PermissionsBoundary

class aws_cdk.aws_iam.PermissionsBoundary(*args: Any, **kwargs)

Bases: object

Modify the Permissions Boundaries of Users and Roles in a construct tree.

Example:

policy = iam.ManagedPolicy.from_aws_managed_policy_name("ReadOnlyAccess")
iam.PermissionsBoundary.of(self).apply(policy)

ExampleMetadata:: infused

Example:

# project: codebuild.Project

iam.PermissionsBoundary.of(project).apply(codebuild.UntrustedCodeBoundaryPolicy(self, "Boundary"))

Methods

apply(boundary_policy)

Apply the given policy as Permissions Boundary to all Roles and Users in the scope.

Will override any Permissions Boundaries configured previously; in case a Permission Boundary is applied in multiple scopes, the Boundary applied closest to the Role wins.

Parameters:: boundary_policy (IManagedPolicy)
Return type:: None

clear()

Remove previously applied Permissions Boundaries.

Return type:: None

Static Methods

classmethod of(scope)

Access the Permissions Boundaries of a construct tree.

Parameters:: scope (IConstruct)
Return type:: PermissionsBoundary