/AWS1/CL_BDOCREATEPOLICYRSP¶
CreatePolicyResponse
CONSTRUCTOR¶
IMPORTING¶
Required arguments:¶
iv_policyid TYPE /AWS1/BDORESOURCEID /AWS1/BDORESOURCEID¶
The unique identifier for the created policy. This is a system-generated identifier consisting of the user name plus a 10-character generated suffix, used for all subsequent policy operations.
iv_name TYPE /AWS1/BDOPOLICYNAME /AWS1/BDOPOLICYNAME¶
The customer-assigned name of the created policy. This matches the name provided in the request and serves as the human-readable identifier for the policy.
iv_policyengineid TYPE /AWS1/BDORESOURCEID /AWS1/BDORESOURCEID¶
The identifier of the policy engine that manages this policy. This confirms the policy engine assignment and is used for policy evaluation routing.
iv_createdat TYPE /AWS1/BDODATETIMESTAMP /AWS1/BDODATETIMESTAMP¶
The timestamp when the policy was created. This is automatically set by the service and used for auditing and lifecycle management.
iv_updatedat TYPE /AWS1/BDODATETIMESTAMP /AWS1/BDODATETIMESTAMP¶
The timestamp when the policy was last updated. For newly created policies, this matches the createdAt timestamp.
iv_policyarn TYPE /AWS1/BDOPOLICYARN /AWS1/BDOPOLICYARN¶
The Amazon Resource Name (ARN) of the created policy. This globally unique identifier can be used for cross-service references and IAM policy statements.
iv_status TYPE /AWS1/BDOPOLICYSTATUS /AWS1/BDOPOLICYSTATUS¶
The current status of the policy. A status of
ACTIVEindicates the policy is ready for use.
io_definition TYPE REF TO /AWS1/CL_BDOPOLICYDEFINITION /AWS1/CL_BDOPOLICYDEFINITION¶
The Cedar or Dogwood policy statement that was created. This is the validated policy definition that will be used for agent behavior control and access decisions.
it_statusreasons TYPE /AWS1/CL_BDOPLYSTATUSREASONS_W=>TT_POLICYSTATUSREASONS TT_POLICYSTATUSREASONS¶
Additional information about the policy status. This provides details about any failures or the current state of the policy creation process.
Optional arguments:¶
iv_enforcementmode TYPE /AWS1/BDOENFORCEMENTMODE /AWS1/BDOENFORCEMENTMODE¶
The enforcement mode of the created policy.
iv_description TYPE /AWS1/BDODESCRIPTION /AWS1/BDODESCRIPTION¶
The human-readable description of the policy's purpose and functionality. This helps administrators understand and manage the policy.
Queryable Attributes¶
policyId¶
The unique identifier for the created policy. This is a system-generated identifier consisting of the user name plus a 10-character generated suffix, used for all subsequent policy operations.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_POLICYID() |
Getter for POLICYID, with configurable default |
ASK_POLICYID() |
Getter for POLICYID w/ exceptions if field has no value |
HAS_POLICYID() |
Determine if POLICYID has a value |
name¶
The customer-assigned name of the created policy. This matches the name provided in the request and serves as the human-readable identifier for the policy.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_NAME() |
Getter for NAME, with configurable default |
ASK_NAME() |
Getter for NAME w/ exceptions if field has no value |
HAS_NAME() |
Determine if NAME has a value |
policyEngineId¶
The identifier of the policy engine that manages this policy. This confirms the policy engine assignment and is used for policy evaluation routing.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_POLICYENGINEID() |
Getter for POLICYENGINEID, with configurable default |
ASK_POLICYENGINEID() |
Getter for POLICYENGINEID w/ exceptions if field has no valu |
HAS_POLICYENGINEID() |
Determine if POLICYENGINEID has a value |
createdAt¶
The timestamp when the policy was created. This is automatically set by the service and used for auditing and lifecycle management.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_CREATEDAT() |
Getter for CREATEDAT, with configurable default |
ASK_CREATEDAT() |
Getter for CREATEDAT w/ exceptions if field has no value |
HAS_CREATEDAT() |
Determine if CREATEDAT has a value |
updatedAt¶
The timestamp when the policy was last updated. For newly created policies, this matches the createdAt timestamp.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_UPDATEDAT() |
Getter for UPDATEDAT, with configurable default |
ASK_UPDATEDAT() |
Getter for UPDATEDAT w/ exceptions if field has no value |
HAS_UPDATEDAT() |
Determine if UPDATEDAT has a value |
policyArn¶
The Amazon Resource Name (ARN) of the created policy. This globally unique identifier can be used for cross-service references and IAM policy statements.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_POLICYARN() |
Getter for POLICYARN, with configurable default |
ASK_POLICYARN() |
Getter for POLICYARN w/ exceptions if field has no value |
HAS_POLICYARN() |
Determine if POLICYARN has a value |
status¶
The current status of the policy. A status of
ACTIVEindicates the policy is ready for use.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_STATUS() |
Getter for STATUS, with configurable default |
ASK_STATUS() |
Getter for STATUS w/ exceptions if field has no value |
HAS_STATUS() |
Determine if STATUS has a value |
enforcementMode¶
The enforcement mode of the created policy.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_ENFORCEMENTMODE() |
Getter for ENFORCEMENTMODE, with configurable default |
ASK_ENFORCEMENTMODE() |
Getter for ENFORCEMENTMODE w/ exceptions if field has no val |
HAS_ENFORCEMENTMODE() |
Determine if ENFORCEMENTMODE has a value |
definition¶
The Cedar or Dogwood policy statement that was created. This is the validated policy definition that will be used for agent behavior control and access decisions.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_DEFINITION() |
Getter for DEFINITION |
description¶
The human-readable description of the policy's purpose and functionality. This helps administrators understand and manage the policy.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_DESCRIPTION() |
Getter for DESCRIPTION, with configurable default |
ASK_DESCRIPTION() |
Getter for DESCRIPTION w/ exceptions if field has no value |
HAS_DESCRIPTION() |
Determine if DESCRIPTION has a value |
statusReasons¶
Additional information about the policy status. This provides details about any failures or the current state of the policy creation process.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_STATUSREASONS() |
Getter for STATUSREASONS, with configurable default |
ASK_STATUSREASONS() |
Getter for STATUSREASONS w/ exceptions if field has no value |
HAS_STATUSREASONS() |
Determine if STATUSREASONS has a value |