AwsIamPolicyDetails - AWS Security Hub

AwsIamPolicyDetails

Represents an IAM permissions policy.

Contents

AttachmentCount

The number of users, groups, and roles that the policy is attached to.

Type: Integer

Required: No

CreateDate

When the policy was created.

This field accepts only the specified formats. Timestamps can end with Z or ("+" / "-") time-hour [":" time-minute]. The time-secfrac after seconds is limited to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats that you can send to Security Hub:

  • YYYY-MM-DDTHH:MM:SSZ (for example, 2019-01-31T23:00:00Z)

  • YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ (for example, 2019-01-31T23:00:00.123456789Z)

  • YYYY-MM-DDTHH:MM:SS+HH:MM (for example, 2024-01-04T15:25:10+17:59)

  • YYYY-MM-DDTHH:MM:SS-HHMM (for example, 2024-01-04T15:25:10-1759)

  • YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM (for example, 2024-01-04T15:25:10.123456789+17:59)

If a finding provider sends a finding to Security Hub that contains a timestamp in nanoseconds, we round it to milliseconds. For example, we round 2024-10-31T23:00:00.123456789Z to 2024-10-31T23:00:00.123Z.

Type: String

Pattern: .*\S.*

Required: No

DefaultVersionId

The identifier of the default version of the policy.

Type: String

Pattern: .*\S.*

Required: No

Description

A description of the policy.

Type: String

Pattern: .*\S.*

Required: No

IsAttachable

Whether the policy can be attached to a user, group, or role.

Type: Boolean

Required: No

Path

The path to the policy.

Type: String

Pattern: .*\S.*

Required: No

PermissionsBoundaryUsageCount

The number of users and roles that use the policy to set the permissions boundary.

Type: Integer

Required: No

PolicyId

The unique identifier of the policy.

Type: String

Pattern: .*\S.*

Required: No

PolicyName

The name of the policy.

Type: String

Pattern: .*\S.*

Required: No

PolicyVersionList

List of versions of the policy.

Type: Array of AwsIamPolicyVersion objects

Required: No

UpdateDate

When the policy was most recently updated.

This field accepts only the specified formats. Timestamps can end with Z or ("+" / "-") time-hour [":" time-minute]. The time-secfrac after seconds is limited to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats that you can send to Security Hub:

  • YYYY-MM-DDTHH:MM:SSZ (for example, 2019-01-31T23:00:00Z)

  • YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ (for example, 2019-01-31T23:00:00.123456789Z)

  • YYYY-MM-DDTHH:MM:SS+HH:MM (for example, 2024-01-04T15:25:10+17:59)

  • YYYY-MM-DDTHH:MM:SS-HHMM (for example, 2024-01-04T15:25:10-1759)

  • YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM (for example, 2024-01-04T15:25:10.123456789+17:59)

If a finding provider sends a finding to Security Hub that contains a timestamp in nanoseconds, we round it to milliseconds. For example, we round 2024-10-31T23:00:00.123456789Z to 2024-10-31T23:00:00.123Z.

Type: String

Pattern: .*\S.*

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: