Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. AWS
  3. API Docs
  4. ssoadmin
  5. Application
AWS v6.76.0 published on Tuesday, Apr 8, 2025 by Pulumi
pulumi/pulumi-aws

aws.ssoadmin.Application

Explore with Pulumi AI

AWS v6.76.0 published on Tuesday, Apr 8, 2025 by Pulumi
pulumi/pulumi-aws

Resource for managing an AWS SSO Admin Application.

The CreateApplication API only supports custom OAuth 2.0 applications. Creation of 3rd party SAML or OAuth 2.0 applications require setup to be done through the associated app service or AWS console. See this issue for additional context.

Example Usage

Basic Usage

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = aws.ssoadmin.getInstances({});
const exampleApplication = new aws.ssoadmin.Application("example", {
    name: "example",
    applicationProviderArn: "arn:aws:sso::aws:applicationProvider/custom",
    instanceArn: example.then(example => example.arns?.[0]),
});
Copy
import pulumi
import pulumi_aws as aws

example = aws.ssoadmin.get_instances()
example_application = aws.ssoadmin.Application("example",
    name="example",
    application_provider_arn="arn:aws:sso::aws:applicationProvider/custom",
    instance_arn=example.arns[0])
Copy
package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/ssoadmin"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := ssoadmin.GetInstances(ctx, map[string]interface{}{}, nil)
		if err != nil {
			return err
		}
		_, err = ssoadmin.NewApplication(ctx, "example", &ssoadmin.ApplicationArgs{
			Name:                   pulumi.String("example"),
			ApplicationProviderArn: pulumi.String("arn:aws:sso::aws:applicationProvider/custom"),
			InstanceArn:            pulumi.String(example.Arns[0]),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var example = Aws.SsoAdmin.GetInstances.Invoke();

    var exampleApplication = new Aws.SsoAdmin.Application("example", new()
    {
        Name = "example",
        ApplicationProviderArn = "arn:aws:sso::aws:applicationProvider/custom",
        InstanceArn = example.Apply(getInstancesResult => getInstancesResult.Arns[0]),
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.ssoadmin.SsoadminFunctions;
import com.pulumi.aws.ssoadmin.Application;
import com.pulumi.aws.ssoadmin.ApplicationArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var example = SsoadminFunctions.getInstances();

        var exampleApplication = new Application("exampleApplication", ApplicationArgs.builder()
            .name("example")
            .applicationProviderArn("arn:aws:sso::aws:applicationProvider/custom")
            .instanceArn(example.applyValue(getInstancesResult -> getInstancesResult.arns()[0]))
            .build());

    }
}
Copy
resources:
  exampleApplication:
    type: aws:ssoadmin:Application
    name: example
    properties:
      name: example
      applicationProviderArn: arn:aws:sso::aws:applicationProvider/custom
      instanceArn: ${example.arns[0]}
variables:
  example:
    fn::invoke:
      function: aws:ssoadmin:getInstances
      arguments: {}
Copy

With Portal Options

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = aws.ssoadmin.getInstances({});
const exampleApplication = new aws.ssoadmin.Application("example", {
    name: "example",
    applicationProviderArn: "arn:aws:sso::aws:applicationProvider/custom",
    instanceArn: example.then(example => example.arns?.[0]),
    portalOptions: {
        visibility: "ENABLED",
        signInOptions: {
            applicationUrl: "http://example.com",
            origin: "APPLICATION",
        },
    },
});
Copy
import pulumi
import pulumi_aws as aws

example = aws.ssoadmin.get_instances()
example_application = aws.ssoadmin.Application("example",
    name="example",
    application_provider_arn="arn:aws:sso::aws:applicationProvider/custom",
    instance_arn=example.arns[0],
    portal_options={
        "visibility": "ENABLED",
        "sign_in_options": {
            "application_url": "http://example.com",
            "origin": "APPLICATION",
        },
    })
Copy
package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/ssoadmin"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := ssoadmin.GetInstances(ctx, map[string]interface{}{}, nil)
		if err != nil {
			return err
		}
		_, err = ssoadmin.NewApplication(ctx, "example", &ssoadmin.ApplicationArgs{
			Name:                   pulumi.String("example"),
			ApplicationProviderArn: pulumi.String("arn:aws:sso::aws:applicationProvider/custom"),
			InstanceArn:            pulumi.String(example.Arns[0]),
			PortalOptions: &ssoadmin.ApplicationPortalOptionsArgs{
				Visibility: pulumi.String("ENABLED"),
				SignInOptions: &ssoadmin.ApplicationPortalOptionsSignInOptionsArgs{
					ApplicationUrl: pulumi.String("http://example.com"),
					Origin:         pulumi.String("APPLICATION"),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var example = Aws.SsoAdmin.GetInstances.Invoke();

    var exampleApplication = new Aws.SsoAdmin.Application("example", new()
    {
        Name = "example",
        ApplicationProviderArn = "arn:aws:sso::aws:applicationProvider/custom",
        InstanceArn = example.Apply(getInstancesResult => getInstancesResult.Arns[0]),
        PortalOptions = new Aws.SsoAdmin.Inputs.ApplicationPortalOptionsArgs
        {
            Visibility = "ENABLED",
            SignInOptions = new Aws.SsoAdmin.Inputs.ApplicationPortalOptionsSignInOptionsArgs
            {
                ApplicationUrl = "http://example.com",
                Origin = "APPLICATION",
            },
        },
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.ssoadmin.SsoadminFunctions;
import com.pulumi.aws.ssoadmin.Application;
import com.pulumi.aws.ssoadmin.ApplicationArgs;
import com.pulumi.aws.ssoadmin.inputs.ApplicationPortalOptionsArgs;
import com.pulumi.aws.ssoadmin.inputs.ApplicationPortalOptionsSignInOptionsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var example = SsoadminFunctions.getInstances();

        var exampleApplication = new Application("exampleApplication", ApplicationArgs.builder()
            .name("example")
            .applicationProviderArn("arn:aws:sso::aws:applicationProvider/custom")
            .instanceArn(example.applyValue(getInstancesResult -> getInstancesResult.arns()[0]))
            .portalOptions(ApplicationPortalOptionsArgs.builder()
                .visibility("ENABLED")
                .signInOptions(ApplicationPortalOptionsSignInOptionsArgs.builder()
                    .applicationUrl("http://example.com")
                    .origin("APPLICATION")
                    .build())
                .build())
            .build());

    }
}
Copy
resources:
  exampleApplication:
    type: aws:ssoadmin:Application
    name: example
    properties:
      name: example
      applicationProviderArn: arn:aws:sso::aws:applicationProvider/custom
      instanceArn: ${example.arns[0]}
      portalOptions:
        visibility: ENABLED
        signInOptions:
          applicationUrl: http://example.com
          origin: APPLICATION
variables:
  example:
    fn::invoke:
      function: aws:ssoadmin:getInstances
      arguments: {}
Copy

Create Application Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Application(name: string, args: ApplicationArgs, opts?: CustomResourceOptions);
@overload
def Application(resource_name: str,
                args: ApplicationArgs,
                opts: Optional[ResourceOptions] = None)

@overload
def Application(resource_name: str,
                opts: Optional[ResourceOptions] = None,
                application_provider_arn: Optional[str] = None,
                instance_arn: Optional[str] = None,
                client_token: Optional[str] = None,
                description: Optional[str] = None,
                name: Optional[str] = None,
                portal_options: Optional[ApplicationPortalOptionsArgs] = None,
                status: Optional[str] = None,
                tags: Optional[Mapping[str, str]] = None)
func NewApplication(ctx *Context, name string, args ApplicationArgs, opts ...ResourceOption) (*Application, error)
public Application(string name, ApplicationArgs args, CustomResourceOptions? opts = null)
public Application(String name, ApplicationArgs args)
public Application(String name, ApplicationArgs args, CustomResourceOptions options)

type: aws:ssoadmin:Application
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. ApplicationArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. ApplicationArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. ApplicationArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. ApplicationArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. ApplicationArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var exampleapplicationResourceResourceFromSsoadminapplication = new Aws.SsoAdmin.Application("exampleapplicationResourceResourceFromSsoadminapplication", new()
{
    ApplicationProviderArn = "string",
    InstanceArn = "string",
    ClientToken = "string",
    Description = "string",
    Name = "string",
    PortalOptions = new Aws.SsoAdmin.Inputs.ApplicationPortalOptionsArgs
    {
        SignInOptions = new Aws.SsoAdmin.Inputs.ApplicationPortalOptionsSignInOptionsArgs
        {
            Origin = "string",
            ApplicationUrl = "string",
        },
        Visibility = "string",
    },
    Status = "string",
    Tags = 
    {
        { "string", "string" },
    },
});
Copy
example, err := ssoadmin.NewApplication(ctx, "exampleapplicationResourceResourceFromSsoadminapplication", &ssoadmin.ApplicationArgs{
	ApplicationProviderArn: pulumi.String("string"),
	InstanceArn:            pulumi.String("string"),
	ClientToken:            pulumi.String("string"),
	Description:            pulumi.String("string"),
	Name:                   pulumi.String("string"),
	PortalOptions: &ssoadmin.ApplicationPortalOptionsArgs{
		SignInOptions: &ssoadmin.ApplicationPortalOptionsSignInOptionsArgs{
			Origin:         pulumi.String("string"),
			ApplicationUrl: pulumi.String("string"),
		},
		Visibility: pulumi.String("string"),
	},
	Status: pulumi.String("string"),
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
})
Copy
var exampleapplicationResourceResourceFromSsoadminapplication = new Application("exampleapplicationResourceResourceFromSsoadminapplication", ApplicationArgs.builder()
    .applicationProviderArn("string")
    .instanceArn("string")
    .clientToken("string")
    .description("string")
    .name("string")
    .portalOptions(ApplicationPortalOptionsArgs.builder()
        .signInOptions(ApplicationPortalOptionsSignInOptionsArgs.builder()
            .origin("string")
            .applicationUrl("string")
            .build())
        .visibility("string")
        .build())
    .status("string")
    .tags(Map.of("string", "string"))
    .build());
Copy
exampleapplication_resource_resource_from_ssoadminapplication = aws.ssoadmin.Application("exampleapplicationResourceResourceFromSsoadminapplication",
    application_provider_arn="string",
    instance_arn="string",
    client_token="string",
    description="string",
    name="string",
    portal_options={
        "sign_in_options": {
            "origin": "string",
            "application_url": "string",
        },
        "visibility": "string",
    },
    status="string",
    tags={
        "string": "string",
    })
Copy
const exampleapplicationResourceResourceFromSsoadminapplication = new aws.ssoadmin.Application("exampleapplicationResourceResourceFromSsoadminapplication", {
    applicationProviderArn: "string",
    instanceArn: "string",
    clientToken: "string",
    description: "string",
    name: "string",
    portalOptions: {
        signInOptions: {
            origin: "string",
            applicationUrl: "string",
        },
        visibility: "string",
    },
    status: "string",
    tags: {
        string: "string",
    },
});
Copy
type: aws:ssoadmin:Application
properties:
    applicationProviderArn: string
    clientToken: string
    description: string
    instanceArn: string
    name: string
    portalOptions:
        signInOptions:
            applicationUrl: string
            origin: string
        visibility: string
    status: string
    tags:
        string: string
Copy

Application Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The Application resource accepts the following input properties:

ApplicationProviderArn This property is required. string
ARN of the application provider.
InstanceArn This property is required. string
ARN of the instance of IAM Identity Center.
ClientToken string
A unique, case-sensitive ID that you provide to ensure the idempotency of the request. AWS generates a random value when not provided.
Description string
Description of the application.
Name string

Name of the application.

The following arguments are optional:

PortalOptions ApplicationPortalOptions
Options for the portal associated with an application. See portal_options below.
Status string
Status of the application. Valid values are ENABLED and DISABLED.
Tags Dictionary<string, string>
Key-value mapping of resource tags. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
ApplicationProviderArn This property is required. string
ARN of the application provider.
InstanceArn This property is required. string
ARN of the instance of IAM Identity Center.
ClientToken string
A unique, case-sensitive ID that you provide to ensure the idempotency of the request. AWS generates a random value when not provided.
Description string
Description of the application.
Name string

Name of the application.

The following arguments are optional:

PortalOptions ApplicationPortalOptionsArgs
Options for the portal associated with an application. See portal_options below.
Status string
Status of the application. Valid values are ENABLED and DISABLED.
Tags map[string]string
Key-value mapping of resource tags. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
applicationProviderArn This property is required. String
ARN of the application provider.
instanceArn This property is required. String
ARN of the instance of IAM Identity Center.
clientToken String
A unique, case-sensitive ID that you provide to ensure the idempotency of the request. AWS generates a random value when not provided.
description String
Description of the application.
name String

Name of the application.

The following arguments are optional:

portalOptions ApplicationPortalOptions
Options for the portal associated with an application. See portal_options below.
status String
Status of the application. Valid values are ENABLED and DISABLED.
tags Map<String,String>
Key-value mapping of resource tags. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
applicationProviderArn This property is required. string
ARN of the application provider.
instanceArn This property is required. string
ARN of the instance of IAM Identity Center.
clientToken string
A unique, case-sensitive ID that you provide to ensure the idempotency of the request. AWS generates a random value when not provided.
description string
Description of the application.
name string

Name of the application.

The following arguments are optional:

portalOptions ApplicationPortalOptions
Options for the portal associated with an application. See portal_options below.
status string
Status of the application. Valid values are ENABLED and DISABLED.
tags {[key: string]: string}
Key-value mapping of resource tags. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
application_provider_arn This property is required. str
ARN of the application provider.
instance_arn This property is required. str
ARN of the instance of IAM Identity Center.
client_token str
A unique, case-sensitive ID that you provide to ensure the idempotency of the request. AWS generates a random value when not provided.
description str
Description of the application.
name str

Name of the application.

The following arguments are optional:

portal_options ApplicationPortalOptionsArgs
Options for the portal associated with an application. See portal_options below.
status str
Status of the application. Valid values are ENABLED and DISABLED.
tags Mapping[str, str]
Key-value mapping of resource tags. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
applicationProviderArn This property is required. String
ARN of the application provider.
instanceArn This property is required. String
ARN of the instance of IAM Identity Center.
clientToken String
A unique, case-sensitive ID that you provide to ensure the idempotency of the request. AWS generates a random value when not provided.
description String
Description of the application.
name String

Name of the application.

The following arguments are optional:

portalOptions Property Map
Options for the portal associated with an application. See portal_options below.
status String
Status of the application. Valid values are ENABLED and DISABLED.
tags Map<String>
Key-value mapping of resource tags. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

Outputs

All input properties are implicitly available as output properties. Additionally, the Application resource produces the following output properties:

ApplicationAccount string
AWS account ID.
ApplicationArn string
ARN of the application.
Id string
The provider-assigned unique ID for this managed resource.
TagsAll Dictionary<string, string>
Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

Deprecated: Please use tags instead.

ApplicationAccount string
AWS account ID.
ApplicationArn string
ARN of the application.
Id string
The provider-assigned unique ID for this managed resource.
TagsAll map[string]string
Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

Deprecated: Please use tags instead.

applicationAccount String
AWS account ID.
applicationArn String
ARN of the application.
id String
The provider-assigned unique ID for this managed resource.
tagsAll Map<String,String>
Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

Deprecated: Please use tags instead.

applicationAccount string
AWS account ID.
applicationArn string
ARN of the application.
id string
The provider-assigned unique ID for this managed resource.
tagsAll {[key: string]: string}
Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

Deprecated: Please use tags instead.

application_account str
AWS account ID.
application_arn str
ARN of the application.
id str
The provider-assigned unique ID for this managed resource.
tags_all Mapping[str, str]
Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

Deprecated: Please use tags instead.

applicationAccount String
AWS account ID.
applicationArn String
ARN of the application.
id String
The provider-assigned unique ID for this managed resource.
tagsAll Map<String>
Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

Deprecated: Please use tags instead.

Look up Existing Application Resource

Get an existing Application resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: ApplicationState, opts?: CustomResourceOptions): Application
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        application_account: Optional[str] = None,
        application_arn: Optional[str] = None,
        application_provider_arn: Optional[str] = None,
        client_token: Optional[str] = None,
        description: Optional[str] = None,
        instance_arn: Optional[str] = None,
        name: Optional[str] = None,
        portal_options: Optional[ApplicationPortalOptionsArgs] = None,
        status: Optional[str] = None,
        tags: Optional[Mapping[str, str]] = None,
        tags_all: Optional[Mapping[str, str]] = None) -> Application
func GetApplication(ctx *Context, name string, id IDInput, state *ApplicationState, opts ...ResourceOption) (*Application, error)
public static Application Get(string name, Input<string> id, ApplicationState? state, CustomResourceOptions? opts = null)
public static Application get(String name, Output<String> id, ApplicationState state, CustomResourceOptions options)
resources:  _:    type: aws:ssoadmin:Application    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
ApplicationAccount string
AWS account ID.
ApplicationArn string
ARN of the application.
ApplicationProviderArn string
ARN of the application provider.
ClientToken string
A unique, case-sensitive ID that you provide to ensure the idempotency of the request. AWS generates a random value when not provided.
Description string
Description of the application.
InstanceArn string
ARN of the instance of IAM Identity Center.
Name string

Name of the application.

The following arguments are optional:

PortalOptions ApplicationPortalOptions
Options for the portal associated with an application. See portal_options below.
Status string
Status of the application. Valid values are ENABLED and DISABLED.
Tags Dictionary<string, string>
Key-value mapping of resource tags. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
TagsAll Dictionary<string, string>
Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

Deprecated: Please use tags instead.

ApplicationAccount string
AWS account ID.
ApplicationArn string
ARN of the application.
ApplicationProviderArn string
ARN of the application provider.
ClientToken string
A unique, case-sensitive ID that you provide to ensure the idempotency of the request. AWS generates a random value when not provided.
Description string
Description of the application.
InstanceArn string
ARN of the instance of IAM Identity Center.
Name string

Name of the application.

The following arguments are optional:

PortalOptions ApplicationPortalOptionsArgs
Options for the portal associated with an application. See portal_options below.
Status string
Status of the application. Valid values are ENABLED and DISABLED.
Tags map[string]string
Key-value mapping of resource tags. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
TagsAll map[string]string
Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

Deprecated: Please use tags instead.

applicationAccount String
AWS account ID.
applicationArn String
ARN of the application.
applicationProviderArn String
ARN of the application provider.
clientToken String
A unique, case-sensitive ID that you provide to ensure the idempotency of the request. AWS generates a random value when not provided.
description String
Description of the application.
instanceArn String
ARN of the instance of IAM Identity Center.
name String

Name of the application.

The following arguments are optional:

portalOptions ApplicationPortalOptions
Options for the portal associated with an application. See portal_options below.
status String
Status of the application. Valid values are ENABLED and DISABLED.
tags Map<String,String>
Key-value mapping of resource tags. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
tagsAll Map<String,String>
Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

Deprecated: Please use tags instead.

applicationAccount string
AWS account ID.
applicationArn string
ARN of the application.
applicationProviderArn string
ARN of the application provider.
clientToken string
A unique, case-sensitive ID that you provide to ensure the idempotency of the request. AWS generates a random value when not provided.
description string
Description of the application.
instanceArn string
ARN of the instance of IAM Identity Center.
name string

Name of the application.

The following arguments are optional:

portalOptions ApplicationPortalOptions
Options for the portal associated with an application. See portal_options below.
status string
Status of the application. Valid values are ENABLED and DISABLED.
tags {[key: string]: string}
Key-value mapping of resource tags. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
tagsAll {[key: string]: string}
Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

Deprecated: Please use tags instead.

application_account str
AWS account ID.
application_arn str
ARN of the application.
application_provider_arn str
ARN of the application provider.
client_token str
A unique, case-sensitive ID that you provide to ensure the idempotency of the request. AWS generates a random value when not provided.
description str
Description of the application.
instance_arn str
ARN of the instance of IAM Identity Center.
name str

Name of the application.

The following arguments are optional:

portal_options ApplicationPortalOptionsArgs
Options for the portal associated with an application. See portal_options below.
status str
Status of the application. Valid values are ENABLED and DISABLED.
tags Mapping[str, str]
Key-value mapping of resource tags. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
tags_all Mapping[str, str]
Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

Deprecated: Please use tags instead.

applicationAccount String
AWS account ID.
applicationArn String
ARN of the application.
applicationProviderArn String
ARN of the application provider.
clientToken String
A unique, case-sensitive ID that you provide to ensure the idempotency of the request. AWS generates a random value when not provided.
description String
Description of the application.
instanceArn String
ARN of the instance of IAM Identity Center.
name String

Name of the application.

The following arguments are optional:

portalOptions Property Map
Options for the portal associated with an application. See portal_options below.
status String
Status of the application. Valid values are ENABLED and DISABLED.
tags Map<String>
Key-value mapping of resource tags. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
tagsAll Map<String>
Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

Deprecated: Please use tags instead.

Supporting Types

ApplicationPortalOptions
, ApplicationPortalOptionsArgs

SignInOptions ApplicationPortalOptionsSignInOptions
Sign-in options for the access portal. See sign_in_options below.
Visibility string
Indicates whether this application is visible in the access portal. Valid values are ENABLED and DISABLED.
SignInOptions ApplicationPortalOptionsSignInOptions
Sign-in options for the access portal. See sign_in_options below.
Visibility string
Indicates whether this application is visible in the access portal. Valid values are ENABLED and DISABLED.
signInOptions ApplicationPortalOptionsSignInOptions
Sign-in options for the access portal. See sign_in_options below.
visibility String
Indicates whether this application is visible in the access portal. Valid values are ENABLED and DISABLED.
signInOptions ApplicationPortalOptionsSignInOptions
Sign-in options for the access portal. See sign_in_options below.
visibility string
Indicates whether this application is visible in the access portal. Valid values are ENABLED and DISABLED.
sign_in_options ApplicationPortalOptionsSignInOptions
Sign-in options for the access portal. See sign_in_options below.
visibility str
Indicates whether this application is visible in the access portal. Valid values are ENABLED and DISABLED.
signInOptions Property Map
Sign-in options for the access portal. See sign_in_options below.
visibility String
Indicates whether this application is visible in the access portal. Valid values are ENABLED and DISABLED.

ApplicationPortalOptionsSignInOptions
, ApplicationPortalOptionsSignInOptionsArgs

Origin This property is required. string
Determines how IAM Identity Center navigates the user to the target application. Valid values are APPLICATION and IDENTITY_CENTER. If APPLICATION is set, IAM Identity Center redirects the customer to the configured application_url. If IDENTITY_CENTER is set, IAM Identity Center uses SAML identity-provider initiated authentication to sign the customer directly into a SAML-based application.
ApplicationUrl string
URL that accepts authentication requests for an application.
Origin This property is required. string
Determines how IAM Identity Center navigates the user to the target application. Valid values are APPLICATION and IDENTITY_CENTER. If APPLICATION is set, IAM Identity Center redirects the customer to the configured application_url. If IDENTITY_CENTER is set, IAM Identity Center uses SAML identity-provider initiated authentication to sign the customer directly into a SAML-based application.
ApplicationUrl string
URL that accepts authentication requests for an application.
origin This property is required. String
Determines how IAM Identity Center navigates the user to the target application. Valid values are APPLICATION and IDENTITY_CENTER. If APPLICATION is set, IAM Identity Center redirects the customer to the configured application_url. If IDENTITY_CENTER is set, IAM Identity Center uses SAML identity-provider initiated authentication to sign the customer directly into a SAML-based application.
applicationUrl String
URL that accepts authentication requests for an application.
origin This property is required. string
Determines how IAM Identity Center navigates the user to the target application. Valid values are APPLICATION and IDENTITY_CENTER. If APPLICATION is set, IAM Identity Center redirects the customer to the configured application_url. If IDENTITY_CENTER is set, IAM Identity Center uses SAML identity-provider initiated authentication to sign the customer directly into a SAML-based application.
applicationUrl string
URL that accepts authentication requests for an application.
origin This property is required. str
Determines how IAM Identity Center navigates the user to the target application. Valid values are APPLICATION and IDENTITY_CENTER. If APPLICATION is set, IAM Identity Center redirects the customer to the configured application_url. If IDENTITY_CENTER is set, IAM Identity Center uses SAML identity-provider initiated authentication to sign the customer directly into a SAML-based application.
application_url str
URL that accepts authentication requests for an application.
origin This property is required. String
Determines how IAM Identity Center navigates the user to the target application. Valid values are APPLICATION and IDENTITY_CENTER. If APPLICATION is set, IAM Identity Center redirects the customer to the configured application_url. If IDENTITY_CENTER is set, IAM Identity Center uses SAML identity-provider initiated authentication to sign the customer directly into a SAML-based application.
applicationUrl String
URL that accepts authentication requests for an application.

Import

Using pulumi import, import SSO Admin Application using the id. For example:

$ pulumi import aws:ssoadmin/application:Application example arn:aws:sso::123456789012:application/id-12345678
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
AWS Classic pulumi/pulumi-aws
License
Apache-2.0
Notes
This Pulumi package is based on the aws Terraform Provider.
AWS v6.76.0 published on Tuesday, Apr 8, 2025 by Pulumi
pulumi/pulumi-aws