Class UntrustedCodeBoundaryPolicy

java.lang.Object
software.amazon.jsii.JsiiObject
software.constructs.Construct
software.amazon.awscdk.Resource
software.amazon.awscdk.services.iam.ManagedPolicy
software.amazon.awscdk.services.codebuild.UntrustedCodeBoundaryPolicy
All Implemented Interfaces:
IResource, IGrantable, IManagedPolicy, software.amazon.jsii.JsiiSerializable, software.constructs.IConstruct, software.constructs.IDependable

@Generated(value="jsii-pacmak/1.98.0 (build 00b106d)", date="2024-05-24T02:42:35.291Z") @Stability(Stable) public class UntrustedCodeBoundaryPolicy extends ManagedPolicy
Permissions Boundary for a CodeBuild Project running untrusted code.

This class is a Policy, intended to be used as a Permissions Boundary for a CodeBuild project. It allows most of the actions necessary to run the CodeBuild project, but disallows reading from Parameter Store and Secrets Manager.

Use this when your CodeBuild project is running untrusted code (for example, if you are using one to automatically build Pull Requests that anyone can submit), and you want to prevent your future self from accidentally exposing Secrets to this build.

(The reason you might want to do this is because otherwise anyone who can submit a Pull Request to your project can write a script to email those secrets to themselves).

Example:

 Project project;
 PermissionsBoundary.of(project).apply(new UntrustedCodeBoundaryPolicy(this, "Boundary"));
 
  • Constructor Details

    • UntrustedCodeBoundaryPolicy

      protected UntrustedCodeBoundaryPolicy(software.amazon.jsii.JsiiObjectRef objRef)
    • UntrustedCodeBoundaryPolicy

      protected UntrustedCodeBoundaryPolicy(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)
    • UntrustedCodeBoundaryPolicy

      @Stability(Stable) public UntrustedCodeBoundaryPolicy(@NotNull software.constructs.Construct scope, @NotNull String id, @Nullable UntrustedCodeBoundaryPolicyProps props)
      Parameters:
      scope - This parameter is required.
      id - This parameter is required.
      props -
    • UntrustedCodeBoundaryPolicy

      @Stability(Stable) public UntrustedCodeBoundaryPolicy(@NotNull software.constructs.Construct scope, @NotNull String id)
      Parameters:
      scope - This parameter is required.
      id - This parameter is required.