Interface UpdateResourcePermissionsRequest.Builder
- All Superinterfaces:
AwsRequest.Builder,Buildable,CopyableBuilder<UpdateResourcePermissionsRequest.Builder,,UpdateResourcePermissionsRequest> QuickSightRequest.Builder,SdkBuilder<UpdateResourcePermissionsRequest.Builder,,UpdateResourcePermissionsRequest> SdkPojo,SdkRequest.Builder
- Enclosing class:
UpdateResourcePermissionsRequest
-
Method Summary
Modifier and TypeMethodDescriptionawsAccountId(String awsAccountId) The ID of the Amazon Web Services account whose service role configuration you want to update.customerManagedRoleArn(String customerManagedRoleArn) The ARN of the customer-managed role that you want Amazon Quick Sight to use.overrideConfiguration(Consumer<AwsRequestOverrideConfiguration.Builder> builderConsumer) Add an optional request override configuration.overrideConfiguration(AwsRequestOverrideConfiguration overrideConfiguration) Add an optional request override configuration.The type of service role that you want Amazon Quick Sight to use.roleType(ServiceRoleType roleType) The type of service role that you want Amazon Quick Sight to use.Methods inherited from interface software.amazon.awssdk.awscore.AwsRequest.Builder
overrideConfigurationMethods inherited from interface software.amazon.awssdk.utils.builder.CopyableBuilder
copyMethods inherited from interface software.amazon.awssdk.services.quicksight.model.QuickSightRequest.Builder
buildMethods inherited from interface software.amazon.awssdk.utils.builder.SdkBuilder
applyMutation, buildMethods inherited from interface software.amazon.awssdk.core.SdkPojo
equalsBySdkFields, sdkFieldNameToField, sdkFields
-
Method Details
-
awsAccountId
The ID of the Amazon Web Services account whose service role configuration you want to update.
- Parameters:
awsAccountId- The ID of the Amazon Web Services account whose service role configuration you want to update.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
roleType
The type of service role that you want Amazon Quick Sight to use. The only supported value for this operation is
CUSTOMER_MANAGED. Requests that specifyQUICKSIGHT_MANAGEDare rejected.- Parameters:
roleType- The type of service role that you want Amazon Quick Sight to use. The only supported value for this operation isCUSTOMER_MANAGED. Requests that specifyQUICKSIGHT_MANAGEDare rejected.- Returns:
- Returns a reference to this object so that method calls can be chained together.
- See Also:
-
roleType
The type of service role that you want Amazon Quick Sight to use. The only supported value for this operation is
CUSTOMER_MANAGED. Requests that specifyQUICKSIGHT_MANAGEDare rejected.- Parameters:
roleType- The type of service role that you want Amazon Quick Sight to use. The only supported value for this operation isCUSTOMER_MANAGED. Requests that specifyQUICKSIGHT_MANAGEDare rejected.- Returns:
- Returns a reference to this object so that method calls can be chained together.
- See Also:
-
customerManagedRoleArn
The ARN of the customer-managed role that you want Amazon Quick Sight to use. To use this operation, you must have the
iam:PassRolepermission for the role.Configure the role as follows:
-
The role must belong to the Amazon Web Services account specified by
AwsAccountId. -
Configure the role trust policy to allow the Amazon Quick Sight service principal to call
sts:AssumeRole. -
Attach a permissions policy that allows access to the resources that you want Amazon Quick Sight to use.
-
To use features that rely on session tags, configure the role trust policy to allow the Amazon Quick Sight service principal to call
sts:TagSession.
If the role doesn't exist or its trust policy doesn't allow
sts:AssumeRole, the request returns anAccessDeniedException.When you call this operation, Amazon Quick Sight attempts to assume the role with session tags and records whether the attempt succeeds. If you later add or remove
sts:TagSessionfrom the trust policy, call this operation again with the same role ARN to refresh the stored capability.- Parameters:
customerManagedRoleArn- The ARN of the customer-managed role that you want Amazon Quick Sight to use. To use this operation, you must have theiam:PassRolepermission for the role.Configure the role as follows:
-
The role must belong to the Amazon Web Services account specified by
AwsAccountId. -
Configure the role trust policy to allow the Amazon Quick Sight service principal to call
sts:AssumeRole. -
Attach a permissions policy that allows access to the resources that you want Amazon Quick Sight to use.
-
To use features that rely on session tags, configure the role trust policy to allow the Amazon Quick Sight service principal to call
sts:TagSession.
If the role doesn't exist or its trust policy doesn't allow
sts:AssumeRole, the request returns anAccessDeniedException.When you call this operation, Amazon Quick Sight attempts to assume the role with session tags and records whether the attempt succeeds. If you later add or remove
sts:TagSessionfrom the trust policy, call this operation again with the same role ARN to refresh the stored capability.-
- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
-
overrideConfiguration
UpdateResourcePermissionsRequest.Builder overrideConfiguration(AwsRequestOverrideConfiguration overrideConfiguration) Description copied from interface:AwsRequest.BuilderAdd an optional request override configuration.- Specified by:
overrideConfigurationin interfaceAwsRequest.Builder- Parameters:
overrideConfiguration- The override configuration.- Returns:
- This object for method chaining.
-
overrideConfiguration
UpdateResourcePermissionsRequest.Builder overrideConfiguration(Consumer<AwsRequestOverrideConfiguration.Builder> builderConsumer) Description copied from interface:AwsRequest.BuilderAdd an optional request override configuration.- Specified by:
overrideConfigurationin interfaceAwsRequest.Builder- Parameters:
builderConsumer- AConsumerto which an emptyAwsRequestOverrideConfiguration.Builderwill be given.- Returns:
- This object for method chaining.
-