ApplicationAccessScope class

Resource for managing an AWS SSO Admin Application Access Scope.

Example Usage

Basic Usage

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = aws.ssoadmin.getInstances({});
const exampleApplication = new aws.ssoadmin.Application("example", {
    name: "example",
    applicationProviderArn: "arn:aws:sso::aws:applicationProvider/custom",
    instanceArn: example.then(example => example.arns?.[0]),
});
const exampleApplicationAccessScope = new aws.ssoadmin.ApplicationAccessScope("example", {
    applicationArn: exampleApplication.arn,
    authorizedTargets: ["arn:aws:sso::123456789012:application/ssoins-123456789012/apl-123456789012"],
    scope: "sso:account:access",
});

import pulumi
import pulumi_aws as aws

example = aws.ssoadmin.get_instances()
example_application = aws.ssoadmin.Application("example",
    name="example",
    application_provider_arn="arn:aws:sso::aws:applicationProvider/custom",
    instance_arn=example.arns[0])
example_application_access_scope = aws.ssoadmin.ApplicationAccessScope("example",
    application_arn=example_application.arn,
    authorized_targets=["arn:aws:sso::123456789012:application/ssoins-123456789012/apl-123456789012"],
    scope="sso:account:access")

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() =>
{
    var example = Aws.SsoAdmin.GetInstances.Invoke();

    var exampleApplication = new Aws.SsoAdmin.Application("example", new()
    {
        Name = "example",
        ApplicationProviderArn = "arn:aws:sso::aws:applicationProvider/custom",
        InstanceArn = example.Apply(getInstancesResult => getInstancesResult.Arns[0]),
    });

    var exampleApplicationAccessScope = new Aws.SsoAdmin.ApplicationAccessScope("example", new()
    {
        ApplicationArn = exampleApplication.Arn,
        AuthorizedTargets = new[]
        {
            "arn:aws:sso::123456789012:application/ssoins-123456789012/apl-123456789012",
        },
        Scope = "sso:account:access",
    });

});

package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ssoadmin"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := ssoadmin.GetInstances(ctx, &ssoadmin.GetInstancesArgs{}, nil)
		if err != nil {
			return err
		}
		exampleApplication, err := ssoadmin.NewApplication(ctx, "example", &ssoadmin.ApplicationArgs{
			Name:                   pulumi.String("example"),
			ApplicationProviderArn: pulumi.String("arn:aws:sso::aws:applicationProvider/custom"),
			InstanceArn:            pulumi.String(example.Arns[0]),
		})
		if err != nil {
			return err
		}
		_, err = ssoadmin.NewApplicationAccessScope(ctx, "example", &ssoadmin.ApplicationAccessScopeArgs{
			ApplicationArn: exampleApplication.Arn,
			AuthorizedTargets: pulumi.StringArray{
				pulumi.String("arn:aws:sso::123456789012:application/ssoins-123456789012/apl-123456789012"),
			},
			Scope: pulumi.String("sso:account:access"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

pulumi {
  required_providers {
    aws = {
      source = "pulumi/aws"
    }
  }
}

data "aws_ssoadmin_getinstances" "example" {
}

resource "aws_ssoadmin_application" "example" {
  name                     = "example"
  application_provider_arn = "arn:aws:sso::aws:applicationProvider/custom"
  instance_arn             = data.aws_ssoadmin_getinstances.example.arns[0]
}
resource "aws_ssoadmin_applicationaccessscope" "example" {
  application_arn    = aws_ssoadmin_application.example.arn
  authorized_targets = ["arn:aws:sso::123456789012:application/ssoins-123456789012/apl-123456789012"]
  scope              = "sso:account:access"
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.ssoadmin.SsoadminFunctions;
import com.pulumi.aws.ssoadmin.inputs.GetInstancesArgs;
import com.pulumi.aws.ssoadmin.Application;
import com.pulumi.aws.ssoadmin.ApplicationArgs;
import com.pulumi.aws.ssoadmin.ApplicationAccessScope;
import com.pulumi.aws.ssoadmin.ApplicationAccessScopeArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var example = SsoadminFunctions.getInstances(GetInstancesArgs.builder()
            .build());

        var exampleApplication = new Application("exampleApplication", ApplicationArgs.builder()
            .name("example")
            .applicationProviderArn("arn:aws:sso::aws:applicationProvider/custom")
            .instanceArn(example.arns()[0])
            .build());

        var exampleApplicationAccessScope = new ApplicationAccessScope("exampleApplicationAccessScope", ApplicationAccessScopeArgs.builder()
            .applicationArn(exampleApplication.arn())
            .authorizedTargets("arn:aws:sso::123456789012:application/ssoins-123456789012/apl-123456789012")
            .scope("sso:account:access")
            .build());

    }
}

resources:
  exampleApplication:
    type: aws:ssoadmin:Application
    name: example
    properties:
      name: example
      applicationProviderArn: arn:aws:sso::aws:applicationProvider/custom
      instanceArn: ${example.arns[0]}
  exampleApplicationAccessScope:
    type: aws:ssoadmin:ApplicationAccessScope
    name: example
    properties:
      applicationArn: ${exampleApplication.arn}
      authorizedTargets:
        - arn:aws:sso::123456789012:application/ssoins-123456789012/apl-123456789012
      scope: sso:account:access
variables:
  example:
    fn::invoke:
      function: aws:ssoadmin:getInstances
      arguments: {}

Import

Using pulumi import, import SSO Admin Application Access Scope using the id. For example:

$ pulumi import aws:ssoadmin/applicationAccessScope:ApplicationAccessScope example arn:aws:sso::123456789012:application/ssoins-123456789012/apl-123456789012,sso:account:access