Typescript: S3BackendAssumeRoleConfig

CDKTN Core API Reference for S3BackendAssumeRoleConfig in Typescript.

Initializer

import { S3BackendAssumeRoleConfig } from 'cdktn'

const s3BackendAssumeRoleConfig: S3BackendAssumeRoleConfig = { ... }

Properties

Name	Type	Description
roleArn	string	(Required) Amazon Resource Name (ARN) of the IAM Role to assume.
duration	string	(Optional) The duration individual credentials will be valid.
externalId	string	(Optional) External identifier to use when assuming the role.
policy	string	(Optional) IAM Policy JSON describing further restricting permissions for the IAM Role being assumed.
policyArns	string[]	(Optional) Set of Amazon Resource Names (ARNs) of IAM Policies describing further restricting permissions for the IAM Role being assumed.
sessionName	string	(Optional) Session name to use when assuming the role.
sourceIdentity	string	(Optional) Source identity specified by the principal assuming the.
tags	{[ key: string ]: string}	(Optional) Map of assume role session tags.
transitiveTagKeys	string[]	(Optional) Set of assume role session tag keys to pass to any subsequent sessions.

---

roleArn^Required

public readonly roleArn: string;

• Type: string

(Required) Amazon Resource Name (ARN) of the IAM Role to assume.

---

duration^Optional

public readonly duration: string;

• Type: string

(Optional) The duration individual credentials will be valid.

Credentials are automatically renewed up to the maximum defined by the AWS account. Specified using the format < hours >h< minutes >m< seconds >s with any unit being optional. For example, an hour and a half can be specified as 1h30m or 90m. Must be between 15 minutes (15m) and 12 hours (12h).

---

externalId^Optional

public readonly externalId: string;

• Type: string

(Optional) External identifier to use when assuming the role.

---

policy^Optional

public readonly policy: string;

• Type: string

(Optional) IAM Policy JSON describing further restricting permissions for the IAM Role being assumed.

---

policyArns^Optional

public readonly policyArns: string[];

• Type: string[]

(Optional) Set of Amazon Resource Names (ARNs) of IAM Policies describing further restricting permissions for the IAM Role being assumed.

---

sessionName^Optional

public readonly sessionName: string;

• Type: string

(Optional) Session name to use when assuming the role.

---

sourceIdentity^Optional

public readonly sourceIdentity: string;

• Type: string

(Optional) Source identity specified by the principal assuming the.

---

tags^Optional

public readonly tags: {[ key: string ]: string};

• Type: {[ key: string ]: string}

(Optional) Map of assume role session tags.

---

transitiveTagKeys^Optional

public readonly transitiveTagKeys: string[];

• Type: string[]

(Optional) Set of assume role session tag keys to pass to any subsequent sessions.

---