/AWS1/CL_IABEVALUATION¶
Represents an individual evaluation for a single action and resource pair. This includes the context, the resulting effect, and any policies that matched.
CONSTRUCTOR¶
IMPORTING¶
Required arguments:¶
iv_action TYPE /AWS1/IABSTRING /AWS1/IABSTRING¶
The action evaluated for this request (for example,
iam:PassRole).
iv_resource TYPE /AWS1/IABSTRING /AWS1/IABSTRING¶
The resource that the action targeted. This is typically a resource ARN, but can be a wildcard ARN that matches multiple resources, or empty for actions that are not resource-specific.
Optional arguments:¶
it_context TYPE /AWS1/CL_RT_DOCUMENT=>TT_MAP TT_MAP¶
The context keys and values specific to this evaluation. These are applied on top of the request context.
iv_evaluatedeffect TYPE /AWS1/IABEVALUATEDEFFECT /AWS1/IABEVALUATEDEFFECT¶
The result of the evaluation. Valid values:
ALLOW- The action was allowed.
EXPLICIT_DENY- The action was explicitly denied by a policy.
IMPLICIT_DENY- The action was denied because no policy allowed it.
it_matchedpolicies TYPE /AWS1/CL_IABMATCHEDPOLICY=>TT_MATCHEDPOLICYLIST TT_MATCHEDPOLICYLIST¶
The policies that matched during evaluation of this action and resource. An implicit denial produces no matched policies.
Queryable Attributes¶
action¶
The action evaluated for this request (for example,
iam:PassRole).
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_ACTION() |
Getter for ACTION, with configurable default |
ASK_ACTION() |
Getter for ACTION w/ exceptions if field has no value |
HAS_ACTION() |
Determine if ACTION has a value |
resource¶
The resource that the action targeted. This is typically a resource ARN, but can be a wildcard ARN that matches multiple resources, or empty for actions that are not resource-specific.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_RESOURCE() |
Getter for RESOURCE, with configurable default |
ASK_RESOURCE() |
Getter for RESOURCE w/ exceptions if field has no value |
HAS_RESOURCE() |
Determine if RESOURCE has a value |
context¶
The context keys and values specific to this evaluation. These are applied on top of the request context.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_CONTEXT() |
Getter for CONTEXT, with configurable default |
ASK_CONTEXT() |
Getter for CONTEXT w/ exceptions if field has no value |
HAS_CONTEXT() |
Determine if CONTEXT has a value |
evaluatedEffect¶
The result of the evaluation. Valid values:
ALLOW- The action was allowed.
EXPLICIT_DENY- The action was explicitly denied by a policy.
IMPLICIT_DENY- The action was denied because no policy allowed it.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_EVALUATEDEFFECT() |
Getter for EVALUATEDEFFECT, with configurable default |
ASK_EVALUATEDEFFECT() |
Getter for EVALUATEDEFFECT w/ exceptions if field has no val |
HAS_EVALUATEDEFFECT() |
Determine if EVALUATEDEFFECT has a value |
matchedPolicies¶
The policies that matched during evaluation of this action and resource. An implicit denial produces no matched policies.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_MATCHEDPOLICIES() |
Getter for MATCHEDPOLICIES, with configurable default |
ASK_MATCHEDPOLICIES() |
Getter for MATCHEDPOLICIES w/ exceptions if field has no val |
HAS_MATCHEDPOLICIES() |
Determine if MATCHEDPOLICIES has a value |
Public Local Types In This Class¶
Internal table types, representing arrays and maps of this class, are defined as local types:
TT_EVALUATIONS¶
TYPES TT_EVALUATIONS TYPE STANDARD TABLE OF REF TO /AWS1/CL_IABEVALUATION WITH DEFAULT KEY
.