application_access_scopes

Creates, updates, deletes, gets or lists an application_access_scopes resource.

Overview

Name	application_access_scopes
Type	Resource
Id	aws.sso_admin.application_access_scopes

Fields

The following fields are returned by SELECT queries:

get_application_access_scope

Name	Datatype	Description
authorized_targets	array	An array of authorized targets associated with this access scope.
scope	string	The name of the access scope that can be used with the authorized targets. (pattern: <code>([A-Za-z0-9_]{1,50})(:[A-Za-z0-9_]{1,50}){0,1}(:[A-Za-z0-9_]{1,50}){0,1}</code>)

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get_application_access_scope	select	region		Retrieves the authorized targets for an IAM Identity Center access scope for an application.
put_application_access_scope	replace	region, ApplicationArn		Adds or updates the list of authorized targets for an IAM Identity Center access scope for an application.
delete_application_access_scope	delete	region		Deletes an IAM Identity Center access scope from an application.
list_application_access_scopes	exec	region, ApplicationArn		Lists the access scopes and authorized targets associated with an application.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)

SELECT examples

get_application_access_scope

Retrieves the authorized targets for an IAM Identity Center access scope for an application.

SELECT
authorized_targets,
scope
FROM aws.sso_admin.application_access_scopes
WHERE region = '{{ region }}' -- required
;

REPLACE examples

put_application_access_scope

Adds or updates the list of authorized targets for an IAM Identity Center access scope for an application.

REPLACE aws.sso_admin.application_access_scopes
SET 
Scope = '{{ Scope }}',
AuthorizedTargets = '{{ AuthorizedTargets }}',
ApplicationArn = '{{ ApplicationArn }}'
WHERE 
region = '{{ region }}' --required
AND ApplicationArn = '{{ ApplicationArn }}' --required;

DELETE examples

delete_application_access_scope

Deletes an IAM Identity Center access scope from an application.

DELETE FROM aws.sso_admin.application_access_scopes
WHERE region = '{{ region }}' --required
;

Lifecycle Methods

list_application_access_scopes

Lists the access scopes and authorized targets associated with an application.

EXEC aws.sso_admin.application_access_scopes.list_application_access_scopes 
@region='{{ region }}' --required 
@@json=
'{
"ApplicationArn": "{{ ApplicationArn }}", 
"MaxResults": {{ MaxResults }}, 
"NextToken": "{{ NextToken }}"
}'
;