KmsGrantConfiguration
import type { KmsGrantConfiguration } from "https://aws-api.deno.dev/v0.4/services/accessanalyzer.ts?docs=full";A proposed grant configuration for a KMS key. For more information, see CreateGrant.
interface KmsGrantConfiguration {
constraints?: KmsGrantConstraints | null;
granteePrincipal: string;
issuingAccount: string;
operations: KmsGrantOperation[];
retiringPrincipal?: string | null;
}§Properties
§
constraints?: KmsGrantConstraints | null
[src]Use this structure to propose allowing cryptographic operations in the grant only when the operation request includes the specified encryption context.
§
granteePrincipal: string
[src]The principal that is given permission to perform the operations that the grant permits.
§
issuingAccount: string
[src]The Amazon Web Services account under which the grant was issued. The account is used to propose KMS grants issued by accounts other than the owner of the key.
§
operations: KmsGrantOperation[]
[src]A list of operations that the grant permits.
§
retiringPrincipal?: string | null
[src]The principal that is given permission to retire the grant by using RetireGrant operation.