put_permission
async
¶
put_permission(
*,
config_overrides: Optional[AsyncEventBridgeClientConfig] = None,
event_bus_name: Optional[NonPartnerEventBusName] = None,
action: Optional[Action] = None,
principal: Optional[Principal] = None,
statement_id: Optional[StatementId] = None,
condition: Optional[Condition] = None,
policy: Optional[String] = None,
) -> None
Running PutPermission permits the specified Amazon Web Services account or Amazon Web Services organization to put events to the specified event bus. Amazon EventBridge rules in your account are triggered by these events arriving to an event bus in your account.
For another account to send events to your account, that external account must have an EventBridge rule with your account's event bus as a target.
To enable multiple Amazon Web Services accounts to put events to your event bus, run PutPermission once for each of these accounts. Or, if all the accounts are members of the same Amazon Web Services organization, you can run PutPermission once specifying Principal as "*" and specifying the Amazon Web Services organization ID in Condition, to grant permissions to all accounts in that organization.
If you grant permissions using an organization, then accounts in that organization must specify a RoleArn with proper permissions when they use PutTarget to add your account's event bus as a target. For more information, see Sending and Receiving Events Between Amazon Web Services Accounts in the Amazon EventBridge User Guide.
The permission policy on the event bus cannot exceed 10 KB in size.
Parameters:
-
event_bus_name(Optional[NonPartnerEventBusName], default:None) –The name of the event bus associated with the rule. If you omit this, the default event bus is used.
-
action(Optional[Action], default:None) –The action that you are enabling the other account to perform.
-
principal(Optional[Principal], default:None) –The 12-digit Amazon Web Services account ID that you are permitting to put events to your default event bus. Specify "*" to permit any account to put events to your default event bus.
If you specify "*" without specifying
Condition, avoid creating rules that may match undesirable events. To create more secure rules, make sure that the event pattern for each rule contains anaccountfield with a specific account ID from which to receive events. Rules with an account field do not match any events sent from other accounts. -
statement_id(Optional[StatementId], default:None) –An identifier string for the external account that you are granting permissions to. If you later want to revoke the permission for this external account, specify this
StatementIdwhen you run RemovePermission.Each
StatementIdmust be unique. -
condition(Optional[Condition], default:None) –This parameter enables you to limit the permission to accounts that fulfill a certain condition, such as being a member of a certain Amazon Web Services organization. For more information about Amazon Web Services Organizations, see What Is Amazon Web Services Organizations in the Amazon Web Services Organizations User Guide.
If you specify
Conditionwith an Amazon Web Services organization ID, and specify "*" as the value forPrincipal, you grant permission to all the accounts in the named organization.The
Conditionis a JSON string which must containType,Key, andValuefields. -
policy(Optional[String], default:None) –A JSON string that describes the permission policy statement. You can include a
Policyparameter in the request instead of using theStatementId,Action,Principal, orConditionparameters.
Raises:
-
ConcurrentModificationException–There is concurrent modification on a rule, target, archive, or replay.
-
InternalException–This exception occurs due to unexpected causes.
-
OperationDisabledException–The operation you are attempting is not available in this region.
-
PolicyLengthExceededException–The event bus policy is too long. For more information, see the limits.
-
ResourceNotFoundException–An entity that you specified does not exist.
-
UnknownServiceError–The service returned an error code this client does not model.
Source code in docs_src/capo_eventbridge/_services/async_event_bridge.py
2726 2727 2728 2729 2730 2731 2732 2733 2734 2735 2736 2737 2738 2739 2740 2741 2742 2743 2744 2745 2746 2747 2748 2749 2750 2751 2752 2753 2754 2755 2756 2757 2758 2759 2760 2761 2762 2763 2764 2765 2766 2767 2768 2769 2770 2771 2772 2773 2774 2775 2776 2777 2778 2779 2780 2781 2782 2783 2784 2785 2786 2787 2788 2789 2790 2791 2792 2793 2794 2795 2796 | |