sso:CreatePermissionSet is a Write access-level action in the sso service. Grants permission to create a permission set
ARNs that sso:CreatePermissionSet can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants sso:CreatePermissionSet.
Filters access by the tags that are passed in the request
Filters access by the tag keys that are passed in the request
Filters access by the primary region of the IAM Identity Center instance
A minimal policy that allows sso:CreatePermissionSet. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowSsoCreatePermissionSet",
"Effect": "Allow",
"Action": "sso:CreatePermissionSet",
"Resource": "*"
}
]
}