Skip to content

/AWS1/IF_SGN=>ADDPROFILEPERMISSION()

About AddProfilePermission

Adds cross-account permissions to a signing profile.

Method Signature

METHODS /AWS1/IF_SGN~ADDPROFILEPERMISSION
  IMPORTING
    !IV_PROFILENAME TYPE /AWS1/SGNPROFILENAME OPTIONAL
    !IV_PROFILEVERSION TYPE /AWS1/SGNPROFILEVERSION OPTIONAL
    !IV_ACTION TYPE /AWS1/SGNSTRING OPTIONAL
    !IV_PRINCIPAL TYPE /AWS1/SGNSTRING OPTIONAL
    !IV_REVISIONID TYPE /AWS1/SGNSTRING OPTIONAL
    !IV_STATEMENTID TYPE /AWS1/SGNSTRING OPTIONAL
  RETURNING
    VALUE(OO_OUTPUT) TYPE REF TO /aws1/cl_sgnaddprofilepermrsp
  RAISING
    /AWS1/CX_SGNACCESSDENIEDEX
    /AWS1/CX_SGNCONFLICTEXCEPTION
    /AWS1/CX_SGNINTERNALSVCERROREX
    /AWS1/CX_SGNRESOURCENOTFOUNDEX
    /AWS1/CX_SGNSERVICELIMITEXCDEX
    /AWS1/CX_SGNTOOMANYREQUESTSEX
    /AWS1/CX_SGNVALIDATIONEX
    /AWS1/CX_SGNCLIENTEXC
    /AWS1/CX_SGNSERVEREXC
    /AWS1/CX_RT_TECHNICAL_GENERIC
    /AWS1/CX_RT_SERVICE_GENERIC.

IMPORTING

Required arguments:

iv_profilename TYPE /AWS1/SGNPROFILENAME /AWS1/SGNPROFILENAME

The human-readable name of the signing profile.

iv_action TYPE /AWS1/SGNSTRING /AWS1/SGNSTRING

For cross-account signing. Grant a designated account permission to perform one or more of the following actions. Each action is associated with a specific API's operations. For more information about cross-account signing, see Using cross-account signing with signing profiles in the AWS Signer Developer Guide.

You can designate the following actions to an account.

  • signer:StartSigningJob. This action isn't supported for container image workflows. For details, see StartSigningJob.

  • signer:SignPayload. This action isn't supported for AWS Lambda workflows. For details, see SignPayload

  • signer:GetSigningProfile. For details, see GetSigningProfile.

  • signer:RevokeSignature. For details, see RevokeSignature.

iv_principal TYPE /AWS1/SGNSTRING /AWS1/SGNSTRING

The AWS principal receiving cross-account permissions. This may be an IAM role or another AWS account ID.

iv_statementid TYPE /AWS1/SGNSTRING /AWS1/SGNSTRING

A unique identifier for the cross-account permission statement.

Optional arguments:

iv_profileversion TYPE /AWS1/SGNPROFILEVERSION /AWS1/SGNPROFILEVERSION

The version of the signing profile.

iv_revisionid TYPE /AWS1/SGNSTRING /AWS1/SGNSTRING

A unique identifier for the current profile revision.

RETURNING

oo_output TYPE REF TO /aws1/cl_sgnaddprofilepermrsp /AWS1/CL_SGNADDPROFILEPERMRSP

Domain /AWS1/RT_ACCOUNT_ID
Primitive Type NUMC

Examples

Syntax Example

This is an example of the syntax for calling the method. It includes every possible argument and initializes every possible value. The data provided is not necessarily semantically accurate (for example the value "string" may be provided for something that is intended to be an instance ID, or in some cases two arguments may be mutually exclusive). The syntax shows the ABAP syntax for creating the various data structures.

DATA(lo_result) = lo_client->addprofilepermission(
  iv_action = |string|
  iv_principal = |string|
  iv_profilename = |string|
  iv_profileversion = |string|
  iv_revisionid = |string|
  iv_statementid = |string|
).

This is an example of reading all possible response values

lo_result = lo_result.
IF lo_result IS NOT INITIAL.
  lv_string = lo_result->get_revisionid( ).
ENDIF.