Permission (software.amazon.awscdk:lambda 0.8.2 API)

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Implementing Classes:

Permission.Jsii$Pojo, Permission.Jsii$Proxy
```
public interface Permission
extends software.amazon.jsii.JsiiSerializable
```
Represents a permission statement that can be added to a Lambda's resource policy via the `addToResourcePolicy` method.

Nested Class Summary

Nested Classes
Modifier and Type	Interface and Description
`static class`	`Permission.Builder` A fluent step builder class for `Permission`.
`static class`	`Permission.Jsii$Pojo` A PoJo (plain-old-java-object) class that implements `Permission`.
`static class`	`Permission.Jsii$Proxy` A proxy class which for javascript object literal which adhere to this interface.

Method Summary

All Methods Static Methods Instance Methods Abstract Methods Default Methods
Modifier and Type	Method and Description
`static Permission.Builder`	`builder()`
`String`	`getAction()` The Lambda actions that you want to allow in this statement.
`String`	`getEventSourceToken()` A unique token that must be supplied by the principal invoking the function.
`software.amazon.awscdk.PolicyPrincipal`	`getPrincipal()` The entity for which you are granting permission to invoke the Lambda function.
`Object`	`getSourceAccount()` The AWS account ID (without hyphens) of the source owner.
`software.amazon.awscdk.Arn`	`getSourceArn()` The ARN of a resource that is invoking your function.
`void`	`setAction(String value)` The Lambda actions that you want to allow in this statement.
`void`	`setEventSourceToken(String value)` A unique token that must be supplied by the principal invoking the function.
`void`	`setPrincipal(software.amazon.awscdk.PolicyPrincipal value)` The entity for which you are granting permission to invoke the Lambda function.
`void`	`setSourceAccount(Object value)` The AWS account ID (without hyphens) of the source owner.
`void`	`setSourceArn(software.amazon.awscdk.Arn value)` The ARN of a resource that is invoking your function.

- Method Detail
  - getAction
```
String getAction()
```
    The Lambda actions that you want to allow in this statement. For example, you can specify lambda:CreateFunction to specify a certain action, or use a wildcard (``lambda:*``) to grant permission to all Lambda actions. For a list of actions, see Actions and Condition Context Keys for AWS Lambda in the IAM User Guide.
  - setAction
```
void setAction(String value)
```
    The Lambda actions that you want to allow in this statement. For example, you can specify lambda:CreateFunction to specify a certain action, or use a wildcard (``lambda:*``) to grant permission to all Lambda actions. For a list of actions, see Actions and Condition Context Keys for AWS Lambda in the IAM User Guide.
  - getEventSourceToken
```
String getEventSourceToken()
```
    A unique token that must be supplied by the principal invoking the function.
  - setEventSourceToken
```
void setEventSourceToken(String value)
```
    A unique token that must be supplied by the principal invoking the function.
  - getPrincipal
```
software.amazon.awscdk.PolicyPrincipal getPrincipal()
```
    The entity for which you are granting permission to invoke the Lambda function. This entity can be any valid AWS service principal, such as s3.amazonaws.com or sns.amazonaws.com, or, if you are granting cross-account permission, an AWS account ID. For example, you might want to allow a custom application in another AWS account to push events to Lambda by invoking your function. The principal can be either an AccountPrincipal or a ServicePrincipal.
  - setPrincipal
```
void setPrincipal(software.amazon.awscdk.PolicyPrincipal value)
```
    The entity for which you are granting permission to invoke the Lambda function. This entity can be any valid AWS service principal, such as s3.amazonaws.com or sns.amazonaws.com, or, if you are granting cross-account permission, an AWS account ID. For example, you might want to allow a custom application in another AWS account to push events to Lambda by invoking your function. The principal can be either an AccountPrincipal or a ServicePrincipal.
  - getSourceAccount
```
Object getSourceAccount()
```
    The AWS account ID (without hyphens) of the source owner. For example, if you specify an S3 bucket in the SourceArn property, this value is the bucket owner's account ID. You can use this property to ensure that all source principals are owned by a specific account.
  - setSourceAccount
```
void setSourceAccount(Object value)
```
    The AWS account ID (without hyphens) of the source owner. For example, if you specify an S3 bucket in the SourceArn property, this value is the bucket owner's account ID. You can use this property to ensure that all source principals are owned by a specific account.
  - getSourceArn
```
software.amazon.awscdk.Arn getSourceArn()
```
    The ARN of a resource that is invoking your function. When granting Amazon Simple Storage Service (Amazon S3) permission to invoke your function, specify this property with the bucket ARN as its value. This ensures that events generated only from the specified bucket, not just any bucket from any AWS account that creates a mapping to your function, can invoke the function.
  - setSourceArn
```
void setSourceArn(software.amazon.awscdk.Arn value)
```
    The ARN of a resource that is invoking your function. When granting Amazon Simple Storage Service (Amazon S3) permission to invoke your function, specify this property with the bucket ARN as its value. This ensures that events generated only from the specified bucket, not just any bucket from any AWS account that creates a mapping to your function, can invoke the function.
  - builder
```
static Permission.Builder builder()
```

Interface Permission

Nested Class Summary

Method Summary

Method Detail

getAction

setAction

getEventSourceToken

setEventSourceToken

getPrincipal

setPrincipal

getSourceAccount

setSourceAccount

getSourceArn

setSourceArn

builder