ResourceShare

ram.services.k8s.aws/v1alpha1

Metadata#

Describes a resource share in RAM.

Spec#

allowExternalPrincipals: boolean
name: string
permissionARNs:
- string
permissionRefs:
  from: 
    name: string
    namespace: string
principals:
- string
resourceARNs:
- string
sources:
- string
tags:
- key: string
  value: string

from:
  name: my-api || **permissionRefs.[].from**<br/>Optional | **object**<br/>AWSResourceReference provides all the values necessary to reference another<br/>k8s resource for finding the identifier(Id/ARN/Name) |

| permissionRefs.[].from.name
Optional | string
| | permissionRefs.[].from.namespace
Optional | string
| | principals
Optional | array
Specifies a list of one or more principals to associate with the resource
share.

You can include the following values:

* An Amazon Web Services account ID, for example: 123456789012

* An Amazon Resource Name (ARN) (https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html)
of an organization in Organizations, for example: organizations::123456789012:organization/o-exampleorgid

* An ARN of an organizational unit (OU) in Organizations, for example:
organizations::123456789012:ou/o-exampleorgid/ou-examplerootid-exampleouid123

* An ARN of an IAM role, for example: iam::123456789012:role/rolename

* An ARN of an IAM user, for example: iam::123456789012user/username

Not all resource types can be shared with IAM roles and users. For more information,
see Sharing with IAM roles and users (https://docs.aws.amazon.com/ram/latest/userguide/permissions.html#permissions-rbp-supported-resource-types)
in the Resource Access Manager User Guide. | | principals.[]
Required | string
|| resourceARNs
Optional | array
Specifies a list of one or more ARNs of the resources to associate with the
resource share. | | resourceARNs.[]
Required | string
|| sources
Optional | array
Specifies from which source accounts the service principal has access to
the resources in this resource share. | | sources.[]
Required | string
|| tags
Optional | array
A list of one or more tag key and value pairs. The tag key must be present
and not be an empty string. The tag value must be present but can be an empty
string. | | tags.[]
Required | object
A structure containing a tag. A tag is metadata that you can attach to your resources to help organize and categorize them. You can also use them to help you secure your resources. For more information, see Controlling access to Amazon Web Services resources using tags (https://docs.aws.amazon.com/IAM/latest/UserGuide/access_tags.html).

For more information about tags, see Tagging Amazon Web Services resources (https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html) in the Amazon Web Services General Reference Guide. || tags.[].key
Optional | string
| | tags.[].value
Optional | string
|

Status#

ackResourceMetadata: 
  arn: string
  ownerAccountID: string
  region: string
conditions:
- lastTransitionTime: string
  message: string
  reason: string
  status: string
  type: string
creationTime: string
featureSet: string
lastUpdatedTime: string
owningAccountID: string
status: string
statusMessage: string