# AccessControlAttributeProperty

These are  identity store attributes that you can configure for use in attributes-based access control (ABAC).

You can create permissions policies that determine who can access your AWS resources based upon the configured attribute values. When you enable ABAC and specify `AccessControlAttributes` ,  passes the attribute values of the authenticated user into IAM for use in policy evaluation.

- Source: Generated code
- Type last changed: v2.93.0 · 23 Aug 2023

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_sso as sso } from 'aws-cdk-lib';
const accessControlAttributeProperty: sso.CfnInstanceAccessControlAttributeConfiguration.AccessControlAttributeProperty = {
  key: 'key',
  value: {
    source: ['source'],
  },
};
```

## Properties

- `key`: string (required) — The name of the attribute associated with your identities in your identity source.

  This is used to map a specified attribute in your identity source with an attribute in  .

- `value`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnInstanceAccessControlAttributeConfiguration.AccessControlAttributeValueProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_sso.CfnInstanceAccessControlAttributeConfiguration.AccessControlAttributeValueProperty.html) (required) — The value used for mapping a specified attribute to an identity source.