Class CfnInstanceAccessControlAttributeConfiguration.AccessControlAttributeProperty
These are IAM Identity Center identity store attributes that you can configure for use in attributes-based access control (ABAC).
Inheritance
Namespace: Amazon.CDK.AWS.SSO
Assembly: Amazon.CDK.AWS.SSO.dll
Syntax (csharp)
public class AccessControlAttributeProperty : Object, CfnInstanceAccessControlAttributeConfiguration.IAccessControlAttributeProperty
Syntax (vb)
Public Class AccessControlAttributeProperty
Inherits Object
Implements CfnInstanceAccessControlAttributeConfiguration.IAccessControlAttributeProperty
Remarks
You can create permissions policies that determine who can access your AWS resources based upon the configured attribute values. When you enable ABAC and specify AccessControlAttributes
, IAM Identity Center passes the attribute values of the authenticated user into IAM for use in policy evaluation.
ExampleMetadata: fixture=_generated
Examples
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
using Amazon.CDK.AWS.SSO;
var accessControlAttributeProperty = new AccessControlAttributeProperty {
Key = "key",
Value = new AccessControlAttributeValueProperty {
Source = new [] { "source" }
}
};
Synopsis
Constructors
AccessControlAttributeProperty() |
Properties
Key | The name of the attribute associated with your identities in your identity source. |
Value | The value used for mapping a specified attribute to an identity source. |
Constructors
AccessControlAttributeProperty()
public AccessControlAttributeProperty()
Properties
Key
The name of the attribute associated with your identities in your identity source.
public string Key { get; set; }
Property Value
System.String
Remarks
This is used to map a specified attribute in your identity source with an attribute in IAM Identity Center .
Value
The value used for mapping a specified attribute to an identity source.
public object Value { get; set; }
Property Value
System.Object