# AWS::SSO Construct Library

This module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project.

```ts
import * as sso from 'aws-cdk-lib/aws-sso';
```

There are no official hand-written ([L2](https://docs.aws.amazon.com/cdk/latest/guide/constructs.html#constructs_lib)) constructs for this service yet. Here are some suggestions on how to proceed:

- Search [Construct Hub for SSO construct libraries](https://constructs.dev/search?q=sso)
- Use the automatically generated [L1](https://docs.aws.amazon.com/cdk/latest/guide/constructs.html#constructs_l1_using) constructs, in the same way you would use [the CloudFormation AWS::SSO resources](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_SSO.html) directly.

There are no hand-written ([L2](https://docs.aws.amazon.com/cdk/latest/guide/constructs.html#constructs_lib)) constructs for this service yet.
However, you can still use the automatically generated [L1](https://docs.aws.amazon.com/cdk/latest/guide/constructs.html#constructs_l1_using) constructs, and use this service exactly as you would using CloudFormation directly.

For more information on the resources and properties available for this service, see the [CloudFormation documentation for AWS::SSO](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_SSO.html).

(Read the [CDK Contributing Guide](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and submit an RFC if you are interested in contributing to this construct library.)

## Types

| Name | Kind | Summary |
| --- | --- | --- |
| [`CfnApplication`](/v2/docs/aws-cdk-lib.aws_sso.CfnApplication) | Construct (L1) | Creates an OAuth 2.0 customer managed application in IAM Identity Center for the given application provider. |
| [`CfnApplicationAssignment`](/v2/docs/aws-cdk-lib.aws_sso.CfnApplicationAssignment) | Construct (L1) | A structure that describes an assignment of a principal to an application. |
| [`CfnAssignment`](/v2/docs/aws-cdk-lib.aws_sso.CfnAssignment) | Construct (L1) | Assigns access to a Principal for a specified AWS account using a specified permission set. |
| [`CfnInstance`](/v2/docs/aws-cdk-lib.aws_sso.CfnInstance) | Construct (L1) | Creates an instance of IAM Identity Center for a standalone AWS account that is not managed by AWS Organizations or a member AWS account in an organization. |
| [`CfnInstanceAccessControlAttributeConfiguration`](/v2/docs/aws-cdk-lib.aws_sso.CfnInstanceAccessControlAttributeConfiguration) | Construct (L1) | Enables the attribute-based access control (ABAC) feature for the specified instance. |
| [`CfnPermissionSet`](/v2/docs/aws-cdk-lib.aws_sso.CfnPermissionSet) | Construct (L1) | Specifies a permission set within a specified instance. |
| [`CfnApplication.PortalOptionsConfigurationProperty`](/v2/docs/aws-cdk-lib.aws_sso.CfnApplication.PortalOptionsConfigurationProperty) | Struct | A structure that describes the options for the portal associated with an application. |
| [`CfnApplication.SignInOptionsProperty`](/v2/docs/aws-cdk-lib.aws_sso.CfnApplication.SignInOptionsProperty) | Struct | A structure that describes the sign-in options for an application portal. |
| [`CfnApplicationAssignmentProps`](/v2/docs/aws-cdk-lib.aws_sso.CfnApplicationAssignmentProps) | Struct | Properties for defining a `CfnApplicationAssignment`. |
| [`CfnApplicationProps`](/v2/docs/aws-cdk-lib.aws_sso.CfnApplicationProps) | Struct | Properties for defining a `CfnApplication`. |
| [`CfnAssignmentProps`](/v2/docs/aws-cdk-lib.aws_sso.CfnAssignmentProps) | Struct | Properties for defining a `CfnAssignment`. |
| [`CfnInstanceAccessControlAttributeConfiguration.AccessControlAttributeProperty`](/v2/docs/aws-cdk-lib.aws_sso.CfnInstanceAccessControlAttributeConfiguration.AccessControlAttributeProperty) | Struct | These are identity store attributes that you can configure for use in attributes-based access control (ABAC). |
| [`CfnInstanceAccessControlAttributeConfiguration.AccessControlAttributeValueProperty`](/v2/docs/aws-cdk-lib.aws_sso.CfnInstanceAccessControlAttributeConfiguration.AccessControlAttributeValueProperty) | Struct | The value used for mapping a specified attribute to an identity source. |
| [`CfnInstanceAccessControlAttributeConfiguration.InstanceAccessControlAttributeConfigurationProperty`](/v2/docs/aws-cdk-lib.aws_sso.CfnInstanceAccessControlAttributeConfiguration.InstanceAccessControlAttributeConfigurationProperty) | Struct | The InstanceAccessControlAttributeConfiguration property has been deprecated but is still supported for backwards compatibility purposes. |
| [`CfnInstanceAccessControlAttributeConfigurationProps`](/v2/docs/aws-cdk-lib.aws_sso.CfnInstanceAccessControlAttributeConfigurationProps) | Struct | Properties for defining a `CfnInstanceAccessControlAttributeConfiguration`. |
| [`CfnInstanceProps`](/v2/docs/aws-cdk-lib.aws_sso.CfnInstanceProps) | Struct | Properties for defining a `CfnInstance`. |
| [`CfnPermissionSet.CustomerManagedPolicyReferenceProperty`](/v2/docs/aws-cdk-lib.aws_sso.CfnPermissionSet.CustomerManagedPolicyReferenceProperty) | Struct | Specifies the name and path of a customer managed policy. |
| [`CfnPermissionSet.PermissionsBoundaryProperty`](/v2/docs/aws-cdk-lib.aws_sso.CfnPermissionSet.PermissionsBoundaryProperty) | Struct | Specifies the configuration of the AWS managed or customer managed policy that you want to set as a permissions boundary. |
| [`CfnPermissionSetProps`](/v2/docs/aws-cdk-lib.aws_sso.CfnPermissionSetProps) | Struct | Properties for defining a `CfnPermissionSet`. |