Package software.amazon.awscdk.services.bedrockagentcore

Interface IWorkloadIdentity.Jsii$Default

All Superinterfaces:
software.constructs.IConstruct, software.constructs.IConstruct.Jsii$Default, software.constructs.IDependable, software.constructs.IDependable.Jsii$Default, IEnvironmentAware, IEnvironmentAware.Jsii$Default, IGrantable, IGrantable.Jsii$Default, IResource, IResource.Jsii$Default, IWorkloadIdentity, IWorkloadIdentityRef, IWorkloadIdentityRef.Jsii$Default, software.amazon.jsii.JsiiSerializable
All Known Implementing Classes:
IWorkloadIdentity.Jsii$Proxy
Enclosing interface:
IWorkloadIdentity
@Internal public static interface IWorkloadIdentity.Jsii$Default extends IWorkloadIdentity, IResource.Jsii$Default, IWorkloadIdentityRef.Jsii$Default, IGrantable.Jsii$Default
Internal default implementation for IWorkloadIdentity.

  • Method Details

    • getWorkloadIdentityArn

      @Stability(Stable) @NotNull default String getWorkloadIdentityArn()
      The ARN of this workload identity.
      Specified by:
      getWorkloadIdentityArn in interface IWorkloadIdentity

    • getWorkloadIdentityName

      @Stability(Stable) @NotNull default String getWorkloadIdentityName()
      The name of this workload identity.
      Specified by:
      getWorkloadIdentityName in interface IWorkloadIdentity

    • getCreatedTime

      @Stability(Stable) @Nullable default String getCreatedTime()
      Timestamp when the workload identity was created.
      Specified by:
      getCreatedTime in interface IWorkloadIdentity

    • getLastUpdatedTime

      @Stability(Stable) @Nullable default String getLastUpdatedTime()
      Timestamp when the workload identity was last updated.
      Specified by:
      getLastUpdatedTime in interface IWorkloadIdentity

    • grant

      @Stability(Stable) @NotNull default Grant grant(@NotNull IGrantable grantee, @NotNull String... actions)
      Grants IAM actions on this workload identity, scoped to its ARN and the parent resources required by the Bedrock AgentCore authorization model.

      Specified by:
      grant in interface IWorkloadIdentity
      Parameters:
      grantee - This parameter is required.
      actions - This parameter is required.

    • grantAdmin

      @Stability(Stable) @NotNull default Grant grantAdmin(@NotNull IGrantable grantee)
      Grant control plane permissions to manage this workload identity.

      Specified by:
      grantAdmin in interface IWorkloadIdentity
      Parameters:
      grantee - This parameter is required.

    • grantFullAccess

      @Stability(Stable) @NotNull default Grant grantFullAccess(@NotNull IGrantable grantee)
      Grant read, list, admin, and use permissions.

      Specified by:
      grantFullAccess in interface IWorkloadIdentity
      Parameters:
      grantee - This parameter is required.

    • grantRead

      @Stability(Stable) @NotNull default Grant grantRead(@NotNull IGrantable grantee)
      Grant GetWorkloadIdentity and ListWorkloadIdentities, scoped to this identity and parent resources required by the Bedrock AgentCore authorization model.

      Specified by:
      grantRead in interface IWorkloadIdentity
      Parameters:
      grantee - This parameter is required.

    • grantUse

      @Stability(Stable) @NotNull default Grant grantUse(@NotNull IGrantable grantee)
      Grant data plane permissions to mint workload access tokens (GetWorkloadAccessToken, GetWorkloadAccessTokenForJWT, GetWorkloadAccessTokenForUserId).

      Specified by:
      grantUse in interface IWorkloadIdentity
      Parameters:
      grantee - This parameter is required.