Class ManagedPolicy

Managed policy.

Inheritance

System.Object

Resource

ManagedPolicy

UntrustedCodeBoundaryPolicy

Implements

IResource

Constructs.IConstruct

Constructs.IDependable

IManagedPolicy

IGrantable

Inherited Members

Resource.IsOwnedResource(IConstruct)

Resource.IsResource(IConstruct)

Resource.ApplyRemovalPolicy(RemovalPolicy)

Resource.GeneratePhysicalName()

Resource.GetResourceArnAttribute(String, IArnComponents)

Resource.GetResourceNameAttribute(String)

Resource.Env

Resource.PhysicalName

Resource.Stack

Namespace: Amazon.CDK.AWS.IAM

Assembly: Amazon.CDK.Lib.dll

Syntax (csharp)

public class ManagedPolicy : Resource, IResource, IManagedPolicy, IGrantable

Syntax (vb)

Public Class ManagedPolicy
    Inherits Resource
    Implements IResource, IManagedPolicy, IGrantable

Remarks

ExampleMetadata: infused

Examples

Build build;

var role = new Role(this, "Role", new RoleProps {
    AssumedBy = new CompositePrincipal(new ServicePrincipal("gamelift.amazonaws.com"))
});
role.AddManagedPolicy(ManagedPolicy.FromAwsManagedPolicyName("CloudWatchAgentServerPolicy"));

var fleet = new BuildFleet(this, "Game server fleet", new BuildFleetProps {
    FleetName = "test-fleet",
    Content = build,
    InstanceType = InstanceType.Of(InstanceClass.C5, InstanceSize.LARGE),
    RuntimeConfiguration = new RuntimeConfiguration {
        ServerProcesses = new [] { new ServerProcess {
            LaunchPath = "/local/game/GameLiftExampleServer.x86_64"
        } }
    },
    Role = role
});

// Actions can also be grantted through dedicated method
fleet.Grant(role, "gamelift:ListFleets");

Synopsis

Constructors

ManagedPolicy(ByRefValue)	Used by jsii to construct an instance of this class from a Javascript-owned object reference
ManagedPolicy(DeputyBase.DeputyProps)	Used by jsii to construct an instance of this class from DeputyProps
ManagedPolicy(Construct, String, IManagedPolicyProps)

Properties

Description	The description of this policy.
Document	The policy document.
GrantPrincipal	The principal to grant permissions to.
ManagedPolicyArn	Returns the ARN of this managed policy.
ManagedPolicyName	The name of this policy.
Path	The path of this policy.

Methods

AddStatements(PolicyStatement[])	Adds a statement to the policy document.
AttachToGroup(IGroup)	Attaches this policy to a group.
AttachToRole(IRole)	Attaches this policy to a role.
AttachToUser(IUser)	Attaches this policy to a user.
FromAwsManagedPolicyName(String)	Import a managed policy from one of the policies that AWS manages.
FromManagedPolicyArn(Construct, String, String)	Import an external managed policy by ARN.
FromManagedPolicyName(Construct, String, String)	Import a customer managed policy from the managedPolicyName.

Constructors

ManagedPolicy(ByRefValue)

Used by jsii to construct an instance of this class from a Javascript-owned object reference

protected ManagedPolicy(ByRefValue reference)

Parameters

reference Amazon.JSII.Runtime.Deputy.ByRefValue: The Javascript-owned object reference

ManagedPolicy(DeputyBase.DeputyProps)

Used by jsii to construct an instance of this class from DeputyProps

protected ManagedPolicy(DeputyBase.DeputyProps props)

Parameters

props Amazon.JSII.Runtime.Deputy.DeputyBase.DeputyProps: The deputy props

ManagedPolicy(Construct, String, IManagedPolicyProps)

public ManagedPolicy(Construct scope, string id, IManagedPolicyProps props = null)

Parameters

scope Constructs.Construct
id System.String
props IManagedPolicyProps

Properties

Description

The description of this policy.

public virtual string Description { get; }

Property Value

System.String

Remarks

Attribute: true

Document

The policy document.

public virtual PolicyDocument Document { get; }

Property Value

PolicyDocument

GrantPrincipal

The principal to grant permissions to.

public virtual IPrincipal GrantPrincipal { get; }

Property Value

IPrincipal

ManagedPolicyArn

Returns the ARN of this managed policy.

public virtual string ManagedPolicyArn { get; }

Property Value

System.String

Remarks

Attribute: true

ManagedPolicyName

The name of this policy.

public virtual string ManagedPolicyName { get; }

Property Value

System.String

Remarks

Attribute: true

Path

The path of this policy.

public virtual string Path { get; }

Property Value

System.String

Remarks

Attribute: true

Methods

AddStatements(PolicyStatement[])

Adds a statement to the policy document.

public virtual void AddStatements(params PolicyStatement[] statement)

Parameters

statement PolicyStatement[]

AttachToGroup(IGroup)

Attaches this policy to a group.

public virtual void AttachToGroup(IGroup group)

Parameters

group IGroup

AttachToRole(IRole)

Attaches this policy to a role.

public virtual void AttachToRole(IRole role)

Parameters

role IRole

AttachToUser(IUser)

Attaches this policy to a user.

public virtual void AttachToUser(IUser user)

Parameters

user IUser

FromAwsManagedPolicyName(String)

Import a managed policy from one of the policies that AWS manages.

public static IManagedPolicy FromAwsManagedPolicyName(string managedPolicyName)

Parameters

managedPolicyName System.String

Returns

IManagedPolicy

Remarks

For this managed policy, you only need to know the name to be able to use it.

Some managed policy names start with "service-role/", some start with "job-function/", and some don't start with anything. Include the prefix when constructing this object.

FromManagedPolicyArn(Construct, String, String)

Import an external managed policy by ARN.

public static IManagedPolicy FromManagedPolicyArn(Construct scope, string id, string managedPolicyArn)

Parameters

scope Constructs.Construct: construct scope.
id System.String: construct id.
managedPolicyArn System.String: the ARN of the managed policy to import.

Returns

IManagedPolicy

Remarks

For this managed policy, you only need to know the ARN to be able to use it. This can be useful if you got the ARN from a CloudFormation Export.

If the imported Managed Policy ARN is a Token (such as a CfnParameter.valueAsString or a Fn.importValue()) and the referenced managed policy has a path (like arn:...:policy/AdminPolicy/AdminAllow), the managedPolicyName property will not resolve to the correct value. Instead it will resolve to the first path component. We unfortunately cannot express the correct calculation of the full path name as a CloudFormation expression. In this scenario the Managed Policy ARN should be supplied without the path in order to resolve the correct managed policy resource.

FromManagedPolicyName(Construct, String, String)

Import a customer managed policy from the managedPolicyName.

public static IManagedPolicy FromManagedPolicyName(Construct scope, string id, string managedPolicyName)

Parameters

scope Constructs.Construct
id System.String
managedPolicyName System.String

Returns

IManagedPolicy

Remarks

For this managed policy, you only need to know the name to be able to use it.

Implements

IResource

Constructs.IConstruct

Constructs.IDependable

IManagedPolicy

IGrantable