Module aws_sdk_ssoadmin::model

Data structures used by operation inputs/outputs. Documentation on these types is copied from the model.

Modules

access_control_attribute

See AccessControlAttribute.

access_control_attribute_value

See AccessControlAttributeValue.

account_assignment

See AccountAssignment.

account_assignment_operation_status

See AccountAssignmentOperationStatus.

account_assignment_operation_status_metadata

See AccountAssignmentOperationStatusMetadata.

attached_managed_policy

See AttachedManagedPolicy.

customer_managed_policy_reference

See CustomerManagedPolicyReference.

instance_access_control_attribute_configuration

See InstanceAccessControlAttributeConfiguration.

instance_metadata

See InstanceMetadata.

operation_status_filter

See OperationStatusFilter.

permission_set

See PermissionSet.

permission_set_provisioning_status

See PermissionSetProvisioningStatus.

permission_set_provisioning_status_metadata

See PermissionSetProvisioningStatusMetadata.

permissions_boundary

See PermissionsBoundary.

tag

See Tag.

Structs

AccessControlAttribute

These are IAM Identity Center identity store attributes that you can configure for use in attributes-based access control (ABAC). You can create permissions policies that determine who can access your AWS resources based upon the configured attribute values. When you enable ABAC and specify AccessControlAttributes, IAM Identity Center passes the attribute values of the authenticated user into IAM for use in policy evaluation.

AccessControlAttributeValue

The value used for mapping a specified attribute to an identity source. For more information, see Attribute mappings in the IAM Identity Center User Guide.

AccountAssignment

The assignment that indicates a principal's limited access to a specified AWS account with a specified permission set.

AccountAssignmentOperationStatus

The status of the creation or deletion operation of an assignment that a principal needs to access an account.

AccountAssignmentOperationStatusMetadata

Provides information about the AccountAssignment creation request.

AttachedManagedPolicy

A structure that stores the details of the AWS managed policy.

CustomerManagedPolicyReference

Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each AWS account where you want to deploy your permission set.

InstanceAccessControlAttributeConfiguration

Specifies the attributes to add to your attribute-based access control (ABAC) configuration.

InstanceMetadata

Provides information about the IAM Identity Center instance.

OperationStatusFilter

Filters he operation status list based on the passed attribute value.

PermissionSet

An entity that contains IAM policies.

PermissionSetProvisioningStatus

A structure that is used to provide the status of the provisioning operation for a specified permission set.

PermissionSetProvisioningStatusMetadata

Provides information about the permission set provisioning status.

PermissionsBoundary

Specifies the configuration of the AWS managed or customer managed policy that you want to set as a permissions boundary. Specify either CustomerManagedPolicyReference to use the name and path of a customer managed policy, or ManagedPolicyArn to use the ARN of an AWS managed policy. A permissions boundary represents the maximum permissions that any policy can grant your role. For more information, see Permissions boundaries for IAM entities in the IAM User Guide.

Tag

A set of key-value pairs that are used to manage the resource. Tags can only be applied to permission sets and cannot be applied to corresponding roles that IAM Identity Center creates in AWS accounts.

Enums

InstanceAccessControlAttributeConfigurationStatus

When writing a match expression against InstanceAccessControlAttributeConfigurationStatus, it is important to ensure your code is forward-compatible. That is, if a match arm handles a case for a feature that is supported by the service but has not been represented as an enum variant in a current version of SDK, your code should continue to work when you upgrade SDK to a future version in which the enum does include a variant for that feature.

PrincipalType

When writing a match expression against PrincipalType, it is important to ensure your code is forward-compatible. That is, if a match arm handles a case for a feature that is supported by the service but has not been represented as an enum variant in a current version of SDK, your code should continue to work when you upgrade SDK to a future version in which the enum does include a variant for that feature.

ProvisionTargetType

When writing a match expression against ProvisionTargetType, it is important to ensure your code is forward-compatible. That is, if a match arm handles a case for a feature that is supported by the service but has not been represented as an enum variant in a current version of SDK, your code should continue to work when you upgrade SDK to a future version in which the enum does include a variant for that feature.

ProvisioningStatus

When writing a match expression against ProvisioningStatus, it is important to ensure your code is forward-compatible. That is, if a match arm handles a case for a feature that is supported by the service but has not been represented as an enum variant in a current version of SDK, your code should continue to work when you upgrade SDK to a future version in which the enum does include a variant for that feature.

StatusValues

When writing a match expression against StatusValues, it is important to ensure your code is forward-compatible. That is, if a match arm handles a case for a feature that is supported by the service but has not been represented as an enum variant in a current version of SDK, your code should continue to work when you upgrade SDK to a future version in which the enum does include a variant for that feature.

TargetType

When writing a match expression against TargetType, it is important to ensure your code is forward-compatible. That is, if a match arm handles a case for a feature that is supported by the service but has not been represented as an enum variant in a current version of SDK, your code should continue to work when you upgrade SDK to a future version in which the enum does include a variant for that feature.