Terraform resource: aws ssoadmin managed policy attachment

• https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ssoadmin_managed_policy_attachment

aws_ssoadmin_managed_policy_attachment

Official example

data "aws_ssoadmin_instances" "example" {}

resource "aws_ssoadmin_permission_set" "example" {
  name         = "Example"
  instance_arn = tolist(data.aws_ssoadmin_instances.example.arns)[0]
}

resource "aws_ssoadmin_managed_policy_attachment" "example" {
  instance_arn       = tolist(data.aws_ssoadmin_instances.example.arns)[0]
  managed_policy_arn = "arn:aws:iam::aws:policy/AlexaForBusinessDeviceSetup"
  permission_set_arn = aws_ssoadmin_permission_set.example.arn
}

Related

• aws_ssoadmin_permission_set
• identity_store_id
• aws identitystore

See also

• AWS policies: managed policies, Job functions, AWS trust policy, AWS Service Control Policy (SCP), Resource-based policies, Identity-based policies, "Resource":, Job function, AWS Policy Generator, s3:, lambda:, cloudwatch:, AWSSecretsManagerReadWriteAccess
• AWS IAM Identity Center, AWS SSO, aws sso, AWS access portal, aws_ssoadmin_permission_set, arn:aws:sso
• AWS IAM Identity Center: aws identitystore [ create-user | create-group | list-groups | list-users ], Permission sets