Class: Aws::ControlCatalog::Types::ControlParameter

Inherits:

Struct

• Object
• Struct
• Aws::ControlCatalog::Types::ControlParameter

Includes:

Structure

Defined in:

lib/aws-sdk-controlcatalog/types.rb

Overview

Four types of control parameters are supported.

• AllowedRegions: List of Amazon Web Services Regions exempted from the control. Each string is expected to be an Amazon Web Services Region code. This parameter is mandatory for the **OU Region deny** control, CT.MULTISERVICE.PV.1.

  Example: ‘[“us-east-1”,“us-west-2”]`

• ExemptedActions: List of Amazon Web Services IAM actions exempted from the control. Each string is expected to be an IAM action.

  Example: ‘[“logs:DescribeLogGroups”,“logs:StartQuery”,“logs:GetQueryResults”]`

• ExemptedPrincipalArns: List of Amazon Web Services IAM principal ARNs exempted from the control. Each string is expected to be an IAM principal that follows the pattern ‘^arn:(aws|aws-us-gov):(iam|sts)::.:.$`

  Example: ‘[“arn:aws:iam::*:role/ReadOnly”,“arn:aws:sts:::assumed-role/ReadOnly/”]`

• ExemptedResourceArns: List of resource ARNs exempted from the control. Each string is expected to be a resource ARN.

  Example: ‘[“arn:aws:s3:::my-bucket-name”]`

See Also:

• AWS API Documentation

Constant Summary

SENSITIVE =

[]

Instance Attribute Summary

• #name ⇒ String

  The parameter name.

Instance Attribute Details

#name ⇒ String

The parameter name. This name is the parameter ‘key` when you call [ `EnableControl` ][1] or [ `UpdateEnabledControl` ][2].

[1]: docs.aws.amazon.com/controltower/latest/APIReference/API_EnableControl.html [2]: docs.aws.amazon.com/controltower/latest/APIReference/API_UpdateEnabledControl.html

Returns:

• (String)

# File 'lib/aws-sdk-controlcatalog/types.rb', line 168

class ControlParameter < Struct.new(
  :name)
  SENSITIVE = []
  include Aws::Structure
end