SourceAwsConfiguration

Configuration for AWS source account integration. Setting the role ARNs on this configuration requires the caller to have at least the iam:PassRole permission (see assumableRoleArn).

accountId

AWS Account Id corresponding to provided resources.

Type: String

Pattern: \d{12}

Required: Yes

accountType

Account Type 'source' for AIDevOps monitoring.

Type: String

Valid Values: source

Required: Yes

assumableRoleArn

Role ARN to be assumed by AIDevOps to operate on behalf of customer. To set this role ARN on AssociateService or UpdateAssociation, the caller must have at least the iam:PassRole permission on arn:aws:iam::<account-id>:role/* in the caller's own account, with the condition iam:PassedToService set to aidevops.amazonaws.com. A broader iam:PassRole grant also satisfies this requirement.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 255.

Pattern: arn:aws:iam::\d{12}:role/[a-zA-Z0-9+=,.@_/-]+

Required: Yes

externalId

External ID for additional security when assuming the role. Used to prevent the confused deputy problem.

Type: String

Required: No

SourceAwsConfiguration

Contents

See Also