AWS Fundamentals Logo
AWS Fundamentals
L1 ConstructAWS::RolesAnywhere::Profile

CfnProfile

Creates a Profile.

Import

import { CfnProfile } from 'aws-cdk-lib/aws-rolesanywhere';

Or use the module namespace:

import * as rolesanywhere from 'aws-cdk-lib/aws-rolesanywhere';
// rolesanywhere.CfnProfile

Properties

Configuration passed to the constructor as CfnProfileProps.

nameRequired
string

The customer specified name of the resource.

roleArnsRequired
string | IRoleRef[]

A list of IAM role ARNs that can be assumed when this profile is specified in a CreateSession request.

acceptRoleSessionNameOptional
boolean | IResolvable

Used to determine if a custom role session name will be accepted in a temporary credential request.

attributeMappingsOptional
IResolvable | IResolvable | AttributeMappingProperty[]

A mapping applied to the authenticating end-entity certificate.

durationSecondsOptional
number

The number of seconds vended session credentials will be valid for.

enabledOptional
boolean | IResolvable

The enabled status of the resource.

managedPolicyArnsOptional
string[]

A list of managed policy ARNs. Managed policies identified by this list will be applied to the vended session credentials.

requireInstancePropertiesOptional
boolean | IResolvable

Specifies whether instance properties are required in CreateSession requests with this profile.

sessionPolicyOptional
string

A session policy that will applied to the trust boundary of the vended session credentials.

tagsOptional
CfnTag[]

A list of Tags.

CloudFormation Resource

This L1 construct maps directly to the following CloudFormation resource type.

AWS::RolesAnywhere::ProfileView in CloudFormation Explorer

Learn AWS the Practical Way

Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.

Subscribe to Newsletter

Quick Facts

LevelL1 (CloudFormation)
Moduleaws-rolesanywhere
CFN TypeAWS::RolesAnywhere::Profile
Properties10

Related Constructs

Explore This Service

External Links