verified_access_instances
Used to retrieve a list of verified_access_instances
in a region or to create or delete a verified_access_instances
resource, use verified_access_instance
to read or update an individual resource.
Overview
Name | verified_access_instances |
Type | Resource |
Description | The AWS::EC2::VerifiedAccessInstance resource creates an AWS EC2 Verified Access Instance. |
Id | aws.ec2.verified_access_instances |
Fields
Name | Datatype | Description |
---|---|---|
verified_access_instance_id | string | The ID of the AWS Verified Access instance. |
region | string | AWS region. |
Methods
Name | Accessible by | Required Params |
---|---|---|
create_resource | INSERT | region |
delete_resource | DELETE | data__Identifier, region |
list_resource | SELECT | region |
SELECT
Example
SELECT
region,
verified_access_instance_id
FROM aws.ec2.verified_access_instances
WHERE region = 'us-east-1';
INSERT
Example
Use the following StackQL query and manifest file to create a new verified_access_instance
resource, using stack-deploy
.
- Required Properties
- All Properties
- Manifest
/*+ create */
INSERT INTO aws.ec2.verified_access_instances (
VerifiedAccessTrustProviders,
VerifiedAccessTrustProviderIds,
Description,
LoggingConfigurations,
Tags,
FipsEnabled,
region
)
SELECT
'{{ VerifiedAccessTrustProviders }}',
'{{ VerifiedAccessTrustProviderIds }}',
'{{ Description }}',
'{{ LoggingConfigurations }}',
'{{ Tags }}',
'{{ FipsEnabled }}',
'{{ region }}';
/*+ create */
INSERT INTO aws.ec2.verified_access_instances (
VerifiedAccessTrustProviders,
VerifiedAccessTrustProviderIds,
Description,
LoggingConfigurations,
Tags,
FipsEnabled,
region
)
SELECT
'{{ VerifiedAccessTrustProviders }}',
'{{ VerifiedAccessTrustProviderIds }}',
'{{ Description }}',
'{{ LoggingConfigurations }}',
'{{ Tags }}',
'{{ FipsEnabled }}',
'{{ region }}';
version: 1
name: stack name
description: stack description
providers:
- aws
globals:
- name: region
value: '{{ vars.AWS_REGION }}'
resources:
- name: verified_access_instance
props:
- name: VerifiedAccessTrustProviders
value:
- TrustProviderType: '{{ TrustProviderType }}'
DeviceTrustProviderType: '{{ DeviceTrustProviderType }}'
UserTrustProviderType: '{{ UserTrustProviderType }}'
OidcOptions:
Issuer: '{{ Issuer }}'
AuthorizationEndpoint: '{{ AuthorizationEndpoint }}'
TokenEndpoint: '{{ TokenEndpoint }}'
UserInfoEndpoint: '{{ UserInfoEndpoint }}'
ClientId: '{{ ClientId }}'
ClientSecret: '{{ ClientSecret }}'
Scope: '{{ Scope }}'
DeviceOptions:
TenantId: '{{ TenantId }}'
PublicSigningKeyUrl: '{{ PublicSigningKeyUrl }}'
PolicyReferenceName: '{{ PolicyReferenceName }}'
Description: '{{ Description }}'
Tags:
- Key: '{{ Key }}'
Value: '{{ Value }}'
SseSpecification:
KmsKeyArn: '{{ KmsKeyArn }}'
CustomerManagedKeyEnabled: '{{ CustomerManagedKeyEnabled }}'
- name: VerifiedAccessTrustProviderIds
value:
- '{{ VerifiedAccessTrustProviderIds[0] }}'
- name: Description
value: '{{ Description }}'
- name: LoggingConfigurations
value:
LogVersion: '{{ LogVersion }}'
IncludeTrustContext: '{{ IncludeTrustContext }}'
CloudWatchLogs:
Enabled: '{{ Enabled }}'
LogGroup: '{{ LogGroup }}'
KinesisDataFirehose:
Enabled: '{{ Enabled }}'
DeliveryStream: '{{ DeliveryStream }}'
S3:
Enabled: '{{ Enabled }}'
BucketName: '{{ BucketName }}'
BucketOwner: '{{ BucketOwner }}'
Prefix: '{{ Prefix }}'
- name: Tags
value:
- null
- name: FipsEnabled
value: '{{ FipsEnabled }}'
DELETE
Example
/*+ delete */
DELETE FROM aws.ec2.verified_access_instances
WHERE data__Identifier = '<VerifiedAccessInstanceId>'
AND region = 'us-east-1';
Permissions
To operate on the verified_access_instances
resource, the following permissions are required:
Create
ec2:CreateVerifiedAccessInstance,
ec2:AttachVerifiedAccessTrustProvider,
ec2:ModifyVerifiedAccessInstanceLoggingConfiguration,
ec2:DescribeVerifiedAccessInstances,
ec2:DescribeVerifiedAccessInstanceLoggingConfigurations,
ec2:CreateTags,
ec2:DescribeTags,
logs:CreateLogDelivery,
logs:GetLogDelivery,
logs:UpdateLogDelivery,
logs:PutDestination,
logs:DeleteLogDelivery,
logs:ListLogDeliveries,
logs:PutLogEvents,
logs:DescribeLogStreams,
s3:listBuckets,
s3:PutObject,
s3:GetBucketPolicy,
s3:PutBucketPolicy,
logs:DescribeLogGroups,
logs:PutResourcePolicy,
firehose:TagDeliveryStream,
logs:DescribeResourcePolicies,
iam:CreateServiceLinkedRole,
verified-access:AllowVerifiedAccess
Delete
ec2:DeleteVerifiedAccessInstance,
ec2:DeleteTags,
ec2:DescribeVerifiedAccessInstances,
ec2:DescribeVerifiedAccessInstanceLoggingConfigurations,
ec2:DetachVerifiedAccessTrustProvider,
ec2:GetVerifiedAccessGroupPolicy,
ec2:DescribeTags,
logs:ListLogDeliveries,
logs:GetLogDelivery,
logs:DeleteLogDelivery
List
ec2:DescribeVerifiedAccessInstances,
ec2:DescribeTags,
logs:ListLogDeliveries,
logs:GetLogDelivery