Policy

Policy du tenant : document demandé et état d'application.

namestringrequired

descriptionstring

defaultbooleanrequired

Policy gérée par la plateforme (assume-role, readonly, readwrite, admin), en lecture seule.

statusstringrequired

Possible values: [applied, pending, deleting]

versioninteger<int64>

Version appliquée dans autorisation (absente tant que pending).

document objectrequired

Versionstringrequired

Possible values: [1]

Statement object[]required

Possible values: >= 1, <= 50

Array [

Effectstringrequired

Possible values: [Allow, Deny]

Actionsstring[]required

service:verbe (ssm|iam|deploy|env|policy|* : read|list|describe|write|delete|rotate|admin|*), méthode HTTP, ou *.

Resourcesstring[]

• | type/nom (joker en suffixe) | /chemin | https://hôte/chemin (joker de segment).

]

Policy

{
  "name": "string",
  "description": "string",
  "default": true,
  "status": "applied",
  "version": 0,
  "document": {
    "Version": "1",
    "Statement": [
      {
        "Effect": "Allow",
        "Actions": [
          "string"
        ],
        "Resources": [
          "string"
        ]
      }
    ]
  }
}