{"id":"cfn-sso-assignment-account-vs-application","text":"`AWS::SSO::Assignment` maps users/groups to AWS accounts with a permission set (account-level access), while `AWS::SSO::ApplicationAssignment` maps users/groups to an application (application-level access).","truth_value":"IN","source":"entries/2026/03/11/AWSCloudFormation-latest-UserGuide-AWS_SSOhtml.md","source_url":"","source_hash":"960076791d1179b8","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"cfn-sso-assignment-account-vs-application","truth_value":"IN","reason":"premise"}]}}