You are viewing documentation for version 2 of the AWS SDK for Ruby. Version 3 documentation can be found here.

Class: Aws::ACMPCA::Types::Permission

Inherits:
Struct
  • Object
show all
Defined in:
(unknown)

Overview

Permissions designate which private CA actions can be performed by an AWS service or entity. In order for ACM to automatically renew private certificates, you must give the ACM service principal all available permissions (IssueCertificate, GetCertificate, and ListPermissions). Permissions can be assigned with the CreatePermission action, removed with the DeletePermission action, and listed with the ListPermissions action.

See Also:

Instance Attribute Summary collapse

Instance Attribute Details

#actions ⇒ Array<String>

The private CA actions that can be performed by the designated AWS service.

Returns:

  • (Array<String>) —

    The private CA actions that can be performed by the designated AWS service.

#certificate_authority_arn ⇒ String

The Amazon Resource Number (ARN) of the private CA from which the permission was issued.

Returns:

  • (String) —

    The Amazon Resource Number (ARN) of the private CA from which the permission was issued.

#created_at ⇒ Time

The time at which the permission was created.

Returns:

  • (Time) —

    The time at which the permission was created.

#policy ⇒ String

The name of the policy that is associated with the permission.

Returns:

  • (String) —

    The name of the policy that is associated with the permission.

#principal ⇒ String

The AWS service or entity that holds the permission. At this time, the only valid principal is acm.amazonaws.com.

Returns:

  • (String) —

    The AWS service or entity that holds the permission.

#source_account ⇒ String

The ID of the account that assigned the permission.

Returns:

  • (String) —

    The ID of the account that assigned the permission.