Terraform resource: aws ssoadmin managed policy attachment

aws_ssoadmin_managed_policy_attachment doc

Official example

data "aws_ssoadmin_instances" "example" {}

resource "aws_ssoadmin_permission_set" "example" {
  name         = "Example"
  instance_arn = tolist(data.aws_ssoadmin_instances.example.arns)[0]
}

resource "aws_ssoadmin_managed_policy_attachment" "example" {
  instance_arn       = tolist(data.aws_ssoadmin_instances.example.arns)[0]
  managed_policy_arn = "arn:aws:iam::aws:policy/AlexaForBusinessDeviceSetup"
  permission_set_arn = aws_ssoadmin_permission_set.example.arn
}

Related

• Terraform resource: aws_ssoadmin_permission_set
• identity_store_id
• aws identitystore
• relay_state

See also

• Terraform SSO, aws_ssoadmin_permission_set, aws_ssoadmin_managed_policy_attachment, aws_ssoadmin_permission_set_inline_policy, aws_ssoadmin_account_assignment, aws ssoadmin instance access control attributes
• AWS SSO, aws sso, AWS access portal, aws_ssoadmin_permission_set, arn:aws:sso
• AWS policies: managed policies, Inline, Job functions, reference, AWS trust policy, AWS Service Control Policy (SCP), Resource-based policies, Identity-based policies, permissions boundaries, "Resource":, Job function, AWS Policy Generator, s3:, lambda:, cloudwatch:, AWSSecretsManagerReadWriteAccess, actions =, resources =
• aws identitystore [ create-user | create-group | list-groups | list-users ], Permission sets