IIAMEvaluationResult

Interface in AWS.IAM

Interface for IAM EvaluationResult.

Properties

property EvalActionName: string

The name of the API operation tested on the indicated resource.

property EvalDecision: string

The result of the simulation.

Valid values: allowed | explicitDeny | implicitDeny.

property EvalDecisionDetails: TDictionary<string, string>

Additional details about the results of the cross-account evaluation decision.

Valid values: allowed | explicitDeny | implicitDeny. This is only populated for cross-account simulations.

property EvalResourceName: TARN

The Amazon Resource Name (ARN) of the resource that the indicated API operation was tested on.

property MatchedStatements: TList<IIAMStatement>

A list of statements in the input policies that determine the result for this scenario.

property MissingContextValues: TList<string>

A list of context keys that are required by the included input policies but were not provided by one of the input parameters.

property OrganizationsDecisionDetail: IIAMOrganizationsDecisionDetail

Details of how the Organizations and its service control policies affect the results of the simulation.

Only applies if the simulated user's account is a part of an organization.

property PermissionsBoundaryDecisionDetail: IIAMPermissionsBoundaryDecisionDetail

Information about the effect that a permissions boundary has on a policy simulation when the boundary is applied to an IAM entity.

property ResourceSpecificResults: TList<IIAMResourceSpecificResult>

Individual results of the simulation of the API operation specified in EvalActionName on each resource.