Struct PermissionModel 

#[non_exhaustive]
pub struct PermissionModel {
    pub type: PermissionModelType,
    pub invoker_role_name: Option<String>,
    pub cross_account_role_arns: Option<Vec<String>>,
}

Defines the roles and credentials that Resilience Hub would use while creating the application, importing its resources, and running an assessment.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

type: PermissionModelType

Defines how Resilience Hub scans your resources. It can scan for the resources by using a pre-existing role in your Amazon Web Services account, or by using the credentials of the current IAM user.

invoker_role_name: Option<String>

Existing Amazon Web Services IAM role name in the primary Amazon Web Services account that will be assumed by Resilience Hub Service Principle to obtain a read-only access to your application resources while running an assessment.

If your IAM role includes a path, you must include the path in the invokerRoleName parameter. For example, if your IAM role's ARN is arn:aws:iam:123456789012:role/my-path/role-name, you should pass my-path/role-name.

• You must have iam:passRole permission for this role while creating or updating the application.

• Currently, invokerRoleName accepts only \[A-Za-z0-9_+=,.@-\] characters.

cross_account_role_arns: Option<Vec<String>>

Defines a list of role Amazon Resource Names (ARNs) to be used in other accounts. These ARNs are used for querying purposes while importing resources and assessing your application.

• These ARNs are required only when your resources are in other accounts and you have different role name in these accounts. Else, the invoker role name will be used in the other accounts.

• These roles must have a trust policy with iam:AssumeRole permission to the invoker role in the primary account.

Implementations

impl PermissionModel

pub fn type(&self) -> &PermissionModelType

Defines how Resilience Hub scans your resources. It can scan for the resources by using a pre-existing role in your Amazon Web Services account, or by using the credentials of the current IAM user.

pub fn invoker_role_name(&self) -> Option<&str>

Existing Amazon Web Services IAM role name in the primary Amazon Web Services account that will be assumed by Resilience Hub Service Principle to obtain a read-only access to your application resources while running an assessment.

If your IAM role includes a path, you must include the path in the invokerRoleName parameter. For example, if your IAM role's ARN is arn:aws:iam:123456789012:role/my-path/role-name, you should pass my-path/role-name.

• You must have iam:passRole permission for this role while creating or updating the application.

• Currently, invokerRoleName accepts only \[A-Za-z0-9_+=,.@-\] characters.

pub fn cross_account_role_arns(&self) -> &[String]

Defines a list of role Amazon Resource Names (ARNs) to be used in other accounts. These ARNs are used for querying purposes while importing resources and assessing your application.

• These ARNs are required only when your resources are in other accounts and you have different role name in these accounts. Else, the invoker role name will be used in the other accounts.

• These roles must have a trust policy with iam:AssumeRole permission to the invoker role in the primary account.

If no value was sent for this field, a default will be set. If you want to determine if no value was sent, use .cross_account_role_arns.is_none().

impl PermissionModel

pub fn builder() -> PermissionModelBuilder

Creates a new builder-style object to manufacture PermissionModel.

Trait Implementations

impl Clone for PermissionModel

fn clone(&self) -> PermissionModel

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PermissionModel

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for PermissionModel

fn eq(&self, other: &PermissionModel) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for PermissionModel