Struct aws_sdk_sagemaker::types::IamPolicyConstraints

#[non_exhaustive]
pub struct IamPolicyConstraints {
    pub source_ip: Option<EnabledOrDisabled>,
    pub vpc_source_ip: Option<EnabledOrDisabled>,
}

Use this parameter to specify a supported global condition key that is added to the IAM policy.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

source_ip: Option<EnabledOrDisabled>

When SourceIp is Enabled the worker's IP address when a task is rendered in the worker portal is added to the IAM policy as a Condition used to generate the Amazon S3 presigned URL. This IP address is checked by Amazon S3 and must match in order for the Amazon S3 resource to be rendered in the worker portal.

vpc_source_ip: Option<EnabledOrDisabled>

When VpcSourceIp is Enabled the worker's IP address when a task is rendered in private worker portal inside the VPC is added to the IAM policy as a Condition used to generate the Amazon S3 presigned URL. To render the task successfully Amazon S3 checks that the presigned URL is being accessed over an Amazon S3 VPC Endpoint, and that the worker's IP address matches the IP address in the IAM policy. To learn more about configuring private worker portal, see Use Amazon VPC mode from a private worker portal.

Implementations

impl IamPolicyConstraints

pub fn source_ip(&self) -> Option<&EnabledOrDisabled>

When SourceIp is Enabled the worker's IP address when a task is rendered in the worker portal is added to the IAM policy as a Condition used to generate the Amazon S3 presigned URL. This IP address is checked by Amazon S3 and must match in order for the Amazon S3 resource to be rendered in the worker portal.

pub fn vpc_source_ip(&self) -> Option<&EnabledOrDisabled>

When VpcSourceIp is Enabled the worker's IP address when a task is rendered in private worker portal inside the VPC is added to the IAM policy as a Condition used to generate the Amazon S3 presigned URL. To render the task successfully Amazon S3 checks that the presigned URL is being accessed over an Amazon S3 VPC Endpoint, and that the worker's IP address matches the IP address in the IAM policy. To learn more about configuring private worker portal, see Use Amazon VPC mode from a private worker portal.

impl IamPolicyConstraints

pub fn builder() -> IamPolicyConstraintsBuilder

Creates a new builder-style object to manufacture IamPolicyConstraints.

Trait Implementations

impl Clone for IamPolicyConstraints

fn clone(&self) -> IamPolicyConstraints

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for IamPolicyConstraints

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for IamPolicyConstraints

fn eq(&self, other: &IamPolicyConstraints) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for IamPolicyConstraints