@Stability(value=Experimental) @Internal public static final class DataTerraformRemoteStateS3Config.Jsii$Proxy extends software.amazon.jsii.JsiiObject implements DataTerraformRemoteStateS3Config
DataTerraformRemoteStateS3Config
software.amazon.jsii.JsiiObject.InitializationMode
DataTerraformRemoteStateS3Config.Builder, DataTerraformRemoteStateS3Config.Jsii$Proxy
Modifier | Constructor and Description |
---|---|
protected |
Jsii$Proxy(DataTerraformRemoteStateS3Config.Builder builder)
Constructor that initializes the object based on literal property values passed by the
DataTerraformRemoteStateS3Config.Builder . |
protected |
Jsii$Proxy(software.amazon.jsii.JsiiObjectRef objRef)
Constructor that initializes the object based on values retrieved from the JsiiObject.
|
Modifier and Type | Method and Description |
---|---|
com.fasterxml.jackson.databind.JsonNode |
$jsii$toJson() |
boolean |
equals(Object o) |
String |
getAccessKey()
(experimental) (Optional) AWS access key.
|
String |
getAcl()
(experimental) (Optional) Canned ACL to be applied to the state file.
|
String |
getAssumeRolePolicy()
(experimental) (Optional) IAM Policy JSON describing further restricting permissions for the IAM Role being assumed.
|
List<String> |
getAssumeRolePolicyArns()
(experimental) (Optional) Set of Amazon Resource Names (ARNs) of IAM Policies describing further restricting permissions for the IAM Role being assumed.
|
Map<String,String> |
getAssumeRoleTags()
(experimental) (Optional) Map of assume role session tags.
|
List<String> |
getAssumeRoleTransitiveTagKeys()
(experimental) (Optional) Set of assume role session tag keys to pass to any subsequent sessions.
|
String |
getBucket()
(experimental) Name of the S3 Bucket.
|
Map<String,Object> |
getDefaults() |
String |
getDynamodbEndpoint()
(experimental) (Optional) Custom endpoint for the AWS DynamoDB API.
|
String |
getDynamodbTable()
(experimental) (Optional) Name of DynamoDB Table to use for state locking and consistency.
|
Boolean |
getEncrypt()
(experimental) (Optional) Enable server side encryption of the state file.
|
String |
getEndpoint()
(experimental) (Optional) Custom endpoint for the AWS S3 API.
|
String |
getExternalId()
(experimental) (Optional) External identifier to use when assuming the role.
|
Boolean |
getForcePathStyle()
(experimental) (Optional) Enable path-style S3 URLs (https://
|
String |
getIamEndpoint()
(experimental) (Optional) Custom endpoint for the AWS Identity and Access Management (IAM) API.
|
String |
getKey()
(experimental) Path to the state file inside the S3 Bucket.
|
String |
getKmsKeyId()
(experimental) (Optional) Amazon Resource Name (ARN) of a Key Management Service (KMS) Key to use for encrypting the state.
|
Number |
getMaxRetries()
(experimental) (Optional) The maximum number of times an AWS API request is retried on retryable failure.
|
String |
getProfile()
(experimental) (Optional) Name of AWS profile in AWS shared credentials file (e.g.
|
String |
getRegion()
(experimental) AWS Region of the S3 Bucket and DynamoDB Table (if used).
|
String |
getRoleArn()
(experimental) (Optional) Amazon Resource Name (ARN) of the IAM Role to assume.
|
String |
getSecretKey()
(experimental) (Optional) AWS secret access key.
|
String |
getSessionName()
(experimental) (Optional) Session name to use when assuming the role.
|
String |
getSharedCredentialsFile()
(experimental) (Optional) Path to the AWS shared credentials file.
|
Boolean |
getSkipCredentialsValidation()
(experimental) (Optional) Skip credentials validation via the STS API.
|
Boolean |
getSkipMetadataApiCheck()
(experimental) (Optional) Skip usage of EC2 Metadata API.
|
Boolean |
getSkipRegionValidation()
(experimental) (Optional) Skip validation of provided region name.
|
String |
getSseCustomerKey()
(experimental) (Optional) The key to use for encrypting state with Server-Side Encryption with Customer-Provided Keys (SSE-C).
|
String |
getStsEndpoint()
(experimental) (Optional) Custom endpoint for the AWS Security Token Service (STS) API.
|
String |
getToken()
(experimental) (Optional) Multi-Factor Authentication (MFA) token.
|
String |
getWorkspace() |
String |
getWorkspaceKeyPrefix()
(experimental) (Optional) Prefix applied to the state path inside the bucket.
|
int |
hashCode() |
jsiiAsyncCall, jsiiAsyncCall, jsiiCall, jsiiCall, jsiiGet, jsiiGet, jsiiSet, jsiiStaticCall, jsiiStaticCall, jsiiStaticGet, jsiiStaticGet, jsiiStaticSet, jsiiStaticSet
clone, finalize, getClass, notify, notifyAll, toString, wait, wait, wait
builder
protected Jsii$Proxy(software.amazon.jsii.JsiiObjectRef objRef)
objRef
- Reference to the JSII managed object.protected Jsii$Proxy(DataTerraformRemoteStateS3Config.Builder builder)
DataTerraformRemoteStateS3Config.Builder
.public final Map<String,Object> getDefaults()
getDefaults
in interface DataTerraformRemoteStateConfig
public final String getWorkspace()
getWorkspace
in interface DataTerraformRemoteStateConfig
public final String getBucket()
S3BackendConfig
getBucket
in interface S3BackendConfig
public final String getKey()
S3BackendConfig
When using a non-default workspace, the state path will be /workspace_key_prefix/workspace_name/key
getKey
in interface S3BackendConfig
public final String getAccessKey()
S3BackendConfig
If configured, must also configure secret_key. This can also be sourced from the AWS_ACCESS_KEY_ID environment variable, AWS shared credentials file (e.g. ~/.aws/credentials), or AWS shared configuration file (e.g. ~/.aws/config).
getAccessKey
in interface S3BackendConfig
public final String getAcl()
S3BackendConfig
getAcl
in interface S3BackendConfig
public final String getAssumeRolePolicy()
S3BackendConfig
getAssumeRolePolicy
in interface S3BackendConfig
public final List<String> getAssumeRolePolicyArns()
S3BackendConfig
getAssumeRolePolicyArns
in interface S3BackendConfig
public final Map<String,String> getAssumeRoleTags()
S3BackendConfig
getAssumeRoleTags
in interface S3BackendConfig
public final List<String> getAssumeRoleTransitiveTagKeys()
S3BackendConfig
getAssumeRoleTransitiveTagKeys
in interface S3BackendConfig
public final String getDynamodbEndpoint()
S3BackendConfig
This can also be sourced from the AWS_DYNAMODB_ENDPOINT environment variable.
getDynamodbEndpoint
in interface S3BackendConfig
public final String getDynamodbTable()
S3BackendConfig
The table must have a partition key named LockID with type of String. If not configured, state locking will be disabled.
getDynamodbTable
in interface S3BackendConfig
public final Boolean getEncrypt()
S3BackendConfig
getEncrypt
in interface S3BackendConfig
public final String getEndpoint()
S3BackendConfig
This can also be sourced from the AWS_S3_ENDPOINT environment variable.
getEndpoint
in interface S3BackendConfig
public final String getExternalId()
S3BackendConfig
getExternalId
in interface S3BackendConfig
public final Boolean getForcePathStyle()
S3BackendConfig
getForcePathStyle
in interface S3BackendConfig
public final String getIamEndpoint()
S3BackendConfig
This can also be sourced from the AWS_IAM_ENDPOINT environment variable.
getIamEndpoint
in interface S3BackendConfig
public final String getKmsKeyId()
S3BackendConfig
Note that if this value is specified, Terraform will need kms:Encrypt, kms:Decrypt and kms:GenerateDataKey permissions on this KMS key.
getKmsKeyId
in interface S3BackendConfig
public final Number getMaxRetries()
S3BackendConfig
Defaults to 5.
getMaxRetries
in interface S3BackendConfig
public final String getProfile()
S3BackendConfig
getProfile
in interface S3BackendConfig
public final String getRegion()
S3BackendConfig
This can also be sourced from the AWS_DEFAULT_REGION and AWS_REGION environment variables.
getRegion
in interface S3BackendConfig
public final String getRoleArn()
S3BackendConfig
getRoleArn
in interface S3BackendConfig
public final String getSecretKey()
S3BackendConfig
If configured, must also configure access_key. This can also be sourced from the AWS_SECRET_ACCESS_KEY environment variable, AWS shared credentials file (e.g. ~/.aws/credentials), or AWS shared configuration file (e.g. ~/.aws/config)
getSecretKey
in interface S3BackendConfig
public final String getSessionName()
S3BackendConfig
getSessionName
in interface S3BackendConfig
public final String getSharedCredentialsFile()
S3BackendConfig
Defaults to ~/.aws/credentials.
getSharedCredentialsFile
in interface S3BackendConfig
public final Boolean getSkipCredentialsValidation()
S3BackendConfig
getSkipCredentialsValidation
in interface S3BackendConfig
public final Boolean getSkipMetadataApiCheck()
S3BackendConfig
getSkipMetadataApiCheck
in interface S3BackendConfig
public final Boolean getSkipRegionValidation()
S3BackendConfig
getSkipRegionValidation
in interface S3BackendConfig
public final String getSseCustomerKey()
S3BackendConfig
This is the base64-encoded value of the key, which must decode to 256 bits. This can also be sourced from the AWS_SSE_CUSTOMER_KEY environment variable, which is recommended due to the sensitivity of the value. Setting it inside a terraform file will cause it to be persisted to disk in terraform.tfstate.
getSseCustomerKey
in interface S3BackendConfig
public final String getStsEndpoint()
S3BackendConfig
This can also be sourced from the AWS_STS_ENDPOINT environment variable.
getStsEndpoint
in interface S3BackendConfig
public final String getToken()
S3BackendConfig
This can also be sourced from the AWS_SESSION_TOKEN environment variable.
getToken
in interface S3BackendConfig
public final String getWorkspaceKeyPrefix()
S3BackendConfig
This is only relevant when using a non-default workspace. Defaults to env:
getWorkspaceKeyPrefix
in interface S3BackendConfig
@Internal public com.fasterxml.jackson.databind.JsonNode $jsii$toJson()
$jsii$toJson
in interface software.amazon.jsii.JsiiSerializable
Copyright © 2023. All rights reserved.