software.amazon.awscdk.services.lambda

Interface Permission.Builder.Build

Enclosing class:

Permission.Builder

public static interface Permission.Builder.Build

Method Summary

Modifier and Type	Method and Description
Permission	build()
Permission.Builder.Build	withAction(String value) The Lambda actions that you want to allow in this statement.
Permission.Builder.Build	withEventSourceToken(String value) A unique token that must be supplied by the principal invoking the function.
Permission.Builder.Build	withSourceAccount(Object value) The AWS account ID (without hyphens) of the source owner.
Permission.Builder.Build	withSourceArn(software.amazon.awscdk.Arn value) The ARN of a resource that is invoking your function.

Method Detail

build

Permission build()

Returns:

a new Permission object, initialized with the values set on this builder.

withAction

Permission.Builder.Build withAction(String value)

The Lambda actions that you want to allow in this statement. For example, you can specify lambda:CreateFunction to specify a certain action, or use a wildcard (``lambda:*``) to grant permission to all Lambda actions. For a list of actions, see Actions and Condition Context Keys for AWS Lambda in the IAM User Guide.

withEventSourceToken

Permission.Builder.Build withEventSourceToken(String value)

A unique token that must be supplied by the principal invoking the function.

withSourceAccount

Permission.Builder.Build withSourceAccount(Object value)

The AWS account ID (without hyphens) of the source owner. For example, if you specify an S3 bucket in the SourceArn property, this value is the bucket owner's account ID. You can use this property to ensure that all source principals are owned by a specific account.

withSourceArn

Permission.Builder.Build withSourceArn(software.amazon.awscdk.Arn value)

The ARN of a resource that is invoking your function. When granting Amazon Simple Storage Service (Amazon S3) permission to invoke your function, specify this property with the bucket ARN as its value. This ensures that events generated only from the specified bucket, not just any bucket from any AWS account that creates a mapping to your function, can invoke the function.