interface AccessControlAttributeProperty

Language	Type name
.NET	Amazon.CDK.Mixins.Preview.AWS.SSO.Mixins.CfnInstanceAccessControlAttributeConfigurationPropsMixin.AccessControlAttributeProperty
Go	github.com/aws/aws-cdk-go/awscdkmixinspreview/v2/awssso/mixins#CfnInstanceAccessControlAttributeConfigurationPropsMixin_AccessControlAttributeProperty
Java	software.amazon.awscdk.mixins.preview.services.sso.mixins.CfnInstanceAccessControlAttributeConfigurationPropsMixin.AccessControlAttributeProperty
Python	aws_cdk.mixins_preview.aws_sso.mixins.CfnInstanceAccessControlAttributeConfigurationPropsMixin.AccessControlAttributeProperty
TypeScript	@aws-cdk/mixins-preview » aws_sso » mixins » CfnInstanceAccessControlAttributeConfigurationPropsMixin » AccessControlAttributeProperty

These are IAM Identity Center identity store attributes that you can configure for use in attributes-based access control (ABAC).

You can create permissions policies that determine who can access your AWS resources based upon the configured attribute values. When you enable ABAC and specify AccessControlAttributes , IAM Identity Center passes the attribute values of the authenticated user into IAM for use in policy evaluation.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sso-instanceaccesscontrolattributeconfiguration-accesscontrolattribute.html

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { mixins as sso_mixins } from '@aws-cdk/mixins-preview/aws-sso';
const accessControlAttributeProperty: sso_mixins.CfnInstanceAccessControlAttributeConfigurationPropsMixin.AccessControlAttributeProperty = {
  key: 'key',
  value: {
    source: ['source'],
  },
};

Properties

Name	Type	Description
key?	string	The name of the attribute associated with your identities in your identity source.
value?	IResolvable | AccessControlAttributeValueProperty	The value used for mapping a specified attribute to an identity source.

---

key?

Type: string (optional)

The name of the attribute associated with your identities in your identity source.

This is used to map a specified attribute in your identity source with an attribute in IAM Identity Center .

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sso-instanceaccesscontrolattributeconfiguration-accesscontrolattribute.html#cfn-sso-instanceaccesscontrolattributeconfiguration-accesscontrolattribute-key

---

value?

Type: IResolvable | AccessControlAttributeValueProperty (optional)

The value used for mapping a specified attribute to an identity source.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sso-instanceaccesscontrolattributeconfiguration-accesscontrolattribute.html#cfn-sso-instanceaccesscontrolattributeconfiguration-accesscontrolattribute-value