Class: Aws::ControlCatalog::Types::ControlParameter

Inherits:
Struct
  • Object
show all
Defined in:
gems/aws-sdk-controlcatalog/lib/aws-sdk-controlcatalog/types.rb

Overview

Four types of control parameters are supported.

  • AllowedRegions: List of Amazon Web Services Regions exempted from the control. Each string is expected to be an Amazon Web Services Region code. This parameter is mandatory for the OU Region deny control, CT.MULTISERVICE.PV.1.

    Example: ["us-east-1","us-west-2"]

  • ExemptedActions: List of Amazon Web Services IAM actions exempted from the control. Each string is expected to be an IAM action.

    Example: ["logs:DescribeLogGroups","logs:StartQuery","logs:GetQueryResults"]

  • ExemptedPrincipalArns: List of Amazon Web Services IAM principal ARNs exempted from the control. Each string is expected to be an IAM principal that follows the pattern ^arn:(aws|aws-us-gov):(iam|sts)::.+:.+$

    Example: ["arn:aws:iam::*:role/ReadOnly","arn:aws:sts::*:assumed-role/ReadOnly/*"]

  • ExemptedResourceArns: List of resource ARNs exempted from the control. Each string is expected to be a resource ARN.

    Example: ["arn:aws:s3:::my-bucket-name"]

Constant Summary collapse

SENSITIVE =
[]

Instance Attribute Summary collapse

Instance Attribute Details

#nameString

The parameter name. This name is the parameter key when you call EnableControl or UpdateEnabledControl .

Returns:

  • (String)


168
169
170
171
172
# File 'gems/aws-sdk-controlcatalog/lib/aws-sdk-controlcatalog/types.rb', line 168

class ControlParameter < Struct.new(
  :name)
  SENSITIVE = []
  include Aws::Structure
end