Skip to content

ValidatePolicyRequest

Source code in docs_src/capo_accessanalyzer/types/validate_policy_request.py 
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
class ValidatePolicyRequest(TypedDict, closed=True):
    locale: NotRequired["capo_accessanalyzer.types.locale.Locale"]
    """<p>The locale to use for localizing the findings.</p>"""
    max_results: NotRequired["int"]
    """<p>The maximum number of results to return in the response.</p>"""
    next_token: NotRequired["capo_accessanalyzer.types.token.Token"]
    """<p>A token used for pagination of results returned.</p>"""
    policy_document: "capo_accessanalyzer.types.policy_document.PolicyDocument"
    """<p>The JSON policy document to use as the content for the policy.</p>"""
    policy_type: "capo_accessanalyzer.types.policy_type.PolicyType"
    """<p>The type of policy to validate. Identity policies grant permissions to IAM principals. Identity policies include managed and inline policies for IAM roles, users, and groups.</p> <p>Resource policies grant permissions on Amazon Web Services resources. Resource policies include trust policies for IAM roles and bucket policies for Amazon S3 buckets. You can provide a generic input such as identity policy or resource policy or a specific input such as managed policy or Amazon S3 bucket policy. </p> <p>Service control policies (SCPs) are a type of organization policy attached to an Amazon Web Services organization, organizational unit (OU), or an account.</p>"""
    validate_policy_resource_type: NotRequired[
        "capo_accessanalyzer.types.validate_policy_resource_type.ValidatePolicyResourceType"
    ]
    """<p>The type of resource to attach to your resource policy. Specify a value for the policy validation resource type only if the policy type is <code>RESOURCE_POLICY</code>. For example, to validate a resource policy to attach to an Amazon S3 bucket, you can choose <code>AWS::S3::Bucket</code> for the policy validation resource type.</p> <p>For resource types not supported as valid values, IAM Access Analyzer runs policy checks that apply to all resource policies. For example, to validate a resource policy to attach to a KMS key, do not specify a value for the policy validation resource type and IAM Access Analyzer will run policy checks that apply to all resource policies.</p>"""

locale instance-attribute 

locale: NotRequired[Locale]

The locale to use for localizing the findings.

max_results instance-attribute 

max_results: NotRequired[int]

The maximum number of results to return in the response.

next_token instance-attribute 

next_token: NotRequired[Token]

A token used for pagination of results returned.

policy_document instance-attribute 

policy_document: PolicyDocument

The JSON policy document to use as the content for the policy.

policy_type instance-attribute 

policy_type: PolicyType

The type of policy to validate. Identity policies grant permissions to IAM principals. Identity policies include managed and inline policies for IAM roles, users, and groups.

Resource policies grant permissions on Amazon Web Services resources. Resource policies include trust policies for IAM roles and bucket policies for Amazon S3 buckets. You can provide a generic input such as identity policy or resource policy or a specific input such as managed policy or Amazon S3 bucket policy.

Service control policies (SCPs) are a type of organization policy attached to an Amazon Web Services organization, organizational unit (OU), or an account.

validate_policy_resource_type instance-attribute 

validate_policy_resource_type: NotRequired[ValidatePolicyResourceType]

The type of resource to attach to your resource policy. Specify a value for the policy validation resource type only if the policy type is RESOURCE_POLICY. For example, to validate a resource policy to attach to an Amazon S3 bucket, you can choose AWS::S3::Bucket for the policy validation resource type.

For resource types not supported as valid values, IAM Access Analyzer runs policy checks that apply to all resource policies. For example, to validate a resource policy to attach to a KMS key, do not specify a value for the policy validation resource type and IAM Access Analyzer will run policy checks that apply to all resource policies.