pulumi-aws-kotlin/com.pulumi.aws.iam.kotlin.outputs/GetPrincipalPolicySimulationResult

GetPrincipalPolicySimulationResult

data class GetPrincipalPolicySimulationResult(val actionName: String, val allowed: Boolean, val decision: String, val decisionDetails: Map<String, String>, val matchedStatements: List<GetPrincipalPolicySimulationResultMatchedStatement>, val missingContextKeys: List<String>, val resourceArn: String)

Constructors

constructor(actionName: String, allowed: Boolean, decision: String, decisionDetails: Map<String, String>, matchedStatements: List<GetPrincipalPolicySimulationResultMatchedStatement>, missingContextKeys: List<String>, resourceArn: String)

Types

Companion

object Companion

Properties

actionName

val actionName: String

The name of the single IAM action used for this particular request.

allowed

val allowed: Boolean

true if decision is "allowed", and false otherwise.

decision

val decision: String

The raw decision determined from all of the policies in scope; either "allowed", "explicitDeny", or "implicitDeny".

decisionDetails

val decisionDetails: Map<String, String>

A map of arbitrary metadata entries returned by the policy simulator for this request.

matchedStatements

val matchedStatements: List<GetPrincipalPolicySimulationResultMatchedStatement>

A nested set of objects describing which policies contained statements that were relevant to this simulation request. Each object has attributes source_policy_id and source_policy_type to identify one of the policies.

missingContextKeys

val missingContextKeys: List<String>

A set of context keys (or condition keys) that were needed by some of the policies contributing to this result but not specified using a context block in the configuration. Missing or incorrect context keys will typically cause a simulated request to be disallowed.

resourceArn

val resourceArn: String

ARN of the resource that was used for this particular request. When you specify multiple actions and multiple resource ARNs, that causes a separate policy request for each combination of unique action and resource.