AWS::AccountAccess::Application

AccountAccess Application

Resource Type definition for AWS::AccountAccess::Application specifying an application for account access

Properties

2 configurable properties. 1 required. Click a row to see details.

Filter:

Property	Type	Flags
`IdentitySource`	`IdentitySource`	RequiredCreate-only
`Tags`	`Array<Tag>`

Return Values

Values returned after the resource is created. Access these with Fn::GetAtt.

Attribute	Type	Description
`ApplicationArn`	`string`	The ARN of the application
`CreatedAt`	`string`	The timestamp when the application was created
`Status`	`string`	The status of the application
`TenantId`	`string`	The tenant ID of the application
`UpdatedAt`	`string`	The timestamp when the application was last updated

Sample CloudFormation Template

A minimal template with required properties and common optional ones.

template.yaml

AWSTemplateFormatVersion: "2010-09-09"
Description: Sample template for AWS::AccountAccess::Application

Resources:
  MyResource:
    Type: AWS::AccountAccess::Application
    Properties:
      IdentitySource: "my-identitysource"
      Tags:
        - Key: Environment
          Value: Production

Required IAM Permissions

Permissions CloudFormation needs in your IAM role to manage this resource.

create

account-access:CreateApplicationaccount-access:GetApplicationaccount-access:TagResourceaccount-access:ListTagsForResourceiam:CreateServiceLinkedRolekms:Decryptorganizations:DescribeOrganizationorganizations:ListAWSServiceAccessForOrganizationsso:CreateApplicationsso:DescribeApplicationsso:DescribeInstancesso:DescribeRegionsso:PutApplicationAccessScopesso:PutApplicationAssignmentConfigurationsso:PutApplicationAuthenticationMethodsso:PutApplicationGrant

read

account-access:GetApplicationaccount-access:ListTagsForResource

update

account-access:GetApplicationaccount-access:TagResourceaccount-access:UntagResourceaccount-access:ListTagsForResource

delete

account-access:DeleteApplicationaccount-access:GetApplicationaccount-access:ListTagsForResourcekms:Decryptsso:DeleteApplicationsso:DescribeApplicationsso:DescribeInstance