class ConditionalPolicyStatement 🔹

Language	Type name
.NET	Amazon.CDK.AWS.Bedrock.Agentcore.Alpha.ConditionalPolicyStatement
Go	github.com/aws/aws-cdk-go/awsbedrockagentcorealpha/v2#ConditionalPolicyStatement
Java	software.amazon.awscdk.services.bedrock.agentcore.alpha.ConditionalPolicyStatement
Python	aws_cdk.aws_bedrock_agentcore_alpha.ConditionalPolicyStatement
TypeScript (source)	@aws-cdk/aws-bedrock-agentcore-alpha » ConditionalPolicyStatement

Wrapper class for conditionally building policy statements.

This class allows chaining condition methods and returning to the parent PolicyStatement when done. It proxies condition building methods from ConditionBuilder.

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import * as bedrock_agentcore_alpha from '@aws-cdk/aws-bedrock-agentcore-alpha';

declare const conditionBuilder: bedrock_agentcore_alpha.ConditionBuilder;
declare const policyStatement: bedrock_agentcore_alpha.PolicyStatement;
const conditionalPolicyStatement = new bedrock_agentcore_alpha.ConditionalPolicyStatement(policyStatement, conditionBuilder);

Initializer

new ConditionalPolicyStatement(policyStatement: PolicyStatement, conditionBuilder: ConditionBuilder)

Parameters

• policyStatement PolicyStatement
• conditionBuilder ConditionBuilder

Methods

Name	Description
and()🔹	Logical AND operator - all conditions must be true.
contextAttribute(attribute)🔹	Access a context attribute for comparison.
done()🔹	Complete condition building and return to the PolicyStatement.
or()🔹	Logical OR operator - at least one condition must be true.
principalAttribute(attribute)🔹	Access a principal attribute for comparison.
resourceAttribute(attribute)🔹	Access a resource attribute for comparison.
unless()🔹	Alias for done() to support fluent unless() chaining.

---

and()🔹

public and(): ConditionalPolicyStatement

Returns

• ConditionalPolicyStatement

Logical AND operator - all conditions must be true.

---

contextAttribute(attribute)🔹

public contextAttribute(attribute: string): ConditionalAttributeAccessor

Parameters

• attribute string — - The attribute name (e.g., 'sourceIp', 'environment', 'timestamp').

Returns

• ConditionalAttributeAccessor

Access a context attribute for comparison.

---

done()🔹

public done(): PolicyStatement

Returns

• PolicyStatement

Complete condition building and return to the PolicyStatement.

Use this to finish building when/unless conditions and continue configuring the policy statement.

---

or()🔹

public or(): ConditionalPolicyStatement

Returns

• ConditionalPolicyStatement

Logical OR operator - at least one condition must be true.

---

principalAttribute(attribute)🔹

public principalAttribute(attribute: string): ConditionalAttributeAccessor

Parameters

• attribute string — - The attribute name (e.g., 'department', 'role', 'username').

Returns

• ConditionalAttributeAccessor

Access a principal attribute for comparison.

---

resourceAttribute(attribute)🔹

public resourceAttribute(attribute: string): ConditionalAttributeAccessor

Parameters

• attribute string — - The attribute name (e.g., 'confidential', 'owner', 'classification').

Returns

• ConditionalAttributeAccessor

Access a resource attribute for comparison.

---

unless()🔹

public unless(): ConditionalPolicyStatement

Returns

• ConditionalPolicyStatement

Alias for done() to support fluent unless() chaining.