Class: AWSCDK::SSO::CfnInstanceAccessControlAttributeConfiguration::AccessControlAttributeProperty

Inherits:

Jsii::Struct

• Object
• Jsii::Struct
• AWSCDK::SSO::CfnInstanceAccessControlAttributeConfiguration::AccessControlAttributeProperty

Defined in:

sso/cfn_instance_access_control_attribute_configuration.rb

Overview

These are identity store attributes that you can configure for use in attributes-based access control (ABAC).

You can create permissions policies that determine who can access your AWS resources based upon the configured attribute values. When you enable ABAC and specify AccessControlAttributes , passes the attribute values of the authenticated user into IAM for use in policy evaluation.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sso-instanceaccesscontrolattributeconfiguration-accesscontrolattribute.html

Instance Attribute Summary

• #key ⇒ String readonly

  The name of the attribute associated with your identities in your identity source.

• #value ⇒ AWSCDK::IResolvable, AWSCDK::SSO::CfnInstanceAccessControlAttributeConfiguration::AccessControlAttributeValueProperty readonly

  The value used for mapping a specified attribute to an identity source.

Class Method Summary

• .jsii_properties ⇒ Object

Instance Method Summary

• #initialize(key:, value:) ⇒ AccessControlAttributeProperty constructor

  A new instance of AccessControlAttributeProperty.

• #to_jsii ⇒ Object

Constructor Details

#initialize(key:, value:) ⇒ AccessControlAttributeProperty

Returns a new instance of AccessControlAttributeProperty.

Parameters:

• key (String) —

  The name of the attribute associated with your identities in your identity source.

• value (AWSCDK::IResolvable, AWSCDK::SSO::CfnInstanceAccessControlAttributeConfiguration::AccessControlAttributeValueProperty) —

  The value used for mapping a specified attribute to an identity source.

# File 'sso/cfn_instance_access_control_attribute_configuration.rb', line 527

def initialize(key:, value:)
  @key = key
  Jsii::Type.check_type(@key, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "key")
  @value = value.is_a?(Hash) ? ::AWSCDK::SSO::CfnInstanceAccessControlAttributeConfiguration::AccessControlAttributeValueProperty.new(**value.transform_keys(&:to_sym)) : value
  Jsii::Type.check_type(@value, JSON.parse(Base64.strict_decode64("eyJ1bmlvbiI6eyJ0eXBlcyI6W3siZnFuIjoiYXdzLWNkay1saWIuSVJlc29sdmFibGUifSx7ImZxbiI6ImF3cy1jZGstbGliLmF3c19zc28uQ2ZuSW5zdGFuY2VBY2Nlc3NDb250cm9sQXR0cmlidXRlQ29uZmlndXJhdGlvbi5BY2Nlc3NDb250cm9sQXR0cmlidXRlVmFsdWVQcm9wZXJ0eSJ9XX19")), "value")
end

Instance Attribute Details

#key ⇒ String (readonly)

The name of the attribute associated with your identities in your identity source.

This is used to map a specified attribute in your identity source with an attribute in .

Returns:

• (String)

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sso-instanceaccesscontrolattributeconfiguration-accesscontrolattribute.html#cfn-sso-instanceaccesscontrolattributeconfiguration-accesscontrolattribute-key

# File 'sso/cfn_instance_access_control_attribute_configuration.rb', line 540

def key
  @key
end

#value ⇒ AWSCDK::IResolvable, AWSCDK::SSO::CfnInstanceAccessControlAttributeConfiguration::AccessControlAttributeValueProperty (readonly)

The value used for mapping a specified attribute to an identity source.

Returns:

• (AWSCDK::IResolvable, AWSCDK::SSO::CfnInstanceAccessControlAttributeConfiguration::AccessControlAttributeValueProperty)

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sso-instanceaccesscontrolattributeconfiguration-accesscontrolattribute.html#cfn-sso-instanceaccesscontrolattributeconfiguration-accesscontrolattribute-value

# File 'sso/cfn_instance_access_control_attribute_configuration.rb', line 545

def value
  @value
end

Class Method Details

.jsii_properties ⇒ Object

# File 'sso/cfn_instance_access_control_attribute_configuration.rb', line 547

def self.jsii_properties
  {
    :key => "key",
    :value => "value",
  }
end

Instance Method Details

#to_jsii ⇒ Object

# File 'sso/cfn_instance_access_control_attribute_configuration.rb', line 554

def to_jsii
  result = {}
  result.merge!({
    "key" => @key,
    "value" => @value,
  })
  result.compact
end