sso:ImportApplicationInstanceServiceProviderMetadata is a Write access-level action in the sso service. Grants permission to update the application instance by uploading an application SAML metadata file provided by the service provider
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
To use sso:ImportApplicationInstanceServiceProviderMetadata you may also need to grant:
A minimal policy that allows sso:ImportApplicationInstanceServiceProviderMetadata. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowSsoImportApplicationInstanceServiceProviderMetadata",
"Effect": "Allow",
"Action": "sso:ImportApplicationInstanceServiceProviderMetadata",
"Resource": "*"
}
]
}