public static final class Permission.Jsii$Proxy extends software.amazon.jsii.JsiiObject implements Permission
Permission
Permission.Builder, Permission.Jsii$Proxy
Modifier | Constructor and Description |
---|---|
protected |
Jsii$Proxy(software.amazon.jsii.JsiiObjectRef objRef)
Constructor that initializes the object based on values retrieved from the JsiiObject.
|
Modifier and Type | Method and Description |
---|---|
com.fasterxml.jackson.databind.JsonNode |
$jsii$toJson() |
boolean |
equals(java.lang.Object o) |
java.lang.String |
getAction()
The Lambda actions that you want to allow in this statement.
|
java.lang.String |
getEventSourceToken()
A unique token that must be supplied by the principal invoking the function.
|
FunctionUrlAuthType |
getFunctionUrlAuthType()
The authType for the function URL that you are granting permissions for.
|
IPrincipal |
getPrincipal()
The entity for which you are granting permission to invoke the Lambda function.
|
Construct |
getScope()
The scope to which the permission constructs be attached.
|
java.lang.String |
getSourceAccount()
The AWS account ID (without hyphens) of the source owner.
|
java.lang.String |
getSourceArn()
The ARN of a resource that is invoking your function.
|
int |
hashCode() |
clone, finalize, getClass, notify, notifyAll, toString, wait, wait, wait
builder
protected Jsii$Proxy(software.amazon.jsii.JsiiObjectRef objRef)
objRef
- Reference to the JSII managed object.public final IPrincipal getPrincipal()
Permission
This entity can be any valid AWS service principal, such as s3.amazonaws.com or sns.amazonaws.com, or, if you are granting cross-account permission, an AWS account ID. For example, you might want to allow a custom application in another AWS account to push events to Lambda by invoking your function.
The principal can be either an AccountPrincipal or a ServicePrincipal.
getPrincipal
in interface Permission
public final java.lang.String getAction()
Permission
For example,
you can specify lambda:CreateFunction to specify a certain action, or use
a wildcard (lambda:*
) to grant permission to all Lambda actions. For a
list of actions, see Actions and Condition Context Keys for AWS Lambda in
the IAM User Guide.
Default: 'lambda:InvokeFunction'
getAction
in interface Permission
public final java.lang.String getEventSourceToken()
Permission
Default: The caller would not need to present a token.
getEventSourceToken
in interface Permission
public final FunctionUrlAuthType getFunctionUrlAuthType()
Permission
Default: - No functionUrlAuthType
getFunctionUrlAuthType
in interface Permission
public final Construct getScope()
Permission
The default is the Lambda function construct itself, but this would need to be different in cases such as cross-stack references where the Permissions would need to sit closer to the consumer of this permission (i.e., the caller).
Default: - The instance of lambda.IFunction
getScope
in interface Permission
public final java.lang.String getSourceAccount()
Permission
For example, if you specify an S3 bucket in the SourceArn property, this value is the bucket owner's account ID. You can use this property to ensure that all source principals are owned by a specific account.
getSourceAccount
in interface Permission
public final java.lang.String getSourceArn()
Permission
When granting Amazon Simple Storage Service (Amazon S3) permission to invoke your function, specify this property with the bucket ARN as its value. This ensures that events generated only from the specified bucket, not just any bucket from any AWS account that creates a mapping to your function, can invoke the function.
getSourceArn
in interface Permission
public com.fasterxml.jackson.databind.JsonNode $jsii$toJson()
public final boolean equals(java.lang.Object o)
public final int hashCode()