Class CfnInstanceAccessControlAttributeConfiguration
Enables the attribute-based access control (ABAC) feature for the specified IAM Identity Center instance.
Inheritance
Implements
Inherited Members
Namespace: Amazon.CDK.AWS.SSO
Assembly: Amazon.CDK.Lib.dll
Syntax (csharp)
public class CfnInstanceAccessControlAttributeConfiguration : CfnResource, IInspectable
Syntax (vb)
Public Class CfnInstanceAccessControlAttributeConfiguration Inherits CfnResource Implements IInspectable
Remarks
You can also specify new attributes to add to your ABAC configuration during the enabling process. For more information about ABAC, see Attribute-Based Access Control in the IAM Identity Center User Guide .
The <code>InstanceAccessControlAttributeConfiguration</code> property has been deprecated but is still supported for backwards compatibility purposes. We recommend that you use the <code>AccessControlAttributes</code> property instead.
CloudformationResource: AWS::SSO::InstanceAccessControlAttributeConfiguration
ExampleMetadata: fixture=_generated
Examples
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
using Amazon.CDK.AWS.SSO;
var cfnInstanceAccessControlAttributeConfiguration = new CfnInstanceAccessControlAttributeConfiguration(this, "MyCfnInstanceAccessControlAttributeConfiguration", new CfnInstanceAccessControlAttributeConfigurationProps {
InstanceArn = "instanceArn",
// the properties below are optional
AccessControlAttributes = new [] { new AccessControlAttributeProperty {
Key = "key",
Value = new AccessControlAttributeValueProperty {
Source = new [] { "source" }
}
} },
InstanceAccessControlAttributeConfiguration = new InstanceAccessControlAttributeConfigurationProperty {
AccessControlAttributes = new [] { new AccessControlAttributeProperty {
Key = "key",
Value = new AccessControlAttributeValueProperty {
Source = new [] { "source" }
}
} }
}
});
Synopsis
Constructors
CfnInstanceAccessControlAttributeConfiguration(Construct, string, ICfnInstanceAccessControlAttributeConfigurationProps) | Enables the attribute-based access control (ABAC) feature for the specified IAM Identity Center instance. |
Properties
AccessControlAttributes | Lists the attributes that are configured for ABAC in the specified IAM Identity Center instance. |
CFN_RESOURCE_TYPE_NAME | The CloudFormation resource type name for this resource class. |
CfnProperties | Enables the attribute-based access control (ABAC) feature for the specified IAM Identity Center instance. |
InstanceAccessControlAttributeConfiguration | (deprecated) The InstanceAccessControlAttributeConfiguration property has been deprecated but is still supported for backwards compatibility purposes. |
InstanceArn | The ARN of the IAM Identity Center instance under which the operation will be executed. |
Methods
Inspect(TreeInspector) | Examines the CloudFormation resource and discloses attributes. |
RenderProperties(IDictionary<string, object>) | Enables the attribute-based access control (ABAC) feature for the specified IAM Identity Center instance. |
Constructors
CfnInstanceAccessControlAttributeConfiguration(Construct, string, ICfnInstanceAccessControlAttributeConfigurationProps)
Enables the attribute-based access control (ABAC) feature for the specified IAM Identity Center instance.
public CfnInstanceAccessControlAttributeConfiguration(Construct scope, string id, ICfnInstanceAccessControlAttributeConfigurationProps props)
Parameters
- scope Construct
Scope in which this resource is defined.
- id string
Construct identifier for this resource (unique in its scope).
- props ICfnInstanceAccessControlAttributeConfigurationProps
Resource properties.
Remarks
You can also specify new attributes to add to your ABAC configuration during the enabling process. For more information about ABAC, see Attribute-Based Access Control in the IAM Identity Center User Guide .
The <code>InstanceAccessControlAttributeConfiguration</code> property has been deprecated but is still supported for backwards compatibility purposes. We recommend that you use the <code>AccessControlAttributes</code> property instead.
CloudformationResource: AWS::SSO::InstanceAccessControlAttributeConfiguration
ExampleMetadata: fixture=_generated
Properties
AccessControlAttributes
Lists the attributes that are configured for ABAC in the specified IAM Identity Center instance.
public virtual object? AccessControlAttributes { get; set; }
Property Value
Remarks
You can also specify new attributes to add to your ABAC configuration during the enabling process. For more information about ABAC, see Attribute-Based Access Control in the IAM Identity Center User Guide .
The <code>InstanceAccessControlAttributeConfiguration</code> property has been deprecated but is still supported for backwards compatibility purposes. We recommend that you use the <code>AccessControlAttributes</code> property instead.
CloudformationResource: AWS::SSO::InstanceAccessControlAttributeConfiguration
ExampleMetadata: fixture=_generated
CFN_RESOURCE_TYPE_NAME
The CloudFormation resource type name for this resource class.
public static string CFN_RESOURCE_TYPE_NAME { get; }
Property Value
Remarks
You can also specify new attributes to add to your ABAC configuration during the enabling process. For more information about ABAC, see Attribute-Based Access Control in the IAM Identity Center User Guide .
The <code>InstanceAccessControlAttributeConfiguration</code> property has been deprecated but is still supported for backwards compatibility purposes. We recommend that you use the <code>AccessControlAttributes</code> property instead.
CloudformationResource: AWS::SSO::InstanceAccessControlAttributeConfiguration
ExampleMetadata: fixture=_generated
CfnProperties
Enables the attribute-based access control (ABAC) feature for the specified IAM Identity Center instance.
protected override IDictionary<string, object> CfnProperties { get; }
Property Value
Overrides
Remarks
You can also specify new attributes to add to your ABAC configuration during the enabling process. For more information about ABAC, see Attribute-Based Access Control in the IAM Identity Center User Guide .
The <code>InstanceAccessControlAttributeConfiguration</code> property has been deprecated but is still supported for backwards compatibility purposes. We recommend that you use the <code>AccessControlAttributes</code> property instead.
CloudformationResource: AWS::SSO::InstanceAccessControlAttributeConfiguration
ExampleMetadata: fixture=_generated
InstanceAccessControlAttributeConfiguration
(deprecated) The InstanceAccessControlAttributeConfiguration property has been deprecated but is still supported for backwards compatibility purposes.
[Obsolete("this property has been deprecated")]
public virtual object? InstanceAccessControlAttributeConfiguration { get; set; }
Property Value
Remarks
Stability: Deprecated
InstanceArn
The ARN of the IAM Identity Center instance under which the operation will be executed.
public virtual string InstanceArn { get; set; }
Property Value
Remarks
You can also specify new attributes to add to your ABAC configuration during the enabling process. For more information about ABAC, see Attribute-Based Access Control in the IAM Identity Center User Guide .
The <code>InstanceAccessControlAttributeConfiguration</code> property has been deprecated but is still supported for backwards compatibility purposes. We recommend that you use the <code>AccessControlAttributes</code> property instead.
CloudformationResource: AWS::SSO::InstanceAccessControlAttributeConfiguration
ExampleMetadata: fixture=_generated
Methods
Inspect(TreeInspector)
Examines the CloudFormation resource and discloses attributes.
public virtual void Inspect(TreeInspector inspector)
Parameters
- inspector TreeInspector
tree inspector to collect and process attributes.
Remarks
You can also specify new attributes to add to your ABAC configuration during the enabling process. For more information about ABAC, see Attribute-Based Access Control in the IAM Identity Center User Guide .
The <code>InstanceAccessControlAttributeConfiguration</code> property has been deprecated but is still supported for backwards compatibility purposes. We recommend that you use the <code>AccessControlAttributes</code> property instead.
CloudformationResource: AWS::SSO::InstanceAccessControlAttributeConfiguration
ExampleMetadata: fixture=_generated
RenderProperties(IDictionary<string, object>)
Enables the attribute-based access control (ABAC) feature for the specified IAM Identity Center instance.
protected override IDictionary<string, object> RenderProperties(IDictionary<string, object> props)
Parameters
- props IDictionary<string, object>
Returns
Overrides
Remarks
You can also specify new attributes to add to your ABAC configuration during the enabling process. For more information about ABAC, see Attribute-Based Access Control in the IAM Identity Center User Guide .
The <code>InstanceAccessControlAttributeConfiguration</code> property has been deprecated but is still supported for backwards compatibility purposes. We recommend that you use the <code>AccessControlAttributes</code> property instead.
CloudformationResource: AWS::SSO::InstanceAccessControlAttributeConfiguration
ExampleMetadata: fixture=_generated