Class: AWSCDK::EKS::CfnAccessEntry::AccessPolicyProperty

Inherits:

Jsii::Struct

• Object
• Jsii::Struct
• AWSCDK::EKS::CfnAccessEntry::AccessPolicyProperty

Defined in:

eks/cfn_access_entry.rb

Overview

An access policy includes permissions that allow Amazon EKS to authorize an IAM principal to work with Kubernetes objects on your cluster.

The policies are managed by Amazon EKS, but they're not IAM policies. You can't view the permissions in the policies using the API. The permissions for many of the policies are similar to the Kubernetes cluster-admin , admin , edit , and view cluster roles. For more information about these cluster roles, see User-facing roles in the Kubernetes documentation. To view the contents of the policies, see Access policy permissions in the Amazon EKS User Guide .

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-accessentry-accesspolicy.html

Instance Attribute Summary

• #access_scope ⇒ AWSCDK::IResolvable, AWSCDK::EKS::CfnAccessEntry::AccessScopeProperty readonly

  The scope of an AccessPolicy that's associated to an AccessEntry .

• #policy_arn ⇒ String readonly

  The ARN of the access policy.

Class Method Summary

• .jsii_properties ⇒ Object

Instance Method Summary

• #initialize(access_scope:, policy_arn:) ⇒ AccessPolicyProperty constructor

  A new instance of AccessPolicyProperty.

• #to_jsii ⇒ Object

Constructor Details

#initialize(access_scope:, policy_arn:) ⇒ AccessPolicyProperty

Returns a new instance of AccessPolicyProperty.

Parameters:

• access_scope (AWSCDK::IResolvable, AWSCDK::EKS::CfnAccessEntry::AccessScopeProperty) —

  The scope of an AccessPolicy that's associated to an AccessEntry .

• policy_arn (String) —

  The ARN of the access policy.

# File 'eks/cfn_access_entry.rb', line 602

def initialize(access_scope:, policy_arn:)
  @access_scope = access_scope.is_a?(Hash) ? ::AWSCDK::EKS::CfnAccessEntry::AccessScopeProperty.new(**access_scope.transform_keys(&:to_sym)) : access_scope
  Jsii::Type.check_type(@access_scope, JSON.parse(Base64.strict_decode64("eyJ1bmlvbiI6eyJ0eXBlcyI6W3siZnFuIjoiYXdzLWNkay1saWIuSVJlc29sdmFibGUifSx7ImZxbiI6ImF3cy1jZGstbGliLmF3c19la3MuQ2ZuQWNjZXNzRW50cnkuQWNjZXNzU2NvcGVQcm9wZXJ0eSJ9XX19")), "accessScope")
  @policy_arn = policy_arn
  Jsii::Type.check_type(@policy_arn, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "policyArn")
end

Instance Attribute Details

#access_scope ⇒ AWSCDK::IResolvable, AWSCDK::EKS::CfnAccessEntry::AccessScopeProperty (readonly)

The scope of an AccessPolicy that's associated to an AccessEntry .

Returns:

• (AWSCDK::IResolvable, AWSCDK::EKS::CfnAccessEntry::AccessScopeProperty)

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-accessentry-accesspolicy.html#cfn-eks-accessentry-accesspolicy-accessscope

# File 'eks/cfn_access_entry.rb', line 613

def access_scope
  @access_scope
end

#policy_arn ⇒ String (readonly)

The ARN of the access policy.

Returns:

• (String)

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-eks-accessentry-accesspolicy.html#cfn-eks-accessentry-accesspolicy-policyarn

# File 'eks/cfn_access_entry.rb', line 618

def policy_arn
  @policy_arn
end

Class Method Details

.jsii_properties ⇒ Object

# File 'eks/cfn_access_entry.rb', line 620

def self.jsii_properties
  {
    :access_scope => "accessScope",
    :policy_arn => "policyArn",
  }
end

Instance Method Details

#to_jsii ⇒ Object

# File 'eks/cfn_access_entry.rb', line 627

def to_jsii
  result = {}
  result.merge!({
    "accessScope" => @access_scope,
    "policyArn" => @policy_arn,
  })
  result.compact
end