Struct aws_sdk_accessanalyzer::types::KmsKeyConfiguration

#[non_exhaustive]
pub struct KmsKeyConfiguration {
    pub key_policies: Option<HashMap<String, String>>,
    pub grants: Option<Vec<KmsGrantConfiguration>>,
}

Proposed access control configuration for a KMS key. You can propose a configuration for a new KMS key or an existing KMS key that you own by specifying the key policy and KMS grant configuration. If the configuration is for an existing key and you do not specify the key policy, the access preview uses the existing policy for the key. If the access preview is for a new resource and you do not specify the key policy, then the access preview uses the default key policy. The proposed key policy cannot be an empty string. For more information, see Default key policy. For more information about key policy limits, see Resource quotas.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

key_policies: Option<HashMap<String, String>>

Resource policy configuration for the KMS key. The only valid value for the name of the key policy is default. For more information, see Default key policy.

grants: Option<Vec<KmsGrantConfiguration>>

A list of proposed grant configurations for the KMS key. If the proposed grant configuration is for an existing key, the access preview uses the proposed list of grant configurations in place of the existing grants. Otherwise, the access preview uses the existing grants for the key.

Implementations

impl KmsKeyConfiguration

pub fn key_policies(&self) -> Option<&HashMap<String, String>>

Resource policy configuration for the KMS key. The only valid value for the name of the key policy is default. For more information, see Default key policy.

pub fn grants(&self) -> &[KmsGrantConfiguration]

A list of proposed grant configurations for the KMS key. If the proposed grant configuration is for an existing key, the access preview uses the proposed list of grant configurations in place of the existing grants. Otherwise, the access preview uses the existing grants for the key.

If no value was sent for this field, a default will be set. If you want to determine if no value was sent, use .grants.is_none().

impl KmsKeyConfiguration

pub fn builder() -> KmsKeyConfigurationBuilder

Creates a new builder-style object to manufacture KmsKeyConfiguration.

Trait Implementations

impl Clone for KmsKeyConfiguration

fn clone(&self) -> KmsKeyConfiguration

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KmsKeyConfiguration

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for KmsKeyConfiguration

fn eq(&self, other: &KmsKeyConfiguration) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for KmsKeyConfiguration