Skip to main content

@swamp/aws/sso

v2026.04.23.3

AWS SSO infrastructure models

Repository

https://github.com/systeminit/swamp-extensions

Labels

awsssocloudinfrastructure

Contents

Quality score

Verified by Swamp

How well-documented and verifiable this extension is.

100%

Grade A

  • Has README or module doc2/2earned
  • README has a code example1/1earned
  • README is substantive1/1earned
  • Most symbols documented1/1earned
  • No slow types1/1earned
  • Has description1/1earned
  • At least one platform tag (or universal)1/1earned
  • Two or more platform tags (or universal)1/1earned
  • License declared1/1earned
  • Verified public repository2/2earned

Install

$ swamp extension pull @swamp/aws/sso

@swamp/aws/sso/applicationv2026.04.23.2application.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
NamestringThe name you want to assign to this Identity Center (SSO) Application
Description?stringThe description information for the Identity Center (SSO) Application
InstanceArnstringThe ARN of the instance of IAM Identity Center under which the operation will run
ApplicationProviderArnstringThe ARN of the application provider under which the operation will run
Status?enumSpecifies whether the application is enabled or disabled
PortalOptions?objectA structure that describes the options for the portal associated with an application
Tags?array
createCreate a SSO Application
getGet a SSO Application
ArgumentTypeDescription
identifierstringThe primary identifier of the SSO Application
updateUpdate a SSO Application
deleteDelete a SSO Application
ArgumentTypeDescription
identifierstringThe primary identifier of the SSO Application
syncSync SSO Application state from AWS

Resources

state(infinite)— SSO Application resource state
@swamp/aws/sso/application-assignmentv2026.04.23.2application_assignment.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
ApplicationArnstringThe ARN of the application.
PrincipalTypeenumThe entity type for which the assignment will be created.
PrincipalIdstringAn identifier for an object in IAM Identity Center, such as a user or group
createCreate a SSO ApplicationAssignment
getGet a SSO ApplicationAssignment
ArgumentTypeDescription
identifierstringThe primary identifier of the SSO ApplicationAssignment
deleteDelete a SSO ApplicationAssignment
ArgumentTypeDescription
identifierstringThe primary identifier of the SSO ApplicationAssignment
syncSync SSO ApplicationAssignment state from AWS

Resources

state(infinite)— SSO ApplicationAssignment resource state
@swamp/aws/sso/assignmentv2026.04.23.2assignment.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
InstanceArnstringThe sso instance that the permission set is owned.
TargetIdstringThe account id to be provisioned.
TargetTypeenumThe type of resource to be provisioned to, only aws account now
PermissionSetArnstringThe permission set that the assignment will be assigned
PrincipalTypeenumThe assignee's type, user/group
PrincipalIdstringThe assignee's identifier, user id/group id
createCreate a SSO Assignment
getGet a SSO Assignment
ArgumentTypeDescription
identifierstringThe primary identifier of the SSO Assignment
deleteDelete a SSO Assignment
ArgumentTypeDescription
identifierstringThe primary identifier of the SSO Assignment
syncSync SSO Assignment state from AWS

Resources

state(infinite)— SSO Assignment resource state
@swamp/aws/sso/instancev2026.04.23.2instance.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
Name?stringThe name you want to assign to this Identity Center (SSO) Instance
Tags?array
createCreate a SSO Instance
getGet a SSO Instance
ArgumentTypeDescription
identifierstringThe primary identifier of the SSO Instance
updateUpdate a SSO Instance
deleteDelete a SSO Instance
ArgumentTypeDescription
identifierstringThe primary identifier of the SSO Instance
syncSync SSO Instance state from AWS

Resources

state(infinite)— SSO Instance resource state
@swamp/aws/sso/instance-access-control-attribute-configurationv2026.04.23.2instance_access_control_attribute_configuration.ts

Global Arguments

ArgumentTypeDescription
InstanceArnstringThe ARN of the AWS SSO instance under which the operation will be executed.
InstanceAccessControlAttributeConfiguration?objectThe InstanceAccessControlAttributeConfiguration property has been deprecated but is still supported for backwards compatibility purposes. We recomend that you use AccessControlAttributes property instead.
AccessControlAttributes?array
createCreate a SSO InstanceAccessControlAttributeConfiguration
getGet a SSO InstanceAccessControlAttributeConfiguration
ArgumentTypeDescription
identifierstringThe primary identifier of the SSO InstanceAccessControlAttributeConfiguration
updateUpdate a SSO InstanceAccessControlAttributeConfiguration
deleteDelete a SSO InstanceAccessControlAttributeConfiguration
ArgumentTypeDescription
identifierstringThe primary identifier of the SSO InstanceAccessControlAttributeConfiguration
syncSync SSO InstanceAccessControlAttributeConfiguration state from AWS

Resources

state(infinite)— SSO InstanceAccessControlAttributeConfiguration resource state
@swamp/aws/sso/permission-setv2026.04.23.2permission_set.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
NamestringThe name you want to assign to this permission set.
Description?stringThe permission set description.
InstanceArnstringThe sso instance arn that the permission set is owned.
SessionDuration?stringThe length of time that a user can be signed in to an AWS account.
RelayStateType?stringThe relay state URL that redirect links to any service in the AWS Management Console.
ManagedPolicies?array
InlinePolicy?stringThe inline policy to put in permission set.
Tags?array
CustomerManagedPolicyReferences?array
PermissionsBoundary?object
createCreate a SSO PermissionSet
getGet a SSO PermissionSet
ArgumentTypeDescription
identifierstringThe primary identifier of the SSO PermissionSet
updateUpdate a SSO PermissionSet
deleteDelete a SSO PermissionSet
ArgumentTypeDescription
identifierstringThe primary identifier of the SSO PermissionSet
syncSync SSO PermissionSet state from AWS

Resources

state(infinite)— SSO PermissionSet resource state