Class CfnInstanceAccessControlAttributeConfiguration
java.lang.Object
software.amazon.jsii.JsiiObject
software.constructs.Construct
software.amazon.awscdk.core.Construct
software.amazon.awscdk.core.CfnElement
software.amazon.awscdk.core.CfnRefElement
software.amazon.awscdk.core.CfnResource
software.amazon.awscdk.services.sso.CfnInstanceAccessControlAttributeConfiguration
- All Implemented Interfaces:
IConstruct,IDependable,IInspectable,software.amazon.jsii.JsiiSerializable,software.constructs.IConstruct
@Generated(value="jsii-pacmak/1.84.0 (build 5404dcf)",
date="2023-06-19T16:30:35.856Z")
@Stability(Stable)
public class CfnInstanceAccessControlAttributeConfiguration
extends CfnResource
implements IInspectable
A CloudFormation
AWS::SSO::InstanceAccessControlAttributeConfiguration.
Enables the attribute-based access control (ABAC) feature for the specified IAM Identity Center instance. You can also specify new attributes to add to your ABAC configuration during the enabling process. For more information about ABAC, see Attribute-Based Access Control in the IAM Identity Center User Guide .
The
InstanceAccessControlAttributeConfigurationproperty has been deprecated but is still supported for backwards compatibility purposes. We recommend that you use theAccessControlAttributesproperty instead.
Example:
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import software.amazon.awscdk.services.sso.*;
CfnInstanceAccessControlAttributeConfiguration cfnInstanceAccessControlAttributeConfiguration = CfnInstanceAccessControlAttributeConfiguration.Builder.create(this, "MyCfnInstanceAccessControlAttributeConfiguration")
.instanceArn("instanceArn")
// the properties below are optional
.accessControlAttributes(List.of(AccessControlAttributeProperty.builder()
.key("key")
.value(AccessControlAttributeValueProperty.builder()
.source(List.of("source"))
.build())
.build()))
.build();
-
Nested Class Summary
Nested ClassesModifier and TypeClassDescriptionstatic interfaceThese are IAM Identity Center identity store attributes that you can configure for use in attributes-based access control (ABAC).static interfaceThe value used for mapping a specified attribute to an identity source.static final classA fluent builder forCfnInstanceAccessControlAttributeConfiguration.Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject
software.amazon.jsii.JsiiObject.InitializationModeNested classes/interfaces inherited from interface software.amazon.awscdk.core.IConstruct
IConstruct.Jsii$DefaultNested classes/interfaces inherited from interface software.constructs.IConstruct
software.constructs.IConstruct.Jsii$DefaultNested classes/interfaces inherited from interface software.amazon.awscdk.core.IInspectable
IInspectable.Jsii$Default, IInspectable.Jsii$Proxy -
Field Summary
FieldsModifier and TypeFieldDescriptionstatic final StringThe CloudFormation resource type name for this resource class. -
Constructor Summary
ConstructorsModifierConstructorDescriptionCfnInstanceAccessControlAttributeConfiguration(Construct scope, String id, CfnInstanceAccessControlAttributeConfigurationProps props) Create a newAWS::SSO::InstanceAccessControlAttributeConfiguration.protectedCfnInstanceAccessControlAttributeConfiguration(software.amazon.jsii.JsiiObject.InitializationMode initializationMode) protectedCfnInstanceAccessControlAttributeConfiguration(software.amazon.jsii.JsiiObjectRef objRef) -
Method Summary
Modifier and TypeMethodDescriptionLists the attributes that are configured for ABAC in the specified IAM Identity Center instance.The ARN of the IAM Identity Center instance under which the operation will be executed.voidinspect(TreeInspector inspector) Examines the CloudFormation resource and discloses attributes.renderProperties(Map<String, Object> props) voidsetAccessControlAttributes(List<Object> value) Lists the attributes that are configured for ABAC in the specified IAM Identity Center instance.voidLists the attributes that are configured for ABAC in the specified IAM Identity Center instance.voidsetInstanceArn(String value) The ARN of the IAM Identity Center instance under which the operation will be executed.Methods inherited from class software.amazon.awscdk.core.CfnResource
addDeletionOverride, addDependsOn, addMetadata, addOverride, addPropertyDeletionOverride, addPropertyOverride, applyRemovalPolicy, applyRemovalPolicy, applyRemovalPolicy, getAtt, getCfnOptions, getCfnResourceType, getMetadata, getUpdatedProperites, isCfnResource, shouldSynthesize, toString, validatePropertiesMethods inherited from class software.amazon.awscdk.core.CfnRefElement
getRefMethods inherited from class software.amazon.awscdk.core.CfnElement
getCreationStack, getLogicalId, getStack, isCfnElement, overrideLogicalIdMethods inherited from class software.amazon.awscdk.core.Construct
getNode, isConstruct, onPrepare, onSynthesize, onValidate, prepare, synthesize, validateMethods inherited from class software.amazon.jsii.JsiiObject
jsiiAsyncCall, jsiiAsyncCall, jsiiCall, jsiiCall, jsiiGet, jsiiGet, jsiiSet, jsiiStaticCall, jsiiStaticCall, jsiiStaticGet, jsiiStaticGet, jsiiStaticSet, jsiiStaticSetMethods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, waitMethods inherited from interface software.amazon.jsii.JsiiSerializable
$jsii$toJson
-
Field Details
-
CFN_RESOURCE_TYPE_NAME
The CloudFormation resource type name for this resource class.
-
-
Constructor Details
-
CfnInstanceAccessControlAttributeConfiguration
protected CfnInstanceAccessControlAttributeConfiguration(software.amazon.jsii.JsiiObjectRef objRef) -
CfnInstanceAccessControlAttributeConfiguration
protected CfnInstanceAccessControlAttributeConfiguration(software.amazon.jsii.JsiiObject.InitializationMode initializationMode) -
CfnInstanceAccessControlAttributeConfiguration
@Stability(Stable) public CfnInstanceAccessControlAttributeConfiguration(@NotNull Construct scope, @NotNull String id, @NotNull CfnInstanceAccessControlAttributeConfigurationProps props) Create a newAWS::SSO::InstanceAccessControlAttributeConfiguration.- Parameters:
scope-- scope in which this resource is defined.
id-- scoped id of the resource.
props-- resource properties.
-
-
Method Details
-
inspect
Examines the CloudFormation resource and discloses attributes.- Specified by:
inspectin interfaceIInspectable- Parameters:
inspector-- tree inspector to collect and process attributes.
-
renderProperties
@Stability(Stable) @NotNull protected Map<String,Object> renderProperties(@NotNull Map<String, Object> props) - Overrides:
renderPropertiesin classCfnResource- Parameters:
props- This parameter is required.
-
getCfnProperties
- Overrides:
getCfnPropertiesin classCfnResource
-
getInstanceArn
The ARN of the IAM Identity Center instance under which the operation will be executed. -
setInstanceArn
The ARN of the IAM Identity Center instance under which the operation will be executed. -
getAccessControlAttributes
Lists the attributes that are configured for ABAC in the specified IAM Identity Center instance. -
setAccessControlAttributes
Lists the attributes that are configured for ABAC in the specified IAM Identity Center instance. -
setAccessControlAttributes
Lists the attributes that are configured for ABAC in the specified IAM Identity Center instance.
-