permission-set-using-json-string-1.yml

AWSTemplateFormatVersion: '2010-09-09-OC'

Resources:

  TestPS:
    Type: AWS::SSO::PermissionSet
    Properties:
      Name: TestPS1
      Description: Readonly Access
      InstanceArn:  arn:aws:sso:::instance/ssoins-6804ad5dfea0d87e
      ManagedPolicies:
        - arn:aws:iam::aws:policy/ReadOnlyAccess
      SessionDuration: PT12H
      InlinePolicy: !JsonString
      - Version: '2012-10-17'
        Statement:
        - Sid: DenyS3
          Effect: Deny
          Action: 's3:*'
          Resource: '*'