Skip to content

/AWS1/CL_SGN=>ADDPROFILEPERMISSION()

About AddProfilePermission

Adds cross-account permissions to a signing profile.

Method Signature

IMPORTING

Required arguments:

IV_PROFILENAME TYPE /AWS1/SGNPROFILENAME /AWS1/SGNPROFILENAME

The human-readable name of the signing profile.

IV_ACTION TYPE /AWS1/SGNSTRING /AWS1/SGNSTRING

For cross-account signing. Grant a designated account permission to perform one or more of the following actions. Each action is associated with a specific API's operations. For more information about cross-account signing, see Using cross-account signing with signing profiles in the AWS Signer Developer Guide.

You can designate the following actions to an account.

  • signer:StartSigningJob. This action isn't supported for container image workflows. For details, see StartSigningJob.

  • signer:SignPayload. This action isn't supported for AWS Lambda workflows. For details, see SignPayload

  • signer:GetSigningProfile. For details, see GetSigningProfile.

  • signer:RevokeSignature. For details, see RevokeSignature.

IV_PRINCIPAL TYPE /AWS1/SGNSTRING /AWS1/SGNSTRING

The AWS principal receiving cross-account permissions. This may be an IAM role or another AWS account ID.

IV_STATEMENTID TYPE /AWS1/SGNSTRING /AWS1/SGNSTRING

A unique identifier for the cross-account permission statement.

Optional arguments:

IV_PROFILEVERSION TYPE /AWS1/SGNPROFILEVERSION /AWS1/SGNPROFILEVERSION

The version of the signing profile.

IV_REVISIONID TYPE /AWS1/SGNSTRING /AWS1/SGNSTRING

A unique identifier for the current profile revision.

RETURNING

OO_OUTPUT TYPE REF TO /AWS1/CL_SGNADDPROFILEPERMRSP /AWS1/CL_SGNADDPROFILEPERMRSP