Creates a profile, a list of the roles that Roles Anywhere service is trusted to assume¶

Description¶

Creates a profile, a list of the roles that Roles Anywhere service is trusted to assume. You use profiles to intersect permissions with IAM managed policies.

Required permissions: rolesanywhere:CreateProfile.

Usage¶

iamrolesanywhere_create_profile(name, requireInstanceProperties,
  sessionPolicy, roleArns, managedPolicyArns, durationSeconds, enabled,
  tags, acceptRoleSessionName)

Arguments¶

• name

  [required] The name of the profile.

• requireInstanceProperties

  Unused, saved for future use. Will likely specify whether instance properties are required in temporary credential requests with this profile.

• sessionPolicy

  A session policy that applies to the trust boundary of the vended session credentials.

• roleArns

  [required] A list of IAM roles that this profile can assume in a temporary credential request.

• managedPolicyArns

  A list of managed policy ARNs that apply to the vended session credentials.

• durationSeconds

  Used to determine how long sessions vended using this profile are valid for. See the Expiration section of the CreateSession API documentation page for more details. In requests, if this value is not provided, the default value will be 3600.

• enabled

  Specifies whether the profile is enabled.

• tags

  The tags to attach to the profile.

• acceptRoleSessionName

  Used to determine if a custom role session name will be accepted in a temporary credential request.

Value¶

A list with the following syntax:

list(
  profile = list(
    profileId = "string",
    profileArn = "string",
    name = "string",
    requireInstanceProperties = TRUE|FALSE,
    enabled = TRUE|FALSE,
    createdBy = "string",
    sessionPolicy = "string",
    roleArns = list(
      "string"
    ),
    managedPolicyArns = list(
      "string"
    ),
    createdAt = as.POSIXct(
      "2015-01-01"
    ),
    updatedAt = as.POSIXct(
      "2015-01-01"
    ),
    durationSeconds = 123,
    acceptRoleSessionName = TRUE|FALSE,
    attributeMappings = list(
      list(
        certificateField = "x509Subject"|"x509Issuer"|"x509SAN",
        mappingRules = list(
          list(
            specifier = "string"
          )
        )
      )
    )
  )
)

Request syntax¶

svc$create_profile(
  name = "string",
  requireInstanceProperties = TRUE|FALSE,
  sessionPolicy = "string",
  roleArns = list(
    "string"
  ),
  managedPolicyArns = list(
    "string"
  ),
  durationSeconds = 123,
  enabled = TRUE|FALSE,
  tags = list(
    list(
      key = "string",
      value = "string"
    )
  ),
  acceptRoleSessionName = TRUE|FALSE
)