Skip to content

IPolicy

  • Extends: @alicloud/ros-cdk-core.IResource

  • Implemented By: Policy, IPolicy

Represents a Policy.

Properties

Name Type Description
node @alicloud/ros-cdk-core.ConstructNode The construct tree node for this construct.
env @alicloud/ros-cdk-core.IResourceEnvironment The environment this resource belongs to.
stack @alicloud/ros-cdk-core.Stack The stack in which this resource is defined.
attrAccessControlRules string | @alicloud/ros-cdk-core.IResolvable Attribute AccessControlRules: Network Rules info.
attrDescription string | @alicloud/ros-cdk-core.IResolvable Attribute Description: Description.
attrKmsInstanceId string | @alicloud/ros-cdk-core.IResolvable Attribute KmsInstanceId: The scope of the permission policy.
attrPermissions string | @alicloud/ros-cdk-core.IResolvable Attribute Permissions: RbacPermission Template, support RbacPermission/Template/CryptoServiceKeyUser and RbacPermission/Template/CryptoServiceSecretUser.
attrPolicyName string | @alicloud/ros-cdk-core.IResolvable Attribute PolicyName: The name of the permission policy.
attrResources string | @alicloud/ros-cdk-core.IResolvable Attribute Resources: Resources that allowed access by this policy.
props PolicyProps No description.

nodeRequired

public readonly node: ConstructNode;
  • Type: @alicloud/ros-cdk-core.ConstructNode

The construct tree node for this construct.


envRequired

public readonly env: IResourceEnvironment;
  • Type: @alicloud/ros-cdk-core.IResourceEnvironment

The environment this resource belongs to.

For resources that are created and managed by the CDK (generally, those created by creating new class instances like Role, Bucket, etc.), this is always the same as the environment of the stack they belong to; however, for imported resources (those obtained from static methods like fromRoleArn, fromBucketName, etc.), that might be different than the stack they were imported into.


stackRequired

public readonly stack: Stack;
  • Type: @alicloud/ros-cdk-core.Stack

The stack in which this resource is defined.


attrAccessControlRulesRequired

public readonly attrAccessControlRules: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Attribute AccessControlRules: Network Rules info.


attrDescriptionRequired

public readonly attrDescription: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Attribute Description: Description.


attrKmsInstanceIdRequired

public readonly attrKmsInstanceId: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Attribute KmsInstanceId: The scope of the permission policy.

You need to specify the KMS instance that you want to access.


attrPermissionsRequired

public readonly attrPermissions: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Attribute Permissions: RbacPermission Template, support RbacPermission/Template/CryptoServiceKeyUser and RbacPermission/Template/CryptoServiceSecretUser.


attrPolicyNameRequired

public readonly attrPolicyName: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Attribute PolicyName: The name of the permission policy.


attrResourcesRequired

public readonly attrResources: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Attribute Resources: Resources that allowed access by this policy.


propsRequired

public readonly props: PolicyProps;