Permission Sets

Reusable definitions of an AWS role, each a name, a session duration and the policies that role should carry. Defining one changes nothing in AWS by itself; it stays inert until it is assigned to a user or group for a particular account.

List permission sets

Returns one page of the permission sets defined for your tenant, ordered

Create a permission set

Defines a new permission set for your tenant.

Get a permission set

Returns one permission set in full: every attached AWS-managed policy

Replace a permission set

Replaces a permission set's definition and re-synchronises the IAM roles

Delete a permission set

Deletes a permission set definition from Prism.