pulumi-aws-native-kotlin/com.pulumi.awsnative.resiliencehub.kotlin.inputs/AppPermissionModelArgs

AppPermissionModelArgs

data class AppPermissionModelArgs(val crossAccountRoleArns: Output<List<String>>? = null, val invokerRoleName: Output<String>? = null, val type: Output<AppPermissionModelType>) : ConvertibleToJava<AppPermissionModelArgs>

Defines the roles and credentials that AWS Resilience Hub would use while creating the application, importing its resources, and running an assessment.

Constructors

Link copied to clipboard
fun AppPermissionModelArgs(crossAccountRoleArns: Output<List<String>>? = null, invokerRoleName: Output<String>? = null, type: Output<AppPermissionModelType>)

Functions

Link copied to clipboard
open override fun toJava(): AppPermissionModelArgs

Properties

Link copied to clipboard
val crossAccountRoleArns: Output<List<String>>? = null

Defines a list of role Amazon Resource Names (ARNs) to be used in other accounts. These ARNs are used for querying purposes while importing resources and assessing your application.

Link copied to clipboard
val invokerRoleName: Output<String>? = null

Existing AWS IAM role name in the primary AWS account that will be assumed by AWS Resilience Hub Service Principle to obtain a read-only access to your application resources while running an assessment.

Link copied to clipboard
val type: Output<AppPermissionModelType>

Defines how AWS Resilience Hub scans your resources. It can scan for the resources by using a pre-existing role in your AWS account, or by using the credentials of the current IAM user.