Skip to content

PermissionsBoundaryDecisionDetail

Source code in docs_src/capo_iam/types/permissions_boundary_decision_detail.py 
13
14
15
class PermissionsBoundaryDecisionDetail(TypedDict, closed=True):
    allowed_by_permissions_boundary: "capo_iam.types.boolean_type.booleanType"
    """<p>Specifies whether an action is allowed by a permissions boundary that is applied to an IAM entity (user or role). A value of <code>true</code> means that the permissions boundary does not deny the action. This means that the policy includes an <code>Allow</code> statement that matches the request. In this case, if an identity-based policy also allows the action, the request is allowed. A value of <code>false</code> means that either the requested action is not allowed (implicitly denied) or that the action is explicitly denied by the permissions boundary. In both of these cases, the action is not allowed, regardless of the identity-based policy.</p>"""

allowed_by_permissions_boundary instance-attribute 

allowed_by_permissions_boundary: booleanType

Specifies whether an action is allowed by a permissions boundary that is applied to an IAM entity (user or role). A value of true means that the permissions boundary does not deny the action. This means that the policy includes an Allow statement that matches the request. In this case, if an identity-based policy also allows the action, the request is allowed. A value of false means that either the requested action is not allowed (implicitly denied) or that the action is explicitly denied by the permissions boundary. In both of these cases, the action is not allowed, regardless of the identity-based policy.