Skip to content

/AWS1/CL_IABPOLICYINFO

Contains details about a policy evaluated during authorization. Details include the policy type, whether it is inline or managed, a URI that identifies it, and the entities it is attached to.

CONSTRUCTOR

IMPORTING

Optional arguments:

iv_type TYPE /AWS1/IABPOLICYTYPE /AWS1/IABPOLICYTYPE

The type of policy. Valid values:

  • IDENTITY_BASED_POLICY - An identity-based policy attached to an IAM user, group, or role.

  • PERMISSIONS_BOUNDARY - A permissions boundary for an IAM entity.

  • RESOURCE_BASED_POLICY - A resource-based policy attached to a resource.

  • RESOURCE_CONTROL_POLICY - A resource control policy (RCP) in AWS Organizations.

  • SERVICE_CONTROL_POLICY - A service control policy (SCP) in AWS Organizations.

  • SESSION_POLICY - A session policy passed during role assumption or federation.

  • VPC_ENDPOINT_POLICY - A VPC endpoint policy.

iv_inline TYPE /AWS1/IABBOOLEAN /AWS1/IABBOOLEAN

Specifies whether this is an inline policy (true) or a managed policy (false).

iv_uri TYPE /AWS1/IABSTRING /AWS1/IABSTRING

A URI that identifies the policy. Use this URI to cross-reference the policy with the matching policies in each evaluation. The value depends on the policy type:

  • For managed policies, this is the policy ARN.

  • For inline policies, which have no ARN, this is an opaque identifier.

it_attachedto TYPE /AWS1/CL_IABATTACHEDTO=>TT_ATTACHEDTOLIST TT_ATTACHEDTOLIST

The entities that the policy is attached to. For identity, session, and resource-based policies, this is typically a single entity. For organization control policies (SCPs and RCPs), it can be multiple entities at different levels of the organization hierarchy.

Queryable Attributes

type

The type of policy. Valid values:

  • IDENTITY_BASED_POLICY - An identity-based policy attached to an IAM user, group, or role.

  • PERMISSIONS_BOUNDARY - A permissions boundary for an IAM entity.

  • RESOURCE_BASED_POLICY - A resource-based policy attached to a resource.

  • RESOURCE_CONTROL_POLICY - A resource control policy (RCP) in AWS Organizations.

  • SERVICE_CONTROL_POLICY - A service control policy (SCP) in AWS Organizations.

  • SESSION_POLICY - A session policy passed during role assumption or federation.

  • VPC_ENDPOINT_POLICY - A VPC endpoint policy.

Accessible with the following methods

Method Description
GET_TYPE() Getter for TYPE, with configurable default
ASK_TYPE() Getter for TYPE w/ exceptions if field has no value
HAS_TYPE() Determine if TYPE has a value

inline

Specifies whether this is an inline policy (true) or a managed policy (false).

Accessible with the following methods

Method Description
GET_INLINE() Getter for INLINE, with configurable default
ASK_INLINE() Getter for INLINE w/ exceptions if field has no value
HAS_INLINE() Determine if INLINE has a value

uri

A URI that identifies the policy. Use this URI to cross-reference the policy with the matching policies in each evaluation. The value depends on the policy type:

  • For managed policies, this is the policy ARN.

  • For inline policies, which have no ARN, this is an opaque identifier.

Accessible with the following methods

Method Description
GET_URI() Getter for URI, with configurable default
ASK_URI() Getter for URI w/ exceptions if field has no value
HAS_URI() Determine if URI has a value

attachedTo

The entities that the policy is attached to. For identity, session, and resource-based policies, this is typically a single entity. For organization control policies (SCPs and RCPs), it can be multiple entities at different levels of the organization hierarchy.

Accessible with the following methods

Method Description
GET_ATTACHEDTO() Getter for ATTACHEDTO, with configurable default
ASK_ATTACHEDTO() Getter for ATTACHEDTO w/ exceptions if field has no value
HAS_ATTACHEDTO() Determine if ATTACHEDTO has a value

Public Local Types In This Class

Internal table types, representing arrays and maps of this class, are defined as local types:

TT_POLICYINFOLIST

TYPES TT_POLICYINFOLIST TYPE STANDARD TABLE OF REF TO /AWS1/CL_IABPOLICYINFO WITH DEFAULT KEY
.