Package com.pulumi.aws.iam.inputs

Class GetPrincipalPolicySimulationArgs.Builder

    • Method Detail

      • actionNames

        public GetPrincipalPolicySimulationArgs.Builder actionNames​(com.pulumi.core.Output<java.util.List<java.lang.String>> actionNames)
        Parameters:
        actionNames - A set of IAM action names to run simulations for. Each entry in this set adds an additional hypothetical request to the simulation. Action names consist of a service prefix and an action verb separated by a colon, such as `s3:GetObject`. Refer to [Actions, resources, and condition keys for AWS services](https://docs.aws.amazon.com/service-authorization/latest/reference/reference_policies_actions-resources-contextkeys.html) to see the full set of possible IAM action names across all AWS services.
        Returns:
        builder

      • actionNames

        public GetPrincipalPolicySimulationArgs.Builder actionNames​(java.util.List<java.lang.String> actionNames)
        Parameters:
        actionNames - A set of IAM action names to run simulations for. Each entry in this set adds an additional hypothetical request to the simulation. Action names consist of a service prefix and an action verb separated by a colon, such as `s3:GetObject`. Refer to [Actions, resources, and condition keys for AWS services](https://docs.aws.amazon.com/service-authorization/latest/reference/reference_policies_actions-resources-contextkeys.html) to see the full set of possible IAM action names across all AWS services.
        Returns:
        builder

      • actionNames

        public GetPrincipalPolicySimulationArgs.Builder actionNames​(java.lang.String... actionNames)
        Parameters:
        actionNames - A set of IAM action names to run simulations for. Each entry in this set adds an additional hypothetical request to the simulation. Action names consist of a service prefix and an action verb separated by a colon, such as `s3:GetObject`. Refer to [Actions, resources, and condition keys for AWS services](https://docs.aws.amazon.com/service-authorization/latest/reference/reference_policies_actions-resources-contextkeys.html) to see the full set of possible IAM action names across all AWS services.
        Returns:
        builder

      • additionalPoliciesJsons

        public GetPrincipalPolicySimulationArgs.Builder additionalPoliciesJsons​(@Nullable
                                                                        com.pulumi.core.Output<java.util.List<java.lang.String>> additionalPoliciesJsons)
        Parameters:
        additionalPoliciesJsons - A set of additional principal policy documents to include in the simulation. The simulator will behave as if each of these policies were associated with the object specified in `policy_source_arn`, allowing you to test the effect of hypothetical policies not yet created.
        Returns:
        builder

      • additionalPoliciesJsons

        public GetPrincipalPolicySimulationArgs.Builder additionalPoliciesJsons​(java.util.List<java.lang.String> additionalPoliciesJsons)
        Parameters:
        additionalPoliciesJsons - A set of additional principal policy documents to include in the simulation. The simulator will behave as if each of these policies were associated with the object specified in `policy_source_arn`, allowing you to test the effect of hypothetical policies not yet created.
        Returns:
        builder

      • additionalPoliciesJsons

        public GetPrincipalPolicySimulationArgs.Builder additionalPoliciesJsons​(java.lang.String... additionalPoliciesJsons)
        Parameters:
        additionalPoliciesJsons - A set of additional principal policy documents to include in the simulation. The simulator will behave as if each of these policies were associated with the object specified in `policy_source_arn`, allowing you to test the effect of hypothetical policies not yet created.
        Returns:
        builder

      • callerArn

        public GetPrincipalPolicySimulationArgs.Builder callerArn​(@Nullable
                                                          com.pulumi.core.Output<java.lang.String> callerArn)
        Parameters:
        callerArn - The ARN of an user that will appear as the "caller" of the simulated requests. If you do not specify `caller_arn` then the simulation will use the `policy_source_arn` instead, if it contains a user ARN.
        Returns:
        builder

      • callerArn

        public GetPrincipalPolicySimulationArgs.Builder callerArn​(java.lang.String callerArn)
        Parameters:
        callerArn - The ARN of an user that will appear as the "caller" of the simulated requests. If you do not specify `caller_arn` then the simulation will use the `policy_source_arn` instead, if it contains a user ARN.
        Returns:
        builder

      • contexts

        public GetPrincipalPolicySimulationArgs.Builder contexts​(@Nullable
                                                         com.pulumi.core.Output<java.util.List<GetPrincipalPolicySimulationContextArgs>> contexts)
        Parameters:
        contexts - Each `context` block defines an entry in the table of additional context keys in the simulated request. IAM uses context keys for both custom conditions and for interpolating dynamic request-specific values into policy values. If you use policies that include those features then you will need to provide suitable example values for those keys to achieve a realistic simulation.
        Returns:
        builder

      • contexts

        public GetPrincipalPolicySimulationArgs.Builder contexts​(java.util.List<GetPrincipalPolicySimulationContextArgs> contexts)
        Parameters:
        contexts - Each `context` block defines an entry in the table of additional context keys in the simulated request. IAM uses context keys for both custom conditions and for interpolating dynamic request-specific values into policy values. If you use policies that include those features then you will need to provide suitable example values for those keys to achieve a realistic simulation.
        Returns:
        builder

      • contexts

        public GetPrincipalPolicySimulationArgs.Builder contexts​(GetPrincipalPolicySimulationContextArgs... contexts)
        Parameters:
        contexts - Each `context` block defines an entry in the table of additional context keys in the simulated request. IAM uses context keys for both custom conditions and for interpolating dynamic request-specific values into policy values. If you use policies that include those features then you will need to provide suitable example values for those keys to achieve a realistic simulation.
        Returns:
        builder

      • permissionsBoundaryPoliciesJsons

        public GetPrincipalPolicySimulationArgs.Builder permissionsBoundaryPoliciesJsons​(@Nullable
                                                                                 com.pulumi.core.Output<java.util.List<java.lang.String>> permissionsBoundaryPoliciesJsons)
        Parameters:
        permissionsBoundaryPoliciesJsons - A set of [permissions boundary policy documents](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html) to include in the simulation.
        Returns:
        builder

      • permissionsBoundaryPoliciesJsons

        public GetPrincipalPolicySimulationArgs.Builder permissionsBoundaryPoliciesJsons​(java.util.List<java.lang.String> permissionsBoundaryPoliciesJsons)
        Parameters:
        permissionsBoundaryPoliciesJsons - A set of [permissions boundary policy documents](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html) to include in the simulation.
        Returns:
        builder

      • permissionsBoundaryPoliciesJsons

        public GetPrincipalPolicySimulationArgs.Builder permissionsBoundaryPoliciesJsons​(java.lang.String... permissionsBoundaryPoliciesJsons)
        Parameters:
        permissionsBoundaryPoliciesJsons - A set of [permissions boundary policy documents](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html) to include in the simulation.
        Returns:
        builder

      • policySourceArn

        public GetPrincipalPolicySimulationArgs.Builder policySourceArn​(com.pulumi.core.Output<java.lang.String> policySourceArn)
        Parameters:
        policySourceArn - The [ARN](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) of the IAM user, group, or role whose policies will be included in the simulation. You must closely match the form of the real service request you are simulating in order to achieve a realistic result. You can use the following additional arguments to specify other characteristics of the simulated requests:
        Returns:
        builder

      • policySourceArn

        public GetPrincipalPolicySimulationArgs.Builder policySourceArn​(java.lang.String policySourceArn)
        Parameters:
        policySourceArn - The [ARN](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) of the IAM user, group, or role whose policies will be included in the simulation. You must closely match the form of the real service request you are simulating in order to achieve a realistic result. You can use the following additional arguments to specify other characteristics of the simulated requests:
        Returns:
        builder

      • resourceArns

        public GetPrincipalPolicySimulationArgs.Builder resourceArns​(@Nullable
                                                             com.pulumi.core.Output<java.util.List<java.lang.String>> resourceArns)
        Parameters:
        resourceArns - A set of ARNs of resources to include in the simulation. This argument is important for actions that have either required or optional resource types listed in [Actions, resources, and condition keys for AWS services](https://docs.aws.amazon.com/service-authorization/latest/reference/reference_policies_actions-resources-contextkeys.html), and you must provide ARNs that identify AWS objects of the appropriate types for the chosen actions. The policy simulator only automatically loads policies associated with the `policy_source_arn`, so if your given resources have their own resource-level policy then you'll also need to provide that explicitly using the `resource_policy_json` argument to achieve a realistic simulation.
        Returns:
        builder

      • resourceArns

        public GetPrincipalPolicySimulationArgs.Builder resourceArns​(java.util.List<java.lang.String> resourceArns)
        Parameters:
        resourceArns - A set of ARNs of resources to include in the simulation. This argument is important for actions that have either required or optional resource types listed in [Actions, resources, and condition keys for AWS services](https://docs.aws.amazon.com/service-authorization/latest/reference/reference_policies_actions-resources-contextkeys.html), and you must provide ARNs that identify AWS objects of the appropriate types for the chosen actions. The policy simulator only automatically loads policies associated with the `policy_source_arn`, so if your given resources have their own resource-level policy then you'll also need to provide that explicitly using the `resource_policy_json` argument to achieve a realistic simulation.
        Returns:
        builder

      • resourceArns

        public GetPrincipalPolicySimulationArgs.Builder resourceArns​(java.lang.String... resourceArns)
        Parameters:
        resourceArns - A set of ARNs of resources to include in the simulation. This argument is important for actions that have either required or optional resource types listed in [Actions, resources, and condition keys for AWS services](https://docs.aws.amazon.com/service-authorization/latest/reference/reference_policies_actions-resources-contextkeys.html), and you must provide ARNs that identify AWS objects of the appropriate types for the chosen actions. The policy simulator only automatically loads policies associated with the `policy_source_arn`, so if your given resources have their own resource-level policy then you'll also need to provide that explicitly using the `resource_policy_json` argument to achieve a realistic simulation.
        Returns:
        builder

      • resourceHandlingOption

        public GetPrincipalPolicySimulationArgs.Builder resourceHandlingOption​(@Nullable
                                                                       com.pulumi.core.Output<java.lang.String> resourceHandlingOption)
        Parameters:
        resourceHandlingOption - Specifies a special simulation type to run. Some EC2 actions require special simulation behaviors and a particular set of resource ARNs to achieve a realistic result. For more details, see the `ResourceHandlingOption` request parameter for [the underlying `iam:SimulatePrincipalPolicy` action](https://docs.aws.amazon.com/IAM/latest/APIReference/API_SimulatePrincipalPolicy.html).
        Returns:
        builder

      • resourceHandlingOption

        public GetPrincipalPolicySimulationArgs.Builder resourceHandlingOption​(java.lang.String resourceHandlingOption)
        Parameters:
        resourceHandlingOption - Specifies a special simulation type to run. Some EC2 actions require special simulation behaviors and a particular set of resource ARNs to achieve a realistic result. For more details, see the `ResourceHandlingOption` request parameter for [the underlying `iam:SimulatePrincipalPolicy` action](https://docs.aws.amazon.com/IAM/latest/APIReference/API_SimulatePrincipalPolicy.html).
        Returns:
        builder

      • resourceOwnerAccountId

        public GetPrincipalPolicySimulationArgs.Builder resourceOwnerAccountId​(@Nullable
                                                                       com.pulumi.core.Output<java.lang.String> resourceOwnerAccountId)
        Parameters:
        resourceOwnerAccountId - An AWS account ID to use for any resource ARN in `resource_arns` that doesn't include its own AWS account ID. If unspecified, the simulator will use the account ID from the `caller_arn` argument as a placeholder.
        Returns:
        builder

      • resourceOwnerAccountId

        public GetPrincipalPolicySimulationArgs.Builder resourceOwnerAccountId​(java.lang.String resourceOwnerAccountId)
        Parameters:
        resourceOwnerAccountId - An AWS account ID to use for any resource ARN in `resource_arns` that doesn't include its own AWS account ID. If unspecified, the simulator will use the account ID from the `caller_arn` argument as a placeholder.
        Returns:
        builder

      • resourcePolicyJson

        public GetPrincipalPolicySimulationArgs.Builder resourcePolicyJson​(@Nullable
                                                                   com.pulumi.core.Output<java.lang.String> resourcePolicyJson)
        Parameters:
        resourcePolicyJson - An IAM policy document representing the resource-level policy of all of the resources specified in `resource_arns`. The policy simulator cannot automatically load policies that are associated with individual resources, as described in the documentation for `resource_arns` above.
        Returns:
        builder

      • resourcePolicyJson

        public GetPrincipalPolicySimulationArgs.Builder resourcePolicyJson​(java.lang.String resourcePolicyJson)
        Parameters:
        resourcePolicyJson - An IAM policy document representing the resource-level policy of all of the resources specified in `resource_arns`. The policy simulator cannot automatically load policies that are associated with individual resources, as described in the documentation for `resource_arns` above.
        Returns:
        builder