permissions_boundary_for_permission_sets

Creates, updates, deletes, gets or lists a permissions_boundary_for_permission_sets resource.

Overview

Name	permissions_boundary_for_permission_sets
Type	Resource
Id	aws.sso_admin.permissions_boundary_for_permission_sets

Fields

The following fields are returned by SELECT queries:

get_permissions_boundary_for_permission_set

Name	Datatype	Description
customer_managed_policy_reference	object	Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each Amazon Web Services account where you want to deploy your permission set.
managed_policy_arn	string	The Amazon Web Services managed policy ARN that you want to attach to a permission set as a permissions boundary. (pattern: <code>arn:aws(-[a-z]{1,5}){0,3}:iam::aws:policy((/[A-Za-z0-9.,+@=-]+)*)/([A-Za-z0-9.,+=@-]+)</code>)

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get_permissions_boundary_for_permission_set	select	region		Obtains the permissions boundary for a specified PermissionSet.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)

SELECT examples

get_permissions_boundary_for_permission_set

Obtains the permissions boundary for a specified PermissionSet.

SELECT
customer_managed_policy_reference,
managed_policy_arn
FROM aws.sso_admin.permissions_boundary_for_permission_sets
WHERE region = '{{ region }}' -- required
;