GrantOnPrincipalAndResourceOptions¶
-
class
aws_cdk.aws_iam.
GrantOnPrincipalAndResourceOptions
(*, actions, grantee, resource_arns, resource, resource_policy_principal=None, resource_self_arns=None)¶ Bases:
aws_cdk.aws_iam.CommonGrantOptions
(experimental) Options for a grant operation to both identity and resource.
- Parameters
actions (
List
[str
]) – (experimental) The actions to grant.grantee (
IGrantable
) – (experimental) The principal to grant to. Default: if principal is undefined, no work is done.resource_arns (
List
[str
]) – (experimental) The resource ARNs to grant to.resource (
IResourceWithPolicy
) – (experimental) The resource with a resource policy. The statement will always be added to the resource policy.resource_policy_principal (
Optional
[IPrincipal
]) – (experimental) The principal to use in the statement for the resource policy. Default: - the principal of the grantee will be usedresource_self_arns (
Optional
[List
[str
]]) – (experimental) When referring to the resource in a resource policy, use this as ARN. (Depending on the resource type, this needs to be ‘*’ in a resource policy). Default: Same as regular resource ARNs
- Stability
experimental
Attributes
-
actions
¶ (experimental) The actions to grant.
- Stability
experimental
- Return type
List
[str
]
-
grantee
¶ (experimental) The principal to grant to.
- Default
if principal is undefined, no work is done.
- Stability
experimental
- Return type
-
resource
¶ (experimental) The resource with a resource policy.
The statement will always be added to the resource policy.
- Stability
experimental
- Return type
-
resource_arns
¶ (experimental) The resource ARNs to grant to.
- Stability
experimental
- Return type
List
[str
]
-
resource_policy_principal
¶ (experimental) The principal to use in the statement for the resource policy.
- Default
the principal of the grantee will be used
- Stability
experimental
- Return type
Optional
[IPrincipal
]
-
resource_self_arns
¶ (experimental) When referring to the resource in a resource policy, use this as ARN.
(Depending on the resource type, this needs to be ‘*’ in a resource policy).
- Default
Same as regular resource ARNs
- Stability
experimental
- Return type
Optional
[List
[str
]]