verified_access_group
Gets or updates an individual verified_access_group resource, use verified_access_groups to retrieve a list of resources or to create or delete a resource.
Overview
| Name | verified_access_group |
| Type | Resource |
| Description | The AWS::EC2::VerifiedAccessGroup resource creates an AWS EC2 Verified Access Group. |
| Id | aws.ec2.verified_access_group |
Fields
| Name | Datatype | Description |
|---|---|---|
verified_access_group_id | string | The ID of the AWS Verified Access group. |
verified_access_instance_id | string | The ID of the AWS Verified Access instance. |
verified_access_group_arn | string | The ARN of the Verified Access group. |
owner | string | The AWS account number that owns the group. |
creation_time | string | Time this Verified Access Group was created. |
last_updated_time | string | Time this Verified Access Group was last updated. |
description | string | A description for the AWS Verified Access group. |
policy_document | string | The AWS Verified Access policy document. |
policy_enabled | boolean | The status of the Verified Access policy. |
tags | array | An array of key-value pairs to apply to this resource. |
sse_specification | object | The configuration options for customer provided KMS encryption. |
region | string | AWS region. |
Methods
| Name | Accessible by | Required Params |
|---|---|---|
update_resource | UPDATE | data__Identifier, data__PatchDocument, region |
get_resource | SELECT | data__Identifier, region |
SELECT Example
SELECT
region,
verified_access_group_id,
verified_access_instance_id,
verified_access_group_arn,
owner,
creation_time,
last_updated_time,
description,
policy_document,
policy_enabled,
tags,
sse_specification
FROM aws.ec2.verified_access_group
WHERE region = 'us-east-1' AND data__Identifier = '<VerifiedAccessGroupId>';
Permissions
To operate on the verified_access_group resource, the following permissions are required:
Read
ec2:DescribeVerifiedAccessGroups,
ec2:GetVerifiedAccessGroupPolicy,
ec2:DescribeTags,
kms:DescribeKey,
kms:RetireGrant,
kms:CreateGrant,
kms:GenerateDataKey,
kms:Decrypt
Update
ec2:ModifyVerifiedAccessGroup,
ec2:ModifyVerifiedAccessGroupPolicy,
ec2:DescribeVerifiedAccessGroups,
ec2:GetVerifiedAccessGroupPolicy,
ec2:DescribeTags,
ec2:DeleteTags,
ec2:CreateTags,
kms:DescribeKey,
kms:RetireGrant,
kms:CreateGrant,
kms:GenerateDataKey,
kms:Decrypt