Skip to main content

profile_resource_associations

Creates, updates, deletes or gets a profile_resource_association resource or lists profile_resource_associations in a region

Overview

Nameprofile_resource_associations
TypeResource
DescriptionResource Type definition for AWS::Route53Profiles::ProfileResourceAssociation
Idawscc.route53profiles.profile_resource_associations

Fields

NameDatatypeDescription
profile_idstringThe ID of the profile that you associated the resource to that is specified by ResourceArn.
idstringPrimary Identifier for Profile Resource Association
namestringThe name of an association between the Profile and resource.
resource_arnstringThe arn of the resource that you associated to the Profile.
resource_propertiesstringA JSON-formatted string with key-value pairs specifying the properties of the associated resource.
resource_typestringThe type of the resource associated to the Profile.
regionstringAWS region.

For more information, see AWS::Route53Profiles::ProfileResourceAssociation.

Methods

NameResourceAccessible byRequired Params
create_resourceprofile_resource_associationsINSERTProfileId, Name, ResourceArn, region
delete_resourceprofile_resource_associationsDELETEIdentifier, region
update_resourceprofile_resource_associationsUPDATEIdentifier, PatchDocument, region
list_resourcesprofile_resource_associations_list_onlySELECTregion
get_resourceprofile_resource_associationsSELECTIdentifier, region

SELECT examples

Gets all properties from an individual profile_resource_association.

SELECT
region,
profile_id,
id,
name,
resource_arn,
resource_properties,
resource_type
FROM awscc.route53profiles.profile_resource_associations
WHERE
region = '{{ region }}' AND
Identifier = '{{ id }}';

INSERT example

Use the following StackQL query and manifest file to create a new profile_resource_association resource, using stack-deploy.

/*+ create */
INSERT INTO awscc.route53profiles.profile_resource_associations (
ProfileId,
Name,
ResourceArn,
region
)
SELECT
'{{ profile_id }}',
'{{ name }}',
'{{ resource_arn }}',
'{{ region }}'
RETURNING
ErrorCode,
EventTime,
Identifier,
Operation,
OperationStatus,
RequestToken,
ResourceModel,
RetryAfter,
StatusMessage,
TypeName
;

UPDATE example

Use the following StackQL query and manifest file to update a profile_resource_association resource, using stack-deploy.

/*+ update */
UPDATE awscc.route53profiles.profile_resource_associations
SET PatchDocument = string('{{ {
"ResourceProperties": resource_properties
} | generate_patch_document }}')
WHERE
region = '{{ region }}' AND
Identifier = '{{ id }}'
RETURNING
ErrorCode,
EventTime,
Identifier,
Operation,
OperationStatus,
RequestToken,
ResourceModel,
RetryAfter,
StatusMessage,
TypeName
;

DELETE example

/*+ delete */
DELETE FROM awscc.route53profiles.profile_resource_associations
WHERE
Identifier = '{{ id }}' AND
region = '{{ region }}'
RETURNING
ErrorCode,
EventTime,
Identifier,
Operation,
OperationStatus,
RequestToken,
ResourceModel,
RetryAfter,
StatusMessage,
TypeName
;

Additional Parameters

Mutable resources in the Cloud Control provider support additional optional parameters which can be supplied with INSERT, UPDATE, or DELETE operations. These include:

ParameterDescription
ClientToken
A unique identifier to ensure the idempotency of the resource request.This allows the provider to accurately distinguish between retries and new requests.
A client token is valid for 36 hours once used.
After that, a resource request with the same client token is treated as a new request.
If you do not specify a client token, one is generated for inclusion in the request.
RoleArn
The ARN of the IAM role used to perform this resource operation.The role specified must have the permissions required for this operation.
If you do not specify a role, a temporary session is created using your AWS user credentials.
TypeVersionId
For private resource types, the type version to use in this resource operation.If you do not specify a resource version, the default version is used.

Permissions

To operate on the profile_resource_associations resource, the following permissions are required:

route53profiles:AssociateResourceToProfile,
route53profiles:GetProfileResourceAssociation,
route53resolver:GetFirewallRuleGroup,
route53resolver:GetResolverRule,
route53:GetHostedZone,
route53resolver:GetResolverQueryLogConfig,
ec2:DescribeVpcEndpoints