import * as pulumi from "@pulumi/pulumi"; import * as inputs from "../types/input"; import * as outputs from "../types/output"; /** * Resource Type definition for SSO PermissionSet */ export declare class PermissionSet extends pulumi.CustomResource { /** * Get an existing PermissionSet resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, opts?: pulumi.CustomResourceOptions): PermissionSet; /** * Returns true if the given object is an instance of PermissionSet. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is PermissionSet; /** * Specifies the names and paths of the customer managed policies that you have attached to your permission set. */ readonly customerManagedPolicyReferences: pulumi.Output; /** * The permission set description. */ readonly description: pulumi.Output; /** * The inline policy to put in permission set. * * Search the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SSO::PermissionSet` for more information about the expected schema for this property. */ readonly inlinePolicy: pulumi.Output; /** * The sso instance arn that the permission set is owned. */ readonly instanceArn: pulumi.Output; /** * A structure that stores a list of managed policy ARNs that describe the associated AWS managed policy. */ readonly managedPolicies: pulumi.Output; /** * The name you want to assign to this permission set. */ readonly name: pulumi.Output; /** * The permission set that the policy will be attached to */ readonly permissionSetArn: pulumi.Output; /** * Specifies the configuration of the AWS managed or customer managed policy that you want to set as a permissions boundary. Specify either `CustomerManagedPolicyReference` to use the name and path of a customer managed policy, or `ManagedPolicyArn` to use the ARN of an AWS managed policy. A permissions boundary represents the maximum permissions that any policy can grant your role. For more information, see [Permissions boundaries for IAM entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html) in the *IAM User Guide* . * * > Policies used as permissions boundaries don't provide permissions. You must also attach an IAM policy to the role. To learn how the effective permissions for a role are evaluated, see [IAM JSON policy evaluation logic](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html) in the *IAM User Guide* . */ readonly permissionsBoundary: pulumi.Output; /** * The relay state URL that redirect links to any service in the AWS Management Console. */ readonly relayStateType: pulumi.Output; /** * The length of time that a user can be signed in to an AWS account. */ readonly sessionDuration: pulumi.Output; /** * The tags to attach to the new `PermissionSet` . */ readonly tags: pulumi.Output; /** * Create a PermissionSet resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: PermissionSetArgs, opts?: pulumi.CustomResourceOptions); } /** * The set of arguments for constructing a PermissionSet resource. */ export interface PermissionSetArgs { /** * Specifies the names and paths of the customer managed policies that you have attached to your permission set. */ customerManagedPolicyReferences?: pulumi.Input[]>; /** * The permission set description. */ description?: pulumi.Input; /** * The inline policy to put in permission set. * * Search the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SSO::PermissionSet` for more information about the expected schema for this property. */ inlinePolicy?: any; /** * The sso instance arn that the permission set is owned. */ instanceArn: pulumi.Input; /** * A structure that stores a list of managed policy ARNs that describe the associated AWS managed policy. */ managedPolicies?: pulumi.Input[]>; /** * The name you want to assign to this permission set. */ name?: pulumi.Input; /** * Specifies the configuration of the AWS managed or customer managed policy that you want to set as a permissions boundary. Specify either `CustomerManagedPolicyReference` to use the name and path of a customer managed policy, or `ManagedPolicyArn` to use the ARN of an AWS managed policy. A permissions boundary represents the maximum permissions that any policy can grant your role. For more information, see [Permissions boundaries for IAM entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html) in the *IAM User Guide* . * * > Policies used as permissions boundaries don't provide permissions. You must also attach an IAM policy to the role. To learn how the effective permissions for a role are evaluated, see [IAM JSON policy evaluation logic](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html) in the *IAM User Guide* . */ permissionsBoundary?: pulumi.Input; /** * The relay state URL that redirect links to any service in the AWS Management Console. */ relayStateType?: pulumi.Input; /** * The length of time that a user can be signed in to an AWS account. */ sessionDuration?: pulumi.Input; /** * The tags to attach to the new `PermissionSet` . */ tags?: pulumi.Input[]>; }