---
title: Getting Started with Datadog
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > Infrastructure > Datadog Resource Catalog
---

# aws_sso_permission_set{% #aws_sso_permission_set %}

## `account_id`{% #account_id %}

**Type**: `STRING` 

## `attached_managed_policies`{% #attached_managed_policies %}

**Type**: `UNORDERED_LIST_STRUCT` **Provider name**: `AttachedManagedPolicies` **Description**: An array of the AttachedManagedPolicy data type object. 

- `arn`**Type**: `STRING`**Provider name**: `Arn`**Description**: The ARN of the Amazon Web Services managed policy. For more information about ARNs, see [Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces](https://docs.datadoghq.com/general/latest/gr/aws-arns-and-namespaces.html.md) in the Amazon Web Services General Reference.
- `name`**Type**: `STRING`**Provider name**: `Name`**Description**: The name of the Amazon Web Services managed policy.

## `created_date`{% #created_date %}

**Type**: `TIMESTAMP` **Provider name**: `CreatedDate` **Description**: The date that the permission set was created. 

## `customer_managed_policy_references`{% #customer_managed_policy_references %}

**Type**: `UNORDERED_LIST_STRUCT` **Provider name**: `CustomerManagedPolicyReferences` **Description**: Specifies the names and paths of the customer managed policies that you have attached to your permission set. 

- `name`**Type**: `STRING`**Provider name**: `Name`**Description**: The name of the IAM policy that you have configured in each account where you want to deploy your permission set.
- `path`**Type**: `STRING`**Provider name**: `Path`**Description**: The path to the IAM policy that you have configured in each account where you want to deploy your permission set. The default is `/`. For more information, see [Friendly names and paths](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-friendly-names) in the IAM User Guide.

## `description`{% #description %}

**Type**: `STRING` **Provider name**: `Description` **Description**: The description of the PermissionSet. 

## `inline_policy`{% #inline_policy %}

**Type**: `STRING` **Provider name**: `InlinePolicy` **Description**: The inline policy that is attached to the permission set.For `Length Constraints`, if a valid ARN is provided for a permission set, it is possible for an empty inline policy to be returned. 

## `name`{% #name %}

**Type**: `STRING` **Provider name**: `Name` **Description**: The name of the permission set. 

## `permission_set_arn`{% #permission_set_arn %}

**Type**: `STRING` **Provider name**: `PermissionSetArn` **Description**: The ARN of the permission set. For more information about ARNs, see [Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces](https://docs.datadoghq.com/general/latest/gr/aws-arns-and-namespaces.html.md) in the Amazon Web Services General Reference. 

## `permissions_boundary`{% #permissions_boundary %}

**Type**: `STRUCT` **Provider name**: `PermissionsBoundary` **Description**: The permissions boundary attached to the specified permission set. 

- `customer_managed_policy_reference`**Type**: `STRUCT`**Provider name**: `CustomerManagedPolicyReference`**Description**: Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each Amazon Web Services account where you want to deploy your permission set.
  - `name`**Type**: `STRING`**Provider name**: `Name`**Description**: The name of the IAM policy that you have configured in each account where you want to deploy your permission set.
  - `path`**Type**: `STRING`**Provider name**: `Path`**Description**: The path to the IAM policy that you have configured in each account where you want to deploy your permission set. The default is `/`. For more information, see [Friendly names and paths](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-friendly-names) in the IAM User Guide.
- `managed_policy_arn`**Type**: `STRING`**Provider name**: `ManagedPolicyArn`**Description**: The Amazon Web Services managed policy ARN that you want to attach to a permission set as a permissions boundary.

## `relay_state`{% #relay_state %}

**Type**: `STRING` **Provider name**: `RelayState` **Description**: Used to redirect users within the application during the federation authentication process. 

## `session_duration`{% #session_duration %}

**Type**: `STRING` **Provider name**: `SessionDuration` **Description**: The length of time that the application user sessions are valid for in the ISO-8601 standard. 

## `tags`{% #tags %}

**Type**: `UNORDERED_LIST_STRING`