Skip to content

put_permissions_boundary_to_permission_set

put_permissions_boundary_to_permission_set(
    instance_arn: InstanceArn,
    permission_set_arn: PermissionSetArn,
    permissions_boundary: PermissionsBoundary,
    *,
    config_overrides: Optional[SSOAdminClientConfig] = None,
) -> PutPermissionsBoundaryToPermissionSetResponse

Attaches an Amazon Web Services managed or customer managed policy to the specified PermissionSet as a permissions boundary.

Parameters:

  • instance_arn (InstanceArn) –

    The ARN of the IAM Identity Center instance under which the operation will be executed.

  • permission_set_arn (PermissionSetArn) –

    The ARN of the PermissionSet.

  • permissions_boundary (PermissionsBoundary) –

    The permissions boundary that you want to attach to a PermissionSet.

Raises:

  • AccessDeniedException –

    You do not have sufficient access to perform this action.

  • ConflictException –

    Occurs when a conflict with a previous successful write is detected. This generally occurs when the previous write did not have time to propagate to the host serving the current request. A retry (with appropriate backoff logic) is the recommended response to this exception.

  • InternalServerException –

    The request processing has failed because of an unknown error, exception, or failure with an internal server.

  • ResourceNotFoundException –

    Indicates that a requested resource is not found.

  • ThrottlingException –

    Indicates that the principal has crossed the throttling limits of the API operations.

  • ValidationException –

    The request failed because it contains a syntax error.

  • UnknownServiceError –

    The service returned an error code this client does not model.

Source code in docs_src/capo_sso_admin/_services/sso_admin.py
def put_permissions_boundary_to_permission_set(
    self,
    instance_arn: "capo_sso_admin.types.instance_arn.InstanceArn",
    permission_set_arn: "capo_sso_admin.types.permission_set_arn.PermissionSetArn",
    permissions_boundary: "capo_sso_admin.types.permissions_boundary.PermissionsBoundary",
    *,
    config_overrides: Optional[SSOAdminClientConfig] = None,
) -> "capo_sso_admin.types.put_permissions_boundary_to_permission_set_response.PutPermissionsBoundaryToPermissionSetResponse":
    """<p>Attaches an Amazon Web Services managed or customer managed policy to the specified <a>PermissionSet</a> as a permissions boundary.</p>

    Args:
        instance_arn: <p>The ARN of the IAM Identity Center instance under which the operation will be executed. </p>
        permission_set_arn: <p>The ARN of the <code>PermissionSet</code>.</p>
        permissions_boundary: <p>The permissions boundary that you want to attach to a <code>PermissionSet</code>.</p>

    Raises:
        capo_sso_admin.errors.access_denied_exception.AccessDeniedException: <p>You do not have sufficient access to perform this action.</p>
        capo_sso_admin.errors.conflict_exception.ConflictException: <p>Occurs when a conflict with a previous successful write is detected. This generally occurs when the previous write did not have time to propagate to the host serving the current request. A retry (with appropriate backoff logic) is the recommended response to this exception.</p>
        capo_sso_admin.errors.internal_server_exception.InternalServerException: <p>The request processing has failed because of an unknown error, exception, or failure with an internal server.</p>
        capo_sso_admin.errors.resource_not_found_exception.ResourceNotFoundException: <p>Indicates that a requested resource is not found.</p>
        capo_sso_admin.errors.throttling_exception.ThrottlingException: <p>Indicates that the principal has crossed the throttling limits of the API operations.</p>
        capo_sso_admin.errors.validation_exception.ValidationException: <p>The request failed because it contains a syntax error.</p>
        capo_sso_admin.errors.UnknownServiceError: The service returned an error code this client does not model.
    """

    def _handler(
        req: "OperationRequest[capo_sso_admin.types.put_permissions_boundary_to_permission_set_request.PutPermissionsBoundaryToPermissionSetRequest]",
    ) -> OperationResponse[
        "capo_sso_admin.types.put_permissions_boundary_to_permission_set_response.PutPermissionsBoundaryToPermissionSetResponse"
    ]:
        import capo_sso_admin._operations.swb_external_service.put_permissions_boundary_to_permission_set

        output, http_response = (
            capo_sso_admin._operations.swb_external_service.put_permissions_boundary_to_permission_set.put_permissions_boundary_to_permission_set(
                req.options, req.input
            )
        )
        return OperationResponse(output=output, response=http_response)

    interceptors_, options_ = self.operation_options(
        config_overrides, OperationLogging("PutPermissionsBoundaryToPermissionSet")
    )
    input_: capo_sso_admin.types.put_permissions_boundary_to_permission_set_request.PutPermissionsBoundaryToPermissionSetRequest = {
        "instance_arn": instance_arn,
        "permission_set_arn": permission_set_arn,
        "permissions_boundary": permissions_boundary,
    }

    response = execute_pipeline(
        OperationRequest(input=input_, options=options_),
        handler=_handler,
        interceptors=list(interceptors_),
    )
    response.response.close()
    return response.output