AWS IAM Identity Center (sso)

Additions

Conditions

• sso:PrimaryRegion
  
  • Description:  Filters access by the primary region of the IAM Identity Center instance
  • Type:  String

Updates

Actions

• CreateApplication
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• CreateApplicationAssignment
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• CreatePermissionSet
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• CreateTrustedTokenIssuer
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• DeleteApplication
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• DeleteApplicationAccessScope
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• DeleteApplicationAssignment
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• DeleteApplicationAuthenticationMethod
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• DeleteApplicationGrant
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• DescribeApplication
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• DescribeApplicationAssignment
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• GetApplicationAccessScope
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• GetApplicationAssignmentConfiguration
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• GetApplicationAuthenticationMethod
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• GetApplicationGrant
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• GetApplicationSessionConfiguration
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• ListApplicationAccessScopes
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• ListApplicationAssignments
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• ListApplicationAssignmentsForPrincipal
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• ListApplicationAuthenticationMethods
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• ListApplicationGrants
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• PutApplicationAccessScope
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• PutApplicationAssignmentConfiguration
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• PutApplicationAuthenticationMethod
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• PutApplicationGrant
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• PutApplicationSessionConfiguration
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• UpdateApplication
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• AddRegion
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• AttachCustomerManagedPolicyReferenceToPermissionSet
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• AttachManagedPolicyToPermissionSet
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• CreateAccountAssignment
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• CreateInstanceAccessControlAttributeConfiguration
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• DeleteAccountAssignment
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• DeleteInlinePolicyFromPermissionSet
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• DeleteInstance
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• DeleteInstanceAccessControlAttributeConfiguration
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• DeletePermissionSet
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• DeletePermissionsBoundaryFromPermissionSet
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• DeleteTrustedTokenIssuer
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• DescribeAccountAssignmentCreationStatus
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• DescribeAccountAssignmentDeletionStatus
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• DescribeInstance
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• DescribeInstanceAccessControlAttributeConfiguration
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• DescribePermissionSet
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• DescribePermissionSetProvisioningStatus
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• DescribeRegion
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• DescribeTrustedTokenIssuer
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• DetachCustomerManagedPolicyReferenceFromPermissionSet
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• DetachManagedPolicyFromPermissionSet
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• GetInlinePolicyForPermissionSet
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• GetPermissionsBoundaryForPermissionSet
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• ListAccountAssignmentCreationStatus
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• ListAccountAssignmentDeletionStatus
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• ListAccountAssignments
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• ListAccountAssignmentsForPrincipal
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• ListAccountsForProvisionedPermissionSet
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• ListCustomerManagedPolicyReferencesInPermissionSet
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• ListManagedPoliciesInPermissionSet
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• ListPermissionSetProvisioningStatus
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• ListPermissionSets
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• ListPermissionSetsProvisionedToAccount
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• ListRegions
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• ListTrustedTokenIssuers
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• ProvisionPermissionSet
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• PutInlinePolicyToPermissionSet
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• PutPermissionsBoundaryToPermissionSet
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• RemoveRegion
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• UpdateInstance
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• UpdateInstanceAccessControlAttributeConfiguration
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• UpdatePermissionSet
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• UpdateTrustedTokenIssuer
  
  Conditions
  
  • ＋ sso:PrimaryRegion

Resources

• PermissionSet
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• Instance
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• Application
  
  Conditions
  
  • ＋ sso:PrimaryRegion
• TrustedTokenIssuer
  
  Conditions
  
  • ＋ sso:PrimaryRegion