Class: AWSCDK::BedrockAgentCore::WorkloadIdentityPerms

Inherits:
Jsii::Object
  • Object
show all
Defined in:
bedrock_agent_core/workload_identity_perms.rb

Overview

IAM actions for AgentCore workload identities.

See Also:

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(*args) ⇒ WorkloadIdentityPerms

Returns a new instance of WorkloadIdentityPerms.

Raises:

  • (NoMethodError) 


10
11
12
 
# File 'bedrock_agent_core/workload_identity_perms.rb', line 10

def initialize(*args)
  raise NoMethodError, "aws-cdk-lib.aws_bedrockagentcore.WorkloadIdentityPerms does not have a visible constructor; use the provided factory methods"
end

Class Method Details

.ADMIN_PERMS ⇒ Array<String>

Control plane permissions to create, read, update, and delete this workload identity.

Returns:

  • (Array<String>) 


22
23
24
 
# File 'bedrock_agent_core/workload_identity_perms.rb', line 22

def self.ADMIN_PERMS()
  Jsii::Kernel.instance.get_static("aws-cdk-lib.aws_bedrockagentcore.WorkloadIdentityPerms", "ADMIN_PERMS")
end

.FULL_ACCESS_PERMS ⇒ Array<String>

All workload identity actions used by the L2 grant helpers.

Returns:

  • (Array<String>) 


29
30
31
 
# File 'bedrock_agent_core/workload_identity_perms.rb', line 29

def self.FULL_ACCESS_PERMS()
  Jsii::Kernel.instance.get_static("aws-cdk-lib.aws_bedrockagentcore.WorkloadIdentityPerms", "FULL_ACCESS_PERMS")
end

.jsii_overridable_methods ⇒ Object 



14
15
16
17
 
# File 'bedrock_agent_core/workload_identity_perms.rb', line 14

def self.jsii_overridable_methods
  {
  }
end

.LIST_PERMS ⇒ Array<String>

List workload identities (resource-scoped per IAM service authorization reference).

Returns:

  • (Array<String>) 


36
37
38
 
# File 'bedrock_agent_core/workload_identity_perms.rb', line 36

def self.LIST_PERMS()
  Jsii::Kernel.instance.get_static("aws-cdk-lib.aws_bedrockagentcore.WorkloadIdentityPerms", "LIST_PERMS")
end

.READ_PERMS ⇒ Array<String>

Read a single workload identity.

Returns:

  • (Array<String>) 


43
44
45
 
# File 'bedrock_agent_core/workload_identity_perms.rb', line 43

def self.READ_PERMS()
  Jsii::Kernel.instance.get_static("aws-cdk-lib.aws_bedrockagentcore.WorkloadIdentityPerms", "READ_PERMS")
end

.USE_PERMS ⇒ Array<String>

Data plane permissions to mint workload access tokens.

These actions require both the workload identity ARN and the workload-identity-directory ARN as resource scope.

Returns:

  • (Array<String>)

See Also:



54
55
56
 
# File 'bedrock_agent_core/workload_identity_perms.rb', line 54

def self.USE_PERMS()
  Jsii::Kernel.instance.get_static("aws-cdk-lib.aws_bedrockagentcore.WorkloadIdentityPerms", "USE_PERMS")
end