resource_permission_statements

Creates, updates, deletes, gets or lists a resource_permission_statements resource.

Overview

Name	resource_permission_statements
Type	Resource
Id	aws.signin.resource_permission_statements

Fields

The following fields are returned by SELECT queries:

list_resource_permission_statements

Name	Datatype	Description
condition	object	Condition block for the permission statement
sid	string	Unique identifier for a permission statement (pattern: <code>[A-Za-z0-9+/]{64}=?</code>)

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
list_resource_permission_statements	select	region		Retrieve all permission statements in the account's SignIn resource-based policy
put_resource_permission_statement	replace	region		Create a permission statement in the account's SignIn resource-based policy
delete_resource_permission_statement	delete	region		Remove a permission statement from the account's SignIn resource-based policy

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)

SELECT examples

list_resource_permission_statements

Retrieve all permission statements in the account's SignIn resource-based policy

SELECT
condition,
sid
FROM aws.signin.resource_permission_statements
WHERE region = '{{ region }}' -- required
;

REPLACE examples

put_resource_permission_statement

Create a permission statement in the account's SignIn resource-based policy

REPLACE aws.signin.resource_permission_statements
SET 
sourceVpc = '{{ sourceVpc }}',
signinSourceVpce = '{{ signinSourceVpce }}',
consoleSourceVpce = '{{ consoleSourceVpce }}',
vpcSourceIp = '{{ vpcSourceIp }}',
sourceIp = '{{ sourceIp }}',
requestedRegion = '{{ requestedRegion }}',
excludedPrincipal = '{{ excludedPrincipal }}',
clientToken = '{{ clientToken }}'
WHERE 
region = '{{ region }}' --required
RETURNING
statement_id;

DELETE examples

delete_resource_permission_statement

Remove a permission statement from the account's SignIn resource-based policy

DELETE FROM aws.signin.resource_permission_statements
WHERE region = '{{ region }}' --required
;