@aws-cdk/aws-iam
Advanced tools
Changelog
0.9.0 -- 2018-09-10
The headliners of this release are .NET support, and a wealth of commits by external contributors who are stepping up to fix the CDK for their use cases! Thanks all for the effort put into this release!
cdk init template for C# projects ([@mpiroc] in #617, #643).addBuildToPipeline on Project ([@skinny85] in 783dcb3).addToPipeline on Repository ([@skinny85] in #616).InstanceSize.Nano ([@rix0rrr] in #581)extractMetric() helper function ([@rix0rrr] in #676).addToPipeline on Bucket ([@skinny85] in c8b7a49)..ref attributes ([@rix0rrr] in #627).any to Arn, for example) to reduce typing mistakes ([@rix0rrr] in #629).export()/import() capabilities ([@rix0rrr] in #630).QueueRef.encryptionMasterKey readonly ([@RomainMuller] in #650).cdk init ([@rix0rrr] in #587).@aws-cdk/cfnspec: Updated [CloudFormation resource specification] to v2.6.0 ([@RomainMuller] in #594)
New AWS Construct Library
@aws-cdk/aws-sagemaker supports AWS::SageMaker resourcesNew Resource Types
Attribute Changes
Property Changes
AWS::AppSync::DataSource HttpConfig (added)
AWS::DAX::Cluster SSESpecification (added)
AWS::DynamoDB::Table Stream (added)
AWS::DynamoDB::Table AutoScalingSupport (added)
AWS::EC2::VPCEndpoint IsPrivateDnsEnabled (added)
AWS::EC2::VPCEndpoint SecurityGroupIds (added)
AWS::EC2::VPCEndpoint SubnetIds (added)
AWS::EC2::VPCEndpoint VPCEndpointType (added)
AWS::EC2::VPCEndpoint RouteTableIds.DuplicatesAllowed (deleted)
AWS::EC2::VPCPeeringConnection PeerRegion (added)
AWS::EFS::FileSystem ProvisionedThroughputInMibps (added)
AWS::EFS::FileSystem ThroughputMode (added)
AWS::EMR::Cluster KerberosAttributes (added)
AWS::Glue::Classifier JsonClassifier (added)
AWS::Glue::Classifier XMLClassifier (added)
AWS::Glue::Crawler Configuration (added)
AWS::Lambda::Lambda DLQConfigurationSupport (added)
AWS::Neptune::DBInstance DBSubnetGroupName.UpdateType (changed)
AWS::SNS::Subscription DeliveryPolicy (added)
AWS::SNS::Subscription FilterPolicy (added)
AWS::SNS::Subscription RawMessageDelivery (added)
AWS::SNS::Subscription Region (added)
AWS::SQS::Queue Tags (added)
AWS::ServiceDiscovery::Service HealthCheckCustomConfig (added)
Property Type Changes
AWS::AppSync::DataSource.HttpConfig (added)
AWS::DAX::Cluster.SSESpecification (added)
AWS::EMR::Cluster.KerberosAttributes (added)
AWS::Glue::Classifier.JsonClassifier (added)
AWS::Glue::Classifier.XMLClassifier (added)
AWS::ServiceDiscovery::Service.HealthCheckCustomConfig (added)
AWS::CloudFront::Distribution.CacheBehavior FieldLevelEncryptionId (added)
AWS::CloudFront::Distribution.DefaultCacheBehavior FieldLevelEncryptionId (added)
AWS::CodeBuild::Project.Artifacts EncryptionDisabled (added)
AWS::CodeBuild::Project.Artifacts OverrideArtifactName (added)
AWS::CodeBuild::Project.Environment Certificate (added)
AWS::CodeBuild::Project.Source ReportBuildStatus (added)
AWS::ServiceDiscovery::Service.DnsConfig RoutingPolicy (added)
AWS::WAF::WebACL.ActivatedRule Action.Required (changed)
@aws-cdk/cfnspec: Updated Serverless Application Model (SAM) Resource Specification ([@RomainMuller] in #594)
Property Changes
Property Type Changes
AWS::Serverless::Function.SQSEvent (added)
AWS::Serverless::Function.EventSource Properties.Types (changed)
Readme
Define a role and add permissions to it. This will automatically create and attach an IAM policy to the role:
const role = new Role(this, 'MyRole', {
assumedBy: new ServicePrincipal('sns.amazonaws.com')
});
role.addPermission(new Permission('*', 'lambda:InvokeFunction'));
Define a policy and attach it to groups, users and roles. Note that it is possible to attach
the policy either by calling xxx.attachPolicy(policy) or policy.attachToXxx(xxx).
const user = new User(this, 'MyUser', { password: '1234' });
const group = new Group(this, 'MyGroup');
const policy = new Policy(this, 'MyPolicy');
policy.attachToUser(user);
group.attachPolicy(policy);
Managed policies can be attached using xxx.attachManagedPolicy(arn):
const group = new Group(this, 'MyGroup');
group.attachManagedPolicy('arn:aws:iam::aws:policy/AdministratorAccess');
FAQs
CDK routines for easily assigning correct and minimal IAM permissions
The npm package @aws-cdk/aws-iam receives a total of 191,983 weekly downloads. As such, @aws-cdk/aws-iam popularity was classified as popular.
We found that @aws-cdk/aws-iam demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
NIST updates on the NVD backlog after media reports that over 50% of KEVs were unenriched since mid-February. They've contracted additional support and partnered with CISA to clear the backlog by fiscal year-end.
Security News
A hospital in Mobile, Alabama, agreed to a settlement in a landmark ransomware death lawsuit, but is now reportedly reconsidering the agreement and refusing to pay.
Security News
A new report explores how advancements in LLMs are enhancing cyber threats, including polymorphic malware, personalized spearphishing, and the risk of hijacking customer service bots.