CfnPolicyStatementMixinProps
- class aws_cdk.mixins_preview.aws_entityresolution.mixins.CfnPolicyStatementMixinProps(*, action=None, arn=None, condition=None, effect=None, principal=None, statement_id=None)
Bases:
objectProperties for CfnPolicyStatementPropsMixin.
- Parameters:
action (
Optional[Sequence[str]]) – The action that the principal can use on the resource. For example,entityresolution:GetIdMappingJob,entityresolution:GetMatchingJob.arn (
Optional[str]) – The Amazon Resource Name (ARN) of the resource that will be accessed by the principal.condition (
Optional[str]) – A set of condition keys that you can use in key policies.effect (
Optional[str]) – Determines whether the permissions specified in the policy are to be allowed (Allow) or denied (Deny). .. epigraph:: If you set the value of theeffectparameter toDenyfor theAddPolicyStatementoperation, you must also set the value of theeffectparameter in thepolicytoDenyfor thePutPolicyoperation.principal (
Optional[Sequence[str]]) – The AWS service or AWS account that can access the resource defined as ARN.statement_id (
Optional[str]) – A statement identifier that differentiates the statement from others in the same policy.
- See:
- ExampleMetadata:
fixture=_generated
Example:
# The code below shows an example of how to instantiate this type. # The values are placeholders you should change. from aws_cdk.mixins_preview.aws_entityresolution import mixins as entityresolution_mixins cfn_policy_statement_mixin_props = entityresolution_mixins.CfnPolicyStatementMixinProps( action=["action"], arn="arn", condition="condition", effect="effect", principal=["principal"], statement_id="statementId" )
Attributes
- action
The action that the principal can use on the resource.
For example,
entityresolution:GetIdMappingJob,entityresolution:GetMatchingJob.
- arn
The Amazon Resource Name (ARN) of the resource that will be accessed by the principal.
- condition
A set of condition keys that you can use in key policies.
- effect
Determines whether the permissions specified in the policy are to be allowed (
Allow) or denied (Deny).If you set the value of the
effectparameter toDenyfor theAddPolicyStatementoperation, you must also set the value of theeffectparameter in thepolicytoDenyfor thePutPolicyoperation.
- principal
The AWS service or AWS account that can access the resource defined as ARN.
- statement_id
A statement identifier that differentiates the statement from others in the same policy.