Skip to content

RoleProps

Properties for defining a Role.

See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-ram-role

Initializer 

import "github.com/alibabacloud-go/ros-cdk/alicloudroscdkram"
&alicloudroscdkram.RoleProps {
    AssumeRolePolicyDocument: interface{},
    RoleName: interface{},
    DeletionForce: interface{},
    Description: interface{},
    IgnoreExisting: interface{},
    MaxSessionDuration: interface{},
    Policies: interface{},
    PolicyAttachments: interface{},
    Tags: *[]github.com/alibabacloud-go/ros-cdk/alicloudroscdkram.RosRole.TagsProperty,
}

Properties

Name Type Description
AssumeRolePolicyDocument interface{} Property assumeRolePolicyDocument: The trust policy that specifies one or more trusted entities allowed to assume the RAM role.
RoleName interface{} Property roleName: Specifies the role name, containing up to 64 characters.
DeletionForce interface{} Property deletionForce: Whether force detach the policies attached to the role.
Description interface{} Property description: Remark information, up to 1024 characters or Chinese characters.
IgnoreExisting interface{} Property ignoreExisting: Whether to ignore existing role False: ROS will perform a uniqueness check.If a role with the same name exists, an error will be reported when creating it. True: ROS will not check the uniqueness.If there is a role with the same name, the role creation process will be ignored. If the role is not created by ROS, it will be ignored during update and delete stage.
MaxSessionDuration interface{} Property maxSessionDuration: The maximum session duration of the RAM role.
Policies interface{} Property policies: Describes what actions are allowed on what resources.
PolicyAttachments interface{} Property policyAttachments: System and custom policy names to attach.
Tags *[]TagsProperty Property tags: Tags to attach to role.

AssumeRolePolicyDocumentRequired 

AssumeRolePolicyDocument interface{}
  • Type: interface{}

Property assumeRolePolicyDocument: The trust policy that specifies one or more trusted entities allowed to assume the RAM role.

Trusted entities can be cloud accounts, cloud services, or identity providers (IdPs).

RAM users cannot assume RAM roles whose trusted entity is a cloud service.

RoleNameRequired 

RoleName interface{}
  • Type: interface{}

Property roleName: Specifies the role name, containing up to 64 characters.

DeletionForceOptional 

DeletionForce interface{}
  • Type: interface{}

Property deletionForce: Whether force detach the policies attached to the role.

Default value is false.

DescriptionOptional 

Description interface{}
  • Type: interface{}

Property description: Remark information, up to 1024 characters or Chinese characters.

IgnoreExistingOptional 

IgnoreExisting interface{}
  • Type: interface{}

Property ignoreExisting: Whether to ignore existing role False: ROS will perform a uniqueness check.If a role with the same name exists, an error will be reported when creating it. True: ROS will not check the uniqueness.If there is a role with the same name, the role creation process will be ignored. If the role is not created by ROS, it will be ignored during update and delete stage.

MaxSessionDurationOptional 

MaxSessionDuration interface{}
  • Type: interface{}

Property maxSessionDuration: The maximum session duration of the RAM role.

Valid values: 3600 to 43200. Unit: seconds. Default value: 3600. The default value is used if the parameter is not specified.

PoliciesOptional 

Policies interface{}
  • Type: interface{}

Property policies: Describes what actions are allowed on what resources.

PolicyAttachmentsOptional 

PolicyAttachments interface{}
  • Type: interface{}

Property policyAttachments: System and custom policy names to attach.

TagsOptional 

Tags *[]TagsProperty

Property tags: Tags to attach to role.

Max support 20 tags to add during create role. Each tag with two properties Key and Value, and Key is required.