Skip to content

(appconfig-alpha): grant read Configuration #28585

@yamatatsu

Description

@yamatatsu

Describe the feature

Now appconfig-alpha has no grant method. If grantReadConfig() is implemented, it will be useful.

Use Case

Using AppConfig from application codes.

Proposed Solution

environment.grantReadConfig(lambdaFunction);

Other Information

Needed policy is following:

new iam.PolicyStatement({
  actions: [
    "appconfig:GetLatestConfiguration",
    "appconfig:StartConfigurationSession",
  ],
  resources: [`${appConfigEnvironment.environmentArn}/*`],
})

see, https://docs.aws.amazon.com/appconfig/latest/userguide/about-data-plane.html

Acknowledgements

  • I may be able to implement this feature request
  • This feature might incur a breaking change

CDK version used

2.114.1

Environment details (OS name and version, etc.)

Mac OS, Apple silicon, Sonoma 14.2.1

Metadata

Metadata

Assignees

No one assigned

    Labels

    @aws-cdk/aws-iamRelated to AWS Identity and Access Managementeffort/mediumMedium work item – several days of effortfeature-requestA feature should be added or improved.p2

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions