accounts
Creates, updates, deletes or gets an account
resource or lists accounts
in a region
Overview
Name | accounts |
Type | Resource |
Description | Resource schema for AWS::CertificateManager::Account. |
Id | aws.certificatemanager.accounts |
Fields
Name | Datatype | Description |
---|---|---|
expiry_events_configuration | object | |
account_id | string | |
region | string | AWS region. |
Methods
Name | Accessible by | Required Params |
---|---|---|
create_resource | INSERT | ExpiryEventsConfiguration, region |
delete_resource | DELETE | data__Identifier, region |
update_resource | UPDATE | data__Identifier, data__PatchDocument, region |
get_resource | SELECT | data__Identifier, region |
SELECT
examples
Gets all properties from an individual account
.
SELECT
region,
expiry_events_configuration,
account_id
FROM aws.certificatemanager.accounts
WHERE region = 'us-east-1' AND data__Identifier = '<AccountId>';
INSERT
example
Use the following StackQL query and manifest file to create a new account
resource, using stack-deploy
.
- Required Properties
- All Properties
- Manifest
/*+ create */
INSERT INTO aws.certificatemanager.accounts (
ExpiryEventsConfiguration,
region
)
SELECT
'{{ ExpiryEventsConfiguration }}',
'{{ region }}';
/*+ create */
INSERT INTO aws.certificatemanager.accounts (
ExpiryEventsConfiguration,
region
)
SELECT
'{{ ExpiryEventsConfiguration }}',
'{{ region }}';
version: 1
name: stack name
description: stack description
providers:
- aws
globals:
- name: region
value: '{{ vars.AWS_REGION }}'
resources:
- name: account
props:
- name: ExpiryEventsConfiguration
value:
DaysBeforeExpiry: '{{ DaysBeforeExpiry }}'
DELETE
example
/*+ delete */
DELETE FROM aws.certificatemanager.accounts
WHERE data__Identifier = '<AccountId>'
AND region = 'us-east-1';
Permissions
To operate on the accounts
resource, the following permissions are required:
Create
acm:GetAccountConfiguration,
acm:PutAccountConfiguration
Read
acm:GetAccountConfiguration
Update
acm:GetAccountConfiguration,
acm:PutAccountConfiguration
Delete
acm:GetAccountConfiguration,
acm:PutAccountConfiguration