accessanalyzer_check_no_new_access: Checks whether new access is allowed for an updated policy...

In paws.security.identity: 'Amazon Web Services' Security, Identity, & Compliance Services

Checks whether new access is allowed for an updated policy when compared to the existing policy

Description

Checks whether new access is allowed for an updated policy when compared to the existing policy.

See https://www.paws-r-sdk.com/docs/accessanalyzer_check_no_new_access/ for full documentation.

Usage

accessanalyzer_check_no_new_access(
  newPolicyDocument,
  existingPolicyDocument,
  policyType
)

Arguments

newPolicyDocument	[required] The JSON policy document to use as the content for the updated policy.
existingPolicyDocument	[required] The JSON policy document to use as the content for the existing policy.
policyType	[required] The type of policy to compare. Identity policies grant permissions to IAM principals. Identity policies include managed and inline policies for IAM roles, users, and groups. Resource policies grant permissions on Amazon Web Services resources. Resource policies include trust policies for IAM roles and bucket policies for Amazon S3 buckets. You can provide a generic input such as identity policy or resource policy or a specific input such as managed policy or Amazon S3 bucket policy.

paws.security.identity documentation built on May 29, 2024, 10:51 a.m.