set_permission

set_permission(**kwargs)

Specifies a user's permissions. For more information, see Security and Permissions.

Required Permissions : To use this action, an IAM user must have a Manage permissions level for the stack, or an attached policy that explicitly grants permissions. For more information on user permissions, see Managing User Permissions.

See also: AWS API Documentation

Request Syntax

response = client.set_permission(
    StackId='string',
    IamUserArn='string',
    AllowSsh=True|False,
    AllowSudo=True|False,
    Level='string'
)

Parameters

• StackId (string) --

  [REQUIRED]

  The stack ID.

• IamUserArn (string) --

  [REQUIRED]

  The user's IAM ARN. This can also be a federated user's ARN.

• AllowSsh (boolean) -- The user is allowed to use SSH to communicate with the instance.
• AllowSudo (boolean) -- The user is allowed to use sudo to elevate privileges.
• Level (string) --

  The user's permission level, which must be set to one of the following strings. You cannot set your own permissions level.

  • deny
  • show
  • deploy
  • manage
  • iam_only

  For more information about the permissions associated with these levels, see Managing User Permissions.

Returns

None

Exceptions

• OpsWorks.Client.exceptions.ValidationException
• OpsWorks.Client.exceptions.ResourceNotFoundException