Struct SandboxBuilder 

pub struct SandboxBuilder<S: State = Empty> { /* private fields */ }

Use builder syntax to set the inputs and finish with build().

Implementations

impl<S: State> SandboxBuilder<S>

pub fn build(self) -> Sandbox

where S: IsComplete,

Finish building and return the requested object

pub fn code(self, value: SandboxCode) -> SandboxBuilder<SetCode<S>>

where S::Code: IsUnset,

Required.

Where the sandbox’s root filesystem comes from

pub fn private_base_image( self, value: String, ) -> SandboxBuilder<SetPrivateBaseImage<S>>

where S::PrivateBaseImage: IsUnset,

Optional (Some / Option setters). Private ECR base image an AWS build pulls; code.image names only the S3 bundle, so this is what the cross-account grant opens. Live only: the grant needs the customer account, which registration reports. Absent means the base image is pulled anonymously.

pub fn maybe_private_base_image( self, value: Option<String>, ) -> SandboxBuilder<SetPrivateBaseImage<S>>

where S::PrivateBaseImage: IsUnset,

Optional (Some / Option setters). Private ECR base image an AWS build pulls; code.image names only the S3 bundle, so this is what the cross-account grant opens. Live only: the grant needs the customer account, which registration reports. Absent means the base image is pulled anonymously.

pub fn limits(self, value: SandboxLimits) -> SandboxBuilder<SetLimits<S>>

where S::Limits: IsUnset,

Optional (Some / Option setters). Enforced resource ceilings.

Optional because not every platform can enforce them, and a declaration that names none takes the platform’s own defaults. Naming them on a platform that cannot enforce them is rejected at plan time rather than silently ignored.

pub fn maybe_limits( self, value: Option<SandboxLimits>, ) -> SandboxBuilder<SetLimits<S>>

where S::Limits: IsUnset,

Optional (Some / Option setters). Enforced resource ceilings.

Optional because not every platform can enforce them, and a declaration that names none takes the platform’s own defaults. Naming them on a platform that cannot enforce them is rejected at plan time rather than silently ignored.

pub fn egress(self, value: SandboxEgress) -> SandboxBuilder<SetEgress<S>>

where S::Egress: IsUnset,

Required.

Outbound network policy

pub fn privileged_supervisor( self, value: SandboxPrivilegedSupervisor, ) -> SandboxBuilder<SetPrivilegedSupervisor<S>>

where S::PrivilegedSupervisor: IsUnset,

Optional (Some / Option setters). Have Alien’s agent install the declared egress policy before running any image code. Unsupported backends refuse this at plan time.

pub fn maybe_privileged_supervisor( self, value: Option<SandboxPrivilegedSupervisor>, ) -> SandboxBuilder<SetPrivilegedSupervisor<S>>

where S::PrivilegedSupervisor: IsUnset,

Optional (Some / Option setters). Have Alien’s agent install the declared egress policy before running any image code. Unsupported backends refuse this at plan time.

pub fn lifecycle( self, value: SandboxLifecyclePolicy, ) -> SandboxBuilder<SetLifecycle<S>>

where S::Lifecycle: IsUnset,

Required.

Sandbox lifetime ceiling and idle behaviour.

Stored state written before the rename calls this session. A stack state or release that old must stay readable, otherwise its deployment can no longer be updated or deleted.

pub fn preview_ports( self, value: Vec<u16>, ) -> SandboxBuilder<SetPreviewPorts<S>>

where S::PreviewPorts: IsUnset,

Optional (Some / Option setters). Default: <Vec<u16> as Default>::default().

Ports eligible for a preview capability. An application reaches its sandbox through the provider, so it cannot widen its own ingress at runtime; a holder of a remote binding’s credentials is bounded by no port condition, which is why a remote sandbox declares none.

pub fn maybe_preview_ports( self, value: Option<Vec<u16>>, ) -> SandboxBuilder<SetPreviewPorts<S>>

where S::PreviewPorts: IsUnset,

Optional (Some / Option setters). Default: <Vec<u16> as Default>::default().

Ports eligible for a preview capability. An application reaches its sandbox through the provider, so it cannot widen its own ingress at runtime; a holder of a remote binding’s credentials is bounded by no port condition, which is why a remote sandbox declares none.