profile_permissions

Creates, updates, deletes, gets or lists a profile_permissions resource.

Overview

Name	profile_permissions
Type	Resource
Id	aws.signer.profile_permissions

Fields

The following fields are returned by SELECT queries:

list_profile_permissions

Name	Datatype	Description
next_token	string	String for specifying the next set of paginated results.
permissions	array	List of permissions associated with the Signing Profile.
policy_size_bytes	integer	Total size of the policy associated with the Signing Profile in bytes.
revision_id	string	The identifier for the current revision of profile permissions.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
list_profile_permissions	select	profile_name, region	nextToken	Lists the cross-account permissions associated with a signing profile.
add_profile_permission	update	profile_name, region, action, principal, statementId		Adds cross-account permissions to a signing profile.
remove_profile_permission	update	profile_name, revisionId, statement_id, region		Removes cross-account permissions from a signing profile.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
profile_name	string	A human-readable name for the signing profile with permissions to be removed.
region	string	AWS region (default: us-east-1)
revisionId	string	An identifier for the current revision of the signing profile permissions.
statement_id	string	A unique identifier for the cross-account permissions statement.
nextToken	string	String for specifying the next set of paginated results.

SELECT examples

list_profile_permissions

Lists the cross-account permissions associated with a signing profile.

SELECT
next_token,
permissions,
policy_size_bytes,
revision_id
FROM aws.signer.profile_permissions
WHERE profile_name = '{{ profile_name }}' -- required
AND region = '{{ region }}' -- required
AND nextToken = '{{ nextToken }}'
;

UPDATE examples

add_profile_permission

Adds cross-account permissions to a signing profile.

UPDATE aws.signer.profile_permissions
SET 
profileVersion = '{{ profileVersion }}',
action = '{{ action }}',
principal = '{{ principal }}',
revisionId = '{{ revisionId }}',
statementId = '{{ statementId }}'
WHERE 
profile_name = '{{ profile_name }}' --required
AND region = '{{ region }}' --required
AND action = '{{ action }}' --required
AND principal = '{{ principal }}' --required
AND statementId = '{{ statementId }}' --required
RETURNING
revision_id;

remove_profile_permission

Removes cross-account permissions from a signing profile.

UPDATE aws.signer.profile_permissions
SET 
-- No updatable properties
WHERE 
profile_name = '{{ profile_name }}' --required
AND revisionId = '{{ revisionId }}' --required
AND statement_id = '{{ statement_id }}' --required
AND region = '{{ region }}' --required
RETURNING
revision_id;