Documentation

Contains information about a managed policy.

This data type is used as a response element in the CreatePolicy, GetPolicy, and ListPolicies operations.

For more information about managed policies, refer to Managed policies and inline policies in the IAM User Guide.

See: newPolicy smart constructor.

Create a value of Policy with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:policyName:Policy', policy_policyName - The friendly name (not ARN) identifying the policy.

$sel:arn:Policy', policy_arn - Undocumented member.

$sel:updateDate:Policy', policy_updateDate - The date and time, in ISO 8601 date-time format, when the policy was last updated.

When a policy has only one version, this field contains the date and time when the policy was created. When a policy has more than one version, this field contains the date and time when the most recent policy version was created.

$sel:policyId:Policy', policy_policyId - The stable and unique string identifying the policy.

For more information about IDs, see IAM identifiers in the IAM User Guide.

$sel:path:Policy', policy_path - The path to the policy.

For more information about paths, see IAM identifiers in the IAM User Guide.

$sel:createDate:Policy', policy_createDate - The date and time, in ISO 8601 date-time format, when the policy was created.

$sel:isAttachable:Policy', policy_isAttachable - Specifies whether the policy can be attached to an IAM user, group, or role.

$sel:permissionsBoundaryUsageCount:Policy', policy_permissionsBoundaryUsageCount - The number of entities (users and roles) for which the policy is used to set the permissions boundary.

For more information about permissions boundaries, see Permissions boundaries for IAM identities in the IAM User Guide.

$sel:defaultVersionId:Policy', policy_defaultVersionId - The identifier for the version of the policy that is set as the default version.

$sel:attachmentCount:Policy', policy_attachmentCount - The number of entities (users, groups, and roles) that the policy is attached to.

$sel:description:Policy', policy_description - A friendly description of the policy.

This element is included in the response to the GetPolicy operation. It is not included in the response to the ListPolicies operation.

$sel:tags:Policy', policy_tags - A list of tags that are attached to the instance profile. For more information about tagging, see Tagging IAM resources in the IAM User Guide.

The friendly name (not ARN) identifying the policy.

Undocumented member.

The date and time, in ISO 8601 date-time format, when the policy was last updated.

When a policy has only one version, this field contains the date and time when the policy was created. When a policy has more than one version, this field contains the date and time when the most recent policy version was created.

The stable and unique string identifying the policy.

For more information about IDs, see IAM identifiers in the IAM User Guide.

The path to the policy.

For more information about paths, see IAM identifiers in the IAM User Guide.

The date and time, in ISO 8601 date-time format, when the policy was created.

Specifies whether the policy can be attached to an IAM user, group, or role.

The number of entities (users and roles) for which the policy is used to set the permissions boundary.

For more information about permissions boundaries, see Permissions boundaries for IAM identities in the IAM User Guide.

The identifier for the version of the policy that is set as the default version.

The number of entities (users, groups, and roles) that the policy is attached to.

A friendly description of the policy.

This element is included in the response to the GetPolicy operation. It is not included in the response to the ListPolicies operation.

A list of tags that are attached to the instance profile. For more information about tagging, see Tagging IAM resources in the IAM User Guide.