AwsAccountDefaultsGrafanaAccessRoleArgs

interface AwsAccountDefaultsGrafanaAccessRoleArgs {
enabled?: boolean;
policyDocument: AwsAccountDefaultsRolePolicyTemplateArgs;
trustPrincipalArns: Input<readonly Input<string>[]>;
}

Capability arguments for creating a Grafana access role.

Example

CODE

new AwsAccountDefaults({
  identity: 'account-defaults',
  grafanaAccessRole: {
    trustPrincipalArns: [
      'arn:aws:iam::000000000000:role/grafana-assume-role',
    ],
    policyDocument: {
      path: 'policies/grafana-access-default.json',
    },
  },
});

Properties

`enabled: boolean`

Enables the default Grafana access role. Defaults to true when this block is set.

`policyDocument: AwsAccountDefaultsRolePolicyTemplateArgs`

Path and optional variables for rendering the inline role policy document template.

`trustPrincipalArns: Input<readonly Input<string>[]>`

AWS principal ARNs allowed to assume the Grafana access role.

Remarks

Entries are trimmed, empty values are ignored, and at least one non-empty ARN is required.

Example

CODE

trustPrincipalArns: [
  'arn:aws:iam::000000000000:role/roleA',
  'arn:aws:iam::000000000000:role/roleB',
]