Class: Aws::ControlCatalog::Types::ControlParameter
- Inherits:
-
Struct
- Object
- Struct
- Aws::ControlCatalog::Types::ControlParameter
- Defined in:
- gems/aws-sdk-controlcatalog/lib/aws-sdk-controlcatalog/types.rb
Overview
Four types of control parameters are supported.
AllowedRegions: List of Amazon Web Services Regions exempted from the control. Each string is expected to be an Amazon Web Services Region code. This parameter is mandatory for the OU Region deny control, CT.MULTISERVICE.PV.1.
Example:
["us-east-1","us-west-2"]
ExemptedActions: List of Amazon Web Services IAM actions exempted from the control. Each string is expected to be an IAM action.
Example:
["logs:DescribeLogGroups","logs:StartQuery","logs:GetQueryResults"]
ExemptedPrincipalArns: List of Amazon Web Services IAM principal ARNs exempted from the control. Each string is expected to be an IAM principal that follows the pattern
^arn:(aws|aws-us-gov):(iam|sts)::.+:.+$
Example:
["arn:aws:iam::*:role/ReadOnly","arn:aws:sts::*:assumed-role/ReadOnly/*"]
ExemptedResourceArns: List of resource ARNs exempted from the control. Each string is expected to be a resource ARN.
Example:
["arn:aws:s3:::my-bucket-name"]
Constant Summary collapse
- SENSITIVE =
[]
Instance Attribute Summary collapse
-
#name ⇒ String
The parameter name.
Instance Attribute Details
#name ⇒ String
The parameter name. This name is the parameter key
when you call
EnableControl
or UpdateEnabledControl
.
168 169 170 171 172 |
# File 'gems/aws-sdk-controlcatalog/lib/aws-sdk-controlcatalog/types.rb', line 168 class ControlParameter < Struct.new( :name) SENSITIVE = [] include Aws::Structure end |