Terjemahan disediakan oleh mesin penerjemah. Jika konten terjemahan yang diberikan bertentangan dengan versi bahasa Inggris aslinya, utamakan versi bahasa Inggris.

# Tindakan, sumber daya, dan kunci persyaratan untuk AWS Pusat Identitas IAM
<a name="list_awsiamidentitycenter"></a>

AWS Pusat Identitas IAM (awalan layanan:`sso`) menyediakan sumber daya khusus layanan, tindakan, dan kunci konteks kondisi berikut untuk digunakan dalam kebijakan izin IAM.

Referensi:
+ Pelajari cara [mengonfigurasi layanan ini](https://docs.aws.amazon.com/singlesignon/latest/userguide/).
+ Lihat daftar [Operasi API yang tersedia untuk layanan ini](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_Operations.html).
+ Pelajari cara mengamankan layanan ini dan sumber dayanya dengan [menggunakan kebijakan izin](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access.html) IAM.

**Topics**
+ [Tindakan yang didefinisikan oleh AWS Pusat Identitas IAM](#awsiamidentitycenter-actions-as-permissions)
+ [Jenis sumber daya yang ditentukan oleh AWS Pusat Identitas IAM](#awsiamidentitycenter-resources-for-iam-policies)
+ [Kunci kondisi untuk AWS Pusat Identitas IAM](#awsiamidentitycenter-policy-keys)

## Tindakan yang didefinisikan oleh AWS Pusat Identitas IAM
<a name="awsiamidentitycenter-actions-as-permissions"></a>

Anda dapat menyebutkan tindakan berikut dalam elemen `Action` pernyataan kebijakan IAM. Gunakan kebijakan untuk memberikan izin untuk melaksanakan operasi dalam AWS. Saat Anda menggunakan sebuah tindakan dalam sebuah kebijakan, Anda biasanya mengizinkan atau menolak akses ke operasi API atau perintah CLI dengan nama yang sama. Namun, dalam beberapa kasus, satu tindakan tunggal mengontrol akses ke lebih dari satu operasi. Atau, beberapa operasi memerlukan beberapa tindakan yang berbeda.

Kolom **tingkat akses** pada tabel Tindakan menjelaskan cara tindakan diklasifikasikan (Daftar, Baca, Manajemen izin, atau Penandaan). Klasifikasi ini dapat membantu Anda memahami tingkat akses yang diberikan tindakan saat Anda menggunakannya dalam kebijakan. Untuk informasi selengkapnya tentang tingkat akses, lihat [Tingkat akses dalam ringkasan kebijakan](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_understand-policy-summary-access-level-summaries.html).

Kolom **tipe sumber daya** pada tabel Tindakan menunjukkan apakah setiap tindakan mendukung izin tingkat sumber daya. Jika tidak ada nilai untuk kolom ini, Anda harus menentukan semua sumber daya (“\*”) yang berlaku kebijakan dalam `Resource` elemen pernyataan kebijakan Anda. Jika kolom mencantumkan jenis sumber daya, maka Anda dapat menyebutkan ARN dengan jenis tersebut dalam sebuah pernyataan dengan tindakan tersebut. Jika tindakan memiliki satu atau lebih sumber daya yang diperlukan, pemanggil harus memiliki izin untuk menggunakan tindakan dengan sumber daya tersebut. Sumber daya yang diperlukan ditunjukkan dalam tabel dengan tanda bintang (\*). Jika Anda membatasi akses sumber daya dengan `Resource` elemen dalam kebijakan IAM, Anda harus menyertakan ARN atau pola untuk setiap jenis sumber daya yang diperlukan. Beberapa tindakan mendukung berbagai jenis sumber daya. Jika jenis sumber daya opsional (tidak ditunjukkan sesuai kebutuhan), maka Anda dapat memilih untuk menggunakan salah satu jenis sumber daya opsional.

Kolom **Condition keys** pada tabel Actions menyertakan kunci yang dapat Anda tentukan dalam `Condition` elemen pernyataan kebijakan. Untuk informasi selengkapnya tentang kunci kondisi yang terkait dengan sumber daya untuk layanan, lihat kolom **Kunci kondisi** pada tabel Jenis sumber daya.

Kolom **Tindakan dependen** pada tabel Tindakan menunjukkan izin tambahan yang mungkin diperlukan untuk berhasil memanggil tindakan. Izin ini mungkin diperlukan selain izin untuk tindakan itu sendiri. Saat tindakan menentukan tindakan dependen, dependensi tersebut mungkin berlaku untuk sumber daya tambahan yang ditentukan untuk tindakan tersebut, bukan hanya sumber daya pertama yang tercantum dalam tabel.

**catatan**  
Kunci kondisi sumber daya tercantum dalam tabel [Jenis sumber daya](#awsiamidentitycenter-resources-for-iam-policies). Anda dapat menemukan tautan ke jenis sumber daya yang berlaku untuk tindakan di kolom **Jenis sumber daya (\*wajib)** pada tabel Tindakan. Jenis sumber daya dalam tabel Jenis sumber daya menyertakan kolom **Kunci kondisi**, yang merupakan kunci kondisi sumber daya yang berlaku untuk tindakan dalam tabel Tindakan.

Untuk detail tentang kolom dalam tabel berikut, lihat [Tabel tindakan](reference_policies_actions-resources-contextkeys.html#actions_table).


****  


- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_AddRegion.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_AddRegion.html) **
  - **Deskripsi:** Memberikan izin untuk menambahkan wilayah ke instans Pusat Identitas IAM
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance) 
  - **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion) 
  - **Tindakan bergantung:**  identitystore:AddRegion <br /> kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk menghubungkan direktori yang akan digunakan oleh AWS IAM Identity Center
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  ds:AuthorizeApplication <br /> identitystore:CreateIdentityStore <br /> kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk membuat asosiasi antara pengguna direktori atau grup dan profil
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_AttachCustomerManagedPolicyReferenceToPermissionSet.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_AttachCustomerManagedPolicyReferenceToPermissionSet.html) **
  - **Deskripsi:** Memberikan izin untuk melampirkan referensi kebijakan terkelola pelanggan ke set izin
  - **Tingkat akses:** Manajemen izin
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-PermissionSet](#awsiamidentitycenter-PermissionSet)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_AttachManagedPolicyToPermissionSet.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_AttachManagedPolicyToPermissionSet.html) **
  - **Deskripsi:** Memberikan izin untuk melampirkan kebijakan AWS terkelola ke set izin
  - **Tingkat akses:** Manajemen izin
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-PermissionSet](#awsiamidentitycenter-PermissionSet)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateAccountAssignment.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateAccountAssignment.html) **
  - **Deskripsi:** Memberikan izin untuk menetapkan akses ke Principal untuk yang ditentukan Akun AWS menggunakan set izin tertentu
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Account](#awsiamidentitycenter-Account)  / **Kunci syarat:**  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-PermissionSet](#awsiamidentitycenter-PermissionSet)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateApplication.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateApplication.html) **
  - **Deskripsi:** Memberikan izin untuk membuat aplikasi
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Application](#awsiamidentitycenter-Application)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-ApplicationProvider](#awsiamidentitycenter-ApplicationProvider)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-aws_RequestTag___TagKey_](#awsiamidentitycenter-aws_RequestTag___TagKey_) <br /> [#awsiamidentitycenter-aws_TagKeys](#awsiamidentitycenter-aws_TagKeys)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateApplicationAssignment.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateApplicationAssignment.html) **
  - **Deskripsi:** Memberikan izin untuk membuat tugas aplikasi
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Application](#awsiamidentitycenter-Application)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-sso_ApplicationAccount](#awsiamidentitycenter-sso_ApplicationAccount)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk menambahkan instance aplikasi ke AWS IAM Identity Center
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk menambahkan sertifikat baru untuk contoh aplikasi
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateInstance.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateInstance.html) **
  - **Deskripsi:** Memberikan izin untuk membuat instance pusat identitas
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  / **Tindakan bergantung:**  iam:CreateServiceLinkedRole <br /> identitystore:CreateIdentityStore <br /> organizations:DescribeOrganization 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-aws_RequestTag___TagKey_](#awsiamidentitycenter-aws_RequestTag___TagKey_) <br /> [#awsiamidentitycenter-aws_TagKeys](#awsiamidentitycenter-aws_TagKeys)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateInstanceAccessControlAttributeConfiguration.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateInstanceAccessControlAttributeConfiguration.html) **
  - **Deskripsi:** Memberikan izin untuk mengaktifkan instance untuk ABAC dan menentukan atribut
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance) 
  - **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion) 
  - **Tindakan bergantung:**  iam:AttachRolePolicy <br /> iam:CreateRole <br /> iam:DeleteRole <br /> iam:DeleteRolePolicy <br /> iam:DetachRolePolicy <br /> iam:GetRole <br /> iam:ListAttachedRolePolicies <br /> iam:ListRolePolicies <br /> iam:PutRolePolicy <br /> iam:UpdateAssumeRolePolicy <br /> kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk menambahkan instance aplikasi terkelola ke AWS IAM Identity Center
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreatePermissionSet.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreatePermissionSet.html) **
  - **Deskripsi:** Memberikan izin untuk membuat set izin
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-PermissionSet](#awsiamidentitycenter-PermissionSet)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-aws_RequestTag___TagKey_](#awsiamidentitycenter-aws_RequestTag___TagKey_) <br /> [#awsiamidentitycenter-aws_TagKeys](#awsiamidentitycenter-aws_TagKeys)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk membuat profil untuk instance aplikasi
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk membuat kepercayaan federasi di akun target
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateTrustedTokenIssuer.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateTrustedTokenIssuer.html) **
  - **Deskripsi:** Memberikan izin untuk membuat penerbit token tepercaya untuk sebuah instance
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-TrustedTokenIssuer](#awsiamidentitycenter-TrustedTokenIssuer)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-aws_RequestTag___TagKey_](#awsiamidentitycenter-aws_RequestTag___TagKey_) <br /> [#awsiamidentitycenter-aws_TagKeys](#awsiamidentitycenter-aws_TagKeys)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeleteAccountAssignment.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeleteAccountAssignment.html) **
  - **Deskripsi:** Memberikan izin untuk menghapus akses Principal dari yang ditentukan Akun AWS menggunakan set izin tertentu
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Account](#awsiamidentitycenter-Account)  / **Kunci syarat:**  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-PermissionSet](#awsiamidentitycenter-PermissionSet)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeleteApplication.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeleteApplication.html) **
  - **Deskripsi:** Memberikan izin untuk menghapus aplikasi
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Application](#awsiamidentitycenter-Application)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-sso_ApplicationAccount](#awsiamidentitycenter-sso_ApplicationAccount)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeleteApplicationAccessScope.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeleteApplicationAccessScope.html) **
  - **Deskripsi:** Memberikan izin untuk menghapus cakupan akses ke aplikasi
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Application](#awsiamidentitycenter-Application)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-sso_ApplicationAccount](#awsiamidentitycenter-sso_ApplicationAccount)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeleteApplicationAssignment.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeleteApplicationAssignment.html) **
  - **Deskripsi:** Memberikan izin untuk menghapus tugas aplikasi
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Application](#awsiamidentitycenter-Application)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-sso_ApplicationAccount](#awsiamidentitycenter-sso_ApplicationAccount)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeleteApplicationAuthenticationMethod.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeleteApplicationAuthenticationMethod.html) **
  - **Deskripsi:** Memberikan izin untuk menghapus metode otentikasi ke aplikasi
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Application](#awsiamidentitycenter-Application)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-sso_ApplicationAccount](#awsiamidentitycenter-sso_ApplicationAccount)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeleteApplicationGrant.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeleteApplicationGrant.html) **
  - **Deskripsi:** Memberikan izin untuk menghapus hibah dari aplikasi
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Application](#awsiamidentitycenter-Application)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-sso_ApplicationAccount](#awsiamidentitycenter-sso_ApplicationAccount)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk menghapus instance aplikasi
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk menghapus sertifikat yang tidak aktif atau kedaluwarsa dari instance aplikasi
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeleteInlinePolicyFromPermissionSet.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeleteInlinePolicyFromPermissionSet.html) **
  - **Deskripsi:** Memberikan izin untuk menghapus kebijakan inline dari set izin yang ditentukan
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-PermissionSet](#awsiamidentitycenter-PermissionSet)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeleteInstance.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeleteInstance.html) **
  - **Deskripsi:** Memberikan izin untuk menghapus instance pusat identitas
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance) 
  - **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion) 
  - **Tindakan bergantung:**  identitystore:DeleteIdentityStore 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeleteInstanceAccessControlAttributeConfiguration.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeleteInstanceAccessControlAttributeConfiguration.html) **
  - **Deskripsi:** Memberikan izin untuk menonaktifkan ABAC dan menghapus daftar atribut untuk instance
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance) 
  - **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion) 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk menghapus instance aplikasi terkelola
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeletePermissionSet.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeletePermissionSet.html) **
  - **Deskripsi:** Memberikan izin untuk menghapus set izin
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-PermissionSet](#awsiamidentitycenter-PermissionSet)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeletePermissionsBoundaryFromPermissionSet.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeletePermissionsBoundaryFromPermissionSet.html) **
  - **Deskripsi:** Memberikan izin untuk menghapus batas izin dari set izin
  - **Tingkat akses:** Manajemen izin
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-PermissionSet](#awsiamidentitycenter-PermissionSet)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk menghapus profil untuk instance aplikasi
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeleteTrustedTokenIssuer.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeleteTrustedTokenIssuer.html) **
  - **Deskripsi:** Memberikan izin untuk menghapus penerbit token tepercaya untuk sebuah instance
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-TrustedTokenIssuer](#awsiamidentitycenter-TrustedTokenIssuer) 
  - **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion) 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeAccountAssignmentCreationStatus.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeAccountAssignmentCreationStatus.html) **
  - **Deskripsi:** Memberikan izin untuk menjelaskan status permintaan pembuatan tugas
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance) 
  - **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion) 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeAccountAssignmentDeletionStatus.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeAccountAssignmentDeletionStatus.html) **
  - **Deskripsi:** Memberikan izin untuk menjelaskan status permintaan penghapusan tugas
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance) 
  - **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion) 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeApplication.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeApplication.html) **
  - **Deskripsi:** Memberikan izin untuk mendapatkan informasi tentang aplikasi
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Application](#awsiamidentitycenter-Application)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-sso_ApplicationAccount](#awsiamidentitycenter-sso_ApplicationAccount)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeApplicationAssignment.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeApplicationAssignment.html) **
  - **Deskripsi:** Memberikan izin untuk mengambil tugas aplikasi
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Application](#awsiamidentitycenter-Application)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-sso_ApplicationAccount](#awsiamidentitycenter-sso_ApplicationAccount)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeApplicationProvider.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeApplicationProvider.html) **
  - **Deskripsi:** Memberikan izin untuk mendeskripsikan penyedia aplikasi
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-ApplicationProvider](#awsiamidentitycenter-ApplicationProvider) 
  - **Kunci syarat:** 
  - **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeInstance.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeInstance.html) **
  - **Deskripsi:** Memberikan izin untuk mendapatkan informasi tentang instance pusat identitas
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance) 
  - **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion) 
  - **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeInstanceAccessControlAttributeConfiguration.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeInstanceAccessControlAttributeConfiguration.html) **
  - **Deskripsi:** Memberikan izin untuk mendapatkan daftar atribut yang digunakan oleh instance untuk ABAC
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance) 
  - **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion) 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribePermissionSet.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribePermissionSet.html) **
  - **Deskripsi:** Memberikan izin untuk menjelaskan set izin
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-PermissionSet](#awsiamidentitycenter-PermissionSet)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribePermissionSetProvisioningStatus.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribePermissionSetProvisioningStatus.html) **
  - **Deskripsi:** Memberikan izin untuk menjelaskan status permintaan Penyediaan Set Izin yang diberikan
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance) 
  - **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion) 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeRegion.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeRegion.html) **
  - **Deskripsi:** Memberikan izin untuk mengambil detail konfigurasi untuk wilayah instans Pusat Identitas IAM tertentu
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance) 
  - **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion) 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk mendapatkan wilayah tempat organisasi Anda mengaktifkan Pusat Identitas AWS IAM
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeTrustedTokenIssuer.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeTrustedTokenIssuer.html) **
  - **Deskripsi:** Memberikan izin untuk mendeskripsikan penerbit token tepercaya untuk sebuah instance
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-TrustedTokenIssuer](#awsiamidentitycenter-TrustedTokenIssuer) 
  - **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion) 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DetachCustomerManagedPolicyReferenceFromPermissionSet.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DetachCustomerManagedPolicyReferenceFromPermissionSet.html) **
  - **Deskripsi:** Memberikan izin untuk melepaskan referensi kebijakan terkelola pelanggan dari set izin
  - **Tingkat akses:** Manajemen izin
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-PermissionSet](#awsiamidentitycenter-PermissionSet)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DetachManagedPolicyFromPermissionSet.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DetachManagedPolicyFromPermissionSet.html) **
  - **Deskripsi:** Memberikan izin untuk melepaskan kebijakan AWS terkelola terlampir dari set izin yang ditentukan
  - **Tingkat akses:** Manajemen izin
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-PermissionSet](#awsiamidentitycenter-PermissionSet)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk memisahkan direktori yang akan digunakan oleh AWS IAM Identity Center
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  ds:UnauthorizeApplication <br /> identitystore:DeleteIdentityStore <br /> kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk memisahkan pengguna direktori atau grup dari profil
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetApplicationAccessScope.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetApplicationAccessScope.html) **
  - **Deskripsi:** Memberikan izin untuk mendapatkan ruang lingkup akses ke aplikasi
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Application](#awsiamidentitycenter-Application)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-sso_ApplicationAccount](#awsiamidentitycenter-sso_ApplicationAccount)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetApplicationAssignmentConfiguration.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetApplicationAssignmentConfiguration.html) **
  - **Deskripsi:** Memberikan izin untuk membaca konfigurasi tugas untuk aplikasi
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Application](#awsiamidentitycenter-Application)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-sso_ApplicationAccount](#awsiamidentitycenter-sso_ApplicationAccount)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetApplicationAuthenticationMethod.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetApplicationAuthenticationMethod.html) **
  - **Deskripsi:** Memberikan izin untuk mendapatkan metode otentikasi ke aplikasi
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Application](#awsiamidentitycenter-Application)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-sso_ApplicationAccount](#awsiamidentitycenter-sso_ApplicationAccount)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetApplicationGrant.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetApplicationGrant.html) **
  - **Deskripsi:** Memberikan izin untuk mendapatkan rincian tentang hibah milik aplikasi
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Application](#awsiamidentitycenter-Application)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-sso_ApplicationAccount](#awsiamidentitycenter-sso_ApplicationAccount)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk mengambil detail untuk instance aplikasi
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetApplicationSessionConfiguration.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetApplicationSessionConfiguration.html) **
  - **Deskripsi:** Memberikan izin untuk mendapatkan konfigurasi sesi untuk aplikasi
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Application](#awsiamidentitycenter-Application)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-sso_ApplicationAccount](#awsiamidentitycenter-sso_ApplicationAccount)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk mengambil detail template aplikasi
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetInlinePolicyForPermissionSet.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetInlinePolicyForPermissionSet.html) **
  - **Deskripsi:** Memberikan izin untuk mendapatkan kebijakan inline yang ditetapkan ke set izin
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-PermissionSet](#awsiamidentitycenter-PermissionSet)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk mengambil detail untuk instance aplikasi
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk mengambil pengaturan Manajemen Perangkat Mfa untuk direktori
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk mengambil rincian set izin
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetPermissionsBoundaryForPermissionSet.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetPermissionsBoundaryForPermissionSet.html) **
  - **Deskripsi:** Memberikan izin untuk mendapatkan batas izin untuk set izin
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-PermissionSet](#awsiamidentitycenter-PermissionSet)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk mengambil profil untuk instance aplikasi
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk memeriksa apakah Pusat AWS Identitas IAM diaktifkan
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk mengambil konfigurasi bersama untuk instance SSO saat ini
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk mengambil konfigurasi untuk instance SSO saat ini
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk mengambil kepercayaan federasi di akun target
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk memperbarui instance aplikasi dengan mengunggah file metadata SAMP aplikasi yang disediakan oleh penyedia layanan
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListAccountAssignmentCreationStatus.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListAccountAssignmentCreationStatus.html) **
  - **Deskripsi:** Memberikan izin untuk mencantumkan status permintaan pembuatan Akun AWS tugas untuk instance SSO tertentu
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance) 
  - **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion) 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListAccountAssignmentDeletionStatus.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListAccountAssignmentDeletionStatus.html) **
  - **Deskripsi:** Memberikan izin untuk mencantumkan status permintaan penghapusan Akun AWS tugas untuk instance SSO tertentu
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance) 
  - **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion) 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListAccountAssignments.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListAccountAssignments.html) **
  - **Deskripsi:** Memberikan izin untuk membuat daftar penerima tugas yang ditentukan Akun AWS dengan set izin yang ditentukan
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Account](#awsiamidentitycenter-Account)  / **Kunci syarat:**  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-PermissionSet](#awsiamidentitycenter-PermissionSet)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListAccountAssignmentsForPrincipal.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListAccountAssignmentsForPrincipal.html) **
  - **Deskripsi:** Memberikan izin untuk membuat daftar akun yang ditetapkan ke pengguna atau grup
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance) 
  - **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion) 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListAccountsForProvisionedPermissionSet.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListAccountsForProvisionedPermissionSet.html) **
  - **Deskripsi:** Memberikan izin untuk mencantumkan semua AWS akun tempat set izin yang ditentukan disediakan
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-PermissionSet](#awsiamidentitycenter-PermissionSet)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplicationAccessScopes.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplicationAccessScopes.html) **
  - **Deskripsi:** Memberikan izin untuk membuat daftar cakupan akses ke aplikasi
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Application](#awsiamidentitycenter-Application)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-sso_ApplicationAccount](#awsiamidentitycenter-sso_ApplicationAccount)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplicationAssignments.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplicationAssignments.html) **
  - **Deskripsi:** Memberikan izin untuk membuat daftar tugas aplikasi
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Application](#awsiamidentitycenter-Application)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-sso_ApplicationAccount](#awsiamidentitycenter-sso_ApplicationAccount)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplicationAssignmentsForPrincipal.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplicationAssignmentsForPrincipal.html) **
  - **Deskripsi:** Memberikan izin untuk membuat daftar aplikasi yang ditugaskan ke pengguna atau grup
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-sso_ApplicationAccount](#awsiamidentitycenter-sso_ApplicationAccount)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplicationAuthenticationMethods.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplicationAuthenticationMethods.html) **
  - **Deskripsi:** Memberikan izin untuk mencantumkan metode otentikasi ke aplikasi
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Application](#awsiamidentitycenter-Application)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-sso_ApplicationAccount](#awsiamidentitycenter-sso_ApplicationAccount)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplicationGrants.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplicationGrants.html) **
  - **Deskripsi:** Memberikan izin untuk membuat daftar hibah dari aplikasi
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Application](#awsiamidentitycenter-Application)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-sso_ApplicationAccount](#awsiamidentitycenter-sso_ApplicationAccount)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk mengambil semua sertifikat untuk contoh aplikasi tertentu
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk mengambil semua instance aplikasi
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt <br /> sso:GetApplicationInstance 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplicationProviders.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplicationProviders.html) **
  - **Deskripsi:** Memberikan izin untuk membuat daftar penyedia aplikasi
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-ApplicationProvider](#awsiamidentitycenter-ApplicationProvider) 
  - **Kunci syarat:** 
  - **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk mengambil semua templat aplikasi yang didukung
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  sso:GetApplicationTemplate 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplications.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplications.html) **
  - **Deskripsi:** Memberikan izin untuk mengambil semua aplikasi yang terkait dengan instance IAM Identity Center
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListCustomerManagedPolicyReferencesInPermissionSet.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListCustomerManagedPolicyReferencesInPermissionSet.html) **
  - **Deskripsi:** Memberikan izin untuk mencantumkan referensi kebijakan terkelola pelanggan yang dilampirkan ke set izin
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-PermissionSet](#awsiamidentitycenter-PermissionSet)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk mengambil detail tentang direktori yang terhubung ke Pusat Identitas AWS IAM
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListInstances.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListInstances.html) **
  - **Deskripsi:** Memberikan izin untuk membuat daftar Instans SSO yang dapat diakses oleh penelepon
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListManagedPoliciesInPermissionSet.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListManagedPoliciesInPermissionSet.html) **
  - **Deskripsi:** Memberikan izin untuk mencantumkan kebijakan AWS terkelola yang dilampirkan ke set izin tertentu
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-PermissionSet](#awsiamidentitycenter-PermissionSet)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListPermissionSetProvisioningStatus.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListPermissionSetProvisioningStatus.html) **
  - **Deskripsi:** Memberikan izin untuk mencantumkan status permintaan Penyediaan Set Izin untuk instance SSO tertentu
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance) 
  - **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion) 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListPermissionSets.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListPermissionSets.html) **
  - **Deskripsi:** Memberikan izin untuk mengambil semua set izin
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance) 
  - **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion) 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListPermissionSetsProvisionedToAccount.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListPermissionSetsProvisionedToAccount.html) **
  - **Deskripsi:** Memberikan izin untuk mencantumkan semua set izin yang disediakan ke yang ditentukan Akun AWS
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Account](#awsiamidentitycenter-Account)  / **Kunci syarat:**  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk mengambil direktori pengguna atau grup yang terkait dengan profil
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk mengambil semua profil untuk instance aplikasi
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt <br /> sso:GetProfile 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListRegions.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListRegions.html) **
  - **Deskripsi:** Memberikan izin untuk mencantumkan semua wilayah yang dikonfigurasi untuk instans Pusat Identitas IAM
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance) 
  - **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion) 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListTagsForResource.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListTagsForResource.html) **
  - **Deskripsi:** Memberikan izin untuk membuat daftar tag yang dilampirkan ke sumber daya tertentu
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Application](#awsiamidentitycenter-Application)  / **Kunci syarat:**  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-PermissionSet](#awsiamidentitycenter-PermissionSet)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-TrustedTokenIssuer](#awsiamidentitycenter-TrustedTokenIssuer)  / **Kunci syarat:**  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListTrustedTokenIssuers.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListTrustedTokenIssuers.html) **
  - **Deskripsi:** Memberikan izin untuk mencantumkan penerbit token tepercaya untuk sebuah instance
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance) 
  - **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion) 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ProvisionPermissionSet.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ProvisionPermissionSet.html) **
  - **Deskripsi:** Memberikan izin untuk memberikan izin tertentu yang ditetapkan ke target yang ditentukan
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Account](#awsiamidentitycenter-Account)  / **Kunci syarat:**  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-PermissionSet](#awsiamidentitycenter-PermissionSet)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_PutApplicationAccessScope.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_PutApplicationAccessScope.html) **
  - **Deskripsi:** Memberikan izin ke create/update ruang lingkup akses ke aplikasi
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Application](#awsiamidentitycenter-Application)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-sso_ApplicationAccount](#awsiamidentitycenter-sso_ApplicationAccount)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_PutApplicationAssignmentConfiguration.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_PutApplicationAssignmentConfiguration.html) **
  - **Deskripsi:** Memberikan izin untuk menambahkan konfigurasi tugas ke aplikasi
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Application](#awsiamidentitycenter-Application)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-sso_ApplicationAccount](#awsiamidentitycenter-sso_ApplicationAccount)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_PutApplicationAuthenticationMethod.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_PutApplicationAuthenticationMethod.html) **
  - **Deskripsi:** Memberikan izin untuk metode create/update otentikasi ke aplikasi
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Application](#awsiamidentitycenter-Application)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-sso_ApplicationAccount](#awsiamidentitycenter-sso_ApplicationAccount)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_PutApplicationGrant.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_PutApplicationGrant.html) **
  - **Deskripsi:** Memberikan izin untuk create/update hibah untuk aplikasi
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Application](#awsiamidentitycenter-Application)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-sso_ApplicationAccount](#awsiamidentitycenter-sso_ApplicationAccount)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_PutApplicationSessionConfiguration.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_PutApplicationSessionConfiguration.html) **
  - **Deskripsi:** Memberikan izin untuk menempatkan konfigurasi sesi untuk aplikasi
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Application](#awsiamidentitycenter-Application)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-sso_ApplicationAccount](#awsiamidentitycenter-sso_ApplicationAccount)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_PutInlinePolicyToPermissionSet.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_PutInlinePolicyToPermissionSet.html) **
  - **Deskripsi:** Memberikan izin untuk melampirkan kebijakan inline IAM ke set izin
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-PermissionSet](#awsiamidentitycenter-PermissionSet)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk menempatkan pengaturan Manajemen Perangkat Mfa untuk direktori
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_PutPermissionsBoundaryToPermissionSet.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_PutPermissionsBoundaryToPermissionSet.html) **
  - **Deskripsi:** Memberikan izin untuk menambahkan batas izin ke set izin
  - **Tingkat akses:** Manajemen izin
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-PermissionSet](#awsiamidentitycenter-PermissionSet)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk menambahkan kebijakan ke set izin
  - **Tingkat akses:** Manajemen izin
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_RemoveRegion.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_RemoveRegion.html) **
  - **Deskripsi:** Memberikan izin untuk menghapus wilayah dari instans Pusat Identitas IAM
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance) 
  - **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion) 
  - **Tindakan bergantung:**  identitystore:RemoveRegion <br /> kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk mencari grup dalam direktori terkait
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  ds:DescribeDirectories <br /> kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk mencari pengguna dalam direktori terkait
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  ds:DescribeDirectories <br /> kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk menginisialisasi AWS IAM Identity Center
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt <br /> kms:DescribeKey <br /> kms:Encrypt <br /> kms:GenerateDataKeyWithoutPlaintext <br /> organizations:DescribeOrganization <br /> organizations:EnableAWSServiceAccess 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_TagResource.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_TagResource.html) **
  - **Deskripsi:** Memberikan izin untuk mengaitkan satu set tag dengan sumber daya tertentu
  - **Tingkat akses:** Penandaan
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Application](#awsiamidentitycenter-Application)  / **Kunci syarat:**  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-PermissionSet](#awsiamidentitycenter-PermissionSet)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-TrustedTokenIssuer](#awsiamidentitycenter-TrustedTokenIssuer)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-aws_RequestTag___TagKey_](#awsiamidentitycenter-aws_RequestTag___TagKey_) <br /> [#awsiamidentitycenter-aws_TagKeys](#awsiamidentitycenter-aws_TagKeys)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_UntagResource.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_UntagResource.html) **
  - **Deskripsi:** Memberikan izin untuk memisahkan satu set tag dari sumber daya tertentu
  - **Tingkat akses:** Penandaan
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Application](#awsiamidentitycenter-Application)  / **Kunci syarat:**  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-PermissionSet](#awsiamidentitycenter-PermissionSet)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-TrustedTokenIssuer](#awsiamidentitycenter-TrustedTokenIssuer)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-aws_TagKeys](#awsiamidentitycenter-aws_TagKeys)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_UpdateApplication.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_UpdateApplication.html) **
  - **Deskripsi:** Memberikan izin untuk memperbarui aplikasi
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Application](#awsiamidentitycenter-Application)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awsiamidentitycenter-sso_ApplicationAccount](#awsiamidentitycenter-sso_ApplicationAccount)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk menetapkan sertifikat sebagai sertifikat aktif untuk contoh aplikasi ini
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk memperbarui data tampilan instance aplikasi
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk memperbarui konfigurasi respons federasi untuk instance aplikasi
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk memperbarui konfigurasi skema respons federasi untuk instance aplikasi
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk memperbarui detail keamanan untuk instance aplikasi
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk memperbarui konfigurasi terkait penyedia layanan untuk instance aplikasi
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk memperbarui status instance aplikasi
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_UpdateInstance.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_UpdateInstance.html) **
  - **Deskripsi:** Memberikan izin untuk memperbarui instance pusat identitas
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance) 
  - **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion) 
  - **Tindakan bergantung:**  identitystore:UpdateIdentityStore <br /> kms:Decrypt <br /> kms:DescribeKey <br /> kms:Encrypt <br /> kms:GenerateDataKeyWithoutPlaintext 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_UpdateInstanceAccessControlAttributeConfiguration.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_UpdateInstanceAccessControlAttributeConfiguration.html) **
  - **Deskripsi:** Memberikan izin untuk memperbarui atribut yang akan digunakan dengan instance untuk ABAC
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance) 
  - **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion) 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk memperbarui status instance aplikasi terkelola
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_UpdatePermissionSet.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_UpdatePermissionSet.html) **
  - **Deskripsi:** Memberikan izin untuk memperbarui set izin
  - **Tingkat akses:** Manajemen izin
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-Instance](#awsiamidentitycenter-Instance)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:**  kms:Decrypt 
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-PermissionSet](#awsiamidentitycenter-PermissionSet)  / **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk memperbarui profil untuk instance aplikasi
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk memperbarui konfigurasi untuk instance SSO saat ini
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) **
  - **Deskripsi:** Memberikan izin untuk memperbarui kepercayaan federasi di akun target
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:**  kms:Decrypt 

- **  [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_UpdateTrustedTokenIssuer.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_UpdateTrustedTokenIssuer.html) **
  - **Deskripsi:** Memberikan izin untuk memperbarui penerbit token tepercaya untuk sebuah instance
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awsiamidentitycenter-TrustedTokenIssuer](#awsiamidentitycenter-TrustedTokenIssuer) 
  - **Kunci syarat:**  [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion) 
  - **Tindakan bergantung:**  kms:Decrypt 



## Jenis sumber daya yang ditentukan oleh AWS Pusat Identitas IAM
<a name="awsiamidentitycenter-resources-for-iam-policies"></a>

Jenis sumber daya berikut ditentukan oleh layanan ini dan dapat digunakan dalam elemen `Resource` pernyataan kebijakan izin IAM. Setiap tindakan dalam [Tabel tindakan](#awsiamidentitycenter-actions-as-permissions) mengidentifikasi jenis sumber daya yang dapat ditentukan dengan tindakan tersebut. Jenis sumber daya juga dapat menentukan kunci kondisi mana yang dapat Anda sertakan dalam kebijakan. Tombol-tombol ini ditampilkan di kolom terakhir dari tabel Jenis sumber daya. Untuk detail tentang kolom dalam tabel berikut, lihat [Tabel tipe sumber daya](reference_policies_actions-resources-contextkeys.html#resources_table).


****  

| Jenis sumber daya | ARN | Kunci syarat | 
| --- | --- | --- | 
|   [https://docs.aws.amazon.com/singlesignon/latest/userguide/permissionsetsconcept.html](https://docs.aws.amazon.com/singlesignon/latest/userguide/permissionsetsconcept.html)  |  arn:${Partition}:sso:::permissionSet/${InstanceId}/${PermissionSetId}  |  [#awsiamidentitycenter-aws_ResourceTag___TagKey_](#awsiamidentitycenter-aws_ResourceTag___TagKey_) <br /> [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  | 
|   [https://docs.aws.amazon.com/singlesignon/latest/userguide/manage-your-accounts.html](https://docs.aws.amazon.com/singlesignon/latest/userguide/manage-your-accounts.html)  |  arn:${Partition}:sso:::account/${AccountId}  |  | 
|   [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_InstanceMetadata.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_InstanceMetadata.html)  |  arn:${Partition}:sso:::instance/${InstanceId}  |  [#awsiamidentitycenter-aws_ResourceTag___TagKey_](#awsiamidentitycenter-aws_ResourceTag___TagKey_) <br /> [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  | 
|   [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_Application.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_Application.html)  |  arn:${Partition}:sso::${AccountId}:application/${InstanceId}/${ApplicationId}  |  [#awsiamidentitycenter-aws_ResourceTag___TagKey_](#awsiamidentitycenter-aws_ResourceTag___TagKey_) <br /> [#awsiamidentitycenter-sso_ApplicationAccount](#awsiamidentitycenter-sso_ApplicationAccount) <br /> [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  | 
|   [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_TrustedTokenIssuerMetadata.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_TrustedTokenIssuerMetadata.html)  |  arn:${Partition}:sso::${AccountId}:trustedTokenIssuer/${InstanceId}/${TrustedTokenIssuerId}  |  [#awsiamidentitycenter-aws_ResourceTag___TagKey_](#awsiamidentitycenter-aws_ResourceTag___TagKey_) <br /> [#awsiamidentitycenter-sso_PrimaryRegion](#awsiamidentitycenter-sso_PrimaryRegion)  | 
|   [https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ApplicationProvider.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ApplicationProvider.html)  |  arn:${Partition}:sso::aws:applicationProvider/${ApplicationProviderId}  |  | 

## Kunci kondisi untuk AWS Pusat Identitas IAM
<a name="awsiamidentitycenter-policy-keys"></a>

AWS IAM Identity Center mendefinisikan kunci kondisi berikut yang dapat digunakan dalam `Condition` elemen kebijakan IAM. Anda dapat menggunakan kunci ini untuk menyempurnakan syarat lebih lanjut saat pernyataan kebijakan berlaku. Untuk detail tentang kolom dalam tabel berikut, lihat [Tabel tombol kondisi](reference_policies_actions-resources-contextkeys.html#context_keys_table).

Untuk melihat kunci kondisi global yang tersedia untuk semua layanan, lihat [kunci konteks kondisi AWS global](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html).


****  

| Kunci syarat | Deskripsi | Jenis | 
| --- | --- | --- | 
|   [https://docs.aws.amazon.com/singlesignon/latest/userguide/tagging.html](https://docs.aws.amazon.com/singlesignon/latest/userguide/tagging.html)  | Filter akses berdasarkan tanda yang diberikan dalam permintaan | String | 
|   [https://docs.aws.amazon.com/singlesignon/latest/userguide/tagging.html](https://docs.aws.amazon.com/singlesignon/latest/userguide/tagging.html)  | Filter akses dengan tanda yang terkait dengan sumber daya | String | 
|   [https://docs.aws.amazon.com/singlesignon/latest/userguide/tagging.html](https://docs.aws.amazon.com/singlesignon/latest/userguide/tagging.html)  | Filter akses berdasarkan kunci tanda yang diberikan dalam permintaan | ArrayOfString | 
|   [https://docs.aws.amazon.com/singlesignon/latest/userguide/API_Application.html](https://docs.aws.amazon.com/singlesignon/latest/userguide/API_Application.html)  | Memfilter akses oleh ARN dari aplikasi IAM Identity Center | ARN | 
|   [https://docs.aws.amazon.com/singlesignon/latest/userguide/API_InstanceMetadata.html](https://docs.aws.amazon.com/singlesignon/latest/userguide/API_InstanceMetadata.html)  | Memfilter akses oleh ARN dari instans Pusat Identitas IAM | ARN | 
|   [https://docs.aws.amazon.com/singlesignon/latest/userguide/API_Application.html](https://docs.aws.amazon.com/singlesignon/latest/userguide/API_Application.html)  | Memfilter akses oleh akun yang membuat aplikasi. Kunci kondisi ini tidak didukung untuk aplikasi SAFL yang dikelola pelanggan | String | 
|   [https://docs.aws.amazon.com/singlesignon/latest/userguide/API_InstanceMetadata.html](https://docs.aws.amazon.com/singlesignon/latest/userguide/API_InstanceMetadata.html)  | Memfilter akses berdasarkan wilayah utama instans Pusat Identitas IAM | String |