get_permissions_boundary_for_permission_set

SSOAdmin.Client.get_permissions_boundary_for_permission_set(**kwargs)

Obtains the permissions boundary for a specified PermissionSet.

See also: AWS API Documentation

Request Syntax

response = client.get_permissions_boundary_for_permission_set(
    InstanceArn='string',
    PermissionSetArn='string'
)

Parameters

• InstanceArn (string) --

  [REQUIRED]

  The ARN of the IAM Identity Center instance under which the operation will be executed.

• PermissionSetArn (string) --

  [REQUIRED]

  The ARN of the PermissionSet .

Return type

dict

Returns

Response Syntax

{
    'PermissionsBoundary': {
        'CustomerManagedPolicyReference': {
            'Name': 'string',
            'Path': 'string'
        },
        'ManagedPolicyArn': 'string'
    }
}

Response Structure

• (dict) --

  • PermissionsBoundary (dict) --

    The permissions boundary attached to the specified permission set.

    • CustomerManagedPolicyReference (dict) --

      Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each AWS account where you want to deploy your permission set.

      • Name (string) --

        The name of the IAM policy that you have configured in each account where you want to deploy your permission set.

      • Path (string) --

        The path to the IAM policy that you have configured in each account where you want to deploy your permission set. The default is / . For more information, see Friendly names and paths in the IAM User Guide .

    • ManagedPolicyArn (string) --

      The AWS managed policy ARN that you want to attach to a permission set as a permissions boundary.

Exceptions

• SSOAdmin.Client.exceptions.ResourceNotFoundException
• SSOAdmin.Client.exceptions.InternalServerException
• SSOAdmin.Client.exceptions.ThrottlingException
• SSOAdmin.Client.exceptions.ValidationException
• SSOAdmin.Client.exceptions.AccessDeniedException