Class GetPolicyDocumentStatement


  • public final class GetPolicyDocumentStatement
    extends java.lang.Object
    • Method Detail

      • actions

        public java.util.List<java.lang.String> actions()
        Returns:
        List of actions that this statement either allows or denies. For example, `["ec2:RunInstances", "s3:*"]`.
      • effect

        public java.util.Optional<java.lang.String> effect()
        Returns:
        Whether this statement allows or denies the given actions. Valid values are `Allow` and `Deny`. Defaults to `Allow`.
      • notActions

        public java.util.List<java.lang.String> notActions()
        Returns:
        List of actions that this statement does *not* apply to. Use to apply a policy statement to all actions *except* those listed.
      • notPrincipals

        public java.util.List<GetPolicyDocumentStatementNotPrincipal> notPrincipals()
        Returns:
        Like `principals` except these are principals that the statement does *not* apply to.
      • notResources

        public java.util.List<java.lang.String> notResources()
        Returns:
        List of resource ARNs that this statement does *not* apply to. Use to apply a policy statement to all resources *except* those listed. Conflicts with `resources`.
      • resources

        public java.util.List<java.lang.String> resources()
        Returns:
        List of resource ARNs that this statement applies to. This is required by AWS if used for an IAM policy. Conflicts with `not_resources`.
      • sid

        public java.util.Optional<java.lang.String> sid()
        Returns:
        Sid (statement ID) is an identifier for a policy statement.