A configuration template to assign access to a specified principal (SSO Group or User) to an AWS account using an SSO Permission Set

The template requires the following properties: 
  • SSO Instance Arn: Can be found in the AWS console under SSO > Settings or from the CLI command aws sso-admin list-instances
  • Permission Set Arn which specifies the level of access provisioned
  • Principal Type and Principal Id specify the SSO user or group to be given access (The User Id or Group Id have to be provided)
  • Account Id: AWS account Id to provide access to
Items
1
Size
0.3 KB
Missing Parameters
AWSTemplateFormatVersion: '2010-09-09'
Description: ''
Resources:
  SsoAssignment:
    Type: 'AWS::SSO::Assignment'
    Properties:
      InstanceArn: ''
      PermissionSetArn: ''
      PrincipalId: ''
      PrincipalType: GROUP
      TargetId: ''
      TargetType: AWS_ACCOUNT
Parameters: {}
Metadata: {}
Conditions: {}

Actions



Customize Template

* Required field