Struct AssumeRootFluentBuilder

pub struct AssumeRootFluentBuilder { /* private fields */ }

Fluent builder constructing a request to AssumeRoot.

Returns a set of short term credentials you can use to perform privileged tasks on a member account in your organization.

Before you can launch a privileged session, you must have centralized root access in your organization. For steps to enable this feature, see Centralize root access for member accounts in the IAM User Guide.

The STS global endpoint is not supported for AssumeRoot. You must send this request to a Regional STS endpoint. For more information, see Endpoints.

You can track AssumeRoot in CloudTrail logs to determine what actions were performed in a session. For more information, see Track privileged tasks in CloudTrail in the IAM User Guide.

Implementations

impl AssumeRootFluentBuilder

pub fn as_input(&self) -> &AssumeRootInputBuilder

Access the AssumeRoot as a reference.

pub async fn send( self, ) -> Result<AssumeRootOutput, SdkError<AssumeRootError, HttpResponse>>

Sends the request and returns the response.

If an error occurs, an SdkError will be returned with additional details that can be matched against.

By default, any retryable failures will be retried twice. Retry behavior is configurable with the RetryConfig, which can be set when configuring the client.

pub fn customize( self, ) -> CustomizableOperation<AssumeRootOutput, AssumeRootError, Self>

Consumes this builder, creating a customizable operation that can be modified before being sent.

pub fn target_principal(self, input: impl Into<String>) -> Self

The member account principal ARN or account ID.

pub fn set_target_principal(self, input: Option<String>) -> Self

The member account principal ARN or account ID.

pub fn get_target_principal(&self) -> &Option<String>

The member account principal ARN or account ID.

pub fn task_policy_arn(self, input: PolicyDescriptorType) -> Self

The identity based policy that scopes the session to the privileged tasks that can be performed. You can use one of following Amazon Web Services managed policies to scope root session actions.

• IAMAuditRootUserCredentials

• IAMCreateRootUserPassword

• IAMDeleteRootUserCredentials

• S3UnlockBucketPolicy

• SQSUnlockQueuePolicy

pub fn set_task_policy_arn(self, input: Option<PolicyDescriptorType>) -> Self

The identity based policy that scopes the session to the privileged tasks that can be performed. You can use one of following Amazon Web Services managed policies to scope root session actions.

• IAMAuditRootUserCredentials

• IAMCreateRootUserPassword

• IAMDeleteRootUserCredentials

• S3UnlockBucketPolicy

• SQSUnlockQueuePolicy

pub fn get_task_policy_arn(&self) -> &Option<PolicyDescriptorType>

The identity based policy that scopes the session to the privileged tasks that can be performed. You can use one of following Amazon Web Services managed policies to scope root session actions.

• IAMAuditRootUserCredentials

• IAMCreateRootUserPassword

• IAMDeleteRootUserCredentials

• S3UnlockBucketPolicy

• SQSUnlockQueuePolicy

pub fn duration_seconds(self, input: i32) -> Self

The duration, in seconds, of the privileged session. The value can range from 0 seconds up to the maximum session duration of 900 seconds (15 minutes). If you specify a value higher than this setting, the operation fails.

By default, the value is set to 900 seconds.

pub fn set_duration_seconds(self, input: Option<i32>) -> Self

The duration, in seconds, of the privileged session. The value can range from 0 seconds up to the maximum session duration of 900 seconds (15 minutes). If you specify a value higher than this setting, the operation fails.

By default, the value is set to 900 seconds.

pub fn get_duration_seconds(&self) -> &Option<i32>

The duration, in seconds, of the privileged session. The value can range from 0 seconds up to the maximum session duration of 900 seconds (15 minutes). If you specify a value higher than this setting, the operation fails.

By default, the value is set to 900 seconds.

Trait Implementations

impl Clone for AssumeRootFluentBuilder

fn clone(&self) -> AssumeRootFluentBuilder

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AssumeRootFluentBuilder

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.