Skip to main content

List permission sets

GET 
/permission-sets

Returns one page of the permission sets defined for your tenant, ordered by name.

A permission set is Prism's template for an AWS role: a name, a session duration, and the policies that role should carry. Defining one changes nothing in AWS; the role is only cut into an account when the permission set is assigned to a user or group for that account.

List items are summaries, not the full resource. Each entry reports how many policies of each kind are attached (managed_policies_count, inline_policies_count, and so on) rather than the policies themselves, which keeps a page small. Fetch GET /permission-sets/{id} when you need the actual ARNs, inline policy documents or attribute map.

One inconsistency to be ready for: the keys of the wrapper object are camelCase (permissionSets, pageSize, totalPages) while the keys inside each item are snake_case (session_duration, managed_policies_count). Both spellings below are exactly what goes over the wire.

Request​

Responses​

One page of permission set summaries. An empty page is still a 200.