---
title: Getting Started with Datadog
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > Infrastructure > Datadog Resource Catalog
---

# aws_sso_permission_set{% #aws_sso_permission_set %}

## `account_id`{% #account_id %}

**Type**: `STRING`

## `attached_managed_policies`{% #attached_managed_policies %}

**Type**: `UNORDERED_LIST_STRUCT`**Provider name**: `AttachedManagedPolicies`**Description**: An array of the AttachedManagedPolicy data type object.

- `arn`**Type**: `STRING`**Provider name**: `Arn`**Description**: The ARN of the Amazon Web Services managed policy. For more information about ARNs, see [Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces](https://docs.datadoghq.com/general/latest/gr/aws-arns-and-namespaces.html) in the Amazon Web Services General Reference.
- `name`**Type**: `STRING`**Provider name**: `Name`**Description**: The name of the Amazon Web Services managed policy.

## `created_date`{% #created_date %}

**Type**: `TIMESTAMP`**Provider name**: `CreatedDate`**Description**: The date that the permission set was created.

## `customer_managed_policy_references`{% #customer_managed_policy_references %}

**Type**: `UNORDERED_LIST_STRUCT`**Provider name**: `CustomerManagedPolicyReferences`**Description**: Specifies the names and paths of the customer managed policies that you have attached to your permission set.

- `name`**Type**: `STRING`**Provider name**: `Name`**Description**: The name of the IAM policy that you have configured in each account where you want to deploy your permission set.
- `path`**Type**: `STRING`**Provider name**: `Path`**Description**: The path to the IAM policy that you have configured in each account where you want to deploy your permission set. The default is `/`. For more information, see [Friendly names and paths](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-friendly-names) in the IAM User Guide.

## `description`{% #description %}

**Type**: `STRING`**Provider name**: `Description`**Description**: The description of the PermissionSet.

## `inline_policy`{% #inline_policy %}

**Type**: `STRING`**Provider name**: `InlinePolicy`**Description**: The inline policy that is attached to the permission set.For `Length Constraints`, if a valid ARN is provided for a permission set, it is possible for an empty inline policy to be returned.

## `name`{% #name %}

**Type**: `STRING`**Provider name**: `Name`**Description**: The name of the permission set.

## `permission_set_arn`{% #permission_set_arn %}

**Type**: `STRING`**Provider name**: `PermissionSetArn`**Description**: The ARN of the permission set. For more information about ARNs, see [Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces](https://docs.datadoghq.com/general/latest/gr/aws-arns-and-namespaces.html) in the Amazon Web Services General Reference.

## `permissions_boundary`{% #permissions_boundary %}

**Type**: `STRUCT`**Provider name**: `PermissionsBoundary`**Description**: The permissions boundary attached to the specified permission set.

- `customer_managed_policy_reference`**Type**: `STRUCT`**Provider name**: `CustomerManagedPolicyReference`**Description**: Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each Amazon Web Services account where you want to deploy your permission set.
  - `name`**Type**: `STRING`**Provider name**: `Name`**Description**: The name of the IAM policy that you have configured in each account where you want to deploy your permission set.
  - `path`**Type**: `STRING`**Provider name**: `Path`**Description**: The path to the IAM policy that you have configured in each account where you want to deploy your permission set. The default is `/`. For more information, see [Friendly names and paths](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-friendly-names) in the IAM User Guide.
- `managed_policy_arn`**Type**: `STRING`**Provider name**: `ManagedPolicyArn`**Description**: The Amazon Web Services managed policy ARN that you want to attach to a permission set as a permissions boundary.

## `relay_state`{% #relay_state %}

**Type**: `STRING`**Provider name**: `RelayState`**Description**: Used to redirect users within the application during the federation authentication process.

## `session_duration`{% #session_duration %}

**Type**: `STRING`**Provider name**: `SessionDuration`**Description**: The length of time that the application user sessions are valid for in the ISO-8601 standard.

## `tags`{% #tags %}

**Type**: `UNORDERED_LIST_STRING`