aws-cdk-lib.aws_entityresolution.CfnPolicyStatementProps

CfnPolicyStatementProps Struct

Properties for defining a CfnPolicyStatement.

Source

Generated code

Type last changed

v2.138.0 · 18 Apr 2024

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_entityresolution as entityresolution } from 'aws-cdk-lib';
const cfnPolicyStatementProps: entityresolution.CfnPolicyStatementProps = {
  arn: 'arn',
  statementId: 'statementId',

  // the properties below are optional
  action: ['action'],
  condition: 'condition',
  effect: 'effect',
  principal: ['principal'],
};

Properties

actionstring[]actiontyping.List[str]actionList<String>Actionstring[]Action*[]*string#

The action that the principal can use on the resource.

For example, entityresolution:GetIdMappingJob , entityresolution:GetMatchingJob .

arnstringarnstrarnStringArnstringArn*stringrequired#

The Amazon Resource Name (ARN) of the resource that will be accessed by the principal.

conditionstringconditionstrconditionStringConditionstringCondition*string#

A set of condition keys that you can use in key policies.

effectstringeffectstreffectStringEffectstringEffect*string#

Determines whether the permissions specified in the policy are to be allowed ( `Allow` ) or denied ( `Deny` ).

If you set the value of the effect parameter to Deny for the AddPolicyStatement operation, you must also set the value of the effect parameter in the policy to Deny for the PutPolicy operation.

principalstring[]principaltyping.List[str]principalList<String>Principalstring[]Principal*[]*string#

The AWS service or AWS account that can access the resource defined as ARN.

statementIdstringstatement_idstrstatementIdStringStatementIdstringStatementId*stringrequired#

A statement identifier that differentiates the statement from others in the same policy.

Used as props by

• CfnPolicyStatement