AWS::SSO::Instance

SSO Instance

Resource Type definition for Identity Center (SSO) Instance

Properties

2 configurable properties. Click a row to see details.

Filter:

Property	Type	Flags
`Name`	`string`
`Tags`	`Array<Tag>`

Return Values

Values returned after the resource is created. Access these with Fn::GetAtt.

Attribute	Type	Description
`IdentityStoreId`	`string`	The ID of the identity store associated with the created Identity Center (SSO) Instance
`InstanceArn`	`string`	The SSO Instance ARN that is returned upon creation of the Identity Center (SSO) Instance
`OwnerAccountId`	`string`	The AWS accountId of the owner of the Identity Center (SSO) Instance
`Status`	`string`	The status of the Identity Center (SSO) Instance, create_in_progress/delete_in_progress/active

Sample CloudFormation Template

A minimal template with required properties and common optional ones.

template.yaml

AWSTemplateFormatVersion: "2010-09-09"
Description: Sample template for AWS::SSO::Instance

Resources:
  MyResource:
    Type: AWS::SSO::Instance
    Properties:
      Tags:
        - Key: Environment
          Value: Production
      Name: !Ref "AWS::StackName"

Required IAM Permissions

Permissions CloudFormation needs in your IAM role to manage this resource.

create

sso:CreateInstancesso:DescribeInstancesso:TagResourceiam:CreateServiceLinkedRolesso:TagInstancesso:ListTagsForResourceidentitystore:CreateIdentityStore

read

sso:DescribeInstancesso:ListTagsForResource

update

sso:UpdateInstancesso:TagResourcesso:UntagResourcesso:ListTagsForResourcesso:TagInstancesso:DescribeInstance

delete

sso:DeleteInstanceidentitystore:DeleteIdentityStore

list

sso:ListInstances

Learn AWS the Practical Way

Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.

Subscribe to Newsletter

Quick Facts

ServiceSSO

Properties6

Required0

TaggingSupported

Primary IDInstanceArn

Supported Operations

CreateReadUpdateDeleteList

Related Resources

External Links

AWS Documentation