aws-native.sso.InstanceAccessControlAttributeConfiguration

Explore with Pulumi AI

AWS Native is in preview. AWS Classic is fully supported.

AWS Native v0.109.0 published on Wednesday, Jun 26, 2024 by Pulumi

pulumi/pulumi-aws-native

Example Usage

Example

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AwsNative = Pulumi.AwsNative;

return await Deployment.RunAsync(() => 
{
    var abac = new AwsNative.Sso.InstanceAccessControlAttributeConfiguration("abac", new()
    {
        InstanceArn = "arn:aws:sso:::instance/ssoins-instanceId",
        AccessControlAttributes = new[]
        {
            new AwsNative.Sso.Inputs.InstanceAccessControlAttributeConfigurationAccessControlAttributeArgs
            {
                Key = "CostCenter",
                Value = new AwsNative.Sso.Inputs.InstanceAccessControlAttributeConfigurationAccessControlAttributeValueArgs
                {
                    Source = new[]
                    {
                        "${path:enterprise.costCenter}",
                    },
                },
            },
        },
    });

});

package main

import (
	"github.com/pulumi/pulumi-aws-native/sdk/go/aws/sso"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := sso.NewInstanceAccessControlAttributeConfiguration(ctx, "abac", &sso.InstanceAccessControlAttributeConfigurationArgs{
			InstanceArn: pulumi.String("arn:aws:sso:::instance/ssoins-instanceId"),
			AccessControlAttributes: sso.InstanceAccessControlAttributeConfigurationAccessControlAttributeArray{
				&sso.InstanceAccessControlAttributeConfigurationAccessControlAttributeArgs{
					Key: pulumi.String("CostCenter"),
					Value: &sso.InstanceAccessControlAttributeConfigurationAccessControlAttributeValueArgs{
						Source: pulumi.StringArray{
							pulumi.String("${path:enterprise.costCenter}"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

Coming soon!

import pulumi
import pulumi_aws_native as aws_native

abac = aws_native.sso.InstanceAccessControlAttributeConfiguration("abac",
    instance_arn="arn:aws:sso:::instance/ssoins-instanceId",
    access_control_attributes=[aws_native.sso.InstanceAccessControlAttributeConfigurationAccessControlAttributeArgs(
        key="CostCenter",
        value=aws_native.sso.InstanceAccessControlAttributeConfigurationAccessControlAttributeValueArgs(
            source=["${path:enterprise.costCenter}"],
        ),
    )])

import * as pulumi from "@pulumi/pulumi";
import * as aws_native from "@pulumi/aws-native";

const abac = new aws_native.sso.InstanceAccessControlAttributeConfiguration("abac", {
    instanceArn: "arn:aws:sso:::instance/ssoins-instanceId",
    accessControlAttributes: [{
        key: "CostCenter",
        value: {
            source: ["${path:enterprise.costCenter}"],
        },
    }],
});

Coming soon!

Example

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AwsNative = Pulumi.AwsNative;

return await Deployment.RunAsync(() => 
{
    var abac = new AwsNative.Sso.InstanceAccessControlAttributeConfiguration("abac", new()
    {
        InstanceArn = "arn:aws:sso:::instance/ssoins-instanceId",
        AccessControlAttributes = new[]
        {
            new AwsNative.Sso.Inputs.InstanceAccessControlAttributeConfigurationAccessControlAttributeArgs
            {
                Key = "CostCenter",
                Value = new AwsNative.Sso.Inputs.InstanceAccessControlAttributeConfigurationAccessControlAttributeValueArgs
                {
                    Source = new[]
                    {
                        "${path:enterprise.costCenter}",
                    },
                },
            },
        },
    });

});

package main

import (
	"github.com/pulumi/pulumi-aws-native/sdk/go/aws/sso"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := sso.NewInstanceAccessControlAttributeConfiguration(ctx, "abac", &sso.InstanceAccessControlAttributeConfigurationArgs{
			InstanceArn: pulumi.String("arn:aws:sso:::instance/ssoins-instanceId"),
			AccessControlAttributes: sso.InstanceAccessControlAttributeConfigurationAccessControlAttributeArray{
				&sso.InstanceAccessControlAttributeConfigurationAccessControlAttributeArgs{
					Key: pulumi.String("CostCenter"),
					Value: &sso.InstanceAccessControlAttributeConfigurationAccessControlAttributeValueArgs{
						Source: pulumi.StringArray{
							pulumi.String("${path:enterprise.costCenter}"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

Coming soon!

import pulumi
import pulumi_aws_native as aws_native

abac = aws_native.sso.InstanceAccessControlAttributeConfiguration("abac",
    instance_arn="arn:aws:sso:::instance/ssoins-instanceId",
    access_control_attributes=[aws_native.sso.InstanceAccessControlAttributeConfigurationAccessControlAttributeArgs(
        key="CostCenter",
        value=aws_native.sso.InstanceAccessControlAttributeConfigurationAccessControlAttributeValueArgs(
            source=["${path:enterprise.costCenter}"],
        ),
    )])

import * as pulumi from "@pulumi/pulumi";
import * as aws_native from "@pulumi/aws-native";

const abac = new aws_native.sso.InstanceAccessControlAttributeConfiguration("abac", {
    instanceArn: "arn:aws:sso:::instance/ssoins-instanceId",
    accessControlAttributes: [{
        key: "CostCenter",
        value: {
            source: ["${path:enterprise.costCenter}"],
        },
    }],
});

Coming soon!

Create InstanceAccessControlAttributeConfiguration Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new InstanceAccessControlAttributeConfiguration(name: string, args: InstanceAccessControlAttributeConfigurationArgs, opts?: CustomResourceOptions);

@overload
def InstanceAccessControlAttributeConfiguration(resource_name: str,
                                                args: InstanceAccessControlAttributeConfigurationArgs,
                                                opts: Optional[ResourceOptions] = None)

@overload
def InstanceAccessControlAttributeConfiguration(resource_name: str,
                                                opts: Optional[ResourceOptions] = None,
                                                instance_arn: Optional[str] = None,
                                                access_control_attributes: Optional[Sequence[InstanceAccessControlAttributeConfigurationAccessControlAttributeArgs]] = None,
                                                instance_access_control_attribute_configuration: Optional[InstanceAccessControlAttributeConfigurationPropertiesArgs] = None)

func NewInstanceAccessControlAttributeConfiguration(ctx *Context, name string, args InstanceAccessControlAttributeConfigurationArgs, opts ...ResourceOption) (*InstanceAccessControlAttributeConfiguration, error)

public InstanceAccessControlAttributeConfiguration(string name, InstanceAccessControlAttributeConfigurationArgs args, CustomResourceOptions? opts = null)

public InstanceAccessControlAttributeConfiguration(String name, InstanceAccessControlAttributeConfigurationArgs args)
public InstanceAccessControlAttributeConfiguration(String name, InstanceAccessControlAttributeConfigurationArgs args, CustomResourceOptions options)

type: aws-native:sso:InstanceAccessControlAttributeConfiguration
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args InstanceAccessControlAttributeConfigurationArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args InstanceAccessControlAttributeConfigurationArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args InstanceAccessControlAttributeConfigurationArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args InstanceAccessControlAttributeConfigurationArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args InstanceAccessControlAttributeConfigurationArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

InstanceAccessControlAttributeConfiguration Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The InstanceAccessControlAttributeConfiguration resource accepts the following input properties:

InstanceArn string: The ARN of the AWS SSO instance under which the operation will be executed.
AccessControlAttributes List<Pulumi.AwsNative.Sso.Inputs.InstanceAccessControlAttributeConfigurationAccessControlAttribute>: Lists the attributes that are configured for ABAC in the specified IAM Identity Center instance.
InstanceAccessControlAttributeConfigurationValue Pulumi.AwsNative.Sso.Inputs.InstanceAccessControlAttributeConfigurationProperties: The InstanceAccessControlAttributeConfiguration property has been deprecated but is still supported for backwards compatibility purposes. We recomend that you use AccessControlAttributes property instead.

InstanceArn string: The ARN of the AWS SSO instance under which the operation will be executed.
AccessControlAttributes []InstanceAccessControlAttributeConfigurationAccessControlAttributeArgs: Lists the attributes that are configured for ABAC in the specified IAM Identity Center instance.
InstanceAccessControlAttributeConfiguration InstanceAccessControlAttributeConfigurationPropertiesArgs: The InstanceAccessControlAttributeConfiguration property has been deprecated but is still supported for backwards compatibility purposes. We recomend that you use AccessControlAttributes property instead.

instanceArn String: The ARN of the AWS SSO instance under which the operation will be executed.
accessControlAttributes List<InstanceAccessControlAttributeConfigurationAccessControlAttribute>: Lists the attributes that are configured for ABAC in the specified IAM Identity Center instance.
instanceAccessControlAttributeConfiguration InstanceAccessControlAttributeConfigurationProperties: The InstanceAccessControlAttributeConfiguration property has been deprecated but is still supported for backwards compatibility purposes. We recomend that you use AccessControlAttributes property instead.

instanceArn string: The ARN of the AWS SSO instance under which the operation will be executed.
accessControlAttributes InstanceAccessControlAttributeConfigurationAccessControlAttribute[]: Lists the attributes that are configured for ABAC in the specified IAM Identity Center instance.
instanceAccessControlAttributeConfiguration InstanceAccessControlAttributeConfigurationProperties: The InstanceAccessControlAttributeConfiguration property has been deprecated but is still supported for backwards compatibility purposes. We recomend that you use AccessControlAttributes property instead.

instance_arn str: The ARN of the AWS SSO instance under which the operation will be executed.
access_control_attributes Sequence[InstanceAccessControlAttributeConfigurationAccessControlAttributeArgs]: Lists the attributes that are configured for ABAC in the specified IAM Identity Center instance.
instance_access_control_attribute_configuration InstanceAccessControlAttributeConfigurationPropertiesArgs: The InstanceAccessControlAttributeConfiguration property has been deprecated but is still supported for backwards compatibility purposes. We recomend that you use AccessControlAttributes property instead.

instanceArn String: The ARN of the AWS SSO instance under which the operation will be executed.
accessControlAttributes List<Property Map>: Lists the attributes that are configured for ABAC in the specified IAM Identity Center instance.
instanceAccessControlAttributeConfiguration Property Map: The InstanceAccessControlAttributeConfiguration property has been deprecated but is still supported for backwards compatibility purposes. We recomend that you use AccessControlAttributes property instead.

Outputs

All input properties are implicitly available as output properties. Additionally, the InstanceAccessControlAttributeConfiguration resource produces the following output properties: