Class CfnLayerVersionPermission
- All Implemented Interfaces:
IConstruct,IDependable,IInspectable,software.amazon.jsii.JsiiSerializable,software.constructs.IConstruct
AWS::Lambda::LayerVersionPermission.
The AWS::Lambda::LayerVersionPermission resource adds permissions to the resource-based policy of a version of an Lambda layer . Use this action to grant layer usage permission to other accounts. You can grant permission to a single account, all AWS accounts, or all accounts in an organization.
Since the release of the UpdateReplacePolicy both
UpdateReplacePolicyandDeletionPolicyare required to protect your Resources/LayerPermissions from deletion.
Example:
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import software.amazon.awscdk.services.lambda.*;
CfnLayerVersionPermission cfnLayerVersionPermission = CfnLayerVersionPermission.Builder.create(this, "MyCfnLayerVersionPermission")
.action("action")
.layerVersionArn("layerVersionArn")
.principal("principal")
// the properties below are optional
.organizationId("organizationId")
.build();
-
Nested Class Summary
Nested ClassesModifier and TypeClassDescriptionstatic final classA fluent builder forCfnLayerVersionPermission.Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject
software.amazon.jsii.JsiiObject.InitializationModeNested classes/interfaces inherited from interface software.amazon.awscdk.core.IConstruct
IConstruct.Jsii$DefaultNested classes/interfaces inherited from interface software.constructs.IConstruct
software.constructs.IConstruct.Jsii$DefaultNested classes/interfaces inherited from interface software.amazon.awscdk.core.IInspectable
IInspectable.Jsii$Default, IInspectable.Jsii$Proxy -
Field Summary
FieldsModifier and TypeFieldDescriptionstatic final StringThe CloudFormation resource type name for this resource class. -
Constructor Summary
ConstructorsModifierConstructorDescriptionCfnLayerVersionPermission(Construct scope, String id, CfnLayerVersionPermissionProps props) Create a newAWS::Lambda::LayerVersionPermission.protectedCfnLayerVersionPermission(software.amazon.jsii.JsiiObject.InitializationMode initializationMode) protectedCfnLayerVersionPermission(software.amazon.jsii.JsiiObjectRef objRef) -
Method Summary
Modifier and TypeMethodDescriptionThe API action that grants access to the layer.The name or Amazon Resource Name (ARN) of the layer.With the principal set to*, grant permission to all accounts in the specified organization.An account ID, or*to grant layer usage permission to all accounts in an organization, or all AWS accounts (iforganizationIdis not specified).voidinspect(TreeInspector inspector) Examines the CloudFormation resource and discloses attributes.renderProperties(Map<String, Object> props) voidThe API action that grants access to the layer.voidsetLayerVersionArn(String value) The name or Amazon Resource Name (ARN) of the layer.voidsetOrganizationId(String value) With the principal set to*, grant permission to all accounts in the specified organization.voidsetPrincipal(String value) An account ID, or*to grant layer usage permission to all accounts in an organization, or all AWS accounts (iforganizationIdis not specified).Methods inherited from class software.amazon.awscdk.core.CfnResource
addDeletionOverride, addDependsOn, addMetadata, addOverride, addPropertyDeletionOverride, addPropertyOverride, applyRemovalPolicy, applyRemovalPolicy, applyRemovalPolicy, getAtt, getCfnOptions, getCfnResourceType, getMetadata, getUpdatedProperites, isCfnResource, shouldSynthesize, toString, validatePropertiesMethods inherited from class software.amazon.awscdk.core.CfnRefElement
getRefMethods inherited from class software.amazon.awscdk.core.CfnElement
getCreationStack, getLogicalId, getStack, isCfnElement, overrideLogicalIdMethods inherited from class software.amazon.awscdk.core.Construct
getNode, isConstruct, onPrepare, onSynthesize, onValidate, prepare, synthesize, validateMethods inherited from class software.amazon.jsii.JsiiObject
jsiiAsyncCall, jsiiAsyncCall, jsiiCall, jsiiCall, jsiiGet, jsiiGet, jsiiSet, jsiiStaticCall, jsiiStaticCall, jsiiStaticGet, jsiiStaticGet, jsiiStaticSet, jsiiStaticSetMethods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, waitMethods inherited from interface software.amazon.jsii.JsiiSerializable
$jsii$toJson
-
Field Details
-
CFN_RESOURCE_TYPE_NAME
The CloudFormation resource type name for this resource class.
-
-
Constructor Details
-
CfnLayerVersionPermission
protected CfnLayerVersionPermission(software.amazon.jsii.JsiiObjectRef objRef) -
CfnLayerVersionPermission
protected CfnLayerVersionPermission(software.amazon.jsii.JsiiObject.InitializationMode initializationMode) -
CfnLayerVersionPermission
@Stability(Stable) public CfnLayerVersionPermission(@NotNull Construct scope, @NotNull String id, @NotNull CfnLayerVersionPermissionProps props) Create a newAWS::Lambda::LayerVersionPermission.- Parameters:
scope-- scope in which this resource is defined.
id-- scoped id of the resource.
props-- resource properties.
-
-
Method Details
-
inspect
Examines the CloudFormation resource and discloses attributes.- Specified by:
inspectin interfaceIInspectable- Parameters:
inspector-- tree inspector to collect and process attributes.
-
renderProperties
@Stability(Stable) @NotNull protected Map<String,Object> renderProperties(@NotNull Map<String, Object> props) - Overrides:
renderPropertiesin classCfnResource- Parameters:
props- This parameter is required.
-
getCfnProperties
- Overrides:
getCfnPropertiesin classCfnResource
-
getAction
The API action that grants access to the layer.For example,
lambda:GetLayerVersion. -
setAction
The API action that grants access to the layer.For example,
lambda:GetLayerVersion. -
getLayerVersionArn
The name or Amazon Resource Name (ARN) of the layer. -
setLayerVersionArn
The name or Amazon Resource Name (ARN) of the layer. -
getPrincipal
An account ID, or*to grant layer usage permission to all accounts in an organization, or all AWS accounts (iforganizationIdis not specified).For the last case, make sure that you really do want all AWS accounts to have usage permission to this layer.
-
setPrincipal
An account ID, or*to grant layer usage permission to all accounts in an organization, or all AWS accounts (iforganizationIdis not specified).For the last case, make sure that you really do want all AWS accounts to have usage permission to this layer.
-
getOrganizationId
With the principal set to*, grant permission to all accounts in the specified organization. -
setOrganizationId
With the principal set to*, grant permission to all accounts in the specified organization.
-