Status: IN
`AWS::SSO::Assignment` maps users/groups to AWS accounts with a permission set (account-level access), while `AWS::SSO::ApplicationAssignment` maps users/groups to an application (application-level access).
Source: entries/2026/03/11/AWSCloudFormation-latest-UserGuide-AWS_SSOhtml.md