ListAccountAssignmentsForPrincipal

Source: src/AWS/IdentityCenter/ListAccountAssignmentsForPrincipal.ts

Runtime binding for the ListAccountAssignmentsForPrincipal operation (IAM action sso:ListAccountAssignmentsForPrincipal), scoped to one Instance.

Lists every account assignment a user or group holds across the organization — “what can this principal access?” for access portals. Only valid on organization instances, called from the management account. The instance’s InstanceArn is injected from the binding. Provide the implementation with Effect.provide(AWS.IdentityCenter.ListAccountAssignmentsForPrincipalHttp).

Auditing Access

// init — bind the operation to the Identity Center instance
const listAccountAssignmentsForPrincipal = yield* AWS.IdentityCenter.ListAccountAssignmentsForPrincipal(instance);

// runtime
const { AccountAssignments } = yield* listAccountAssignmentsForPrincipal({
  PrincipalId: groupId,
  PrincipalType: "GROUP",
});