| Column Name | Column Data Type |
|---|
association_status Input Column
Specifies that you want to list only those associations with resource shares that match this status. | VARCHAR |
default_version Input Column
When true, specifies that you want to list only those associations with resource shares that use the default version of the specified managed permission. When false (the default value), lists associations with resource shares that use any version of the specified managed permission. | BOOLEAN |
feature_set Input Column
Specifies that you want to list only those associations with resource shares that have a featureSet with this value. | VARCHAR |
max_results Input Column
Specifies the total number of results that you want included on each page of the response. If you do not include this parameter, it defaults to a value that is specific to the operation. If additional items exist beyond the number you specify, the NextToken response element is returned with a value (not null). Include the specified value as the NextToken request parameter in the next call to the operation to get the next part of the results. Note that the service might return fewer results than the maximum even when there are more results available. You should check NextToken after every operation to ensure that you receive all of the results. | BIGINT |
next_token Input Column
If present, this value indicates that more output is available than is included in the current response. Use this value in the NextToken request parameter in a subsequent call to the operation to get the next part of the output. You should repeat this until the NextToken response element comes back as null. This indicates that this is the last page of results. | VARCHAR |
permission_arn Input Column
Specifies the Amazon Resource Name (ARN) of the managed permission. | VARCHAR |
permission_version Input Column
Specifies that you want to list only those associations with resource shares that use this version of the managed permission. If you don't provide a value for this parameter, then the operation returns information about associations with resource shares that use any version of the managed permission. | BIGINT |
resource_type Input Column
Specifies that you want to list only those associations with resource shares that include at least one resource of this resource type. | VARCHAR |
_aws_profile Input Column
The AWS profile defines the AWS identity used. It can be defined via credentials or by assuming a IAM role. | STRUCT(
"type" VARCHAR,
"name" VARCHAR,
"account_id" VARCHAR,
"via_profile_name" VARCHAR,
"assumed_role_arn" VARCHAR,
"organization" STRUCT(
"account_name" VARCHAR,
"id" VARCHAR,
"tags" STRUCT(
"key" VARCHAR,
"value" VARCHAR
)[],
"master_account" STRUCT(
"id" VARCHAR,
"email" VARCHAR
),
"parents" STRUCT(
"type" VARCHAR,
"id" VARCHAR,
"name" VARCHAR,
"tags" STRUCT(
"key" VARCHAR,
"value" VARCHAR
)[]
)[]
)
) |
Show child fields- _aws_profile.account_id
The AWS account id - _aws_profile.assumed_role_arn
The ARN of the assumed role - _aws_profile.name
The unique name of the profile. - _aws_profile.organization
Information about this profile's membership in the AWS organization. Show child fields- _aws_profile.organization.account_name
The name of account speciifed by the organization - _aws_profile.organization.id
The organization id - _aws_profile.organization.master_account
Show child fields- _aws_profile.organization.master_account.email
The organization master account email address - _aws_profile.organization.master_account.id
The organization master account id
- _aws_profile.organization.parents[]
Show child fields- _aws_profile.organization.parents[].id
The id of the parent - _aws_profile.organization.parents[].name
The name of the parent - _aws_profile.organization.parents[].tags[]
Show child fields- _aws_profile.organization.parents[].tags[].key
- _aws_profile.organization.parents[].tags[].value
- _aws_profile.organization.parents[].type
The type of parent can be an organization unit or a root
- _aws_profile.organization.tags[]
Show child fields- _aws_profile.organization.tags[].key
- _aws_profile.organization.tags[].value
- _aws_profile.type
The type of profile, either 'credentials' or 'assumed_role' - _aws_profile.via_profile_name
This IAM role for this profile is assumed by first utilizing another profile with this name to obtain credentials.
|
_aws_region Input Column
The AWS region to use. | VARCHAR |
permissions
A structure with information about this customer managed permission. | STRUCT(
"arn" VARCHAR,
"permission_version" VARCHAR,
"default_version" BOOLEAN,
"resource_type" VARCHAR,
"status" VARCHAR,
"feature_set" VARCHAR,
"last_updated_time" TIMESTAMP_S,
"resource_share_arn" VARCHAR
)[] |
Show child fields- permissions[]
Show child fields- permissions[].arn
The Amazon Resource Name (ARN) of the associated managed permission. - permissions[].default_version
Indicates whether the associated resource share is using the default version of the permission. - permissions[].feature_set
Indicates what features are available for this resource share. This parameter can have one of the following values: -
STANDARD – A resource share that supports all functionality. These resource shares are visible to all principals you share the resource share with. You can modify these resource shares in RAM using the console or APIs. This resource share might have been created by RAM, or it might have been CREATED_FROM_POLICY and then promoted. -
CREATED_FROM_POLICY – The customer manually shared a resource by attaching a resource-based policy. That policy did not match any existing managed permissions, so RAM created this customer managed permission automatically on the customer's behalf based on the attached policy document. This type of resource share is visible only to the Amazon Web Services account that created it. You can't modify it in RAM unless you promote it. For more information, see PromoteResourceShareCreatedFromPolicy. -
PROMOTING_TO_STANDARD – This resource share was originally CREATED_FROM_POLICY, but the customer ran the PromoteResourceShareCreatedFromPolicy and that operation is still in progress. This value changes to STANDARD when complete. - permissions[].last_updated_time
The date and time when the association between the permission and the resource share was last updated. - permissions[].permission_version
The version of the permission currently associated with the resource share. - permissions[].resource_share_arn
The Amazon Resource Name (ARN) of a resource share associated with this permission. - permissions[].resource_type
The resource type to which this permission applies. - permissions[].status
The current status of the association between the permission and the resource share. The following are the possible values: -
ATTACHABLE – This permission or version can be associated with resource shares. -
UNATTACHABLE – This permission or version can't currently be associated with resource shares. -
DELETING – This permission or version is in the process of being deleted. -
DELETED – This permission or version is deleted.
|