Class GetPolicyDocumentStatementArgs

Inheritance
System.Object
InputArgs
InvokeArgs
GetPolicyDocumentStatementArgs
Inherited Members
System.Object.Equals(System.Object)
System.Object.Equals(System.Object, System.Object)
System.Object.GetHashCode()
System.Object.GetType()
System.Object.MemberwiseClone()
System.Object.ReferenceEquals(System.Object, System.Object)
System.Object.ToString()
Namespace: Pulumi.Aws.Iam.Inputs
Assembly: Pulumi.Aws.dll
Syntax
public sealed class GetPolicyDocumentStatementArgs : InvokeArgs

Constructors

View Source

GetPolicyDocumentStatementArgs()

Declaration
public GetPolicyDocumentStatementArgs()

Properties

View Source

Actions

A list of actions that this statement either allows or denies. For example, ["ec2:RunInstances", "s3:*"].

Declaration
public List<string> Actions { get; set; }
Property Value
Type Description
System.Collections.Generic.List<System.String>
View Source

Conditions

A nested configuration block (described below) that defines a further, possibly-service-specific condition that constrains whether this statement applies.

Declaration
public List<GetPolicyDocumentStatementConditionArgs> Conditions { get; set; }
Property Value
Type Description
System.Collections.Generic.List<GetPolicyDocumentStatementConditionArgs>
View Source

Effect

Either "Allow" or "Deny", to specify whether this statement allows or denies the given actions. The default is "Allow".

Declaration
public string Effect { get; set; }
Property Value
Type Description
System.String
View Source

NotActions

A list of actions that this statement does not apply to. Used to apply a policy statement to all actions except those listed.

Declaration
public List<string> NotActions { get; set; }
Property Value
Type Description
System.Collections.Generic.List<System.String>
View Source

NotPrincipals

Like principals except gives resources that the statement does not apply to.

Declaration
public List<GetPolicyDocumentStatementNotPrincipalArgs> NotPrincipals { get; set; }
Property Value
Type Description
System.Collections.Generic.List<GetPolicyDocumentStatementNotPrincipalArgs>
View Source

NotResources

A list of resource ARNs that this statement does not apply to. Used to apply a policy statement to all resources except those listed.

Declaration
public List<string> NotResources { get; set; }
Property Value
Type Description
System.Collections.Generic.List<System.String>
View Source

Principals

A nested configuration block (described below) specifying a resource (or resource pattern) to which this statement applies.

Declaration
public List<GetPolicyDocumentStatementPrincipalArgs> Principals { get; set; }
Property Value
Type Description
System.Collections.Generic.List<GetPolicyDocumentStatementPrincipalArgs>
View Source

Resources

A list of resource ARNs that this statement applies to. This is required by AWS if used for an IAM policy.

Declaration
public List<string> Resources { get; set; }
Property Value
Type Description
System.Collections.Generic.List<System.String>
View Source

Sid

An ID for the policy statement.

Declaration
public string Sid { get; set; }
Property Value
Type Description
System.String