Package software.amazon.awscdk.services.sso

Class CfnInstanceAccessControlAttributeConfiguration

java.lang.Object
software.amazon.jsii.JsiiObject
software.constructs.Construct
software.amazon.awscdk.CfnElement
software.amazon.awscdk.CfnRefElement
software.amazon.awscdk.CfnResource
software.amazon.awscdk.services.sso.CfnInstanceAccessControlAttributeConfiguration
All Implemented Interfaces:
IEnvironmentAware, IInspectable, IInstanceAccessControlAttributeConfigurationRef, software.amazon.jsii.JsiiSerializable, software.constructs.IConstruct, software.constructs.IDependable
@Generated(value="jsii-pacmak/1.118.0 (build 02eec31)", date="2025-11-10T13:40:15.749Z") @Stability(Stable) public class CfnInstanceAccessControlAttributeConfiguration extends CfnResource implements IInspectable, IInstanceAccessControlAttributeConfigurationRef
Enables the attribute-based access control (ABAC) feature for the specified IAM Identity Center instance.

You can also specify new attributes to add to your ABAC configuration during the enabling process. For more information about ABAC, see Attribute-Based Access Control in the IAM Identity Center User Guide .

The InstanceAccessControlAttributeConfiguration property has been deprecated but is still supported for backwards compatibility purposes. We recommend that you use the AccessControlAttributes property instead.

Example: 

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.services.sso.*;
 CfnInstanceAccessControlAttributeConfiguration cfnInstanceAccessControlAttributeConfiguration = CfnInstanceAccessControlAttributeConfiguration.Builder.create(this, "MyCfnInstanceAccessControlAttributeConfiguration")
         .instanceArn("instanceArn")
         // the properties below are optional
         .accessControlAttributes(List.of(AccessControlAttributeProperty.builder()
                 .key("key")
                 .value(AccessControlAttributeValueProperty.builder()
                         .source(List.of("source"))
                         .build())
                 .build()))
         .instanceAccessControlAttributeConfiguration(InstanceAccessControlAttributeConfigurationProperty.builder()
                 .accessControlAttributes(List.of(AccessControlAttributeProperty.builder()
                         .key("key")
                         .value(AccessControlAttributeValueProperty.builder()
                                 .source(List.of("source"))
                                 .build())
                         .build()))
                 .build())
         .build();

See Also:

  • Field Details

    • CFN_RESOURCE_TYPE_NAME

      @Stability(Stable) public static final String CFN_RESOURCE_TYPE_NAME
      The CloudFormation resource type name for this resource class.

  • Constructor Details

    • CfnInstanceAccessControlAttributeConfiguration

      protected CfnInstanceAccessControlAttributeConfiguration(software.amazon.jsii.JsiiObjectRef objRef)

    • CfnInstanceAccessControlAttributeConfiguration

      protected CfnInstanceAccessControlAttributeConfiguration(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)

    • CfnInstanceAccessControlAttributeConfiguration

      @Stability(Stable) public CfnInstanceAccessControlAttributeConfiguration(@NotNull software.constructs.Construct scope, @NotNull String id, @NotNull CfnInstanceAccessControlAttributeConfigurationProps props)
      Parameters:
      scope - Scope in which this resource is defined. This parameter is required.
      id - Construct identifier for this resource (unique in its scope). This parameter is required.
      props - Resource properties. This parameter is required.

  • Method Details

    • inspect

      @Stability(Stable) public void inspect(@NotNull TreeInspector inspector)
      Examines the CloudFormation resource and discloses attributes.

      Specified by:
      inspect in interface IInspectable
      Parameters:
      inspector - tree inspector to collect and process attributes. This parameter is required.

    • renderProperties

      @Stability(Stable) @NotNull protected Map<String,Object> renderProperties(@NotNull Map<String,Object> props)
      Overrides:
      renderProperties in class CfnResource
      Parameters:
      props - This parameter is required.

    • getCfnProperties

      @Stability(Stable) @NotNull protected Map<String,Object> getCfnProperties()
      Overrides:
      getCfnProperties in class CfnResource

    • getInstanceAccessControlAttributeConfigurationRef

      @Stability(Stable) @NotNull public InstanceAccessControlAttributeConfigurationReference getInstanceAccessControlAttributeConfigurationRef()
      A reference to a InstanceAccessControlAttributeConfiguration resource.
      Specified by:
      getInstanceAccessControlAttributeConfigurationRef in interface IInstanceAccessControlAttributeConfigurationRef

    • getInstanceArn

      @Stability(Stable) @NotNull public String getInstanceArn()
      The ARN of the IAM Identity Center instance under which the operation will be executed.

    • setInstanceArn

      @Stability(Stable) public void setInstanceArn(@NotNull String value)
      The ARN of the IAM Identity Center instance under which the operation will be executed.

    • getAccessControlAttributes

      @Stability(Stable) @Nullable public Object getAccessControlAttributes()
      Lists the attributes that are configured for ABAC in the specified IAM Identity Center instance.

      Returns union: either IResolvable or Listinvalid input: '<'either IResolvable or CfnInstanceAccessControlAttributeConfiguration.AccessControlAttributeProperty>

    • setAccessControlAttributes

      @Stability(Stable) public void setAccessControlAttributes(@Nullable IResolvable value)
      Lists the attributes that are configured for ABAC in the specified IAM Identity Center instance.

    • setAccessControlAttributes

      @Stability(Stable) public void setAccessControlAttributes(@Nullable List<Object> value)
      Lists the attributes that are configured for ABAC in the specified IAM Identity Center instance.

    • getInstanceAccessControlAttributeConfiguration

      @Stability(Deprecated) @Deprecated @Nullable public Object getInstanceAccessControlAttributeConfiguration()
      Deprecated.
      this property has been deprecated
      (deprecated) The InstanceAccessControlAttributeConfiguration property has been deprecated but is still supported for backwards compatibility purposes.

      Returns union: either IResolvable or CfnInstanceAccessControlAttributeConfiguration.InstanceAccessControlAttributeConfigurationProperty

    • setInstanceAccessControlAttributeConfiguration

      @Stability(Deprecated) @Deprecated public void setInstanceAccessControlAttributeConfiguration(@Nullable IResolvable value)
      Deprecated.
      this property has been deprecated
      (deprecated) The InstanceAccessControlAttributeConfiguration property has been deprecated but is still supported for backwards compatibility purposes.

    • setInstanceAccessControlAttributeConfiguration

      @Stability(Deprecated) @Deprecated public void setInstanceAccessControlAttributeConfiguration(@Nullable CfnInstanceAccessControlAttributeConfiguration.InstanceAccessControlAttributeConfigurationProperty value)
      Deprecated.
      this property has been deprecated
      (deprecated) The InstanceAccessControlAttributeConfiguration property has been deprecated but is still supported for backwards compatibility purposes.