interface SdkCallsPolicyOptions
Language | Type name |
---|---|
.NET | Amazon.CDK.CustomResources.SdkCallsPolicyOptions |
Java | software.amazon.awscdk.customresources.SdkCallsPolicyOptions |
Python | aws_cdk.custom_resources.SdkCallsPolicyOptions |
TypeScript (source) | @aws-cdk/custom-resources » SdkCallsPolicyOptions |
Options for the auto-generation of policies based on the configured SDK calls.
Example
const awsCustom = new cr.AwsCustomResource(this, 'aws-custom', {
onCreate: {
service: '...',
action: '...',
parameters: {
text: '...',
},
physicalResourceId: cr.PhysicalResourceId.of('...'),
},
onUpdate: {
service: '...',
action: '...',
parameters: {
text: '...',
resourceId: new cr.PhysicalResourceIdReference(),
},
},
policy: cr.AwsCustomResourcePolicy.fromSdkCalls({
resources: cr.AwsCustomResourcePolicy.ANY_RESOURCE,
}),
})
Properties
Name | Type | Description |
---|---|---|
resources | string[] | The resources that the calls will have access to. |
resources
Type:
string[]
The resources that the calls will have access to.
It is best to use specific resource ARN's when possible. However, you can also use AwsCustomResourcePolicy.ANY_RESOURCE
to allow access to all resources. For example, when onCreate
is used to create a resource which you don't
know the physical name of in advance.
Note that will apply to ALL SDK calls.