AWS CDK Reference

Appearance

v2.274.0

DomainlessCredentialSpec Class ​

Credential specification for domainless gMSA.

Source
aws-ecs/lib/credential-spec.ts
Type last changed
v2.129.0 · 21 Feb 2024

Example ​

ts
// Make sure the task definition's execution role has permissions to read from the S3 bucket or SSM parameter where the CredSpec file is stored.
declare const bucket: s3.Bucket;
declare const taskDefinition: ecs.TaskDefinition;

// Domainless gMSA container from a S3 bucket object.
taskDefinition.addContainer('gmsa-domainless-container', {
  image: ecs.ContainerImage.fromRegistry("amazon/amazon-ecs-sample"),
  cpu: 128,
  memoryLimitMiB: 256,
  credentialSpecs: [ecs.DomainlessCredentialSpec.fromS3Bucket(bucket, 'credSpec')],
});
python
# Make sure the task definition's execution role has permissions to read from the S3 bucket or SSM parameter where the CredSpec file is stored.
# bucket: s3.Bucket
# task_definition: ecs.TaskDefinition


# Domainless gMSA container from a S3 bucket object.
task_definition.add_container("gmsa-domainless-container",
    image=ecs.ContainerImage.from_registry("amazon/amazon-ecs-sample"),
    cpu=128,
    memory_limit_mi_b=256,
    credential_specs=[ecs.DomainlessCredentialSpec.from_s3_bucket(bucket, "credSpec")]
)
java
// Make sure the task definition's execution role has permissions to read from the S3 bucket or SSM parameter where the CredSpec file is stored.
Bucket bucket;
TaskDefinition taskDefinition;


// Domainless gMSA container from a S3 bucket object.
taskDefinition.addContainer("gmsa-domainless-container", ContainerDefinitionOptions.builder()
        .image(ContainerImage.fromRegistry("amazon/amazon-ecs-sample"))
        .cpu(128)
        .memoryLimitMiB(256)
        .credentialSpecs(List.of(DomainlessCredentialSpec.fromS3Bucket(bucket, "credSpec")))
        .build());
csharp
// Install: dotnet add package Amazon.CDK.Lib
// Make sure the task definition's execution role has permissions to read from the S3 bucket or SSM parameter where the CredSpec file is stored.
Bucket bucket;
TaskDefinition taskDefinition;


// Domainless gMSA container from a S3 bucket object.
taskDefinition.AddContainer("gmsa-domainless-container", new ContainerDefinitionOptions {
    Image = ContainerImage.FromRegistry("amazon/amazon-ecs-sample"),
    Cpu = 128,
    MemoryLimitMiB = 256,
    CredentialSpecs = new [] { DomainlessCredentialSpec.FromS3Bucket(bucket, "credSpec") }
});
go
// Install: go get github.com/aws/aws-cdk-go/awscdk/v2
// Make sure the task definition's execution role has permissions to read from the S3 bucket or SSM parameter where the CredSpec file is stored.
var bucket Bucket
var taskDefinition TaskDefinition


// Domainless gMSA container from a S3 bucket object.
taskDefinition.AddContainer(jsii.String("gmsa-domainless-container"), &ContainerDefinitionOptions{
	Image: ecs.ContainerImage_FromRegistry(jsii.String("amazon/amazon-ecs-sample")),
	Cpu: jsii.Number(128),
	MemoryLimitMiB: jsii.Number(256),
	CredentialSpecs: []CredentialSpec{
		ecs.DomainlessCredentialSpec_FromS3Bucket(bucket, jsii.String("credSpec")),
	},
})

Initializer ​

ts
new DomainlessCredentialSpec(fileLocation: string)
python
DomainlessCredentialSpec(file_location: str)
java
new DomainlessCredentialSpec(String fileLocation)
csharp
new DomainlessCredentialSpec(string fileLocation)
go
NewDomainlessCredentialSpec(FileLocation *string)

Properties ​

fileLocationstringfile_locationstrfileLocationStringFileLocationstringFileLocation*stringrequired#
Location or ARN from where to retrieve the CredSpec file.
prefixIdstringprefix_idstrprefixIdStringPrefixIdstringPrefixId*stringrequired#
Prefix string based on the type of CredSpec.

Methods ​

bind(): CredentialSpecConfigdef bind(self, ) -> CredentialSpecConfigpublic CredentialSpecConfig bind()public CredentialSpecConfig Bind()func Bind() CredentialSpecConfig#
Called when the container is initialized to allow this object to bind to the stack.
fromS3Bucket(bucket: IBucket, key: string): DomainlessCredentialSpec // chainable@staticmethod def from_s3_bucket(bucket: IBucket, key: str) -> DomainlessCredentialSpecpublic static DomainlessCredentialSpec fromS3Bucket(IBucket bucket, String key)public static DomainlessCredentialSpec FromS3Bucket(IBucket bucket, string key)func FromS3Bucket(Bucket IBucket, Key *string) DomainlessCredentialSpecstatic#
Loads the CredSpec from a S3 bucket object.
2 parameters · returns

Parameters

  • bucketbucketbucketbucketBucket — The S3 bucket.
  • keykeykeykeyKey — The object key.

Returns: CredSpec with it's locations set to the S3 object's ARN.

fromSsmParameter(parameter: IParameter): DomainlessCredentialSpec // chainable@staticmethod def from_ssm_parameter(parameter: IParameter) -> DomainlessCredentialSpecpublic static DomainlessCredentialSpec fromSsmParameter(IParameter parameter)public static DomainlessCredentialSpec FromSsmParameter(IParameter parameter)func FromSsmParameter(Parameter IParameter) DomainlessCredentialSpecstatic#
Loads the CredSpec from a SSM parameter.
1 parameter · returns

Parameters

  • parameterparameterparameterparameterParameter — The SSM parameter.

Returns: CredSpec with it's locations set to the SSM parameter's ARN.