Skip to main content

Policy Grammar

Policies are written in JSON format and only have a few elements that can be used.

{
    "Version": "2012-10-17",
    "Statement": [
      {
        "Effect": "Allow",
        "Action": "iam:*",
        "Resource": "*"
      },
      {
        "Effect": "Deny",
        "Action": [
          "iam:PutUserPermissionsBoundary"
        ],
        "Resource": [
          "arn:astran:iam::3de0fee1-37d6-456c-a8da-482d8b659004:user/*"
        ],
        "Condition": {
          "StringNotEquals": {
            "iam:PermissionsBoundary": "arn:astran:iam::3de0fee1-37d6-456c-a8da-482d8b659004:policy/permissionsBoundary"
          }
        }
      }
    ]
}

The following elements are available in a policy: