Class: Aws::DevOpsAgent::Types::SourceAwsConfiguration

Inherits:

Struct

• Object
• Struct
• Aws::DevOpsAgent::Types::SourceAwsConfiguration

Defined in:

gems/aws-sdk-devopsagent/lib/aws-sdk-devopsagent/types.rb

Overview

Configuration for AWS source account integration. Setting the role ARNs on this configuration requires the caller to have at least the iam:PassRole permission (see assumableRoleArn).

See Also:

• AWS API Documentation

Constant Summary

SENSITIVE =

[]

Instance Attribute Summary

• #account_id ⇒ String

  AWS Account Id corresponding to provided resources.

• #account_type ⇒ String

  Account Type 'source' for AIDevOps monitoring.

• #agent_elevated_role_arn ⇒ String

  Optional IAM role ARN to be assumed by AIDevOps for elevated directed actions on behalf of the customer.

• #agent_elevated_role_arn_status ⇒ String

  Validation status of the agentElevatedRoleArn.

• #assumable_role_arn ⇒ String

  Role ARN to be assumed by AIDevOps to operate on behalf of customer.

• #external_id ⇒ String

  External ID for additional security when assuming the role.

Instance Attribute Details

#account_id ⇒ String

AWS Account Id corresponding to provided resources.

Returns:

• (String)

# File 'gems/aws-sdk-devopsagent/lib/aws-sdk-devopsagent/types.rb', line 6645

class SourceAwsConfiguration < Struct.new(
  :account_id,
  :account_type,
  :assumable_role_arn,
  :external_id,
  :agent_elevated_role_arn,
  :agent_elevated_role_arn_status)
  SENSITIVE = []
  include Aws::Structure
end

#account_type ⇒ String

Account Type 'source' for AIDevOps monitoring.

Returns:

• (String)

# File 'gems/aws-sdk-devopsagent/lib/aws-sdk-devopsagent/types.rb', line 6645

class SourceAwsConfiguration < Struct.new(
  :account_id,
  :account_type,
  :assumable_role_arn,
  :external_id,
  :agent_elevated_role_arn,
  :agent_elevated_role_arn_status)
  SENSITIVE = []
  include Aws::Structure
end

#agent_elevated_role_arn ⇒ String

Optional IAM role ARN to be assumed by AIDevOps for elevated directed actions on behalf of the customer. Used for mutating operations gated by elevatedActionsEnabled on the AgentSpace. When not provided, only non-elevated directed actions are available for this AWS account. Setting this role is subject to the same minimum iam:PassRole requirement described on assumableRoleArn.

Returns:

• (String)

# File 'gems/aws-sdk-devopsagent/lib/aws-sdk-devopsagent/types.rb', line 6645

class SourceAwsConfiguration < Struct.new(
  :account_id,
  :account_type,
  :assumable_role_arn,
  :external_id,
  :agent_elevated_role_arn,
  :agent_elevated_role_arn_status)
  SENSITIVE = []
  include Aws::Structure
end

#agent_elevated_role_arn_status ⇒ String

Validation status of the agentElevatedRoleArn. Updated asynchronously after the customer registers an elevated role. Possible values: PENDING_CONFIRMATION (validation in progress), VALID (role validated), INVALID (validation failed).

Returns:

• (String)

# File 'gems/aws-sdk-devopsagent/lib/aws-sdk-devopsagent/types.rb', line 6645

class SourceAwsConfiguration < Struct.new(
  :account_id,
  :account_type,
  :assumable_role_arn,
  :external_id,
  :agent_elevated_role_arn,
  :agent_elevated_role_arn_status)
  SENSITIVE = []
  include Aws::Structure
end

#assumable_role_arn ⇒ String

Role ARN to be assumed by AIDevOps to operate on behalf of customer. To set this role ARN on AssociateService or UpdateAssociation, the caller must have at least the iam:PassRole permission on arn:aws:iam::<account-id>:role/* in the caller's own account, with the condition iam:PassedToService set to aidevops.amazonaws.com. A broader iam:PassRole grant also satisfies this requirement.

Returns:

• (String)

# File 'gems/aws-sdk-devopsagent/lib/aws-sdk-devopsagent/types.rb', line 6645

class SourceAwsConfiguration < Struct.new(
  :account_id,
  :account_type,
  :assumable_role_arn,
  :external_id,
  :agent_elevated_role_arn,
  :agent_elevated_role_arn_status)
  SENSITIVE = []
  include Aws::Structure
end

#external_id ⇒ String

External ID for additional security when assuming the role. Used to prevent the confused deputy problem.

Returns:

• (String)

# File 'gems/aws-sdk-devopsagent/lib/aws-sdk-devopsagent/types.rb', line 6645

class SourceAwsConfiguration < Struct.new(
  :account_id,
  :account_type,
  :assumable_role_arn,
  :external_id,
  :agent_elevated_role_arn,
  :agent_elevated_role_arn_status)
  SENSITIVE = []
  include Aws::Structure
end