aws-cdk-lib.custom_resources.SdkCallsPolicyOptions

SdkCallsPolicyOptions Struct

Options for the auto-generation of policies based on the configured SDK calls.

Source

custom-resources/lib/aws-custom-resource/aws-custom-resource.ts

Example

const getParameter = new cr.AwsCustomResource(this, 'GetParameter', {
  onUpdate: {
    service: 'SSM',
    action: 'GetParameter',
    parameters: {
      Name: 'my-parameter',
      WithDecryption: true,
    },
    physicalResourceId: cr.PhysicalResourceId.of(Date.now().toString()),
    logging: cr.Logging.withDataHidden(),
  },
  policy: cr.AwsCustomResourcePolicy.fromSdkCalls({
    resources: cr.AwsCustomResourcePolicy.ANY_RESOURCE,
  }),
});

Properties

resourcesstring[]resourcestyping.List[str]resourcesList<String>Resourcesstring[]Resources*[]*stringrequired#

The resources that the calls will have access to.

notes

It is best to use specific resource ARN's when possible. However, you can also use AwsCustomResourcePolicy.ANY_RESOURCE to allow access to all resources. For example, when onCreate is used to create a resource which you don't know the physical name of in advance.

Note that will apply to ALL SDK calls.