PermissionPolicyToAccessConfigurationAddition
- Implements: IPermissionPolicyToAccessConfigurationAddition
This class encapsulates and extends the ROS resource type ALIYUN::CloudSSO::PermissionPolicyToAccessConfigurationAddition, which is used to add a policy to an access configuration.
Initializers
import ros_cdk_cloudsso
ros_cdk_cloudsso.PermissionPolicyToAccessConfigurationAddition(
scope: Construct,
id: str,
access_configuration_id: typing.Union[str, IResolvable],
directory_id: typing.Union[str, IResolvable],
permission_policy_name: typing.Union[str, IResolvable],
permission_policy_type: typing.Union[str, IResolvable],
inline_policy_document: typing.Union[IResolvable, typing.Mapping[typing.Any]] = None,
enable_resource_property_constraint: bool = None
)
| Name | Type | Description |
|---|---|---|
scope | ros_cdk_core.Construct | No description. |
id | str | No description. |
access_configuration_id | typing.Union[str, ros_cdk_core.IResolvable] | Property accessConfigurationId: The ID of the access configuration. |
directory_id | typing.Union[str, ros_cdk_core.IResolvable] | Property directoryId: The ID of the directory. |
permission_policy_name | typing.Union[str, ros_cdk_core.IResolvable] | Property permissionPolicyName: The name of the permission policy. |
permission_policy_type | typing.Union[str, ros_cdk_core.IResolvable] | Property permissionPolicyType: The type of the permission policy. |
inline_policy_document | typing.Union[ros_cdk_core.IResolvable, typing.Mapping[typing.Any]] | Property inlinePolicyDocument: The configurations of the inline policy. |
enable_resource_property_constraint | bool | No description. |
scopeRequired
- Type: ros_cdk_core.Construct
idRequired
- Type: str
access_configuration_idRequired
- Type: typing.Union[str, ros_cdk_core.IResolvable]
Property accessConfigurationId: The ID of the access configuration.
directory_idRequired
- Type: typing.Union[str, ros_cdk_core.IResolvable]
Property directoryId: The ID of the directory.
permission_policy_nameRequired
- Type: typing.Union[str, ros_cdk_core.IResolvable]
Property permissionPolicyName: The name of the permission policy.
- If you set PermissionPolicyType to System, you must set this parameter to the name of the system policy. You can obtain the name of the system policy from RAM.
- If you set PermissionPolicyType to Inline, you must set this parameter to the name of the inline policy. A custom value is supported.
permission_policy_typeRequired
- Type: typing.Union[str, ros_cdk_core.IResolvable]
Property permissionPolicyType: The type of the permission policy.
Valid values:
- System: system policy. Resource Access Management (RAM) system policies are reused.
- Inline: inline policy. Inline policies are created based on the RAM policy syntax and structure.
inline_policy_documentOptional
- Type: typing.Union[ros_cdk_core.IResolvable, typing.Mapping[typing.Any]]
Property inlinePolicyDocument: The configurations of the inline policy.
The value can be up to 4,096 characters in length. If you set PermissionPolicyType to Inline, you must specify this parameter.
enable_resource_property_constraintOptional
- Type: bool
Methods
| Name | Description |
|---|---|
to_string | Returns a string representation of this construct. |
synthesize | Allows this construct to emit artifacts into the cloud assembly during synthesis. |
add_condition | No description. |
add_count | No description. |
add_dependency | No description. |
add_resource_desc | No description. |
apply_removal_policy | No description. |
fetch_condition | No description. |
fetch_dependency | No description. |
fetch_resource_desc | No description. |
get_att | No description. |
set_metadata | No description. |
to_string
def to_string() -> str
Returns a string representation of this construct.
synthesize
def synthesize(
session: ISynthesisSession
) -> None
Allows this construct to emit artifacts into the cloud assembly during synthesis.
This method is usually implemented by framework-level constructs such as Stack and Asset as they participate in synthesizing the cloud assembly.
- Type: ros_cdk_core.ISynthesisSession
The synthesis session.
add_condition
def add_condition(
condition: RosCondition
) -> None
- Type: ros_cdk_core.RosCondition
add_count
def add_count(
count: typing.Union[typing.Union[int, float], IResolvable]
) -> None
- Type: typing.Union[typing.Union[int, float], ros_cdk_core.IResolvable]
add_dependency
def add_dependency(
resource: Resource
) -> None
- Type: ros_cdk_core.Resource
add_resource_desc
def add_resource_desc(
desc: str
) -> None
- Type: str
apply_removal_policy
def apply_removal_policy(
policy: RemovalPolicy
) -> None
- Type: ros_cdk_core.RemovalPolicy
fetch_condition
def fetch_condition() -> RosCondition
fetch_dependency
def fetch_dependency() -> typing.List[str]
fetch_resource_desc
def fetch_resource_desc() -> str
get_att
def get_att(
name: str
) -> IResolvable
- Type: str
set_metadata
def set_metadata(
key: str,
value: typing.Any
) -> None
- Type: str
- Type: typing.Any
Static Functions
| Name | Description |
|---|---|
is_construct | Return whether the given object is a Construct. |
is_construct
import ros_cdk_cloudsso
ros_cdk_cloudsso.PermissionPolicyToAccessConfigurationAddition.is_construct(
x: typing.Any
)
Return whether the given object is a Construct.
- Type: typing.Any
Properties
| Name | Type | Description |
|---|---|---|
node | ros_cdk_core.ConstructNode | The construct tree node associated with this construct. |
env | ros_cdk_core.IResourceEnvironment | The environment this resource belongs to. |
ref | str | No description. |
stack | ros_cdk_core.Stack | The stack in which this resource is defined. |
resource | ros_cdk_core.RosResource | No description. |
props | PermissionPolicyToAccessConfigurationAdditionProps | No description. |
nodeRequired
node: ConstructNode
- Type: ros_cdk_core.ConstructNode
The construct tree node associated with this construct.
envRequired
env: IResourceEnvironment
- Type: ros_cdk_core.IResourceEnvironment
The environment this resource belongs to.
For resources that are created and managed by the CDK (generally, those created by creating new class instances like Role, Bucket, etc.), this is always the same as the environment of the stack they belong to; however, for imported resources (those obtained from static methods like fromRoleArn, fromBucketName, etc.), that might be different than the stack they were imported into.
refRequired
ref: str
- Type: str
stackRequired
stack: Stack
- Type: ros_cdk_core.Stack
The stack in which this resource is defined.
resourceOptional
resource: RosResource
- Type: ros_cdk_core.RosResource
propsRequired
props: PermissionPolicyToAccessConfigurationAdditionProps