View a markdown version of this page

PolicyIdentifier - AWS Identity and Access Management

PolicyIdentifier

Identifies one or more policies as a union type. Specify exactly one of PolicyType, PolicyArn, or InlinePolicyIdentifier to identify policies by their type, by Amazon Resource Name (ARN), or by the name of an inline policy and the entity it is attached to.

Contents

Important

This data type is a UNION, so only one of the following members can be specified when used or returned.

InlinePolicyIdentifier

An inline policy identifier consisting of a policy name and the entity it is attached to. Wildcard characters (* and ?) in the entity name can match multiple entities.

Type: InlinePolicyIdentifierType object

Required: No

PolicyArn

The Amazon Resource Name (ARN) of an AWS managed policy or a customer managed policy that is attached to an IAM user, group, or role. Wildcard characters are supported in the resource name portion of the ARN to match multiple managed policies: use at most one * (matches any sequence of characters, including none), and any number of ? (each matches exactly one character).

For more information about ARNs, see Amazon Resource Names (ARNs) in the AWS General Reference.

Type: String

Length Constraints: Minimum length of 20. Maximum length of 2048.

Required: No

PolicyType

The policy type to identify. All policies of the specified type are matched.

Type: String

Valid Values: inline | aws-managed | user-managed | permission-boundary | scp | rcp

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: