Skip to content

/AWS1/IF_EC2=>MODIFYVERIFIEDACCGROUPPOLICY()

About ModifyVerifiedAccessGroupPolicy

Modifies the specified Amazon Web Services Verified Access group policy.

Method Signature

METHODS /AWS1/IF_EC2~MODIFYVERIFIEDACCGROUPPOLICY
  IMPORTING
    !IV_VERIFIEDACCESSGROUPID TYPE /AWS1/EC2VERIFIEDACCESSGROUPID OPTIONAL
    !IV_POLICYENABLED TYPE /AWS1/EC2BOOLEAN OPTIONAL
    !IV_POLICYDOCUMENT TYPE /AWS1/EC2STRING OPTIONAL
    !IV_CLIENTTOKEN TYPE /AWS1/EC2STRING OPTIONAL
    !IV_DRYRUN TYPE /AWS1/EC2BOOLEAN OPTIONAL
    !IO_SSESPECIFICATION TYPE REF TO /AWS1/CL_EC2VERIFIEDACCSSESP01 OPTIONAL
  RETURNING
    VALUE(OO_OUTPUT) TYPE REF TO /aws1/cl_ec2modverifiedaccgr02
  RAISING
    /AWS1/CX_EC2CLIENTEXC
    /AWS1/CX_EC2SERVEREXC
    /AWS1/CX_RT_TECHNICAL_GENERIC
    /AWS1/CX_RT_SERVICE_GENERIC.

IMPORTING

Required arguments:

iv_verifiedaccessgroupid TYPE /AWS1/EC2VERIFIEDACCESSGROUPID /AWS1/EC2VERIFIEDACCESSGROUPID

The ID of the Verified Access group.

Optional arguments:

iv_policyenabled TYPE /AWS1/EC2BOOLEAN /AWS1/EC2BOOLEAN

The status of the Verified Access policy.

iv_policydocument TYPE /AWS1/EC2STRING /AWS1/EC2STRING

The Verified Access policy document.

iv_clienttoken TYPE /AWS1/EC2STRING /AWS1/EC2STRING

A unique, case-sensitive token that you provide to ensure idempotency of your modification request. For more information, see Ensuring idempotency.

iv_dryrun TYPE /AWS1/EC2BOOLEAN /AWS1/EC2BOOLEAN

Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.

io_ssespecification TYPE REF TO /AWS1/CL_EC2VERIFIEDACCSSESP01 /AWS1/CL_EC2VERIFIEDACCSSESP01

The options for server side encryption.

RETURNING

oo_output TYPE REF TO /aws1/cl_ec2modverifiedaccgr02 /AWS1/CL_EC2MODVERIFIEDACCGR02

Domain /AWS1/RT_ACCOUNT_ID
Primitive Type NUMC

Examples

Syntax Example

This is an example of the syntax for calling the method. It includes every possible argument and initializes every possible value. The data provided is not necessarily semantically accurate (for example the value "string" may be provided for something that is intended to be an instance ID, or in some cases two arguments may be mutually exclusive). The syntax shows the ABAP syntax for creating the various data structures.

DATA(lo_result) = lo_client->modifyverifiedaccgrouppolicy(
  io_ssespecification = new /aws1/cl_ec2verifiedaccssesp01(
    iv_customermanagedkeyenabled = ABAP_TRUE
    iv_kmskeyarn = |string|
  )
  iv_clienttoken = |string|
  iv_dryrun = ABAP_TRUE
  iv_policydocument = |string|
  iv_policyenabled = ABAP_TRUE
  iv_verifiedaccessgroupid = |string|
).

This is an example of reading all possible response values

lo_result = lo_result.
IF lo_result IS NOT INITIAL.
  lv_boolean = lo_result->get_policyenabled( ).
  lv_string = lo_result->get_policydocument( ).
  lo_verifiedaccessssespecif = lo_result->get_ssespecification( ).
  IF lo_verifiedaccessssespecif IS NOT INITIAL.
    lv_boolean = lo_verifiedaccessssespecif->get_cusmanagedkeyenabled( ).
    lv_kmskeyarn = lo_verifiedaccessssespecif->get_kmskeyarn( ).
  ENDIF.
ENDIF.