ListAccountAssignments

Source: src/AWS/IdentityCenter/ListAccountAssignments.ts

Runtime binding for the ListAccountAssignments operation (IAM action sso:ListAccountAssignments), scoped to one Instance.

Lists who (users/groups) holds a permission set in an AWS account — the core query of an access-review Lambda. The instance’s InstanceArn is injected from the binding. Provide the implementation with Effect.provide(AWS.IdentityCenter.ListAccountAssignmentsHttp).

Auditing Access

// init — bind the operation to the Identity Center instance
const listAccountAssignments = yield* AWS.IdentityCenter.ListAccountAssignments(instance);

// runtime
const { AccountAssignments } = yield* listAccountAssignments({
  AccountId: accountId,
  PermissionSetArn: permissionSetArn,
});