Interface AccountAccessControlProxyService


  • @Generated
    public interface AccountAccessControlProxyService
    These APIs manage access rules on resources in an account. Currently, only grant rules are supported. A grant rule specifies a role assigned to a set of principals. A list of rules attached to a resource is called a rule set. A workspace must belong to an account for these APIs to work.

    This is the high-level interface, that contains generated methods.

    Evolving: this interface is under development. Method signatures may change.

    • Method Detail

      • getAssignableRolesForResource

        GetAssignableRolesForResourceResponse getAssignableRolesForResource​(GetAssignableRolesForResourceRequest getAssignableRolesForResourceRequest)
        Get assignable roles for a resource.

        Gets all the roles that can be granted on an account-level resource. A role is grantable if the rule set on the resource can contain an access rule of the role.

      • getRuleSet

        RuleSetResponse getRuleSet​(GetRuleSetRequest getRuleSetRequest)
        Get a rule set.

        Get a rule set by its name. A rule set is always attached to a resource and contains a list of access rules on the said resource. Currently only a default rule set for each resource is supported.

      • updateRuleSet

        RuleSetResponse updateRuleSet​(UpdateRuleSetRequest updateRuleSetRequest)
        Update a rule set.

        Replace the rules of a rule set. First, use a GET rule set request to read the current version of the rule set before modifying it. This pattern helps prevent conflicts between concurrent updates.