Policy

• Implements: IPolicy

This class encapsulates and extends the ROS resource type ALIYUN::KMS::Policy.

Initializers

import com.aliyun.ros.cdk.kms.Policy;
Policy.Builder.create(Construct scope, java.lang.String id, java.lang.Boolean enableResourcePropertyConstraint)
    .accessControlRules(IResolvable)
    .accessControlRules(AccessControlRulesProperty)
    .kmsInstanceId(java.lang.String)
    .kmsInstanceId(IResolvable)
    .permissions(IResolvable)
    .permissions(java.util.List<java.lang.String)
    .permissions(IResolvable>)
    .policyName(java.lang.String)
    .policyName(IResolvable)
    .resources(IResolvable)
    .resources(java.util.List<java.lang.String)
    .resources(IResolvable>)
//  .description(java.lang.String)
//  .description(IResolvable)
    .build();

scope^Required

• Type: com.aliyun.ros.cdk.core.Construct

id^Required

• Type: java.lang.String

enableResourcePropertyConstraint^Optional

• Type: java.lang.Boolean

accessControlRules^Required

• Type: com.aliyun.ros.cdk.core.IResolvable OR AccessControlRulesProperty

Property accessControlRules: Network Rules info.

kmsInstanceId^Required

• Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property kmsInstanceId: The scope of the permission policy.

You need to specify the KMS instance that you want to access.

permissions^Required

• Type: com.aliyun.ros.cdk.core.IResolvable OR java.util.List

Property permissions: The operations that can be performed.

Valid values: RbacPermission/Template/CryptoServiceKeyUser: allows you to perform cryptographic operations. RbacPermission/Template/CryptoServiceSecretUser: allows you to perform secret-related operations.

policyName^Required

• Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property policyName: The name of the permission policy.

resources^Required

• Type: com.aliyun.ros.cdk.core.IResolvable OR java.util.List

Property resources: The key and secret that are allowed to access.

Supports a maximum of 30 key and secret. Key: Enter a key in the key/${KeyId} format. To allow access to all keys of a KMS instance, enter key/. Secret: Enter a secret in the secret/${SecretName} format. To allow access to all secrets of a KMS instance, enter secret/.

description^Optional

• Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Property description: The description of the permission policy.

Methods

toString

public java.lang.String toString()

Returns a string representation of this construct.

synthesize

public void synthesize(ISynthesisSession session)

Allows this construct to emit artifacts into the cloud assembly during synthesis.

This method is usually implemented by framework-level constructs such as Stack and Asset as they participate in synthesizing the cloud assembly.

session^Required

• Type: com.aliyun.ros.cdk.core.ISynthesisSession

The synthesis session.

addCondition

public void addCondition(RosCondition condition)

condition^Required

• Type: com.aliyun.ros.cdk.core.RosCondition

addCount

public void addCount(java.lang.Number OR IResolvable count)

count^Required

• Type: java.lang.Number OR com.aliyun.ros.cdk.core.IResolvable

addDependency

public void addDependency(Resource resource)

resource^Required

• Type: com.aliyun.ros.cdk.core.Resource

addResourceDesc

public void addResourceDesc(java.lang.String desc)

desc^Required

• Type: java.lang.String

applyRemovalPolicy

public void applyRemovalPolicy(RemovalPolicy policy)

policy^Required

• Type: com.aliyun.ros.cdk.core.RemovalPolicy

fetchCondition

public RosCondition fetchCondition()

fetchDependency

public java.util.List<java.lang.String> fetchDependency()

fetchResourceDesc

public java.lang.String fetchResourceDesc()

getAtt

public IResolvable getAtt(java.lang.String name)

name^Required

• Type: java.lang.String

setMetadata

public void setMetadata(java.lang.String key, java.lang.Object value)

key^Required

• Type: java.lang.String

value^Required

• Type: java.lang.Object

Static Functions

isConstruct

import com.aliyun.ros.cdk.kms.Policy;
Policy.isConstruct(java.lang.Object x)

Return whether the given object is a Construct.

x^Required

• Type: java.lang.Object

Properties

node^Required

public ConstructNode getNode();

• Type: com.aliyun.ros.cdk.core.ConstructNode

The construct tree node associated with this construct.

env^Required

public IResourceEnvironment getEnv();

• Type: com.aliyun.ros.cdk.core.IResourceEnvironment

The environment this resource belongs to.

For resources that are created and managed by the CDK (generally, those created by creating new class instances like Role, Bucket, etc.), this is always the same as the environment of the stack they belong to; however, for imported resources (those obtained from static methods like fromRoleArn, fromBucketName, etc.), that might be different than the stack they were imported into.

ref^Required

public java.lang.String getRef();

• Type: java.lang.String

stack^Required

public Stack getStack();

• Type: com.aliyun.ros.cdk.core.Stack

The stack in which this resource is defined.

resource^Optional

public RosResource getResource();

• Type: com.aliyun.ros.cdk.core.RosResource

attrAccessControlRules^Required

public java.lang.Object getAttrAccessControlRules();

• Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Attribute AccessControlRules: Network Rules info.

attrDescription^Required

public java.lang.Object getAttrDescription();

• Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Attribute Description: Description.

attrKmsInstanceId^Required

public java.lang.Object getAttrKmsInstanceId();

• Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Attribute KmsInstanceId: The scope of the permission policy.

You need to specify the KMS instance that you want to access.

attrPermissions^Required

public java.lang.Object getAttrPermissions();

• Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Attribute Permissions: RbacPermission Template, support RbacPermission/Template/CryptoServiceKeyUser and RbacPermission/Template/CryptoServiceSecretUser.

attrPolicyName^Required

public java.lang.Object getAttrPolicyName();

• Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Attribute PolicyName: The name of the permission policy.

attrResources^Required

public java.lang.Object getAttrResources();

• Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable

Attribute Resources: Resources that allowed access by this policy.

props^Required

public PolicyProps getProps();

• Type: PolicyProps