You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
feat(client-ram): Resource owners can now specify ResourceShareConfiguration request parameter for CreateResourceShare API including RetainSharingOnAccountLeaveOrganization boolean parameter
Copy file name to clipboardExpand all lines: codegen/sdk-codegen/aws-models/ram.json
+26Lines changed: 26 additions & 0 deletions
Original file line number
Diff line number
Diff line change
@@ -1869,6 +1869,12 @@
1869
1869
"traits": {
1870
1870
"smithy.api#documentation": "<p>Specifies source constraints (accounts, ARNs, organization IDs, or organization paths) that limit when service principals can access resources in this resource share. When a service principal attempts to access a shared resource, validation is performed to ensure the request originates from one of the specified sources. This helps prevent confused deputy attacks by applying constraints on where service principals can access resources from.</p>"
"smithy.api#documentation": "<p>Specifies the configuration of this resource share.</p>"
1877
+
}
1872
1878
}
1873
1879
},
1874
1880
"traits": {
@@ -5116,6 +5122,12 @@
5116
5122
"traits": {
5117
5123
"smithy.api#documentation": "<p>Indicates what features are available for this resource share. This parameter can have one of\n the following values:</p>\n <ul>\n <li>\n <p>\n <b>STANDARD</b> – A resource share that supports all\n functionality. These resource shares are visible to all principals you share the resource share with. \n You can modify these resource shares in RAM using the console or APIs. This resource share might \n have been created by RAM, or it might have been <b>CREATED_FROM_POLICY</b> and then promoted.</p>\n </li>\n <li>\n <p>\n <b>CREATED_FROM_POLICY</b> – The customer\n manually shared a resource by attaching a resource-based policy. That policy did\n not match any existing managed permissions, so RAM created this customer managed permission automatically on the\n customer's behalf based on the attached policy document. This type of resource share \n is visible only to the Amazon Web Services account that created it. You can't modify it in \n RAM unless you promote it. For more information, \n see <a>PromoteResourceShareCreatedFromPolicy</a>.</p>\n </li>\n <li>\n <p>\n <b>PROMOTING_TO_STANDARD</b> – This\n resource share was originally <code>CREATED_FROM_POLICY</code>, but the customer ran\n the <a>PromoteResourceShareCreatedFromPolicy</a> and that operation\n is still in progress. This value changes to <code>STANDARD</code> when\n complete.</p>\n </li>\n </ul>"
0 commit comments