/AWS1/CL_IAMPERMSBNDRYDCSNDET¶
Contains information about the effect that a permissions boundary has on a policy simulation when the boundary is applied to an IAM entity.
CONSTRUCTOR¶
IMPORTING¶
Optional arguments:¶
iv_allowedbypermsboundary TYPE /AWS1/IAMBOOLEANTYPE /AWS1/IAMBOOLEANTYPE¶
Specifies whether an action is allowed by a permissions boundary that is applied to an IAM entity (user or role). A value of
truemeans that the permissions boundary does not deny the action. This means that the policy includes anAllowstatement that matches the request. In this case, if an identity-based policy also allows the action, the request is allowed. A value offalsemeans that either the requested action is not allowed (implicitly denied) or that the action is explicitly denied by the permissions boundary. In both of these cases, the action is not allowed, regardless of the identity-based policy.
Queryable Attributes¶
AllowedByPermissionsBoundary¶
Specifies whether an action is allowed by a permissions boundary that is applied to an IAM entity (user or role). A value of
truemeans that the permissions boundary does not deny the action. This means that the policy includes anAllowstatement that matches the request. In this case, if an identity-based policy also allows the action, the request is allowed. A value offalsemeans that either the requested action is not allowed (implicitly denied) or that the action is explicitly denied by the permissions boundary. In both of these cases, the action is not allowed, regardless of the identity-based policy.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_ALLOWEDBYPERMSBOUNDARY() |
Getter for ALLOWEDBYPERMISSIONSBOUNDARY |