# Data retrieval APIs for AWS IAM Identity Center
<a name="awsiamidentitycenter"></a>

AWS IAM Identity Center provides the following APIs for data retrieval.


****  

| Actions | Description | Access level | 
| --- | --- | --- | 
| <a name="sso-DescribeAccountAssignmentCreationStatus"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeAccountAssignmentCreationStatus.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeAccountAssignmentCreationStatus.html) | Describe the status of the assignment creation request | Read | 
| <a name="sso-DescribeAccountAssignmentDeletionStatus"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeAccountAssignmentDeletionStatus.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeAccountAssignmentDeletionStatus.html) | Describe the status of an assignment deletion request | Read | 
| <a name="sso-DescribeApplication"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeApplication.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeApplication.html) | Obtain information about an application | Read | 
| <a name="sso-DescribeApplicationAssignment"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeApplicationAssignment.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeApplicationAssignment.html) | Retrieve an application assignment | Read | 
| <a name="sso-DescribeApplicationProvider"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeApplicationProvider.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeApplicationProvider.html) | Describe an application provider | Read | 
| <a name="sso-DescribeInstance"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeInstance.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeInstance.html) | Obtain information about an identity center instance | Read | 
| <a name="sso-DescribeInstanceAccessControlAttributeConfiguration"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeInstanceAccessControlAttributeConfiguration.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeInstanceAccessControlAttributeConfiguration.html) | Get the list of attributes used by the instance for ABAC | Read | 
| <a name="sso-DescribePermissionSet"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribePermissionSet.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribePermissionSet.html) | Describe a permission set | Read | 
| <a name="sso-DescribePermissionSetProvisioningStatus"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribePermissionSetProvisioningStatus.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribePermissionSetProvisioningStatus.html) | Describe the status for the given Permission Set Provisioning request | Read | 
| <a name="sso-DescribeRegion"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeRegion.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeRegion.html) | Retrieve configuration details for a specific IAM Identity Center instance region | Read | 
| <a name="sso-DescribeRegisteredRegions"></a>[https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) | Obtain the regions where your organization has enabled AWS IAM Identity Center | Read | 
| <a name="sso-DescribeTrustedTokenIssuer"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeTrustedTokenIssuer.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeTrustedTokenIssuer.html) | Describe a trusted token issuer for an instance | Read | 
| <a name="sso-GetApplicationAccessScope"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetApplicationAccessScope.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetApplicationAccessScope.html) | Get an access scope to an application | Read | 
| <a name="sso-GetApplicationAssignmentConfiguration"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetApplicationAssignmentConfiguration.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetApplicationAssignmentConfiguration.html) | Read assignment configurations for an application | Read | 
| <a name="sso-GetApplicationAuthenticationMethod"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetApplicationAuthenticationMethod.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetApplicationAuthenticationMethod.html) | Get an authentication method to an application | Read | 
| <a name="sso-GetApplicationGrant"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetApplicationGrant.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetApplicationGrant.html) | Obtain details about a grant belonging to an application | Read | 
| <a name="sso-GetApplicationInstance"></a>[https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) | Retrieve details for an application instance | Read | 
| <a name="sso-GetApplicationSessionConfiguration"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetApplicationSessionConfiguration.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetApplicationSessionConfiguration.html) | Get session configuration for an application | Read | 
| <a name="sso-GetApplicationTemplate"></a>[https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) | Retrieve application template details | Read | 
| <a name="sso-GetInlinePolicyForPermissionSet"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetInlinePolicyForPermissionSet.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetInlinePolicyForPermissionSet.html) | Obtain the inline policy assigned to the permission set | Read | 
| <a name="sso-GetManagedApplicationInstance"></a>[https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) | Retrieve details for an application instance | Read | 
| <a name="sso-GetMfaDeviceManagementForDirectory"></a>[https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) | Retrieve Mfa Device Management settings for the directory | Read | 
| <a name="sso-GetPermissionSet"></a>[https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) | Retrieve details of a permission set | Read | 
| <a name="sso-GetPermissionsBoundaryForPermissionSet"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetPermissionsBoundaryForPermissionSet.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetPermissionsBoundaryForPermissionSet.html) | Get permissions boundary for a permission set | Read | 
| <a name="sso-GetProfile"></a>[https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) | Retrieve a profile for an application instance | Read | 
| <a name="sso-GetSSOStatus"></a>[https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) | Check if AWS IAM Identity Center is enabled | Read | 
| <a name="sso-GetSharedSsoConfiguration"></a>[https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) | Retrieve shared configuration for the current SSO instance | Read | 
| <a name="sso-GetSsoConfiguration"></a>[https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) | Retrieve configuration for the current SSO instance | Read | 
| <a name="sso-GetTrust"></a>[https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) | Retrieve the federation trust in a target account | Read | 
| <a name="sso-ListAccountAssignmentCreationStatus"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListAccountAssignmentCreationStatus.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListAccountAssignmentCreationStatus.html) | List the status of the AWS account assignment creation requests for a specified SSO instance | List | 
| <a name="sso-ListAccountAssignmentDeletionStatus"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListAccountAssignmentDeletionStatus.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListAccountAssignmentDeletionStatus.html) | List the status of the AWS account assignment deletion requests for a specified SSO instance | List | 
| <a name="sso-ListAccountAssignments"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListAccountAssignments.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListAccountAssignments.html) | List the assignee of the specified AWS account with the specified permission set | List | 
| <a name="sso-ListAccountAssignmentsForPrincipal"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListAccountAssignmentsForPrincipal.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListAccountAssignmentsForPrincipal.html) | List accounts assigned to user or group | List | 
| <a name="sso-ListAccountsForProvisionedPermissionSet"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListAccountsForProvisionedPermissionSet.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListAccountsForProvisionedPermissionSet.html) | List all the AWS accounts where the specified permission set is provisioned | List | 
| <a name="sso-ListApplicationAccessScopes"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplicationAccessScopes.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplicationAccessScopes.html) | List access scopes to an application | List | 
| <a name="sso-ListApplicationAssignments"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplicationAssignments.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplicationAssignments.html) | List application assignments | List | 
| <a name="sso-ListApplicationAssignmentsForPrincipal"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplicationAssignmentsForPrincipal.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplicationAssignmentsForPrincipal.html) | List applications assigned to user or group | List | 
| <a name="sso-ListApplicationAuthenticationMethods"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplicationAuthenticationMethods.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplicationAuthenticationMethods.html) | List authentication methods to an application | List | 
| <a name="sso-ListApplicationGrants"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplicationGrants.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplicationGrants.html) | List grants from an application | List | 
| <a name="sso-ListApplicationInstanceCertificates"></a>[https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) | Retrieve all of the certificates for a given application instance | Read | 
| <a name="sso-ListApplicationInstances"></a>[https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) | Retrieve all application instances | List | 
| <a name="sso-ListApplicationProviders"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplicationProviders.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplicationProviders.html) | List application providers | List | 
| <a name="sso-ListApplicationTemplates"></a>[https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) | Retrieve all supported application templates | List | 
| <a name="sso-ListApplications"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplications.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListApplications.html) | Retrieve all applications associated with the instance of IAM Identity Center | List | 
| <a name="sso-ListCustomerManagedPolicyReferencesInPermissionSet"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListCustomerManagedPolicyReferencesInPermissionSet.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListCustomerManagedPolicyReferencesInPermissionSet.html) | List the customer managed policy references that are attached to a permission set | List | 
| <a name="sso-ListDirectoryAssociations"></a>[https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) | Retrieve details about the directory connected to AWS IAM Identity Center | Read | 
| <a name="sso-ListInstances"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListInstances.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListInstances.html) | List the SSO Instances that the caller has access to | List | 
| <a name="sso-ListManagedPoliciesInPermissionSet"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListManagedPoliciesInPermissionSet.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListManagedPoliciesInPermissionSet.html) | List the AWS managed policies that are attached to a specified permission set | List | 
| <a name="sso-ListPermissionSetProvisioningStatus"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListPermissionSetProvisioningStatus.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListPermissionSetProvisioningStatus.html) | List the status of the Permission Set Provisioning requests for a specified SSO instance | List | 
| <a name="sso-ListPermissionSets"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListPermissionSets.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListPermissionSets.html) | Retrieve all permission sets | List | 
| <a name="sso-ListPermissionSetsProvisionedToAccount"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListPermissionSetsProvisionedToAccount.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListPermissionSetsProvisionedToAccount.html) | List all the permission sets that are provisioned to a specified AWS account | List | 
| <a name="sso-ListProfileAssociations"></a>[https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) | Retrieve the directory user or group associated with the profile | Read | 
| <a name="sso-ListProfiles"></a>[https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) | Retrieve all profiles for an application instance | List | 
| <a name="sso-ListRegions"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListRegions.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListRegions.html) | List all regions configured for an IAM Identity Center instance | List | 
| <a name="sso-ListTagsForResource"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListTagsForResource.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListTagsForResource.html) | List the tags that are attached to a specified resource | Read | 
| <a name="sso-ListTrustedTokenIssuers"></a>[https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListTrustedTokenIssuers.html](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListTrustedTokenIssuers.html) | List trusted token issuers for an instance | List | 
| <a name="sso-SearchGroups"></a>[https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) | Search for groups within the associated directory | Read | 
| <a name="sso-SearchUsers"></a>[https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample) | Search for users within the associated directory | Read |