/AWS1/CL_AANKMSGRANTCONF¶
A proposed grant configuration for a KMS key. For more information, see CreateGrant.
CONSTRUCTOR¶
IMPORTING¶
Required arguments:¶
it_operations TYPE /AWS1/CL_AANKMSGRANTOPSLIST_W=>TT_KMSGRANTOPERATIONSLIST TT_KMSGRANTOPERATIONSLIST¶
A list of operations that the grant permits.
iv_granteeprincipal TYPE /AWS1/AANGRANTEEPRINCIPAL /AWS1/AANGRANTEEPRINCIPAL¶
The principal that is given permission to perform the operations that the grant permits.
iv_issuingaccount TYPE /AWS1/AANISSUINGACCOUNT /AWS1/AANISSUINGACCOUNT¶
The Amazon Web Services account under which the grant was issued. The account is used to propose KMS grants issued by accounts other than the owner of the key.
Optional arguments:¶
iv_retiringprincipal TYPE /AWS1/AANRETIRINGPRINCIPAL /AWS1/AANRETIRINGPRINCIPAL¶
The principal that is given permission to retire the grant by using RetireGrant operation.
io_constraints TYPE REF TO /AWS1/CL_AANKMSGRANTCNSTRNTS /AWS1/CL_AANKMSGRANTCNSTRNTS¶
Use this structure to propose allowing cryptographic operations in the grant only when the operation request includes the specified encryption context.
Queryable Attributes¶
operations¶
A list of operations that the grant permits.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_OPERATIONS() |
Getter for OPERATIONS, with configurable default |
ASK_OPERATIONS() |
Getter for OPERATIONS w/ exceptions if field has no value |
HAS_OPERATIONS() |
Determine if OPERATIONS has a value |
granteePrincipal¶
The principal that is given permission to perform the operations that the grant permits.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_GRANTEEPRINCIPAL() |
Getter for GRANTEEPRINCIPAL, with configurable default |
ASK_GRANTEEPRINCIPAL() |
Getter for GRANTEEPRINCIPAL w/ exceptions if field has no va |
HAS_GRANTEEPRINCIPAL() |
Determine if GRANTEEPRINCIPAL has a value |
retiringPrincipal¶
The principal that is given permission to retire the grant by using RetireGrant operation.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_RETIRINGPRINCIPAL() |
Getter for RETIRINGPRINCIPAL, with configurable default |
ASK_RETIRINGPRINCIPAL() |
Getter for RETIRINGPRINCIPAL w/ exceptions if field has no v |
HAS_RETIRINGPRINCIPAL() |
Determine if RETIRINGPRINCIPAL has a value |
constraints¶
Use this structure to propose allowing cryptographic operations in the grant only when the operation request includes the specified encryption context.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_CONSTRAINTS() |
Getter for CONSTRAINTS |
issuingAccount¶
The Amazon Web Services account under which the grant was issued. The account is used to propose KMS grants issued by accounts other than the owner of the key.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_ISSUINGACCOUNT() |
Getter for ISSUINGACCOUNT, with configurable default |
ASK_ISSUINGACCOUNT() |
Getter for ISSUINGACCOUNT w/ exceptions if field has no valu |
HAS_ISSUINGACCOUNT() |
Determine if ISSUINGACCOUNT has a value |
Public Local Types In This Class¶
Internal table types, representing arrays and maps of this class, are defined as local types:
TT_KMSGRANTCONFIGURATIONSLIST¶
TYPES TT_KMSGRANTCONFIGURATIONSLIST TYPE STANDARD TABLE OF REF TO /AWS1/CL_AANKMSGRANTCONF WITH DEFAULT KEY
.