WithoutPolicyUpdatesOptions¶
-
class
aws_cdk.aws_iam.
WithoutPolicyUpdatesOptions
(*, add_grants_to_resources=None)¶ Bases:
object
Options for the
withoutPolicyUpdates()
modifier of a Role.- Parameters
add_grants_to_resources (
Optional
[bool
]) – Add grants to resources instead of dropping them. If this isfalse
or not specified, grant permissions added to this role are ignored. It is your own responsibility to make sure the role has the required permissions. If this istrue
, any grant permissions will be added to the resource instead. Default: false- ExampleMetadata
fixture=_generated
Example:
# The code below shows an example of how to instantiate this type. # The values are placeholders you should change. import aws_cdk.aws_iam as iam without_policy_updates_options = iam.WithoutPolicyUpdatesOptions( add_grants_to_resources=False )
Attributes
-
add_grants_to_resources
¶ Add grants to resources instead of dropping them.
If this is
false
or not specified, grant permissions added to this role are ignored. It is your own responsibility to make sure the role has the required permissions.If this is
true
, any grant permissions will be added to the resource instead.- Default
false
- Return type
Optional
[bool
]