CfnResourcePolicyMixinProps

class aws_cdk.mixins_preview.aws_secretsmanager.mixins.CfnResourcePolicyMixinProps(*, block_public_policy=None, resource_policy=None, secret_id=None)

Bases: object

Properties for CfnResourcePolicyPropsMixin.

Parameters:

  • block_public_policy (Union[bool, IResolvable, None]) – Specifies whether to block resource-based policies that allow broad access to the secret. By default, Secrets Manager blocks policies that allow broad access, for example those that use a wildcard for the principal.

  • resource_policy (Any) – A JSON-formatted string for an AWS resource-based policy. For example policies, see Permissions policy examples .

  • secret_id (Optional[str]) – The ARN or name of the secret to attach the resource-based policy. For an ARN, we recommend that you specify a complete ARN rather than a partial ARN.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-secretsmanager-resourcepolicy.html

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_secretsmanager import mixins as secretsmanager_mixins

# resource_policy: Any

cfn_resource_policy_mixin_props = secretsmanager_mixins.CfnResourcePolicyMixinProps(
    block_public_policy=False,
    resource_policy=resource_policy,
    secret_id="secretId"
)

Attributes

block_public_policy

Specifies whether to block resource-based policies that allow broad access to the secret.

By default, Secrets Manager blocks policies that allow broad access, for example those that use a wildcard for the principal.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-secretsmanager-resourcepolicy.html#cfn-secretsmanager-resourcepolicy-blockpublicpolicy

resource_policy

A JSON-formatted string for an AWS resource-based policy.

For example policies, see Permissions policy examples .

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-secretsmanager-resourcepolicy.html#cfn-secretsmanager-resourcepolicy-resourcepolicy

secret_id

The ARN or name of the secret to attach the resource-based policy.

For an ARN, we recommend that you specify a complete ARN rather than a partial ARN.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-secretsmanager-resourcepolicy.html#cfn-secretsmanager-resourcepolicy-secretid