MDAA TS Docs
    Preparing search index...

    Interface MdaaHealthLakeDataAccessRoleProps

    Properties for the MdaaHealthLakeDataAccessRole construct.

    interface MdaaHealthLakeDataAccessRoleProps {
        buckets: IBucket[];
        createOutputs?: boolean;
        createParams?: boolean;
        datastoreArn: string;
        kmsKey: IKey;
        naming: IMdaaResourceNaming;
        roleName?: string;
    }

    Hierarchy (View Summary)

    Index

    Properties

    buckets createOutputs? createParams? datastoreArn kmsKey naming roleName?

    Properties

    buckets: IBucket[]

    S3 bucket(s) for HealthLake read/write access

    createOutputs?: boolean

    Flag controlling CloudFormation output and stack export creation for construct resources

    createParams?: boolean

    Flag controlling SSM parameter creation for construct resource references enabling

    datastoreArn: string

    ARN of the datastore this role serves. Used to scope the assume-role trust policy to a single datastore (aws:SourceArn), so that in a multi-datastore account one datastore cannot be used as a confused deputy to assume another datastore's role and reach its bucket/CMK.

    kmsKey: IKey

    KMS key for encrypt/decrypt operations

    naming: IMdaaResourceNaming

    MDAA naming implementation for consistent resource naming across all MDAA constructs

    roleName?: string

    Role name suffix (combined with MDAA naming prefix). Use a per-datastore value when deploying multiple datastores in the same stack to avoid IAM role name collisions.

    'healthlake-data-access'

    Settings

    Member Visibility

    On This Page

    Properties