GetApplicationAccessScope - IAM Identity Center


Retrieves the authorized targets for an IAM Identity Center access scope for an application.

Request Syntax

{ "ApplicationArn": "string", "Scope": "string" }

Request Parameters

For information about the parameters that are common to all actions, see Common Parameters.

The request accepts the following data in JSON format.


Specifies the ARN of the application with the access scope that you want to retrieve.

Type: String

Length Constraints: Minimum length of 10. Maximum length of 1224.

Pattern: arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):sso::\d{12}:application/(sso)?ins-[a-zA-Z0-9-.]{16}/apl-[a-zA-Z0-9]{16}

Required: Yes


Specifies the name of the access scope for which you want the authorized targets.

Type: String

Pattern: ([A-Za-z0-9_]{1,50})(:[A-Za-z0-9_]{1,50}){0,1}(:[A-Za-z0-9_]{1,50}){0,1}

Required: Yes

Response Syntax

{ "AuthorizedTargets": [ "string" ], "Scope": "string" }

Response Elements

If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.


An array of authorized targets associated with this access scope.

Type: Array of strings

Array Members: Minimum number of 1 item. Maximum number of 10 items.

Length Constraints: Minimum length of 1. Maximum length of 100.

Pattern: arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):sso::(\d{12}:application/(sso)?ins-[a-zA-Z0-9-.]{16}/apl-[a-zA-Z0-9]{16}|:instance/(sso)?ins-[a-zA-Z0-9-.]{16})


The name of the access scope that can be used with the authorized targets.

Type: String

Pattern: ([A-Za-z0-9_]{1,50})(:[A-Za-z0-9_]{1,50}){0,1}(:[A-Za-z0-9_]{1,50}){0,1}


For information about the errors that are common to all actions, see Common Errors.


You do not have sufficient access to perform this action.

HTTP Status Code: 400


The request processing has failed because of an unknown error, exception, or failure with an internal server.

HTTP Status Code: 500


Indicates that a requested resource is not found.

HTTP Status Code: 400


Indicates that the principal has crossed the throttling limits of the API operations.

HTTP Status Code: 400


The request failed because it contains a syntax error.

HTTP Status Code: 400

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: