AWS SDK Version 2 for .NET
API Reference

AWS services or capabilities described in AWS Documentation may vary by region/location. Click Getting Started with Amazon AWS to see specific differences applicable to the China (Beijing) Region.

.NET Framework 3.5
Contains the results of a simulation.

This data type is used by the return parameter of SimulatePolicy.

Inheritance Hierarchy


Namespace: Amazon.IdentityManagement.Model
Assembly: AWSSDK.dll
Version: (assembly version)


public class EvaluationResult : Object

The EvaluationResult type exposes the following members


Public Method EvaluationResult()


Public Property EvalActionName System.String Gets and sets the property EvalActionName.

The name of the API action tested on the indicated resource.

Public Property EvalDecision Amazon.IdentityManagement.PolicyEvaluationDecisionType Gets and sets the property EvalDecision.

The result of the simulation.

Public Property EvalDecisionDetails System.Collections.Generic.Dictionary<System.String, System.String> Gets and sets the property EvalDecisionDetails.

Additional details about the results of the evaluation decision. When there are both IAM policies and resource policies, this parameter explains how each set of policies contributes to the final evaluation decision. When simulating cross-account access to a resource, both the resource-based policy and the caller's IAM policy must grant access. See How IAM Roles Differ from Resource-based Policies

Public Property EvalResourceName System.String Gets and sets the property EvalResourceName.

The ARN of the resource that the indicated API action was tested on.

Public Property MatchedStatements System.Collections.Generic.List<Amazon.IdentityManagement.Model.Statement> Gets and sets the property MatchedStatements.

A list of the statements in the input policies that determine the result for this scenario. Remember that even if multiple statements allow the action on the resource, if only one statement denies that action, then the explicit deny overrides any allow, and the deny statement is the only entry included in the result.

Public Property MissingContextValues System.Collections.Generic.List<System.String> Gets and sets the property MissingContextValues.

A list of context keys that are required by the included input policies but that were not provided by one of the input parameters. To discover the context keys used by a set of policies, you can call GetContextKeysForCustomPolicy or GetContextKeysForPrincipalPolicy.

If the response includes any keys in this list, then the reported results might be untrustworthy because the simulation could not completely evaluate all of the conditions specified in the policies that would occur in a real world request.

Public Property ResourceSpecificResults System.Collections.Generic.List<Amazon.IdentityManagement.Model.ResourceSpecificResult> Gets and sets the property ResourceSpecificResults.

The individual results of the simulation of the API action specified in EvalActionName on each resource.

Version Information

.NET Framework:
Supported in: 4.5, 4.0, 3.5

.NET for Windows Store apps:
Supported in: Windows 8.1, Windows 8

.NET for Windows Phone:
Supported in: Windows Phone 8.1