/AWS1/CL_DOASOURCEAWSCONF¶
Configuration for AWS source account integration. Setting the role ARNs on this configuration requires the caller to have at least the iam:PassRole permission (see assumableRoleArn).
CONSTRUCTOR¶
IMPORTING¶
Required arguments:¶
iv_accountid TYPE /AWS1/DOASTRING /AWS1/DOASTRING¶
AWS Account Id corresponding to provided resources.
iv_accounttype TYPE /AWS1/DOASOURCEACCOUNTTYPE /AWS1/DOASOURCEACCOUNTTYPE¶
Account Type 'source' for AIDevOps monitoring.
iv_assumablerolearn TYPE /AWS1/DOAROLEARN /AWS1/DOAROLEARN¶
Role ARN to be assumed by AIDevOps to operate on behalf of customer. To set this role ARN on AssociateService or UpdateAssociation, the caller must have at least the iam:PassRole permission on arn:aws:iam::<account-id>:role/* in the caller's own account, with the condition iam:PassedToService set to aidevops.amazonaws.com. A broader iam:PassRole grant also satisfies this requirement.
Optional arguments:¶
iv_externalid TYPE /AWS1/DOASTRING /AWS1/DOASTRING¶
External ID for additional security when assuming the role. Used to prevent the confused deputy problem.
iv_agentelevatedrolearn TYPE /AWS1/DOAROLEARN /AWS1/DOAROLEARN¶
Optional IAM role ARN to be assumed by AIDevOps for elevated directed actions on behalf of the customer. Used for mutating operations gated by elevatedActionsEnabled on the AgentSpace. When not provided, only non-elevated directed actions are available for this AWS account. Setting this role is subject to the same minimum iam:PassRole requirement described on assumableRoleArn.
iv_agentelevatedrolearnstat TYPE /AWS1/DOAVALIDATIONSTATUS /AWS1/DOAVALIDATIONSTATUS¶
Validation status of the agentElevatedRoleArn. Updated asynchronously after the customer registers an elevated role. Possible values: PENDING_CONFIRMATION (validation in progress), VALID (role validated), INVALID (validation failed).
Queryable Attributes¶
accountId¶
AWS Account Id corresponding to provided resources.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_ACCOUNTID() |
Getter for ACCOUNTID, with configurable default |
ASK_ACCOUNTID() |
Getter for ACCOUNTID w/ exceptions if field has no value |
HAS_ACCOUNTID() |
Determine if ACCOUNTID has a value |
accountType¶
Account Type 'source' for AIDevOps monitoring.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_ACCOUNTTYPE() |
Getter for ACCOUNTTYPE, with configurable default |
ASK_ACCOUNTTYPE() |
Getter for ACCOUNTTYPE w/ exceptions if field has no value |
HAS_ACCOUNTTYPE() |
Determine if ACCOUNTTYPE has a value |
assumableRoleArn¶
Role ARN to be assumed by AIDevOps to operate on behalf of customer. To set this role ARN on AssociateService or UpdateAssociation, the caller must have at least the iam:PassRole permission on arn:aws:iam::<account-id>:role/* in the caller's own account, with the condition iam:PassedToService set to aidevops.amazonaws.com. A broader iam:PassRole grant also satisfies this requirement.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_ASSUMABLEROLEARN() |
Getter for ASSUMABLEROLEARN, with configurable default |
ASK_ASSUMABLEROLEARN() |
Getter for ASSUMABLEROLEARN w/ exceptions if field has no va |
HAS_ASSUMABLEROLEARN() |
Determine if ASSUMABLEROLEARN has a value |
externalId¶
External ID for additional security when assuming the role. Used to prevent the confused deputy problem.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_EXTERNALID() |
Getter for EXTERNALID, with configurable default |
ASK_EXTERNALID() |
Getter for EXTERNALID w/ exceptions if field has no value |
HAS_EXTERNALID() |
Determine if EXTERNALID has a value |
agentElevatedRoleArn¶
Optional IAM role ARN to be assumed by AIDevOps for elevated directed actions on behalf of the customer. Used for mutating operations gated by elevatedActionsEnabled on the AgentSpace. When not provided, only non-elevated directed actions are available for this AWS account. Setting this role is subject to the same minimum iam:PassRole requirement described on assumableRoleArn.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_AGENTELEVATEDROLEARN() |
Getter for AGENTELEVATEDROLEARN, with configurable default |
ASK_AGENTELEVATEDROLEARN() |
Getter for AGENTELEVATEDROLEARN w/ exceptions if field has n |
HAS_AGENTELEVATEDROLEARN() |
Determine if AGENTELEVATEDROLEARN has a value |
agentElevatedRoleArnStatus¶
Validation status of the agentElevatedRoleArn. Updated asynchronously after the customer registers an elevated role. Possible values: PENDING_CONFIRMATION (validation in progress), VALID (role validated), INVALID (validation failed).
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_AGENTELEVATEDROLEARNSTAT() |
Getter for AGENTELEVATEDROLEARNSTATUS, with configurable def |
ASK_AGENTELEVATEDROLEARNSTAT() |
Getter for AGENTELEVATEDROLEARNSTATUS w/ exceptions if field |
HAS_AGENTELEVATEDROLEARNSTAT() |
Determine if AGENTELEVATEDROLEARNSTATUS has a value |