Terraform resource: aws ssoadmin permission set

aws_ssoadmin_permission_set doc

• session_duration = "PT1H" # 1-hour session (default) ISO-8601 standard

Official example

data "aws_ssoadmin_instances" "example" {}

resource "aws_ssoadmin_permission_set" "example" {
  name             = "Example"
  description      = "An example"
  instance_arn     = tolist(data.aws_ssoadmin_instances.example.arns)[0]
  relay_state      = "https://s3.console.aws.amazon.com/s3/home?region=us-east-1#"
  session_duration = "PT2H"
}

Related

• aws_ssoadmin_managed_policy_attachment
• aws identitystore
• AWS permission sets

See also

• Terraform SSO, aws_ssoadmin_permission_set, aws_ssoadmin_managed_policy_attachment, aws_ssoadmin_permission_set_inline_policy, aws_ssoadmin_account_assignment, aws ssoadmin instance access control attributes
• AWS IAM Identity Center, AWS SSO, aws sso, AWS access portal, aws_ssoadmin_permission_set, arn:aws:sso
• AWS IAM Identity Center: aws identitystore [ create-user | create-group | list-groups | list-users ], Permission sets