Uses of Interface
software.amazon.awscdk.services.iam.IGrantable

Packages that use IGrantable

Package	Description
software.amazon.awscdk.customresources	AWS CDK Custom Resources
software.amazon.awscdk.pipelines	CDK Pipelines
software.amazon.awscdk.services.amplify	AWS Amplify Construct Library
software.amazon.awscdk.services.apigateway	Amazon API Gateway Construct Library
software.amazon.awscdk.services.apigatewayv2	AWS::APIGatewayv2 Construct Library
software.amazon.awscdk.services.appmesh	AWS App Mesh Construct Library
software.amazon.awscdk.services.appsync	AWS AppSync Construct Library
software.amazon.awscdk.services.autoscaling	Amazon EC2 Auto Scaling Construct Library
software.amazon.awscdk.services.backup	AWS Backup Construct Library
software.amazon.awscdk.services.chatbot	AWS::Chatbot Construct Library
software.amazon.awscdk.services.cloudfront	Amazon CloudFront Construct Library
software.amazon.awscdk.services.cloudfront.experimental
software.amazon.awscdk.services.cloudwatch	Amazon CloudWatch Construct Library
software.amazon.awscdk.services.codebuild	AWS CodeBuild Construct Library
software.amazon.awscdk.services.codecommit	AWS CodeCommit Construct Library
software.amazon.awscdk.services.codedeploy	AWS CodeDeploy Construct Library
software.amazon.awscdk.services.codeguruprofiler	AWS::CodeGuruProfiler Construct Library
software.amazon.awscdk.services.codepipeline.actions	AWS CodePipeline Actions
software.amazon.awscdk.services.cognito	Amazon Cognito Construct Library
software.amazon.awscdk.services.dynamodb	Amazon DynamoDB Construct Library
software.amazon.awscdk.services.ec2	Amazon EC2 Construct Library
software.amazon.awscdk.services.ecr	Amazon ECR Construct Library
software.amazon.awscdk.services.ecs	Amazon ECS Construct Library
software.amazon.awscdk.services.efs	Amazon Elastic File System Construct Library
software.amazon.awscdk.services.eks	Amazon EKS Construct Library
software.amazon.awscdk.services.elasticsearch	Amazon Elasticsearch Service Construct Library
software.amazon.awscdk.services.events	Amazon EventBridge Construct Library
software.amazon.awscdk.services.glue	AWS Glue Construct Library
software.amazon.awscdk.services.iam	AWS Identity and Access Management Construct Library
software.amazon.awscdk.services.iotevents	AWS::IoTEvents Construct Library
software.amazon.awscdk.services.kinesis	Amazon Kinesis Construct Library
software.amazon.awscdk.services.kinesis.analytics.flink	Kinesis Analytics Flink
software.amazon.awscdk.services.kinesisfirehose	Amazon Kinesis Data Firehose Construct Library
software.amazon.awscdk.services.kms	AWS Key Management Service Construct Library
software.amazon.awscdk.services.lambda	AWS Lambda Construct Library
software.amazon.awscdk.services.lambda.go	Amazon Lambda Golang Library
software.amazon.awscdk.services.lambda.nodejs	Amazon Lambda Node.js Library
software.amazon.awscdk.services.lambda.python	Amazon Lambda Python Library
software.amazon.awscdk.services.logs	Amazon CloudWatch Logs Construct Library
software.amazon.awscdk.services.neptune	Amazon Neptune Construct Library
software.amazon.awscdk.services.opensearchservice	Amazon OpenSearch Service Construct Library
software.amazon.awscdk.services.rds	Amazon Relational Database Service Construct Library
software.amazon.awscdk.services.s3	Amazon S3 Construct Library
software.amazon.awscdk.services.s3.assets	AWS CDK Assets
software.amazon.awscdk.services.secretsmanager	AWS Secrets Manager Construct Library
software.amazon.awscdk.services.sns	Amazon Simple Notification Service Construct Library
software.amazon.awscdk.services.sqs	Amazon Simple Queue Service Construct Library
software.amazon.awscdk.services.ssm	AWS Systems Manager Construct Library
software.amazon.awscdk.services.stepfunctions	AWS Step Functions Construct Library
software.amazon.awscdk.services.stepfunctions.tasks	Tasks for AWS Step Functions
software.amazon.awscdk.services.synthetics	Amazon CloudWatch Synthetics Construct Library
software.amazon.awscdk.triggers	Triggers

Uses of IGrantable in software.amazon.awscdk.customresources

Classes in software.amazon.awscdk.customresources that implement IGrantable

Modifier and Type	Class and Description
class	AwsCustomResource (experimental) Defines a custom resource that is materialized using specific AWS API calls.

Uses of IGrantable in software.amazon.awscdk.pipelines

Classes in software.amazon.awscdk.pipelines that implement IGrantable

Modifier and Type	Class and Description
class	ShellScriptAction Deprecated. This class is part of the old API. Use the API based on the `CodePipeline` class instead
class	SimpleSynthAction Deprecated. This class is part of the old API. Use the API based on the `CodePipeline` class instead

Methods in software.amazon.awscdk.pipelines with parameters of type IGrantable

Modifier and Type	Method and Description
abstract void	DockerCredential.grantRead(IGrantable grantee, DockerCredentialUsage usage) (experimental) Grant read-only access to the registry credentials.

Uses of IGrantable in software.amazon.awscdk.services.amplify

Classes in software.amazon.awscdk.services.amplify that implement IGrantable

Modifier and Type	Class and Description
class	App (experimental) An Amplify Console application.

Uses of IGrantable in software.amazon.awscdk.services.apigateway

Methods in software.amazon.awscdk.services.apigateway with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	RateLimitedApiKey.grantRead(IGrantable grantee) (experimental) Permits the IAM principal all read operations through this key.
Grant	ApiKey.grantRead(IGrantable grantee) (experimental) Permits the IAM principal all read operations through this key.
Grant	RateLimitedApiKey.grantReadWrite(IGrantable grantee) (experimental) Permits the IAM principal all read and write operations through this key.
Grant	ApiKey.grantReadWrite(IGrantable grantee) (experimental) Permits the IAM principal all read and write operations through this key.
Grant	RateLimitedApiKey.grantWrite(IGrantable grantee) (experimental) Permits the IAM principal all write operations through this key.
Grant	ApiKey.grantWrite(IGrantable grantee) (experimental) Permits the IAM principal all write operations through this key.

Method parameters in software.amazon.awscdk.services.apigateway with type arguments of type IGrantable

Modifier and Type	Method and Description
AssetApiDefinition.Builder	AssetApiDefinition.Builder.readers(List<? extends IGrantable> readers) (experimental) A list of principals that should be able to read this asset from S3.

Uses of IGrantable in software.amazon.awscdk.services.apigatewayv2

Methods in software.amazon.awscdk.services.apigatewayv2 with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	HttpRoute.grantInvoke(IGrantable grantee) (experimental) Grant access to invoke the route.
Grant	IHttpRoute.grantInvoke(IGrantable grantee) (experimental) Grant access to invoke the route.
Grant	IHttpRoute.Jsii$Proxy.grantInvoke(IGrantable grantee) (experimental) Grant access to invoke the route.
Grant	HttpRoute.grantInvoke(IGrantable grantee, GrantInvokeOptions options) (experimental) Grant access to invoke the route.
Grant	IHttpRoute.grantInvoke(IGrantable grantee, GrantInvokeOptions options) (experimental) Grant access to invoke the route.
Grant	IHttpRoute.Jsii$Proxy.grantInvoke(IGrantable grantee, GrantInvokeOptions options) (experimental) Grant access to invoke the route.
default Grant	IHttpRoute.Jsii$Default.grantInvoke(IGrantable grantee, GrantInvokeOptions options) (experimental) Grant access to invoke the route.
Grant	WebSocketApi.grantManageConnections(IGrantable identity) (experimental) Grant access to the API Gateway management API for this WebSocket API to an IAM principal (Role/Group/User).
Grant	WebSocketStage.grantManagementApiAccess(IGrantable identity) (experimental) Grant access to the API Gateway management API for this WebSocket API Stage to an IAM principal (Role/Group/User).

Uses of IGrantable in software.amazon.awscdk.services.appmesh

Methods in software.amazon.awscdk.services.appmesh with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	IVirtualGateway.grantStreamAggregatedResources(IGrantable identity) (experimental) Grants the given entity `appmesh:StreamAggregatedResources`.
Grant	IVirtualGateway.Jsii$Proxy.grantStreamAggregatedResources(IGrantable identity) (experimental) Grants the given entity `appmesh:StreamAggregatedResources`.
default Grant	IVirtualGateway.Jsii$Default.grantStreamAggregatedResources(IGrantable identity) (experimental) Grants the given entity `appmesh:StreamAggregatedResources`.
Grant	VirtualGateway.grantStreamAggregatedResources(IGrantable identity) (experimental) Grants the given entity `appmesh:StreamAggregatedResources`.
Grant	VirtualNode.grantStreamAggregatedResources(IGrantable identity) (experimental) Grants the given entity `appmesh:StreamAggregatedResources`.
Grant	IVirtualNode.grantStreamAggregatedResources(IGrantable identity) (experimental) Grants the given entity `appmesh:StreamAggregatedResources`.
Grant	IVirtualNode.Jsii$Proxy.grantStreamAggregatedResources(IGrantable identity) (experimental) Grants the given entity `appmesh:StreamAggregatedResources`.
default Grant	IVirtualNode.Jsii$Default.grantStreamAggregatedResources(IGrantable identity) (experimental) Grants the given entity `appmesh:StreamAggregatedResources`.

Uses of IGrantable in software.amazon.awscdk.services.appsync

Classes in software.amazon.awscdk.services.appsync that implement IGrantable

Modifier and Type	Class and Description
class	BackedDataSource (experimental) Abstract AppSync datasource implementation.
class	DynamoDbDataSource (experimental) An AppSync datasource backed by a DynamoDB table.
class	ElasticsearchDataSource Deprecated. - use `OpenSearchDataSource`
class	HttpDataSource (experimental) An AppSync datasource backed by a http endpoint.
class	LambdaDataSource (experimental) An AppSync datasource backed by a Lambda function.
class	OpenSearchDataSource (experimental) An Appsync datasource backed by OpenSearch.
class	RdsDataSource (experimental) An AppSync datasource backed by RDS.

Methods in software.amazon.awscdk.services.appsync with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	GraphqlApi.grant(IGrantable grantee, IamResource resources, String... actions) (experimental) Adds an IAM policy statement associated with this GraphQLApi to an IAM principal's policy.
Grant	GraphqlApi.grantMutation(IGrantable grantee, String... fields) (experimental) Adds an IAM policy statement for Mutation access to this GraphQLApi to an IAM principal's policy.
Grant	GraphqlApi.grantQuery(IGrantable grantee, String... fields) (experimental) Adds an IAM policy statement for Query access to this GraphQLApi to an IAM principal's policy.
Grant	GraphqlApi.grantSubscription(IGrantable grantee, String... fields) (experimental) Adds an IAM policy statement for Subscription access to this GraphQLApi to an IAM principal's policy.

Uses of IGrantable in software.amazon.awscdk.services.autoscaling

Subinterfaces of IGrantable in software.amazon.awscdk.services.autoscaling

Modifier and Type	Interface and Description
interface	IAutoScalingGroup (experimental) An AutoScalingGroup.
static interface	IAutoScalingGroup.Jsii$Default Internal default implementation for IAutoScalingGroup.

Classes in software.amazon.awscdk.services.autoscaling that implement IGrantable

Modifier and Type	Class and Description
class	AutoScalingGroup (experimental) A Fleet represents a managed set of EC2 instances.
static class	IAutoScalingGroup.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.

Uses of IGrantable in software.amazon.awscdk.services.backup

Classes in software.amazon.awscdk.services.backup that implement IGrantable

Modifier and Type	Class and Description
class	BackupSelection (experimental) A backup selection.

Methods in software.amazon.awscdk.services.backup with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	IBackupVault.grant(IGrantable grantee, String... actions) (experimental) Grant the actions defined in actions to the given grantee on this backup vault.
Grant	IBackupVault.Jsii$Proxy.grant(IGrantable grantee, String... actions) (experimental) Grant the actions defined in actions to the given grantee on this backup vault.
default Grant	IBackupVault.Jsii$Default.grant(IGrantable grantee, String... actions) (experimental) Grant the actions defined in actions to the given grantee on this backup vault.
Grant	BackupVault.grant(IGrantable grantee, String... actions) (experimental) Grant the actions defined in actions to the given grantee on this Backup Vault resource.

Uses of IGrantable in software.amazon.awscdk.services.chatbot

Subinterfaces of IGrantable in software.amazon.awscdk.services.chatbot

Modifier and Type	Interface and Description
interface	ISlackChannelConfiguration (experimental) Represents a Slack channel configuration.
static interface	ISlackChannelConfiguration.Jsii$Default Internal default implementation for ISlackChannelConfiguration.

Classes in software.amazon.awscdk.services.chatbot that implement IGrantable

Modifier and Type	Class and Description
static class	ISlackChannelConfiguration.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
class	SlackChannelConfiguration (experimental) A new Slack channel configuration.

Uses of IGrantable in software.amazon.awscdk.services.cloudfront

Subinterfaces of IGrantable in software.amazon.awscdk.services.cloudfront

Modifier and Type	Interface and Description
interface	IOriginAccessIdentity (experimental) Interface for CloudFront OriginAccessIdentity.
static interface	IOriginAccessIdentity.Jsii$Default Internal default implementation for IOriginAccessIdentity.

Classes in software.amazon.awscdk.services.cloudfront that implement IGrantable

Modifier and Type	Class and Description
static class	IOriginAccessIdentity.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
class	OriginAccessIdentity (experimental) An origin access identity is a special CloudFront user that you can associate with Amazon S3 origins, so that you can secure all or just some of your Amazon S3 content.

Uses of IGrantable in software.amazon.awscdk.services.cloudfront.experimental

Classes in software.amazon.awscdk.services.cloudfront.experimental that implement IGrantable

Modifier and Type	Class and Description
class	EdgeFunction (experimental) A Lambda@Edge function.

Methods in software.amazon.awscdk.services.cloudfront.experimental with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	EdgeFunction.grantInvoke(IGrantable identity) (experimental) Grant the given identity permissions to invoke this Lambda.
Grant	EdgeFunction.grantInvokeUrl(IGrantable identity) (experimental) Grant the given identity permissions to invoke this Lambda Function URL.

Uses of IGrantable in software.amazon.awscdk.services.cloudwatch

Methods in software.amazon.awscdk.services.cloudwatch with parameters of type IGrantable

Modifier and Type	Method and Description
static Grant	Metric.grantPutMetricData(IGrantable grantee) (experimental) Grant permissions to the given identity to write metrics.

Uses of IGrantable in software.amazon.awscdk.services.codebuild

Subinterfaces of IGrantable in software.amazon.awscdk.services.codebuild

Modifier and Type	Interface and Description
interface	IProject
static interface	IProject.Jsii$Default Internal default implementation for IProject.

Classes in software.amazon.awscdk.services.codebuild that implement IGrantable

Modifier and Type	Class and Description
static class	IProject.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
class	PipelineProject (experimental) A convenience class for CodeBuild Projects that are used in CodePipeline.
class	Project (experimental) A representation of a CodeBuild Project.

Methods in software.amazon.awscdk.services.codebuild with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	IReportGroup.grantWrite(IGrantable identity) (experimental) Grants the given entity permissions to write (that is, upload reports to) this report group.
Grant	IReportGroup.Jsii$Proxy.grantWrite(IGrantable identity) (experimental) Grants the given entity permissions to write (that is, upload reports to) this report group.
default Grant	IReportGroup.Jsii$Default.grantWrite(IGrantable identity) (experimental) Grants the given entity permissions to write (that is, upload reports to) this report group.
Grant	ReportGroup.grantWrite(IGrantable identity) (experimental) Grants the given entity permissions to write (that is, upload reports to) this report group.
static List<CfnProject.EnvironmentVariableProperty>	Project.serializeEnvVariables(Map<String,? extends BuildEnvironmentVariable> environmentVariables, Boolean validateNoPlainTextSecrets, IGrantable principal) (experimental) Convert the environment variables map of string to BuildEnvironmentVariable, which is the customer-facing type, to a list of CfnProject.EnvironmentVariableProperty, which is the representation of environment variables in CloudFormation.

Uses of IGrantable in software.amazon.awscdk.services.codecommit

Methods in software.amazon.awscdk.services.codecommit with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	Repository.grant(IGrantable grantee, String... actions) (experimental) Grant the given principal identity permissions to perform the actions on this repository.
Grant	IRepository.grant(IGrantable grantee, String... actions) (experimental) Grant the given principal identity permissions to perform the actions on this repository.
Grant	IRepository.Jsii$Proxy.grant(IGrantable grantee, String... actions) (experimental) Grant the given principal identity permissions to perform the actions on this repository.
default Grant	IRepository.Jsii$Default.grant(IGrantable grantee, String... actions) (experimental) Grant the given principal identity permissions to perform the actions on this repository.
Grant	Repository.grantPull(IGrantable grantee) (experimental) Grant the given identity permissions to pull this repository.
Grant	IRepository.grantPull(IGrantable grantee) (experimental) Grant the given identity permissions to pull this repository.
Grant	IRepository.Jsii$Proxy.grantPull(IGrantable grantee) (experimental) Grant the given identity permissions to pull this repository.
default Grant	IRepository.Jsii$Default.grantPull(IGrantable grantee) (experimental) Grant the given identity permissions to pull this repository.
Grant	Repository.grantPullPush(IGrantable grantee) (experimental) Grant the given identity permissions to pull and push this repository.
Grant	IRepository.grantPullPush(IGrantable grantee) (experimental) Grant the given identity permissions to pull and push this repository.
Grant	IRepository.Jsii$Proxy.grantPullPush(IGrantable grantee) (experimental) Grant the given identity permissions to pull and push this repository.
default Grant	IRepository.Jsii$Default.grantPullPush(IGrantable grantee) (experimental) Grant the given identity permissions to pull and push this repository.
Grant	Repository.grantRead(IGrantable grantee) (experimental) Grant the given identity permissions to read this repository.
Grant	IRepository.grantRead(IGrantable grantee) (experimental) Grant the given identity permissions to read this repository.
Grant	IRepository.Jsii$Proxy.grantRead(IGrantable grantee) (experimental) Grant the given identity permissions to read this repository.
default Grant	IRepository.Jsii$Default.grantRead(IGrantable grantee) (experimental) Grant the given identity permissions to read this repository.

Uses of IGrantable in software.amazon.awscdk.services.codedeploy

Methods in software.amazon.awscdk.services.codedeploy with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	LambdaDeploymentGroup.grantPutLifecycleEventHookExecutionStatus(IGrantable grantee) (experimental) Grant a principal permission to codedeploy:PutLifecycleEventHookExecutionStatus on this deployment group resource.

Uses of IGrantable in software.amazon.awscdk.services.codeguruprofiler

Methods in software.amazon.awscdk.services.codeguruprofiler with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	ProfilingGroup.grantPublish(IGrantable grantee) (experimental) Grant access to publish profiling information to the Profiling Group to the given identity.
Grant	IProfilingGroup.grantPublish(IGrantable grantee) (experimental) Grant access to publish profiling information to the Profiling Group to the given identity.
Grant	IProfilingGroup.Jsii$Proxy.grantPublish(IGrantable grantee) (experimental) Grant access to publish profiling information to the Profiling Group to the given identity.
default Grant	IProfilingGroup.Jsii$Default.grantPublish(IGrantable grantee) (experimental) Grant access to publish profiling information to the Profiling Group to the given identity.
Grant	ProfilingGroup.grantRead(IGrantable grantee) (experimental) Grant access to read profiling information from the Profiling Group to the given identity.
Grant	IProfilingGroup.grantRead(IGrantable grantee) (experimental) Grant access to read profiling information from the Profiling Group to the given identity.
Grant	IProfilingGroup.Jsii$Proxy.grantRead(IGrantable grantee) (experimental) Grant access to read profiling information from the Profiling Group to the given identity.
default Grant	IProfilingGroup.Jsii$Default.grantRead(IGrantable grantee) (experimental) Grant access to read profiling information from the Profiling Group to the given identity.

Uses of IGrantable in software.amazon.awscdk.services.codepipeline.actions

Methods in software.amazon.awscdk.services.codepipeline.actions with parameters of type IGrantable

Modifier and Type	Method and Description
void	ManualApprovalAction.grantManualApproval(IGrantable grantable) (experimental) grant the provided principal the permissions to approve or reject this manual approval action.

Uses of IGrantable in software.amazon.awscdk.services.cognito

Methods in software.amazon.awscdk.services.cognito with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	UserPool.grant(IGrantable grantee, String... actions) (experimental) Adds an IAM policy statement associated with this user pool to an IAM principal's policy.

Uses of IGrantable in software.amazon.awscdk.services.dynamodb

Methods in software.amazon.awscdk.services.dynamodb with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	ITable.grant(IGrantable grantee, String... actions) (experimental) Adds an IAM policy statement associated with this table to an IAM principal's policy.
Grant	ITable.Jsii$Proxy.grant(IGrantable grantee, String... actions) (experimental) Adds an IAM policy statement associated with this table to an IAM principal's policy.
default Grant	ITable.Jsii$Default.grant(IGrantable grantee, String... actions) (experimental) Adds an IAM policy statement associated with this table to an IAM principal's policy.
Grant	Table.grant(IGrantable grantee, String... actions) (experimental) Adds an IAM policy statement associated with this table to an IAM principal's policy.
Grant	ITable.grantFullAccess(IGrantable grantee) (experimental) Permits all DynamoDB operations ("dynamodb:*") to an IAM principal.
Grant	ITable.Jsii$Proxy.grantFullAccess(IGrantable grantee) (experimental) Permits all DynamoDB operations ("dynamodb:*") to an IAM principal.
default Grant	ITable.Jsii$Default.grantFullAccess(IGrantable grantee) (experimental) Permits all DynamoDB operations ("dynamodb:*") to an IAM principal.
Grant	Table.grantFullAccess(IGrantable grantee) (experimental) Permits all DynamoDB operations ("dynamodb:*") to an IAM principal.
static Grant	Table.grantListStreams(IGrantable grantee) Deprecated. Use Table.grantTableListStreams(software.amazon.awscdk.services.iam.IGrantable) for more granular permission
Grant	ITable.grantReadData(IGrantable grantee) (experimental) Permits an IAM principal all data read operations from this table: BatchGetItem, GetRecords, GetShardIterator, Query, GetItem, Scan.
Grant	ITable.Jsii$Proxy.grantReadData(IGrantable grantee) (experimental) Permits an IAM principal all data read operations from this table: BatchGetItem, GetRecords, GetShardIterator, Query, GetItem, Scan.
default Grant	ITable.Jsii$Default.grantReadData(IGrantable grantee) (experimental) Permits an IAM principal all data read operations from this table: BatchGetItem, GetRecords, GetShardIterator, Query, GetItem, Scan.
Grant	Table.grantReadData(IGrantable grantee) (experimental) Permits an IAM principal all data read operations from this table: BatchGetItem, GetRecords, GetShardIterator, Query, GetItem, Scan, DescribeTable.
Grant	ITable.grantReadWriteData(IGrantable grantee) (experimental) Permits an IAM principal to all data read/write operations to this table.
Grant	ITable.Jsii$Proxy.grantReadWriteData(IGrantable grantee) (experimental) Permits an IAM principal to all data read/write operations to this table.
default Grant	ITable.Jsii$Default.grantReadWriteData(IGrantable grantee) (experimental) Permits an IAM principal to all data read/write operations to this table.
Grant	Table.grantReadWriteData(IGrantable grantee) (experimental) Permits an IAM principal to all data read/write operations to this table.
Grant	ITable.grantStream(IGrantable grantee, String... actions) (experimental) Adds an IAM policy statement associated with this table's stream to an IAM principal's policy.
Grant	ITable.Jsii$Proxy.grantStream(IGrantable grantee, String... actions) (experimental) Adds an IAM policy statement associated with this table's stream to an IAM principal's policy.
default Grant	ITable.Jsii$Default.grantStream(IGrantable grantee, String... actions) (experimental) Adds an IAM policy statement associated with this table's stream to an IAM principal's policy.
Grant	Table.grantStream(IGrantable grantee, String... actions) (experimental) Adds an IAM policy statement associated with this table's stream to an IAM principal's policy.
Grant	ITable.grantStreamRead(IGrantable grantee) (experimental) Permits an IAM principal all stream data read operations for this table's stream: DescribeStream, GetRecords, GetShardIterator, ListStreams.
Grant	ITable.Jsii$Proxy.grantStreamRead(IGrantable grantee) (experimental) Permits an IAM principal all stream data read operations for this table's stream: DescribeStream, GetRecords, GetShardIterator, ListStreams.
default Grant	ITable.Jsii$Default.grantStreamRead(IGrantable grantee) (experimental) Permits an IAM principal all stream data read operations for this table's stream: DescribeStream, GetRecords, GetShardIterator, ListStreams.
Grant	Table.grantStreamRead(IGrantable grantee) (experimental) Permits an IAM principal all stream data read operations for this table's stream: DescribeStream, GetRecords, GetShardIterator, ListStreams.
Grant	ITable.grantTableListStreams(IGrantable grantee) (experimental) Permits an IAM Principal to list streams attached to current dynamodb table.
Grant	ITable.Jsii$Proxy.grantTableListStreams(IGrantable grantee) (experimental) Permits an IAM Principal to list streams attached to current dynamodb table.
default Grant	ITable.Jsii$Default.grantTableListStreams(IGrantable grantee) (experimental) Permits an IAM Principal to list streams attached to current dynamodb table.
Grant	Table.grantTableListStreams(IGrantable grantee) (experimental) Permits an IAM Principal to list streams attached to current dynamodb table.
Grant	ITable.grantWriteData(IGrantable grantee) (experimental) Permits an IAM principal all data write operations to this table: BatchWriteItem, PutItem, UpdateItem, DeleteItem.
Grant	ITable.Jsii$Proxy.grantWriteData(IGrantable grantee) (experimental) Permits an IAM principal all data write operations to this table: BatchWriteItem, PutItem, UpdateItem, DeleteItem.
default Grant	ITable.Jsii$Default.grantWriteData(IGrantable grantee) (experimental) Permits an IAM principal all data write operations to this table: BatchWriteItem, PutItem, UpdateItem, DeleteItem.
Grant	Table.grantWriteData(IGrantable grantee) (experimental) Permits an IAM principal all data write operations to this table: BatchWriteItem, PutItem, UpdateItem, DeleteItem, DescribeTable.

Uses of IGrantable in software.amazon.awscdk.services.ec2

Subinterfaces of IGrantable in software.amazon.awscdk.services.ec2

Modifier and Type	Interface and Description
interface	IInstance
static interface	IInstance.Jsii$Default Internal default implementation for IInstance.

Classes in software.amazon.awscdk.services.ec2 that implement IGrantable

Modifier and Type	Class and Description
class	BastionHostLinux (experimental) This creates a linux bastion host you can use to connect to other instances or services in your VPC.
static class	IInstance.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
class	Instance (experimental) This represents a single EC2 instance.
class	LaunchTemplate (experimental) This represents an EC2 LaunchTemplate.

Methods in software.amazon.awscdk.services.ec2 that return types with arguments of type IGrantable

Modifier and Type	Method and Description
List<IGrantable>	InitSourceAssetOptions.Jsii$Proxy.getReaders()
List<IGrantable>	InitFileAssetOptions.Jsii$Proxy.getReaders()

Methods in software.amazon.awscdk.services.ec2 with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	Volume.grantAttachVolume(IGrantable grantee) (experimental) Grants permission to attach this Volume to an instance.
Grant	IVolume.grantAttachVolume(IGrantable grantee) (experimental) Grants permission to attach this Volume to an instance.
Grant	IVolume.Jsii$Proxy.grantAttachVolume(IGrantable grantee) (experimental) Grants permission to attach this Volume to an instance.
Grant	Volume.grantAttachVolume(IGrantable grantee, List<IInstance> instances) (experimental) Grants permission to attach this Volume to an instance.
Grant	IVolume.grantAttachVolume(IGrantable grantee, List<IInstance> instances) (experimental) Grants permission to attach this Volume to an instance.
Grant	IVolume.Jsii$Proxy.grantAttachVolume(IGrantable grantee, List<IInstance> instances) (experimental) Grants permission to attach this Volume to an instance.
default Grant	IVolume.Jsii$Default.grantAttachVolume(IGrantable grantee, List<IInstance> instances) (experimental) Grants permission to attach this Volume to an instance.
Grant	Volume.grantAttachVolumeByResourceTag(IGrantable grantee, List<software.constructs.Construct> constructs) (experimental) Grants permission to attach the Volume by a ResourceTag condition.
Grant	IVolume.grantAttachVolumeByResourceTag(IGrantable grantee, List<software.constructs.Construct> constructs) (experimental) Grants permission to attach the Volume by a ResourceTag condition.
Grant	IVolume.Jsii$Proxy.grantAttachVolumeByResourceTag(IGrantable grantee, List<software.constructs.Construct> constructs) (experimental) Grants permission to attach the Volume by a ResourceTag condition.
Grant	Volume.grantAttachVolumeByResourceTag(IGrantable grantee, List<software.constructs.Construct> constructs, String tagKeySuffix) (experimental) Grants permission to attach the Volume by a ResourceTag condition.
Grant	IVolume.grantAttachVolumeByResourceTag(IGrantable grantee, List<software.constructs.Construct> constructs, String tagKeySuffix) (experimental) Grants permission to attach the Volume by a ResourceTag condition.
Grant	IVolume.Jsii$Proxy.grantAttachVolumeByResourceTag(IGrantable grantee, List<software.constructs.Construct> constructs, String tagKeySuffix) (experimental) Grants permission to attach the Volume by a ResourceTag condition.
default Grant	IVolume.Jsii$Default.grantAttachVolumeByResourceTag(IGrantable grantee, List<software.constructs.Construct> constructs, String tagKeySuffix) (experimental) Grants permission to attach the Volume by a ResourceTag condition.
Grant	Volume.grantDetachVolume(IGrantable grantee) (experimental) Grants permission to detach this Volume from an instance CAUTION: Granting an instance permission to detach from itself using this method will lead to an unresolvable circular reference between the instance role and the instance.
Grant	IVolume.grantDetachVolume(IGrantable grantee) (experimental) Grants permission to detach this Volume from an instance CAUTION: Granting an instance permission to detach from itself using this method will lead to an unresolvable circular reference between the instance role and the instance.
Grant	IVolume.Jsii$Proxy.grantDetachVolume(IGrantable grantee) (experimental) Grants permission to detach this Volume from an instance CAUTION: Granting an instance permission to detach from itself using this method will lead to an unresolvable circular reference between the instance role and the instance.
Grant	Volume.grantDetachVolume(IGrantable grantee, List<IInstance> instances) (experimental) Grants permission to detach this Volume from an instance CAUTION: Granting an instance permission to detach from itself using this method will lead to an unresolvable circular reference between the instance role and the instance.
Grant	IVolume.grantDetachVolume(IGrantable grantee, List<IInstance> instances) (experimental) Grants permission to detach this Volume from an instance CAUTION: Granting an instance permission to detach from itself using this method will lead to an unresolvable circular reference between the instance role and the instance.
Grant	IVolume.Jsii$Proxy.grantDetachVolume(IGrantable grantee, List<IInstance> instances) (experimental) Grants permission to detach this Volume from an instance CAUTION: Granting an instance permission to detach from itself using this method will lead to an unresolvable circular reference between the instance role and the instance.
default Grant	IVolume.Jsii$Default.grantDetachVolume(IGrantable grantee, List<IInstance> instances) (experimental) Grants permission to detach this Volume from an instance CAUTION: Granting an instance permission to detach from itself using this method will lead to an unresolvable circular reference between the instance role and the instance.
Grant	Volume.grantDetachVolumeByResourceTag(IGrantable grantee, List<software.constructs.Construct> constructs) (experimental) Grants permission to detach the Volume by a ResourceTag condition.
Grant	IVolume.grantDetachVolumeByResourceTag(IGrantable grantee, List<software.constructs.Construct> constructs) (experimental) Grants permission to detach the Volume by a ResourceTag condition.
Grant	IVolume.Jsii$Proxy.grantDetachVolumeByResourceTag(IGrantable grantee, List<software.constructs.Construct> constructs) (experimental) Grants permission to detach the Volume by a ResourceTag condition.
Grant	Volume.grantDetachVolumeByResourceTag(IGrantable grantee, List<software.constructs.Construct> constructs, String tagKeySuffix) (experimental) Grants permission to detach the Volume by a ResourceTag condition.
Grant	IVolume.grantDetachVolumeByResourceTag(IGrantable grantee, List<software.constructs.Construct> constructs, String tagKeySuffix) (experimental) Grants permission to detach the Volume by a ResourceTag condition.
Grant	IVolume.Jsii$Proxy.grantDetachVolumeByResourceTag(IGrantable grantee, List<software.constructs.Construct> constructs, String tagKeySuffix) (experimental) Grants permission to detach the Volume by a ResourceTag condition.
default Grant	IVolume.Jsii$Default.grantDetachVolumeByResourceTag(IGrantable grantee, List<software.constructs.Construct> constructs, String tagKeySuffix) (experimental) Grants permission to detach the Volume by a ResourceTag condition.

Method parameters in software.amazon.awscdk.services.ec2 with type arguments of type IGrantable

Modifier and Type	Method and Description
InitSourceAssetOptions.Builder	InitSourceAssetOptions.Builder.readers(List<? extends IGrantable> readers) Sets the value of AssetOptions.getReaders()
InitFileAssetOptions.Builder	InitFileAssetOptions.Builder.readers(List<? extends IGrantable> readers) Sets the value of AssetOptions.getReaders()

Uses of IGrantable in software.amazon.awscdk.services.ecr

Methods in software.amazon.awscdk.services.ecr with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	RepositoryBase.grant(IGrantable grantee, String... actions) (experimental) Grant the given principal identity permissions to perform the actions on this repository.
Grant	IRepository.grant(IGrantable grantee, String... actions) (experimental) Grant the given principal identity permissions to perform the actions on this repository.
Grant	IRepository.Jsii$Proxy.grant(IGrantable grantee, String... actions) (experimental) Grant the given principal identity permissions to perform the actions on this repository.
default Grant	IRepository.Jsii$Default.grant(IGrantable grantee, String... actions) (experimental) Grant the given principal identity permissions to perform the actions on this repository.
Grant	RepositoryBase.grantPull(IGrantable grantee) (experimental) Grant the given identity permissions to use the images in this repository.
Grant	IRepository.grantPull(IGrantable grantee) (experimental) Grant the given identity permissions to pull images in this repository.
Grant	IRepository.Jsii$Proxy.grantPull(IGrantable grantee) (experimental) Grant the given identity permissions to pull images in this repository.
default Grant	IRepository.Jsii$Default.grantPull(IGrantable grantee) (experimental) Grant the given identity permissions to pull images in this repository.
Grant	RepositoryBase.grantPullPush(IGrantable grantee) (experimental) Grant the given identity permissions to pull and push images to this repository.
Grant	IRepository.grantPullPush(IGrantable grantee) (experimental) Grant the given identity permissions to pull and push images to this repository.
Grant	IRepository.Jsii$Proxy.grantPullPush(IGrantable grantee) (experimental) Grant the given identity permissions to pull and push images to this repository.
default Grant	IRepository.Jsii$Default.grantPullPush(IGrantable grantee) (experimental) Grant the given identity permissions to pull and push images to this repository.
static void	PublicGalleryAuthorizationToken.grantRead(IGrantable grantee) (experimental) Grant access to retrieve an authorization token.
static void	AuthorizationToken.grantRead(IGrantable grantee) (experimental) Grant access to retrieve an authorization token.

Uses of IGrantable in software.amazon.awscdk.services.ecs

Methods in software.amazon.awscdk.services.ecs with parameters of type IGrantable

Modifier and Type	Method and Description
abstract Grant	Secret.grantRead(IGrantable grantee) (experimental) Grants reading the secret to a principal.

Method parameters in software.amazon.awscdk.services.ecs with type arguments of type IGrantable

Modifier and Type	Method and Description
AssetEnvironmentFile.Builder	AssetEnvironmentFile.Builder.readers(List<? extends IGrantable> readers) (experimental) A list of principals that should be able to read this asset from S3.

Uses of IGrantable in software.amazon.awscdk.services.efs

Methods in software.amazon.awscdk.services.efs with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	IFileSystem.grant(IGrantable grantee, String... actions) (experimental) Grant the actions defined in actions to the given grantee on this File System resource.
Grant	IFileSystem.Jsii$Proxy.grant(IGrantable grantee, String... actions) (experimental) Grant the actions defined in actions to the given grantee on this File System resource.
default Grant	IFileSystem.Jsii$Default.grant(IGrantable grantee, String... actions) (experimental) Grant the actions defined in actions to the given grantee on this File System resource.
Grant	FileSystem.grant(IGrantable grantee, String... actions) (experimental) Grant the actions defined in actions to the given grantee on this File System resource.

Uses of IGrantable in software.amazon.awscdk.services.eks

Classes in software.amazon.awscdk.services.eks that implement IGrantable

Modifier and Type	Class and Description
class	ServiceAccount (experimental) Service Account.

Uses of IGrantable in software.amazon.awscdk.services.elasticsearch

Methods in software.amazon.awscdk.services.elasticsearch with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	IDomain.grantIndexRead(String index, IGrantable identity) Deprecated. use opensearchservice module instead
Grant	IDomain.Jsii$Proxy.grantIndexRead(String index, IGrantable identity) Deprecated. use opensearchservice module instead
default Grant	IDomain.Jsii$Default.grantIndexRead(String index, IGrantable identity) Deprecated. use opensearchservice module instead
Grant	Domain.grantIndexRead(String index, IGrantable identity) Deprecated. use opensearchservice module instead
Grant	IDomain.grantIndexReadWrite(String index, IGrantable identity) Deprecated. use opensearchservice module instead
Grant	IDomain.Jsii$Proxy.grantIndexReadWrite(String index, IGrantable identity) Deprecated. use opensearchservice module instead
default Grant	IDomain.Jsii$Default.grantIndexReadWrite(String index, IGrantable identity) Deprecated. use opensearchservice module instead
Grant	Domain.grantIndexReadWrite(String index, IGrantable identity) Deprecated. use opensearchservice module instead
Grant	IDomain.grantIndexWrite(String index, IGrantable identity) Deprecated. use opensearchservice module instead
Grant	IDomain.Jsii$Proxy.grantIndexWrite(String index, IGrantable identity) Deprecated. use opensearchservice module instead
default Grant	IDomain.Jsii$Default.grantIndexWrite(String index, IGrantable identity) Deprecated. use opensearchservice module instead
Grant	Domain.grantIndexWrite(String index, IGrantable identity) Deprecated. use opensearchservice module instead
Grant	IDomain.grantPathRead(String path, IGrantable identity) Deprecated. use opensearchservice module instead
Grant	IDomain.Jsii$Proxy.grantPathRead(String path, IGrantable identity) Deprecated. use opensearchservice module instead
default Grant	IDomain.Jsii$Default.grantPathRead(String path, IGrantable identity) Deprecated. use opensearchservice module instead
Grant	Domain.grantPathRead(String path, IGrantable identity) Deprecated. use opensearchservice module instead
Grant	IDomain.grantPathReadWrite(String path, IGrantable identity) Deprecated. use opensearchservice module instead
Grant	IDomain.Jsii$Proxy.grantPathReadWrite(String path, IGrantable identity) Deprecated. use opensearchservice module instead
default Grant	IDomain.Jsii$Default.grantPathReadWrite(String path, IGrantable identity) Deprecated. use opensearchservice module instead
Grant	Domain.grantPathReadWrite(String path, IGrantable identity) Deprecated. use opensearchservice module instead
Grant	IDomain.grantPathWrite(String path, IGrantable identity) Deprecated. use opensearchservice module instead
Grant	IDomain.Jsii$Proxy.grantPathWrite(String path, IGrantable identity) Deprecated. use opensearchservice module instead
default Grant	IDomain.Jsii$Default.grantPathWrite(String path, IGrantable identity) Deprecated. use opensearchservice module instead
Grant	Domain.grantPathWrite(String path, IGrantable identity) Deprecated. use opensearchservice module instead
Grant	IDomain.grantRead(IGrantable identity) Deprecated. use opensearchservice module instead
Grant	IDomain.Jsii$Proxy.grantRead(IGrantable identity) Deprecated. use opensearchservice module instead
default Grant	IDomain.Jsii$Default.grantRead(IGrantable identity) Deprecated. use opensearchservice module instead
Grant	Domain.grantRead(IGrantable identity) Deprecated. use opensearchservice module instead
Grant	IDomain.grantReadWrite(IGrantable identity) Deprecated. use opensearchservice module instead
Grant	IDomain.Jsii$Proxy.grantReadWrite(IGrantable identity) Deprecated. use opensearchservice module instead
default Grant	IDomain.Jsii$Default.grantReadWrite(IGrantable identity) Deprecated. use opensearchservice module instead
Grant	Domain.grantReadWrite(IGrantable identity) Deprecated. use opensearchservice module instead
Grant	IDomain.grantWrite(IGrantable identity) Deprecated. use opensearchservice module instead
Grant	IDomain.Jsii$Proxy.grantWrite(IGrantable identity) Deprecated. use opensearchservice module instead
default Grant	IDomain.Jsii$Default.grantWrite(IGrantable identity) Deprecated. use opensearchservice module instead
Grant	Domain.grantWrite(IGrantable identity) Deprecated. use opensearchservice module instead

Uses of IGrantable in software.amazon.awscdk.services.events

Methods in software.amazon.awscdk.services.events with parameters of type IGrantable

Modifier and Type	Method and Description
static Grant	EventBus.grantAllPutEvents(IGrantable grantee) (experimental) Permits an IAM Principal to send custom events to EventBridge so that they can be matched to rules.
static Grant	EventBus.grantPutEvents(IGrantable grantee) Deprecated. use grantAllPutEvents instead
Grant	IEventBus.grantPutEventsTo(IGrantable grantee) (experimental) Grants an IAM Principal to send custom events to the eventBus so that they can be matched to rules.
Grant	IEventBus.Jsii$Proxy.grantPutEventsTo(IGrantable grantee) (experimental) Grants an IAM Principal to send custom events to the eventBus so that they can be matched to rules.
default Grant	IEventBus.Jsii$Default.grantPutEventsTo(IGrantable grantee) (experimental) Grants an IAM Principal to send custom events to the eventBus so that they can be matched to rules.
Grant	EventBus.grantPutEventsTo(IGrantable grantee) (experimental) Grants an IAM Principal to send custom events to the eventBus so that they can be matched to rules.

Uses of IGrantable in software.amazon.awscdk.services.glue

Subinterfaces of IGrantable in software.amazon.awscdk.services.glue

Modifier and Type	Interface and Description
interface	IJob (experimental) Interface representing a created or an imported Job.
static interface	IJob.Jsii$Default Internal default implementation for IJob.

Classes in software.amazon.awscdk.services.glue that implement IGrantable

Modifier and Type	Class and Description
static class	IJob.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
class	Job (experimental) A Glue Job.

Methods in software.amazon.awscdk.services.glue with parameters of type IGrantable

Modifier and Type	Method and Description
CodeConfig	AssetCode.bind(software.constructs.Construct scope, IGrantable grantable) (experimental) Called when the Job is initialized to allow this object to bind.
abstract CodeConfig	Code.bind(software.constructs.Construct scope, IGrantable grantable) (experimental) Called when the Job is initialized to allow this object to bind.
CodeConfig	S3Code.bind(software.constructs.Construct _scope, IGrantable grantable) (experimental) Called when the Job is initialized to allow this object to bind.
Grant	Table.grant(IGrantable grantee, List<String> actions) (experimental) Grant the given identity custom permissions.
Grant	Table.grantRead(IGrantable grantee) (experimental) Grant read permissions to the table and the underlying data stored in S3 to an IAM principal.
Grant	Table.grantReadWrite(IGrantable grantee) (experimental) Grant read and write permissions to the table and the underlying data stored in S3 to an IAM principal.
Grant	Table.grantToUnderlyingResources(IGrantable grantee, List<String> actions) (experimental) Grant the given identity custom permissions to ALL underlying resources of the table.
Grant	Table.grantWrite(IGrantable grantee) (experimental) Grant write permissions to the table and the underlying data stored in S3 to an IAM principal.

Method parameters in software.amazon.awscdk.services.glue with type arguments of type IGrantable

Modifier and Type	Method and Description
AssetCode.Builder	AssetCode.Builder.readers(List<? extends IGrantable> readers) (experimental) A list of principals that should be able to read this asset from S3.

Uses of IGrantable in software.amazon.awscdk.services.iam

Subinterfaces of IGrantable in software.amazon.awscdk.services.iam

Modifier and Type	Interface and Description
interface	IAssumeRolePrincipal (experimental) A type of principal that has more control over its own representation in AssumeRolePolicyDocuments.
static interface	IAssumeRolePrincipal.Jsii$Default Internal default implementation for IAssumeRolePrincipal.
interface	IComparablePrincipal (experimental) Interface for principals that can be compared.
static interface	IComparablePrincipal.Jsii$Default Internal default implementation for IComparablePrincipal.
static interface	IGrantable.Jsii$Default Internal default implementation for IGrantable.
interface	IGroup (experimental) Represents an IAM Group.
static interface	IGroup.Jsii$Default Internal default implementation for IGroup.
interface	IIdentity (experimental) A construct that represents an IAM principal, such as a user, group or role.
static interface	IIdentity.Jsii$Default Internal default implementation for IIdentity.
interface	IPrincipal (experimental) Represents a logical IAM principal.
static interface	IPrincipal.Jsii$Default Internal default implementation for IPrincipal.
interface	IRole (experimental) A Role object.
static interface	IRole.Jsii$Default Internal default implementation for IRole.
interface	IUser (experimental) Represents an IAM user.
static interface	IUser.Jsii$Default Internal default implementation for IUser.

Classes in software.amazon.awscdk.services.iam that implement IGrantable

Modifier and Type	Class and Description
class	AccountPrincipal (experimental) Specify AWS account ID as the principal entity in a policy to delegate authority to the account.
class	AccountRootPrincipal (experimental) Use the AWS account into which a stack is deployed as the principal entity in a policy.
class	Anyone Deprecated. use `AnyPrincipal`
class	AnyPrincipal (experimental) A principal representing all AWS identities in all accounts.
class	ArnPrincipal (experimental) Specify a principal by the Amazon Resource Name (ARN).
class	CanonicalUserPrincipal (experimental) A policy principal for canonicalUserIds - useful for S3 bucket policies that use Origin Access identities.
class	CompositePrincipal (experimental) Represents a principal that has multiple types of principals.
class	FederatedPrincipal (experimental) Principal entity that represents a federated identity provider such as Amazon Cognito, that can be used to provide temporary security credentials to users who have been authenticated.
class	Group (experimental) An IAM Group (collection of IAM users) lets you specify permissions for multiple users, which can make it easier to manage permissions for those users.
static class	IAssumeRolePrincipal.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
static class	IComparablePrincipal.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
static class	IGrantable.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
static class	IGroup.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
static class	IIdentity.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
static class	IPrincipal.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
static class	IRole.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
static class	IUser.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
class	LazyRole (experimental) An IAM role that only gets attached to the construct tree once it gets used, not before.
class	OpenIdConnectPrincipal (experimental) A principal that represents a federated identity provider as from a OpenID Connect provider.
class	OrganizationPrincipal (experimental) A principal that represents an AWS Organization.
class	PrincipalBase (experimental) Base class for policy principals.
class	PrincipalWithConditions (experimental) An IAM principal with additional conditions specifying when the policy is in effect.
class	Role (experimental) IAM Role.
class	SamlConsolePrincipal (experimental) Principal entity that represents a SAML federated identity provider for programmatic and AWS Management Console access.
class	SamlPrincipal (experimental) Principal entity that represents a SAML federated identity provider.
class	ServicePrincipal (experimental) An IAM principal that represents an AWS service (i.e.
class	SessionTagsPrincipal (experimental) Enables session tags on role assumptions from a principal.
class	StarPrincipal (experimental) A principal that uses a literal '*' in the IAM JSON language.
class	UnknownPrincipal (experimental) A principal for use in resources that need to have a role but it's unknown.
class	User (experimental) Define a new IAM user.
class	WebIdentityPrincipal (experimental) A principal that represents a federated identity provider as Web Identity such as Cognito, Amazon, Facebook, Google, etc.

Methods in software.amazon.awscdk.services.iam that return IGrantable

Modifier and Type	Method and Description
IGrantable	CommonGrantOptions.getGrantee() (experimental) The principal to grant to.
IGrantable	CommonGrantOptions.Jsii$Proxy.getGrantee()
IGrantable	GrantOnPrincipalOptions.Jsii$Proxy.getGrantee()
IGrantable	GrantOnPrincipalAndResourceOptions.Jsii$Proxy.getGrantee()
IGrantable	GrantWithResourceOptions.Jsii$Proxy.getGrantee()

Methods in software.amazon.awscdk.services.iam with parameters of type IGrantable

Modifier and Type	Method and Description
static Grant	Grant.drop(IGrantable grantee, String _intent) (experimental) Returns a "no-op" `Grant` object which represents a "dropped grant".
CommonGrantOptions.Builder	CommonGrantOptions.Builder.grantee(IGrantable grantee) Sets the value of CommonGrantOptions.getGrantee()
GrantOnPrincipalOptions.Builder	GrantOnPrincipalOptions.Builder.grantee(IGrantable grantee) Sets the value of CommonGrantOptions.getGrantee()
GrantOnPrincipalAndResourceOptions.Builder	GrantOnPrincipalAndResourceOptions.Builder.grantee(IGrantable grantee) Sets the value of CommonGrantOptions.getGrantee()
GrantWithResourceOptions.Builder	GrantWithResourceOptions.Builder.grantee(IGrantable grantee) Sets the value of CommonGrantOptions.getGrantee()

Uses of IGrantable in software.amazon.awscdk.services.iotevents

Methods in software.amazon.awscdk.services.iotevents with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	IInput.grant(IGrantable grantee, String... actions) (experimental) Grant the indicated permissions on this input to the given IAM principal (Role/Group/User).
Grant	IInput.Jsii$Proxy.grant(IGrantable grantee, String... actions) (experimental) Grant the indicated permissions on this input to the given IAM principal (Role/Group/User).
default Grant	IInput.Jsii$Default.grant(IGrantable grantee, String... actions) (experimental) Grant the indicated permissions on this input to the given IAM principal (Role/Group/User).
Grant	Input.grant(IGrantable grantee, String... actions) (experimental) Grant the indicated permissions on this input to the given IAM principal (Role/Group/User).
Grant	IInput.grantWrite(IGrantable grantee) (experimental) Grant write permissions on this input and its contents to an IAM principal (Role/Group/User).
Grant	IInput.Jsii$Proxy.grantWrite(IGrantable grantee) (experimental) Grant write permissions on this input and its contents to an IAM principal (Role/Group/User).
default Grant	IInput.Jsii$Default.grantWrite(IGrantable grantee) (experimental) Grant write permissions on this input and its contents to an IAM principal (Role/Group/User).
Grant	Input.grantWrite(IGrantable grantee) (experimental) Grant write permissions on this input and its contents to an IAM principal (Role/Group/User).

Uses of IGrantable in software.amazon.awscdk.services.kinesis

Methods in software.amazon.awscdk.services.kinesis with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	Stream.grant(IGrantable grantee, String... actions) (experimental) Grant the indicated permissions on this stream to the given IAM principal (Role/Group/User).
Grant	IStream.grant(IGrantable grantee, String... actions) (experimental) Grant the indicated permissions on this stream to the provided IAM principal.
Grant	IStream.Jsii$Proxy.grant(IGrantable grantee, String... actions) (experimental) Grant the indicated permissions on this stream to the provided IAM principal.
default Grant	IStream.Jsii$Default.grant(IGrantable grantee, String... actions) (experimental) Grant the indicated permissions on this stream to the provided IAM principal.
Grant	Stream.grantRead(IGrantable grantee) (experimental) Grant read permissions for this stream and its contents to an IAM principal (Role/Group/User).
Grant	IStream.grantRead(IGrantable grantee) (experimental) Grant read permissions for this stream and its contents to an IAM principal (Role/Group/User).
Grant	IStream.Jsii$Proxy.grantRead(IGrantable grantee) (experimental) Grant read permissions for this stream and its contents to an IAM principal (Role/Group/User).
default Grant	IStream.Jsii$Default.grantRead(IGrantable grantee) (experimental) Grant read permissions for this stream and its contents to an IAM principal (Role/Group/User).
Grant	Stream.grantReadWrite(IGrantable grantee) (experimental) Grants read/write permissions for this stream and its contents to an IAM principal (Role/Group/User).
Grant	IStream.grantReadWrite(IGrantable grantee) (experimental) Grants read/write permissions for this stream and its contents to an IAM principal (Role/Group/User).
Grant	IStream.Jsii$Proxy.grantReadWrite(IGrantable grantee) (experimental) Grants read/write permissions for this stream and its contents to an IAM principal (Role/Group/User).
default Grant	IStream.Jsii$Default.grantReadWrite(IGrantable grantee) (experimental) Grants read/write permissions for this stream and its contents to an IAM principal (Role/Group/User).
Grant	Stream.grantWrite(IGrantable grantee) (experimental) Grant write permissions for this stream and its contents to an IAM principal (Role/Group/User).
Grant	IStream.grantWrite(IGrantable grantee) (experimental) Grant write permissions for this stream and its contents to an IAM principal (Role/Group/User).
Grant	IStream.Jsii$Proxy.grantWrite(IGrantable grantee) (experimental) Grant write permissions for this stream and its contents to an IAM principal (Role/Group/User).
default Grant	IStream.Jsii$Default.grantWrite(IGrantable grantee) (experimental) Grant write permissions for this stream and its contents to an IAM principal (Role/Group/User).

Uses of IGrantable in software.amazon.awscdk.services.kinesis.analytics.flink

Subinterfaces of IGrantable in software.amazon.awscdk.services.kinesis.analytics.flink

Modifier and Type	Interface and Description
interface	IApplication (experimental) An interface expressing the public properties on both an imported and CDK-created Flink application.
static interface	IApplication.Jsii$Default Internal default implementation for IApplication.

Classes in software.amazon.awscdk.services.kinesis.analytics.flink that implement IGrantable

Modifier and Type	Class and Description
class	Application (experimental) The L2 construct for Flink Kinesis Data Applications.
static class	IApplication.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.

Uses of IGrantable in software.amazon.awscdk.services.kinesisfirehose

Subinterfaces of IGrantable in software.amazon.awscdk.services.kinesisfirehose

Modifier and Type	Interface and Description
interface	IDeliveryStream (experimental) Represents a Kinesis Data Firehose delivery stream.
static interface	IDeliveryStream.Jsii$Default Internal default implementation for IDeliveryStream.

Classes in software.amazon.awscdk.services.kinesisfirehose that implement IGrantable

Modifier and Type	Class and Description
class	DeliveryStream (experimental) Create a Kinesis Data Firehose delivery stream.
static class	IDeliveryStream.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.

Methods in software.amazon.awscdk.services.kinesisfirehose with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	DeliveryStream.grant(IGrantable grantee, String... actions) (experimental) Grant the `grantee` identity permissions to perform `actions`.
Grant	IDeliveryStream.grant(IGrantable grantee, String... actions) (experimental) Grant the `grantee` identity permissions to perform `actions`.
Grant	IDeliveryStream.Jsii$Proxy.grant(IGrantable grantee, String... actions) (experimental) Grant the `grantee` identity permissions to perform `actions`.
default Grant	IDeliveryStream.Jsii$Default.grant(IGrantable grantee, String... actions) (experimental) Grant the `grantee` identity permissions to perform `actions`.
Grant	DeliveryStream.grantPutRecords(IGrantable grantee) (experimental) Grant the `grantee` identity permissions to perform `firehose:PutRecord` and `firehose:PutRecordBatch` actions on this delivery stream.
Grant	IDeliveryStream.grantPutRecords(IGrantable grantee) (experimental) Grant the `grantee` identity permissions to perform `firehose:PutRecord` and `firehose:PutRecordBatch` actions on this delivery stream.
Grant	IDeliveryStream.Jsii$Proxy.grantPutRecords(IGrantable grantee) (experimental) Grant the `grantee` identity permissions to perform `firehose:PutRecord` and `firehose:PutRecordBatch` actions on this delivery stream.
default Grant	IDeliveryStream.Jsii$Default.grantPutRecords(IGrantable grantee) (experimental) Grant the `grantee` identity permissions to perform `firehose:PutRecord` and `firehose:PutRecordBatch` actions on this delivery stream.

Uses of IGrantable in software.amazon.awscdk.services.kms

Classes in software.amazon.awscdk.services.kms that implement IGrantable

Modifier and Type	Class and Description
class	ViaServicePrincipal (experimental) A principal to allow access to a key if it's being used through another AWS service.

Methods in software.amazon.awscdk.services.kms with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	IKey.grant(IGrantable grantee, String... actions) (experimental) Grant the indicated permissions on this key to the given principal.
Grant	IKey.Jsii$Proxy.grant(IGrantable grantee, String... actions) (experimental) Grant the indicated permissions on this key to the given principal.
default Grant	IKey.Jsii$Default.grant(IGrantable grantee, String... actions) (experimental) Grant the indicated permissions on this key to the given principal.
Grant	IAlias.Jsii$Proxy.grant(IGrantable grantee, String... actions) (experimental) Grant the indicated permissions on this key to the given principal.
default Grant	IAlias.Jsii$Default.grant(IGrantable grantee, String... actions) (experimental) Grant the indicated permissions on this key to the given principal.
Grant	Key.grant(IGrantable grantee, String... actions) (experimental) Grant the indicated permissions on this key to the given principal.
Grant	Alias.grant(IGrantable grantee, String... actions) (experimental) Grant the indicated permissions on this key to the given principal.
Grant	Key.grantAdmin(IGrantable grantee) (experimental) Grant admins permissions using this key to the given principal.
Grant	IKey.grantDecrypt(IGrantable grantee) (experimental) Grant decryption permissions using this key to the given principal.
Grant	IKey.Jsii$Proxy.grantDecrypt(IGrantable grantee) (experimental) Grant decryption permissions using this key to the given principal.
default Grant	IKey.Jsii$Default.grantDecrypt(IGrantable grantee) (experimental) Grant decryption permissions using this key to the given principal.
Grant	IAlias.Jsii$Proxy.grantDecrypt(IGrantable grantee) (experimental) Grant decryption permissions using this key to the given principal.
default Grant	IAlias.Jsii$Default.grantDecrypt(IGrantable grantee) (experimental) Grant decryption permissions using this key to the given principal.
Grant	Key.grantDecrypt(IGrantable grantee) (experimental) Grant decryption permissions using this key to the given principal.
Grant	Alias.grantDecrypt(IGrantable grantee) (experimental) Grant decryption permissions using this key to the given principal.
Grant	IKey.grantEncrypt(IGrantable grantee) (experimental) Grant encryption permissions using this key to the given principal.
Grant	IKey.Jsii$Proxy.grantEncrypt(IGrantable grantee) (experimental) Grant encryption permissions using this key to the given principal.
default Grant	IKey.Jsii$Default.grantEncrypt(IGrantable grantee) (experimental) Grant encryption permissions using this key to the given principal.
Grant	IAlias.Jsii$Proxy.grantEncrypt(IGrantable grantee) (experimental) Grant encryption permissions using this key to the given principal.
default Grant	IAlias.Jsii$Default.grantEncrypt(IGrantable grantee) (experimental) Grant encryption permissions using this key to the given principal.
Grant	Key.grantEncrypt(IGrantable grantee) (experimental) Grant encryption permissions using this key to the given principal.
Grant	Alias.grantEncrypt(IGrantable grantee) (experimental) Grant encryption permissions using this key to the given principal.
Grant	IKey.grantEncryptDecrypt(IGrantable grantee) (experimental) Grant encryption and decryption permissions using this key to the given principal.
Grant	IKey.Jsii$Proxy.grantEncryptDecrypt(IGrantable grantee) (experimental) Grant encryption and decryption permissions using this key to the given principal.
default Grant	IKey.Jsii$Default.grantEncryptDecrypt(IGrantable grantee) (experimental) Grant encryption and decryption permissions using this key to the given principal.
Grant	IAlias.Jsii$Proxy.grantEncryptDecrypt(IGrantable grantee) (experimental) Grant encryption and decryption permissions using this key to the given principal.
default Grant	IAlias.Jsii$Default.grantEncryptDecrypt(IGrantable grantee) (experimental) Grant encryption and decryption permissions using this key to the given principal.
Grant	Key.grantEncryptDecrypt(IGrantable grantee) (experimental) Grant encryption and decryption permissions using this key to the given principal.
Grant	Alias.grantEncryptDecrypt(IGrantable grantee) (experimental) Grant encryption and decryption permissions using this key to the given principal.

Uses of IGrantable in software.amazon.awscdk.services.lambda

Subinterfaces of IGrantable in software.amazon.awscdk.services.lambda

Modifier and Type	Interface and Description
interface	IAlias
static interface	IAlias.Jsii$Default Internal default implementation for IAlias.
interface	IFunction
static interface	IFunction.Jsii$Default Internal default implementation for IFunction.
interface	IVersion
static interface	IVersion.Jsii$Default Internal default implementation for IVersion.

Classes in software.amazon.awscdk.services.lambda that implement IGrantable

Modifier and Type	Class and Description
class	Alias (experimental) A new alias to a particular version of a Lambda function.
class	DockerImageFunction (experimental) Create a lambda function where the handler is a docker image.
class	Function (experimental) Deploys a file from inside the construct library as a function.
class	FunctionBase
static class	IAlias.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
static class	IFunction.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
static class	IVersion.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
class	QualifiedFunctionBase
class	SingletonFunction (experimental) A Lambda that will only ever be added to a stack once.
class	Version (experimental) Tag the current state of a Function with a Version number.

Methods in software.amazon.awscdk.services.lambda with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	IFunction.grantInvoke(IGrantable identity) (experimental) Grant the given identity permissions to invoke this Lambda.
Grant	IFunction.Jsii$Proxy.grantInvoke(IGrantable identity) (experimental) Grant the given identity permissions to invoke this Lambda.
default Grant	IFunction.Jsii$Default.grantInvoke(IGrantable identity) (experimental) Grant the given identity permissions to invoke this Lambda.
Grant	IAlias.Jsii$Proxy.grantInvoke(IGrantable identity) (experimental) Grant the given identity permissions to invoke this Lambda.
default Grant	IAlias.Jsii$Default.grantInvoke(IGrantable identity) (experimental) Grant the given identity permissions to invoke this Lambda.
Grant	IVersion.Jsii$Proxy.grantInvoke(IGrantable identity) (experimental) Grant the given identity permissions to invoke this Lambda.
default Grant	IVersion.Jsii$Default.grantInvoke(IGrantable identity) (experimental) Grant the given identity permissions to invoke this Lambda.
Grant	FunctionBase.grantInvoke(IGrantable grantee) (experimental) Grant the given identity permissions to invoke this Lambda.
Grant	IFunction.grantInvokeUrl(IGrantable identity) (experimental) Grant the given identity permissions to invoke this Lambda Function URL.
Grant	IFunction.Jsii$Proxy.grantInvokeUrl(IGrantable identity) (experimental) Grant the given identity permissions to invoke this Lambda Function URL.
default Grant	IFunction.Jsii$Default.grantInvokeUrl(IGrantable identity) (experimental) Grant the given identity permissions to invoke this Lambda Function URL.
Grant	FunctionUrl.grantInvokeUrl(IGrantable grantee) (experimental) Grant the given identity permissions to invoke this Lambda Function URL.
Grant	IAlias.Jsii$Proxy.grantInvokeUrl(IGrantable identity) (experimental) Grant the given identity permissions to invoke this Lambda Function URL.
default Grant	IAlias.Jsii$Default.grantInvokeUrl(IGrantable identity) (experimental) Grant the given identity permissions to invoke this Lambda Function URL.
Grant	IVersion.Jsii$Proxy.grantInvokeUrl(IGrantable identity) (experimental) Grant the given identity permissions to invoke this Lambda Function URL.
default Grant	IVersion.Jsii$Default.grantInvokeUrl(IGrantable identity) (experimental) Grant the given identity permissions to invoke this Lambda Function URL.
Grant	FunctionBase.grantInvokeUrl(IGrantable grantee) (experimental) Grant the given identity permissions to invoke this Lambda Function URL.
Grant	IFunctionUrl.grantInvokeUrl(IGrantable identity) (experimental) Grant the given identity permissions to invoke this Lambda Function URL.
Grant	IFunctionUrl.Jsii$Proxy.grantInvokeUrl(IGrantable identity) (experimental) Grant the given identity permissions to invoke this Lambda Function URL.
default Grant	IFunctionUrl.Jsii$Default.grantInvokeUrl(IGrantable identity) (experimental) Grant the given identity permissions to invoke this Lambda Function URL.

Method parameters in software.amazon.awscdk.services.lambda with type arguments of type IGrantable

Modifier and Type	Method and Description
AssetCode.Builder	AssetCode.Builder.readers(List<? extends IGrantable> readers) (experimental) A list of principals that should be able to read this asset from S3.

Uses of IGrantable in software.amazon.awscdk.services.lambda.go

Classes in software.amazon.awscdk.services.lambda.go that implement IGrantable

Modifier and Type	Class and Description
class	GoFunction (experimental) A Golang Lambda function.

Uses of IGrantable in software.amazon.awscdk.services.lambda.nodejs

Classes in software.amazon.awscdk.services.lambda.nodejs that implement IGrantable

Modifier and Type	Class and Description
class	NodejsFunction (experimental) A Node.js Lambda function bundled using esbuild.

Uses of IGrantable in software.amazon.awscdk.services.lambda.python

Classes in software.amazon.awscdk.services.lambda.python that implement IGrantable

Modifier and Type	Class and Description
class	PythonFunction (experimental) A Python Lambda function.

Uses of IGrantable in software.amazon.awscdk.services.logs

Methods in software.amazon.awscdk.services.logs with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	ILogGroup.grant(IGrantable grantee, String... actions) (experimental) Give the indicated permissions on this log group and all streams.
Grant	ILogGroup.Jsii$Proxy.grant(IGrantable grantee, String... actions) (experimental) Give the indicated permissions on this log group and all streams.
default Grant	ILogGroup.Jsii$Default.grant(IGrantable grantee, String... actions) (experimental) Give the indicated permissions on this log group and all streams.
Grant	LogGroup.grant(IGrantable grantee, String... actions) (experimental) Give the indicated permissions on this log group and all streams.
Grant	ILogGroup.grantWrite(IGrantable grantee) (experimental) Give permissions to write to create and write to streams in this log group.
Grant	ILogGroup.Jsii$Proxy.grantWrite(IGrantable grantee) (experimental) Give permissions to write to create and write to streams in this log group.
default Grant	ILogGroup.Jsii$Default.grantWrite(IGrantable grantee) (experimental) Give permissions to write to create and write to streams in this log group.
Grant	LogGroup.grantWrite(IGrantable grantee) (experimental) Give permissions to create and write to streams in this log group.

Uses of IGrantable in software.amazon.awscdk.services.neptune

Methods in software.amazon.awscdk.services.neptune with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	IDatabaseCluster.grantConnect(IGrantable grantee) (experimental) Grant the given identity connection access to the database.
Grant	IDatabaseCluster.Jsii$Proxy.grantConnect(IGrantable grantee) (experimental) Grant the given identity connection access to the database.
default Grant	IDatabaseCluster.Jsii$Default.grantConnect(IGrantable grantee) (experimental) Grant the given identity connection access to the database.
Grant	DatabaseClusterBase.grantConnect(IGrantable grantee) (experimental) Grant the given identity connection access to the database.

Uses of IGrantable in software.amazon.awscdk.services.opensearchservice

Methods in software.amazon.awscdk.services.opensearchservice with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	IDomain.grantIndexRead(String index, IGrantable identity) (experimental) Grant read permissions for an index in this domain to an IAM principal (Role/Group/User).
Grant	IDomain.Jsii$Proxy.grantIndexRead(String index, IGrantable identity) (experimental) Grant read permissions for an index in this domain to an IAM principal (Role/Group/User).
default Grant	IDomain.Jsii$Default.grantIndexRead(String index, IGrantable identity) (experimental) Grant read permissions for an index in this domain to an IAM principal (Role/Group/User).
Grant	Domain.grantIndexRead(String index, IGrantable identity) (experimental) Grant read permissions for an index in this domain to an IAM principal (Role/Group/User).
Grant	IDomain.grantIndexReadWrite(String index, IGrantable identity) (experimental) Grant read/write permissions for an index in this domain to an IAM principal (Role/Group/User).
Grant	IDomain.Jsii$Proxy.grantIndexReadWrite(String index, IGrantable identity) (experimental) Grant read/write permissions for an index in this domain to an IAM principal (Role/Group/User).
default Grant	IDomain.Jsii$Default.grantIndexReadWrite(String index, IGrantable identity) (experimental) Grant read/write permissions for an index in this domain to an IAM principal (Role/Group/User).
Grant	Domain.grantIndexReadWrite(String index, IGrantable identity) (experimental) Grant read/write permissions for an index in this domain to an IAM principal (Role/Group/User).
Grant	IDomain.grantIndexWrite(String index, IGrantable identity) (experimental) Grant write permissions for an index in this domain to an IAM principal (Role/Group/User).
Grant	IDomain.Jsii$Proxy.grantIndexWrite(String index, IGrantable identity) (experimental) Grant write permissions for an index in this domain to an IAM principal (Role/Group/User).
default Grant	IDomain.Jsii$Default.grantIndexWrite(String index, IGrantable identity) (experimental) Grant write permissions for an index in this domain to an IAM principal (Role/Group/User).
Grant	Domain.grantIndexWrite(String index, IGrantable identity) (experimental) Grant write permissions for an index in this domain to an IAM principal (Role/Group/User).
Grant	IDomain.grantPathRead(String path, IGrantable identity) (experimental) Grant read permissions for a specific path in this domain to an IAM principal (Role/Group/User).
Grant	IDomain.Jsii$Proxy.grantPathRead(String path, IGrantable identity) (experimental) Grant read permissions for a specific path in this domain to an IAM principal (Role/Group/User).
default Grant	IDomain.Jsii$Default.grantPathRead(String path, IGrantable identity) (experimental) Grant read permissions for a specific path in this domain to an IAM principal (Role/Group/User).
Grant	Domain.grantPathRead(String path, IGrantable identity) (experimental) Grant read permissions for a specific path in this domain to an IAM principal (Role/Group/User).
Grant	IDomain.grantPathReadWrite(String path, IGrantable identity) (experimental) Grant read/write permissions for a specific path in this domain to an IAM principal (Role/Group/User).
Grant	IDomain.Jsii$Proxy.grantPathReadWrite(String path, IGrantable identity) (experimental) Grant read/write permissions for a specific path in this domain to an IAM principal (Role/Group/User).
default Grant	IDomain.Jsii$Default.grantPathReadWrite(String path, IGrantable identity) (experimental) Grant read/write permissions for a specific path in this domain to an IAM principal (Role/Group/User).
Grant	Domain.grantPathReadWrite(String path, IGrantable identity) (experimental) Grant read/write permissions for a specific path in this domain to an IAM principal (Role/Group/User).
Grant	IDomain.grantPathWrite(String path, IGrantable identity) (experimental) Grant write permissions for a specific path in this domain to an IAM principal (Role/Group/User).
Grant	IDomain.Jsii$Proxy.grantPathWrite(String path, IGrantable identity) (experimental) Grant write permissions for a specific path in this domain to an IAM principal (Role/Group/User).
default Grant	IDomain.Jsii$Default.grantPathWrite(String path, IGrantable identity) (experimental) Grant write permissions for a specific path in this domain to an IAM principal (Role/Group/User).
Grant	Domain.grantPathWrite(String path, IGrantable identity) (experimental) Grant write permissions for a specific path in this domain to an IAM principal (Role/Group/User).
Grant	IDomain.grantRead(IGrantable identity) (experimental) Grant read permissions for this domain and its contents to an IAM principal (Role/Group/User).
Grant	IDomain.Jsii$Proxy.grantRead(IGrantable identity) (experimental) Grant read permissions for this domain and its contents to an IAM principal (Role/Group/User).
default Grant	IDomain.Jsii$Default.grantRead(IGrantable identity) (experimental) Grant read permissions for this domain and its contents to an IAM principal (Role/Group/User).
Grant	Domain.grantRead(IGrantable identity) (experimental) Grant read permissions for this domain and its contents to an IAM principal (Role/Group/User).
Grant	IDomain.grantReadWrite(IGrantable identity) (experimental) Grant read/write permissions for this domain and its contents to an IAM principal (Role/Group/User).
Grant	IDomain.Jsii$Proxy.grantReadWrite(IGrantable identity) (experimental) Grant read/write permissions for this domain and its contents to an IAM principal (Role/Group/User).
default Grant	IDomain.Jsii$Default.grantReadWrite(IGrantable identity) (experimental) Grant read/write permissions for this domain and its contents to an IAM principal (Role/Group/User).
Grant	Domain.grantReadWrite(IGrantable identity) (experimental) Grant read/write permissions for this domain and its contents to an IAM principal (Role/Group/User).
Grant	IDomain.grantWrite(IGrantable identity) (experimental) Grant write permissions for this domain and its contents to an IAM principal (Role/Group/User).
Grant	IDomain.Jsii$Proxy.grantWrite(IGrantable identity) (experimental) Grant write permissions for this domain and its contents to an IAM principal (Role/Group/User).
default Grant	IDomain.Jsii$Default.grantWrite(IGrantable identity) (experimental) Grant write permissions for this domain and its contents to an IAM principal (Role/Group/User).
Grant	Domain.grantWrite(IGrantable identity) (experimental) Grant write permissions for this domain and its contents to an IAM principal (Role/Group/User).

Uses of IGrantable in software.amazon.awscdk.services.rds

Methods in software.amazon.awscdk.services.rds with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	DatabaseProxy.grantConnect(IGrantable grantee) (experimental) Grant the given identity connection access to the proxy.
Grant	IDatabaseInstance.grantConnect(IGrantable grantee) (experimental) Grant the given identity connection access to the database.
Grant	IDatabaseInstance.Jsii$Proxy.grantConnect(IGrantable grantee) (experimental) Grant the given identity connection access to the database.
default Grant	IDatabaseInstance.Jsii$Default.grantConnect(IGrantable grantee) (experimental) Grant the given identity connection access to the database.
Grant	IDatabaseProxy.grantConnect(IGrantable grantee) (experimental) Grant the given identity connection access to the proxy.
Grant	IDatabaseProxy.Jsii$Proxy.grantConnect(IGrantable grantee) (experimental) Grant the given identity connection access to the proxy.
Grant	DatabaseInstanceBase.grantConnect(IGrantable grantee) (experimental) Grant the given identity connection access to the database.
Grant	DatabaseProxy.grantConnect(IGrantable grantee, String dbUser) (experimental) Grant the given identity connection access to the proxy.
Grant	IDatabaseProxy.grantConnect(IGrantable grantee, String dbUser) (experimental) Grant the given identity connection access to the proxy.
Grant	IDatabaseProxy.Jsii$Proxy.grantConnect(IGrantable grantee, String dbUser) (experimental) Grant the given identity connection access to the proxy.
default Grant	IDatabaseProxy.Jsii$Default.grantConnect(IGrantable grantee, String dbUser) (experimental) Grant the given identity connection access to the proxy.
Grant	ServerlessClusterFromSnapshot.grantDataApiAccess(IGrantable grantee) (experimental) Grant the given identity to access to the Data API, including read access to the secret attached to the cluster if present.
Grant	IServerlessCluster.grantDataApiAccess(IGrantable grantee) (experimental) Grant the given identity to access to the Data API.
Grant	IServerlessCluster.Jsii$Proxy.grantDataApiAccess(IGrantable grantee) (experimental) Grant the given identity to access to the Data API.
default Grant	IServerlessCluster.Jsii$Default.grantDataApiAccess(IGrantable grantee) (experimental) Grant the given identity to access to the Data API.
Grant	ServerlessCluster.grantDataApiAccess(IGrantable grantee) (experimental) Grant the given identity to access to the Data API, including read access to the secret attached to the cluster if present.

Uses of IGrantable in software.amazon.awscdk.services.s3

Methods in software.amazon.awscdk.services.s3 with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	BucketBase.grantDelete(IGrantable identity) (experimental) Grants s3:DeleteObject* permission to an IAM principal for objects in this bucket.
Grant	IBucket.grantDelete(IGrantable identity) (experimental) Grants s3:DeleteObject* permission to an IAM principal for objects in this bucket.
Grant	IBucket.Jsii$Proxy.grantDelete(IGrantable identity) (experimental) Grants s3:DeleteObject* permission to an IAM principal for objects in this bucket.
Grant	BucketBase.grantDelete(IGrantable identity, Object objectsKeyPattern) (experimental) Grants s3:DeleteObject* permission to an IAM principal for objects in this bucket.
Grant	IBucket.grantDelete(IGrantable identity, Object objectsKeyPattern) (experimental) Grants s3:DeleteObject* permission to an IAM principal for objects in this bucket.
Grant	IBucket.Jsii$Proxy.grantDelete(IGrantable identity, Object objectsKeyPattern) (experimental) Grants s3:DeleteObject* permission to an IAM principal for objects in this bucket.
default Grant	IBucket.Jsii$Default.grantDelete(IGrantable identity, Object objectsKeyPattern) (experimental) Grants s3:DeleteObject* permission to an IAM principal for objects in this bucket.
Grant	BucketBase.grantPut(IGrantable identity) (experimental) Grants s3:PutObject* and s3:Abort* permissions for this bucket to an IAM principal.
Grant	IBucket.grantPut(IGrantable identity) (experimental) Grants s3:PutObject* and s3:Abort* permissions for this bucket to an IAM principal.
Grant	IBucket.Jsii$Proxy.grantPut(IGrantable identity) (experimental) Grants s3:PutObject* and s3:Abort* permissions for this bucket to an IAM principal.
Grant	BucketBase.grantPut(IGrantable identity, Object objectsKeyPattern) (experimental) Grants s3:PutObject* and s3:Abort* permissions for this bucket to an IAM principal.
Grant	IBucket.grantPut(IGrantable identity, Object objectsKeyPattern) (experimental) Grants s3:PutObject* and s3:Abort* permissions for this bucket to an IAM principal.
Grant	IBucket.Jsii$Proxy.grantPut(IGrantable identity, Object objectsKeyPattern) (experimental) Grants s3:PutObject* and s3:Abort* permissions for this bucket to an IAM principal.
default Grant	IBucket.Jsii$Default.grantPut(IGrantable identity, Object objectsKeyPattern) (experimental) Grants s3:PutObject* and s3:Abort* permissions for this bucket to an IAM principal.
Grant	BucketBase.grantPutAcl(IGrantable identity) (experimental) Grant the given IAM identity permissions to modify the ACLs of objects in the given Bucket.
Grant	IBucket.grantPutAcl(IGrantable identity) (experimental) Grant the given IAM identity permissions to modify the ACLs of objects in the given Bucket.
Grant	IBucket.Jsii$Proxy.grantPutAcl(IGrantable identity) (experimental) Grant the given IAM identity permissions to modify the ACLs of objects in the given Bucket.
Grant	BucketBase.grantPutAcl(IGrantable identity, String objectsKeyPattern) (experimental) Grant the given IAM identity permissions to modify the ACLs of objects in the given Bucket.
Grant	IBucket.grantPutAcl(IGrantable identity, String objectsKeyPattern) (experimental) Grant the given IAM identity permissions to modify the ACLs of objects in the given Bucket.
Grant	IBucket.Jsii$Proxy.grantPutAcl(IGrantable identity, String objectsKeyPattern) (experimental) Grant the given IAM identity permissions to modify the ACLs of objects in the given Bucket.
default Grant	IBucket.Jsii$Default.grantPutAcl(IGrantable identity, String objectsKeyPattern) (experimental) Grant the given IAM identity permissions to modify the ACLs of objects in the given Bucket.
Grant	BucketBase.grantRead(IGrantable identity) (experimental) Grant read permissions for this bucket and it's contents to an IAM principal (Role/Group/User).
Grant	IBucket.grantRead(IGrantable identity) (experimental) Grant read permissions for this bucket and it's contents to an IAM principal (Role/Group/User).
Grant	IBucket.Jsii$Proxy.grantRead(IGrantable identity) (experimental) Grant read permissions for this bucket and it's contents to an IAM principal (Role/Group/User).
Grant	BucketBase.grantRead(IGrantable identity, Object objectsKeyPattern) (experimental) Grant read permissions for this bucket and it's contents to an IAM principal (Role/Group/User).
Grant	IBucket.grantRead(IGrantable identity, Object objectsKeyPattern) (experimental) Grant read permissions for this bucket and it's contents to an IAM principal (Role/Group/User).
Grant	IBucket.Jsii$Proxy.grantRead(IGrantable identity, Object objectsKeyPattern) (experimental) Grant read permissions for this bucket and it's contents to an IAM principal (Role/Group/User).
default Grant	IBucket.Jsii$Default.grantRead(IGrantable identity, Object objectsKeyPattern) (experimental) Grant read permissions for this bucket and it's contents to an IAM principal (Role/Group/User).
Grant	BucketBase.grantReadWrite(IGrantable identity) (experimental) Grants read/write permissions for this bucket and it's contents to an IAM principal (Role/Group/User).
Grant	IBucket.grantReadWrite(IGrantable identity) (experimental) Grants read/write permissions for this bucket and it's contents to an IAM principal (Role/Group/User).
Grant	IBucket.Jsii$Proxy.grantReadWrite(IGrantable identity) (experimental) Grants read/write permissions for this bucket and it's contents to an IAM principal (Role/Group/User).
Grant	BucketBase.grantReadWrite(IGrantable identity, Object objectsKeyPattern) (experimental) Grants read/write permissions for this bucket and it's contents to an IAM principal (Role/Group/User).
Grant	IBucket.grantReadWrite(IGrantable identity, Object objectsKeyPattern) (experimental) Grants read/write permissions for this bucket and it's contents to an IAM principal (Role/Group/User).
Grant	IBucket.Jsii$Proxy.grantReadWrite(IGrantable identity, Object objectsKeyPattern) (experimental) Grants read/write permissions for this bucket and it's contents to an IAM principal (Role/Group/User).
default Grant	IBucket.Jsii$Default.grantReadWrite(IGrantable identity, Object objectsKeyPattern) (experimental) Grants read/write permissions for this bucket and it's contents to an IAM principal (Role/Group/User).
Grant	BucketBase.grantWrite(IGrantable identity) (experimental) Grant write permissions to this bucket to an IAM principal.
Grant	IBucket.grantWrite(IGrantable identity) (experimental) Grant write permissions to this bucket to an IAM principal.
Grant	IBucket.Jsii$Proxy.grantWrite(IGrantable identity) (experimental) Grant write permissions to this bucket to an IAM principal.
Grant	BucketBase.grantWrite(IGrantable identity, Object objectsKeyPattern) (experimental) Grant write permissions to this bucket to an IAM principal.
Grant	IBucket.grantWrite(IGrantable identity, Object objectsKeyPattern) (experimental) Grant write permissions to this bucket to an IAM principal.
Grant	IBucket.Jsii$Proxy.grantWrite(IGrantable identity, Object objectsKeyPattern) (experimental) Grant write permissions to this bucket to an IAM principal.
default Grant	IBucket.Jsii$Default.grantWrite(IGrantable identity, Object objectsKeyPattern) (experimental) Grant write permissions to this bucket to an IAM principal.

Uses of IGrantable in software.amazon.awscdk.services.s3.assets

Methods in software.amazon.awscdk.services.s3.assets that return types with arguments of type IGrantable

Modifier and Type	Method and Description
default List<IGrantable>	AssetOptions.getReaders() (experimental) A list of principals that should be able to read this asset from S3.
List<IGrantable>	AssetOptions.Jsii$Proxy.getReaders()
List<IGrantable>	AssetProps.Jsii$Proxy.getReaders()

Methods in software.amazon.awscdk.services.s3.assets with parameters of type IGrantable

Modifier and Type	Method and Description
void	Asset.grantRead(IGrantable grantee) (experimental) Grants read permissions to the principal on the assets bucket.

Method parameters in software.amazon.awscdk.services.s3.assets with type arguments of type IGrantable

Modifier and Type	Method and Description
AssetOptions.Builder	AssetOptions.Builder.readers(List<? extends IGrantable> readers) Sets the value of AssetOptions.getReaders()
Asset.Builder	Asset.Builder.readers(List<? extends IGrantable> readers) (experimental) A list of principals that should be able to read this asset from S3.
AssetProps.Builder	AssetProps.Builder.readers(List<? extends IGrantable> readers) Sets the value of AssetOptions.getReaders()

Uses of IGrantable in software.amazon.awscdk.services.secretsmanager

Methods in software.amazon.awscdk.services.secretsmanager with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	SecretTargetAttachment.grantRead(IGrantable grantee) (experimental) Grants reading the secret value to some role.
Grant	ISecret.grantRead(IGrantable grantee) (experimental) Grants reading the secret value to some role.
Grant	ISecret.Jsii$Proxy.grantRead(IGrantable grantee) (experimental) Grants reading the secret value to some role.
Grant	Secret.grantRead(IGrantable grantee) (experimental) Grants reading the secret value to some role.
Grant	ISecretTargetAttachment.Jsii$Proxy.grantRead(IGrantable grantee) (experimental) Grants reading the secret value to some role.
Grant	SecretTargetAttachment.grantRead(IGrantable grantee, List<String> versionStages) (experimental) Grants reading the secret value to some role.
Grant	ISecret.grantRead(IGrantable grantee, List<String> versionStages) (experimental) Grants reading the secret value to some role.
Grant	ISecret.Jsii$Proxy.grantRead(IGrantable grantee, List<String> versionStages) (experimental) Grants reading the secret value to some role.
default Grant	ISecret.Jsii$Default.grantRead(IGrantable grantee, List<String> versionStages) (experimental) Grants reading the secret value to some role.
Grant	Secret.grantRead(IGrantable grantee, List<String> versionStages) (experimental) Grants reading the secret value to some role.
Grant	ISecretTargetAttachment.Jsii$Proxy.grantRead(IGrantable grantee, List<String> versionStages) (experimental) Grants reading the secret value to some role.
default Grant	ISecretTargetAttachment.Jsii$Default.grantRead(IGrantable grantee, List<String> versionStages) (experimental) Grants reading the secret value to some role.
Grant	SecretTargetAttachment.grantWrite(IGrantable grantee) (experimental) Grants writing and updating the secret value to some role.
Grant	ISecret.grantWrite(IGrantable grantee) (experimental) Grants writing and updating the secret value to some role.
Grant	ISecret.Jsii$Proxy.grantWrite(IGrantable grantee) (experimental) Grants writing and updating the secret value to some role.
default Grant	ISecret.Jsii$Default.grantWrite(IGrantable grantee) (experimental) Grants writing and updating the secret value to some role.
Grant	Secret.grantWrite(IGrantable grantee) (experimental) Grants writing and updating the secret value to some role.
Grant	ISecretTargetAttachment.Jsii$Proxy.grantWrite(IGrantable grantee) (experimental) Grants writing and updating the secret value to some role.
default Grant	ISecretTargetAttachment.Jsii$Default.grantWrite(IGrantable grantee) (experimental) Grants writing and updating the secret value to some role.

Uses of IGrantable in software.amazon.awscdk.services.sns

Methods in software.amazon.awscdk.services.sns with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	TopicBase.grantPublish(IGrantable grantee) (experimental) Grant topic publishing permissions to the given identity.
Grant	ITopic.grantPublish(IGrantable identity) (experimental) Grant topic publishing permissions to the given identity.
Grant	ITopic.Jsii$Proxy.grantPublish(IGrantable identity) (experimental) Grant topic publishing permissions to the given identity.
default Grant	ITopic.Jsii$Default.grantPublish(IGrantable identity) (experimental) Grant topic publishing permissions to the given identity.

Uses of IGrantable in software.amazon.awscdk.services.sqs

Methods in software.amazon.awscdk.services.sqs with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	QueueBase.grant(IGrantable grantee, String... actions) (experimental) Grant the actions defined in queueActions to the identity Principal given on this SQS queue resource.
Grant	IQueue.grant(IGrantable grantee, String... queueActions) (experimental) Grant the actions defined in queueActions to the identity Principal given on this SQS queue resource.
Grant	IQueue.Jsii$Proxy.grant(IGrantable grantee, String... queueActions) (experimental) Grant the actions defined in queueActions to the identity Principal given on this SQS queue resource.
default Grant	IQueue.Jsii$Default.grant(IGrantable grantee, String... queueActions) (experimental) Grant the actions defined in queueActions to the identity Principal given on this SQS queue resource.
Grant	QueueBase.grantConsumeMessages(IGrantable grantee) (experimental) Grant permissions to consume messages from a queue.
Grant	IQueue.grantConsumeMessages(IGrantable grantee) (experimental) Grant permissions to consume messages from a queue.
Grant	IQueue.Jsii$Proxy.grantConsumeMessages(IGrantable grantee) (experimental) Grant permissions to consume messages from a queue.
default Grant	IQueue.Jsii$Default.grantConsumeMessages(IGrantable grantee) (experimental) Grant permissions to consume messages from a queue.
Grant	QueueBase.grantPurge(IGrantable grantee) (experimental) Grant an IAM principal permissions to purge all messages from the queue.
Grant	IQueue.grantPurge(IGrantable grantee) (experimental) Grant an IAM principal permissions to purge all messages from the queue.
Grant	IQueue.Jsii$Proxy.grantPurge(IGrantable grantee) (experimental) Grant an IAM principal permissions to purge all messages from the queue.
default Grant	IQueue.Jsii$Default.grantPurge(IGrantable grantee) (experimental) Grant an IAM principal permissions to purge all messages from the queue.
Grant	QueueBase.grantSendMessages(IGrantable grantee) (experimental) Grant access to send messages to a queue to the given identity.
Grant	IQueue.grantSendMessages(IGrantable grantee) (experimental) Grant access to send messages to a queue to the given identity.
Grant	IQueue.Jsii$Proxy.grantSendMessages(IGrantable grantee) (experimental) Grant access to send messages to a queue to the given identity.
default Grant	IQueue.Jsii$Default.grantSendMessages(IGrantable grantee) (experimental) Grant access to send messages to a queue to the given identity.

Uses of IGrantable in software.amazon.awscdk.services.ssm

Methods in software.amazon.awscdk.services.ssm with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	StringListParameter.grantRead(IGrantable grantee) (experimental) Grants read (DescribeParameter, GetParameter, GetParameterHistory) permissions on the SSM Parameter.
Grant	IParameter.grantRead(IGrantable grantee) (experimental) Grants read (DescribeParameter, GetParameter, GetParameterHistory) permissions on the SSM Parameter.
Grant	IParameter.Jsii$Proxy.grantRead(IGrantable grantee) (experimental) Grants read (DescribeParameter, GetParameter, GetParameterHistory) permissions on the SSM Parameter.
default Grant	IParameter.Jsii$Default.grantRead(IGrantable grantee) (experimental) Grants read (DescribeParameter, GetParameter, GetParameterHistory) permissions on the SSM Parameter.
Grant	IStringParameter.Jsii$Proxy.grantRead(IGrantable grantee) (experimental) Grants read (DescribeParameter, GetParameter, GetParameterHistory) permissions on the SSM Parameter.
default Grant	IStringParameter.Jsii$Default.grantRead(IGrantable grantee) (experimental) Grants read (DescribeParameter, GetParameter, GetParameterHistory) permissions on the SSM Parameter.
Grant	IStringListParameter.Jsii$Proxy.grantRead(IGrantable grantee) (experimental) Grants read (DescribeParameter, GetParameter, GetParameterHistory) permissions on the SSM Parameter.
default Grant	IStringListParameter.Jsii$Default.grantRead(IGrantable grantee) (experimental) Grants read (DescribeParameter, GetParameter, GetParameterHistory) permissions on the SSM Parameter.
Grant	StringParameter.grantRead(IGrantable grantee) (experimental) Grants read (DescribeParameter, GetParameter, GetParameterHistory) permissions on the SSM Parameter.
Grant	StringListParameter.grantWrite(IGrantable grantee) (experimental) Grants write (PutParameter) permissions on the SSM Parameter.
Grant	IParameter.grantWrite(IGrantable grantee) (experimental) Grants write (PutParameter) permissions on the SSM Parameter.
Grant	IParameter.Jsii$Proxy.grantWrite(IGrantable grantee) (experimental) Grants write (PutParameter) permissions on the SSM Parameter.
default Grant	IParameter.Jsii$Default.grantWrite(IGrantable grantee) (experimental) Grants write (PutParameter) permissions on the SSM Parameter.
Grant	IStringParameter.Jsii$Proxy.grantWrite(IGrantable grantee) (experimental) Grants write (PutParameter) permissions on the SSM Parameter.
default Grant	IStringParameter.Jsii$Default.grantWrite(IGrantable grantee) (experimental) Grants write (PutParameter) permissions on the SSM Parameter.
Grant	IStringListParameter.Jsii$Proxy.grantWrite(IGrantable grantee) (experimental) Grants write (PutParameter) permissions on the SSM Parameter.
default Grant	IStringListParameter.Jsii$Default.grantWrite(IGrantable grantee) (experimental) Grants write (PutParameter) permissions on the SSM Parameter.
Grant	StringParameter.grantWrite(IGrantable grantee) (experimental) Grants write (PutParameter) permissions on the SSM Parameter.

Uses of IGrantable in software.amazon.awscdk.services.stepfunctions

Subinterfaces of IGrantable in software.amazon.awscdk.services.stepfunctions

Modifier and Type	Interface and Description
interface	IStateMachine (experimental) A State Machine.
static interface	IStateMachine.Jsii$Default Internal default implementation for IStateMachine.

Classes in software.amazon.awscdk.services.stepfunctions that implement IGrantable

Modifier and Type	Class and Description
static class	IStateMachine.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
class	StateMachine (experimental) Define a StepFunctions State Machine.

Methods in software.amazon.awscdk.services.stepfunctions with parameters of type IGrantable

Modifier and Type	Method and Description
Grant	StateMachine.grant(IGrantable identity, String... actions) (experimental) Grant the given identity custom permissions.
Grant	Activity.grant(IGrantable identity, String... actions) (experimental) Grant the given identity permissions on this Activity.
Grant	IStateMachine.grant(IGrantable identity, String... actions) (experimental) Grant the given identity custom permissions.
Grant	IStateMachine.Jsii$Proxy.grant(IGrantable identity, String... actions) (experimental) Grant the given identity custom permissions.
default Grant	IStateMachine.Jsii$Default.grant(IGrantable identity, String... actions) (experimental) Grant the given identity custom permissions.
Grant	StateMachine.grantExecution(IGrantable identity, String... actions) (experimental) Grant the given identity permissions on all executions of the state machine.
Grant	IStateMachine.grantExecution(IGrantable identity, String... actions) (experimental) Grant the given identity permissions for all executions of a state machine.
Grant	IStateMachine.Jsii$Proxy.grantExecution(IGrantable identity, String... actions) (experimental) Grant the given identity permissions for all executions of a state machine.
default Grant	IStateMachine.Jsii$Default.grantExecution(IGrantable identity, String... actions) (experimental) Grant the given identity permissions for all executions of a state machine.
Grant	StateMachine.grantRead(IGrantable identity) (experimental) Grant the given identity permissions to read results from state machine.
Grant	IStateMachine.grantRead(IGrantable identity) (experimental) Grant the given identity read permissions for this state machine.
Grant	IStateMachine.Jsii$Proxy.grantRead(IGrantable identity) (experimental) Grant the given identity read permissions for this state machine.
default Grant	IStateMachine.Jsii$Default.grantRead(IGrantable identity) (experimental) Grant the given identity read permissions for this state machine.
Grant	StateMachine.grantStartExecution(IGrantable identity) (experimental) Grant the given identity permissions to start an execution of this state machine.
Grant	IStateMachine.grantStartExecution(IGrantable identity) (experimental) Grant the given identity permissions to start an execution of this state machine.
Grant	IStateMachine.Jsii$Proxy.grantStartExecution(IGrantable identity) (experimental) Grant the given identity permissions to start an execution of this state machine.
default Grant	IStateMachine.Jsii$Default.grantStartExecution(IGrantable identity) (experimental) Grant the given identity permissions to start an execution of this state machine.
Grant	StateMachine.grantStartSyncExecution(IGrantable identity) (experimental) Grant the given identity permissions to start a synchronous execution of this state machine.
Grant	IStateMachine.grantStartSyncExecution(IGrantable identity) (experimental) Grant the given identity permissions to start a synchronous execution of this state machine.
Grant	IStateMachine.Jsii$Proxy.grantStartSyncExecution(IGrantable identity) (experimental) Grant the given identity permissions to start a synchronous execution of this state machine.
default Grant	IStateMachine.Jsii$Default.grantStartSyncExecution(IGrantable identity) (experimental) Grant the given identity permissions to start a synchronous execution of this state machine.
Grant	StateMachine.grantTaskResponse(IGrantable identity) (experimental) Grant the given identity task response permissions on a state machine.
Grant	IStateMachine.grantTaskResponse(IGrantable identity) (experimental) Grant the given identity read permissions for this state machine.
Grant	IStateMachine.Jsii$Proxy.grantTaskResponse(IGrantable identity) (experimental) Grant the given identity read permissions for this state machine.
default Grant	IStateMachine.Jsii$Default.grantTaskResponse(IGrantable identity) (experimental) Grant the given identity read permissions for this state machine.

Uses of IGrantable in software.amazon.awscdk.services.stepfunctions.tasks

Subinterfaces of IGrantable in software.amazon.awscdk.services.stepfunctions.tasks

Modifier and Type	Interface and Description
interface	ISageMakerTask (experimental) Task to train a machine learning model using Amazon SageMaker.
static interface	ISageMakerTask.Jsii$Default Internal default implementation for ISageMakerTask.

Classes in software.amazon.awscdk.services.stepfunctions.tasks that implement IGrantable

Modifier and Type	Class and Description
class	EmrContainersStartJobRun (experimental) Starts a job run.
static class	ISageMakerTask.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.
class	SageMakerCreateModel (experimental) A Step Functions Task to create a SageMaker model.
class	SageMakerCreateTrainingJob (experimental) Class representing the SageMaker Create Training Job task.

Uses of IGrantable in software.amazon.awscdk.services.synthetics

Method parameters in software.amazon.awscdk.services.synthetics with type arguments of type IGrantable

Modifier and Type	Method and Description
AssetCode.Builder	AssetCode.Builder.readers(List<? extends IGrantable> readers) (experimental) A list of principals that should be able to read this asset from S3.

Uses of IGrantable in software.amazon.awscdk.triggers

Classes in software.amazon.awscdk.triggers that implement IGrantable

Modifier and Type	Class and Description
class	TriggerFunction (experimental) Invokes an AWS Lambda function during deployment.