account_assignments_for_principals

Creates, updates, deletes, gets or lists an account_assignments_for_principals resource.

Overview

Name	account_assignments_for_principals
Type	Resource
Id	aws.sso_admin.account_assignments_for_principals

Fields

The following fields are returned by SELECT queries:

list_account_assignments_for_principal

Name	Datatype	Description
account_id	string	The account ID number of the Amazon Web Services account. (pattern: <code>\d{12}</code>)
permission_set_arn	string	The ARN of the IAM Identity Center permission set assigned to this principal for this Amazon Web Services account. (pattern: <code>arn:aws(-[a-z]{1,5}){0,3}:sso:::permissionSet/(sso)?ins-[a-zA-Z0-9-.]{16}/ps-[a-zA-Z0-9-./]{16}</code>)
principal_id	string	The ID of the principal. (pattern: <code>([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}</code>)
principal_type	string	The type of the principal. (USER, GROUP)

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
list_account_assignments_for_principal	select	region		Retrieves a list of the IAM Identity Center associated Amazon Web Services accounts that the principal has access to. This action must be called from the management account containing your organization instance of IAM Identity Center. This action is not valid for account instances of IAM Identity Center.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)

SELECT examples

list_account_assignments_for_principal

Retrieves a list of the IAM Identity Center associated Amazon Web Services accounts that the principal has access to. This action must be called from the management account containing your organization instance of IAM Identity Center. This action is not valid for account instances of IAM Identity Center.

SELECT
account_id,
permission_set_arn,
principal_id,
principal_type
FROM aws.sso_admin.account_assignments_for_principals
WHERE region = '{{ region }}' -- required
;