Skip to main content

access_control_rules

Creates, updates, deletes, gets or lists an access_control_rules resource.

Overview

Nameaccess_control_rules
TypeResource
Idaws.workmail.access_control_rules

Fields

The following fields are returned by SELECT queries:

NameDatatypeDescription
rulesarrayThe access control rules.

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
list_access_control_rulesselectregionLists the access control rules for the specified organization.
put_access_control_rulereplaceregion, Name, Effect, Description, OrganizationIdAdds a new access control rule for the specified organization. The rule allows or denies access to the organization for the specified IPv4 addresses, access protocol actions, user IDs and impersonation IDs. Adding a new rule with the same name as an existing rule replaces the older rule.
delete_access_control_ruledeleteregionDeletes an access control rule for the specified WorkMail organization. Deleting already deleted and non-existing rules does not produce an error. In those cases, the service sends back an HTTP 200 response with an empty HTTP body.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
regionstringAWS region (default: us-east-1)

SELECT examples

Lists the access control rules for the specified organization.

SELECT
rules
FROM aws.workmail.access_control_rules
WHERE region = '{{ region }}' -- required
;

REPLACE examples

Adds a new access control rule for the specified organization. The rule allows or denies access to the organization for the specified IPv4 addresses, access protocol actions, user IDs and impersonation IDs. Adding a new rule with the same name as an existing rule replaces the older rule.

REPLACE aws.workmail.access_control_rules
SET
Name = '{{ Name }}',
Effect = '{{ Effect }}',
Description = '{{ Description }}',
IpRanges = '{{ IpRanges }}',
NotIpRanges = '{{ NotIpRanges }}',
Actions = '{{ Actions }}',
NotActions = '{{ NotActions }}',
UserIds = '{{ UserIds }}',
NotUserIds = '{{ NotUserIds }}',
OrganizationId = '{{ OrganizationId }}',
ImpersonationRoleIds = '{{ ImpersonationRoleIds }}',
NotImpersonationRoleIds = '{{ NotImpersonationRoleIds }}'
WHERE
region = '{{ region }}' --required
AND Name = '{{ Name }}' --required
AND Effect = '{{ Effect }}' --required
AND Description = '{{ Description }}' --required
AND OrganizationId = '{{ OrganizationId }}' --required;

DELETE examples

Deletes an access control rule for the specified WorkMail organization. Deleting already deleted and non-existing rules does not produce an error. In those cases, the service sends back an HTTP 200 response with an empty HTTP body.

DELETE FROM aws.workmail.access_control_rules
WHERE region = '{{ region }}' --required
;