Package com.pulumi.aws.signer

Class SigningProfilePermission

  • public class SigningProfilePermission
extends com.pulumi.resources.CustomResource
    Creates a Signer Signing Profile Permission. That is, a cross-account permission for a signing profile. ## Example Usage 
     
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.signer.SigningProfile;
 import com.pulumi.aws.signer.SigningProfileArgs;
 import com.pulumi.aws.signer.inputs.SigningProfileSignatureValidityPeriodArgs;
 import com.pulumi.aws.signer.SigningProfilePermission;
 import com.pulumi.aws.signer.SigningProfilePermissionArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         var prodSp = new SigningProfile("prodSp", SigningProfileArgs.builder()
             .signatureValidityPeriod(SigningProfileSignatureValidityPeriodArgs.builder()
                 .value(5)
                 .type("YEARS")
                 .build())
             .platformId("AWSLambda-SHA384-ECDSA")
             .namePrefix("prod_sp_")
             .tags(Map.ofEntries(
                 Map.entry("tag1", "value1"),
                 Map.entry("tag2", "value2")
             ))
             .build());
 
         var spPermission1 = new SigningProfilePermission("spPermission1", SigningProfilePermissionArgs.builder()
             .profileName(prodSp.name())
             .action("signer:StartSigningJob")
             .principal(awsAccount)
             .build());
 
         var spPermission2 = new SigningProfilePermission("spPermission2", SigningProfilePermissionArgs.builder()
             .profileName(prodSp.name())
             .action("signer:GetSigningProfile")
             .principal(awsTeamRoleArn)
             .statementId("ProdAccountStartSigningJob_StatementId")
             .build());
 
         var spPermission3 = new SigningProfilePermission("spPermission3", SigningProfilePermissionArgs.builder()
             .profileName(prodSp.name())
             .action("signer:RevokeSignature")
             .principal("123456789012")
             .profileVersion(prodSp.version())
             .statementIdPrefix("version-permission-")
             .build());
 
     }
 }
    ## Import Using `pulumi import`, import Signer signing profile permission statements using profile_name/statement_id. For example: ```sh $ pulumi import aws:signer/signingProfilePermission:SigningProfilePermission test_signer_signing_profile_permission prod_profile_DdW3Mk1foYL88fajut4mTVFGpuwfd4ACO6ANL0D1uIj7lrn8adK/ProdAccountStartSigningJobStatementId ```

    • Nested Class Summary

      • Nested classes/interfaces inherited from class com.pulumi.resources.CustomResource

        com.pulumi.resources.CustomResource.CustomResourceInternal

      • Nested classes/interfaces inherited from class com.pulumi.resources.Resource

        com.pulumi.resources.Resource.LazyField<T extends java.lang.Object>, com.pulumi.resources.Resource.LazyFields, com.pulumi.resources.Resource.ResourceInternal

    • Field Summary

      • Fields inherited from class com.pulumi.resources.Resource

        childResources, remote

    • Method Summary

      All Methods Static Methods Instance Methods Concrete Methods 
      Modifier and Type Method Description
      com.pulumi.core.Output<java.lang.String> action()  
      static SigningProfilePermission get​(java.lang.String name, com.pulumi.core.Output<java.lang.String> id, SigningProfilePermissionState state, com.pulumi.resources.CustomResourceOptions options)
      Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.
      com.pulumi.core.Output<java.lang.String> principal()  
      com.pulumi.core.Output<java.lang.String> profileName()  
      com.pulumi.core.Output<java.lang.String> profileVersion()  
      com.pulumi.core.Output<java.lang.String> region()  
      com.pulumi.core.Output<java.lang.String> statementId()  
      com.pulumi.core.Output<java.lang.String> statementIdPrefix()  

      • Methods inherited from class com.pulumi.resources.CustomResource

        getId, id, idFuture

      • Methods inherited from class com.pulumi.resources.Resource

        getChildResources, getResourceName, getResourceType, getUrn, pulumiChildResources, pulumiResourceName, pulumiResourceType, urn

      • Methods inherited from class java.lang.Object

        clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

    • Constructor Detail

      • SigningProfilePermission

        public SigningProfilePermission​(java.lang.String name)
        Parameters:
        name - The _unique_ name of the resulting resource.

      • SigningProfilePermission

        public SigningProfilePermission​(java.lang.String name,
                                SigningProfilePermissionArgs args)
        Parameters:
        name - The _unique_ name of the resulting resource.
        args - The arguments to use to populate this resource's properties.

      • SigningProfilePermission

        public SigningProfilePermission​(java.lang.String name,
                                SigningProfilePermissionArgs args,
                                @Nullable
                                com.pulumi.resources.CustomResourceOptions options)
        Parameters:
        name - The _unique_ name of the resulting resource.
        args - The arguments to use to populate this resource's properties.
        options - A bag of options that control this resource's behavior.

    • Method Detail

      • action

        public com.pulumi.core.Output<java.lang.String> action()
        Returns:
        An AWS Signer action permitted as part of cross-account permissions. Valid values: `signer:StartSigningJob`, `signer:GetSigningProfile`, `signer:RevokeSignature`, or `signer:SignPayload`.

      • principal

        public com.pulumi.core.Output<java.lang.String> principal()
        Returns:
        The AWS principal to be granted a cross-account permission.

      • profileName

        public com.pulumi.core.Output<java.lang.String> profileName()
        Returns:
        Name of the signing profile to add the cross-account permissions.

      • profileVersion

        public com.pulumi.core.Output<java.lang.String> profileVersion()
        Returns:
        The signing profile version that a permission applies to.

      • region

        public com.pulumi.core.Output<java.lang.String> region()
        Returns:
        Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

      • statementId

        public com.pulumi.core.Output<java.lang.String> statementId()
        Returns:
        A unique statement identifier. By default generated by the provider.

      • statementIdPrefix

        public com.pulumi.core.Output<java.lang.String> statementIdPrefix()
        Returns:
        A statement identifier prefix. The provider will generate a unique suffix. Conflicts with `statementId`.

      • get

        public static SigningProfilePermission get​(java.lang.String name,
                                           com.pulumi.core.Output<java.lang.String> id,
                                           @Nullable
                                           SigningProfilePermissionState state,
                                           @Nullable
                                           com.pulumi.resources.CustomResourceOptions options)
        Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.
        Parameters:
        name - The _unique_ name of the resulting resource.
        id - The _unique_ provider ID of the resource to lookup.
        state -
        options - Optional settings to control the behavior of the CustomResource.