modify_vpc_endpoint_service_permissions ¶

def modify_vpc_endpoint_service_permissions(
    self,
    *,
    config_overrides: Optional[EC2ClientConfig] = None,
    dry_run: Optional["capo_ec2.types.boolean.Boolean"] = None,
    service_id: Optional[
        "capo_ec2.types.vpc_endpoint_service_id.VpcEndpointServiceId"
    ] = None,
    add_allowed_principals: Optional[
        "capo_ec2.types.value_string_list.ValueStringList"
    ] = None,
    remove_allowed_principals: Optional[
        "capo_ec2.types.value_string_list.ValueStringList"
    ] = None,
) -> "capo_ec2.types.modify_vpc_endpoint_service_permissions_result.ModifyVpcEndpointServicePermissionsResult":
    """<p>Modifies the permissions for your VPC endpoint service. You can add or remove permissions for service consumers (Amazon Web Services accounts, users, and IAM roles) to connect to your endpoint service. Principal ARNs with path components aren't supported.</p> <p>If you grant permissions to all principals, the service is public. Any users who know the name of a public service can send a request to attach an endpoint. If the service does not require manual approval, attachments are automatically approved.</p>

    Args:
        dry_run: <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
        service_id: <p>The ID of the service.</p>
        add_allowed_principals: <p>The Amazon Resource Names (ARN) of the principals. Permissions are granted to the principals in this list. To grant permissions to all principals, specify an asterisk (*).</p>
        remove_allowed_principals: <p>The Amazon Resource Names (ARN) of the principals. Permissions are revoked for principals in this list.</p>

    Raises:
        capo_ec2.errors.UnknownServiceError: The service returned an error code this client does not model.
    """

    def _handler(
        req: "OperationRequest[capo_ec2.types.modify_vpc_endpoint_service_permissions_request.ModifyVpcEndpointServicePermissionsRequest]",
    ) -> OperationResponse[
        "capo_ec2.types.modify_vpc_endpoint_service_permissions_result.ModifyVpcEndpointServicePermissionsResult"
    ]:
        import capo_ec2._operations.amazon_ec2.modify_vpc_endpoint_service_permissions

        output, http_response = (
            capo_ec2._operations.amazon_ec2.modify_vpc_endpoint_service_permissions.modify_vpc_endpoint_service_permissions(
                req.options, req.input
            )
        )
        return OperationResponse(output=output, response=http_response)

    interceptors_, options_ = self.operation_options(
        config_overrides, OperationLogging("ModifyVpcEndpointServicePermissions")
    )
    input_: capo_ec2.types.modify_vpc_endpoint_service_permissions_request.ModifyVpcEndpointServicePermissionsRequest = {}
    if dry_run is not None:
        input_["dry_run"] = dry_run
    if service_id is not None:
        input_["service_id"] = service_id
    if add_allowed_principals is not None:
        input_["add_allowed_principals"] = add_allowed_principals
    if remove_allowed_principals is not None:
        input_["remove_allowed_principals"] = remove_allowed_principals

    response = execute_pipeline(
        OperationRequest(input=input_, options=options_),
        handler=_handler,
        interceptors=list(interceptors_),
    )
    response.response.close()
    return response.output