/AWS1/CL_AAN=>GETGENERATEDPOLICY()
¶
About GetGeneratedPolicy¶
Retrieves the policy that was generated using StartPolicyGeneration
.
Method Signature¶
IMPORTING¶
Required arguments:¶
IV_JOBID
TYPE /AWS1/AANJOBID
/AWS1/AANJOBID
¶
The
JobId
that is returned by theStartPolicyGeneration
operation. TheJobId
can be used withGetGeneratedPolicy
to retrieve the generated policies or used withCancelPolicyGeneration
to cancel the policy generation request.
Optional arguments:¶
IV_INCLRESOURCEPLACEHOLDERS
TYPE /AWS1/AANBOOLEAN
/AWS1/AANBOOLEAN
¶
The level of detail that you want to generate. You can specify whether to generate policies with placeholders for resource ARNs for actions that support resource level granularity in policies.
For example, in the resource section of a policy, you can receive a placeholder such as
"Resource":"arn:aws:s3:::${BucketName}"
instead of"*"
.
IV_INCLUDESERVICELEVELTMPL
TYPE /AWS1/AANBOOLEAN
/AWS1/AANBOOLEAN
¶
The level of detail that you want to generate. You can specify whether to generate service-level policies.
IAM Access Analyzer uses
iam:servicelastaccessed
to identify services that have been used recently to create this service-level template.