Skip to content

PolicyProps

Properties for defining a Policy.

See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-kms-policy

Initializer

import com.aliyun.ros.cdk.kms.PolicyProps;
PolicyProps.builder()
    .accessControlRules(IResolvable)
    .accessControlRules(AccessControlRulesProperty)
    .kmsInstanceId(java.lang.String)
    .kmsInstanceId(IResolvable)
    .permissions(IResolvable)
    .permissions(java.util.List<java.lang.String)
    .permissions(IResolvable>)
    .policyName(java.lang.String)
    .policyName(IResolvable)
    .resources(IResolvable)
    .resources(java.util.List<java.lang.String)
    .resources(IResolvable>)
//  .description(java.lang.String)
//  .description(IResolvable)
    .build();

Properties

Name Type Description
accessControlRules com.aliyun.ros.cdk.core.IResolvable OR AccessControlRulesProperty Property accessControlRules: Network Rules info.
kmsInstanceId java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property kmsInstanceId: The scope of the permission policy.
permissions com.aliyun.ros.cdk.core.IResolvable OR java.util.List Property permissions: The operations that can be performed.
policyName java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property policyName: The name of the permission policy.
resources com.aliyun.ros.cdk.core.IResolvable OR java.util.List Property resources: The key and secret that are allowed to access.
description java.lang.String OR com.aliyun.ros.cdk.core.IResolvable Property description: The description of the permission policy.

accessControlRulesRequired

public java.lang.Object getAccessControlRules();

Property accessControlRules: Network Rules info.


kmsInstanceIdRequired

public java.lang.Object getKmsInstanceId();
  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property kmsInstanceId: The scope of the permission policy.

You need to specify the KMS instance that you want to access.


permissionsRequired

public java.lang.Object getPermissions();
  • Type: com.aliyun.ros.cdk.core.IResolvable OR java.util.List

Property permissions: The operations that can be performed.

Valid values: RbacPermission/Template/CryptoServiceKeyUser: allows you to perform cryptographic operations. RbacPermission/Template/CryptoServiceSecretUser: allows you to perform secret-related operations.


policyNameRequired

public java.lang.Object getPolicyName();
  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property policyName: The name of the permission policy.


resourcesRequired

public java.lang.Object getResources();
  • Type: com.aliyun.ros.cdk.core.IResolvable OR java.util.List

Property resources: The key and secret that are allowed to access.

Supports a maximum of 30 key and secret. Key: Enter a key in the key/${KeyId} format. To allow access to all keys of a KMS instance, enter key/. Secret: Enter a secret in the secret/${SecretName} format. To allow access to all secrets of a KMS instance, enter secret/.


descriptionOptional

public java.lang.Object getDescription();
  • Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property description: The description of the permission policy.