AWS services or capabilities described in AWS Documentation may vary by region/location. Click Getting Started with Amazon AWS to see specific differences applicable to the China (Beijing) Region.
This data type is used by the return parameter of SimulatePolicy
.
Namespace: Amazon.IdentityManagement.Model
Assembly: AWSSDK.dll
Version: (assembly version)
public class EvaluationResult : Object
The EvaluationResult type exposes the following members
Name | Description | |
---|---|---|
EvaluationResult() |
Name | Type | Description | |
---|---|---|---|
EvalActionName | System.String |
Gets and sets the property EvalActionName.
The name of the API action tested on the indicated resource. |
|
EvalDecision | Amazon.IdentityManagement.PolicyEvaluationDecisionType |
Gets and sets the property EvalDecision.
The result of the simulation. |
|
EvalDecisionDetails | System.Collections.Generic.Dictionary<System.String, System.String> |
Gets and sets the property EvalDecisionDetails.
Additional details about the results of the evaluation decision. When there are both IAM policies and resource policies, this parameter explains how each set of policies contributes to the final evaluation decision. When simulating cross-account access to a resource, both the resource-based policy and the caller's IAM policy must grant access. See How IAM Roles Differ from Resource-based Policies |
|
EvalResourceName | System.String |
Gets and sets the property EvalResourceName.
The ARN of the resource that the indicated API action was tested on. |
|
MatchedStatements | System.Collections.Generic.List<Amazon.IdentityManagement.Model.Statement> |
Gets and sets the property MatchedStatements.
A list of the statements in the input policies that determine the result for this scenario. Remember that even if multiple statements allow the action on the resource, if only one statement denies that action, then the explicit deny overrides any allow, and the deny statement is the only entry included in the result. |
|
MissingContextValues | System.Collections.Generic.List<System.String> |
Gets and sets the property MissingContextValues.
A list of context keys that are required by the included input policies but that were not provided by one of the input parameters. To discover the context keys used by a set of policies, you can call GetContextKeysForCustomPolicy or GetContextKeysForPrincipalPolicy. If the response includes any keys in this list, then the reported results might be untrustworthy because the simulation could not completely evaluate all of the conditions specified in the policies that would occur in a real world request. |
|
ResourceSpecificResults | System.Collections.Generic.List<Amazon.IdentityManagement.Model.ResourceSpecificResult> |
Gets and sets the property ResourceSpecificResults.
The individual results of the simulation of the API action specified in EvalActionName on each resource. |
.NET Framework:
Supported in: 4.5, 4.0, 3.5
.NET for Windows Store apps:
Supported in: Windows 8.1, Windows 8
.NET for Windows Phone:
Supported in: Windows Phone 8.1