aws-cdk-lib 2.142.1__py3-none-any.whl → 2.143.1__py3-none-any.whl

aws_cdk/aws_sso/__init__.py

@@ -49,11 +49,787 @@ from .. import (
     IInspectable as _IInspectable_c2943556,
     IResolvable as _IResolvable_da3f097b,
     ITaggable as _ITaggable_36806126,
+    ITaggableV2 as _ITaggableV2_4e6798f8,
     TagManager as _TagManager_0a598cb3,
     TreeInspector as _TreeInspector_488e0dd5,
 )
 
 
+@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+class CfnApplication(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_sso.CfnApplication",
+):
+    '''Creates an application in IAM Identity Center for the given application provider.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-application.html
+    :cloudformationResource: AWS::SSO::Application
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_sso as sso
+        
+        cfn_application = sso.CfnApplication(self, "MyCfnApplication",
+            application_provider_arn="applicationProviderArn",
+            instance_arn="instanceArn",
+            name="name",
+        
+            # the properties below are optional
+            description="description",
+            portal_options=sso.CfnApplication.PortalOptionsConfigurationProperty(
+                sign_in_options=sso.CfnApplication.SignInOptionsProperty(
+                    origin="origin",
+        
+                    # the properties below are optional
+                    application_url="applicationUrl"
+                ),
+                visibility="visibility"
+            ),
+            status="status",
+            tags=[CfnTag(
+                key="key",
+                value="value"
+            )]
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        application_provider_arn: builtins.str,
+        instance_arn: builtins.str,
+        name: builtins.str,
+        description: typing.Optional[builtins.str] = None,
+        portal_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApplication.PortalOptionsConfigurationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        status: typing.Optional[builtins.str] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param application_provider_arn: The ARN of the application provider for this application.
+        :param instance_arn: The ARN of the instance of IAM Identity Center that is configured with this application.
+        :param name: The name of the application.
+        :param description: The description of the application.
+        :param portal_options: A structure that describes the options for the access portal associated with this application.
+        :param status: The current status of the application in this instance of IAM Identity Center.
+        :param tags: Specifies tags to be attached to the application.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__1882af793991a2b06f4da60775b164d8785694f90e87227b4954cfd75eea83eb)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnApplicationProps(
+            application_provider_arn=application_provider_arn,
+            instance_arn=instance_arn,
+            name=name,
+            description=description,
+            portal_options=portal_options,
+            status=status,
+            tags=tags,
+        )
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__756574096955e2bcef2c96538adf5308085d83bf3bd8773ab5a103afd2c88998)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__6355b954b667198799a07400cfed9d2b006a0fb064f93e6394dff0d371c18fe4)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrApplicationArn")
+    def attr_application_arn(self) -> builtins.str:
+        '''The ARN of the application.
+
+        :cloudformationAttribute: ApplicationArn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrApplicationArn"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cdkTagManager")
+    def cdk_tag_manager(self) -> _TagManager_0a598cb3:
+        '''Tag Manager which manages the tags for this resource.'''
+        return typing.cast(_TagManager_0a598cb3, jsii.get(self, "cdkTagManager"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="applicationProviderArn")
+    def application_provider_arn(self) -> builtins.str:
+        '''The ARN of the application provider for this application.'''
+        return typing.cast(builtins.str, jsii.get(self, "applicationProviderArn"))
+
+    @application_provider_arn.setter
+    def application_provider_arn(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__c707449b4fef9672e313760f308fd576bc0ba85393db473a38bfcbacefb2bd06)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "applicationProviderArn", value)
+
+    @builtins.property
+    @jsii.member(jsii_name="instanceArn")
+    def instance_arn(self) -> builtins.str:
+        '''The ARN of the instance of IAM Identity Center that is configured with this application.'''
+        return typing.cast(builtins.str, jsii.get(self, "instanceArn"))
+
+    @instance_arn.setter
+    def instance_arn(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__80acd28f699e35c6569019561a9885fb33a687399127a98f7ef032e0f229ead2)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "instanceArn", value)
+
+    @builtins.property
+    @jsii.member(jsii_name="name")
+    def name(self) -> builtins.str:
+        '''The name of the application.'''
+        return typing.cast(builtins.str, jsii.get(self, "name"))
+
+    @name.setter
+    def name(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__23ad8dda9a55b908073f216b57023b2b16556e7d404354abb5cded800fbfad19)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "name", value)
+
+    @builtins.property
+    @jsii.member(jsii_name="description")
+    def description(self) -> typing.Optional[builtins.str]:
+        '''The description of the application.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "description"))
+
+    @description.setter
+    def description(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b70bd99865693cb4bce70da1b35fa7beb773464b6d85b3799ef393fbd0af0574)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "description", value)
+
+    @builtins.property
+    @jsii.member(jsii_name="portalOptions")
+    def portal_options(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApplication.PortalOptionsConfigurationProperty"]]:
+        '''A structure that describes the options for the access portal associated with this application.'''
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApplication.PortalOptionsConfigurationProperty"]], jsii.get(self, "portalOptions"))
+
+    @portal_options.setter
+    def portal_options(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApplication.PortalOptionsConfigurationProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__59b9af6ead80cc3b937e2b7fe70751b4964334b1a52da19352b8fc87ad7c8b40)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "portalOptions", value)
+
+    @builtins.property
+    @jsii.member(jsii_name="status")
+    def status(self) -> typing.Optional[builtins.str]:
+        '''The current status of the application in this instance of IAM Identity Center.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "status"))
+
+    @status.setter
+    def status(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__85a18facdd637743b1c0644e64da9a7f78c17fcafcc11c671955de3fd99f2ad3)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "status", value)
+
+    @builtins.property
+    @jsii.member(jsii_name="tags")
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''Specifies tags to be attached to the application.'''
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tags"))
+
+    @tags.setter
+    def tags(self, value: typing.Optional[typing.List[_CfnTag_f6864754]]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b93309bf67faa9d00d995b1c3cacabed71e582b5b2ae932439414536bde54a02)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "tags", value)
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_sso.CfnApplication.PortalOptionsConfigurationProperty",
+        jsii_struct_bases=[],
+        name_mapping={"sign_in_options": "signInOptions", "visibility": "visibility"},
+    )
+    class PortalOptionsConfigurationProperty:
+        def __init__(
+            self,
+            *,
+            sign_in_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnApplication.SignInOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+            visibility: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''A structure that describes the options for the portal associated with an application.
+
+            :param sign_in_options: A structure that describes the sign-in options for the access portal.
+            :param visibility: Indicates whether this application is visible in the access portal.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sso-application-portaloptionsconfiguration.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_sso as sso
+                
+                portal_options_configuration_property = sso.CfnApplication.PortalOptionsConfigurationProperty(
+                    sign_in_options=sso.CfnApplication.SignInOptionsProperty(
+                        origin="origin",
+                
+                        # the properties below are optional
+                        application_url="applicationUrl"
+                    ),
+                    visibility="visibility"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__0969f1ee3e1ee427fc6e8564ee61698e5879cc7b45bdeebbb656e2184e711f3e)
+                check_type(argname="argument sign_in_options", value=sign_in_options, expected_type=type_hints["sign_in_options"])
+                check_type(argname="argument visibility", value=visibility, expected_type=type_hints["visibility"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if sign_in_options is not None:
+                self._values["sign_in_options"] = sign_in_options
+            if visibility is not None:
+                self._values["visibility"] = visibility
+
+        @builtins.property
+        def sign_in_options(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApplication.SignInOptionsProperty"]]:
+            '''A structure that describes the sign-in options for the access portal.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sso-application-portaloptionsconfiguration.html#cfn-sso-application-portaloptionsconfiguration-signinoptions
+            '''
+            result = self._values.get("sign_in_options")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnApplication.SignInOptionsProperty"]], result)
+
+        @builtins.property
+        def visibility(self) -> typing.Optional[builtins.str]:
+            '''Indicates whether this application is visible in the access portal.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sso-application-portaloptionsconfiguration.html#cfn-sso-application-portaloptionsconfiguration-visibility
+            '''
+            result = self._values.get("visibility")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "PortalOptionsConfigurationProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_sso.CfnApplication.SignInOptionsProperty",
+        jsii_struct_bases=[],
+        name_mapping={"origin": "origin", "application_url": "applicationUrl"},
+    )
+    class SignInOptionsProperty:
+        def __init__(
+            self,
+            *,
+            origin: builtins.str,
+            application_url: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''A structure that describes the sign-in options for an application portal.
+
+            :param origin: This determines how IAM Identity Center navigates the user to the target application. It can be one of the following values: - ``APPLICATION`` : IAM Identity Center redirects the customer to the configured ``ApplicationUrl`` . - ``IDENTITY_CENTER`` : IAM Identity Center uses SAML identity-provider initiated authentication to sign the customer directly into a SAML-based application.
+            :param application_url: The URL that accepts authentication requests for an application. This is a required parameter if the ``Origin`` parameter is ``APPLICATION`` .
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sso-application-signinoptions.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_sso as sso
+                
+                sign_in_options_property = sso.CfnApplication.SignInOptionsProperty(
+                    origin="origin",
+                
+                    # the properties below are optional
+                    application_url="applicationUrl"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__8101af69aeff480caab8cecd79da061473f2fc9a270ca8954c86daf1a1c9edb4)
+                check_type(argname="argument origin", value=origin, expected_type=type_hints["origin"])
+                check_type(argname="argument application_url", value=application_url, expected_type=type_hints["application_url"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "origin": origin,
+            }
+            if application_url is not None:
+                self._values["application_url"] = application_url
+
+        @builtins.property
+        def origin(self) -> builtins.str:
+            '''This determines how IAM Identity Center navigates the user to the target application.
+
+            It can be one of the following values:
+
+            - ``APPLICATION`` : IAM Identity Center redirects the customer to the configured ``ApplicationUrl`` .
+            - ``IDENTITY_CENTER`` : IAM Identity Center uses SAML identity-provider initiated authentication to sign the customer directly into a SAML-based application.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sso-application-signinoptions.html#cfn-sso-application-signinoptions-origin
+            '''
+            result = self._values.get("origin")
+            assert result is not None, "Required property 'origin' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def application_url(self) -> typing.Optional[builtins.str]:
+            '''The URL that accepts authentication requests for an application.
+
+            This is a required parameter if the ``Origin`` parameter is ``APPLICATION`` .
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sso-application-signinoptions.html#cfn-sso-application-signinoptions-applicationurl
+            '''
+            result = self._values.get("application_url")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "SignInOptionsProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+
+@jsii.implements(_IInspectable_c2943556)
+class CfnApplicationAssignment(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_sso.CfnApplicationAssignment",
+):
+    '''A structure that describes an assignment of a principal to an application.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-applicationassignment.html
+    :cloudformationResource: AWS::SSO::ApplicationAssignment
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_sso as sso
+        
+        cfn_application_assignment = sso.CfnApplicationAssignment(self, "MyCfnApplicationAssignment",
+            application_arn="applicationArn",
+            principal_id="principalId",
+            principal_type="principalType"
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        application_arn: builtins.str,
+        principal_id: builtins.str,
+        principal_type: builtins.str,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param application_arn: The ARN of the application that has principals assigned.
+        :param principal_id: The unique identifier of the principal assigned to the application.
+        :param principal_type: The type of the principal assigned to the application.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__979032c6bbab2c8833e714d153fe0ed25e5ea6b8ae998fc88df825d8aa44068f)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnApplicationAssignmentProps(
+            application_arn=application_arn,
+            principal_id=principal_id,
+            principal_type=principal_type,
+        )
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__631b770102bc683f42e26416dd672e029d8998264b069387218ab50f180d599c)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__6958d8c33128077c3cdda85d802617762aa3660d15369e6b80e975c877c64659)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="applicationArn")
+    def application_arn(self) -> builtins.str:
+        '''The ARN of the application that has principals assigned.'''
+        return typing.cast(builtins.str, jsii.get(self, "applicationArn"))
+
+    @application_arn.setter
+    def application_arn(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__31ae6296e9e35e54186a4dc00aa843315f2b271fa1e587d0844325fbb7205e33)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "applicationArn", value)
+
+    @builtins.property
+    @jsii.member(jsii_name="principalId")
+    def principal_id(self) -> builtins.str:
+        '''The unique identifier of the principal assigned to the application.'''
+        return typing.cast(builtins.str, jsii.get(self, "principalId"))
+
+    @principal_id.setter
+    def principal_id(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__d359f14d921063d732cf35a9b393dcb95c8f3dae899d5107fbace012db6fbaee)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "principalId", value)
+
+    @builtins.property
+    @jsii.member(jsii_name="principalType")
+    def principal_type(self) -> builtins.str:
+        '''The type of the principal assigned to the application.'''
+        return typing.cast(builtins.str, jsii.get(self, "principalType"))
+
+    @principal_type.setter
+    def principal_type(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__7d7aa16c36ca93ae3f9d86cdbbc98ad214d487831d9bb9732f619ef623813782)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "principalType", value)
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_sso.CfnApplicationAssignmentProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "application_arn": "applicationArn",
+        "principal_id": "principalId",
+        "principal_type": "principalType",
+    },
+)
+class CfnApplicationAssignmentProps:
+    def __init__(
+        self,
+        *,
+        application_arn: builtins.str,
+        principal_id: builtins.str,
+        principal_type: builtins.str,
+    ) -> None:
+        '''Properties for defining a ``CfnApplicationAssignment``.
+
+        :param application_arn: The ARN of the application that has principals assigned.
+        :param principal_id: The unique identifier of the principal assigned to the application.
+        :param principal_type: The type of the principal assigned to the application.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-applicationassignment.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_sso as sso
+            
+            cfn_application_assignment_props = sso.CfnApplicationAssignmentProps(
+                application_arn="applicationArn",
+                principal_id="principalId",
+                principal_type="principalType"
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__2e99502b5c0c93849bd3c91f9cb83a46f5303bf4aea29d1929d7811fd2a1efe2)
+            check_type(argname="argument application_arn", value=application_arn, expected_type=type_hints["application_arn"])
+            check_type(argname="argument principal_id", value=principal_id, expected_type=type_hints["principal_id"])
+            check_type(argname="argument principal_type", value=principal_type, expected_type=type_hints["principal_type"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "application_arn": application_arn,
+            "principal_id": principal_id,
+            "principal_type": principal_type,
+        }
+
+    @builtins.property
+    def application_arn(self) -> builtins.str:
+        '''The ARN of the application that has principals assigned.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-applicationassignment.html#cfn-sso-applicationassignment-applicationarn
+        '''
+        result = self._values.get("application_arn")
+        assert result is not None, "Required property 'application_arn' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def principal_id(self) -> builtins.str:
+        '''The unique identifier of the principal assigned to the application.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-applicationassignment.html#cfn-sso-applicationassignment-principalid
+        '''
+        result = self._values.get("principal_id")
+        assert result is not None, "Required property 'principal_id' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def principal_type(self) -> builtins.str:
+        '''The type of the principal assigned to the application.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-applicationassignment.html#cfn-sso-applicationassignment-principaltype
+        '''
+        result = self._values.get("principal_type")
+        assert result is not None, "Required property 'principal_type' is missing"
+        return typing.cast(builtins.str, result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnApplicationAssignmentProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_sso.CfnApplicationProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "application_provider_arn": "applicationProviderArn",
+        "instance_arn": "instanceArn",
+        "name": "name",
+        "description": "description",
+        "portal_options": "portalOptions",
+        "status": "status",
+        "tags": "tags",
+    },
+)
+class CfnApplicationProps:
+    def __init__(
+        self,
+        *,
+        application_provider_arn: builtins.str,
+        instance_arn: builtins.str,
+        name: builtins.str,
+        description: typing.Optional[builtins.str] = None,
+        portal_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApplication.PortalOptionsConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        status: typing.Optional[builtins.str] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnApplication``.
+
+        :param application_provider_arn: The ARN of the application provider for this application.
+        :param instance_arn: The ARN of the instance of IAM Identity Center that is configured with this application.
+        :param name: The name of the application.
+        :param description: The description of the application.
+        :param portal_options: A structure that describes the options for the access portal associated with this application.
+        :param status: The current status of the application in this instance of IAM Identity Center.
+        :param tags: Specifies tags to be attached to the application.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-application.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_sso as sso
+            
+            cfn_application_props = sso.CfnApplicationProps(
+                application_provider_arn="applicationProviderArn",
+                instance_arn="instanceArn",
+                name="name",
+            
+                # the properties below are optional
+                description="description",
+                portal_options=sso.CfnApplication.PortalOptionsConfigurationProperty(
+                    sign_in_options=sso.CfnApplication.SignInOptionsProperty(
+                        origin="origin",
+            
+                        # the properties below are optional
+                        application_url="applicationUrl"
+                    ),
+                    visibility="visibility"
+                ),
+                status="status",
+                tags=[CfnTag(
+                    key="key",
+                    value="value"
+                )]
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__c2514f5693f02615ac7b916b565453bec3f3c9c79df28bdb7a6f6d323841c143)
+            check_type(argname="argument application_provider_arn", value=application_provider_arn, expected_type=type_hints["application_provider_arn"])
+            check_type(argname="argument instance_arn", value=instance_arn, expected_type=type_hints["instance_arn"])
+            check_type(argname="argument name", value=name, expected_type=type_hints["name"])
+            check_type(argname="argument description", value=description, expected_type=type_hints["description"])
+            check_type(argname="argument portal_options", value=portal_options, expected_type=type_hints["portal_options"])
+            check_type(argname="argument status", value=status, expected_type=type_hints["status"])
+            check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "application_provider_arn": application_provider_arn,
+            "instance_arn": instance_arn,
+            "name": name,
+        }
+        if description is not None:
+            self._values["description"] = description
+        if portal_options is not None:
+            self._values["portal_options"] = portal_options
+        if status is not None:
+            self._values["status"] = status
+        if tags is not None:
+            self._values["tags"] = tags
+
+    @builtins.property
+    def application_provider_arn(self) -> builtins.str:
+        '''The ARN of the application provider for this application.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-application.html#cfn-sso-application-applicationproviderarn
+        '''
+        result = self._values.get("application_provider_arn")
+        assert result is not None, "Required property 'application_provider_arn' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def instance_arn(self) -> builtins.str:
+        '''The ARN of the instance of IAM Identity Center that is configured with this application.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-application.html#cfn-sso-application-instancearn
+        '''
+        result = self._values.get("instance_arn")
+        assert result is not None, "Required property 'instance_arn' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def name(self) -> builtins.str:
+        '''The name of the application.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-application.html#cfn-sso-application-name
+        '''
+        result = self._values.get("name")
+        assert result is not None, "Required property 'name' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def description(self) -> typing.Optional[builtins.str]:
+        '''The description of the application.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-application.html#cfn-sso-application-description
+        '''
+        result = self._values.get("description")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def portal_options(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnApplication.PortalOptionsConfigurationProperty]]:
+        '''A structure that describes the options for the access portal associated with this application.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-application.html#cfn-sso-application-portaloptions
+        '''
+        result = self._values.get("portal_options")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnApplication.PortalOptionsConfigurationProperty]], result)
+
+    @builtins.property
+    def status(self) -> typing.Optional[builtins.str]:
+        '''The current status of the application in this instance of IAM Identity Center.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-application.html#cfn-sso-application-status
+        '''
+        result = self._values.get("status")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''Specifies tags to be attached to the application.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-application.html#cfn-sso-application-tags
+        '''
+        result = self._values.get("tags")
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnApplicationProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.implements(_IInspectable_c2943556)
 class CfnAssignment(
     _CfnResource_9df397a6,
@@ -327,57 +1103,220 @@ class CfnAssignmentProps:
         return typing.cast(builtins.str, result)
 
     @builtins.property
-    def principal_id(self) -> builtins.str:
-        '''An identifier for an object in IAM Identity Center, such as a user or group.
+    def principal_id(self) -> builtins.str:
+        '''An identifier for an object in IAM Identity Center, such as a user or group.
+
+        PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the `IAM Identity Center Identity Store API Reference <https://docs.aws.amazon.com//singlesignon/latest/IdentityStoreAPIReference/welcome.html>`_ .
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-assignment.html#cfn-sso-assignment-principalid
+        '''
+        result = self._values.get("principal_id")
+        assert result is not None, "Required property 'principal_id' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def principal_type(self) -> builtins.str:
+        '''The entity type for which the assignment will be created.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-assignment.html#cfn-sso-assignment-principaltype
+        '''
+        result = self._values.get("principal_type")
+        assert result is not None, "Required property 'principal_type' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def target_id(self) -> builtins.str:
+        '''TargetID is an AWS account identifier, (For example, 123456789012).
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-assignment.html#cfn-sso-assignment-targetid
+        '''
+        result = self._values.get("target_id")
+        assert result is not None, "Required property 'target_id' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def target_type(self) -> builtins.str:
+        '''The entity type for which the assignment will be created.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-assignment.html#cfn-sso-assignment-targettype
+        '''
+        result = self._values.get("target_type")
+        assert result is not None, "Required property 'target_type' is missing"
+        return typing.cast(builtins.str, result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnAssignmentProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
+@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+class CfnInstance(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_sso.CfnInstance",
+):
+    '''Creates an instance of IAM Identity Center for a standalone AWS account that is not managed by AWS Organizations or a member AWS account in an organization.
+
+    You can create only one instance per account and across all AWS Regions .
+
+    The CreateInstance request is rejected if the following apply:
+
+    - The instance is created within the organization management account.
+    - An instance already exists in the same account.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-instance.html
+    :cloudformationResource: AWS::SSO::Instance
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_sso as sso
+        
+        cfn_instance = sso.CfnInstance(self, "MyCfnInstance",
+            name="name",
+            tags=[CfnTag(
+                key="key",
+                value="value"
+            )]
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        name: typing.Optional[builtins.str] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param name: The name of the Identity Center instance.
+        :param tags: Specifies tags to be attached to the instance of IAM Identity Center.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b3490809ee3929963beefa80737fc3a806a477fd4b46a9ae6f32f7e0be13251f)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnInstanceProps(name=name, tags=tags)
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__99cda831f38994858fd7d3fa114976e29a359f4baaa292fcf2821c1bfd4929b2)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__dabb535aed1ee9738cb08205c2699a7f5799cd74346dadf0d087143917d220cc)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrIdentityStoreId")
+    def attr_identity_store_id(self) -> builtins.str:
+        '''The identifier of the identity store that is connected to the Identity Center instance.
+
+        :cloudformationAttribute: IdentityStoreId
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrIdentityStoreId"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrInstanceArn")
+    def attr_instance_arn(self) -> builtins.str:
+        '''The ARN of the Identity Center instance under which the operation will be executed.
 
-        PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the `IAM Identity Center Identity Store API Reference <https://docs.aws.amazon.com//singlesignon/latest/IdentityStoreAPIReference/welcome.html>`_ .
+        For more information about ARNs, see `Amazon Resource
+        Names (ARNs) and AWS Service Namespaces <https://docs.aws.amazon.com//general/latest/gr/aws-arns-and-namespaces.html>`_ in the *AWS General Reference* .
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-assignment.html#cfn-sso-assignment-principalid
+        :cloudformationAttribute: InstanceArn
         '''
-        result = self._values.get("principal_id")
-        assert result is not None, "Required property 'principal_id' is missing"
-        return typing.cast(builtins.str, result)
+        return typing.cast(builtins.str, jsii.get(self, "attrInstanceArn"))
 
     @builtins.property
-    def principal_type(self) -> builtins.str:
-        '''The entity type for which the assignment will be created.
+    @jsii.member(jsii_name="attrOwnerAccountId")
+    def attr_owner_account_id(self) -> builtins.str:
+        '''The AWS account ID number of the owner of the Identity Center instance.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-assignment.html#cfn-sso-assignment-principaltype
+        :cloudformationAttribute: OwnerAccountId
         '''
-        result = self._values.get("principal_type")
-        assert result is not None, "Required property 'principal_type' is missing"
-        return typing.cast(builtins.str, result)
+        return typing.cast(builtins.str, jsii.get(self, "attrOwnerAccountId"))
 
     @builtins.property
-    def target_id(self) -> builtins.str:
-        '''TargetID is an AWS account identifier, (For example, 123456789012).
+    @jsii.member(jsii_name="attrStatus")
+    def attr_status(self) -> builtins.str:
+        '''The current status of this Identity Center instance.
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-assignment.html#cfn-sso-assignment-targetid
+        :cloudformationAttribute: Status
         '''
-        result = self._values.get("target_id")
-        assert result is not None, "Required property 'target_id' is missing"
-        return typing.cast(builtins.str, result)
+        return typing.cast(builtins.str, jsii.get(self, "attrStatus"))
 
     @builtins.property
-    def target_type(self) -> builtins.str:
-        '''The entity type for which the assignment will be created.
+    @jsii.member(jsii_name="cdkTagManager")
+    def cdk_tag_manager(self) -> _TagManager_0a598cb3:
+        '''Tag Manager which manages the tags for this resource.'''
+        return typing.cast(_TagManager_0a598cb3, jsii.get(self, "cdkTagManager"))
 
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-assignment.html#cfn-sso-assignment-targettype
-        '''
-        result = self._values.get("target_type")
-        assert result is not None, "Required property 'target_type' is missing"
-        return typing.cast(builtins.str, result)
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
-    def __eq__(self, rhs: typing.Any) -> builtins.bool:
-        return isinstance(rhs, self.__class__) and rhs._values == self._values
+    @builtins.property
+    @jsii.member(jsii_name="name")
+    def name(self) -> typing.Optional[builtins.str]:
+        '''The name of the Identity Center instance.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "name"))
 
-    def __ne__(self, rhs: typing.Any) -> builtins.bool:
-        return not (rhs == self)
+    @name.setter
+    def name(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__29c733d6eb71eda7b1b7641f2d65e1793d14f904e3d13ebfb70320768423d391)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "name", value)
 
-    def __repr__(self) -> str:
-        return "CfnAssignmentProps(%s)" % ", ".join(
-            k + "=" + repr(v) for k, v in self._values.items()
-        )
+    @builtins.property
+    @jsii.member(jsii_name="tags")
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''Specifies tags to be attached to the instance of IAM Identity Center.'''
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tags"))
+
+    @tags.setter
+    def tags(self, value: typing.Optional[typing.List[_CfnTag_f6864754]]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__1d325fc6660cba7432138a31aa3aa63308801d12cd69a35aebde3fb2b2bd9481)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "tags", value)
 
 
 @jsii.implements(_IInspectable_c2943556)
@@ -851,6 +1790,80 @@ class CfnInstanceAccessControlAttributeConfigurationProps:
         )
 
 
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_sso.CfnInstanceProps",
+    jsii_struct_bases=[],
+    name_mapping={"name": "name", "tags": "tags"},
+)
+class CfnInstanceProps:
+    def __init__(
+        self,
+        *,
+        name: typing.Optional[builtins.str] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnInstance``.
+
+        :param name: The name of the Identity Center instance.
+        :param tags: Specifies tags to be attached to the instance of IAM Identity Center.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-instance.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_sso as sso
+            
+            cfn_instance_props = sso.CfnInstanceProps(
+                name="name",
+                tags=[CfnTag(
+                    key="key",
+                    value="value"
+                )]
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__0f634899cf67a8770f6832cba1a68a83d918d171183c520835eb3a482eebdc23)
+            check_type(argname="argument name", value=name, expected_type=type_hints["name"])
+            check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if name is not None:
+            self._values["name"] = name
+        if tags is not None:
+            self._values["tags"] = tags
+
+    @builtins.property
+    def name(self) -> typing.Optional[builtins.str]:
+        '''The name of the Identity Center instance.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-instance.html#cfn-sso-instance-name
+        '''
+        result = self._values.get("name")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
+        '''Specifies tags to be attached to the instance of IAM Identity Center.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sso-instance.html#cfn-sso-instance-tags
+        '''
+        result = self._values.get("tags")
+        return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnInstanceProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
 class CfnPermissionSet(
     _CfnResource_9df397a6,
@@ -1549,16 +2562,170 @@ class CfnPermissionSetProps:
 
 
 __all__ = [
+    "CfnApplication",
+    "CfnApplicationAssignment",
+    "CfnApplicationAssignmentProps",
+    "CfnApplicationProps",
     "CfnAssignment",
     "CfnAssignmentProps",
+    "CfnInstance",
     "CfnInstanceAccessControlAttributeConfiguration",
     "CfnInstanceAccessControlAttributeConfigurationProps",
+    "CfnInstanceProps",
     "CfnPermissionSet",
     "CfnPermissionSetProps",
 ]
 
 publication.publish()
 
+def _typecheckingstub__1882af793991a2b06f4da60775b164d8785694f90e87227b4954cfd75eea83eb(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    application_provider_arn: builtins.str,
+    instance_arn: builtins.str,
+    name: builtins.str,
+    description: typing.Optional[builtins.str] = None,
+    portal_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApplication.PortalOptionsConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    status: typing.Optional[builtins.str] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__756574096955e2bcef2c96538adf5308085d83bf3bd8773ab5a103afd2c88998(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__6355b954b667198799a07400cfed9d2b006a0fb064f93e6394dff0d371c18fe4(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__c707449b4fef9672e313760f308fd576bc0ba85393db473a38bfcbacefb2bd06(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__80acd28f699e35c6569019561a9885fb33a687399127a98f7ef032e0f229ead2(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__23ad8dda9a55b908073f216b57023b2b16556e7d404354abb5cded800fbfad19(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__b70bd99865693cb4bce70da1b35fa7beb773464b6d85b3799ef393fbd0af0574(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__59b9af6ead80cc3b937e2b7fe70751b4964334b1a52da19352b8fc87ad7c8b40(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnApplication.PortalOptionsConfigurationProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__85a18facdd637743b1c0644e64da9a7f78c17fcafcc11c671955de3fd99f2ad3(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__b93309bf67faa9d00d995b1c3cacabed71e582b5b2ae932439414536bde54a02(
+    value: typing.Optional[typing.List[_CfnTag_f6864754]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__0969f1ee3e1ee427fc6e8564ee61698e5879cc7b45bdeebbb656e2184e711f3e(
+    *,
+    sign_in_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApplication.SignInOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    visibility: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__8101af69aeff480caab8cecd79da061473f2fc9a270ca8954c86daf1a1c9edb4(
+    *,
+    origin: builtins.str,
+    application_url: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__979032c6bbab2c8833e714d153fe0ed25e5ea6b8ae998fc88df825d8aa44068f(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    application_arn: builtins.str,
+    principal_id: builtins.str,
+    principal_type: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__631b770102bc683f42e26416dd672e029d8998264b069387218ab50f180d599c(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__6958d8c33128077c3cdda85d802617762aa3660d15369e6b80e975c877c64659(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__31ae6296e9e35e54186a4dc00aa843315f2b271fa1e587d0844325fbb7205e33(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__d359f14d921063d732cf35a9b393dcb95c8f3dae899d5107fbace012db6fbaee(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__7d7aa16c36ca93ae3f9d86cdbbc98ad214d487831d9bb9732f619ef623813782(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__2e99502b5c0c93849bd3c91f9cb83a46f5303bf4aea29d1929d7811fd2a1efe2(
+    *,
+    application_arn: builtins.str,
+    principal_id: builtins.str,
+    principal_type: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__c2514f5693f02615ac7b916b565453bec3f3c9c79df28bdb7a6f6d323841c143(
+    *,
+    application_provider_arn: builtins.str,
+    instance_arn: builtins.str,
+    name: builtins.str,
+    description: typing.Optional[builtins.str] = None,
+    portal_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnApplication.PortalOptionsConfigurationProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    status: typing.Optional[builtins.str] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__ebef8d250e1dbc37b65303c039a5211da7116d20618441b3967d658d6503e2f7(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
@@ -1633,6 +2800,40 @@ def _typecheckingstub__af8b1b897ea9ab77a0f2e4bab0d57a02afda473ba2e2680b392d3403b
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__b3490809ee3929963beefa80737fc3a806a477fd4b46a9ae6f32f7e0be13251f(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    name: typing.Optional[builtins.str] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__99cda831f38994858fd7d3fa114976e29a359f4baaa292fcf2821c1bfd4929b2(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__dabb535aed1ee9738cb08205c2699a7f5799cd74346dadf0d087143917d220cc(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__29c733d6eb71eda7b1b7641f2d65e1793d14f904e3d13ebfb70320768423d391(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__1d325fc6660cba7432138a31aa3aa63308801d12cd69a35aebde3fb2b2bd9481(
+    value: typing.Optional[typing.List[_CfnTag_f6864754]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__9f7a7752ad192f44dab8a4f16ca8392acad24cb912eaff617dbf10c8149c7542(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
@@ -1705,6 +2906,14 @@ def _typecheckingstub__814fa18856a1f832fbf758087fb132fbc281321791aa0253818b3fa51
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__0f634899cf67a8770f6832cba1a68a83d918d171183c520835eb3a482eebdc23(
+    *,
+    name: typing.Optional[builtins.str] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__29742c4712f9aeed238f180c9db8677986b9e95f63644b8358d20bbe6f9f8c9d(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,