MDAA TS Docs
    Preparing search index...

    Interface IRestrictBucketToRoles

    interface IRestrictBucketToRoles {
        prefixExcludes?: string[];
        prefixIncludes?: string[];
        principalExcludes?: string[];
        roleExcludeIds?: string[];
        roleExcludes?: MdaaResolvableRole[];
        s3Bucket: IBucket;
    }
    Index

    Properties

    prefixExcludes?: string[]
    prefixIncludes?: string[]
    principalExcludes?: string[]
    roleExcludeIds?: string[]

    Raw role IDs to exclude from the bucket deny statement, for callers which do not hold a resolved role. Callers which pass all of their excludes as roleExcludes can omit this.

    roleExcludes?: MdaaResolvableRole[]

    Resolved roles to exclude from the bucket deny statement. Cross-account roles are added to principalExcludes; same-account roles are added to roleExcludeIds.

    s3Bucket: IBucket