EncryptedPermissionsOptions

class aws_cdk.EncryptedPermissionsOptions(*, resource_arns=None, key_actions=None)

Bases: PermissionsOptions

Options for configuring permissions on encrypted resources.

Parameters:

  • resource_arns (Optional[Sequence[str]]) – The ARNs of the resources to grant permissions on. Default: - The ARN of the resource associated with the grant is used.

  • key_actions (Optional[Sequence[str]]) – The KMS key actions to grant permissions for. Default: - No permission is added to the KMS key, even if it exists

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
import aws_cdk as cdk

encrypted_permissions_options = cdk.EncryptedPermissionsOptions(
    key_actions=["keyActions"],
    resource_arns=["resourceArns"]
)

Attributes

key_actions

The KMS key actions to grant permissions for.

Default:

  • No permission is added to the KMS key, even if it exists

resource_arns

The ARNs of the resources to grant permissions on.

Default:

  • The ARN of the resource associated with the grant is used.