Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. AWS Cloud Control
  3. API Docs
  4. sso
  5. InstanceAccessControlAttributeConfiguration

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.26.0 published on Wednesday, Mar 12, 2025 by Pulumi
pulumi/pulumi-aws-native

aws-native.sso.InstanceAccessControlAttributeConfiguration

Explore with Pulumi AI

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.26.0 published on Wednesday, Mar 12, 2025 by Pulumi
pulumi/pulumi-aws-native

Resource Type definition for SSO InstanceAccessControlAttributeConfiguration

Example Usage

Example

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AwsNative = Pulumi.AwsNative;

return await Deployment.RunAsync(() => 
{
    var abac = new AwsNative.Sso.InstanceAccessControlAttributeConfiguration("abac", new()
    {
        InstanceArn = "arn:aws:sso:::instance/ssoins-instanceId",
        AccessControlAttributes = new[]
        {
            new AwsNative.Sso.Inputs.InstanceAccessControlAttributeConfigurationAccessControlAttributeArgs
            {
                Key = "CostCenter",
                Value = new AwsNative.Sso.Inputs.InstanceAccessControlAttributeConfigurationAccessControlAttributeValueArgs
                {
                    Source = new[]
                    {
                        "${path:enterprise.costCenter}",
                    },
                },
            },
        },
    });

});
Copy
package main

import (
	"github.com/pulumi/pulumi-aws-native/sdk/go/aws/sso"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := sso.NewInstanceAccessControlAttributeConfiguration(ctx, "abac", &sso.InstanceAccessControlAttributeConfigurationArgs{
			InstanceArn: pulumi.String("arn:aws:sso:::instance/ssoins-instanceId"),
			AccessControlAttributes: sso.InstanceAccessControlAttributeConfigurationAccessControlAttributeArray{
				&sso.InstanceAccessControlAttributeConfigurationAccessControlAttributeArgs{
					Key: pulumi.String("CostCenter"),
					Value: &sso.InstanceAccessControlAttributeConfigurationAccessControlAttributeValueArgs{
						Source: pulumi.StringArray{
							pulumi.String("${path:enterprise.costCenter}"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy

Coming soon!

import * as pulumi from "@pulumi/pulumi";
import * as aws_native from "@pulumi/aws-native";

const abac = new aws_native.sso.InstanceAccessControlAttributeConfiguration("abac", {
    instanceArn: "arn:aws:sso:::instance/ssoins-instanceId",
    accessControlAttributes: [{
        key: "CostCenter",
        value: {
            source: ["${path:enterprise.costCenter}"],
        },
    }],
});
Copy
import pulumi
import pulumi_aws_native as aws_native

abac = aws_native.sso.InstanceAccessControlAttributeConfiguration("abac",
    instance_arn="arn:aws:sso:::instance/ssoins-instanceId",
    access_control_attributes=[{
        "key": "CostCenter",
        "value": {
            "source": ["${path:enterprise.costCenter}"],
        },
    }])
Copy

Coming soon!

Example

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AwsNative = Pulumi.AwsNative;

return await Deployment.RunAsync(() => 
{
    var abac = new AwsNative.Sso.InstanceAccessControlAttributeConfiguration("abac", new()
    {
        InstanceArn = "arn:aws:sso:::instance/ssoins-instanceId",
        AccessControlAttributes = new[]
        {
            new AwsNative.Sso.Inputs.InstanceAccessControlAttributeConfigurationAccessControlAttributeArgs
            {
                Key = "CostCenter",
                Value = new AwsNative.Sso.Inputs.InstanceAccessControlAttributeConfigurationAccessControlAttributeValueArgs
                {
                    Source = new[]
                    {
                        "${path:enterprise.costCenter}",
                    },
                },
            },
        },
    });

});
Copy
package main

import (
	"github.com/pulumi/pulumi-aws-native/sdk/go/aws/sso"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := sso.NewInstanceAccessControlAttributeConfiguration(ctx, "abac", &sso.InstanceAccessControlAttributeConfigurationArgs{
			InstanceArn: pulumi.String("arn:aws:sso:::instance/ssoins-instanceId"),
			AccessControlAttributes: sso.InstanceAccessControlAttributeConfigurationAccessControlAttributeArray{
				&sso.InstanceAccessControlAttributeConfigurationAccessControlAttributeArgs{
					Key: pulumi.String("CostCenter"),
					Value: &sso.InstanceAccessControlAttributeConfigurationAccessControlAttributeValueArgs{
						Source: pulumi.StringArray{
							pulumi.String("${path:enterprise.costCenter}"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy

Coming soon!

import * as pulumi from "@pulumi/pulumi";
import * as aws_native from "@pulumi/aws-native";

const abac = new aws_native.sso.InstanceAccessControlAttributeConfiguration("abac", {
    instanceArn: "arn:aws:sso:::instance/ssoins-instanceId",
    accessControlAttributes: [{
        key: "CostCenter",
        value: {
            source: ["${path:enterprise.costCenter}"],
        },
    }],
});
Copy
import pulumi
import pulumi_aws_native as aws_native

abac = aws_native.sso.InstanceAccessControlAttributeConfiguration("abac",
    instance_arn="arn:aws:sso:::instance/ssoins-instanceId",
    access_control_attributes=[{
        "key": "CostCenter",
        "value": {
            "source": ["${path:enterprise.costCenter}"],
        },
    }])
Copy

Coming soon!

Create InstanceAccessControlAttributeConfiguration Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new InstanceAccessControlAttributeConfiguration(name: string, args: InstanceAccessControlAttributeConfigurationArgs, opts?: CustomResourceOptions);
@overload
def InstanceAccessControlAttributeConfiguration(resource_name: str,
                                                args: InstanceAccessControlAttributeConfigurationArgs,
                                                opts: Optional[ResourceOptions] = None)

@overload
def InstanceAccessControlAttributeConfiguration(resource_name: str,
                                                opts: Optional[ResourceOptions] = None,
                                                instance_arn: Optional[str] = None,
                                                access_control_attributes: Optional[Sequence[InstanceAccessControlAttributeConfigurationAccessControlAttributeArgs]] = None,
                                                instance_access_control_attribute_configuration: Optional[InstanceAccessControlAttributeConfigurationPropertiesArgs] = None)
func NewInstanceAccessControlAttributeConfiguration(ctx *Context, name string, args InstanceAccessControlAttributeConfigurationArgs, opts ...ResourceOption) (*InstanceAccessControlAttributeConfiguration, error)
public InstanceAccessControlAttributeConfiguration(string name, InstanceAccessControlAttributeConfigurationArgs args, CustomResourceOptions? opts = null)
public InstanceAccessControlAttributeConfiguration(String name, InstanceAccessControlAttributeConfigurationArgs args)
public InstanceAccessControlAttributeConfiguration(String name, InstanceAccessControlAttributeConfigurationArgs args, CustomResourceOptions options)

type: aws-native:sso:InstanceAccessControlAttributeConfiguration
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. InstanceAccessControlAttributeConfigurationArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. InstanceAccessControlAttributeConfigurationArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. InstanceAccessControlAttributeConfigurationArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. InstanceAccessControlAttributeConfigurationArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. InstanceAccessControlAttributeConfigurationArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

InstanceAccessControlAttributeConfiguration Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The InstanceAccessControlAttributeConfiguration resource accepts the following input properties:

InstanceArn This property is required. string
The ARN of the AWS SSO instance under which the operation will be executed.
AccessControlAttributes List<Pulumi.AwsNative.Sso.Inputs.InstanceAccessControlAttributeConfigurationAccessControlAttribute>
Lists the attributes that are configured for ABAC in the specified IAM Identity Center instance.
InstanceAccessControlAttributeConfigurationValue Pulumi.AwsNative.Sso.Inputs.InstanceAccessControlAttributeConfigurationProperties
The InstanceAccessControlAttributeConfiguration property has been deprecated but is still supported for backwards compatibility purposes. We recomend that you use AccessControlAttributes property instead.
InstanceArn This property is required. string
The ARN of the AWS SSO instance under which the operation will be executed.
AccessControlAttributes []InstanceAccessControlAttributeConfigurationAccessControlAttributeArgs
Lists the attributes that are configured for ABAC in the specified IAM Identity Center instance.
InstanceAccessControlAttributeConfiguration InstanceAccessControlAttributeConfigurationPropertiesArgs
The InstanceAccessControlAttributeConfiguration property has been deprecated but is still supported for backwards compatibility purposes. We recomend that you use AccessControlAttributes property instead.
instanceArn This property is required. String
The ARN of the AWS SSO instance under which the operation will be executed.
accessControlAttributes List<InstanceAccessControlAttributeConfigurationAccessControlAttribute>
Lists the attributes that are configured for ABAC in the specified IAM Identity Center instance.
instanceAccessControlAttributeConfiguration InstanceAccessControlAttributeConfigurationProperties
The InstanceAccessControlAttributeConfiguration property has been deprecated but is still supported for backwards compatibility purposes. We recomend that you use AccessControlAttributes property instead.
instanceArn This property is required. string
The ARN of the AWS SSO instance under which the operation will be executed.
accessControlAttributes InstanceAccessControlAttributeConfigurationAccessControlAttribute[]
Lists the attributes that are configured for ABAC in the specified IAM Identity Center instance.
instanceAccessControlAttributeConfiguration InstanceAccessControlAttributeConfigurationProperties
The InstanceAccessControlAttributeConfiguration property has been deprecated but is still supported for backwards compatibility purposes. We recomend that you use AccessControlAttributes property instead.
instance_arn This property is required. str
The ARN of the AWS SSO instance under which the operation will be executed.
access_control_attributes Sequence[InstanceAccessControlAttributeConfigurationAccessControlAttributeArgs]
Lists the attributes that are configured for ABAC in the specified IAM Identity Center instance.
instance_access_control_attribute_configuration InstanceAccessControlAttributeConfigurationPropertiesArgs
The InstanceAccessControlAttributeConfiguration property has been deprecated but is still supported for backwards compatibility purposes. We recomend that you use AccessControlAttributes property instead.
instanceArn This property is required. String
The ARN of the AWS SSO instance under which the operation will be executed.
accessControlAttributes List<Property Map>
Lists the attributes that are configured for ABAC in the specified IAM Identity Center instance.
instanceAccessControlAttributeConfiguration Property Map
The InstanceAccessControlAttributeConfiguration property has been deprecated but is still supported for backwards compatibility purposes. We recomend that you use AccessControlAttributes property instead.

Outputs

All input properties are implicitly available as output properties. Additionally, the InstanceAccessControlAttributeConfiguration resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Supporting Types

InstanceAccessControlAttributeConfigurationAccessControlAttribute
, InstanceAccessControlAttributeConfigurationAccessControlAttributeArgs

Key This property is required. string
Value This property is required. InstanceAccessControlAttributeConfigurationAccessControlAttributeValue
key This property is required. String
value This property is required. InstanceAccessControlAttributeConfigurationAccessControlAttributeValue
key This property is required. string
value This property is required. InstanceAccessControlAttributeConfigurationAccessControlAttributeValue
key This property is required. str
value This property is required. InstanceAccessControlAttributeConfigurationAccessControlAttributeValue
key This property is required. String
value This property is required. Property Map

InstanceAccessControlAttributeConfigurationAccessControlAttributeValue
, InstanceAccessControlAttributeConfigurationAccessControlAttributeValueArgs

Source This property is required. List<string>
Source This property is required. []string
source This property is required. List<String>
source This property is required. string[]
source This property is required. Sequence[str]
source This property is required. List<String>

InstanceAccessControlAttributeConfigurationProperties
, InstanceAccessControlAttributeConfigurationPropertiesArgs

accessControlAttributes This property is required. List<Property Map>

Package Details

Repository
AWS Native pulumi/pulumi-aws-native
License
Apache-2.0

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.26.0 published on Wednesday, Mar 12, 2025 by Pulumi
pulumi/pulumi-aws-native