WithoutPolicyUpdatesOptions

class aws_cdk.aws_iam.WithoutPolicyUpdatesOptions(*, add_grants_to_resources=None)

Bases: object

Options for the withoutPolicyUpdates() modifier of a Role.

Parameters:: add_grants_to_resources (Optional[bool]) – Add grants to resources instead of dropping them. If this is false or not specified, grant permissions added to this role are ignored. It is your own responsibility to make sure the role has the required permissions. If this is true, any grant permissions will be added to the resource instead. Default: false
ExampleMetadata:: fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
import aws_cdk.aws_iam as iam

without_policy_updates_options = iam.WithoutPolicyUpdatesOptions(
    add_grants_to_resources=False
)

Attributes

add_grants_to_resources

Add grants to resources instead of dropping them.

If this is false or not specified, grant permissions added to this role are ignored. It is your own responsibility to make sure the role has the required permissions.

If this is true, any grant permissions will be added to the resource instead.

Default:: false