AccessPolicy

class aws_cdk.aws_eks_v2_alpha.AccessPolicy(*, access_scope, policy)

Bases: object

(experimental) Represents an Amazon EKS Access Policy that implements the IAccessPolicy interface.

Stability:

experimental

Implements:

IAccessPolicy

ExampleMetadata:

infused

Example:

# cluster: eks.Cluster
# node_role: iam.Role


# Grant access with EC2 type for Auto Mode node role
cluster.grant_access("nodeAccess", node_role.role_arn, [
    eks.AccessPolicy.from_access_policy_name("AmazonEKSAutoNodePolicy",
        access_scope_type=eks.AccessScopeType.CLUSTER
    )
], access_entry_type=eks.AccessEntryType.EC2)

(experimental) Constructs a new instance of the AccessPolicy class.

Parameters:
  • access_scope (Union[AccessScope, Dict[str, Any]]) – (experimental) The scope of the access policy, which determines the level of access granted.

  • policy (AccessPolicyArn) – (experimental) The access policy itself, which defines the specific permissions.

Stability:

experimental

Attributes

access_scope

(experimental) The scope of the access policy, which determines the level of access granted.

Stability:

experimental

policy

(experimental) The access policy itself, which defines the specific permissions.

Stability:

experimental

Static Methods

classmethod from_access_policy_name(policy_name, *, access_scope_type, namespaces=None)

(experimental) Import AccessPolicy by name.

Parameters:
  • policy_name (str)

  • access_scope_type (AccessScopeType) – (experimental) The scope of the access policy. This determines the level of access granted by the policy.

  • namespaces (Optional[Sequence[str]]) – (experimental) An optional array of Kubernetes namespaces to which the access policy applies. Default: - no specific namespaces for this scope

Stability:

experimental

Return type:

IAccessPolicy