account-access:CreateApplication is a Write access-level action in the account-access service. Grants permission to enable an account access manager instance and create an AWS account access application in the associated IAM Identity Center instance
This action does not support resource-level permissions; use "Resource": "*" in your policy.
Keys you can use in the Condition block of a policy that grants account-access:CreateApplication.
Filters access by tag key-value pairs in the request
Filters access by tag keys
A minimal policy that allows account-access:CreateApplication. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowAccountaccessCreateApplication",
"Effect": "Allow",
"Action": "account-access:CreateApplication",
"Resource": "*"
}
]
}