software.amazon.awscdk.services.iam

Class Policy

java.lang.Object

software.amazon.jsii.JsiiObject

software.constructs.Construct

software.amazon.awscdk.Resource

software.amazon.awscdk.services.iam.Policy

All Implemented Interfaces:

IResource, IPolicy, software.amazon.jsii.JsiiSerializable, software.constructs.IConstruct, software.constructs.IDependable

@Generated(value="jsii-pacmak/1.67.0 (build 2c027f5)",
           date="2022-09-19T20:26:39.779Z")
 @Stability(value=Stable)
public class Policy
extends Resource
implements IPolicy

The AWS::IAM::Policy resource associates an IAM policy with IAM users, roles, or groups.

For more information about IAM policies, see Overview of IAM Policies in the IAM User Guide guide.

Example:

 Function postAuthFn;
 UserPool userpool = UserPool.Builder.create(this, "myuserpool")
         .lambdaTriggers(UserPoolTriggers.builder()
                 .postAuthentication(postAuthFn)
                 .build())
         .build();
 // provide permissions to describe the user pool scoped to the ARN the user pool
 postAuthFn.role.attachInlinePolicy(Policy.Builder.create(this, "userpool-policy")
         .statements(List.of(PolicyStatement.Builder.create()
                 .actions(List.of("cognito-idp:DescribeUserPool"))
                 .resources(List.of(userpool.getUserPoolArn()))
                 .build()))
         .build());
 

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	Policy.Builder A fluent builder for Policy.

Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject

software.amazon.jsii.JsiiObject.InitializationMode

Nested classes/interfaces inherited from interface software.amazon.awscdk.services.iam.IPolicy

IPolicy.Jsii$Default, IPolicy.Jsii$Proxy

Constructor Summary

Constructors

Modifier	Constructor and Description
	Policy(software.constructs.Construct scope, String id)
	Policy(software.constructs.Construct scope, String id, PolicyProps props)
protected	Policy(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)
protected	Policy(software.amazon.jsii.JsiiObjectRef objRef)

Method Summary

Modifier and Type	Method and Description
void	addStatements(PolicyStatement... statement) Adds a statement to the policy document.
void	attachToGroup(IGroup group) Attaches this policy to a group.
void	attachToRole(IRole role) Attaches this policy to a role.
void	attachToUser(IUser user) Attaches this policy to a user.
static IPolicy	fromPolicyName(software.constructs.Construct scope, String id, String policyName) Import a policy in this app based on its name.
PolicyDocument	getDocument() The policy document.
String	getPolicyName() The name of this policy.

Methods inherited from class software.amazon.awscdk.Resource

applyRemovalPolicy, generatePhysicalName, getEnv, getPhysicalName, getResourceArnAttribute, getResourceNameAttribute, getStack, isOwnedResource, isResource

Methods inherited from class software.constructs.Construct

getNode, isConstruct, toString

Methods inherited from class software.amazon.jsii.JsiiObject

jsiiAsyncCall, jsiiAsyncCall, jsiiCall, jsiiCall, jsiiGet, jsiiGet, jsiiSet, jsiiStaticCall, jsiiStaticCall, jsiiStaticGet, jsiiStaticGet, jsiiStaticSet, jsiiStaticSet

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Methods inherited from interface software.amazon.awscdk.IResource

applyRemovalPolicy, getEnv, getStack

Methods inherited from interface software.constructs.IConstruct

getNode

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Constructor Detail

Policy

protected Policy(software.amazon.jsii.JsiiObjectRef objRef)

Policy

protected Policy(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)

Policy

@Stability(value=Stable)
public Policy(@NotNull
                                       software.constructs.Construct scope,
                                       @NotNull
                                       String id,
                                       @Nullable
                                       PolicyProps props)

Parameters:

scope - This parameter is required.

id - This parameter is required.

props -

Policy

@Stability(value=Stable)
public Policy(@NotNull
                                       software.constructs.Construct scope,
                                       @NotNull
                                       String id)

Parameters:

scope - This parameter is required.

id - This parameter is required.

Method Detail

fromPolicyName

@Stability(value=Stable)
 @NotNull
public static IPolicy fromPolicyName(@NotNull
                                                                        software.constructs.Construct scope,
                                                                        @NotNull
                                                                        String id,
                                                                        @NotNull
                                                                        String policyName)

Import a policy in this app based on its name.

Parameters:

scope - This parameter is required.

id - This parameter is required.

policyName - This parameter is required.

addStatements

@Stability(value=Stable)
public void addStatements(@NotNull
                                                   PolicyStatement... statement)

Adds a statement to the policy document.

Parameters:

statement - This parameter is required.

attachToGroup

@Stability(value=Stable)
public void attachToGroup(@NotNull
                                                   IGroup group)

Attaches this policy to a group.

Parameters:

group - This parameter is required.

attachToRole

@Stability(value=Stable)
public void attachToRole(@NotNull
                                                  IRole role)

Attaches this policy to a role.

Parameters:

role - This parameter is required.

attachToUser

@Stability(value=Stable)
public void attachToUser(@NotNull
                                                  IUser user)

Attaches this policy to a user.

Parameters:

user - This parameter is required.

getDocument

@Stability(value=Stable)
 @NotNull
public PolicyDocument getDocument()

The policy document.

getPolicyName

@Stability(value=Stable)
 @NotNull
public String getPolicyName()

The name of this policy.

Specified by:

getPolicyName in interface IPolicy