Java: S3Backend - CDK Terrain (CDKTN)

Initializers

import io.cdktn.cdktn.S3Backend;

S3Backend.Builder.create(Construct scope)
    .bucket(java.lang.String)
    .key(java.lang.String)
//  .accessKey(java.lang.String)
//  .acl(java.lang.String)
//  .allowedAccountIds(java.util.List<java.lang.String>)
//  .assumeRole(S3BackendAssumeRoleConfig)
//  .assumeRolePolicy(java.lang.String)
//  .assumeRolePolicyArns(java.util.List<java.lang.String>)
//  .assumeRoleTags(java.util.Map<java.lang.String, java.lang.String>)
//  .assumeRoleTransitiveTagKeys(java.util.List<java.lang.String>)
//  .assumeRoleWithWebIdentity(S3BackendAssumeRoleWithWebIdentityConfig)
//  .customCaBundle(java.lang.String)
//  .dynamodbEndpoint(java.lang.String)
//  .dynamodbTable(java.lang.String)
//  .ec2MetadataServiceEndpoint(java.lang.String)
//  .ec2MetadataServiceEndpointMode(java.lang.String)
//  .encrypt(java.lang.Boolean)
//  .endpoint(java.lang.String)
//  .endpoints(S3BackendEndpointConfig)
//  .externalId(java.lang.String)
//  .forbiddenAccountIds(java.util.List<java.lang.String>)
//  .forcePathStyle(java.lang.Boolean)
//  .httpProxy(java.lang.String)
//  .httpsProxy(java.lang.String)
//  .iamEndpoint(java.lang.String)
//  .insecure(java.lang.Boolean)
//  .kmsKeyId(java.lang.String)
//  .maxRetries(java.lang.Number)
//  .noProxy(java.lang.String)
//  .profile(java.lang.String)
//  .region(java.lang.String)
//  .retryMode(java.lang.String)
//  .roleArn(java.lang.String)
//  .secretKey(java.lang.String)
//  .sessionName(java.lang.String)
//  .sharedConfigFiles(java.util.List<java.lang.String>)
//  .sharedCredentialsFile(java.lang.String)
//  .sharedCredentialsFiles(java.util.List<java.lang.String>)
//  .skipCredentialsValidation(java.lang.Boolean)
//  .skipMetadataApiCheck(java.lang.Boolean)
//  .skipRegionValidation(java.lang.Boolean)
//  .skipRequestingAccountId(java.lang.Boolean)
//  .skipS3Checksum(java.lang.Boolean)
//  .sseCustomerKey(java.lang.String)
//  .stsEndpoint(java.lang.String)
//  .stsRegion(java.lang.String)
//  .token(java.lang.String)
//  .useLegacyWorkflow(java.lang.Boolean)
//  .usePathStyle(java.lang.Boolean)
//  .workspaceKeyPrefix(java.lang.String)
    .build();

Name	Type	Description
`scope`	`software.constructs.Construct`	No description.
`bucket`	`java.lang.String`	Name of the S3 Bucket.
`key`	`java.lang.String`	Path to the state file inside the S3 Bucket.
`accessKey`	`java.lang.String`	(Optional) AWS access key.
`acl`	`java.lang.String`	(Optional) Canned ACL to be applied to the state file.
`allowedAccountIds`	`java.util.List< java.lang.String >`	(Optional) List of allowed AWS account IDs to prevent potential destruction of a live environment.
`assumeRole`	`S3BackendAssumeRoleConfig`	Assuming an IAM Role can be configured in two ways.
`assumeRolePolicy`	`java.lang.String`	(Optional) IAM Policy JSON describing further restricting permissions for the IAM Role being assumed.
`assumeRolePolicyArns`	`java.util.List< java.lang.String >`	(Optional) Set of Amazon Resource Names (ARNs) of IAM Policies describing further restricting permissions for the IAM Role being assumed.
`assumeRoleTags`	`java.util.Map< java.lang.String, java.lang.String >`	(Optional) Map of assume role session tags.
`assumeRoleTransitiveTagKeys`	`java.util.List< java.lang.String >`	(Optional) Set of assume role session tag keys to pass to any subsequent sessions.
`assumeRoleWithWebIdentity`	`S3BackendAssumeRoleWithWebIdentityConfig`	Assume Role With Web Identity Configuration.
`customCaBundle`	`java.lang.String`	(Optional) File containing custom root and intermediate certificates.
`dynamodbEndpoint`	`java.lang.String`	(Optional) Custom endpoint for the AWS DynamoDB API.
`dynamodbTable`	`java.lang.String`	(Optional) Name of DynamoDB Table to use for state locking and consistency.
`ec2MetadataServiceEndpoint`	`java.lang.String`	Optional) Custom endpoint URL for the EC2 Instance Metadata Service (IMDS) API.
`ec2MetadataServiceEndpointMode`	`java.lang.String`	(Optional) Mode to use in communicating with the metadata service.
`encrypt`	`java.lang.Boolean`	(Optional) Enable server side encryption of the state file.
`endpoint`	`java.lang.String`	(Optional) Custom endpoint for the AWS S3 API.
`endpoints`	`S3BackendEndpointConfig`	(Optional) The endpoint configuration block.
`externalId`	`java.lang.String`	(Optional) External identifier to use when assuming the role.
`forbiddenAccountIds`	`java.util.List< java.lang.String >`	(Optional) List of forbidden AWS account IDs to prevent potential destruction of a live environment.
`forcePathStyle`	`java.lang.Boolean`	(Optional) Enable path-style S3 URLs (https://< HOST >/< BUCKET > instead of https://< BUCKET >.< HOST >).
`httpProxy`	`java.lang.String`	(Optional) URL of a proxy to use for HTTP requests when accessing the AWS API.
`httpsProxy`	`java.lang.String`	(Optional) URL of a proxy to use for HTTPS requests when accessing the AWS API.
`iamEndpoint`	`java.lang.String`	(Optional) Custom endpoint for the AWS Identity and Access Management (IAM) API.
`insecure`	`java.lang.Boolean`	Optional) Whether to explicitly allow the backend to perform “insecure” SSL requests.
`kmsKeyId`	`java.lang.String`	(Optional) Amazon Resource Name (ARN) of a Key Management Service (KMS) Key to use for encrypting the state.
`maxRetries`	`java.lang.Number`	(Optional) The maximum number of times an AWS API request is retried on retryable failure.
`noProxy`	`java.lang.String`	(Optional) Comma-separated list of hosts that should not use HTTP or HTTPS proxies.
`profile`	`java.lang.String`	(Optional) Name of AWS profile in AWS shared credentials file (e.g. ~/.aws/credentials) or AWS shared configuration file (e.g. ~/.aws/config) to use for credentials and/or configuration. This can also be sourced from the AWS_PROFILE environment variable.
`region`	`java.lang.String`	AWS Region of the S3 Bucket and DynamoDB Table (if used).
`retryMode`	`java.lang.String`	(Optional) Specifies how retries are attempted.
`roleArn`	`java.lang.String`	(Optional) Amazon Resource Name (ARN) of the IAM Role to assume.
`secretKey`	`java.lang.String`	(Optional) AWS secret access key.
`sessionName`	`java.lang.String`	(Optional) Session name to use when assuming the role.
`sharedConfigFiles`	`java.util.List< java.lang.String >`	(Optional) List of paths to AWS shared configuration files.
`sharedCredentialsFile`	`java.lang.String`	(Optional) Path to the AWS shared credentials file.
`sharedCredentialsFiles`	`java.util.List< java.lang.String >`	(Optional) List of paths to AWS shared credentials files.
`skipCredentialsValidation`	`java.lang.Boolean`	(Optional) Skip credentials validation via the STS API.
`skipMetadataApiCheck`	`java.lang.Boolean`	(Optional) Skip usage of EC2 Metadata API.
`skipRegionValidation`	`java.lang.Boolean`	(Optional) Skip validation of provided region name.
`skipRequestingAccountId`	`java.lang.Boolean`	(Optional) Whether to skip requesting the account ID.
`skipS3Checksum`	`java.lang.Boolean`	(Optional) Do not include checksum when uploading S3 Objects.
`sseCustomerKey`	`java.lang.String`	(Optional) The key to use for encrypting state with Server-Side Encryption with Customer-Provided Keys (SSE-C).
`stsEndpoint`	`java.lang.String`	(Optional) Custom endpoint for the AWS Security Token Service (STS) API.
`stsRegion`	`java.lang.String`	(Optional) AWS region for STS.
`token`	`java.lang.String`	(Optional) Multi-Factor Authentication (MFA) token.
`useLegacyWorkflow`	`java.lang.Boolean`	(Optional) Use the legacy authentication workflow, preferring environment variables over backend configuration.
`usePathStyle`	`java.lang.Boolean`	(Optional) Enable path-style S3 URLs (https://< HOST >/< BUCKET > instead of https://< BUCKET >.< HOST >).
`workspaceKeyPrefix`	`java.lang.String`	(Optional) Prefix applied to the state path inside the bucket.

`scope`^Required

Type: software.constructs.Construct

`bucket`^Required

Type: java.lang.String

Name of the S3 Bucket.

`key`^Required

Type: java.lang.String

Path to the state file inside the S3 Bucket. When using a non-default workspace, the state path will be /workspace_key_prefix/workspace_name/key

`accessKey`^Optional

Type: java.lang.String

(Optional) AWS access key. If configured, must also configure secret_key. This can also be sourced from the AWS_ACCESS_KEY_ID environment variable, AWS shared credentials file (e.g. ~/.aws/credentials), or AWS shared configuration file (e.g. ~/.aws/config).

`acl`^Optional

Type: java.lang.String

(Optional) Canned ACL to be applied to the state file.

`allowedAccountIds`^Optional

Type: java.util.List< java.lang.String >

(Optional) List of allowed AWS account IDs to prevent potential destruction of a live environment. Conflicts with forbidden_account_ids.

`assumeRole`^Optional

Type: S3BackendAssumeRoleConfig

Assuming an IAM Role can be configured in two ways. The preferred way is to use the argument assume_role, the other, which is deprecated, is with arguments at the top level.

`assumeRolePolicy`^Optional

Deprecated: Use assumeRole.policy instead.
Type: java.lang.String

(Optional) IAM Policy JSON describing further restricting permissions for the IAM Role being assumed.

`assumeRolePolicyArns`^Optional

Deprecated: Use assumeRole.policyArns instead.
Type: java.util.List< java.lang.String >

(Optional) Set of Amazon Resource Names (ARNs) of IAM Policies describing further restricting permissions for the IAM Role being assumed.

`assumeRoleTags`^Optional

Deprecated: Use assumeRole.tags instead.
Type: java.util.Map< java.lang.String, java.lang.String >

(Optional) Map of assume role session tags.

`assumeRoleTransitiveTagKeys`^Optional

Deprecated: Use assumeRole.transitiveTagKeys instead.
Type: java.util.List< java.lang.String >

(Optional) Set of assume role session tag keys to pass to any subsequent sessions.

`assumeRoleWithWebIdentity`^Optional

Type: S3BackendAssumeRoleWithWebIdentityConfig

Assume Role With Web Identity Configuration.

`customCaBundle`^Optional

Type: java.lang.String

(Optional) File containing custom root and intermediate certificates. Can also be set using the AWS_CA_BUNDLE environment variable. Setting ca_bundle in the shared config file is not supported.

`dynamodbEndpoint`^Optional

Deprecated: Use endpoints.dynamodb instead
Type: java.lang.String

(Optional) Custom endpoint for the AWS DynamoDB API. This can also be sourced from the AWS_DYNAMODB_ENDPOINT environment variable.

`dynamodbTable`^Optional

Type: java.lang.String

(Optional) Name of DynamoDB Table to use for state locking and consistency. The table must have a partition key named LockID with type of String. If not configured, state locking will be disabled.

`ec2MetadataServiceEndpoint`^Optional

Type: java.lang.String

Optional) Custom endpoint URL for the EC2 Instance Metadata Service (IMDS) API. Can also be set with the AWS_EC2_METADATA_SERVICE_ENDPOINT environment variable.

`ec2MetadataServiceEndpointMode`^Optional

Type: java.lang.String

(Optional) Mode to use in communicating with the metadata service. Valid values are IPv4 and IPv6. Can also be set with the AWS_EC2_METADATA_SERVICE_ENDPOINT_MODE environment variable.

`encrypt`^Optional

Type: java.lang.Boolean

(Optional) Enable server side encryption of the state file.

`endpoint`^Optional

Deprecated: Use endpoints.s3 instead
Type: java.lang.String

(Optional) Custom endpoint for the AWS S3 API. This can also be sourced from the AWS_S3_ENDPOINT environment variable.

`endpoints`^Optional

Type: S3BackendEndpointConfig

(Optional) The endpoint configuration block.

`externalId`^Optional

Deprecated: Use assume_role.external_id instead.
Type: java.lang.String

(Optional) External identifier to use when assuming the role.

`forbiddenAccountIds`^Optional

Type: java.util.List< java.lang.String >

(Optional) List of forbidden AWS account IDs to prevent potential destruction of a live environment. Conflicts with allowed_account_ids.

`forcePathStyle`^Optional

Deprecated: Use usePathStyle instead
Type: java.lang.Boolean

(Optional) Enable path-style S3 URLs (https://< HOST >/< BUCKET > instead of https://< BUCKET >.< HOST >).

`httpProxy`^Optional

Type: java.lang.String

(Optional) URL of a proxy to use for HTTP requests when accessing the AWS API. Can also be set using the HTTP_PROXY or http_proxy environment variables.

`httpsProxy`^Optional

Type: java.lang.String

(Optional) URL of a proxy to use for HTTPS requests when accessing the AWS API. Can also be set using the HTTPS_PROXY or https_proxy environment variables.

`iamEndpoint`^Optional

Deprecated: Use endpoints.iam instead
Type: java.lang.String

(Optional) Custom endpoint for the AWS Identity and Access Management (IAM) API. This can also be sourced from the AWS_IAM_ENDPOINT environment variable.

`insecure`^Optional

Type: java.lang.Boolean

Optional) Whether to explicitly allow the backend to perform “insecure” SSL requests. If omitted, the default value is false.

`kmsKeyId`^Optional

Type: java.lang.String

(Optional) Amazon Resource Name (ARN) of a Key Management Service (KMS) Key to use for encrypting the state. Note that if this value is specified, Terraform will need kms:Encrypt, kms:Decrypt and kms:GenerateDataKey permissions on this KMS key.

`maxRetries`^Optional

Type: java.lang.Number

(Optional) The maximum number of times an AWS API request is retried on retryable failure. Defaults to 5.

`noProxy`^Optional

Type: java.lang.String

(Optional) Comma-separated list of hosts that should not use HTTP or HTTPS proxies. Each value can be one of:

A domain name
An IP address
A CIDR address
An asterisk (*), to indicate that no proxying should be performed Domain name and IP address values can also include a port number. Can also be set using the NO_PROXY or no_proxy environment variables.

`profile`^Optional

Type: java.lang.String

(Optional) Name of AWS profile in AWS shared credentials file (e.g. ~/.aws/credentials) or AWS shared configuration file (e.g. ~/.aws/config) to use for credentials and/or configuration. This can also be sourced from the AWS_PROFILE environment variable.

`region`^Optional

Type: java.lang.String

AWS Region of the S3 Bucket and DynamoDB Table (if used). This can also be sourced from the AWS_DEFAULT_REGION and AWS_REGION environment variables.

`retryMode`^Optional

Type: java.lang.String

(Optional) Specifies how retries are attempted. Valid values are standard and adaptive. Can also be configured using the AWS_RETRY_MODE environment variable or the shared config file parameter retry_mode.

`roleArn`^Optional

Deprecated: Use assumeRole.roleArn instead.
Type: java.lang.String

(Optional) Amazon Resource Name (ARN) of the IAM Role to assume.

`secretKey`^Optional

Type: java.lang.String

(Optional) AWS secret access key. If configured, must also configure access_key. This can also be sourced from the AWS_SECRET_ACCESS_KEY environment variable, AWS shared credentials file (e.g. ~/.aws/credentials), or AWS shared configuration file (e.g. ~/.aws/config)

`sessionName`^Optional

Deprecated: Use assumeRole.sessionName instead.
Type: java.lang.String

(Optional) Session name to use when assuming the role.

`sharedConfigFiles`^Optional

Type: java.util.List< java.lang.String >

(Optional) List of paths to AWS shared configuration files. Defaults to ~/.aws/config.

`sharedCredentialsFile`^Optional

Type: java.lang.String

(Optional) Path to the AWS shared credentials file. Defaults to ~/.aws/credentials.

`sharedCredentialsFiles`^Optional

Type: java.util.List< java.lang.String >

(Optional) List of paths to AWS shared credentials files. Defaults to ~/.aws/credentials.

`skipCredentialsValidation`^Optional

Type: java.lang.Boolean

(Optional) Skip credentials validation via the STS API.

`skipMetadataApiCheck`^Optional

Type: java.lang.Boolean

(Optional) Skip usage of EC2 Metadata API.

`skipRegionValidation`^Optional

Type: java.lang.Boolean

(Optional) Skip validation of provided region name.

`skipRequestingAccountId`^Optional

Type: java.lang.Boolean

(Optional) Whether to skip requesting the account ID. Useful for AWS API implementations that do not have the IAM, STS API, or metadata API.

`skipS3Checksum`^Optional

Type: java.lang.Boolean

(Optional) Do not include checksum when uploading S3 Objects. Useful for some S3-Compatible APIs.

`sseCustomerKey`^Optional

Type: java.lang.String

(Optional) The key to use for encrypting state with Server-Side Encryption with Customer-Provided Keys (SSE-C). This is the base64-encoded value of the key, which must decode to 256 bits. This can also be sourced from the AWS_SSE_CUSTOMER_KEY environment variable, which is recommended due to the sensitivity of the value. Setting it inside a terraform file will cause it to be persisted to disk in terraform.tfstate.

`stsEndpoint`^Optional

Deprecated: Use endpoints.sts instead
Type: java.lang.String

(Optional) Custom endpoint for the AWS Security Token Service (STS) API. This can also be sourced from the AWS_STS_ENDPOINT environment variable.

`stsRegion`^Optional

Type: java.lang.String

(Optional) AWS region for STS. If unset, AWS will use the same region for STS as other non-STS operations.

`token`^Optional

Type: java.lang.String

(Optional) Multi-Factor Authentication (MFA) token. This can also be sourced from the AWS_SESSION_TOKEN environment variable.

`useLegacyWorkflow`^Optional

Type: java.lang.Boolean

(Optional) Use the legacy authentication workflow, preferring environment variables over backend configuration. Defaults to true. This behavior does not align with the authentication flow of the AWS CLI or SDK’s, and will be removed in the future.

`usePathStyle`^Optional

Type: java.lang.Boolean

(Optional) Enable path-style S3 URLs (https://< HOST >/< BUCKET > instead of https://< BUCKET >.< HOST >).

`workspaceKeyPrefix`^Optional

Type: java.lang.String

(Optional) Prefix applied to the state path inside the bucket. This is only relevant when using a non-default workspace. Defaults to env:

Methods

Name	Description
`toString`	Returns a string representation of this construct.
`addOverride`	No description.
`overrideLogicalId`	Overrides the auto-generated logical ID with a specific ID.
`resetOverrideLogicalId`	Resets a previously passed logical Id to use the auto-generated logical id again.
`toHclTerraform`	No description.
`toMetadata`	No description.
`toTerraform`	Adds this resource to the terraform JSON output.
`getRemoteStateDataSource`	Creates a TerraformRemoteState resource that accesses this backend.

`toString`

public java.lang.String toString()

Returns a string representation of this construct.

`addOverride`

public void addOverride(java.lang.String path, java.lang.Object value)

`path`^Required

Type: java.lang.String

`value`^Required

Type: java.lang.Object

`overrideLogicalId`

public void overrideLogicalId(java.lang.String newLogicalId)

Overrides the auto-generated logical ID with a specific ID.

`newLogicalId`^Required

Type: java.lang.String

The new logical ID to use for this stack element.

`resetOverrideLogicalId`

public void resetOverrideLogicalId()

Resets a previously passed logical Id to use the auto-generated logical id again.

`toHclTerraform`

public java.lang.Object toHclTerraform()

`toMetadata`

public java.lang.Object toMetadata()

`toTerraform`

public java.lang.Object toTerraform()

Adds this resource to the terraform JSON output.

`getRemoteStateDataSource`

public TerraformRemoteState getRemoteStateDataSource(Construct scope, java.lang.String name, java.lang.String _fromStack)

Creates a TerraformRemoteState resource that accesses this backend.

`scope`^Required

Type: software.constructs.Construct

`name`^Required

Type: java.lang.String

`_fromStack`^Required

Type: java.lang.String

Static Functions

Name	Description
`isConstruct`	Checks if `x` is a construct.
`isTerraformElement`	No description.
`isBackend`	No description.

`isConstruct`

import io.cdktn.cdktn.S3Backend;

S3Backend.isConstruct(java.lang.Object x)

Checks if x is a construct. Use this method instead of instanceof to properly detect Construct instances, even when the construct library is symlinked. Explanation: in JavaScript, multiple copies of the constructs library on disk are seen as independent, completely different libraries. As a consequence, the class Construct in each copy of the constructs library is seen as a different class, and an instance of one class will not test as instanceof the other class. npm install will not create installations like this, but users may manually symlink construct libraries together or use a monorepo tool: in those cases, multiple copies of the constructs library can be accidentally installed, and instanceof will behave unpredictably. It is safest to avoid using instanceof, and using this type-testing method instead.

`x`^Required

Type: java.lang.Object

Any object.

`isTerraformElement`

import io.cdktn.cdktn.S3Backend;

S3Backend.isTerraformElement(java.lang.Object x)

`x`^Required

Type: java.lang.Object

`isBackend`

import io.cdktn.cdktn.S3Backend;

S3Backend.isBackend(java.lang.Object x)

`x`^Required

Type: java.lang.Object

Properties

Name	Type	Description
`node`	`software.constructs.Node`	The tree node.
`cdktfStack`	`TerraformStack`	No description.
`fqn`	`java.lang.String`	No description.
`friendlyUniqueId`	`java.lang.String`	No description.

`node`^Required

public Node getNode();

Type: software.constructs.Node

The tree node.

`cdktfStack`^Required

public TerraformStack getCdktfStack();

Type: TerraformStack

`fqn`^Required

public java.lang.String getFqn();

Type: java.lang.String

`friendlyUniqueId`^Required

public java.lang.String getFriendlyUniqueId();

Type: java.lang.String

Overview

TypeScript

Python

Java

C#

Go

​Initializers

​scopeRequired

​bucketRequired

​keyRequired

​accessKeyOptional

​aclOptional

​allowedAccountIdsOptional

​assumeRoleOptional

​assumeRolePolicyOptional

​assumeRolePolicyArnsOptional

​assumeRoleTagsOptional

​assumeRoleTransitiveTagKeysOptional

​assumeRoleWithWebIdentityOptional

​customCaBundleOptional

​dynamodbEndpointOptional

​dynamodbTableOptional

​ec2MetadataServiceEndpointOptional

​ec2MetadataServiceEndpointModeOptional

​encryptOptional

​endpointOptional

​endpointsOptional

​externalIdOptional

​forbiddenAccountIdsOptional

​forcePathStyleOptional

​httpProxyOptional

​httpsProxyOptional

​iamEndpointOptional

​insecureOptional

​kmsKeyIdOptional

​maxRetriesOptional

​noProxyOptional

​profileOptional

​regionOptional

​retryModeOptional

​roleArnOptional

​secretKeyOptional

​sessionNameOptional

​sharedConfigFilesOptional

​sharedCredentialsFileOptional

​sharedCredentialsFilesOptional

​skipCredentialsValidationOptional

​skipMetadataApiCheckOptional

​skipRegionValidationOptional

​skipRequestingAccountIdOptional

​skipS3ChecksumOptional

​sseCustomerKeyOptional

​stsEndpointOptional

​stsRegionOptional

​tokenOptional

​useLegacyWorkflowOptional

​usePathStyleOptional

​workspaceKeyPrefixOptional

​Methods

​toString

​addOverride

​pathRequired

​valueRequired

​overrideLogicalId

​newLogicalIdRequired

​resetOverrideLogicalId

​toHclTerraform

​toMetadata

​toTerraform

​getRemoteStateDataSource

​scopeRequired

​nameRequired

​_fromStackRequired

​Static Functions

​isConstruct

​xRequired

​isTerraformElement

​xRequired

​isBackend

​xRequired

Initializers

`scope`^Required

`bucket`^Required

`key`^Required

`accessKey`^Optional

`acl`^Optional

`allowedAccountIds`^Optional

`assumeRole`^Optional

`assumeRolePolicy`^Optional

`assumeRolePolicyArns`^Optional

`assumeRoleTags`^Optional

`assumeRoleTransitiveTagKeys`^Optional

`assumeRoleWithWebIdentity`^Optional

`customCaBundle`^Optional

`dynamodbEndpoint`^Optional

`dynamodbTable`^Optional

`ec2MetadataServiceEndpoint`^Optional

`ec2MetadataServiceEndpointMode`^Optional

`encrypt`^Optional

`endpoint`^Optional

`endpoints`^Optional

`externalId`^Optional

`forbiddenAccountIds`^Optional

`forcePathStyle`^Optional

`httpProxy`^Optional

`httpsProxy`^Optional

`iamEndpoint`^Optional

`insecure`^Optional

`kmsKeyId`^Optional

`maxRetries`^Optional

`noProxy`^Optional

`profile`^Optional

`region`^Optional

`retryMode`^Optional

`roleArn`^Optional

`secretKey`^Optional

`sessionName`^Optional

`sharedConfigFiles`^Optional

`sharedCredentialsFile`^Optional

`sharedCredentialsFiles`^Optional

`skipCredentialsValidation`^Optional

`skipMetadataApiCheck`^Optional

`skipRegionValidation`^Optional

`skipRequestingAccountId`^Optional

`skipS3Checksum`^Optional

`sseCustomerKey`^Optional

`stsEndpoint`^Optional

`stsRegion`^Optional

`token`^Optional

`useLegacyWorkflow`^Optional

`usePathStyle`^Optional

`workspaceKeyPrefix`^Optional

Methods

`toString`

`addOverride`

`path`^Required

`value`^Required

`overrideLogicalId`

`newLogicalId`^Required

`resetOverrideLogicalId`

`toHclTerraform`

`toMetadata`

`toTerraform`

`getRemoteStateDataSource`

`scope`^Required

`name`^Required

`_fromStack`^Required

Static Functions

`isConstruct`

`x`^Required

`isTerraformElement`

`x`^Required

`isBackend`

`x`^Required

Properties

`node`^Required

`cdktfStack`^Required

`fqn`^Required

`friendlyUniqueId`^Required