AwsIamPolicyDetails
Represents an IAM permissions policy.
Contents
- AttachmentCount
-
The number of users, groups, and roles that the policy is attached to.
Type: Integer
Required: No
- CreateDate
-
When the policy was created.
This field accepts only the specified formats. Timestamps can end with
Z
or("+" / "-") time-hour [":" time-minute]
. The time-secfrac after seconds is limited to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats that you can send to Security Hub:-
YYYY-MM-DDTHH:MM:SSZ
(for example,2019-01-31T23:00:00Z
) -
YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ
(for example,2019-01-31T23:00:00.123456789Z
) -
YYYY-MM-DDTHH:MM:SS+HH:MM
(for example,2024-01-04T15:25:10+17:59
) -
YYYY-MM-DDTHH:MM:SS-HHMM
(for example,2024-01-04T15:25:10-1759
) -
YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM
(for example,2024-01-04T15:25:10.123456789+17:59
)
If a finding provider sends a finding to Security Hub that contains a timestamp in nanoseconds, we round it to milliseconds. For example, we round
2024-10-31T23:00:00.123456789Z
to2024-10-31T23:00:00.123Z
.Type: String
Pattern:
.*\S.*
Required: No
-
- DefaultVersionId
-
The identifier of the default version of the policy.
Type: String
Pattern:
.*\S.*
Required: No
- Description
-
A description of the policy.
Type: String
Pattern:
.*\S.*
Required: No
- IsAttachable
-
Whether the policy can be attached to a user, group, or role.
Type: Boolean
Required: No
- Path
-
The path to the policy.
Type: String
Pattern:
.*\S.*
Required: No
- PermissionsBoundaryUsageCount
-
The number of users and roles that use the policy to set the permissions boundary.
Type: Integer
Required: No
- PolicyId
-
The unique identifier of the policy.
Type: String
Pattern:
.*\S.*
Required: No
- PolicyName
-
The name of the policy.
Type: String
Pattern:
.*\S.*
Required: No
- PolicyVersionList
-
List of versions of the policy.
Type: Array of AwsIamPolicyVersion objects
Required: No
- UpdateDate
-
When the policy was most recently updated.
This field accepts only the specified formats. Timestamps can end with
Z
or("+" / "-") time-hour [":" time-minute]
. The time-secfrac after seconds is limited to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats that you can send to Security Hub:-
YYYY-MM-DDTHH:MM:SSZ
(for example,2019-01-31T23:00:00Z
) -
YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ
(for example,2019-01-31T23:00:00.123456789Z
) -
YYYY-MM-DDTHH:MM:SS+HH:MM
(for example,2024-01-04T15:25:10+17:59
) -
YYYY-MM-DDTHH:MM:SS-HHMM
(for example,2024-01-04T15:25:10-1759
) -
YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM
(for example,2024-01-04T15:25:10.123456789+17:59
)
If a finding provider sends a finding to Security Hub that contains a timestamp in nanoseconds, we round it to milliseconds. For example, we round
2024-10-31T23:00:00.123456789Z
to2024-10-31T23:00:00.123Z
.Type: String
Pattern:
.*\S.*
Required: No
-
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following: