# StateMachineGrants

Collection of grant methods for a IStateMachineRef.

- Source: [`aws-stepfunctions/lib/state-machine-grants.ts`](https://github.com/aws/aws-cdk/blob/v2.274.0/packages/aws-cdk-lib/aws-stepfunctions/lib/state-machine-grants.ts#L18)
- Type last changed: v2.233.0 · 18 Dec 2025

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_stepfunctions as stepfunctions } from 'aws-cdk-lib';
import { aws_stepfunctions as interfaces_stepfunctions } from 'aws-cdk-lib/interfaces';

declare const stateMachineRef: interfaces_stepfunctions.IStateMachineRef;
const stateMachineGrants = stepfunctions.StateMachineGrants.fromStateMachine(stateMachineRef);
```

## Methods

- `actions(identity: IGrantable, ...actions: string[]): Grant` — Grant the given identity custom permissions.

- `execution(grantee: IGrantable, ...actions: string[]): Grant` — Grant the given identity permissions to start an execution of this state machine.

  **Parameters**

  - `grantee` — The principal.

- `fromStateMachine(resource: IStateMachineRef): StateMachineGrants // chainable` (static) — Creates grants for StateMachineGrants.

- `read(grantee: IGrantable): Grant` — Grant the given identity permissions to read results from state machine.

- `redriveExecution(grantee: IGrantable): Grant` — Grant the given identity permission to redrive the execution of the state machine.

- `startExecution(grantee: IGrantable): Grant` — Grant the given identity permissions to start an execution of this state machine.

  **Parameters**

  - `grantee` — The principal.

- `startSyncExecution(grantee: IGrantable): Grant` — Grant the given identity permissions to start a synchronous execution of this state machine.

  **Parameters**

  - `grantee` — The principal.

- `taskResponse(grantee: IGrantable): Grant` — Grant the given identity task response permissions on a state machine.