SETIDENTITYPOOLROLES()`¶

About SetIdentityPoolRoles¶

Sets the roles for an identity pool. These roles are used when making calls to GetCredentialsForIdentity action.

You must use Amazon Web Services developer credentials to call this operation.

Method Signature¶

METHODS /AWS1/IF_CGI~SETIDENTITYPOOLROLES
  IMPORTING
    !IV_IDENTITYPOOLID TYPE /AWS1/CGIIDENTITYPOOLID OPTIONAL
    !IT_ROLES TYPE /AWS1/CL_CGIROLESMAP_W=>TT_ROLESMAP OPTIONAL
    !IT_ROLEMAPPINGS TYPE /AWS1/CL_CGIROLEMAPPING=>TT_ROLEMAPPINGMAP OPTIONAL
  RAISING
    /AWS1/CX_CGICONCURRENTMODEX
    /AWS1/CX_CGIINTERNALERROREX
    /AWS1/CX_CGIINVALIDPARAMETEREX
    /AWS1/CX_CGINOTAUTHORIZEDEX
    /AWS1/CX_CGIRESOURCECONFLICTEX
    /AWS1/CX_CGIRESOURCENOTFOUNDEX
    /AWS1/CX_CGITOOMANYREQUESTSEX
    /AWS1/CX_CGICLIENTEXC
    /AWS1/CX_CGISERVEREXC
    /AWS1/CX_RT_TECHNICAL_GENERIC
    /AWS1/CX_RT_SERVICE_GENERIC.

IMPORTING¶

Required arguments:¶

`iv_identitypoolid` `TYPE /AWS1/CGIIDENTITYPOOLID` `/AWS1/CGIIDENTITYPOOLID`¶

An identity pool ID in the format REGION:GUID.

`it_roles` `TYPE /AWS1/CL_CGIROLESMAP_W=>TT_ROLESMAP` `TT_ROLESMAP`¶

The map of roles associated with this pool. For a given role, the key will be either "authenticated" or "unauthenticated" and the value will be the Role ARN.

Optional arguments:¶

`it_rolemappings` `TYPE /AWS1/CL_CGIROLEMAPPING=>TT_ROLEMAPPINGMAP` `TT_ROLEMAPPINGMAP`¶

How users for a specific identity provider are to mapped to roles. This is a string to RoleMapping object map. The string identifies the identity provider, for example, graph.facebook.com or cognito-idp.us-east-1.amazonaws.com/us-east-1_abcdefghi:app_client_id.

Up to 25 rules can be specified per identity provider.

Examples¶

Syntax Example¶

This is an example of the syntax for calling the method. It includes every possible argument and initializes every possible value. The data provided is not necessarily semantically accurate (for example the value "string" may be provided for something that is intended to be an instance ID, or in some cases two arguments may be mutually exclusive). The syntax shows the ABAP syntax for creating the various data structures.

lo_client->setidentitypoolroles(
  it_rolemappings = VALUE /aws1/cl_cgirolemapping=>tt_rolemappingmap(
    (
      VALUE /aws1/cl_cgirolemapping=>ts_rolemappingmap_maprow(
        value = new /aws1/cl_cgirolemapping(
          io_rulesconfiguration = new /aws1/cl_cgirulesconftype(
            it_rules = VALUE /aws1/cl_cgimappingrule=>tt_mappingruleslist(
              (
                new /aws1/cl_cgimappingrule(
                  iv_claim = |string|
                  iv_matchtype = |string|
                  iv_rolearn = |string|
                  iv_value = |string|
                )
              )
            )
          )
          iv_ambiguousroleresolution = |string|
          iv_type = |string|
        )
        key = |string|
      )
    )
  )
  it_roles = VALUE /aws1/cl_cgirolesmap_w=>tt_rolesmap(
    (
      VALUE /aws1/cl_cgirolesmap_w=>ts_rolesmap_maprow(
        value = new /aws1/cl_cgirolesmap_w( |string| )
        key = |string|
      )
    )
  )
  iv_identitypoolid = |string|
).

/AWS1/IF_CGI=>SETIDENTITYPOOLROLES()¶