Skip to content

aws.iam-policy resource

Description

Policy manages an IAM customer managed policy. The policy document is the permission set the policy grants; a change to it is applied in place by adding a new default version. The name, path, and description are fixed at create time: IAM cannot rename or re-path a policy, and it treats the description as immutable, so a change to any of them recreates the policy.

Source: internal/service/iam/policy_rsrc.go:31

Example usage:

imports: {
  aws: 'github.com/cloudboss/unobin-library-aws'
}

resources: {
  example: aws.iam-policy {
    # Set input fields here.
  }
}

Inputs

policy-name

string

required

policy-document

string

required

path

optional(string)

description

optional(string)

tags

map(string)

Input Constraints

This kind declares no extra input constraints.

Outputs

arn

string

policy-id

string

default-version-id

string

attachment-count

integer

create-date

string