Go: S3BackendAssumeRoleWithWebIdentityConfig

CDKTN Core API Reference for S3BackendAssumeRoleWithWebIdentityConfig in Go.

Initializer

import "github.com/open-constructs/cdk-terrain-go/cdktn"

&cdktn.S3BackendAssumeRoleWithWebIdentityConfig {
	Duration: *string,
	Policy: *string,
	PolicyArns: *[]*string,
	RoleArn: *string,
	SessionName: *string,
	WebIdentityToken: *string,
	WebIdentityTokenFile: *string,
}

Properties

Name	Type	Description
Duration	*string	(Optional) The duration individual credentials will be valid.
Policy	*string	(Optional) IAM Policy JSON describing further restricting permissions for the IAM Role being assumed.
PolicyArns	*[]*string	(Optional) Set of Amazon Resource Names (ARNs) of IAM Policies describing further restricting permissions for the IAM Role being assumed.
RoleArn	*string	(Required) Amazon Resource Name (ARN) of the IAM Role to assume.
SessionName	*string	(Optional) Session name to use when assuming the role.
WebIdentityToken	*string	(Optional) The value of a web identity token from an OpenID Connect (OIDC) or OAuth provider.
WebIdentityTokenFile	*string	(Optional) File containing a web identity token from an OpenID Connect (OIDC) or OAuth provider.

---

Duration^Optional

Duration *string

• Type: *string

(Optional) The duration individual credentials will be valid.

Credentials are automatically renewed up to the maximum defined by the AWS account. Specified using the format < hours >h< minutes >m< seconds >s with any unit being optional. For example, an hour and a half can be specified as 1h30m or 90m. Must be between 15 minutes (15m) and 12 hours (12h).

---

Policy^Optional

Policy *string

• Type: *string

(Optional) IAM Policy JSON describing further restricting permissions for the IAM Role being assumed.

---

PolicyArns^Optional

PolicyArns *[]*string

• Type: *[]*string

(Optional) Set of Amazon Resource Names (ARNs) of IAM Policies describing further restricting permissions for the IAM Role being assumed.

---

RoleArn^Optional

RoleArn *string

• Type: *string

(Required) Amazon Resource Name (ARN) of the IAM Role to assume.

Can also be set with the AWS_ROLE_ARN environment variable.

---

SessionName^Optional

SessionName *string

• Type: *string

(Optional) Session name to use when assuming the role.

Can also be set with the AWS_ROLE_SESSION_NAME environment variable.

---

WebIdentityToken^Optional

WebIdentityToken *string

• Type: *string

(Optional) The value of a web identity token from an OpenID Connect (OIDC) or OAuth provider.

One of web_identity_token or web_identity_token_file is required.

---

WebIdentityTokenFile^Optional

WebIdentityTokenFile *string

• Type: *string

(Optional) File containing a web identity token from an OpenID Connect (OIDC) or OAuth provider.

One of web_identity_token_file or web_identity_token is required. Can also be set with the AWS_WEB_IDENTITY_TOKEN_FILE environment variable.

---