RoleProps
Properties for defining a Role
.
See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-ram-role
Initializer
import { RoleProps } from '@alicloud/ros-cdk-ram'
const roleProps: RoleProps = { ... }
Properties
Name | Type | Description |
---|---|---|
assumeRolePolicyDocument |
@alicloud/ros-cdk-core.IResolvable | AssumeRolePolicyDocumentProperty |
Property assumeRolePolicyDocument: The RAM assume role policy that is associated with this role. |
roleName |
string | @alicloud/ros-cdk-core.IResolvable |
Property roleName: Specifies the role name, containing up to 64 characters. |
deletionForce |
boolean | @alicloud/ros-cdk-core.IResolvable |
Property deletionForce: Whether force detach the policies attached to the role. |
description |
string | @alicloud/ros-cdk-core.IResolvable |
Property description: Remark information, up to 1024 characters or Chinese characters. |
ignoreExisting |
boolean | @alicloud/ros-cdk-core.IResolvable |
Property ignoreExisting: Whether to ignore existing role False: ROS will perform a uniqueness check.If a role with the same name exists, an error will be reported when creating it. True: ROS will not check the uniqueness.If there is a role with the same name, the role creation process will be ignored. If the role is not created by ROS, it will be ignored during update and delete stage. |
maxSessionDuration |
number | @alicloud/ros-cdk-core.IResolvable |
Property maxSessionDuration: The maximum session duration of the RAM role. |
policies |
@alicloud/ros-cdk-core.IResolvable | @alicloud/ros-cdk-core.IResolvable | PoliciesProperty[] |
Property policies: Describes what actions are allowed on what resources. |
policyAttachments |
@alicloud/ros-cdk-core.IResolvable | PolicyAttachmentsProperty |
Property policyAttachments: System and custom policy names to attach. |
assumeRolePolicyDocument
Required
public readonly assumeRolePolicyDocument: IResolvable | AssumeRolePolicyDocumentProperty;
- Type: @alicloud/ros-cdk-core.IResolvable | AssumeRolePolicyDocumentProperty
Property assumeRolePolicyDocument: The RAM assume role policy that is associated with this role.
roleName
Required
public readonly roleName: string | IResolvable;
- Type: string | @alicloud/ros-cdk-core.IResolvable
Property roleName: Specifies the role name, containing up to 64 characters.
deletionForce
Optional
public readonly deletionForce: boolean | IResolvable;
- Type: boolean | @alicloud/ros-cdk-core.IResolvable
Property deletionForce: Whether force detach the policies attached to the role.
Default value is false.
description
Optional
public readonly description: string | IResolvable;
- Type: string | @alicloud/ros-cdk-core.IResolvable
Property description: Remark information, up to 1024 characters or Chinese characters.
ignoreExisting
Optional
public readonly ignoreExisting: boolean | IResolvable;
- Type: boolean | @alicloud/ros-cdk-core.IResolvable
Property ignoreExisting: Whether to ignore existing role False: ROS will perform a uniqueness check.If a role with the same name exists, an error will be reported when creating it. True: ROS will not check the uniqueness.If there is a role with the same name, the role creation process will be ignored. If the role is not created by ROS, it will be ignored during update and delete stage.
maxSessionDuration
Optional
public readonly maxSessionDuration: number | IResolvable;
- Type: number | @alicloud/ros-cdk-core.IResolvable
Property maxSessionDuration: The maximum session duration of the RAM role.
Valid values: 3600 to 43200. Unit: seconds. Default value: 3600. The default value is used if the parameter is not specified.
policies
Optional
public readonly policies: IResolvable | IResolvable | PoliciesProperty[];
- Type: @alicloud/ros-cdk-core.IResolvable | @alicloud/ros-cdk-core.IResolvable | PoliciesProperty[]
Property policies: Describes what actions are allowed on what resources.
policyAttachments
Optional
public readonly policyAttachments: IResolvable | PolicyAttachmentsProperty;
- Type: @alicloud/ros-cdk-core.IResolvable | PolicyAttachmentsProperty
Property policyAttachments: System and custom policy names to attach.