> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/search-and-reports/aws-entities/aws-permission-set.md).

# Permission Set

### AWS Permission Set Fields

| Field              | Type    | Possible Operators                                             | Description                                                                                                                 |
| ------------------ | ------- | -------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------- |
| Guid               | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A unique identifier that is a combination of the GUID of the selected Scan and the permission set's unique ID.              |
| FSName             | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A special unique identifier that is a combination of the permission set Name and the Identity Store ID.                     |
| Name               | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The permission set name.                                                                                                    |
| PermissionSetArn   | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The ARN of the permission set in Identity Center.                                                                           |
| Description        | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The permission set description, if one is set.                                                                              |
| InstanceArn        | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The ARN of the Identity Center instance the permission set belongs to.                                                      |
| SessionDuration    | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The maximum session length for the role the permission set provisions, in ISO 8601 duration format.                         |
| HasInlinePolicy    | BOOLEAN | N/A                                                            | Indicates whether the permission set has an inline policy.                                                                  |
| HasManagedPolicies | BOOLEAN | N/A                                                            | Indicates whether the permission set has one or more attached managed policies.                                             |
| AWSTier            | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Privilege tier of the permission set based on the permissions it grants. Higher values indicate more sensitive permissions. |
| ExposurePoint      | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | A numerical value indicating the level of exposure based on how many entities are assigned this permission set.             |
| risk               | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | The risk score of the permission set calculated based on vulnerability counts and severities.                               |