Skip to main content

environment_account_connection

Gets an individual environment_account_connection resource

Overview

Nameenvironment_account_connection
TypeResource
Descriptionenvironment_account_connection
Idawscc.proton.environment_account_connection

Fields

NameDatatypeDescription
arnstringThe Amazon Resource Name (ARN) of the environment account connection.
codebuild_role_arnstringThe Amazon Resource Name (ARN) of an IAM service role in the environment account. AWS Proton uses this role to provision infrastructure resources using CodeBuild-based provisioning in the associated environment account.
component_role_arnstringThe Amazon Resource Name (ARN) of the IAM service role that AWS Proton uses when provisioning directly defined components in the associated environment account. It determines the scope of infrastructure that a component can provision in the account.
environment_account_idstringThe environment account that's connected to the environment account connection.
environment_namestringThe name of the AWS Proton environment that's created in the associated management account.
idstringThe ID of the environment account connection.
management_account_idstringThe ID of the management account that accepts or rejects the environment account connection. You create an manage the AWS Proton environment in this account. If the management account accepts the environment account connection, AWS Proton can use the associated IAM role to provision environment infrastructure resources in the associated environment account.
role_arnstringThe Amazon Resource Name (ARN) of the IAM service role that's created in the environment account. AWS Proton uses this role to provision infrastructure resources in the associated environment account.
statusstringThe status of the environment account connection.
tagsarray<p>An optional list of metadata items that you can associate with the Proton environment account connection. A tag is a key-value pair.</p><br/> <p>For more information, see <a href="https://docs.aws.amazon.com/proton/latest/userguide/resources.html">Proton resources and tagging</a> in the<br/> <i>Proton User Guide</i>.</p>
regionstringAWS region.

Methods

Currently only SELECT is supported for this resource resource.

Example

SELECT
region,
arn,
codebuild_role_arn,
component_role_arn,
environment_account_id,
environment_name,
id,
management_account_id,
role_arn,
status,
tags
FROM awscc.proton.environment_account_connection
WHERE data__Identifier = '<Arn>';

Permissions

To operate on the environment_account_connection resource, the following permissions are required:

Read

proton:GetEnvironmentAccountConnection,
proton:ListTagsForResource,
iam:PassRole,
proton:GetEnvironmentAccountConnection

Update

proton:CreateEnvironmentAccountConnection,
proton:ListTagsForResource,
proton:TagResource,
proton:UntagResource,
proton:UpdateEnvironmentAccountConnection,
iam:PassRole,
proton:GetEnvironmentAccountConnection

Delete

proton:DeleteEnvironmentAccountConnection,
proton:UntagResource,
iam:PassRole,
proton:ListTagsForResource,
proton:GetEnvironmentAccountConnection