Aws/sso
@swamp/aws/ssov2026.07.25.1
01README
AWS SSO infrastructure models
02Models
@swamp/aws/sso/applicationv2026.06.15.1application.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| Name | string | The name you want to assign to this Identity Center (SSO) Application |
| Description? | string | The description information for the Identity Center (SSO) Application |
| InstanceArn | string | The ARN of the instance of IAM Identity Center under which the operation will run |
| ApplicationProviderArn | string | The ARN of the application provider under which the operation will run |
| Status? | enum | Specifies whether the application is enabled or disabled |
| PortalOptions? | object | A structure that describes the options for the portal associated with an application |
| Tags? | array |
fn create()
Create a SSO Application
fn get(identifier: string)
Get a SSO Application
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SSO Application |
fn update()
Update a SSO Application
fn delete(identifier: string)
Delete a SSO Application
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SSO Application |
fn sync()
Sync SSO Application state from AWS
Resources
state(infinite)— SSO Application resource state
@swamp/aws/sso/application-assignmentv2026.06.15.1application_assignment.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| ApplicationArn | string | The ARN of the application. |
| PrincipalType | enum | The entity type for which the assignment will be created. |
| PrincipalId | string | An identifier for an object in IAM Identity Center, such as a user or group |
fn create()
Create a SSO ApplicationAssignment
fn get(identifier: string)
Get a SSO ApplicationAssignment
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SSO ApplicationAssignment |
fn delete(identifier: string)
Delete a SSO ApplicationAssignment
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SSO ApplicationAssignment |
fn sync()
Sync SSO ApplicationAssignment state from AWS
Resources
state(infinite)— SSO ApplicationAssignment resource state
@swamp/aws/sso/application-providerv2026.07.24.1application_provider.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| DisplayData? | object | A structure that describes how IAM Identity Center represents the application provider in the portal. |
| ResourceServerConfig? | object | A structure that describes the configuration of a resource server. |
fn get(identifier: string)
Get a SSO ApplicationProvider
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SSO ApplicationProvider |
fn sync()
Sync SSO ApplicationProvider state from AWS
Resources
state(infinite)— SSO ApplicationProvider resource state
@swamp/aws/sso/assignmentv2026.06.15.1assignment.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| InstanceArn | string | The sso instance that the permission set is owned. |
| TargetId | string | The account id to be provisioned. |
| TargetType | enum | The type of resource to be provisioned to, only aws account now |
| PermissionSetArn | string | The permission set that the assignment will be assigned |
| PrincipalType | enum | The assignee's type, user/group |
| PrincipalId | string | The assignee's identifier, user id/group id |
fn create()
Create a SSO Assignment
fn get(identifier: string)
Get a SSO Assignment
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SSO Assignment |
fn delete(identifier: string)
Delete a SSO Assignment
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SSO Assignment |
fn sync()
Sync SSO Assignment state from AWS
Resources
state(infinite)— SSO Assignment resource state
@swamp/aws/sso/instancev2026.06.15.1instance.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| Name? | string | The name you want to assign to this Identity Center (SSO) Instance |
| Tags? | array |
fn create()
Create a SSO Instance
fn get(identifier: string)
Get a SSO Instance
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SSO Instance |
fn update()
Update a SSO Instance
fn delete(identifier: string)
Delete a SSO Instance
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SSO Instance |
fn sync()
Sync SSO Instance state from AWS
Resources
state(infinite)— SSO Instance resource state
@swamp/aws/sso/instance-access-control-attribute-configurationv2026.06.15.1instance_access_control_attribute_configuration.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| InstanceArn | string | The ARN of the AWS SSO instance under which the operation will be executed. |
| InstanceAccessControlAttributeConfiguration? | object | The InstanceAccessControlAttributeConfiguration property has been deprecated but is still supported for backwards compatibility purposes. We recomend that you use AccessControlAttributes property instead. |
| AccessControlAttributes? | array |
fn create()
Create a SSO InstanceAccessControlAttributeConfiguration
fn get(identifier: string)
Get a SSO InstanceAccessControlAttributeConfiguration
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SSO InstanceAccessControlAttributeConfiguration |
fn update()
Update a SSO InstanceAccessControlAttributeConfiguration
fn delete(identifier: string)
Delete a SSO InstanceAccessControlAttributeConfiguration
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SSO InstanceAccessControlAttributeConfiguration |
fn sync()
Sync SSO InstanceAccessControlAttributeConfiguration state from AWS
Resources
state(infinite)— SSO InstanceAccessControlAttributeConfiguration resource state
@swamp/aws/sso/permission-setv2026.06.15.1permission_set.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| Name | string | The name you want to assign to this permission set. |
| Description? | string | The permission set description. |
| InstanceArn | string | The sso instance arn that the permission set is owned. |
| SessionDuration? | string | The length of time that a user can be signed in to an AWS account. |
| RelayStateType? | string | The relay state URL that redirect links to any service in the AWS Management Console. |
| ManagedPolicies? | array | |
| InlinePolicy? | record | The inline policy to put in permission set. |
| Tags? | array | |
| CustomerManagedPolicyReferences? | array | |
| PermissionsBoundary? | object |
fn create()
Create a SSO PermissionSet
fn get(identifier: string)
Get a SSO PermissionSet
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SSO PermissionSet |
fn update()
Update a SSO PermissionSet
fn delete(identifier: string)
Delete a SSO PermissionSet
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the SSO PermissionSet |
fn sync()
Sync SSO PermissionSet state from AWS
Resources
state(infinite)— SSO PermissionSet resource state
03Previous Versions
2026.07.24.1
- Added: application_provider
Added 1 models
2026.07.20.1
2026.07.18.3
2026.07.18.2
2026.06.15.1
- Updated: application, application_assignment, assignment, instance, instance_access_control_attribute_configuration, permission_set
2026.06.08.2
- Updated: application, application_assignment, assignment, instance, instance_access_control_attribute_configuration, permission_set
2026.06.06.1
- Updated: application, application_assignment, assignment, instance, instance_access_control_attribute_configuration, permission_set
2026.05.31.1
- Updated: application
2026.05.27.1
- Updated: permission_set
2026.05.19.1
2026.04.23.3
2026.04.23.2
- Updated: application, application_assignment, assignment, instance, instance_access_control_attribute_configuration, permission_set
2026.04.07.1
- Updated: assignment, instance_access_control_attribute_configuration, permission_set
2026.04.03.3
- Updated: application, application_assignment, assignment, instance, instance_access_control_attribute_configuration, permission_set
2026.04.03.1
- Updated: application, application_assignment
2026.03.19.1
- Updated: application, application_assignment, assignment, instance, instance_access_control_attribute_configuration, permission_set
2026.03.16.1
- Updated: application, application_assignment, assignment, instance, instance_access_control_attribute_configuration, permission_set
2026.03.10.5
04Stats
A
100 / 100
Downloads
12
Archive size
1.6 MB
Verified by Swamp
- Has README or module doc2/2earned
- README has a code example1/1earned
- README is substantive1/1earned
- Most symbols documented1/1earned
- No slow types (deprecated)1/1earned
- Dependencies pass trust audit2/2earned
- Has description1/1earned
- Platform support declared (or universal)2/2earned
- License declared1/1earned
- Verified public repository2/2earned
05Platforms
06Labels