# CfnLayerVersionPermissionProps

Properties for defining a `CfnLayerVersionPermission`.

Extends: CfnLayerVersionPermissionProps
Used as props by: CfnLayerVersionPermission

- Source: Generated code
- Type last changed: v2.227.0 · 21 Nov 2025

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_lambda as lambda } from 'aws-cdk-lib';
const cfnLayerVersionPermissionProps: lambda.CfnLayerVersionPermissionProps = {
  action: 'action',
  layerVersionArn: 'layerVersionArn',
  principal: 'principal',

  // the properties below are optional
  organizationId: 'organizationId',
};
```

## Properties

- `action`: string (required) — The API action that grants access to the layer.

  For example, `lambda:GetLayerVersion` .

- `layerVersionArn`: string | [ILayerVersionRef](/cdk/api/v2/docs/aws-cdk-lib.interfaces.aws_lambda.ILayerVersionRef.html) (required) — The name or Amazon Resource Name (ARN) of the layer.

- `organizationId`: string — With the principal set to `*` , grant permission to all accounts in the specified organization.

- `principal`: string (required) — An account ID, or `*` to grant layer usage permission to all accounts in an organization, or all AWS accounts (if `organizationId` is not specified).

  For the last case, make sure that you really do want all AWS accounts to have usage permission to this layer.