Table: aws_ssoadmin_permission_set - Query AWS SSO Admin Permission Set using SQL

The AWS SSO Admin Permission Set is a component of AWS Single Sign-On (SSO) that defines the level of access that a user or group has to AWS resources. It holds a collection of permissions that can be used to restrict or allow actions on specific resources. AWS SSO Admin Permission Sets can be customized to suit specific needs, ensuring secure and efficient access management across your AWS environment.

Table Usage Guide

The aws_ssoadmin_permission_set table in Steampipe provides you with information about the permission sets associated with AWS Single Sign-On (SSO) service. This table allows you, as a DevOps engineer, to query permission set-specific details, including the permission set name, description, created date, and related metadata. You can utilize this table to gather insights on permission sets, such as the instances of each permission set, associated policies, and more. The schema outlines the various attributes of the permission set for you, including the permission set ARN, created date, session duration, and associated tags.

Examples

Basic info

Explore the details of AWS SSO permission sets, including when they were created and their current state. This information can be useful for auditing purposes, understanding access controls, or reviewing the configuration of your AWS environment.

select
  name,
  arn,
  created_date,
  description,
  relay_state,
  session_duration,
  tags
from
  aws_ssoadmin_permission_set;

select
  name,
  arn,
  created_date,
  description,
  relay_state,
  session_duration,
  tags
from
  aws_ssoadmin_permission_set;

Schema for aws_ssoadmin_permission_set

Name	Type	Operators	Description
_ctx	jsonb		Steampipe context in JSON form.
account_id	text	=, !=, ~~, ~~, !~~, !~~	The AWS Account ID in which the resource is located.
akas	jsonb		Array of globally unique identifier strings (also known as) for the resource.
arn	text		The ARN of the permission set.
created_date	timestamp with time zone		The date that the permission set was created.
description	text		The description of the permission set.
instance_arn	text	=	The Amazon Resource Name (ARN) of the SSO Instance under which the operation will be executed.
name	text		The name of the permission set.
partition	text		The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
region	text		The AWS Region in which the resource is located.
relay_state	text		Used to redirect users within the application during the federation authentication process.
session_duration	text		The length of time that the application user sessions are valid for in the ISO-8601 standard.
sp_connection_name	text	=, !=, ~~, ~~, !~~, !~~	Steampipe connection name.
sp_ctx	jsonb		Steampipe context in JSON form.
tags	jsonb		A map of tags for the resource.
tags_src	jsonb
title	text		Title of the resource.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- aws

You can pass the configuration to the command with the --config argument:

steampipe_export_aws --config '<your_config>' aws_ssoadmin_permission_set