Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. AWS
  4. API Docs
  5. accountaccess
  6. getApplication
Viewing docs for AWS v7.46.0
published on Thursday, Sep 10, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws

aws.accountaccess.getApplication

aws logo aws logo
Viewing docs for AWS v7.46.0
published on Thursday, Sep 10, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws

    Looks up an existing AWS Account Access Application. Lookup is by Application ARN or by IAM Identity Center instance ARN (one Application per instance).

    Example Usage

    By Application ARN

    import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = aws.accountaccess.getApplication({
    arn: "arn:aws:account-access:us-east-1:123456789012:application/aam-0123456789abcdef",
});

    import pulumi
import pulumi_aws as aws

example = aws.accountaccess.get_application(arn="arn:aws:account-access:us-east-1:123456789012:application/aam-0123456789abcdef")

    package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/accountaccess"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accountaccess.LookupApplication(ctx, &accountaccess.LookupApplicationArgs{
			Arn: pulumi.StringRef("arn:aws:account-access:us-east-1:123456789012:application/aam-0123456789abcdef"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var example = Aws.AccountAccess.GetApplication.Invoke(new()
    {
        Arn = "arn:aws:account-access:us-east-1:123456789012:application/aam-0123456789abcdef",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.accountaccess.AccountaccessFunctions;
import com.pulumi.aws.accountaccess.inputs.GetApplicationArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var example = AccountaccessFunctions.getApplication(GetApplicationArgs.builder()
            .arn("arn:aws:account-access:us-east-1:123456789012:application/aam-0123456789abcdef")
            .build());

    }
}

    variables:
  example:
    fn::invoke:
      function: aws:accountaccess:getApplication
      arguments:
        arn: arn:aws:account-access:us-east-1:123456789012:application/aam-0123456789abcdef

    pulumi {
  required_providers {
    aws = {
      source = "pulumi/aws"
    }
  }
}

data "aws_accountaccess_getapplication" "example" {
  arn = "arn:aws:account-access:us-east-1:123456789012:application/aam-0123456789abcdef"
}

    By Identity Center Instance

    import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = aws.ssoadmin.getInstances({});
const exampleGetApplication = example.then(example => aws.accountaccess.getApplication({
    identityCenterInstanceArn: example.arns?.[0],
}));

    import pulumi
import pulumi_aws as aws

example = aws.ssoadmin.get_instances()
example_get_application = aws.accountaccess.get_application(identity_center_instance_arn=example.arns[0])

    package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/accountaccess"
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ssoadmin"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := ssoadmin.GetInstances(ctx, &ssoadmin.GetInstancesArgs{}, nil)
		if err != nil {
			return err
		}
		_, err = accountaccess.LookupApplication(ctx, &accountaccess.LookupApplicationArgs{
			IdentityCenterInstanceArn: pulumi.StringRef(example.Arns[0]),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var example = Aws.SsoAdmin.GetInstances.Invoke();

    var exampleGetApplication = Aws.AccountAccess.GetApplication.Invoke(new()
    {
        IdentityCenterInstanceArn = example.Apply(getInstancesResult => getInstancesResult.Arns[0]),
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.ssoadmin.SsoadminFunctions;
import com.pulumi.aws.ssoadmin.inputs.GetInstancesArgs;
import com.pulumi.aws.accountaccess.AccountaccessFunctions;
import com.pulumi.aws.accountaccess.inputs.GetApplicationArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var example = SsoadminFunctions.getInstances(GetInstancesArgs.builder()
            .build());

        final var exampleGetApplication = AccountaccessFunctions.getApplication(GetApplicationArgs.builder()
            .identityCenterInstanceArn(example.arns()[0])
            .build());

    }
}

    variables:
  example:
    fn::invoke:
      function: aws:ssoadmin:getInstances
      arguments: {}
  exampleGetApplication:
    fn::invoke:
      function: aws:accountaccess:getApplication
      arguments:
        identityCenterInstanceArn: ${example.arns[0]}

    pulumi {
  required_providers {
    aws = {
      source = "pulumi/aws"
    }
  }
}

data "aws_ssoadmin_getinstances" "example" {
}
data "aws_accountaccess_getapplication" "exampleGetApplication" {
  identity_center_instance_arn = data.aws_ssoadmin_getinstances.example.arns[0]
}

    Using getApplication

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getApplication(args: GetApplicationArgs, opts?: InvokeOptions): Promise<GetApplicationResult>
function getApplicationOutput(args: GetApplicationOutputArgs, opts?: InvokeOutputOptions): Output<GetApplicationResult>
    def get_application(arn: Optional[str] = None,
                    identity_center_instance_arn: Optional[str] = None,
                    region: Optional[str] = None,
                    opts: Optional[InvokeOptions] = None) -> GetApplicationResult
def get_application_output(arn: pulumi.Input[Optional[str]] = None,
                    identity_center_instance_arn: pulumi.Input[Optional[str]] = None,
                    region: pulumi.Input[Optional[str]] = None,
                    opts: Optional[InvokeOutputOptions] = None) -> Output[GetApplicationResult]
    func LookupApplication(ctx *Context, args *LookupApplicationArgs, opts ...InvokeOption) (*LookupApplicationResult, error)
func LookupApplicationOutput(ctx *Context, args *LookupApplicationOutputArgs, opts ...InvokeOption) LookupApplicationResultOutput

    > Note: This function is named LookupApplication in the Go SDK.

    public static class GetApplication 
{
    public static Task<GetApplicationResult> InvokeAsync(GetApplicationArgs args, InvokeOptions? opts = null)
    public static Output<GetApplicationResult> Invoke(GetApplicationInvokeArgs args, InvokeOptions? opts = null)
    public static Output<GetApplicationResult> Invoke(GetApplicationInvokeArgs args, InvokeOutputOptions opts)
}
    public static CompletableFuture<GetApplicationResult> getApplication(GetApplicationArgs args, InvokeOptions options)
public static Output<GetApplicationResult> getApplication(GetApplicationArgs args, InvokeOptions options)
public static Output<GetApplicationResult> getApplication(GetApplicationArgs args, InvokeOutputOptions options)

    fn::invoke:
  function: aws:accountaccess/getApplication:getApplication
  arguments:
    # arguments dictionary
    data "aws_accountaccess_get_application" "name" {
    # arguments
}

    The following arguments are supported:

    Arn string
    ARN of the Application to look up. Exactly one of arn or identityCenterInstanceArn must be specified.
    IdentityCenterInstanceArn string
    ARN of the IAM Identity Center instance whose bound Application should be returned. Exactly one of arn or identityCenterInstanceArn must be specified.
    Region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    Arn string
    ARN of the Application to look up. Exactly one of arn or identityCenterInstanceArn must be specified.
    IdentityCenterInstanceArn string
    ARN of the IAM Identity Center instance whose bound Application should be returned. Exactly one of arn or identityCenterInstanceArn must be specified.
    Region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    arn string
    ARN of the Application to look up. Exactly one of arn or identityCenterInstanceArn must be specified.
    identity_center_instance_arn string
    ARN of the IAM Identity Center instance whose bound Application should be returned. Exactly one of arn or identityCenterInstanceArn must be specified.
    region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    arn String
    ARN of the Application to look up. Exactly one of arn or identityCenterInstanceArn must be specified.
    identityCenterInstanceArn String
    ARN of the IAM Identity Center instance whose bound Application should be returned. Exactly one of arn or identityCenterInstanceArn must be specified.
    region String
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    arn string
    ARN of the Application to look up. Exactly one of arn or identityCenterInstanceArn must be specified.
    identityCenterInstanceArn string
    ARN of the IAM Identity Center instance whose bound Application should be returned. Exactly one of arn or identityCenterInstanceArn must be specified.
    region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    arn str
    ARN of the Application to look up. Exactly one of arn or identityCenterInstanceArn must be specified.
    identity_center_instance_arn str
    ARN of the IAM Identity Center instance whose bound Application should be returned. Exactly one of arn or identityCenterInstanceArn must be specified.
    region str
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    arn String
    ARN of the Application to look up. Exactly one of arn or identityCenterInstanceArn must be specified.
    identityCenterInstanceArn String
    ARN of the IAM Identity Center instance whose bound Application should be returned. Exactly one of arn or identityCenterInstanceArn must be specified.
    region String
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.

    getApplication Result

    The following output properties are available:

    Arn string
    CreatedAt string
    Date and time, in RFC3339 format, when the Application was created.
    IdentitySources List<GetApplicationIdentitySource>
    Identity source for the application. Forces replacement when changed. See identitySource Block below.
    Region string
    Status string
    Current lifecycle status. One of CREATE_IN_PROGRESS, ACTIVE, DELETE_IN_PROGRESS, CREATE_FAILED, DELETE_FAILED.
    Tags Dictionary<string, string>
    Map of tags assigned to the Application.
    TenantId string
    Internal tenant identifier returned by the service.
    UpdatedAt string
    Date and time, in RFC3339 format, when the Application was last updated.
    IdentityCenterInstanceArn string
    Arn string
    CreatedAt string
    Date and time, in RFC3339 format, when the Application was created.
    IdentitySources []GetApplicationIdentitySource
    Identity source for the application. Forces replacement when changed. See identitySource Block below.
    Region string
    Status string
    Current lifecycle status. One of CREATE_IN_PROGRESS, ACTIVE, DELETE_IN_PROGRESS, CREATE_FAILED, DELETE_FAILED.
    Tags map[string]string
    Map of tags assigned to the Application.
    TenantId string
    Internal tenant identifier returned by the service.
    UpdatedAt string
    Date and time, in RFC3339 format, when the Application was last updated.
    IdentityCenterInstanceArn string
    arn string
    created_at string
    Date and time, in RFC3339 format, when the Application was created.
    identity_sources list(object)
    Identity source for the application. Forces replacement when changed. See identitySource Block below.
    region string
    status string
    Current lifecycle status. One of CREATE_IN_PROGRESS, ACTIVE, DELETE_IN_PROGRESS, CREATE_FAILED, DELETE_FAILED.
    tags map(string)
    Map of tags assigned to the Application.
    tenant_id string
    Internal tenant identifier returned by the service.
    updated_at string
    Date and time, in RFC3339 format, when the Application was last updated.
    identity_center_instance_arn string
    arn String
    createdAt String
    Date and time, in RFC3339 format, when the Application was created.
    identitySources List<GetApplicationIdentitySource>
    Identity source for the application. Forces replacement when changed. See identitySource Block below.
    region String
    status String
    Current lifecycle status. One of CREATE_IN_PROGRESS, ACTIVE, DELETE_IN_PROGRESS, CREATE_FAILED, DELETE_FAILED.
    tags Map<String,String>
    Map of tags assigned to the Application.
    tenantId String
    Internal tenant identifier returned by the service.
    updatedAt String
    Date and time, in RFC3339 format, when the Application was last updated.
    identityCenterInstanceArn String
    arn string
    createdAt string
    Date and time, in RFC3339 format, when the Application was created.
    identitySources GetApplicationIdentitySource[]
    Identity source for the application. Forces replacement when changed. See identitySource Block below.
    region string
    status string
    Current lifecycle status. One of CREATE_IN_PROGRESS, ACTIVE, DELETE_IN_PROGRESS, CREATE_FAILED, DELETE_FAILED.
    tags {[key: string]: string}
    Map of tags assigned to the Application.
    tenantId string
    Internal tenant identifier returned by the service.
    updatedAt string
    Date and time, in RFC3339 format, when the Application was last updated.
    identityCenterInstanceArn string
    arn str
    created_at str
    Date and time, in RFC3339 format, when the Application was created.
    identity_sources Sequence[GetApplicationIdentitySource]
    Identity source for the application. Forces replacement when changed. See identitySource Block below.
    region str
    status str
    Current lifecycle status. One of CREATE_IN_PROGRESS, ACTIVE, DELETE_IN_PROGRESS, CREATE_FAILED, DELETE_FAILED.
    tags Mapping[str, str]
    Map of tags assigned to the Application.
    tenant_id str
    Internal tenant identifier returned by the service.
    updated_at str
    Date and time, in RFC3339 format, when the Application was last updated.
    identity_center_instance_arn str
    arn String
    createdAt String
    Date and time, in RFC3339 format, when the Application was created.
    identitySources List<Property Map>
    Identity source for the application. Forces replacement when changed. See identitySource Block below.
    region String
    status String
    Current lifecycle status. One of CREATE_IN_PROGRESS, ACTIVE, DELETE_IN_PROGRESS, CREATE_FAILED, DELETE_FAILED.
    tags Map<String>
    Map of tags assigned to the Application.
    tenantId String
    Internal tenant identifier returned by the service.
    updatedAt String
    Date and time, in RFC3339 format, when the Application was last updated.
    identityCenterInstanceArn String

    Supporting Types

    GetApplicationIdentitySource

    IdentityCenters List<GetApplicationIdentitySourceIdentityCenter>
    IAM Identity Center instance used as the identity source. See identityCenter Block below.
    IdentityCenters []GetApplicationIdentitySourceIdentityCenter
    IAM Identity Center instance used as the identity source. See identityCenter Block below.
    identity_centers list(object)
    IAM Identity Center instance used as the identity source. See identityCenter Block below.
    identityCenters List<GetApplicationIdentitySourceIdentityCenter>
    IAM Identity Center instance used as the identity source. See identityCenter Block below.
    identityCenters GetApplicationIdentitySourceIdentityCenter[]
    IAM Identity Center instance used as the identity source. See identityCenter Block below.
    identity_centers Sequence[GetApplicationIdentitySourceIdentityCenter]
    IAM Identity Center instance used as the identity source. See identityCenter Block below.
    identityCenters List<Property Map>
    IAM Identity Center instance used as the identity source. See identityCenter Block below.

    GetApplicationIdentitySourceIdentityCenter

    ApplicationArn string
    ARN of the IAM Identity Center application for this account access manager application.
    InstanceArn string
    ARN of the IAM Identity Center instance.
    ApplicationArn string
    ARN of the IAM Identity Center application for this account access manager application.
    InstanceArn string
    ARN of the IAM Identity Center instance.
    application_arn string
    ARN of the IAM Identity Center application for this account access manager application.
    instance_arn string
    ARN of the IAM Identity Center instance.
    applicationArn String
    ARN of the IAM Identity Center application for this account access manager application.
    instanceArn String
    ARN of the IAM Identity Center instance.
    applicationArn string
    ARN of the IAM Identity Center application for this account access manager application.
    instanceArn string
    ARN of the IAM Identity Center instance.
    application_arn str
    ARN of the IAM Identity Center application for this account access manager application.
    instance_arn str
    ARN of the IAM Identity Center instance.
    applicationArn String
    ARN of the IAM Identity Center application for this account access manager application.
    instanceArn String
    ARN of the IAM Identity Center instance.

    Package Details

    Repository
    AWS Classic pulumi/pulumi-aws
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the aws Terraform Provider.
    aws logo aws logo
    Viewing docs for AWS v7.46.0
    published on Thursday, Sep 10, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-aws

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial