SecurityPreference

• Implements: ISecurityPreference

This class encapsulates and extends the ROS resource type ALIYUN::RAM::SecurityPreference.

Initializers

import ros_cdk_ram
ros_cdk_ram.SecurityPreference(
  scope: Construct,
  id: str,
  allow_user_to_change_password: typing.Union[bool, IResolvable] = None,
  allow_user_to_manage_access_keys: typing.Union[bool, IResolvable] = None,
  allow_user_to_manage_mfa_devices: typing.Union[bool, IResolvable] = None,
  allow_user_to_manage_public_keys: typing.Union[bool, IResolvable] = None,
  enable_save_mfa_ticket: typing.Union[bool, IResolvable] = None,
  login_network_masks: typing.Union[str, IResolvable] = None,
  login_session_duration: typing.Union[typing.Union[int, float], IResolvable] = None,
  enable_resource_property_constraint: bool = None
)

scope^Required

• Type: ros_cdk_core.Construct

id^Required

• Type: str

allow_user_to_change_password^Optional

• Type: typing.Union[bool, ros_cdk_core.IResolvable]

Property allowUserToChangePassword: Specifies whether RAM users can change their passwords.

Valid values: true: RAM users can change their passwords. This is the default value. false: RAM users cannot change their passwords.

allow_user_to_manage_access_keys^Optional

• Type: typing.Union[bool, ros_cdk_core.IResolvable]

Property allowUserToManageAccessKeys: Specifies whether RAM users can manage their AccessKey pairs.

Valid values: true: RAM users can manage their AccessKey pairs. false: RAM users cannot manage their AccessKey pairs. This is the default value.

allow_user_to_manage_mfa_devices^Optional

• Type: typing.Union[bool, ros_cdk_core.IResolvable]

Property allowUserToManageMfaDevices: Specifies whether RAM users can manage their MFA devices.

Valid values: true: RAM users can manage their MFA devices. This is the default value. false: RAM users cannot manage their MFA devices.

allow_user_to_manage_public_keys^Optional

• Type: typing.Union[bool, ros_cdk_core.IResolvable]

Property allowUserToManagePublicKeys: Specifies whether RAM users can manage their public keys.

Valid values: true: RAM users can manage their public keys. false: RAM users cannot manage their public keys. This is the default value. Note This parameter is valid only for the Japan site.

enable_save_mfa_ticket^Optional

• Type: typing.Union[bool, ros_cdk_core.IResolvable]

Property enableSaveMfaTicket: Specifies whether RAM users can save multi-factor authentication (MFA) security codes during logon.

The security codes are valid for 7 days. Valid values: true: RAM users can save MFA security codes during logon. false: RAM users cannot save MFA security codes during logon. This is the default value.

login_network_masks^Optional

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Property loginNetworkMasks: The subnet mask that specifies the IP addresses from which logon to the console is allowed.

This parameter applies to password-based logon and single sign-on (SSO). However, this parameter does not apply to API calls that are authenticated based on AccessKey pairs. If a subnet mask is specified, RAM users can log on to the console only by using the IP addresses in the subnet. If you do not specify a subnet mask, RAM users can log on to the console by using all IP addresses. If you want to specify multiple subnet masks, separate the subnet masks with semicolons (;). Example: 192.168.0.0/16;10.0.0.0/8. A maximum of 25 subnet masks can be set. The total length of the subnet masks can be 1 to 512 characters.

login_session_duration^Optional

• Type: typing.Union[typing.Union[int, float], ros_cdk_core.IResolvable]

Property loginSessionDuration: The validity period of the logon session of the RAM user.

Valid values: 6 to 24. Default value: 6. Unit: hours.

enable_resource_property_constraint^Optional

• Type: bool

Methods

to_string

def to_string() -> str

Returns a string representation of this construct.

synthesize

def synthesize(
  session: ISynthesisSession
) -> None

Allows this construct to emit artifacts into the cloud assembly during synthesis.

This method is usually implemented by framework-level constructs such as Stack and Asset as they participate in synthesizing the cloud assembly.

session^Required

• Type: ros_cdk_core.ISynthesisSession

The synthesis session.

add_condition

def add_condition(
  condition: RosCondition
) -> None

condition^Required

• Type: ros_cdk_core.RosCondition

add_count

def add_count(
  count: typing.Union[typing.Union[int, float], IResolvable]
) -> None

count^Required

• Type: typing.Union[typing.Union[int, float], ros_cdk_core.IResolvable]

add_dependency

def add_dependency(
  resource: Resource
) -> None

resource^Required

• Type: ros_cdk_core.Resource

add_resource_desc

def add_resource_desc(
  desc: str
) -> None

desc^Required

• Type: str

apply_removal_policy

def apply_removal_policy(
  policy: RemovalPolicy
) -> None

policy^Required

• Type: ros_cdk_core.RemovalPolicy

fetch_condition

def fetch_condition() -> RosCondition

fetch_dependency

def fetch_dependency() -> typing.List[str]

fetch_resource_desc

def fetch_resource_desc() -> str

get_att

def get_att(
  name: str
) -> IResolvable

name^Required

• Type: str

set_metadata

def set_metadata(
  key: str,
  value: typing.Any
) -> None

key^Required

• Type: str

value^Required

• Type: typing.Any

Static Functions

is_construct

import ros_cdk_ram
ros_cdk_ram.SecurityPreference.is_construct(
  x: typing.Any
)

Return whether the given object is a Construct.

x^Required

• Type: typing.Any

Properties

node^Required

node: ConstructNode

• Type: ros_cdk_core.ConstructNode

The construct tree node associated with this construct.

env^Required

env: IResourceEnvironment

• Type: ros_cdk_core.IResourceEnvironment

The environment this resource belongs to.

For resources that are created and managed by the CDK (generally, those created by creating new class instances like Role, Bucket, etc.), this is always the same as the environment of the stack they belong to; however, for imported resources (those obtained from static methods like fromRoleArn, fromBucketName, etc.), that might be different than the stack they were imported into.

ref^Required

ref: str

• Type: str

stack^Required

stack: Stack

• Type: ros_cdk_core.Stack

The stack in which this resource is defined.

resource^Optional

resource: RosResource

• Type: ros_cdk_core.RosResource

attr_allow_user_to_change_password^Required

attr_allow_user_to_change_password: typing.Union[str, IResolvable]

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Attribute AllowUserToChangePassword: Specifies whether RAM users can change their passwords.

attr_allow_user_to_manage_access_keys^Required

attr_allow_user_to_manage_access_keys: typing.Union[str, IResolvable]

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Attribute AllowUserToManageAccessKeys: Specifies whether RAM users can manage their AccessKey pairs.

attr_allow_user_to_manage_mfa_devices^Required

attr_allow_user_to_manage_mfa_devices: typing.Union[str, IResolvable]

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Attribute AllowUserToManageMFADevices: Specifies whether RAM users can manage their MFA devices.

attr_allow_user_to_manage_public_keys^Required

attr_allow_user_to_manage_public_keys: typing.Union[str, IResolvable]

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Attribute AllowUserToManagePublicKeys: Specifies whether RAM users can manage their public keys.

attr_enable_save_mfa_ticket^Required

attr_enable_save_mfa_ticket: typing.Union[str, IResolvable]

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Attribute EnableSaveMFATicket: Specifies whether RAM users can save multi-factor authentication (MFA) security codes during logon.

attr_login_network_masks^Required

attr_login_network_masks: typing.Union[str, IResolvable]

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Attribute LoginNetworkMasks: The subnet mask that specifies the IP addresses from which logon to the console is allowed.

attr_login_session_duration^Required

attr_login_session_duration: typing.Union[str, IResolvable]

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Attribute LoginSessionDuration: The validity period of the logon session of the RAM user.

props^Required

props: SecurityPreferenceProps

• Type: SecurityPreferenceProps