Guided Walkthroughs

Configuration Packages

By Implementation

Service Control PoliciesConfig RulesAuto Remediation RulesConformance PacksAmazon GuardDutyAmazon InspectorAWS Security HubAWS Network FirewallRoute53 Resolver SecurityAmazon MacieS3 Bucket PoliciesCloudWatch Alarms and Event RulesAWS WAFAWS Secrets ManagerAWS Systems ManagerSecurity Groups & NACLsAWS KMSAWS SSOIAM PoliciesVPC Endpoint PoliciesCloudFormation Guard RulesLoad BalancersRDS Event SubscriptionsAWS Resource Access Manager (RAM)

By Service Protected

Reference Guides



A collection of AWS resources and configuration templates for AWS SSO including SSO Permission Sets and SSO Assignment resources. Configuration templates are available in AWS CloudFormation, AWS CLI and Terraform


An SSO permission set is a template that defines a collection of one or more IAM policies. A permission set is applied to allow SSO principals (users or groups) access to one or more AWS accounts.

CloudFormationTerraformAWS CLI

A configuration template to assign access to a specified principal (SSO Group or User) to an AWS account using an SSO Permission Set

CloudFormationTerraformAWS CLI