Class CfnEventBusPolicy
- All Implemented Interfaces:
IInspectable,IEventBusPolicyRef,software.amazon.jsii.JsiiSerializable,software.constructs.IConstruct,software.constructs.IDependable
PutPermission permits the specified AWS account or AWS organization to put events to the specified event bus .
Amazon EventBridge rules in your account are triggered by these events arriving to an event bus in your account.
For another account to send events to your account, that external account must have an EventBridge rule with your account's event bus as a target.
To enable multiple AWS accounts to put events to your event bus, run PutPermission once for each of these accounts. Or, if all the accounts are members of the same AWS organization, you can run PutPermission once specifying Principal as "*" and specifying the AWS organization ID in Condition , to grant permissions to all accounts in that organization.
If you grant permissions using an organization, then accounts in that organization must specify a RoleArn with proper permissions when they use PutTarget to add your account's event bus as a target. For more information, see Sending and Receiving Events Between AWS Accounts in the Amazon EventBridge User Guide .
The permission policy on the event bus cannot exceed 10 KB in size.
Example:
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import software.amazon.awscdk.services.events.*;
Object statement;
CfnEventBusPolicy cfnEventBusPolicy = CfnEventBusPolicy.Builder.create(this, "MyCfnEventBusPolicy")
.statementId("statementId")
// the properties below are optional
.action("action")
.condition(ConditionProperty.builder()
.key("key")
.type("type")
.value("value")
.build())
.eventBusName("eventBusName")
.principal("principal")
.statement(statement)
.build();
- See Also:
-
Nested Class Summary
Nested ClassesModifier and TypeClassDescriptionstatic final classA fluent builder forCfnEventBusPolicy.static interfaceA JSON string which you can use to limit the event bus permissions you are granting to only accounts that fulfill the condition.Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject
software.amazon.jsii.JsiiObject.InitializationModeNested classes/interfaces inherited from interface software.constructs.IConstruct
software.constructs.IConstruct.Jsii$DefaultNested classes/interfaces inherited from interface software.amazon.awscdk.services.events.IEventBusPolicyRef
IEventBusPolicyRef.Jsii$Default, IEventBusPolicyRef.Jsii$ProxyNested classes/interfaces inherited from interface software.amazon.awscdk.IInspectable
IInspectable.Jsii$Default, IInspectable.Jsii$Proxy -
Field Summary
FieldsModifier and TypeFieldDescriptionstatic final StringThe CloudFormation resource type name for this resource class. -
Constructor Summary
ConstructorsModifierConstructorDescriptionprotectedCfnEventBusPolicy(software.amazon.jsii.JsiiObject.InitializationMode initializationMode) protectedCfnEventBusPolicy(software.amazon.jsii.JsiiObjectRef objRef) CfnEventBusPolicy(software.constructs.Construct scope, String id, CfnEventBusPolicyProps props) -
Method Summary
Modifier and TypeMethodDescriptionThe action that you are enabling the other account to perform.This parameter enables you to limit the permission to accounts that fulfill a certain condition, such as being a member of a certain AWS organization.The name of the event bus associated with the rule.A reference to a EventBusPolicy resource.The 12-digit AWS account ID that you are permitting to put events to your default event bus.A JSON string that describes the permission policy statement.An identifier string for the external account that you are granting permissions to.voidinspect(TreeInspector inspector) Examines the CloudFormation resource and discloses attributes.renderProperties(Map<String, Object> props) voidThe action that you are enabling the other account to perform.voidsetCondition(IResolvable value) This parameter enables you to limit the permission to accounts that fulfill a certain condition, such as being a member of a certain AWS organization.voidThis parameter enables you to limit the permission to accounts that fulfill a certain condition, such as being a member of a certain AWS organization.voidsetEventBusName(String value) The name of the event bus associated with the rule.voidsetPrincipal(String value) The 12-digit AWS account ID that you are permitting to put events to your default event bus.voidsetStatement(Object value) A JSON string that describes the permission policy statement.voidsetStatementId(String value) An identifier string for the external account that you are granting permissions to.Methods inherited from class software.amazon.awscdk.CfnResource
addDeletionOverride, addDependency, addDependsOn, addMetadata, addOverride, addPropertyDeletionOverride, addPropertyOverride, applyRemovalPolicy, applyRemovalPolicy, applyRemovalPolicy, getAtt, getAtt, getCfnOptions, getCfnResourceType, getMetadata, getUpdatedProperites, getUpdatedProperties, isCfnResource, obtainDependencies, obtainResourceDependencies, removeDependency, replaceDependency, shouldSynthesize, toString, validatePropertiesMethods inherited from class software.amazon.awscdk.CfnRefElement
getRefMethods inherited from class software.amazon.awscdk.CfnElement
getCreationStack, getLogicalId, getStack, isCfnElement, overrideLogicalIdMethods inherited from class software.constructs.Construct
getNode, isConstructMethods inherited from class software.amazon.jsii.JsiiObject
jsiiAsyncCall, jsiiAsyncCall, jsiiCall, jsiiCall, jsiiGet, jsiiGet, jsiiSet, jsiiStaticCall, jsiiStaticCall, jsiiStaticGet, jsiiStaticGet, jsiiStaticSet, jsiiStaticSetMethods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, waitMethods inherited from interface software.constructs.IConstruct
getNodeMethods inherited from interface software.amazon.jsii.JsiiSerializable
$jsii$toJson
-
Field Details
-
CFN_RESOURCE_TYPE_NAME
The CloudFormation resource type name for this resource class.
-
-
Constructor Details
-
CfnEventBusPolicy
protected CfnEventBusPolicy(software.amazon.jsii.JsiiObjectRef objRef) -
CfnEventBusPolicy
protected CfnEventBusPolicy(software.amazon.jsii.JsiiObject.InitializationMode initializationMode) -
CfnEventBusPolicy
@Stability(Stable) public CfnEventBusPolicy(@NotNull software.constructs.Construct scope, @NotNull String id, @NotNull CfnEventBusPolicyProps props) - Parameters:
scope- Scope in which this resource is defined. This parameter is required.id- Construct identifier for this resource (unique in its scope). This parameter is required.props- Resource properties. This parameter is required.
-
-
Method Details
-
inspect
Examines the CloudFormation resource and discloses attributes.- Specified by:
inspectin interfaceIInspectable- Parameters:
inspector- tree inspector to collect and process attributes. This parameter is required.
-
renderProperties
@Stability(Stable) @NotNull protected Map<String,Object> renderProperties(@NotNull Map<String, Object> props) - Overrides:
renderPropertiesin classCfnResource- Parameters:
props- This parameter is required.
-
getAttrId
-
getCfnProperties
- Overrides:
getCfnPropertiesin classCfnResource
-
getEventBusPolicyRef
A reference to a EventBusPolicy resource.- Specified by:
getEventBusPolicyRefin interfaceIEventBusPolicyRef
-
getStatementId
An identifier string for the external account that you are granting permissions to. -
setStatementId
An identifier string for the external account that you are granting permissions to. -
getAction
The action that you are enabling the other account to perform. -
setAction
The action that you are enabling the other account to perform. -
getCondition
This parameter enables you to limit the permission to accounts that fulfill a certain condition, such as being a member of a certain AWS organization. -
setCondition
This parameter enables you to limit the permission to accounts that fulfill a certain condition, such as being a member of a certain AWS organization. -
setCondition
This parameter enables you to limit the permission to accounts that fulfill a certain condition, such as being a member of a certain AWS organization. -
getEventBusName
The name of the event bus associated with the rule. -
setEventBusName
The name of the event bus associated with the rule. -
getPrincipal
The 12-digit AWS account ID that you are permitting to put events to your default event bus. -
setPrincipal
The 12-digit AWS account ID that you are permitting to put events to your default event bus. -
getStatement
A JSON string that describes the permission policy statement. -
setStatement
A JSON string that describes the permission policy statement.
-