public static interface ResourceSpecificResult.Builder extends SdkPojo, CopyableBuilder<ResourceSpecificResult.Builder,ResourceSpecificResult>
Modifier and Type | Method and Description |
---|---|
ResourceSpecificResult.Builder |
evalDecisionDetails(Map<String,PolicyEvaluationDecisionType> evalDecisionDetails)
Additional details about the results of the evaluation decision.
|
ResourceSpecificResult.Builder |
evalDecisionDetailsWithStrings(Map<String,String> evalDecisionDetails)
Additional details about the results of the evaluation decision.
|
ResourceSpecificResult.Builder |
evalResourceDecision(PolicyEvaluationDecisionType evalResourceDecision)
The result of the simulation of the simulated API operation on the resource specified in
EvalResourceName . |
ResourceSpecificResult.Builder |
evalResourceDecision(String evalResourceDecision)
The result of the simulation of the simulated API operation on the resource specified in
EvalResourceName . |
ResourceSpecificResult.Builder |
evalResourceName(String evalResourceName)
The name of the simulated resource, in Amazon Resource Name (ARN) format.
|
ResourceSpecificResult.Builder |
matchedStatements(Collection<Statement> matchedStatements)
A list of the statements in the input policies that determine the result for this part of the simulation.
|
ResourceSpecificResult.Builder |
matchedStatements(Consumer<Statement.Builder>... matchedStatements)
A list of the statements in the input policies that determine the result for this part of the simulation.
|
ResourceSpecificResult.Builder |
matchedStatements(Statement... matchedStatements)
A list of the statements in the input policies that determine the result for this part of the simulation.
|
ResourceSpecificResult.Builder |
missingContextValues(Collection<String> missingContextValues)
A list of context keys that are required by the included input policies but that were not provided by one of
the input parameters.
|
ResourceSpecificResult.Builder |
missingContextValues(String... missingContextValues)
A list of context keys that are required by the included input policies but that were not provided by one of
the input parameters.
|
equalsBySdkFields, sdkFields
copy
applyMutation, build
ResourceSpecificResult.Builder evalResourceName(String evalResourceName)
The name of the simulated resource, in Amazon Resource Name (ARN) format.
evalResourceName
- The name of the simulated resource, in Amazon Resource Name (ARN) format.ResourceSpecificResult.Builder evalResourceDecision(String evalResourceDecision)
The result of the simulation of the simulated API operation on the resource specified in
EvalResourceName
.
evalResourceDecision
- The result of the simulation of the simulated API operation on the resource specified in
EvalResourceName
.PolicyEvaluationDecisionType
,
PolicyEvaluationDecisionType
ResourceSpecificResult.Builder evalResourceDecision(PolicyEvaluationDecisionType evalResourceDecision)
The result of the simulation of the simulated API operation on the resource specified in
EvalResourceName
.
evalResourceDecision
- The result of the simulation of the simulated API operation on the resource specified in
EvalResourceName
.PolicyEvaluationDecisionType
,
PolicyEvaluationDecisionType
ResourceSpecificResult.Builder matchedStatements(Collection<Statement> matchedStatements)
A list of the statements in the input policies that determine the result for this part of the simulation. Remember that even if multiple statements allow the operation on the resource, if any statement denies that operation, then the explicit deny overrides any allow. In addition, the deny statement is the only entry included in the result.
matchedStatements
- A list of the statements in the input policies that determine the result for this part of the
simulation. Remember that even if multiple statements allow the operation on the resource, if
any statement denies that operation, then the explicit deny overrides any allow. In addition,
the deny statement is the only entry included in the result.ResourceSpecificResult.Builder matchedStatements(Statement... matchedStatements)
A list of the statements in the input policies that determine the result for this part of the simulation. Remember that even if multiple statements allow the operation on the resource, if any statement denies that operation, then the explicit deny overrides any allow. In addition, the deny statement is the only entry included in the result.
matchedStatements
- A list of the statements in the input policies that determine the result for this part of the
simulation. Remember that even if multiple statements allow the operation on the resource, if
any statement denies that operation, then the explicit deny overrides any allow. In addition,
the deny statement is the only entry included in the result.ResourceSpecificResult.Builder matchedStatements(Consumer<Statement.Builder>... matchedStatements)
A list of the statements in the input policies that determine the result for this part of the simulation. Remember that even if multiple statements allow the operation on the resource, if any statement denies that operation, then the explicit deny overrides any allow. In addition, the deny statement is the only entry included in the result.
This is a convenience that creates an instance of theList.Builder
avoiding the need to
create one manually via List#builder()
.
When the Consumer
completes, List.Builder#build()
is called immediately and its
result is passed to #matchedStatements(List)
.matchedStatements
- a consumer that will call methods on List.Builder
#matchedStatements(List)
ResourceSpecificResult.Builder missingContextValues(Collection<String> missingContextValues)
A list of context keys that are required by the included input policies but that were not provided by one of
the input parameters. This list is used when a list of ARNs is included in the ResourceArns
parameter instead of "*". If you do not specify individual resources, by setting ResourceArns
to
"*" or by not including the ResourceArns
parameter, then any missing context values are instead
included under the EvaluationResults
section. To discover the context keys used by a set of
policies, you can call GetContextKeysForCustomPolicy or GetContextKeysForPrincipalPolicy.
missingContextValues
- A list of context keys that are required by the included input policies but that were not provided by
one of the input parameters. This list is used when a list of ARNs is included in the
ResourceArns
parameter instead of "*". If you do not specify individual resources, by
setting ResourceArns
to "*" or by not including the ResourceArns
parameter,
then any missing context values are instead included under the EvaluationResults
section.
To discover the context keys used by a set of policies, you can call
GetContextKeysForCustomPolicy or GetContextKeysForPrincipalPolicy.ResourceSpecificResult.Builder missingContextValues(String... missingContextValues)
A list of context keys that are required by the included input policies but that were not provided by one of
the input parameters. This list is used when a list of ARNs is included in the ResourceArns
parameter instead of "*". If you do not specify individual resources, by setting ResourceArns
to
"*" or by not including the ResourceArns
parameter, then any missing context values are instead
included under the EvaluationResults
section. To discover the context keys used by a set of
policies, you can call GetContextKeysForCustomPolicy or GetContextKeysForPrincipalPolicy.
missingContextValues
- A list of context keys that are required by the included input policies but that were not provided by
one of the input parameters. This list is used when a list of ARNs is included in the
ResourceArns
parameter instead of "*". If you do not specify individual resources, by
setting ResourceArns
to "*" or by not including the ResourceArns
parameter,
then any missing context values are instead included under the EvaluationResults
section.
To discover the context keys used by a set of policies, you can call
GetContextKeysForCustomPolicy or GetContextKeysForPrincipalPolicy.ResourceSpecificResult.Builder evalDecisionDetailsWithStrings(Map<String,String> evalDecisionDetails)
Additional details about the results of the evaluation decision. When there are both IAM policies and resource policies, this parameter explains how each set of policies contributes to the final evaluation decision. When simulating cross-account access to a resource, both the resource-based policy and the caller's IAM policy must grant access.
evalDecisionDetails
- Additional details about the results of the evaluation decision. When there are both IAM policies and
resource policies, this parameter explains how each set of policies contributes to the final
evaluation decision. When simulating cross-account access to a resource, both the resource-based
policy and the caller's IAM policy must grant access.ResourceSpecificResult.Builder evalDecisionDetails(Map<String,PolicyEvaluationDecisionType> evalDecisionDetails)
Additional details about the results of the evaluation decision. When there are both IAM policies and resource policies, this parameter explains how each set of policies contributes to the final evaluation decision. When simulating cross-account access to a resource, both the resource-based policy and the caller's IAM policy must grant access.
evalDecisionDetails
- Additional details about the results of the evaluation decision. When there are both IAM policies and
resource policies, this parameter explains how each set of policies contributes to the final
evaluation decision. When simulating cross-account access to a resource, both the resource-based
policy and the caller's IAM policy must grant access.Copyright © 2019. All rights reserved.