Skip to content

IAM  >  Operations  >  attach_user_policy

attach_user_policy

Operation

attach_user_policy async

attach_user_policy(input: AttachUserPolicyInput, plugins: list[Plugin] | None = None) -> AttachUserPolicyOutput

Attaches the specified managed policy to the specified user.

You use this operation to attach a managed policy to a user. To embed an inline policy in a user, use PutUserPolicy .

As a best practice, you can validate your IAM policies. To learn more, see Validating IAM policies in the IAM User Guide.

For more information about policies, see Managed policies and inline policies in the IAM User Guide.

Parameters:

Name Type Description Default
input AttachUserPolicyInput

An instance of AttachUserPolicyInput.

required
plugins list[Plugin] | None

A list of callables that modify the configuration dynamically. Changes made by these plugins only apply for the duration of the operation execution and will not affect any other operation invocations.

None

Returns:

Type Description
AttachUserPolicyOutput

An instance of AttachUserPolicyOutput.

Input

AttachUserPolicyInput dataclass

Bases: _SerdeShape

Dataclass for AttachUserPolicyInput structure.

Attributes

policy_arn class-attribute instance-attribute
policy_arn: str | None = ...

The Amazon Resource Name (ARN) of the IAM policy you want to attach.

For more information about ARNs, see Amazon Resource Names (ARNs) in the Amazon Web Services General Reference.

user_name class-attribute instance-attribute
user_name: str | None = ...

The name (friendly name, not ARN) of the IAM user to attach the policy to.

This parameter allows (through its regex pattern) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-

Output

AttachUserPolicyOutput dataclass

Bases: _SerdeShape

Dataclass for AttachUserPolicyOutput structure.

Attributes

response_metadata class-attribute instance-attribute
response_metadata: ResponseMetadata = ...

Metadata about the response that produced this output. Use this to recover the request identifiers a service's support team needs in order to investigate a call. Members of the metadata are individually optional.