aws-cdk-lib.aws_pcaconnectorad.CfnTemplateGroupAccessControlEntryProps

CfnTemplateGroupAccessControlEntryProps Struct

Properties for defining a CfnTemplateGroupAccessControlEntry.

CfnTemplateGroupAccessControlEntryProps

used as props by

• CfnTemplateGroupAccessControlEntry

Source

Generated code

Type last changed

v2.258.0 · 4 Jun 2026

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_pcaconnectorad as pcaconnectorad } from 'aws-cdk-lib';
const cfnTemplateGroupAccessControlEntryProps: pcaconnectorad.CfnTemplateGroupAccessControlEntryProps = {
  accessRights: {
    autoEnroll: 'autoEnroll',
    enroll: 'enroll',
  },
  groupDisplayName: 'groupDisplayName',
  groupSecurityIdentifier: 'groupSecurityIdentifier',
  templateArn: 'templateArn',
};

Properties

accessRightsIResolvable | CfnTemplateGroupAccessControlEntry.AccessRightsPropertyaccess_rightstyping.Union[IResolvable, AccessRightsProperty]accessRightsIResolvableAccessRightsIResolvableAccessRightsinterface{}required#

Permissions to allow or deny an Active Directory group to enroll or autoenroll certificates issued against a template.

groupDisplayNamestringgroup_display_namestrgroupDisplayNameStringGroupDisplayNamestringGroupDisplayName*stringrequired#

Name of the Active Directory group.

This name does not need to match the group name in Active Directory.

groupSecurityIdentifierstringgroup_security_identifierstrgroupSecurityIdentifierStringGroupSecurityIdentifierstringGroupSecurityIdentifier*stringrequired#

Security identifier (SID) of the group object from Active Directory.

The SID starts with "S-".

templateArnstringtemplate_arnstrtemplateArnStringTemplateArnstringTemplateArn*stringrequired#

The Amazon Resource Name (ARN) that was returned when you called [CreateTemplate](https://docs.aws.amazon.com/pca-connector-ad/latest/APIReference/API_CreateTemplate.html) .