# CfnPolicyStatementProps

Properties for defining a `CfnPolicyStatement`.

Extends: CfnPolicyStatementProps
Used as props by: CfnPolicyStatement

- Source: Generated code
- Type last changed: v2.138.0 · 18 Apr 2024

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_entityresolution as entityresolution } from 'aws-cdk-lib';
const cfnPolicyStatementProps: entityresolution.CfnPolicyStatementProps = {
  arn: 'arn',
  statementId: 'statementId',

  // the properties below are optional
  action: ['action'],
  condition: 'condition',
  effect: 'effect',
  principal: ['principal'],
};
```

## Properties

- `action`: string[] — The action that the principal can use on the resource.

  For example, `entityresolution:GetIdMappingJob` , `entityresolution:GetMatchingJob` .

- `arn`: string (required) — The Amazon Resource Name (ARN) of the resource that will be accessed by the principal.

- `condition`: string — A set of condition keys that you can use in key policies.

- `effect`: string — Determines whether the permissions specified in the policy are to be allowed ( `Allow` ) or denied ( `Deny` ).

  > If you set the value of the `effect` parameter to `Deny` for the `AddPolicyStatement` operation, you must also set the value of the `effect` parameter in the `policy` to `Deny` for the `PutPolicy` operation.

- `principal`: string[] — The AWS service or AWS account that can access the resource defined as ARN.

- `statementId`: string (required) — A statement identifier that differentiates the statement from others in the same policy.