application_assignments_for_principals

Creates, updates, deletes, gets or lists an application_assignments_for_principals resource.

Overview

Name	application_assignments_for_principals
Type	Resource
Id	aws.sso_admin.application_assignments_for_principals

Fields

The following fields are returned by SELECT queries:

list_application_assignments_for_principal

Name	Datatype	Description
application_arn	string	The ARN of the application to which the specified principal is assigned. (pattern: <code>arn:aws(-[a-z]{1,5}){0,3}:sso::\d{12}:application/(sso)?ins-[a-zA-Z0-9-.]{16}/apl-[a-zA-Z0-9]{16}</code>)
principal_id	string	The unique identifier of the principal assigned to the application. (pattern: <code>([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}</code>)
principal_type	string	The type of the principal assigned to the application. (USER, GROUP)

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
list_application_assignments_for_principal	select	region		Lists the applications to which a specified principal is assigned. You must provide a filter when calling this action from a member account against your organization instance of IAM Identity Center. A filter is not required when called from the management account against an organization instance of IAM Identity Center, or from a member account against an account instance of IAM Identity Center in the same account.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)

SELECT examples

list_application_assignments_for_principal

Lists the applications to which a specified principal is assigned. You must provide a filter when calling this action from a member account against your organization instance of IAM Identity Center. A filter is not required when called from the management account against an organization instance of IAM Identity Center, or from a member account against an account instance of IAM Identity Center in the same account.

SELECT
application_arn,
principal_id,
principal_type
FROM aws.sso_admin.application_assignments_for_principals
WHERE region = '{{ region }}' -- required
;