account_assignment_creation_status

Creates, updates, deletes, gets or lists an account_assignment_creation_status resource.

Overview

Name	account_assignment_creation_status
Type	Resource
Id	aws.sso_admin.account_assignment_creation_status

Fields

The following fields are returned by SELECT queries:

describe_account_assignment_creation_status

Name	Datatype	Description
created_date	string (date-time)	The date that the permission set was created.
failure_reason	string	The message that contains an error or exception in case of an operation failure. (pattern: <code>[\p{L}\p{M}\p{Z}\p{S}\p{N}\p{P}]*</code>)
permission_set_arn	string	The ARN of the permission set. For more information about ARNs, see Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces in the Amazon Web Services General Reference. (pattern: <code>arn:aws(-[a-z]{1,5}){0,3}:sso:::permissionSet/(sso)?ins-[a-zA-Z0-9-.]{16}/ps-[a-zA-Z0-9-./]{16}</code>)
principal_id	string	An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the IAM Identity Center Identity Store API Reference. (pattern: <code>([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}</code>)
principal_type	string	The entity type for which the assignment will be created. (USER, GROUP)
request_id	string	The identifier for tracking the request operation that is generated by the universally unique identifier (UUID) workflow. (pattern: <code>\b[0-9a-f]{8}\b-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-\b[0-9a-f]{12}\b</code>)
status	string	The status of the permission set provisioning process. (IN_PROGRESS, FAILED, SUCCEEDED)
target_id	string	TargetID is an Amazon Web Services account identifier, (For example, 123456789012). (pattern: <code>\d{12}</code>)
target_type	string	The entity type for which the assignment will be created. (AWS_ACCOUNT)

list_account_assignment_creation_status

Name	Datatype	Description
created_date	string (date-time)	The date that the permission set was created.
request_id	string	The identifier for tracking the request operation that is generated by the universally unique identifier (UUID) workflow. (pattern: <code>\b[0-9a-f]{8}\b-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-\b[0-9a-f]{12}\b</code>)
status	string	The status of the permission set provisioning process. (IN_PROGRESS, FAILED, SUCCEEDED)

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
describe_account_assignment_creation_status	select	region		Describes the status of the assignment creation request.
list_account_assignment_creation_status	select	region		Lists the status of the Amazon Web Services account assignment creation requests for a specified IAM Identity Center instance.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)

SELECT examples

describe_account_assignment_creation_status

Describes the status of the assignment creation request.

SELECT
created_date,
failure_reason,
permission_set_arn,
principal_id,
principal_type,
request_id,
status,
target_id,
target_type
FROM aws.sso_admin.account_assignment_creation_status
WHERE region = '{{ region }}' -- required
;

list_account_assignment_creation_status

Lists the status of the Amazon Web Services account assignment creation requests for a specified IAM Identity Center instance.

SELECT
created_date,
request_id,
status
FROM aws.sso_admin.account_assignment_creation_status
WHERE region = '{{ region }}' -- required
;