AwAssumeRoleAuthenticationDetailsProperties Class

AWS cloud account connector based assume role, the role enables delegating access to your AWS resources. The role is composed of role Amazon Resource Name (ARN) and external ID. For more details, refer to <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user.html">Creating a Role to Delegate Permissions to an IAM User (write only)</a>.

Variables are only populated by the server, and will be ignored when sending a request.

All required parameters must be populated in order to send to Azure.

Inheritance

azure.mgmt.security.models._models_py3.AuthenticationDetailsProperties

AwAssumeRoleAuthenticationDetailsProperties

Constructor

AwAssumeRoleAuthenticationDetailsProperties(*, aws_assume_role_arn: str, aws_external_id: str, **kwargs)

Parameters

authentication_type

str or AuthenticationType

Required

Required. Connect to your cloud account, for AWS use either account credentials or role-based authentication. For GCP use account organization credentials.Constant filled by server. Possible values include: "awsCreds", "awsAssumeRole", "gcpCredentials".

aws_assume_role_arn

str

Required

Required. Assumed role ID is an identifier that you can use to create temporary security credentials.

aws_external_id

str

Required

Required. A unique identifier that is required when you assume a role in another account.

Variables

authentication_provisioning_state

str or AuthenticationProvisioningState

State of the multi-cloud connector. Possible values include: "Valid", "Invalid", "Expired", "IncorrectPolicy".

granted_permissions

list[str or PermissionProperty]

The permissions detected in the cloud account.

account_id

str

The ID of the cloud account.