Skip to content

CheckNoNewAccessRequest

Source code in docs_src/capo_accessanalyzer/types/check_no_new_access_request.py 
14
15
16
17
18
19
20
21
22
class CheckNoNewAccessRequest(TypedDict, closed=True):
    new_policy_document: "capo_accessanalyzer.types.access_check_policy_document.AccessCheckPolicyDocument"
    """<p>The JSON policy document to use as the content for the updated policy.</p>"""
    existing_policy_document: "capo_accessanalyzer.types.access_check_policy_document.AccessCheckPolicyDocument"
    """<p>The JSON policy document to use as the content for the existing policy.</p>"""
    policy_type: (
        "capo_accessanalyzer.types.access_check_policy_type.AccessCheckPolicyType"
    )
    """<p>The type of policy to compare. Identity policies grant permissions to IAM principals. Identity policies include managed and inline policies for IAM roles, users, and groups.</p> <p>Resource policies grant permissions on Amazon Web Services resources. Resource policies include trust policies for IAM roles and bucket policies for Amazon S3 buckets. You can provide a generic input such as identity policy or resource policy or a specific input such as managed policy or Amazon S3 bucket policy.</p>"""

existing_policy_document instance-attribute 

existing_policy_document: AccessCheckPolicyDocument

The JSON policy document to use as the content for the existing policy.

new_policy_document instance-attribute 

new_policy_document: AccessCheckPolicyDocument

The JSON policy document to use as the content for the updated policy.

policy_type instance-attribute 

policy_type: AccessCheckPolicyType

The type of policy to compare. Identity policies grant permissions to IAM principals. Identity policies include managed and inline policies for IAM roles, users, and groups.

Resource policies grant permissions on Amazon Web Services resources. Resource policies include trust policies for IAM roles and bucket policies for Amazon S3 buckets. You can provide a generic input such as identity policy or resource policy or a specific input such as managed policy or Amazon S3 bucket policy.