AWS Fundamentals Logo
AWS Fundamentals
L1 ConstructAWS::SSO::InstanceAccessControlAttributeConfiguration

CfnInstanceAccessControlAttributeConfiguration

Enables the attribute-based access control (ABAC) feature for the specified instance. You can also specify new attributes to add to your ABAC configuration during the enabling process. For more information about ABAC, see [Attribute-Based Access Control](https://docs.aws.amazon.com//singlesignon/latest/userguide/abac.html) in the *User Guide* . > The `InstanceAccessControlAttributeConfiguration` property has been deprecated but is still supported for backwards compatibility purposes. We recommend that you use the `AccessControlAttributes` property instead.

Import

import { CfnInstanceAccessControlAttributeConfiguration } from 'aws-cdk-lib/aws-sso';

Or use the module namespace:

import * as sso from 'aws-cdk-lib/aws-sso';
// sso.CfnInstanceAccessControlAttributeConfiguration

Properties

Configuration passed to the constructor as CfnInstanceAccessControlAttributeConfigurationProps.

instanceArnRequired
string

The ARN of the instance under which the operation will be executed.

accessControlAttributesOptional
IResolvable | IResolvable | AccessControlAttributeProperty[]

Lists the attributes that are configured for ABAC in the specified instance.

instanceAccessControlAttributeConfigurationOptionalDeprecated
IResolvable | InstanceAccessControlAttributeConfigurationProperty

The InstanceAccessControlAttributeConfiguration property has been deprecated but is still supported for backwards compatibility purposes. We recomend that you use AccessControlAttributes property instead.

Deprecated: this property has been deprecated

CloudFormation Resource

This L1 construct maps directly to the following CloudFormation resource type.

AWS::SSO::InstanceAccessControlAttributeConfigurationView in CloudFormation Explorer

Learn AWS the Practical Way

Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.

Subscribe to Newsletter

Quick Facts

LevelL1 (CloudFormation)
Moduleaws-sso
CFN TypeAWS::SSO::InstanceAccessControlAttributeConfiguration
Properties3

Related Constructs

Explore This Service

External Links