanceAccessControlAttributesAttributeValueArrayOutput() InstanceAccessControlAttributesAttributeValueArrayOutput

func (InstanceAccessControlAttributesAttributeValueArray) ToInstanceAccessControlAttributesAttributeValueArrayOutputWithContext

func (i InstanceAccessControlAttributesAttributeValueArray) ToInstanceAccessControlAttributesAttributeValueArrayOutputWithContext(ctx context.Context) InstanceAccessControlAttributesAttributeValueArrayOutput

type InstanceAccessControlAttributesAttributeValueArrayInput

type InstanceAccessControlAttributesAttributeValueArrayInput interface {
	pulumi.Input

	ToInstanceAccessControlAttributesAttributeValueArrayOutput() InstanceAccessControlAttributesAttributeValueArrayOutput
	ToInstanceAccessControlAttributesAttributeValueArrayOutputWithContext(context.Context) InstanceAccessControlAttributesAttributeValueArrayOutput
}

InstanceAccessControlAttributesAttributeValueArrayInput is an input type that accepts InstanceAccessControlAttributesAttributeValueArray and InstanceAccessControlAttributesAttributeValueArrayOutput values. You can construct a concrete instance of `InstanceAccessControlAttributesAttributeValueArrayInput` via:

InstanceAccessControlAttributesAttributeValueArray{ InstanceAccessControlAttributesAttributeValueArgs{...} }

type InstanceAccessControlAttributesAttributeValueArrayOutput

type InstanceAccessControlAttributesAttributeValueArrayOutput struct{ *pulumi.OutputState }

func (InstanceAccessControlAttributesAttributeValueArrayOutput) ElementType

func (InstanceAccessControlAttributesAttributeValueArrayOutput) Index

func (InstanceAccessControlAttributesAttributeValueArrayOutput) ToInstanceAccessControlAttributesAttributeValueArrayOutput

func (InstanceAccessControlAttributesAttributeValueArrayOutput) ToInstanceAccessControlAttributesAttributeValueArrayOutputWithContext

func (o InstanceAccessControlAttributesAttributeValueArrayOutput) ToInstanceAccessControlAttributesAttributeValueArrayOutputWithContext(ctx context.Context) InstanceAccessControlAttributesAttributeValueArrayOutput

type InstanceAccessControlAttributesAttributeValueInput

type InstanceAccessControlAttributesAttributeValueInput interface {
	pulumi.Input

	ToInstanceAccessControlAttributesAttributeValueOutput() InstanceAccessControlAttributesAttributeValueOutput
	ToInstanceAccessControlAttributesAttributeValueOutputWithContext(context.Context) InstanceAccessControlAttributesAttributeValueOutput
}

InstanceAccessControlAttributesAttributeValueInput is an input type that accepts InstanceAccessControlAttributesAttributeValueArgs and InstanceAccessControlAttributesAttributeValueOutput values. You can construct a concrete instance of `InstanceAccessControlAttributesAttributeValueInput` via:

InstanceAccessControlAttributesAttributeValueArgs{...}

type InstanceAccessControlAttributesAttributeValueOutput

type InstanceAccessControlAttributesAttributeValueOutput struct{ *pulumi.OutputState }

func (InstanceAccessControlAttributesAttributeValueOutput) ElementType

func (InstanceAccessControlAttributesAttributeValueOutput) Sources

The identity source to use when mapping a specified attribute to AWS SSO.

func (InstanceAccessControlAttributesAttributeValueOutput) ToInstanceAccessControlAttributesAttributeValueOutput

func (o InstanceAccessControlAttributesAttributeValueOutput) ToInstanceAccessControlAttributesAttributeValueOutput() InstanceAccessControlAttributesAttributeValueOutput

func (InstanceAccessControlAttributesAttributeValueOutput) ToInstanceAccessControlAttributesAttributeValueOutputWithContext

func (o InstanceAccessControlAttributesAttributeValueOutput) ToInstanceAccessControlAttributesAttributeValueOutputWithContext(ctx context.Context) InstanceAccessControlAttributesAttributeValueOutput

type InstanceAccessControlAttributesInput

type InstanceAccessControlAttributesInput interface {
	pulumi.Input

	ToInstanceAccessControlAttributesOutput() InstanceAccessControlAttributesOutput
	ToInstanceAccessControlAttributesOutputWithContext(ctx context.Context) InstanceAccessControlAttributesOutput
}

type InstanceAccessControlAttributesMap

type InstanceAccessControlAttributesMap map[string]InstanceAccessControlAttributesInput

func (InstanceAccessControlAttributesMap) ElementType

func (InstanceAccessControlAttributesMap) ToInstanceAccessControlAttributesMapOutput

func (i InstanceAccessControlAttributesMap) ToInstanceAccessControlAttributesMapOutput() InstanceAccessControlAttributesMapOutput

func (InstanceAccessControlAttributesMap) ToInstanceAccessControlAttributesMapOutputWithContext

func (i InstanceAccessControlAttributesMap) ToInstanceAccessControlAttributesMapOutputWithContext(ctx context.Context) InstanceAccessControlAttributesMapOutput

type InstanceAccessControlAttributesMapInput

type InstanceAccessControlAttributesMapInput interface {
	pulumi.Input

	ToInstanceAccessControlAttributesMapOutput() InstanceAccessControlAttributesMapOutput
	ToInstanceAccessControlAttributesMapOutputWithContext(context.Context) InstanceAccessControlAttributesMapOutput
}

InstanceAccessControlAttributesMapInput is an input type that accepts InstanceAccessControlAttributesMap and InstanceAccessControlAttributesMapOutput values. You can construct a concrete instance of `InstanceAccessControlAttributesMapInput` via:

InstanceAccessControlAttributesMap{ "key": InstanceAccessControlAttributesArgs{...} }

type InstanceAccessControlAttributesMapOutput

type InstanceAccessControlAttributesMapOutput struct{ *pulumi.OutputState }

func (InstanceAccessControlAttributesMapOutput) ElementType

func (InstanceAccessControlAttributesMapOutput) MapIndex

func (InstanceAccessControlAttributesMapOutput) ToInstanceAccessControlAttributesMapOutput

func (o InstanceAccessControlAttributesMapOutput) ToInstanceAccessControlAttributesMapOutput() InstanceAccessControlAttributesMapOutput

func (InstanceAccessControlAttributesMapOutput) ToInstanceAccessControlAttributesMapOutputWithContext

func (o InstanceAccessControlAttributesMapOutput) ToInstanceAccessControlAttributesMapOutputWithContext(ctx context.Context) InstanceAccessControlAttributesMapOutput

type InstanceAccessControlAttributesOutput

type InstanceAccessControlAttributesOutput struct{ *pulumi.OutputState }

func (InstanceAccessControlAttributesOutput) Attributes

See AccessControlAttribute for more details.

func (InstanceAccessControlAttributesOutput) ElementType

func (InstanceAccessControlAttributesOutput) InstanceArn

The Amazon Resource Name (ARN) of the SSO Instance.

func (InstanceAccessControlAttributesOutput) Region

Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

func (InstanceAccessControlAttributesOutput) Status

func (InstanceAccessControlAttributesOutput) StatusReason

func (InstanceAccessControlAttributesOutput) ToInstanceAccessControlAttributesOutput

func (o InstanceAccessControlAttributesOutput) ToInstanceAccessControlAttributesOutput() InstanceAccessControlAttributesOutput

func (InstanceAccessControlAttributesOutput) ToInstanceAccessControlAttributesOutputWithContext

func (o InstanceAccessControlAttributesOutput) ToInstanceAccessControlAttributesOutputWithContext(ctx context.Context) InstanceAccessControlAttributesOutput

type InstanceAccessControlAttributesState

type InstanceAccessControlAttributesState struct {
	// See AccessControlAttribute for more details.
	Attributes InstanceAccessControlAttributesAttributeArrayInput
	// The Amazon Resource Name (ARN) of the SSO Instance.
	InstanceArn pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region       pulumi.StringPtrInput
	Status       pulumi.StringPtrInput
	StatusReason pulumi.StringPtrInput
}

func (InstanceAccessControlAttributesState) ElementType

type LookupApplicationArgs

type LookupApplicationArgs struct {
	// ARN of the application.
	ApplicationArn string `pulumi:"applicationArn"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region *string `pulumi:"region"`
}

A collection of arguments for invoking getApplication.

type LookupApplicationOutputArgs

type LookupApplicationOutputArgs struct {
	// ARN of the application.
	ApplicationArn pulumi.StringInput `pulumi:"applicationArn"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput `pulumi:"region"`
}

A collection of arguments for invoking getApplication.

func (LookupApplicationOutputArgs) ElementType

type LookupApplicationResult

type LookupApplicationResult struct {
	// AWS account ID.
	ApplicationAccount string `pulumi:"applicationAccount"`
	ApplicationArn     string `pulumi:"applicationArn"`
	// ARN of the application provider.
	ApplicationProviderArn string `pulumi:"applicationProviderArn"`
	// Description of the application.
	Description string `pulumi:"description"`
	// ARN of the application.
	Id string `pulumi:"id"`
	// ARN of the instance of IAM Identity Center.
	InstanceArn string `pulumi:"instanceArn"`
	// Name of the application.
	Name string `pulumi:"name"`
	// Options for the portal associated with an application. See the `ssoadmin.Application` resource documentation. The attributes are the same.
	PortalOptions []GetApplicationPortalOption `pulumi:"portalOptions"`
	Region        string                       `pulumi:"region"`
	// Status of the application.
	Status string `pulumi:"status"`
}

A collection of values returned by getApplication.

func LookupApplication

func LookupApplication(ctx *pulumi.Context, args *LookupApplicationArgs, opts ...pulumi.InvokeOption) (*LookupApplicationResult, error)

Data source for managing an AWS SSO Admin Application.

## Example Usage

### Basic Usage

```go package main

import (

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ssoadmin"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := ssoadmin.LookupApplication(ctx, &ssoadmin.LookupApplicationArgs{
			ApplicationArn: "arn:aws:sso::123456789012:application/ssoins-1234/apl-5678",
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

type LookupApplicationResultOutput

type LookupApplicationResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getApplication.

func (LookupApplicationResultOutput) ApplicationAccount

func (o LookupApplicationResultOutput) ApplicationAccount() pulumi.StringOutput

AWS account ID.

func (LookupApplicationResultOutput) ApplicationArn

func (LookupApplicationResultOutput) ApplicationProviderArn

func (o LookupApplicationResultOutput) ApplicationProviderArn() pulumi.StringOutput

ARN of the application provider.

func (LookupApplicationResultOutput) Description

Description of the application.

func (LookupApplicationResultOutput) ElementType

func (LookupApplicationResultOutput) Id

ARN of the application.

func (LookupApplicationResultOutput) InstanceArn

ARN of the instance of IAM Identity Center.

func (LookupApplicationResultOutput) Name

Name of the application.

func (LookupApplicationResultOutput) PortalOptions

Options for the portal associated with an application. See the `ssoadmin.Application` resource documentation. The attributes are the same.

func (LookupApplicationResultOutput) Region

func (LookupApplicationResultOutput) Status

Status of the application.

func (LookupApplicationResultOutput) ToLookupApplicationResultOutput

func (o LookupApplicationResultOutput) ToLookupApplicationResultOutput() LookupApplicationResultOutput

func (LookupApplicationResultOutput) ToLookupApplicationResultOutputWithContext

func (o LookupApplicationResultOutput) ToLookupApplicationResultOutputWithContext(ctx context.Context) LookupApplicationResultOutput

type LookupPermissionSetArgs

type LookupPermissionSetArgs struct {
	// ARN of the permission set.
	Arn *string `pulumi:"arn"`
	// ARN of the SSO Instance associated with the permission set.
	InstanceArn string `pulumi:"instanceArn"`
	// Name of the SSO Permission Set.
	//
	// > **NOTE:** Either `arn` or `name` must be configured.
	Name *string `pulumi:"name"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region *string `pulumi:"region"`
	// Key-value map of resource tags.
	Tags map[string]string `pulumi:"tags"`
}

A collection of arguments for invoking getPermissionSet.

type LookupPermissionSetOutputArgs

type LookupPermissionSetOutputArgs struct {
	// ARN of the permission set.
	Arn pulumi.StringPtrInput `pulumi:"arn"`
	// ARN of the SSO Instance associated with the permission set.
	InstanceArn pulumi.StringInput `pulumi:"instanceArn"`
	// Name of the SSO Permission Set.
	//
	// > **NOTE:** Either `arn` or `name` must be configured.
	Name pulumi.StringPtrInput `pulumi:"name"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput `pulumi:"region"`
	// Key-value map of resource tags.
	Tags pulumi.StringMapInput `pulumi:"tags"`
}

A collection of arguments for invoking getPermissionSet.

func (LookupPermissionSetOutputArgs) ElementType

type LookupPermissionSetResult

type LookupPermissionSetResult struct {
	Arn         string `pulumi:"arn"`
	CreatedDate string `pulumi:"createdDate"`
	// Description of the Permission Set.
	Description string `pulumi:"description"`
	// The provider-assigned unique ID for this managed resource.
	Id          string `pulumi:"id"`
	InstanceArn string `pulumi:"instanceArn"`
	Name        string `pulumi:"name"`
	Region      string `pulumi:"region"`
	// Relay state URL used to redirect users within the application during the federation authentication process.
	RelayState string `pulumi:"relayState"`
	// Length of time that the application user sessions are valid in the ISO-8601 standard.
	SessionDuration string `pulumi:"sessionDuration"`
	// Key-value map of resource tags.
	Tags map[string]string `pulumi:"tags"`
}

A collection of values returned by getPermissionSet.

func LookupPermissionSet

func LookupPermissionSet(ctx *pulumi.Context, args *LookupPermissionSetArgs, opts ...pulumi.InvokeOption) (*LookupPermissionSetResult, error)

Use this data source to get a Single Sign-On (SSO) Permission Set.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ssoadmin"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := ssoadmin.GetInstances(ctx, &ssoadmin.GetInstancesArgs{}, nil)
		if err != nil {
			return err
		}
		exampleGetPermissionSet, err := ssoadmin.LookupPermissionSet(ctx, &ssoadmin.LookupPermissionSetArgs{
			InstanceArn: example.Arns[0],
			Name:        pulumi.StringRef("Example"),
		}, nil)
		if err != nil {
			return err
		}
		ctx.Export("arn", exampleGetPermissionSet.Arn)
		return nil
	})
}

```

type LookupPermissionSetResultOutput

type LookupPermissionSetResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getPermissionSet.

func (LookupPermissionSetResultOutput) Arn

func (LookupPermissionSetResultOutput) CreatedDate

func (LookupPermissionSetResultOutput) Description

Description of the Permission Set.

func (LookupPermissionSetResultOutput) ElementType

func (LookupPermissionSetResultOutput) Id

The provider-assigned unique ID for this managed resource.

func (LookupPermissionSetResultOutput) InstanceArn

func (LookupPermissionSetResultOutput) Name

func (LookupPermissionSetResultOutput) Region

func (LookupPermissionSetResultOutput) RelayState

Relay state URL used to redirect users within the application during the federation authentication process.

func (LookupPermissionSetResultOutput) SessionDuration

Length of time that the application user sessions are valid in the ISO-8601 standard.

func (LookupPermissionSetResultOutput) Tags

Key-value map of resource tags.

func (LookupPermissionSetResultOutput) ToLookupPermissionSetResultOutput

func (o LookupPermissionSetResultOutput) ToLookupPermissionSetResultOutput() LookupPermissionSetResultOutput

func (LookupPermissionSetResultOutput) ToLookupPermissionSetResultOutputWithContext

func (o LookupPermissionSetResultOutput) ToLookupPermissionSetResultOutputWithContext(ctx context.Context) LookupPermissionSetResultOutput

type ManagedPolicyAttachment

type ManagedPolicyAttachment struct {
	pulumi.CustomResourceState

	// The Amazon Resource Name (ARN) of the SSO Instance under which the operation will be executed.
	InstanceArn pulumi.StringOutput `pulumi:"instanceArn"`
	// The IAM managed policy Amazon Resource Name (ARN) to be attached to the Permission Set.
	ManagedPolicyArn pulumi.StringOutput `pulumi:"managedPolicyArn"`
	// The name of the IAM Managed Policy.
	ManagedPolicyName pulumi.StringOutput `pulumi:"managedPolicyName"`
	// The Amazon Resource Name (ARN) of the Permission Set.
	PermissionSetArn pulumi.StringOutput `pulumi:"permissionSetArn"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
}

Provides an IAM managed policy for a Single Sign-On (SSO) Permission Set resource

> **NOTE:** Creating this resource will automatically [Provision the Permission Set](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ProvisionPermissionSet.html) to apply the corresponding updates to all assigned accounts.

## Example Usage

### Basic Usage

```go package main

import (

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ssoadmin"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := ssoadmin.GetInstances(ctx, &ssoadmin.GetInstancesArgs{}, nil)
		if err != nil {
			return err
		}
		examplePermissionSet, err := ssoadmin.NewPermissionSet(ctx, "example", &ssoadmin.PermissionSetArgs{
			Name:        pulumi.String("Example"),
			InstanceArn: pulumi.String(example.Arns[0]),
		})
		if err != nil {
			return err
		}
		_, err = ssoadmin.NewManagedPolicyAttachment(ctx, "example", &ssoadmin.ManagedPolicyAttachmentArgs{
			InstanceArn:      pulumi.String(example.Arns[0]),
			ManagedPolicyArn: pulumi.String("arn:aws:iam::aws:policy/AlexaForBusinessDeviceSetup"),
			PermissionSetArn: examplePermissionSet.Arn,
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

### With Account Assignment

> Because destruction of a managed policy attachment resource also re-provisions the associated permission set to all accounts, explicitly indicating the dependency with the account assignment resource via the `dependsOn` meta argument is necessary to ensure proper deletion order when these resources are used together.

```go package main

import (

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/identitystore"
"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ssoadmin"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := ssoadmin.GetInstances(ctx, &ssoadmin.GetInstancesArgs{}, nil)
		if err != nil {
			return err
		}
		examplePermissionSet, err := ssoadmin.NewPermissionSet(ctx, "example", &ssoadmin.PermissionSetArgs{
			Name:        pulumi.String("Example"),
			InstanceArn: pulumi.String(example.Arns[0]),
		})
		if err != nil {
			return err
		}
		exampleGroup, err := identitystore.NewGroup(ctx, "example", &identitystore.GroupArgs{
			IdentityStoreId: pulumi.String(example.IdentityStoreIds[0]),
			DisplayName:     pulumi.String("Admin"),
			Description:     pulumi.String("Admin Group"),
		})
		if err != nil {
			return err
		}
		exampleAccountAssignment, err := ssoadmin.NewAccountAssignment(ctx, "example", &ssoadmin.AccountAssignmentArgs{
			InstanceArn:      pulumi.String(example.Arns[0]),
			PermissionSetArn: examplePermissionSet.Arn,
			PrincipalId:      exampleGroup.GroupId,
			PrincipalType:    pulumi.String("GROUP"),
			TargetId:         pulumi.String("123456789012"),
			TargetType:       pulumi.String("AWS_ACCOUNT"),
		})
		if err != nil {
			return err
		}
		_, err = ssoadmin.NewManagedPolicyAttachment(ctx, "example", &ssoadmin.ManagedPolicyAttachmentArgs{
			InstanceArn:      pulumi.String(example.Arns[0]),
			ManagedPolicyArn: pulumi.String("arn:aws:iam::aws:policy/AlexaForBusinessDeviceSetup"),
			PermissionSetArn: examplePermissionSet.Arn,
		}, pulumi.DependsOn([]pulumi.Resource{
			exampleAccountAssignment,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Using `pulumi import`, import SSO Managed Policy Attachments using the `managed_policy_arn`, `permission_set_arn`, and `instance_arn` separated by a comma (`,`). For example:

```sh $ pulumi import aws:ssoadmin/managedPolicyAttachment:ManagedPolicyAttachment example arn:aws:iam::aws:policy/AlexaForBusinessDeviceSetup,arn:aws:sso:::permissionSet/ssoins-2938j0x8920sbj72/ps-80383020jr9302rk,arn:aws:sso:::instance/ssoins-2938j0x8920sbj72 ```

func GetManagedPolicyAttachment

func GetManagedPolicyAttachment(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ManagedPolicyAttachmentState, opts ...pulumi.ResourceOption) (*ManagedPolicyAttachment, error)

GetManagedPolicyAttachment gets an existing ManagedPolicyAttachment resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewManagedPolicyAttachment

func NewManagedPolicyAttachment(ctx *pulumi.Context,
	name string, args *ManagedPolicyAttachmentArgs, opts ...pulumi.ResourceOption) (*ManagedPolicyAttachment, error)

NewManagedPolicyAttachment registers a new resource with the given unique name, arguments, and options.

func (*ManagedPolicyAttachment) ElementType

func (*ManagedPolicyAttachment) ElementType() reflect.Type

func (*ManagedPolicyAttachment) ToManagedPolicyAttachmentOutput

func (i *ManagedPolicyAttachment) ToManagedPolicyAttachmentOutput() ManagedPolicyAttachmentOutput

func (*ManagedPolicyAttachment) ToManagedPolicyAttachmentOutputWithContext

func (i *ManagedPolicyAttachment) ToManagedPolicyAttachmentOutputWithContext(ctx context.Context) ManagedPolicyAttachmentOutput

type ManagedPolicyAttachmentArgs

type ManagedPolicyAttachmentArgs struct {
	// The Amazon Resource Name (ARN) of the SSO Instance under which the operation will be executed.
	InstanceArn pulumi.StringInput
	// The IAM managed policy Amazon Resource Name (ARN) to be attached to the Permission Set.
	ManagedPolicyArn pulumi.StringInput
	// The Amazon Resource Name (ARN) of the Permission Set.
	PermissionSetArn pulumi.StringInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
}

The set of arguments for constructing a ManagedPolicyAttachment resource.

func (ManagedPolicyAttachmentArgs) ElementType

type ManagedPolicyAttachmentArray

type ManagedPolicyAttachmentArray []ManagedPolicyAttachmentInput

func (ManagedPolicyAttachmentArray) ElementType

func (ManagedPolicyAttachmentArray) ToManagedPolicyAttachmentArrayOutput

func (i ManagedPolicyAttachmentArray) ToManagedPolicyAttachmentArrayOutput() ManagedPolicyAttachmentArrayOutput

func (ManagedPolicyAttachmentArray) ToManagedPolicyAttachmentArrayOutputWithContext

func (i ManagedPolicyAttachmentArray) ToManagedPolicyAttachmentArrayOutputWithContext(ctx context.Context) ManagedPolicyAttachmentArrayOutput

type ManagedPolicyAttachmentArrayInput

type ManagedPolicyAttachmentArrayInput interface {
	pulumi.Input

	ToManagedPolicyAttachmentArrayOutput() ManagedPolicyAttachmentArrayOutput
	ToManagedPolicyAttachmentArrayOutputWithContext(context.Context) ManagedPolicyAttachmentArrayOutput
}

ManagedPolicyAttachmentArrayInput is an input type that accepts ManagedPolicyAttachmentArray and ManagedPolicyAttachmentArrayOutput values. You can construct a concrete instance of `ManagedPolicyAttachmentArrayInput` via:

ManagedPolicyAttachmentArray{ ManagedPolicyAttachmentArgs{...} }

type ManagedPolicyAttachmentArrayOutput

type ManagedPolicyAttachmentArrayOutput struct{ *pulumi.OutputState }

func (ManagedPolicyAttachmentArrayOutput) ElementType

func (ManagedPolicyAttachmentArrayOutput) Index

func (ManagedPolicyAttachmentArrayOutput) ToManagedPolicyAttachmentArrayOutput

func (o ManagedPolicyAttachmentArrayOutput) ToManagedPolicyAttachmentArrayOutput() ManagedPolicyAttachmentArrayOutput

func (ManagedPolicyAttachmentArrayOutput) ToManagedPolicyAttachmentArrayOutputWithContext

func (o ManagedPolicyAttachmentArrayOutput) ToManagedPolicyAttachmentArrayOutputWithContext(ctx context.Context) ManagedPolicyAttachmentArrayOutput

type ManagedPolicyAttachmentInput

type ManagedPolicyAttachmentInput interface {
	pulumi.Input

	ToManagedPolicyAttachmentOutput() ManagedPolicyAttachmentOutput
	ToManagedPolicyAttachmentOutputWithContext(ctx context.Context) ManagedPolicyAttachmentOutput
}

type ManagedPolicyAttachmentMap

type ManagedPolicyAttachmentMap map[string]ManagedPolicyAttachmentInput

func (ManagedPolicyAttachmentMap) ElementType

func (ManagedPolicyAttachmentMap) ElementType() reflect.Type

func (ManagedPolicyAttachmentMap) ToManagedPolicyAttachmentMapOutput

func (i ManagedPolicyAttachmentMap) ToManagedPolicyAttachmentMapOutput() ManagedPolicyAttachmentMapOutput

func (ManagedPolicyAttachmentMap) ToManagedPolicyAttachmentMapOutputWithContext

func (i ManagedPolicyAttachmentMap) ToManagedPolicyAttachmentMapOutputWithContext(ctx context.Context) ManagedPolicyAttachmentMapOutput

type ManagedPolicyAttachmentMapInput

type ManagedPolicyAttachmentMapInput interface {
	pulumi.Input

	ToManagedPolicyAttachmentMapOutput() ManagedPolicyAttachmentMapOutput
	ToManagedPolicyAttachmentMapOutputWithContext(context.Context) ManagedPolicyAttachmentMapOutput
}

ManagedPolicyAttachmentMapInput is an input type that accepts ManagedPolicyAttachmentMap and ManagedPolicyAttachmentMapOutput values. You can construct a concrete instance of `ManagedPolicyAttachmentMapInput` via:

ManagedPolicyAttachmentMap{ "key": ManagedPolicyAttachmentArgs{...} }

type ManagedPolicyAttachmentMapOutput

type ManagedPolicyAttachmentMapOutput struct{ *pulumi.OutputState }

func (ManagedPolicyAttachmentMapOutput) ElementType

func (ManagedPolicyAttachmentMapOutput) MapIndex

func (ManagedPolicyAttachmentMapOutput) ToManagedPolicyAttachmentMapOutput

func (o ManagedPolicyAttachmentMapOutput) ToManagedPolicyAttachmentMapOutput() ManagedPolicyAttachmentMapOutput

func (ManagedPolicyAttachmentMapOutput) ToManagedPolicyAttachmentMapOutputWithContext

func (o ManagedPolicyAttachmentMapOutput) ToManagedPolicyAttachmentMapOutputWithContext(ctx context.Context) ManagedPolicyAttachmentMapOutput

type ManagedPolicyAttachmentOutput

type ManagedPolicyAttachmentOutput struct{ *pulumi.OutputState }

func (ManagedPolicyAttachmentOutput) ElementType

func (ManagedPolicyAttachmentOutput) InstanceArn

The Amazon Resource Name (ARN) of the SSO Instance under which the operation will be executed.

func (ManagedPolicyAttachmentOutput) ManagedPolicyArn

func (o ManagedPolicyAttachmentOutput) ManagedPolicyArn() pulumi.StringOutput

The IAM managed policy Amazon Resource Name (ARN) to be attached to the Permission Set.

func (ManagedPolicyAttachmentOutput) ManagedPolicyName

func (o ManagedPolicyAttachmentOutput) ManagedPolicyName() pulumi.StringOutput

The name of the IAM Managed Policy.

func (ManagedPolicyAttachmentOutput) PermissionSetArn

func (o ManagedPolicyAttachmentOutput) PermissionSetArn() pulumi.StringOutput

The Amazon Resource Name (ARN) of the Permission Set.

func (ManagedPolicyAttachmentOutput) Region

Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

func (ManagedPolicyAttachmentOutput) ToManagedPolicyAttachmentOutput

func (o ManagedPolicyAttachmentOutput) ToManagedPolicyAttachmentOutput() ManagedPolicyAttachmentOutput

func (ManagedPolicyAttachmentOutput) ToManagedPolicyAttachmentOutputWithContext

func (o ManagedPolicyAttachmentOutput) ToManagedPolicyAttachmentOutputWithContext(ctx context.Context) ManagedPolicyAttachmentOutput

type ManagedPolicyAttachmentState

type ManagedPolicyAttachmentState struct {
	// The Amazon Resource Name (ARN) of the SSO Instance under which the operation will be executed.
	InstanceArn pulumi.StringPtrInput
	// The IAM managed policy Amazon Resource Name (ARN) to be attached to the Permission Set.
	ManagedPolicyArn pulumi.StringPtrInput
	// The name of the IAM Managed Policy.
	ManagedPolicyName pulumi.StringPtrInput
	// The Amazon Resource Name (ARN) of the Permission Set.
	PermissionSetArn pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
}

func (ManagedPolicyAttachmentState) ElementType

type PermissionSet

type PermissionSet struct {
	pulumi.CustomResourceState

	// The Amazon Resource Name (ARN) of the Permission Set.
	Arn pulumi.StringOutput `pulumi:"arn"`
	// The date the Permission Set was created in [RFC3339 format](https://tools.ietf.org/html/rfc3339#section-5.8).
	CreatedDate pulumi.StringOutput `pulumi:"createdDate"`
	// The description of the Permission Set.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// The Amazon Resource Name (ARN) of the SSO Instance under which the operation will be executed.
	InstanceArn pulumi.StringOutput `pulumi:"instanceArn"`
	// The name of the Permission Set.
	Name pulumi.StringOutput `pulumi:"name"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
	// The relay state URL used to redirect users within the application during the federation authentication process.
	RelayState pulumi.StringPtrOutput `pulumi:"relayState"`
	// The length of time that the application user sessions are valid in the ISO-8601 standard. Default: `PT1H`.
	SessionDuration pulumi.StringPtrOutput `pulumi:"sessionDuration"`
	// Key-value map of resource tags. .If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapOutput `pulumi:"tags"`
	// A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	TagsAll pulumi.StringMapOutput `pulumi:"tagsAll"`
}

Provides a Single Sign-On (SSO) Permission Set resource

> **NOTE:** Updating this resource will automatically [Provision the Permission Set](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ProvisionPermissionSet.html) to apply the corresponding updates to all assigned accounts.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ssoadmin"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := ssoadmin.GetInstances(ctx, &ssoadmin.GetInstancesArgs{}, nil)
		if err != nil {
			return err
		}
		_, err = ssoadmin.NewPermissionSet(ctx, "example", &ssoadmin.PermissionSetArgs{
			Name:            pulumi.String("Example"),
			Description:     pulumi.String("An example"),
			InstanceArn:     pulumi.String(example.Arns[0]),
			RelayState:      pulumi.String("https://s3.console.aws.amazon.com/s3/home?region=us-east-1#"),
			SessionDuration: pulumi.String("PT2H"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Using `pulumi import`, import SSO Permission Sets using the `arn` and `instance_arn` separated by a comma (`,`). For example:

```sh $ pulumi import aws:ssoadmin/permissionSet:PermissionSet example arn:aws:sso:::permissionSet/ssoins-2938j0x8920sbj72/ps-80383020jr9302rk,arn:aws:sso:::instance/ssoins-2938j0x8920sbj72 ```

func GetPermissionSet

func GetPermissionSet(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *PermissionSetState, opts ...pulumi.ResourceOption) (*PermissionSet, error)

GetPermissionSet gets an existing PermissionSet resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewPermissionSet

func NewPermissionSet(ctx *pulumi.Context,
	name string, args *PermissionSetArgs, opts ...pulumi.ResourceOption) (*PermissionSet, error)

NewPermissionSet registers a new resource with the given unique name, arguments, and options.

func (*PermissionSet) ElementType

func (*PermissionSet) ElementType() reflect.Type

func (*PermissionSet) ToPermissionSetOutput

func (i *PermissionSet) ToPermissionSetOutput() PermissionSetOutput

func (*PermissionSet) ToPermissionSetOutputWithContext

func (i *PermissionSet) ToPermissionSetOutputWithContext(ctx context.Context) PermissionSetOutput

type PermissionSetArgs

type PermissionSetArgs struct {
	// The description of the Permission Set.
	Description pulumi.StringPtrInput
	// The Amazon Resource Name (ARN) of the SSO Instance under which the operation will be executed.
	InstanceArn pulumi.StringInput
	// The name of the Permission Set.
	Name pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// The relay state URL used to redirect users within the application during the federation authentication process.
	RelayState pulumi.StringPtrInput
	// The length of time that the application user sessions are valid in the ISO-8601 standard. Default: `PT1H`.
	SessionDuration pulumi.StringPtrInput
	// Key-value map of resource tags. .If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
}

The set of arguments for constructing a PermissionSet resource.

func (PermissionSetArgs) ElementType

func (PermissionSetArgs) ElementType() reflect.Type

type PermissionSetArray

type PermissionSetArray []PermissionSetInput

func (PermissionSetArray) ElementType

func (PermissionSetArray) ElementType() reflect.Type

func (PermissionSetArray) ToPermissionSetArrayOutput

func (i PermissionSetArray) ToPermissionSetArrayOutput() PermissionSetArrayOutput

func (PermissionSetArray) ToPermissionSetArrayOutputWithContext

func (i PermissionSetArray) ToPermissionSetArrayOutputWithContext(ctx context.Context) PermissionSetArrayOutput

type PermissionSetArrayInput

type PermissionSetArrayInput interface {
	pulumi.Input

	ToPermissionSetArrayOutput() PermissionSetArrayOutput
	ToPermissionSetArrayOutputWithContext(context.Context) PermissionSetArrayOutput
}

PermissionSetArrayInput is an input type that accepts PermissionSetArray and PermissionSetArrayOutput values. You can construct a concrete instance of `PermissionSetArrayInput` via:

PermissionSetArray{ PermissionSetArgs{...} }

type PermissionSetArrayOutput

type PermissionSetArrayOutput struct{ *pulumi.OutputState }

func (PermissionSetArrayOutput) ElementType

func (PermissionSetArrayOutput) ElementType() reflect.Type

func (PermissionSetArrayOutput) Index

func (PermissionSetArrayOutput) ToPermissionSetArrayOutput

func (o PermissionSetArrayOutput) ToPermissionSetArrayOutput() PermissionSetArrayOutput

func (PermissionSetArrayOutput) ToPermissionSetArrayOutputWithContext

func (o PermissionSetArrayOutput) ToPermissionSetArrayOutputWithContext(ctx context.Context) PermissionSetArrayOutput

type PermissionSetInlinePolicy

type PermissionSetInlinePolicy struct {
	pulumi.CustomResourceState

	// The IAM inline policy to attach to a Permission Set.
	InlinePolicy pulumi.StringOutput `pulumi:"inlinePolicy"`
	// The Amazon Resource Name (ARN) of the SSO Instance under which the operation will be executed.
	InstanceArn pulumi.StringOutput `pulumi:"instanceArn"`
	// The Amazon Resource Name (ARN) of the Permission Set.
	PermissionSetArn pulumi.StringOutput `pulumi:"permissionSetArn"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
}

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/iam"
"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ssoadmin"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := ssoadmin.GetInstances(ctx, &ssoadmin.GetInstancesArgs{}, nil)
		if err != nil {
			return err
		}
		examplePermissionSet, err := ssoadmin.NewPermissionSet(ctx, "example", &ssoadmin.PermissionSetArgs{
			Name:        pulumi.String("Example"),
			InstanceArn: pulumi.String(example.Arns[0]),
		})
		if err != nil {
			return err
		}
		exampleGetPolicyDocument, err := iam.GetPolicyDocument(ctx, &iam.GetPolicyDocumentArgs{
			Statements: []iam.GetPolicyDocumentStatement{
				{
					Sid: pulumi.StringRef("1"),
					Actions: []string{
						"s3:ListAllMyBuckets",
						"s3:GetBucketLocation",
					},
					Resources: []string{
						"arn:aws:s3:::*",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = ssoadmin.NewPermissionSetInlinePolicy(ctx, "example", &ssoadmin.PermissionSetInlinePolicyArgs{
			InlinePolicy:     pulumi.String(exampleGetPolicyDocument.Json),
			InstanceArn:      pulumi.String(example.Arns[0]),
			PermissionSetArn: examplePermissionSet.Arn,
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Using `pulumi import`, import SSO Permission Set Inline Policies using the `permission_set_arn` and `instance_arn` separated by a comma (`,`). For example:

```sh $ pulumi import aws:ssoadmin/permissionSetInlinePolicy:PermissionSetInlinePolicy example arn:aws:sso:::permissionSet/ssoins-2938j0x8920sbj72/ps-80383020jr9302rk,arn:aws:sso:::instance/ssoins-2938j0x8920sbj72 ```

func GetPermissionSetInlinePolicy

func GetPermissionSetInlinePolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *PermissionSetInlinePolicyState, opts ...pulumi.ResourceOption) (*PermissionSetInlinePolicy, error)

GetPermissionSetInlinePolicy gets an existing PermissionSetInlinePolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewPermissionSetInlinePolicy

func NewPermissionSetInlinePolicy(ctx *pulumi.Context,
	name string, args *PermissionSetInlinePolicyArgs, opts ...pulumi.ResourceOption) (*PermissionSetInlinePolicy, error)

NewPermissionSetInlinePolicy registers a new resource with the given unique name, arguments, and options.

func (*PermissionSetInlinePolicy) ElementType

func (*PermissionSetInlinePolicy) ElementType() reflect.Type

func (*PermissionSetInlinePolicy) ToPermissionSetInlinePolicyOutput

func (i *PermissionSetInlinePolicy) ToPermissionSetInlinePolicyOutput() PermissionSetInlinePolicyOutput

func (*PermissionSetInlinePolicy) ToPermissionSetInlinePolicyOutputWithContext

func (i *PermissionSetInlinePolicy) ToPermissionSetInlinePolicyOutputWithContext(ctx context.Context) PermissionSetInlinePolicyOutput

type PermissionSetInlinePolicyArgs

type PermissionSetInlinePolicyArgs struct {
	// The IAM inline policy to attach to a Permission Set.
	InlinePolicy pulumi.StringInput
	// The Amazon Resource Name (ARN) of the SSO Instance under which the operation will be executed.
	InstanceArn pulumi.StringInput
	// The Amazon Resource Name (ARN) of the Permission Set.
	PermissionSetArn pulumi.StringInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
}

The set of arguments for constructing a PermissionSetInlinePolicy resource.

func (PermissionSetInlinePolicyArgs) ElementType

type PermissionSetInlinePolicyArray

type PermissionSetInlinePolicyArray []PermissionSetInlinePolicyInput

func (PermissionSetInlinePolicyArray) ElementType

func (PermissionSetInlinePolicyArray) ToPermissionSetInlinePolicyArrayOutput

func (i PermissionSetInlinePolicyArray) ToPermissionSetInlinePolicyArrayOutput() PermissionSetInlinePolicyArrayOutput

func (PermissionSetInlinePolicyArray) ToPermissionSetInlinePolicyArrayOutputWithContext

func (i PermissionSetInlinePolicyArray) ToPermissionSetInlinePolicyArrayOutputWithContext(ctx context.Context) PermissionSetInlinePolicyArrayOutput

type PermissionSetInlinePolicyArrayInput

type PermissionSetInlinePolicyArrayInput interface {
	pulumi.Input

	ToPermissionSetInlinePolicyArrayOutput() PermissionSetInlinePolicyArrayOutput
	ToPermissionSetInlinePolicyArrayOutputWithContext(context.Context) PermissionSetInlinePolicyArrayOutput
}

PermissionSetInlinePolicyArrayInput is an input type that accepts PermissionSetInlinePolicyArray and PermissionSetInlinePolicyArrayOutput values. You can construct a concrete instance of `PermissionSetInlinePolicyArrayInput` via:

PermissionSetInlinePolicyArray{ PermissionSetInlinePolicyArgs{...} }

type PermissionSetInlinePolicyArrayOutput

type PermissionSetInlinePolicyArrayOutput struct{ *pulumi.OutputState }

func (PermissionSetInlinePolicyArrayOutput) ElementType

func (PermissionSetInlinePolicyArrayOutput) Index

func (PermissionSetInlinePolicyArrayOutput) ToPermissionSetInlinePolicyArrayOutput

func (o PermissionSetInlinePolicyArrayOutput) ToPermissionSetInlinePolicyArrayOutput() PermissionSetInlinePolicyArrayOutput

func (PermissionSetInlinePolicyArrayOutput) ToPermissionSetInlinePolicyArrayOutputWithContext

func (o PermissionSetInlinePolicyArrayOutput) ToPermissionSetInlinePolicyArrayOutputWithContext(ctx context.Context) PermissionSetInlinePolicyArrayOutput

type PermissionSetInlinePolicyInput

type PermissionSetInlinePolicyInput interface {
	pulumi.Input

	ToPermissionSetInlinePolicyOutput() PermissionSetInlinePolicyOutput
	ToPermissionSetInlinePolicyOutputWithContext(ctx context.Context) PermissionSetInlinePolicyOutput
}

type PermissionSetInlinePolicyMap

type PermissionSetInlinePolicyMap map[string]PermissionSetInlinePolicyInput

func (PermissionSetInlinePolicyMap) ElementType

func (PermissionSetInlinePolicyMap) ToPermissionSetInlinePolicyMapOutput

func (i PermissionSetInlinePolicyMap) ToPermissionSetInlinePolicyMapOutput() PermissionSetInlinePolicyMapOutput

func (PermissionSetInlinePolicyMap) ToPermissionSetInlinePolicyMapOutputWithContext

func (i PermissionSetInlinePolicyMap) ToPermissionSetInlinePolicyMapOutputWithContext(ctx context.Context) PermissionSetInlinePolicyMapOutput

type PermissionSetInlinePolicyMapInput

type PermissionSetInlinePolicyMapInput interface {
	pulumi.Input

	ToPermissionSetInlinePolicyMapOutput() PermissionSetInlinePolicyMapOutput
	ToPermissionSetInlinePolicyMapOutputWithContext(context.Context) PermissionSetInlinePolicyMapOutput
}

PermissionSetInlinePolicyMapInput is an input type that accepts PermissionSetInlinePolicyMap and PermissionSetInlinePolicyMapOutput values. You can construct a concrete instance of `PermissionSetInlinePolicyMapInput` via:

PermissionSetInlinePolicyMap{ "key": PermissionSetInlinePolicyArgs{...} }

type PermissionSetInlinePolicyMapOutput

type PermissionSetInlinePolicyMapOutput struct{ *pulumi.OutputState }

func (PermissionSetInlinePolicyMapOutput) ElementType

func (PermissionSetInlinePolicyMapOutput) MapIndex

func (PermissionSetInlinePolicyMapOutput) ToPermissionSetInlinePolicyMapOutput

func (o PermissionSetInlinePolicyMapOutput) ToPermissionSetInlinePolicyMapOutput() PermissionSetInlinePolicyMapOutput

func (PermissionSetInlinePolicyMapOutput) ToPermissionSetInlinePolicyMapOutputWithContext

func (o PermissionSetInlinePolicyMapOutput) ToPermissionSetInlinePolicyMapOutputWithContext(ctx context.Context) PermissionSetInlinePolicyMapOutput

type PermissionSetInlinePolicyOutput

type PermissionSetInlinePolicyOutput struct{ *pulumi.OutputState }

func (PermissionSetInlinePolicyOutput) ElementType

func (PermissionSetInlinePolicyOutput) InlinePolicy

The IAM inline policy to attach to a Permission Set.

func (PermissionSetInlinePolicyOutput) InstanceArn

The Amazon Resource Name (ARN) of the SSO Instance under which the operation will be executed.

func (PermissionSetInlinePolicyOutput) PermissionSetArn

The Amazon Resource Name (ARN) of the Permission Set.

func (PermissionSetInlinePolicyOutput) Region

Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

func (PermissionSetInlinePolicyOutput) ToPermissionSetInlinePolicyOutput

func (o PermissionSetInlinePolicyOutput) ToPermissionSetInlinePolicyOutput() PermissionSetInlinePolicyOutput

func (PermissionSetInlinePolicyOutput) ToPermissionSetInlinePolicyOutputWithContext

func (o PermissionSetInlinePolicyOutput) ToPermissionSetInlinePolicyOutputWithContext(ctx context.Context) PermissionSetInlinePolicyOutput

type PermissionSetInlinePolicyState

type PermissionSetInlinePolicyState struct {
	// The IAM inline policy to attach to a Permission Set.
	InlinePolicy pulumi.StringPtrInput
	// The Amazon Resource Name (ARN) of the SSO Instance under which the operation will be executed.
	InstanceArn pulumi.StringPtrInput
	// The Amazon Resource Name (ARN) of the Permission Set.
	PermissionSetArn pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
}

func (PermissionSetInlinePolicyState) ElementType

type PermissionSetInput

type PermissionSetInput interface {
	pulumi.Input

	ToPermissionSetOutput() PermissionSetOutput
	ToPermissionSetOutputWithContext(ctx context.Context) PermissionSetOutput
}

type PermissionSetMap

type PermissionSetMap map[string]PermissionSetInput

func (PermissionSetMap) ElementType

func (PermissionSetMap) ElementType() reflect.Type

func (PermissionSetMap) ToPermissionSetMapOutput

func (i PermissionSetMap) ToPermissionSetMapOutput() PermissionSetMapOutput

func (PermissionSetMap) ToPermissionSetMapOutputWithContext

func (i PermissionSetMap) ToPermissionSetMapOutputWithContext(ctx context.Context) PermissionSetMapOutput

type PermissionSetMapInput

type PermissionSetMapInput interface {
	pulumi.Input

	ToPermissionSetMapOutput() PermissionSetMapOutput
	ToPermissionSetMapOutputWithContext(context.Context) PermissionSetMapOutput
}

PermissionSetMapInput is an input type that accepts PermissionSetMap and PermissionSetMapOutput values. You can construct a concrete instance of `PermissionSetMapInput` via:

PermissionSetMap{ "key": PermissionSetArgs{...} }

type PermissionSetMapOutput

type PermissionSetMapOutput struct{ *pulumi.OutputState }

func (PermissionSetMapOutput) ElementType

func (PermissionSetMapOutput) ElementType() reflect.Type

func (PermissionSetMapOutput) MapIndex

func (PermissionSetMapOutput) ToPermissionSetMapOutput

func (o PermissionSetMapOutput) ToPermissionSetMapOutput() PermissionSetMapOutput

func (PermissionSetMapOutput) ToPermissionSetMapOutputWithContext

func (o PermissionSetMapOutput) ToPermissionSetMapOutputWithContext(ctx context.Context) PermissionSetMapOutput

type PermissionSetOutput

type PermissionSetOutput struct{ *pulumi.OutputState }

func (PermissionSetOutput) Arn

The Amazon Resource Name (ARN) of the Permission Set.

func (PermissionSetOutput) CreatedDate

func (o PermissionSetOutput) CreatedDate() pulumi.StringOutput

The date the Permission Set was created in [RFC3339 format](https://tools.ietf.org/html/rfc3339#section-5.8).

func (PermissionSetOutput) Description

func (o PermissionSetOutput) Description() pulumi.StringPtrOutput

The description of the Permission Set.

func (PermissionSetOutput) ElementType

func (PermissionSetOutput) ElementType() reflect.Type

func (PermissionSetOutput) InstanceArn

func (o PermissionSetOutput) InstanceArn() pulumi.StringOutput

The Amazon Resource Name (ARN) of the SSO Instance under which the operation will be executed.

func (PermissionSetOutput) Name

The name of the Permission Set.

func (PermissionSetOutput) Region

Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

func (PermissionSetOutput) RelayState

The relay state URL used to redirect users within the application during the federation authentication process.

func (PermissionSetOutput) SessionDuration

func (o PermissionSetOutput) SessionDuration() pulumi.StringPtrOutput

The length of time that the application user sessions are valid in the ISO-8601 standard. Default: `PT1H`.

func (PermissionSetOutput) Tags

Key-value map of resource tags. .If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.

func (PermissionSetOutput) TagsAll

A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.

func (PermissionSetOutput) ToPermissionSetOutput

func (o PermissionSetOutput) ToPermissionSetOutput() PermissionSetOutput

func (PermissionSetOutput) ToPermissionSetOutputWithContext

func (o PermissionSetOutput) ToPermissionSetOutputWithContext(ctx context.Context) PermissionSetOutput

type PermissionSetState

type PermissionSetState struct {
	// The Amazon Resource Name (ARN) of the Permission Set.
	Arn pulumi.StringPtrInput
	// The date the Permission Set was created in [RFC3339 format](https://tools.ietf.org/html/rfc3339#section-5.8).
	CreatedDate pulumi.StringPtrInput
	// The description of the Permission Set.
	Description pulumi.StringPtrInput
	// The Amazon Resource Name (ARN) of the SSO Instance under which the operation will be executed.
	InstanceArn pulumi.StringPtrInput
	// The name of the Permission Set.
	Name pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// The relay state URL used to redirect users within the application during the federation authentication process.
	RelayState pulumi.StringPtrInput
	// The length of time that the application user sessions are valid in the ISO-8601 standard. Default: `PT1H`.
	SessionDuration pulumi.StringPtrInput
	// Key-value map of resource tags. .If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
	// A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	TagsAll pulumi.StringMapInput
}

func (PermissionSetState) ElementType

func (PermissionSetState) ElementType() reflect.Type

type PermissionsBoundaryAttachment

type PermissionsBoundaryAttachment struct {
	pulumi.CustomResourceState

	// The Amazon Resource Name (ARN) of the SSO Instance under which the operation will be executed.
	InstanceArn pulumi.StringOutput `pulumi:"instanceArn"`
	// The Amazon Resource Name (ARN) of the Permission Set.
	PermissionSetArn pulumi.StringOutput `pulumi:"permissionSetArn"`
	// The permissions boundary policy. See below.
	PermissionsBoundary PermissionsBoundaryAttachmentPermissionsBoundaryOutput `pulumi:"permissionsBoundary"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
}

Attaches a permissions boundary policy to a Single Sign-On (SSO) Permission Set resource.

> **NOTE:** A permission set can have at most one permissions boundary attached; using more than one `ssoadmin.PermissionsBoundaryAttachment` references the same permission set will show a permanent difference.

## Example Usage

### Attaching a customer-managed policy

```go package main

import (

"encoding/json"

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/iam"
"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ssoadmin"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := ssoadmin.GetInstances(ctx, &ssoadmin.GetInstancesArgs{}, nil)
		if err != nil {
			return err
		}
		examplePermissionSet, err := ssoadmin.NewPermissionSet(ctx, "example", &ssoadmin.PermissionSetArgs{
			Name:        pulumi.String("Example"),
			InstanceArn: pulumi.String(example.Arns[0]),
		})
		if err != nil {
			return err
		}
		tmpJSON0, err := json.Marshal(map[string]interface{}{
			"Version": "2012-10-17",
			"Statement": []map[string]interface{}{
				map[string]interface{}{
					"Action": []string{
						"ec2:Describe*",
					},
					"Effect":   "Allow",
					"Resource": "*",
				},
			},
		})
		if err != nil {
			return err
		}
		json0 := string(tmpJSON0)
		examplePolicy, err := iam.NewPolicy(ctx, "example", &iam.PolicyArgs{
			Name:        pulumi.String("TestPolicy"),
			Description: pulumi.String("My test policy"),
			Policy:      pulumi.String(json0),
		})
		if err != nil {
			return err
		}
		_, err = ssoadmin.NewPermissionsBoundaryAttachment(ctx, "example", &ssoadmin.PermissionsBoundaryAttachmentArgs{
			InstanceArn:      examplePermissionSet.InstanceArn,
			PermissionSetArn: examplePermissionSet.Arn,
			PermissionsBoundary: &ssoadmin.PermissionsBoundaryAttachmentPermissionsBoundaryArgs{
				CustomerManagedPolicyReference: &ssoadmin.PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceArgs{
					Name: examplePolicy.Name,
					Path: pulumi.String("/"),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

### Attaching an AWS-managed policy

```go package main

import (

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ssoadmin"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := ssoadmin.NewPermissionsBoundaryAttachment(ctx, "example", &ssoadmin.PermissionsBoundaryAttachmentArgs{
			InstanceArn:      pulumi.Any(exampleAwsSsoadminPermissionSet.InstanceArn),
			PermissionSetArn: pulumi.Any(exampleAwsSsoadminPermissionSet.Arn),
			PermissionsBoundary: &ssoadmin.PermissionsBoundaryAttachmentPermissionsBoundaryArgs{
				ManagedPolicyArn: pulumi.String("arn:aws:iam::aws:policy/ReadOnlyAccess"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Using `pulumi import`, import SSO Admin Permissions Boundary Attachments using the `permission_set_arn` and `instance_arn`, separated by a comma (`,`). For example:

```sh $ pulumi import aws:ssoadmin/permissionsBoundaryAttachment:PermissionsBoundaryAttachment example arn:aws:sso:::permissionSet/ssoins-2938j0x8920sbj72/ps-80383020jr9302rk,arn:aws:sso:::instance/ssoins-2938j0x8920sbj72 ```

func GetPermissionsBoundaryAttachment

func GetPermissionsBoundaryAttachment(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *PermissionsBoundaryAttachmentState, opts ...pulumi.ResourceOption) (*PermissionsBoundaryAttachment, error)

GetPermissionsBoundaryAttachment gets an existing PermissionsBoundaryAttachment resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewPermissionsBoundaryAttachment

func NewPermissionsBoundaryAttachment(ctx *pulumi.Context,
	name string, args *PermissionsBoundaryAttachmentArgs, opts ...pulumi.ResourceOption) (*PermissionsBoundaryAttachment, error)

NewPermissionsBoundaryAttachment registers a new resource with the given unique name, arguments, and options.

func (*PermissionsBoundaryAttachment) ElementType

func (*PermissionsBoundaryAttachment) ToPermissionsBoundaryAttachmentOutput

func (i *PermissionsBoundaryAttachment) ToPermissionsBoundaryAttachmentOutput() PermissionsBoundaryAttachmentOutput

func (*PermissionsBoundaryAttachment) ToPermissionsBoundaryAttachmentOutputWithContext

func (i *PermissionsBoundaryAttachment) ToPermissionsBoundaryAttachmentOutputWithContext(ctx context.Context) PermissionsBoundaryAttachmentOutput

type PermissionsBoundaryAttachmentArgs

type PermissionsBoundaryAttachmentArgs struct {
	// The Amazon Resource Name (ARN) of the SSO Instance under which the operation will be executed.
	InstanceArn pulumi.StringInput
	// The Amazon Resource Name (ARN) of the Permission Set.
	PermissionSetArn pulumi.StringInput
	// The permissions boundary policy. See below.
	PermissionsBoundary PermissionsBoundaryAttachmentPermissionsBoundaryInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
}

The set of arguments for constructing a PermissionsBoundaryAttachment resource.

func (PermissionsBoundaryAttachmentArgs) ElementType

type PermissionsBoundaryAttachmentArray

type PermissionsBoundaryAttachmentArray []PermissionsBoundaryAttachmentInput

func (PermissionsBoundaryAttachmentArray) ElementType

func (PermissionsBoundaryAttachmentArray) ToPermissionsBoundaryAttachmentArrayOutput

func (i PermissionsBoundaryAttachmentArray) ToPermissionsBoundaryAttachmentArrayOutput() PermissionsBoundaryAttachmentArrayOutput

func (PermissionsBoundaryAttachmentArray) ToPermissionsBoundaryAttachmentArrayOutputWithContext

func (i PermissionsBoundaryAttachmentArray) ToPermissionsBoundaryAttachmentArrayOutputWithContext(ctx context.Context) PermissionsBoundaryAttachmentArrayOutput

type PermissionsBoundaryAttachmentArrayInput

type PermissionsBoundaryAttachmentArrayInput interface {
	pulumi.Input

	ToPermissionsBoundaryAttachmentArrayOutput() PermissionsBoundaryAttachmentArrayOutput
	ToPermissionsBoundaryAttachmentArrayOutputWithContext(context.Context) PermissionsBoundaryAttachmentArrayOutput
}

PermissionsBoundaryAttachmentArrayInput is an input type that accepts PermissionsBoundaryAttachmentArray and PermissionsBoundaryAttachmentArrayOutput values. You can construct a concrete instance of `PermissionsBoundaryAttachmentArrayInput` via:

PermissionsBoundaryAttachmentArray{ PermissionsBoundaryAttachmentArgs{...} }

type PermissionsBoundaryAttachmentArrayOutput

type PermissionsBoundaryAttachmentArrayOutput struct{ *pulumi.OutputState }

func (PermissionsBoundaryAttachmentArrayOutput) ElementType

func (PermissionsBoundaryAttachmentArrayOutput) Index

func (PermissionsBoundaryAttachmentArrayOutput) ToPermissionsBoundaryAttachmentArrayOutput

func (o PermissionsBoundaryAttachmentArrayOutput) ToPermissionsBoundaryAttachmentArrayOutput() PermissionsBoundaryAttachmentArrayOutput

func (PermissionsBoundaryAttachmentArrayOutput) ToPermissionsBoundaryAttachmentArrayOutputWithContext

func (o PermissionsBoundaryAttachmentArrayOutput) ToPermissionsBoundaryAttachmentArrayOutputWithContext(ctx context.Context) PermissionsBoundaryAttachmentArrayOutput

type PermissionsBoundaryAttachmentInput

type PermissionsBoundaryAttachmentInput interface {
	pulumi.Input

	ToPermissionsBoundaryAttachmentOutput() PermissionsBoundaryAttachmentOutput
	ToPermissionsBoundaryAttachmentOutputWithContext(ctx context.Context) PermissionsBoundaryAttachmentOutput
}

type PermissionsBoundaryAttachmentMap

type PermissionsBoundaryAttachmentMap map[string]PermissionsBoundaryAttachmentInput

func (PermissionsBoundaryAttachmentMap) ElementType

func (PermissionsBoundaryAttachmentMap) ToPermissionsBoundaryAttachmentMapOutput

func (i PermissionsBoundaryAttachmentMap) ToPermissionsBoundaryAttachmentMapOutput() PermissionsBoundaryAttachmentMapOutput

func (PermissionsBoundaryAttachmentMap) ToPermissionsBoundaryAttachmentMapOutputWithContext

func (i PermissionsBoundaryAttachmentMap) ToPermissionsBoundaryAttachmentMapOutputWithContext(ctx context.Context) PermissionsBoundaryAttachmentMapOutput

type PermissionsBoundaryAttachmentMapInput

type PermissionsBoundaryAttachmentMapInput interface {
	pulumi.Input

	ToPermissionsBoundaryAttachmentMapOutput() PermissionsBoundaryAttachmentMapOutput
	ToPermissionsBoundaryAttachmentMapOutputWithContext(context.Context) PermissionsBoundaryAttachmentMapOutput
}

PermissionsBoundaryAttachmentMapInput is an input type that accepts PermissionsBoundaryAttachmentMap and PermissionsBoundaryAttachmentMapOutput values. You can construct a concrete instance of `PermissionsBoundaryAttachmentMapInput` via:

PermissionsBoundaryAttachmentMap{ "key": PermissionsBoundaryAttachmentArgs{...} }

type PermissionsBoundaryAttachmentMapOutput

type PermissionsBoundaryAttachmentMapOutput struct{ *pulumi.OutputState }

func (PermissionsBoundaryAttachmentMapOutput) ElementType

func (PermissionsBoundaryAttachmentMapOutput) MapIndex

func (PermissionsBoundaryAttachmentMapOutput) ToPermissionsBoundaryAttachmentMapOutput

func (o PermissionsBoundaryAttachmentMapOutput) ToPermissionsBoundaryAttachmentMapOutput() PermissionsBoundaryAttachmentMapOutput

func (PermissionsBoundaryAttachmentMapOutput) ToPermissionsBoundaryAttachmentMapOutputWithContext

func (o PermissionsBoundaryAttachmentMapOutput) ToPermissionsBoundaryAttachmentMapOutputWithContext(ctx context.Context) PermissionsBoundaryAttachmentMapOutput

type PermissionsBoundaryAttachmentOutput

type PermissionsBoundaryAttachmentOutput struct{ *pulumi.OutputState }

func (PermissionsBoundaryAttachmentOutput) ElementType

func (PermissionsBoundaryAttachmentOutput) InstanceArn

The Amazon Resource Name (ARN) of the SSO Instance under which the operation will be executed.

func (PermissionsBoundaryAttachmentOutput) PermissionSetArn

The Amazon Resource Name (ARN) of the Permission Set.

func (PermissionsBoundaryAttachmentOutput) PermissionsBoundary

The permissions boundary policy. See below.

func (PermissionsBoundaryAttachmentOutput) Region

Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

func (PermissionsBoundaryAttachmentOutput) ToPermissionsBoundaryAttachmentOutput

func (o PermissionsBoundaryAttachmentOutput) ToPermissionsBoundaryAttachmentOutput() PermissionsBoundaryAttachmentOutput

func (PermissionsBoundaryAttachmentOutput) ToPermissionsBoundaryAttachmentOutputWithContext

func (o PermissionsBoundaryAttachmentOutput) ToPermissionsBoundaryAttachmentOutputWithContext(ctx context.Context) PermissionsBoundaryAttachmentOutput

type PermissionsBoundaryAttachmentPermissionsBoundary

type PermissionsBoundaryAttachmentPermissionsBoundary struct {
	// Specifies the name and path of a customer managed policy. See below.
	CustomerManagedPolicyReference *PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReference `pulumi:"customerManagedPolicyReference"`
	// AWS-managed IAM policy ARN to use as the permissions boundary.
	ManagedPolicyArn *string `pulumi:"managedPolicyArn"`
}

type PermissionsBoundaryAttachmentPermissionsBoundaryArgs

type PermissionsBoundaryAttachmentPermissionsBoundaryArgs struct {
	// Specifies the name and path of a customer managed policy. See below.
	CustomerManagedPolicyReference PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferencePtrInput `pulumi:"customerManagedPolicyReference"`
	// AWS-managed IAM policy ARN to use as the permissions boundary.
	ManagedPolicyArn pulumi.StringPtrInput `pulumi:"managedPolicyArn"`
}

func (PermissionsBoundaryAttachmentPermissionsBoundaryArgs) ElementType

func (PermissionsBoundaryAttachmentPermissionsBoundaryArgs) ToPermissionsBoundaryAttachmentPermissionsBoundaryOutput

func (i PermissionsBoundaryAttachmentPermissionsBoundaryArgs) ToPermissionsBoundaryAttachmentPermissionsBoundaryOutput() PermissionsBoundaryAttachmentPermissionsBoundaryOutput

func (PermissionsBoundaryAttachmentPermissionsBoundaryArgs) ToPermissionsBoundaryAttachmentPermissionsBoundaryOutputWithContext

func (i PermissionsBoundaryAttachmentPermissionsBoundaryArgs) ToPermissionsBoundaryAttachmentPermissionsBoundaryOutputWithContext(ctx context.Context) PermissionsBoundaryAttachmentPermissionsBoundaryOutput

func (PermissionsBoundaryAttachmentPermissionsBoundaryArgs) ToPermissionsBoundaryAttachmentPermissionsBoundaryPtrOutput

func (i PermissionsBoundaryAttachmentPermissionsBoundaryArgs) ToPermissionsBoundaryAttachmentPermissionsBoundaryPtrOutput() PermissionsBoundaryAttachmentPermissionsBoundaryPtrOutput

func (PermissionsBoundaryAttachmentPermissionsBoundaryArgs) ToPermissionsBoundaryAttachmentPermissionsBoundaryPtrOutputWithContext

func (i PermissionsBoundaryAttachmentPermissionsBoundaryArgs) ToPermissionsBoundaryAttachmentPermissionsBoundaryPtrOutputWithContext(ctx context.Context) PermissionsBoundaryAttachmentPermissionsBoundaryPtrOutput

type PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReference

type PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReference struct {
	// Name of the customer managed IAM Policy to be attached.
	Name string `pulumi:"name"`
	// The path to the IAM policy to be attached. The default is `/`. See [IAM Identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-friendly-names) for more information.
	Path *string `pulumi:"path"`
}

type PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceArgs

type PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceArgs struct {
	// Name of the customer managed IAM Policy to be attached.
	Name pulumi.StringInput `pulumi:"name"`
	// The path to the IAM policy to be attached. The default is `/`. See [IAM Identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-friendly-names) for more information.
	Path pulumi.StringPtrInput `pulumi:"path"`
}

func (PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceArgs) ElementType

func (PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceArgs) ToPermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceOutput

func (PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceArgs) ToPermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceOutputWithContext

func (PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceArgs) ToPermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferencePtrOutput

func (PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceArgs) ToPermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferencePtrOutputWithContext

type PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceInput

type PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceInput interface {
	pulumi.Input

	ToPermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceOutput() PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceOutput
	ToPermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceOutputWithContext(context.Context) PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceOutput
}

PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceInput is an input type that accepts PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceArgs and PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceOutput values. You can construct a concrete instance of `PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceInput` via:

PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceArgs{...}

type PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceOutput

type PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceOutput struct{ *pulumi.OutputState }

func (PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceOutput) ElementType

func (PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceOutput) Name

Name of the customer managed IAM Policy to be attached.

func (PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceOutput) Path

The path to the IAM policy to be attached. The default is `/`. See [IAM Identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-friendly-names) for more information.

func (PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceOutput) ToPermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceOutput

func (PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceOutput) ToPermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceOutputWithContext

func (PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceOutput) ToPermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferencePtrOutput

func (PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceOutput) ToPermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferencePtrOutputWithContext

type PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferencePtrInput

type PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferencePtrInput interface {
	pulumi.Input

	ToPermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferencePtrOutput() PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferencePtrOutput
	ToPermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferencePtrOutputWithContext(context.Context) PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferencePtrOutput
}

PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferencePtrInput is an input type that accepts PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceArgs, PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferencePtr and PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferencePtrOutput values. You can construct a concrete instance of `PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferencePtrInput` via:

        PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferenceArgs{...}

or:

        nil

type PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferencePtrOutput

type PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferencePtrOutput struct{ *pulumi.OutputState }

func (PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferencePtrOutput) ElementType

func (PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferencePtrOutput) Name

Name of the customer managed IAM Policy to be attached.

func (PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferencePtrOutput) Path

The path to the IAM policy to be attached. The default is `/`. See [IAM Identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-friendly-names) for more information.

func (PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferencePtrOutput) ToPermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferencePtrOutput

func (PermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferencePtrOutput) ToPermissionsBoundaryAttachmentPermissionsBoundaryCustomerManagedPolicyReferencePtrOutputWithContext

type PermissionsBoundaryAttachmentPermissionsBoundaryInput

type PermissionsBoundaryAttachmentPermissionsBoundaryInput interface {
	pulumi.Input

	ToPermissionsBoundaryAttachmentPermissionsBoundaryOutput() PermissionsBoundaryAttachmentPermissionsBoundaryOutput
	ToPermissionsBoundaryAttachmentPermissionsBoundaryOutputWithContext(context.Context) PermissionsBoundaryAttachmentPermissionsBoundaryOutput
}

PermissionsBoundaryAttachmentPermissionsBoundaryInput is an input type that accepts PermissionsBoundaryAttachmentPermissionsBoundaryArgs and PermissionsBoundaryAttachmentPermissionsBoundaryOutput values. You can construct a concrete instance of `PermissionsBoundaryAttachmentPermissionsBoundaryInput` via:

PermissionsBoundaryAttachmentPermissionsBoundaryArgs{...}

type PermissionsBoundaryAttachmentPermissionsBoundaryOutput

type PermissionsBoundaryAttachmentPermissionsBoundaryOutput struct{ *pulumi.OutputState }

func (PermissionsBoundaryAttachmentPermissionsBoundaryOutput) CustomerManagedPolicyReference

Specifies the name and path of a customer managed policy. See below.

func (PermissionsBoundaryAttachmentPermissionsBoundaryOutput) ElementType

func (PermissionsBoundaryAttachmentPermissionsBoundaryOutput) ManagedPolicyArn

AWS-managed IAM policy ARN to use as the permissions boundary.

func (PermissionsBoundaryAttachmentPermissionsBoundaryOutput) ToPermissionsBoundaryAttachmentPermissionsBoundaryOutput

func (PermissionsBoundaryAttachmentPermissionsBoundaryOutput) ToPermissionsBoundaryAttachmentPermissionsBoundaryOutputWithContext

func (o PermissionsBoundaryAttachmentPermissionsBoundaryOutput) ToPermissionsBoundaryAttachmentPermissionsBoundaryOutputWithContext(ctx context.Context) PermissionsBoundaryAttachmentPermissionsBoundaryOutput

func (PermissionsBoundaryAttachmentPermissionsBoundaryOutput) ToPermissionsBoundaryAttachmentPermissionsBoundaryPtrOutput

func (o PermissionsBoundaryAttachmentPermissionsBoundaryOutput) ToPermissionsBoundaryAttachmentPermissionsBoundaryPtrOutput() PermissionsBoundaryAttachmentPermissionsBoundaryPtrOutput

func (PermissionsBoundaryAttachmentPermissionsBoundaryOutput) ToPermissionsBoundaryAttachmentPermissionsBoundaryPtrOutputWithContext

func (o PermissionsBoundaryAttachmentPermissionsBoundaryOutput) ToPermissionsBoundaryAttachmentPermissionsBoundaryPtrOutputWithContext(ctx context.Context) PermissionsBoundaryAttachmentPermissionsBoundaryPtrOutput

type PermissionsBoundaryAttachmentPermissionsBoundaryPtrInput

type PermissionsBoundaryAttachmentPermissionsBoundaryPtrInput interface {
	pulumi.Input

	ToPermissionsBoundaryAttachmentPermissionsBoundaryPtrOutput() PermissionsBoundaryAttachmentPermissionsBoundaryPtrOutput
	ToPermissionsBoundaryAttachmentPermissionsBoundaryPtrOutputWithContext(context.Context) PermissionsBoundaryAttachmentPermissionsBoundaryPtrOutput
}

PermissionsBoundaryAttachmentPermissionsBoundaryPtrInput is an input type that accepts PermissionsBoundaryAttachmentPermissionsBoundaryArgs, PermissionsBoundaryAttachmentPermissionsBoundaryPtr and PermissionsBoundaryAttachmentPermissionsBoundaryPtrOutput values. You can construct a concrete instance of `PermissionsBoundaryAttachmentPermissionsBoundaryPtrInput` via:

        PermissionsBoundaryAttachmentPermissionsBoundaryArgs{...}

or:

        nil

type PermissionsBoundaryAttachmentPermissionsBoundaryPtrOutput

type PermissionsBoundaryAttachmentPermissionsBoundaryPtrOutput struct{ *pulumi.OutputState }

func (PermissionsBoundaryAttachmentPermissionsBoundaryPtrOutput) CustomerManagedPolicyReference

Specifies the name and path of a customer managed policy. See below.

func (PermissionsBoundaryAttachmentPermissionsBoundaryPtrOutput) Elem

func (PermissionsBoundaryAttachmentPermissionsBoundaryPtrOutput) ElementType

func (PermissionsBoundaryAttachmentPermissionsBoundaryPtrOutput) ManagedPolicyArn

AWS-managed IAM policy ARN to use as the permissions boundary.

func (PermissionsBoundaryAttachmentPermissionsBoundaryPtrOutput) ToPermissionsBoundaryAttachmentPermissionsBoundaryPtrOutput

func (PermissionsBoundaryAttachmentPermissionsBoundaryPtrOutput) ToPermissionsBoundaryAttachmentPermissionsBoundaryPtrOutputWithContext

func (o PermissionsBoundaryAttachmentPermissionsBoundaryPtrOutput) ToPermissionsBoundaryAttachmentPermissionsBoundaryPtrOutputWithContext(ctx context.Context) PermissionsBoundaryAttachmentPermissionsBoundaryPtrOutput

type PermissionsBoundaryAttachmentState

type PermissionsBoundaryAttachmentState struct {
	// The Amazon Resource Name (ARN) of the SSO Instance under which the operation will be executed.
	InstanceArn pulumi.StringPtrInput
	// The Amazon Resource Name (ARN) of the Permission Set.
	PermissionSetArn pulumi.StringPtrInput
	// The permissions boundary policy. See below.
	PermissionsBoundary PermissionsBoundaryAttachmentPermissionsBoundaryPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
}

func (PermissionsBoundaryAttachmentState) ElementType

type TrustedTokenIssuer

type TrustedTokenIssuer struct {
	pulumi.CustomResourceState

	// ARN of the trusted token issuer.
	Arn pulumi.StringOutput `pulumi:"arn"`
	// A unique, case-sensitive ID that you provide to ensure the idempotency of the request. AWS generates a random value when not provided.
	ClientToken pulumi.StringPtrOutput `pulumi:"clientToken"`
	// ARN of the instance of IAM Identity Center.
	InstanceArn pulumi.StringOutput `pulumi:"instanceArn"`
	// Name of the trusted token issuer.
	Name pulumi.StringOutput `pulumi:"name"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
	// Key-value mapping of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapOutput `pulumi:"tags"`
	// Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	TagsAll pulumi.StringMapOutput `pulumi:"tagsAll"`
	// A block that specifies settings that apply to the trusted token issuer, these change depending on the type you specify in `trustedTokenIssuerType`. Documented below.
	TrustedTokenIssuerConfiguration TrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutput `pulumi:"trustedTokenIssuerConfiguration"`
	// Specifies the type of the trusted token issuer. Valid values are `OIDC_JWT`
	//
	// The following arguments are optional:
	TrustedTokenIssuerType pulumi.StringOutput `pulumi:"trustedTokenIssuerType"`
}

Resource for managing an AWS SSO Admin Trusted Token Issuer.

## Example Usage

### Basic Usage

```go package main

import (

"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ssoadmin"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := ssoadmin.GetInstances(ctx, &ssoadmin.GetInstancesArgs{}, nil)
		if err != nil {
			return err
		}
		_, err = ssoadmin.NewTrustedTokenIssuer(ctx, "example", &ssoadmin.TrustedTokenIssuerArgs{
			Name:                   pulumi.String("example"),
			InstanceArn:            pulumi.String(example.Arns[0]),
			TrustedTokenIssuerType: pulumi.String("OIDC_JWT"),
			TrustedTokenIssuerConfiguration: &ssoadmin.TrustedTokenIssuerTrustedTokenIssuerConfigurationArgs{
				OidcJwtConfiguration: &ssoadmin.TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationArgs{
					ClaimAttributePath:         pulumi.String("email"),
					IdentityStoreAttributePath: pulumi.String("emails.value"),
					IssuerUrl:                  pulumi.String("https://example.com"),
					JwksRetrievalOption:        pulumi.String("OPEN_ID_DISCOVERY"),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Using `pulumi import`, import SSO Admin Trusted Token Issuer using the `id`. For example:

```sh $ pulumi import aws:ssoadmin/trustedTokenIssuer:TrustedTokenIssuer example arn:aws:sso::123456789012:trustedTokenIssuer/ssoins-lu1ye3gew4mbc7ju/tti-2657c556-9707-11ee-b9d1-0242ac120002 ```

func GetTrustedTokenIssuer

func GetTrustedTokenIssuer(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *TrustedTokenIssuerState, opts ...pulumi.ResourceOption) (*TrustedTokenIssuer, error)

GetTrustedTokenIssuer gets an existing TrustedTokenIssuer resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewTrustedTokenIssuer

func NewTrustedTokenIssuer(ctx *pulumi.Context,
	name string, args *TrustedTokenIssuerArgs, opts ...pulumi.ResourceOption) (*TrustedTokenIssuer, error)

NewTrustedTokenIssuer registers a new resource with the given unique name, arguments, and options.

func (*TrustedTokenIssuer) ElementType

func (*TrustedTokenIssuer) ElementType() reflect.Type

func (*TrustedTokenIssuer) ToTrustedTokenIssuerOutput

func (i *TrustedTokenIssuer) ToTrustedTokenIssuerOutput() TrustedTokenIssuerOutput

func (*TrustedTokenIssuer) ToTrustedTokenIssuerOutputWithContext

func (i *TrustedTokenIssuer) ToTrustedTokenIssuerOutputWithContext(ctx context.Context) TrustedTokenIssuerOutput

type TrustedTokenIssuerArgs

type TrustedTokenIssuerArgs struct {
	// A unique, case-sensitive ID that you provide to ensure the idempotency of the request. AWS generates a random value when not provided.
	ClientToken pulumi.StringPtrInput
	// ARN of the instance of IAM Identity Center.
	InstanceArn pulumi.StringInput
	// Name of the trusted token issuer.
	Name pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// Key-value mapping of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
	// A block that specifies settings that apply to the trusted token issuer, these change depending on the type you specify in `trustedTokenIssuerType`. Documented below.
	TrustedTokenIssuerConfiguration TrustedTokenIssuerTrustedTokenIssuerConfigurationPtrInput
	// Specifies the type of the trusted token issuer. Valid values are `OIDC_JWT`
	//
	// The following arguments are optional:
	TrustedTokenIssuerType pulumi.StringInput
}

The set of arguments for constructing a TrustedTokenIssuer resource.

func (TrustedTokenIssuerArgs) ElementType

func (TrustedTokenIssuerArgs) ElementType() reflect.Type

type TrustedTokenIssuerArray

type TrustedTokenIssuerArray []TrustedTokenIssuerInput

func (TrustedTokenIssuerArray) ElementType

func (TrustedTokenIssuerArray) ElementType() reflect.Type

func (TrustedTokenIssuerArray) ToTrustedTokenIssuerArrayOutput

func (i TrustedTokenIssuerArray) ToTrustedTokenIssuerArrayOutput() TrustedTokenIssuerArrayOutput

func (TrustedTokenIssuerArray) ToTrustedTokenIssuerArrayOutputWithContext

func (i TrustedTokenIssuerArray) ToTrustedTokenIssuerArrayOutputWithContext(ctx context.Context) TrustedTokenIssuerArrayOutput

type TrustedTokenIssuerArrayInput

type TrustedTokenIssuerArrayInput interface {
	pulumi.Input

	ToTrustedTokenIssuerArrayOutput() TrustedTokenIssuerArrayOutput
	ToTrustedTokenIssuerArrayOutputWithContext(context.Context) TrustedTokenIssuerArrayOutput
}

TrustedTokenIssuerArrayInput is an input type that accepts TrustedTokenIssuerArray and TrustedTokenIssuerArrayOutput values. You can construct a concrete instance of `TrustedTokenIssuerArrayInput` via:

TrustedTokenIssuerArray{ TrustedTokenIssuerArgs{...} }

type TrustedTokenIssuerArrayOutput

type TrustedTokenIssuerArrayOutput struct{ *pulumi.OutputState }

func (TrustedTokenIssuerArrayOutput) ElementType

func (TrustedTokenIssuerArrayOutput) Index

func (TrustedTokenIssuerArrayOutput) ToTrustedTokenIssuerArrayOutput

func (o TrustedTokenIssuerArrayOutput) ToTrustedTokenIssuerArrayOutput() TrustedTokenIssuerArrayOutput

func (TrustedTokenIssuerArrayOutput) ToTrustedTokenIssuerArrayOutputWithContext

func (o TrustedTokenIssuerArrayOutput) ToTrustedTokenIssuerArrayOutputWithContext(ctx context.Context) TrustedTokenIssuerArrayOutput

type TrustedTokenIssuerInput

type TrustedTokenIssuerInput interface {
	pulumi.Input

	ToTrustedTokenIssuerOutput() TrustedTokenIssuerOutput
	ToTrustedTokenIssuerOutputWithContext(ctx context.Context) TrustedTokenIssuerOutput
}

type TrustedTokenIssuerMap

type TrustedTokenIssuerMap map[string]TrustedTokenIssuerInput

func (TrustedTokenIssuerMap) ElementType

func (TrustedTokenIssuerMap) ElementType() reflect.Type

func (TrustedTokenIssuerMap) ToTrustedTokenIssuerMapOutput

func (i TrustedTokenIssuerMap) ToTrustedTokenIssuerMapOutput() TrustedTokenIssuerMapOutput

func (TrustedTokenIssuerMap) ToTrustedTokenIssuerMapOutputWithContext

func (i TrustedTokenIssuerMap) ToTrustedTokenIssuerMapOutputWithContext(ctx context.Context) TrustedTokenIssuerMapOutput

type TrustedTokenIssuerMapInput

type TrustedTokenIssuerMapInput interface {
	pulumi.Input

	ToTrustedTokenIssuerMapOutput() TrustedTokenIssuerMapOutput
	ToTrustedTokenIssuerMapOutputWithContext(context.Context) TrustedTokenIssuerMapOutput
}

TrustedTokenIssuerMapInput is an input type that accepts TrustedTokenIssuerMap and TrustedTokenIssuerMapOutput values. You can construct a concrete instance of `TrustedTokenIssuerMapInput` via:

TrustedTokenIssuerMap{ "key": TrustedTokenIssuerArgs{...} }

type TrustedTokenIssuerMapOutput

type TrustedTokenIssuerMapOutput struct{ *pulumi.OutputState }

func (TrustedTokenIssuerMapOutput) ElementType

func (TrustedTokenIssuerMapOutput) MapIndex

func (TrustedTokenIssuerMapOutput) ToTrustedTokenIssuerMapOutput

func (o TrustedTokenIssuerMapOutput) ToTrustedTokenIssuerMapOutput() TrustedTokenIssuerMapOutput

func (TrustedTokenIssuerMapOutput) ToTrustedTokenIssuerMapOutputWithContext

func (o TrustedTokenIssuerMapOutput) ToTrustedTokenIssuerMapOutputWithContext(ctx context.Context) TrustedTokenIssuerMapOutput

type TrustedTokenIssuerOutput

type TrustedTokenIssuerOutput struct{ *pulumi.OutputState }

func (TrustedTokenIssuerOutput) Arn

ARN of the trusted token issuer.

func (TrustedTokenIssuerOutput) ClientToken

A unique, case-sensitive ID that you provide to ensure the idempotency of the request. AWS generates a random value when not provided.

func (TrustedTokenIssuerOutput) ElementType

func (TrustedTokenIssuerOutput) ElementType() reflect.Type

func (TrustedTokenIssuerOutput) InstanceArn

ARN of the instance of IAM Identity Center.

func (TrustedTokenIssuerOutput) Name

Name of the trusted token issuer.

func (TrustedTokenIssuerOutput) Region

Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

func (TrustedTokenIssuerOutput) Tags

Key-value mapping of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.

func (TrustedTokenIssuerOutput) TagsAll

Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.

func (TrustedTokenIssuerOutput) ToTrustedTokenIssuerOutput

func (o TrustedTokenIssuerOutput) ToTrustedTokenIssuerOutput() TrustedTokenIssuerOutput

func (TrustedTokenIssuerOutput) ToTrustedTokenIssuerOutputWithContext

func (o TrustedTokenIssuerOutput) ToTrustedTokenIssuerOutputWithContext(ctx context.Context) TrustedTokenIssuerOutput

func (TrustedTokenIssuerOutput) TrustedTokenIssuerConfiguration

A block that specifies settings that apply to the trusted token issuer, these change depending on the type you specify in `trustedTokenIssuerType`. Documented below.

func (TrustedTokenIssuerOutput) TrustedTokenIssuerType

func (o TrustedTokenIssuerOutput) TrustedTokenIssuerType() pulumi.StringOutput

Specifies the type of the trusted token issuer. Valid values are `OIDC_JWT`

The following arguments are optional:

type TrustedTokenIssuerState

type TrustedTokenIssuerState struct {
	// ARN of the trusted token issuer.
	Arn pulumi.StringPtrInput
	// A unique, case-sensitive ID that you provide to ensure the idempotency of the request. AWS generates a random value when not provided.
	ClientToken pulumi.StringPtrInput
	// ARN of the instance of IAM Identity Center.
	InstanceArn pulumi.StringPtrInput
	// Name of the trusted token issuer.
	Name pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// Key-value mapping of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
	// Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	TagsAll pulumi.StringMapInput
	// A block that specifies settings that apply to the trusted token issuer, these change depending on the type you specify in `trustedTokenIssuerType`. Documented below.
	TrustedTokenIssuerConfiguration TrustedTokenIssuerTrustedTokenIssuerConfigurationPtrInput
	// Specifies the type of the trusted token issuer. Valid values are `OIDC_JWT`
	//
	// The following arguments are optional:
	TrustedTokenIssuerType pulumi.StringPtrInput
}

func (TrustedTokenIssuerState) ElementType

func (TrustedTokenIssuerState) ElementType() reflect.Type

type TrustedTokenIssuerTrustedTokenIssuerConfiguration

type TrustedTokenIssuerTrustedTokenIssuerConfiguration struct {
	// A block that describes the settings for a trusted token issuer that works with OpenID Connect (OIDC) by using JSON Web Tokens (JWT). See Documented below below.
	OidcJwtConfiguration *TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfiguration `pulumi:"oidcJwtConfiguration"`
}

type TrustedTokenIssuerTrustedTokenIssuerConfigurationArgs

type TrustedTokenIssuerTrustedTokenIssuerConfigurationArgs struct {
	// A block that describes the settings for a trusted token issuer that works with OpenID Connect (OIDC) by using JSON Web Tokens (JWT). See Documented below below.
	OidcJwtConfiguration TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrInput `pulumi:"oidcJwtConfiguration"`
}

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationArgs) ElementType

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationArgs) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationOutput

func (i TrustedTokenIssuerTrustedTokenIssuerConfigurationArgs) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationOutput() TrustedTokenIssuerTrustedTokenIssuerConfigurationOutput

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationArgs) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationOutputWithContext

func (i TrustedTokenIssuerTrustedTokenIssuerConfigurationArgs) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationOutputWithContext(ctx context.Context) TrustedTokenIssuerTrustedTokenIssuerConfigurationOutput

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationArgs) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutput

func (i TrustedTokenIssuerTrustedTokenIssuerConfigurationArgs) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutput() TrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutput

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationArgs) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutputWithContext

func (i TrustedTokenIssuerTrustedTokenIssuerConfigurationArgs) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutputWithContext(ctx context.Context) TrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutput

type TrustedTokenIssuerTrustedTokenIssuerConfigurationInput

type TrustedTokenIssuerTrustedTokenIssuerConfigurationInput interface {
	pulumi.Input

	ToTrustedTokenIssuerTrustedTokenIssuerConfigurationOutput() TrustedTokenIssuerTrustedTokenIssuerConfigurationOutput
	ToTrustedTokenIssuerTrustedTokenIssuerConfigurationOutputWithContext(context.Context) TrustedTokenIssuerTrustedTokenIssuerConfigurationOutput
}

TrustedTokenIssuerTrustedTokenIssuerConfigurationInput is an input type that accepts TrustedTokenIssuerTrustedTokenIssuerConfigurationArgs and TrustedTokenIssuerTrustedTokenIssuerConfigurationOutput values. You can construct a concrete instance of `TrustedTokenIssuerTrustedTokenIssuerConfigurationInput` via:

TrustedTokenIssuerTrustedTokenIssuerConfigurationArgs{...}

type TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfiguration

type TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfiguration struct {
	// Specifies the path of the source attribute in the JWT from the trusted token issuer.
	ClaimAttributePath string `pulumi:"claimAttributePath"`
	// Specifies path of the destination attribute in a JWT from IAM Identity Center. The attribute mapped by this JMESPath expression is compared against the attribute mapped by `claimAttributePath` when a trusted token issuer token is exchanged for an IAM Identity Center token.
	IdentityStoreAttributePath string `pulumi:"identityStoreAttributePath"`
	// Specifies the URL that IAM Identity Center uses for OpenID Discovery. OpenID Discovery is used to obtain the information required to verify the tokens that the trusted token issuer generates.
	IssuerUrl string `pulumi:"issuerUrl"`
	// The method that the trusted token issuer can use to retrieve the JSON Web Key Set used to verify a JWT. Valid values are `OPEN_ID_DISCOVERY`
	JwksRetrievalOption string `pulumi:"jwksRetrievalOption"`
}

type TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationArgs

type TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationArgs struct {
	// Specifies the path of the source attribute in the JWT from the trusted token issuer.
	ClaimAttributePath pulumi.StringInput `pulumi:"claimAttributePath"`
	// Specifies path of the destination attribute in a JWT from IAM Identity Center. The attribute mapped by this JMESPath expression is compared against the attribute mapped by `claimAttributePath` when a trusted token issuer token is exchanged for an IAM Identity Center token.
	IdentityStoreAttributePath pulumi.StringInput `pulumi:"identityStoreAttributePath"`
	// Specifies the URL that IAM Identity Center uses for OpenID Discovery. OpenID Discovery is used to obtain the information required to verify the tokens that the trusted token issuer generates.
	IssuerUrl pulumi.StringInput `pulumi:"issuerUrl"`
	// The method that the trusted token issuer can use to retrieve the JSON Web Key Set used to verify a JWT. Valid values are `OPEN_ID_DISCOVERY`
	JwksRetrievalOption pulumi.StringInput `pulumi:"jwksRetrievalOption"`
}

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationArgs) ElementType

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationArgs) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationOutput

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationArgs) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationOutputWithContext

func (i TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationArgs) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationOutputWithContext(ctx context.Context) TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationOutput

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationArgs) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrOutput

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationArgs) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrOutputWithContext

func (i TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationArgs) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrOutputWithContext(ctx context.Context) TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrOutput

type TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationInput

type TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationInput interface {
	pulumi.Input

	ToTrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationOutput() TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationOutput
	ToTrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationOutputWithContext(context.Context) TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationOutput
}

TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationInput is an input type that accepts TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationArgs and TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationOutput values. You can construct a concrete instance of `TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationInput` via:

TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationArgs{...}

type TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationOutput

type TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationOutput struct{ *pulumi.OutputState }

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationOutput) ClaimAttributePath

Specifies the path of the source attribute in the JWT from the trusted token issuer.

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationOutput) ElementType

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationOutput) IdentityStoreAttributePath

Specifies path of the destination attribute in a JWT from IAM Identity Center. The attribute mapped by this JMESPath expression is compared against the attribute mapped by `claimAttributePath` when a trusted token issuer token is exchanged for an IAM Identity Center token.

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationOutput) IssuerUrl

Specifies the URL that IAM Identity Center uses for OpenID Discovery. OpenID Discovery is used to obtain the information required to verify the tokens that the trusted token issuer generates.

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationOutput) JwksRetrievalOption

The method that the trusted token issuer can use to retrieve the JSON Web Key Set used to verify a JWT. Valid values are `OPEN_ID_DISCOVERY`

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationOutput) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationOutput

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationOutput) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationOutputWithContext

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationOutput) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrOutput

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationOutput) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrOutputWithContext

type TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrInput

type TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrInput interface {
	pulumi.Input

	ToTrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrOutput() TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrOutput
	ToTrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrOutputWithContext(context.Context) TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrOutput
}

TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrInput is an input type that accepts TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationArgs, TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtr and TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrOutput values. You can construct a concrete instance of `TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrInput` via:

        TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationArgs{...}

or:

        nil

type TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrOutput

type TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrOutput struct{ *pulumi.OutputState }

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrOutput) ClaimAttributePath

Specifies the path of the source attribute in the JWT from the trusted token issuer.

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrOutput) Elem

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrOutput) ElementType

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrOutput) IdentityStoreAttributePath

Specifies path of the destination attribute in a JWT from IAM Identity Center. The attribute mapped by this JMESPath expression is compared against the attribute mapped by `claimAttributePath` when a trusted token issuer token is exchanged for an IAM Identity Center token.

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrOutput) IssuerUrl

Specifies the URL that IAM Identity Center uses for OpenID Discovery. OpenID Discovery is used to obtain the information required to verify the tokens that the trusted token issuer generates.

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrOutput) JwksRetrievalOption

The method that the trusted token issuer can use to retrieve the JSON Web Key Set used to verify a JWT. Valid values are `OPEN_ID_DISCOVERY`

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrOutput) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrOutput

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrOutput) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationOidcJwtConfigurationPtrOutputWithContext

type TrustedTokenIssuerTrustedTokenIssuerConfigurationOutput

type TrustedTokenIssuerTrustedTokenIssuerConfigurationOutput struct{ *pulumi.OutputState }

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOutput) ElementType

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOutput) OidcJwtConfiguration

A block that describes the settings for a trusted token issuer that works with OpenID Connect (OIDC) by using JSON Web Tokens (JWT). See Documented below below.

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOutput) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationOutput

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOutput) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationOutputWithContext

func (o TrustedTokenIssuerTrustedTokenIssuerConfigurationOutput) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationOutputWithContext(ctx context.Context) TrustedTokenIssuerTrustedTokenIssuerConfigurationOutput

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOutput) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutput

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationOutput) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutputWithContext

func (o TrustedTokenIssuerTrustedTokenIssuerConfigurationOutput) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutputWithContext(ctx context.Context) TrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutput

type TrustedTokenIssuerTrustedTokenIssuerConfigurationPtrInput

type TrustedTokenIssuerTrustedTokenIssuerConfigurationPtrInput interface {
	pulumi.Input

	ToTrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutput() TrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutput
	ToTrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutputWithContext(context.Context) TrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutput
}

TrustedTokenIssuerTrustedTokenIssuerConfigurationPtrInput is an input type that accepts TrustedTokenIssuerTrustedTokenIssuerConfigurationArgs, TrustedTokenIssuerTrustedTokenIssuerConfigurationPtr and TrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutput values. You can construct a concrete instance of `TrustedTokenIssuerTrustedTokenIssuerConfigurationPtrInput` via:

        TrustedTokenIssuerTrustedTokenIssuerConfigurationArgs{...}

or:

        nil

type TrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutput

type TrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutput struct{ *pulumi.OutputState }

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutput) Elem

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutput) ElementType

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutput) OidcJwtConfiguration

A block that describes the settings for a trusted token issuer that works with OpenID Connect (OIDC) by using JSON Web Tokens (JWT). See Documented below below.

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutput) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutput

func (TrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutput) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutputWithContext

func (o TrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutput) ToTrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutputWithContext(ctx context.Context) TrustedTokenIssuerTrustedTokenIssuerConfigurationPtrOutput

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL