Skip to content

IPolicy

  • Extends: ros_cdk_core.IResource

  • Implemented By: Policy, IPolicy

Represents a Policy.

Properties

Name Type Description
node ros_cdk_core.ConstructNode The construct tree node for this construct.
env ros_cdk_core.IResourceEnvironment The environment this resource belongs to.
stack ros_cdk_core.Stack The stack in which this resource is defined.
attr_access_control_rules typing.Union[str, ros_cdk_core.IResolvable] Attribute AccessControlRules: Network Rules info.
attr_description typing.Union[str, ros_cdk_core.IResolvable] Attribute Description: Description.
attr_kms_instance_id typing.Union[str, ros_cdk_core.IResolvable] Attribute KmsInstanceId: The scope of the permission policy.
attr_permissions typing.Union[str, ros_cdk_core.IResolvable] Attribute Permissions: RbacPermission Template, support RbacPermission/Template/CryptoServiceKeyUser and RbacPermission/Template/CryptoServiceSecretUser.
attr_policy_name typing.Union[str, ros_cdk_core.IResolvable] Attribute PolicyName: The name of the permission policy.
attr_resources typing.Union[str, ros_cdk_core.IResolvable] Attribute Resources: Resources that allowed access by this policy.
props PolicyProps No description.

nodeRequired 

node: ConstructNode
  • Type: ros_cdk_core.ConstructNode

The construct tree node for this construct.

envRequired 

env: IResourceEnvironment
  • Type: ros_cdk_core.IResourceEnvironment

The environment this resource belongs to.

For resources that are created and managed by the CDK (generally, those created by creating new class instances like Role, Bucket, etc.), this is always the same as the environment of the stack they belong to; however, for imported resources (those obtained from static methods like fromRoleArn, fromBucketName, etc.), that might be different than the stack they were imported into.

stackRequired 

stack: Stack
  • Type: ros_cdk_core.Stack

The stack in which this resource is defined.

attr_access_control_rulesRequired 

attr_access_control_rules: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Attribute AccessControlRules: Network Rules info.

attr_descriptionRequired 

attr_description: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Attribute Description: Description.

attr_kms_instance_idRequired 

attr_kms_instance_id: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Attribute KmsInstanceId: The scope of the permission policy.

You need to specify the KMS instance that you want to access.

attr_permissionsRequired 

attr_permissions: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Attribute Permissions: RbacPermission Template, support RbacPermission/Template/CryptoServiceKeyUser and RbacPermission/Template/CryptoServiceSecretUser.

attr_policy_nameRequired 

attr_policy_name: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Attribute PolicyName: The name of the permission policy.

attr_resourcesRequired 

attr_resources: typing.Union[str, IResolvable]
  • Type: typing.Union[str, ros_cdk_core.IResolvable]

Attribute Resources: Resources that allowed access by this policy.

propsRequired 

props: PolicyProps