AWS::EntityResolution::PolicyStatementAdds a policy statement object. To retrieve a list of existing policy statements, use the `GetPolicy` API.
import { CfnPolicyStatement } from 'aws-cdk-lib/aws-entityresolution';Or use the module namespace:
import * as entityresolution from 'aws-cdk-lib/aws-entityresolution';
// entityresolution.CfnPolicyStatementConfiguration passed to the constructor as CfnPolicyStatementProps.
arnRequiredstringThe Amazon Resource Name (ARN) of the resource that will be accessed by the principal.
statementIdRequiredstringA statement identifier that differentiates the statement from others in the same policy.
actionOptionalstring[]The action that the principal can use on the resource. For example, `entityresolution:GetIdMappingJob` , `entityresolution:GetMatchingJob` .
conditionOptionalstringA set of condition keys that you can use in key policies.
effectOptionalstringDetermines whether the permissions specified in the policy are to be allowed ( `Allow` ) or denied ( `Deny` ). > If you set the value of the `effect` parameter to `Deny` for the `AddPolicyStatement` operation, you must also set the value of the `effect` parameter in the `policy` to `Deny` for the `PutPolicy` operation.
principalOptionalstring[]The AWS service or AWS account that can access the resource defined as ARN.
This L1 construct maps directly to the following CloudFormation resource type.
Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.
Subscribe to Newsletteraws-entityresolutionAWS::EntityResolution::PolicyStatement