Class IdentityCenterAssignmentConfig

IamConfig / IdentityCenterConfig / IdentityCenterAssignmentConfig

Identity Center Assignment Configuration

Remarks

You cannot deploy Identity Center assignments to the Management account with a delegated administrator enabled. For more information, see https://docs.aws.amazon.com/singlesignon/latest/userguide/delegated-admin.html

Example

identityCenterAssignments:
  - name: Assignment1
    permissionSetName: PermissionSet1
    principals:
      - type: USER
        name: accelerator
      - type: GROUP
        name: admin
    principalId: "a4e81468-1001-70f0-9c12-56a6aa967ca4"
    principalType: USER
    deploymentTargets:
      accounts:
        - LogArchive
  - name: Assignment2
    permissionSetName: PermissionSet2
    principals:
      - type: USER
        name: accelerator
      - type: GROUP
        name: admin
    principalId: "a4e81468-1001-70f0-9c12-56a6aa967ca4"
    principalType: GROUP
    deploymentTargets:
      organizationalUnits:
        - Security

Hierarchy

  • IdentityCenterAssignmentConfig

Implements

Constructors

constructor

Properties

deploymentTargets name permissionSetName principalId principalType principals

Constructors

constructor

Properties

Readonly deploymentTargets

deploymentTargets: DeploymentTargets = ...

Identity Center assignment deployment targets

Readonly name

name: string = ''

The Name for the Assignment.

Readonly permissionSetName

permissionSetName: string = ''

Permission Set name that will be used for the Assignment.

Readonly principalId

principalId: undefined | string = undefined

PrincipalId that will be used for the Assignment

Deprecated

This is a temporary property and it has been deprecated. Please use principals property to specify principal name for assignment.

Readonly principalType

principalType: undefined | "USER" | "GROUP" = undefined

PrincipalType that will be used for the Assignment

Deprecated

This is a temporary property and it has been deprecated. Please use principals property to specify principal type for assignment.

Readonly principals

principals: undefined | IdentityCenterAssignmentPrincipalConfig[] = undefined

Assignment principal configuration list.

Remarks

Assignment principal's type can be either USER or GROUP. Every principal in the list needs type and the name of principal.

Example

principal:
  - type: USER
    name: accelerator
  - type: GROUP
    name: admin

See

IamConfig / IdentityCenterConfig / IdentityCenterAssignmentPrincipalConfig

Settings

Member Visibility

Theme

Generated using TypeDoc