OpsWorks / Client / set_permission

set_permission#

OpsWorks.Client.set_permission(**kwargs)#

Specifies a user’s permissions. For more information, see Security and Permissions.

Required Permissions: To use this action, an IAM user must have a Manage permissions level for the stack, or an attached policy that explicitly grants permissions. For more information on user permissions, see Managing User Permissions.

See also: AWS API Documentation

Request Syntax

response = client.set_permission(
    StackId='string',
    IamUserArn='string',
    AllowSsh=True|False,
    AllowSudo=True|False,
    Level='string'
)
Parameters:

  • StackId (string) –

    [REQUIRED]

    The stack ID.

  • IamUserArn (string) –

    [REQUIRED]

    The user’s IAM ARN. This can also be a federated user’s ARN.

  • AllowSsh (boolean) – The user is allowed to use SSH to communicate with the instance.

  • AllowSudo (boolean) – The user is allowed to use sudo to elevate privileges.

  • Level (string) –

    The user’s permission level, which must be set to one of the following strings. You cannot set your own permissions level.

    • deny

    • show

    • deploy

    • manage

    • iam_only

    For more information about the permissions associated with these levels, see Managing User Permissions.

Returns:

None

Exceptions

  • OpsWorks.Client.exceptions.ValidationException

  • OpsWorks.Client.exceptions.ResourceNotFoundException