CfnLaunchRoleConstraintProps
- class aws_cdk.aws_servicecatalog.CfnLaunchRoleConstraintProps(*, portfolio_id, product_id, accept_language=None, description=None, local_role_name=None, role_arn=None)
Bases:
object
Properties for defining a
CfnLaunchRoleConstraint
.- Parameters:
portfolio_id (
str
) – The portfolio identifier.product_id (
str
) – The product identifier.accept_language (
Optional
[str
]) – The language code. -jp
- Japanese -zh
- Chinesedescription (
Optional
[str
]) – The description of the constraint.local_role_name (
Optional
[str
]) – You are required to specify either theRoleArn
or theLocalRoleName
but can’t use both. If you specify theLocalRoleName
property, when an account uses the launch constraint, the IAM role with that name in the account will be used. This allows launch-role constraints to be account-agnostic so the administrator can create fewer resources per shared account. The given role name must exist in the account used to create the launch constraint and the account of the user who launches a product with this launch constraint.role_arn (
Optional
[str
]) – The ARN of the launch role. You are required to specifyRoleArn
orLocalRoleName
but can’t use both.
- Link:
- ExampleMetadata:
fixture=_generated
Example:
# The code below shows an example of how to instantiate this type. # The values are placeholders you should change. import aws_cdk.aws_servicecatalog as servicecatalog cfn_launch_role_constraint_props = servicecatalog.CfnLaunchRoleConstraintProps( portfolio_id="portfolioId", product_id="productId", # the properties below are optional accept_language="acceptLanguage", description="description", local_role_name="localRoleName", role_arn="roleArn" )
Attributes
- accept_language
The language code.
jp
- Japanesezh
- Chinese
- description
The description of the constraint.
- local_role_name
You are required to specify either the
RoleArn
or theLocalRoleName
but can’t use both.If you specify the
LocalRoleName
property, when an account uses the launch constraint, the IAM role with that name in the account will be used. This allows launch-role constraints to be account-agnostic so the administrator can create fewer resources per shared account.The given role name must exist in the account used to create the launch constraint and the account of the user who launches a product with this launch constraint.
- portfolio_id
The portfolio identifier.
- product_id
The product identifier.
- role_arn
The ARN of the launch role.
You are required to specify
RoleArn
orLocalRoleName
but can’t use both.