/AWS1/CL_ERN=>ADDPOLICYSTATEMENT()
¶
About AddPolicyStatement¶
Adds a policy statement object. To retrieve a list of existing policy statements, use
the GetPolicy
API.
Method Signature¶
IMPORTING¶
Required arguments:¶
IV_ARN
TYPE /AWS1/ERNVENICEGLOBALARN
/AWS1/ERNVENICEGLOBALARN
¶
The Amazon Resource Name (ARN) of the resource that will be accessed by the principal.
IV_STATEMENTID
TYPE /AWS1/ERNSTATEMENTID
/AWS1/ERNSTATEMENTID
¶
A statement identifier that differentiates the statement from others in the same policy.
IV_EFFECT
TYPE /AWS1/ERNSTATEMENTEFFECT
/AWS1/ERNSTATEMENTEFFECT
¶
Determines whether the permissions specified in the policy are to be allowed (
Allow
) or denied (Deny
).
IT_ACTION
TYPE /AWS1/CL_ERNSTMTACTIONLIST_W=>TT_STATEMENTACTIONLIST
TT_STATEMENTACTIONLIST
¶
The action that the principal can use on the resource.
For example,
entityresolution:GetIdMappingJob
,entityresolution:GetMatchingJob
.
IT_PRINCIPAL
TYPE /AWS1/CL_ERNSTMTPRINCLIST_W=>TT_STATEMENTPRINCIPALLIST
TT_STATEMENTPRINCIPALLIST
¶
The Amazon Web Services service or Amazon Web Services account that can access the resource defined as ARN.
Optional arguments:¶
IV_CONDITION
TYPE /AWS1/ERNSTATEMENTCONDITION
/AWS1/ERNSTATEMENTCONDITION
¶
A set of condition keys that you can use in key policies.