resource_policies
Creates, updates, deletes, gets or lists a resource_policies resource.
Overview
| Name | resource_policies |
| Type | Resource |
| Id | aws.cloudfront.resource_policies |
Fields
The following fields are returned by SELECT queries:
- get_resource_policy
| Name | Datatype | Description |
|---|---|---|
policy_document | string | The resource policy in JSON format. |
resource_arn | string | The Amazon Resource Name (ARN) of the CloudFront resource that is associated with the resource policy. |
Methods
The following methods are available for this resource:
| Name | Accessible by | Required Params | Optional Params | Description |
|---|---|---|---|---|
get_resource_policy | select | region | Retrieves the resource policy for the specified CloudFront resource that you own and have shared. | |
put_resource_policy | replace | region, ResourceArn, PolicyDocument | Creates a resource control policy for a given CloudFront resource. | |
delete_resource_policy | delete | region | Deletes the resource policy attached to the CloudFront resource. |
Parameters
Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.
| Name | Datatype | Description |
|---|---|---|
region | string | AWS region (default: us-east-1) |
SELECT examples
- get_resource_policy
Retrieves the resource policy for the specified CloudFront resource that you own and have shared.
SELECT
policy_document,
resource_arn
FROM aws.cloudfront.resource_policies
WHERE region = '{{ region }}' -- required
;
REPLACE examples
- put_resource_policy
Creates a resource control policy for a given CloudFront resource.
REPLACE aws.cloudfront.resource_policies
SET
ResourceArn = '{{ ResourceArn }}',
PolicyDocument = '{{ PolicyDocument }}'
WHERE
region = '{{ region }}' --required
AND ResourceArn = '{{ ResourceArn }}' --required
AND PolicyDocument = '{{ PolicyDocument }}' --required
RETURNING
resource_arn;
DELETE examples
- delete_resource_policy
Deletes the resource policy attached to the CloudFront resource.
DELETE FROM aws.cloudfront.resource_policies
WHERE region = '{{ region }}' --required
;