public class ResourceSpecificResult extends Object implements Serializable, Cloneable
Contains the result of the simulation of a single API action call on a single resource.
This data type is used by a member of the EvaluationResult data type.
Constructor and Description |
---|
ResourceSpecificResult() |
Modifier and Type | Method and Description |
---|---|
ResourceSpecificResult |
addEvalDecisionDetailsEntry(String key,
String value) |
ResourceSpecificResult |
clearEvalDecisionDetailsEntries()
Removes all the entries added into EvalDecisionDetails.
|
ResourceSpecificResult |
clone() |
boolean |
equals(Object obj) |
Map<String,String> |
getEvalDecisionDetails()
Additional details about the results of the evaluation decision.
|
String |
getEvalResourceDecision()
The result of the simulation of the simulated API action on the resource
specified in
EvalResourceName . |
String |
getEvalResourceName()
The name of the simulated resource, in Amazon Resource Name (ARN) format.
|
List<Statement> |
getMatchedStatements()
A list of the statements in the input policies that determine the result
for this part of the simulation.
|
List<String> |
getMissingContextValues()
A list of context keys that are required by the included input policies
but that were not provided by one of the input parameters.
|
int |
hashCode() |
void |
setEvalDecisionDetails(Map<String,String> evalDecisionDetails)
Additional details about the results of the evaluation decision.
|
void |
setEvalResourceDecision(PolicyEvaluationDecisionType evalResourceDecision)
The result of the simulation of the simulated API action on the resource
specified in
EvalResourceName . |
void |
setEvalResourceDecision(String evalResourceDecision)
The result of the simulation of the simulated API action on the resource
specified in
EvalResourceName . |
void |
setEvalResourceName(String evalResourceName)
The name of the simulated resource, in Amazon Resource Name (ARN) format.
|
void |
setMatchedStatements(Collection<Statement> matchedStatements)
A list of the statements in the input policies that determine the result
for this part of the simulation.
|
void |
setMissingContextValues(Collection<String> missingContextValues)
A list of context keys that are required by the included input policies
but that were not provided by one of the input parameters.
|
String |
toString()
Returns a string representation of this object; useful for testing and
debugging.
|
ResourceSpecificResult |
withEvalDecisionDetails(Map<String,String> evalDecisionDetails)
Additional details about the results of the evaluation decision.
|
ResourceSpecificResult |
withEvalResourceDecision(PolicyEvaluationDecisionType evalResourceDecision)
The result of the simulation of the simulated API action on the resource
specified in
EvalResourceName . |
ResourceSpecificResult |
withEvalResourceDecision(String evalResourceDecision)
The result of the simulation of the simulated API action on the resource
specified in
EvalResourceName . |
ResourceSpecificResult |
withEvalResourceName(String evalResourceName)
The name of the simulated resource, in Amazon Resource Name (ARN) format.
|
ResourceSpecificResult |
withMatchedStatements(Collection<Statement> matchedStatements)
A list of the statements in the input policies that determine the result
for this part of the simulation.
|
ResourceSpecificResult |
withMatchedStatements(Statement... matchedStatements)
A list of the statements in the input policies that determine the result
for this part of the simulation.
|
ResourceSpecificResult |
withMissingContextValues(Collection<String> missingContextValues)
A list of context keys that are required by the included input policies
but that were not provided by one of the input parameters.
|
ResourceSpecificResult |
withMissingContextValues(String... missingContextValues)
A list of context keys that are required by the included input policies
but that were not provided by one of the input parameters.
|
public void setEvalResourceName(String evalResourceName)
The name of the simulated resource, in Amazon Resource Name (ARN) format.
evalResourceName
- The name of the simulated resource, in Amazon Resource Name (ARN)
format.public String getEvalResourceName()
The name of the simulated resource, in Amazon Resource Name (ARN) format.
public ResourceSpecificResult withEvalResourceName(String evalResourceName)
The name of the simulated resource, in Amazon Resource Name (ARN) format.
evalResourceName
- The name of the simulated resource, in Amazon Resource Name (ARN)
format.public void setEvalResourceDecision(String evalResourceDecision)
The result of the simulation of the simulated API action on the resource
specified in EvalResourceName
.
evalResourceDecision
- The result of the simulation of the simulated API action on the
resource specified in EvalResourceName
.PolicyEvaluationDecisionType
public String getEvalResourceDecision()
The result of the simulation of the simulated API action on the resource
specified in EvalResourceName
.
EvalResourceName
.PolicyEvaluationDecisionType
public ResourceSpecificResult withEvalResourceDecision(String evalResourceDecision)
The result of the simulation of the simulated API action on the resource
specified in EvalResourceName
.
evalResourceDecision
- The result of the simulation of the simulated API action on the
resource specified in EvalResourceName
.PolicyEvaluationDecisionType
public void setEvalResourceDecision(PolicyEvaluationDecisionType evalResourceDecision)
The result of the simulation of the simulated API action on the resource
specified in EvalResourceName
.
evalResourceDecision
- The result of the simulation of the simulated API action on the
resource specified in EvalResourceName
.PolicyEvaluationDecisionType
public ResourceSpecificResult withEvalResourceDecision(PolicyEvaluationDecisionType evalResourceDecision)
The result of the simulation of the simulated API action on the resource
specified in EvalResourceName
.
evalResourceDecision
- The result of the simulation of the simulated API action on the
resource specified in EvalResourceName
.PolicyEvaluationDecisionType
public List<Statement> getMatchedStatements()
A list of the statements in the input policies that determine the result for this part of the simulation. Remember that even if multiple statements allow the action on the resource, if any statement denies that action, then the explicit deny overrides any allow, and the deny statement is the only entry included in the result.
public void setMatchedStatements(Collection<Statement> matchedStatements)
A list of the statements in the input policies that determine the result for this part of the simulation. Remember that even if multiple statements allow the action on the resource, if any statement denies that action, then the explicit deny overrides any allow, and the deny statement is the only entry included in the result.
matchedStatements
- A list of the statements in the input policies that determine the
result for this part of the simulation. Remember that even if
multiple statements allow the action on the resource, if
any statement denies that action, then the explicit deny
overrides any allow, and the deny statement is the only entry
included in the result.public ResourceSpecificResult withMatchedStatements(Statement... matchedStatements)
A list of the statements in the input policies that determine the result for this part of the simulation. Remember that even if multiple statements allow the action on the resource, if any statement denies that action, then the explicit deny overrides any allow, and the deny statement is the only entry included in the result.
NOTE: This method appends the values to the existing list (if
any). Use setMatchedStatements(java.util.Collection)
or
withMatchedStatements(java.util.Collection)
if you want to
override the existing values.
matchedStatements
- A list of the statements in the input policies that determine the
result for this part of the simulation. Remember that even if
multiple statements allow the action on the resource, if
any statement denies that action, then the explicit deny
overrides any allow, and the deny statement is the only entry
included in the result.public ResourceSpecificResult withMatchedStatements(Collection<Statement> matchedStatements)
A list of the statements in the input policies that determine the result for this part of the simulation. Remember that even if multiple statements allow the action on the resource, if any statement denies that action, then the explicit deny overrides any allow, and the deny statement is the only entry included in the result.
matchedStatements
- A list of the statements in the input policies that determine the
result for this part of the simulation. Remember that even if
multiple statements allow the action on the resource, if
any statement denies that action, then the explicit deny
overrides any allow, and the deny statement is the only entry
included in the result.public List<String> getMissingContextValues()
A list of context keys that are required by the included input policies
but that were not provided by one of the input parameters. This list is
used when a list of ARNs is included in the ResourceArns
parameter instead of "*". If you do not specify individual resources, by
setting ResourceArns
to "*" or by not including the
ResourceArns
parameter, then any missing context values are
instead included under the EvaluationResults
section. To
discover the context keys used by a set of policies, you can call
GetContextKeysForCustomPolicy or
GetContextKeysForPrincipalPolicy.
ResourceArns
parameter instead of "*". If you do
not specify individual resources, by setting
ResourceArns
to "*" or by not including the
ResourceArns
parameter, then any missing context
values are instead included under the
EvaluationResults
section. To discover the context
keys used by a set of policies, you can call
GetContextKeysForCustomPolicy or
GetContextKeysForPrincipalPolicy.public void setMissingContextValues(Collection<String> missingContextValues)
A list of context keys that are required by the included input policies
but that were not provided by one of the input parameters. This list is
used when a list of ARNs is included in the ResourceArns
parameter instead of "*". If you do not specify individual resources, by
setting ResourceArns
to "*" or by not including the
ResourceArns
parameter, then any missing context values are
instead included under the EvaluationResults
section. To
discover the context keys used by a set of policies, you can call
GetContextKeysForCustomPolicy or
GetContextKeysForPrincipalPolicy.
missingContextValues
- A list of context keys that are required by the included input
policies but that were not provided by one of the input
parameters. This list is used when a list of ARNs is included in
the ResourceArns
parameter instead of "*". If you do
not specify individual resources, by setting
ResourceArns
to "*" or by not including the
ResourceArns
parameter, then any missing context
values are instead included under the
EvaluationResults
section. To discover the context
keys used by a set of policies, you can call
GetContextKeysForCustomPolicy or
GetContextKeysForPrincipalPolicy.public ResourceSpecificResult withMissingContextValues(String... missingContextValues)
A list of context keys that are required by the included input policies
but that were not provided by one of the input parameters. This list is
used when a list of ARNs is included in the ResourceArns
parameter instead of "*". If you do not specify individual resources, by
setting ResourceArns
to "*" or by not including the
ResourceArns
parameter, then any missing context values are
instead included under the EvaluationResults
section. To
discover the context keys used by a set of policies, you can call
GetContextKeysForCustomPolicy or
GetContextKeysForPrincipalPolicy.
NOTE: This method appends the values to the existing list (if
any). Use setMissingContextValues(java.util.Collection)
or
withMissingContextValues(java.util.Collection)
if you want to
override the existing values.
missingContextValues
- A list of context keys that are required by the included input
policies but that were not provided by one of the input
parameters. This list is used when a list of ARNs is included in
the ResourceArns
parameter instead of "*". If you do
not specify individual resources, by setting
ResourceArns
to "*" or by not including the
ResourceArns
parameter, then any missing context
values are instead included under the
EvaluationResults
section. To discover the context
keys used by a set of policies, you can call
GetContextKeysForCustomPolicy or
GetContextKeysForPrincipalPolicy.public ResourceSpecificResult withMissingContextValues(Collection<String> missingContextValues)
A list of context keys that are required by the included input policies
but that were not provided by one of the input parameters. This list is
used when a list of ARNs is included in the ResourceArns
parameter instead of "*". If you do not specify individual resources, by
setting ResourceArns
to "*" or by not including the
ResourceArns
parameter, then any missing context values are
instead included under the EvaluationResults
section. To
discover the context keys used by a set of policies, you can call
GetContextKeysForCustomPolicy or
GetContextKeysForPrincipalPolicy.
missingContextValues
- A list of context keys that are required by the included input
policies but that were not provided by one of the input
parameters. This list is used when a list of ARNs is included in
the ResourceArns
parameter instead of "*". If you do
not specify individual resources, by setting
ResourceArns
to "*" or by not including the
ResourceArns
parameter, then any missing context
values are instead included under the
EvaluationResults
section. To discover the context
keys used by a set of policies, you can call
GetContextKeysForCustomPolicy or
GetContextKeysForPrincipalPolicy.public Map<String,String> getEvalDecisionDetails()
Additional details about the results of the evaluation decision. When there are both IAM policies and resource policies, this parameter explains how each set of policies contributes to the final evaluation decision. When simulating cross-account access to a resource, both the resource-based policy and the caller's IAM policy must grant access.
public void setEvalDecisionDetails(Map<String,String> evalDecisionDetails)
Additional details about the results of the evaluation decision. When there are both IAM policies and resource policies, this parameter explains how each set of policies contributes to the final evaluation decision. When simulating cross-account access to a resource, both the resource-based policy and the caller's IAM policy must grant access.
evalDecisionDetails
- Additional details about the results of the evaluation decision.
When there are both IAM policies and resource policies, this
parameter explains how each set of policies contributes to the
final evaluation decision. When simulating cross-account access to
a resource, both the resource-based policy and the caller's IAM
policy must grant access.public ResourceSpecificResult withEvalDecisionDetails(Map<String,String> evalDecisionDetails)
Additional details about the results of the evaluation decision. When there are both IAM policies and resource policies, this parameter explains how each set of policies contributes to the final evaluation decision. When simulating cross-account access to a resource, both the resource-based policy and the caller's IAM policy must grant access.
evalDecisionDetails
- Additional details about the results of the evaluation decision.
When there are both IAM policies and resource policies, this
parameter explains how each set of policies contributes to the
final evaluation decision. When simulating cross-account access to
a resource, both the resource-based policy and the caller's IAM
policy must grant access.public ResourceSpecificResult addEvalDecisionDetailsEntry(String key, String value)
public ResourceSpecificResult clearEvalDecisionDetailsEntries()
public String toString()
toString
in class Object
Object.toString()
public ResourceSpecificResult clone()
Copyright © 2013 Amazon Web Services, Inc. All Rights Reserved.