Skip to content

AddProfilePermissionRequest

Source code in docs_src/capo_signer/types/add_profile_permission_request.py 
15
16
17
18
19
20
21
22
23
24
25
26
27
class AddProfilePermissionRequest(TypedDict, closed=True):
    profile_name: "capo_signer.types.profile_name.ProfileName"
    """<p>The human-readable name of the signing profile.</p>"""
    profile_version: NotRequired["capo_signer.types.profile_version.ProfileVersion"]
    """<p>The version of the signing profile.</p>"""
    action: "capo_signer.types.string.String"
    """<p>For cross-account signing. Grant a designated account permission to perform one or more of the following actions. Each action is associated with a specific API's operations. For more information about cross-account signing, see <a href="http://docs.aws.amazon.com/signer/latest/developerguide/signing-profile-cross-account.html">Using cross-account signing with signing profiles</a> in the <i>AWS Signer Developer Guide</i>.</p> <p>You can designate the following actions to an account.</p> <ul> <li> <p> <code>signer:StartSigningJob</code>. This action isn't supported for container image workflows. For details, see <a>StartSigningJob</a>.</p> </li> <li> <p> <code>signer:SignPayload</code>. This action isn't supported for AWS Lambda workflows. For details, see <a>SignPayload</a> </p> </li> <li> <p> <code>signer:GetSigningProfile</code>. For details, see <a>GetSigningProfile</a>.</p> </li> <li> <p> <code>signer:RevokeSignature</code>. For details, see <a>RevokeSignature</a>.</p> </li> </ul>"""
    principal: "capo_signer.types.string.String"
    """<p>The AWS principal receiving cross-account permissions. This may be an IAM role or another AWS account ID.</p>"""
    revision_id: NotRequired["capo_signer.types.string.String"]
    """<p>A unique identifier for the current profile revision.</p>"""
    statement_id: "capo_signer.types.string.String"
    """<p>A unique identifier for the cross-account permission statement.</p>"""

action instance-attribute 

action: String

For cross-account signing. Grant a designated account permission to perform one or more of the following actions. Each action is associated with a specific API's operations. For more information about cross-account signing, see Using cross-account signing with signing profiles in the AWS Signer Developer Guide.

You can designate the following actions to an account.

  • signer:StartSigningJob. This action isn't supported for container image workflows. For details, see StartSigningJob.

  • signer:SignPayload. This action isn't supported for AWS Lambda workflows. For details, see SignPayload

  • signer:GetSigningProfile. For details, see GetSigningProfile.

  • signer:RevokeSignature. For details, see RevokeSignature.

principal instance-attribute 

principal: String

The AWS principal receiving cross-account permissions. This may be an IAM role or another AWS account ID.

profile_name instance-attribute 

profile_name: ProfileName

The human-readable name of the signing profile.

profile_version instance-attribute 

profile_version: NotRequired[ProfileVersion]

The version of the signing profile.

revision_id instance-attribute 

revision_id: NotRequired[String]

A unique identifier for the current profile revision.

statement_id instance-attribute 

statement_id: String

A unique identifier for the cross-account permission statement.