AWS Fundamentals Logo
AWS Fundamentals
L1 ConstructAWS::SSO::Assignment

CfnAssignment

Assigns access to a Principal for a specified AWS account using a specified permission set. > The term *principal* here refers to a user or group that is defined in .

Import

import { CfnAssignment } from 'aws-cdk-lib/aws-sso';

Or use the module namespace:

import * as sso from 'aws-cdk-lib/aws-sso';
// sso.CfnAssignment

Properties

Configuration passed to the constructor as CfnAssignmentProps.

instanceArnRequired
string

The ARN of the instance under which the operation will be executed. For more information about ARNs, see [Amazon Resource Names (ARNs) and AWS Service Namespaces](https://docs.aws.amazon.com//general/latest/gr/aws-arns-and-namespaces.html) in the *AWS General Reference* .

permissionSetArnRequired
string

The ARN of the permission set.

principalIdRequired
string

An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the [IAM Identity Center Identity Store API Reference](https://docs.aws.amazon.com//singlesignon/latest/IdentityStoreAPIReference/welcome.html) .

principalTypeRequired
string

The entity type for which the assignment will be created.

targetIdRequired
string

TargetID is an AWS account identifier, (For example, 123456789012).

targetTypeRequired
string

The entity type for which the assignment will be created.

CloudFormation Resource

This L1 construct maps directly to the following CloudFormation resource type.

AWS::SSO::AssignmentView in CloudFormation Explorer

Learn AWS the Practical Way

Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.

Subscribe to Newsletter

Quick Facts

LevelL1 (CloudFormation)
Moduleaws-sso
CFN TypeAWS::SSO::Assignment
Properties6

Related Constructs

Explore This Service

External Links