Skip to main content

Documentation Index

Fetch the complete documentation index at: https://cdktn.io/docs/llms.txt

Use this file to discover all available pages before exploring further.

​
Initializer 

using Io.Cdktn;

new S3BackendAssumeRoleWithWebIdentityConfig {
    string Duration = null,
    string Policy = null,
    string[] PolicyArns = null,
    string RoleArn = null,
    string SessionName = null,
    string WebIdentityToken = null,
    string WebIdentityTokenFile = null
};

​
Properties

NameTypeDescription
Durationstring(Optional) The duration individual credentials will be valid.
Policystring(Optional) IAM Policy JSON describing further restricting permissions for the IAM Role being assumed.
PolicyArnsstring[](Optional) Set of Amazon Resource Names (ARNs) of IAM Policies describing further restricting permissions for the IAM Role being assumed.
RoleArnstring(Required) Amazon Resource Name (ARN) of the IAM Role to assume.
SessionNamestring(Optional) Session name to use when assuming the role.
WebIdentityTokenstring(Optional) The value of a web identity token from an OpenID Connect (OIDC) or OAuth provider.
WebIdentityTokenFilestring(Optional) File containing a web identity token from an OpenID Connect (OIDC) or OAuth provider.

​
DurationOptional 

public string Duration { get; set; }
  • Type: string
(Optional) The duration individual credentials will be valid. Credentials are automatically renewed up to the maximum defined by the AWS account. Specified using the format < hours >h< minutes >m< seconds >s with any unit being optional. For example, an hour and a half can be specified as 1h30m or 90m. Must be between 15 minutes (15m) and 12 hours (12h).

​
PolicyOptional 

public string Policy { get; set; }
  • Type: string
(Optional) IAM Policy JSON describing further restricting permissions for the IAM Role being assumed.

​
PolicyArnsOptional 

public string[] PolicyArns { get; set; }
  • Type: string[]
(Optional) Set of Amazon Resource Names (ARNs) of IAM Policies describing further restricting permissions for the IAM Role being assumed.

​
RoleArnOptional 

public string RoleArn { get; set; }
  • Type: string
(Required) Amazon Resource Name (ARN) of the IAM Role to assume. Can also be set with the AWS_ROLE_ARN environment variable.

​
SessionNameOptional 

public string SessionName { get; set; }
  • Type: string
(Optional) Session name to use when assuming the role. Can also be set with the AWS_ROLE_SESSION_NAME environment variable.

​
WebIdentityTokenOptional 

public string WebIdentityToken { get; set; }
  • Type: string
(Optional) The value of a web identity token from an OpenID Connect (OIDC) or OAuth provider. One of web_identity_token or web_identity_token_file is required.

​
WebIdentityTokenFileOptional 

public string WebIdentityTokenFile { get; set; }
  • Type: string
(Optional) File containing a web identity token from an OpenID Connect (OIDC) or OAuth provider. One of web_identity_token_file or web_identity_token is required. Can also be set with the AWS_WEB_IDENTITY_TOKEN_FILE environment variable.