AWS::VerifiedPermissions::PolicyStoreCfnPolicyStore
Creates a policy store. A policy store is a container for policy resources. You can create a separate policy store for each of your applications.
Import
import { CfnPolicyStore } from 'aws-cdk-lib/aws-verifiedpermissions';Or use the module namespace:
import * as verifiedpermissions from 'aws-cdk-lib/aws-verifiedpermissions';
// verifiedpermissions.CfnPolicyStoreProperties
Configuration passed to the constructor as CfnPolicyStoreProps.
validationSettingsRequiredIResolvable | ValidationSettingsPropertySpecifies the validation setting for this policy store. Currently, the only valid and required value is `Mode` . > We recommend that you turn on `STRICT` mode only after you define a schema. If a schema doesn't exist, then `STRICT` mode causes any policy to fail validation, and Verified Permissions rejects the policy. You can turn off validation by using the [UpdatePolicyStore](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_UpdatePolicyStore) . Then, when you have a schema defined, use [UpdatePolicyStore](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_UpdatePolicyStore) again to turn validation back on.
deletionProtectionOptionalIResolvable | DeletionProtectionPropertySpecifies whether the policy store can be deleted. If enabled, the policy store can't be deleted. The default state is `DISABLED` .
descriptionOptionalstringDescriptive text that you can provide to help with identification of the current policy store.
encryptionSettingsOptionalIResolvable | EncryptionSettingsPropertyschemaOptionalIResolvable | SchemaDefinitionPropertyCreates or updates the policy schema in a policy store. Cedar can use the schema to validate any Cedar policies and policy templates submitted to the policy store. Any changes to the schema validate only policies and templates submitted after the schema change. Existing policies and templates are not re-evaluated against the changed schema. If you later update a policy, then it is evaluated against the new schema at that time.
tagsOptionalCfnTag[]The list of key-value pairs to associate with the policy store.
CloudFormation Resource
This L1 construct maps directly to the following CloudFormation resource type.
Learn AWS the Practical Way
Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.
Subscribe to NewsletterQuick Facts
aws-verifiedpermissionsAWS::VerifiedPermissions::PolicyStore