Uses of Class
software.amazon.awscdk.services.iam.PolicyStatement

Packages that use PolicyStatement

Package	Description
software.amazon.awscdk.appdelivery
software.amazon.awscdk.customresources
software.amazon.awscdk.pipelines
software.amazon.awscdk.services.applicationautoscaling
software.amazon.awscdk.services.autoscaling
software.amazon.awscdk.services.chatbot
software.amazon.awscdk.services.codebuild
software.amazon.awscdk.services.codepipeline
software.amazon.awscdk.services.codepipeline.actions
software.amazon.awscdk.services.ec2
software.amazon.awscdk.services.ecr
software.amazon.awscdk.services.ecs
software.amazon.awscdk.services.eks
software.amazon.awscdk.services.elasticsearch
software.amazon.awscdk.services.events.targets
software.amazon.awscdk.services.iam
software.amazon.awscdk.services.kms
software.amazon.awscdk.services.lambda
software.amazon.awscdk.services.lambda.nodejs
software.amazon.awscdk.services.lambda.python
software.amazon.awscdk.services.logs
software.amazon.awscdk.services.s3
software.amazon.awscdk.services.secretsmanager
software.amazon.awscdk.services.sns
software.amazon.awscdk.services.sqs
software.amazon.awscdk.services.stepfunctions
software.amazon.awscdk.services.stepfunctions.tasks

Uses of PolicyStatement in software.amazon.awscdk.appdelivery

Methods in software.amazon.awscdk.appdelivery with parameters of type PolicyStatement

Modifier and Type	Method and Description
void	PipelineDeployStackAction.addToDeploymentRolePolicy(PolicyStatement statement) (experimental) Add policy statements to the role deploying the stack.

Uses of PolicyStatement in software.amazon.awscdk.customresources

Methods in software.amazon.awscdk.customresources that return types with arguments of type PolicyStatement

Modifier and Type	Method and Description
List<PolicyStatement>	AwsCustomResourcePolicy.getStatements() (experimental) statements for explicit policy.

Method parameters in software.amazon.awscdk.customresources with type arguments of type PolicyStatement

Modifier and Type	Method and Description
static AwsCustomResourcePolicy	AwsCustomResourcePolicy.fromStatements(List<? extends PolicyStatement> statements) (experimental) Explicit IAM Policy Statements.

Uses of PolicyStatement in software.amazon.awscdk.pipelines

Methods in software.amazon.awscdk.pipelines that return types with arguments of type PolicyStatement

Modifier and Type	Method and Description
default List<PolicyStatement>	SimpleSynthOptions.getRolePolicyStatements() (experimental) Policy statements to add to role used during the synth.
List<PolicyStatement>	SimpleSynthOptions.Jsii$Proxy.getRolePolicyStatements()
default List<PolicyStatement>	ShellScriptActionProps.getRolePolicyStatements() (experimental) Additional policy statements to add to the execution role.
List<PolicyStatement>	ShellScriptActionProps.Jsii$Proxy.getRolePolicyStatements()
List<PolicyStatement>	StandardYarnSynthOptions.Jsii$Proxy.getRolePolicyStatements()
List<PolicyStatement>	StandardNpmSynthOptions.Jsii$Proxy.getRolePolicyStatements()
List<PolicyStatement>	SimpleSynthActionProps.Jsii$Proxy.getRolePolicyStatements()

Method parameters in software.amazon.awscdk.pipelines with type arguments of type PolicyStatement

Modifier and Type	Method and Description
ShellScriptAction.Builder	ShellScriptAction.Builder.rolePolicyStatements(List<? extends PolicyStatement> rolePolicyStatements) (experimental) Additional policy statements to add to the execution role.
SimpleSynthOptions.Builder	SimpleSynthOptions.Builder.rolePolicyStatements(List<? extends PolicyStatement> rolePolicyStatements) Sets the value of SimpleSynthOptions.getRolePolicyStatements()
ShellScriptActionProps.Builder	ShellScriptActionProps.Builder.rolePolicyStatements(List<? extends PolicyStatement> rolePolicyStatements) Sets the value of ShellScriptActionProps.getRolePolicyStatements()
StandardYarnSynthOptions.Builder	StandardYarnSynthOptions.Builder.rolePolicyStatements(List<? extends PolicyStatement> rolePolicyStatements) Sets the value of SimpleSynthOptions.getRolePolicyStatements()
StandardNpmSynthOptions.Builder	StandardNpmSynthOptions.Builder.rolePolicyStatements(List<? extends PolicyStatement> rolePolicyStatements) Sets the value of SimpleSynthOptions.getRolePolicyStatements()
SimpleSynthActionProps.Builder	SimpleSynthActionProps.Builder.rolePolicyStatements(List<? extends PolicyStatement> rolePolicyStatements) Sets the value of SimpleSynthOptions.getRolePolicyStatements()
SimpleSynthAction.Builder	SimpleSynthAction.Builder.rolePolicyStatements(List<? extends PolicyStatement> rolePolicyStatements) (experimental) Policy statements to add to role used during the synth.

Constructor parameters in software.amazon.awscdk.pipelines with type arguments of type PolicyStatement

Constructor and Description
Jsii$Proxy(Artifact cloudAssemblyArtifact, Artifact sourceArtifact, String actionName, List<? extends AdditionalArtifact> additionalArtifacts, List<String> copyEnvironmentVariables, BuildEnvironment environment, Map<String,? extends BuildEnvironmentVariable> environmentVariables, String projectName, List<? extends PolicyStatement> rolePolicyStatements, String subdirectory, SubnetSelection subnetSelection, IVpc vpc) Constructor that initializes the object based on literal property values passed by the SimpleSynthOptions.Builder.
Jsii$Proxy(String actionName, List<String> commands, List<? extends Artifact> additionalArtifacts, String bashOptions, BuildEnvironment environment, List<? extends PolicyStatement> rolePolicyStatements, Number runOrder, List<? extends ISecurityGroup> securityGroups, SubnetSelection subnetSelection, Map<String,? extends StackOutput> useOutputs, IVpc vpc) Constructor that initializes the object based on literal property values passed by the ShellScriptActionProps.Builder.
Jsii$Proxy(String synthCommand, String buildCommand, List<String> buildCommands, String installCommand, List<String> installCommands, List<String> testCommands, Artifact cloudAssemblyArtifact, Artifact sourceArtifact, String actionName, List<? extends AdditionalArtifact> additionalArtifacts, List<String> copyEnvironmentVariables, BuildEnvironment environment, Map<String,? extends BuildEnvironmentVariable> environmentVariables, String projectName, List<? extends PolicyStatement> rolePolicyStatements, String subdirectory, SubnetSelection subnetSelection, IVpc vpc) Constructor that initializes the object based on literal property values passed by the SimpleSynthActionProps.Builder.
Jsii$Proxy(String buildCommand, String installCommand, String synthCommand, Artifact cloudAssemblyArtifact, Artifact sourceArtifact, String actionName, List<? extends AdditionalArtifact> additionalArtifacts, List<String> copyEnvironmentVariables, BuildEnvironment environment, Map<String,? extends BuildEnvironmentVariable> environmentVariables, String projectName, List<? extends PolicyStatement> rolePolicyStatements, String subdirectory, SubnetSelection subnetSelection, IVpc vpc) Constructor that initializes the object based on literal property values passed by the StandardYarnSynthOptions.Builder.
Jsii$Proxy(String buildCommand, String installCommand, String synthCommand, Artifact cloudAssemblyArtifact, Artifact sourceArtifact, String actionName, List<? extends AdditionalArtifact> additionalArtifacts, List<String> copyEnvironmentVariables, BuildEnvironment environment, Map<String,? extends BuildEnvironmentVariable> environmentVariables, String projectName, List<? extends PolicyStatement> rolePolicyStatements, String subdirectory, SubnetSelection subnetSelection, IVpc vpc) Constructor that initializes the object based on literal property values passed by the StandardNpmSynthOptions.Builder.

Uses of PolicyStatement in software.amazon.awscdk.services.applicationautoscaling

Methods in software.amazon.awscdk.services.applicationautoscaling with parameters of type PolicyStatement

Modifier and Type	Method and Description
void	ScalableTarget.addToRolePolicy(PolicyStatement statement) (experimental) Add a policy statement to the role's policy.

Uses of PolicyStatement in software.amazon.awscdk.services.autoscaling

Methods in software.amazon.awscdk.services.autoscaling with parameters of type PolicyStatement

Modifier and Type	Method and Description
void	AutoScalingGroup.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM role assumed by instances of this fleet.

Uses of PolicyStatement in software.amazon.awscdk.services.chatbot

Methods in software.amazon.awscdk.services.chatbot with parameters of type PolicyStatement

Modifier and Type	Method and Description
void	SlackChannelConfiguration.addToRolePolicy(PolicyStatement statement) (experimental) Adds extra permission to iam-role of Slack channel configuration.
void	ISlackChannelConfiguration.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM role.
void	ISlackChannelConfiguration.Jsii$Proxy.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM role.
default void	ISlackChannelConfiguration.Jsii$Default.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM role.

Uses of PolicyStatement in software.amazon.awscdk.services.codebuild

Methods in software.amazon.awscdk.services.codebuild with parameters of type PolicyStatement

Modifier and Type	Method and Description
void	Project.addToRolePolicy(PolicyStatement statement) (experimental) Add a permission only if there's a policy attached.
void	IProject.addToRolePolicy(PolicyStatement policyStatement)
void	IProject.Jsii$Proxy.addToRolePolicy(PolicyStatement policyStatement)
default void	IProject.Jsii$Default.addToRolePolicy(PolicyStatement policyStatement)

Uses of PolicyStatement in software.amazon.awscdk.services.codepipeline

Methods in software.amazon.awscdk.services.codepipeline with parameters of type PolicyStatement

Modifier and Type	Method and Description
void	Pipeline.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the pipeline role.

Uses of PolicyStatement in software.amazon.awscdk.services.codepipeline.actions

Methods in software.amazon.awscdk.services.codepipeline.actions with parameters of type PolicyStatement

Modifier and Type	Method and Description
Boolean	CloudFormationCreateUpdateStackAction.addToDeploymentRolePolicy(PolicyStatement statement) (experimental) Add statement to the service role assumed by CloudFormation while executing this action.
Boolean	CloudFormationDeleteStackAction.addToDeploymentRolePolicy(PolicyStatement statement) (experimental) Add statement to the service role assumed by CloudFormation while executing this action.
Boolean	CloudFormationCreateReplaceChangeSetAction.addToDeploymentRolePolicy(PolicyStatement statement) (experimental) Add statement to the service role assumed by CloudFormation while executing this action.

Uses of PolicyStatement in software.amazon.awscdk.services.ec2

Methods in software.amazon.awscdk.services.ec2 with parameters of type PolicyStatement

Modifier and Type	Method and Description
void	VpcEndpoint.addToPolicy(PolicyStatement statement) (experimental) Adds a statement to the policy document of the VPC endpoint.
void	Instance.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM role assumed by the instance.

Uses of PolicyStatement in software.amazon.awscdk.services.ecr

Methods in software.amazon.awscdk.services.ecr with parameters of type PolicyStatement

Modifier and Type	Method and Description
AddToResourcePolicyResult	Repository.addToResourcePolicy(PolicyStatement statement) (experimental) Add a policy statement to the repository's resource policy.
AddToResourcePolicyResult	IRepository.addToResourcePolicy(PolicyStatement statement) (experimental) Add a policy statement to the repository's resource policy.
AddToResourcePolicyResult	IRepository.Jsii$Proxy.addToResourcePolicy(PolicyStatement statement) (experimental) Add a policy statement to the repository's resource policy.
default AddToResourcePolicyResult	IRepository.Jsii$Default.addToResourcePolicy(PolicyStatement statement) (experimental) Add a policy statement to the repository's resource policy.
abstract AddToResourcePolicyResult	RepositoryBase.addToResourcePolicy(PolicyStatement statement) (experimental) Add a policy statement to the repository's resource policy.

Uses of PolicyStatement in software.amazon.awscdk.services.ecs

Methods in software.amazon.awscdk.services.ecs with parameters of type PolicyStatement

Modifier and Type	Method and Description
void	ContainerDefinition.addToExecutionPolicy(PolicyStatement statement) (experimental) This method adds the specified statement to the IAM task execution policy in the task definition.
void	TaskDefinition.addToExecutionRolePolicy(PolicyStatement statement) (experimental) Adds a policy statement to the task execution IAM role.
void	TaskDefinition.addToTaskRolePolicy(PolicyStatement statement) (experimental) Adds a policy statement to the task IAM role.

Uses of PolicyStatement in software.amazon.awscdk.services.eks

Methods in software.amazon.awscdk.services.eks with parameters of type PolicyStatement

Modifier and Type	Method and Description
Boolean	ServiceAccount.addToPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
AddToPrincipalPolicyResult	ServiceAccount.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.

Uses of PolicyStatement in software.amazon.awscdk.services.elasticsearch

Methods in software.amazon.awscdk.services.elasticsearch that return types with arguments of type PolicyStatement

Modifier and Type	Method and Description
default List<PolicyStatement>	DomainProps.getAccessPolicies() (experimental) Domain Access policies.
List<PolicyStatement>	DomainProps.Jsii$Proxy.getAccessPolicies()

Method parameters in software.amazon.awscdk.services.elasticsearch with type arguments of type PolicyStatement

Modifier and Type	Method and Description
DomainProps.Builder	DomainProps.Builder.accessPolicies(List<? extends PolicyStatement> accessPolicies) Sets the value of DomainProps.getAccessPolicies()
Domain.Builder	Domain.Builder.accessPolicies(List<? extends PolicyStatement> accessPolicies) (experimental) Domain Access policies.

Constructor parameters in software.amazon.awscdk.services.elasticsearch with type arguments of type PolicyStatement

Constructor and Description

Jsii$Proxy(ElasticsearchVersion version, List<? extends PolicyStatement> accessPolicies, Map<String,String> advancedOptions, Number automatedSnapshotStartHour, CapacityConfig capacity, CognitoOptions cognitoKibanaAuth, String domainName, EbsOptions ebs, EncryptionAtRestOptions encryptionAtRest, Boolean enforceHttps, AdvancedSecurityOptions fineGrainedAccessControl, LoggingOptions logging, Boolean nodeToNodeEncryption, TLSSecurityPolicy tlsSecurityPolicy, Boolean useUnsignedBasicAuth, VpcOptions vpcOptions, ZoneAwarenessConfig zoneAwareness) Constructor that initializes the object based on literal property values passed by the DomainProps.Builder.

Uses of PolicyStatement in software.amazon.awscdk.services.events.targets

Methods in software.amazon.awscdk.services.events.targets that return PolicyStatement

Modifier and Type	Method and Description
default PolicyStatement	AwsApiProps.getPolicyStatement() (experimental) The IAM policy statement to allow the API call.
PolicyStatement	AwsApiProps.Jsii$Proxy.getPolicyStatement()

Methods in software.amazon.awscdk.services.events.targets with parameters of type PolicyStatement

Modifier and Type	Method and Description
AwsApi.Builder	AwsApi.Builder.policyStatement(PolicyStatement policyStatement) (experimental) The IAM policy statement to allow the API call.
AwsApiProps.Builder	AwsApiProps.Builder.policyStatement(PolicyStatement policyStatement) Sets the value of AwsApiProps.getPolicyStatement()

Constructors in software.amazon.awscdk.services.events.targets with parameters of type PolicyStatement

Constructor and Description
Jsii$Proxy(PolicyStatement policyStatement, String action, String service, String apiVersion, String catchErrorPattern, Object parameters) Constructor that initializes the object based on literal property values passed by the AwsApiProps.Builder.

Uses of PolicyStatement in software.amazon.awscdk.services.iam

Methods in software.amazon.awscdk.services.iam that return PolicyStatement

Modifier and Type	Method and Description
PolicyStatement	PolicyStatement.Builder.build()
static PolicyStatement	PolicyStatement.fromJson(Object obj) (experimental) Creates a new PolicyStatement based on the object provided.
PolicyStatement	Grant.getPrincipalStatement() (experimental) The statement that was added to the principal's policy.
PolicyStatement	Grant.getResourceStatement() (experimental) The statement that was added to the resource policy.

Methods in software.amazon.awscdk.services.iam that return types with arguments of type PolicyStatement

Modifier and Type	Method and Description
default List<PolicyStatement>	PolicyProps.getStatements() (experimental) Initial set of permissions to add to this policy document.
List<PolicyStatement>	PolicyProps.Jsii$Proxy.getStatements()
default List<PolicyStatement>	ManagedPolicyProps.getStatements() (experimental) Initial set of permissions to add to this policy document.
List<PolicyStatement>	ManagedPolicyProps.Jsii$Proxy.getStatements()
default List<PolicyStatement>	PolicyDocumentProps.getStatements() (experimental) Initial statements to add to the policy document.
List<PolicyStatement>	PolicyDocumentProps.Jsii$Proxy.getStatements()

Methods in software.amazon.awscdk.services.iam with parameters of type PolicyStatement

Modifier and Type	Method and Description
void	PolicyDocument.addStatements(PolicyStatement... statement) (experimental) Adds a statement to the policy document.
void	Policy.addStatements(PolicyStatement... statement) (experimental) Adds a statement to the policy document.
void	ManagedPolicy.addStatements(PolicyStatement... statement) (experimental) Adds a statement to the policy document.
Boolean	LazyRole.addToPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
Boolean	Role.addToPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
Boolean	Group.addToPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
Boolean	User.addToPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
Boolean	IRole.Jsii$Proxy.addToPolicy(PolicyStatement statement) Deprecated. Use `addToPrincipalPolicy` instead.
default Boolean	IRole.Jsii$Default.addToPolicy(PolicyStatement statement) Deprecated. Use `addToPrincipalPolicy` instead.
Boolean	PrincipalWithConditions.addToPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
Boolean	IGroup.Jsii$Proxy.addToPolicy(PolicyStatement statement) Deprecated. Use `addToPrincipalPolicy` instead.
default Boolean	IGroup.Jsii$Default.addToPolicy(PolicyStatement statement) Deprecated. Use `addToPrincipalPolicy` instead.
Boolean	IUser.Jsii$Proxy.addToPolicy(PolicyStatement statement) Deprecated. Use `addToPrincipalPolicy` instead.
default Boolean	IUser.Jsii$Default.addToPolicy(PolicyStatement statement) Deprecated. Use `addToPrincipalPolicy` instead.
Boolean	IPrincipal.addToPolicy(PolicyStatement statement) Deprecated. Use `addToPrincipalPolicy` instead.
Boolean	IPrincipal.Jsii$Proxy.addToPolicy(PolicyStatement statement) Deprecated. Use `addToPrincipalPolicy` instead.
default Boolean	IPrincipal.Jsii$Default.addToPolicy(PolicyStatement statement) Deprecated. Use `addToPrincipalPolicy` instead.
Boolean	UnknownPrincipal.addToPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
Boolean	IIdentity.Jsii$Proxy.addToPolicy(PolicyStatement statement) Deprecated. Use `addToPrincipalPolicy` instead.
default Boolean	IIdentity.Jsii$Default.addToPolicy(PolicyStatement statement) Deprecated. Use `addToPrincipalPolicy` instead.
Boolean	PrincipalBase.addToPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
AddToPrincipalPolicyResult	LazyRole.addToPrincipalPolicy(PolicyStatement statement) (experimental) Adds a permission to the role's default policy document.
AddToPrincipalPolicyResult	Role.addToPrincipalPolicy(PolicyStatement statement) (experimental) Adds a permission to the role's default policy document.
AddToPrincipalPolicyResult	Group.addToPrincipalPolicy(PolicyStatement statement) (experimental) Adds an IAM statement to the default policy.
AddToPrincipalPolicyResult	User.addToPrincipalPolicy(PolicyStatement statement) (experimental) Adds an IAM statement to the default policy.
AddToPrincipalPolicyResult	IRole.Jsii$Proxy.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
default AddToPrincipalPolicyResult	IRole.Jsii$Default.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
AddToPrincipalPolicyResult	PrincipalWithConditions.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
AddToPrincipalPolicyResult	IGroup.Jsii$Proxy.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
default AddToPrincipalPolicyResult	IGroup.Jsii$Default.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
AddToPrincipalPolicyResult	IUser.Jsii$Proxy.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
default AddToPrincipalPolicyResult	IUser.Jsii$Default.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
AddToPrincipalPolicyResult	IPrincipal.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
AddToPrincipalPolicyResult	IPrincipal.Jsii$Proxy.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
default AddToPrincipalPolicyResult	IPrincipal.Jsii$Default.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
AddToPrincipalPolicyResult	UnknownPrincipal.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
AddToPrincipalPolicyResult	IIdentity.Jsii$Proxy.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
default AddToPrincipalPolicyResult	IIdentity.Jsii$Default.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
AddToPrincipalPolicyResult	PrincipalBase.addToPrincipalPolicy(PolicyStatement _statement) (experimental) Add to the policy of this principal.
AddToResourcePolicyResult	IResourceWithPolicy.addToResourcePolicy(PolicyStatement statement) (experimental) Add a statement to the resource's resource policy.
AddToResourcePolicyResult	IResourceWithPolicy.Jsii$Proxy.addToResourcePolicy(PolicyStatement statement) (experimental) Add a statement to the resource's resource policy.
default AddToResourcePolicyResult	IResourceWithPolicy.Jsii$Default.addToResourcePolicy(PolicyStatement statement) (experimental) Add a statement to the resource's resource policy.

Method parameters in software.amazon.awscdk.services.iam with type arguments of type PolicyStatement

Modifier and Type	Method and Description
PolicyDocument.Builder	PolicyDocument.Builder.statements(List<? extends PolicyStatement> statements) (experimental) Initial statements to add to the policy document.
PolicyProps.Builder	PolicyProps.Builder.statements(List<? extends PolicyStatement> statements) Sets the value of PolicyProps.getStatements()
Policy.Builder	Policy.Builder.statements(List<? extends PolicyStatement> statements) (experimental) Initial set of permissions to add to this policy document.
ManagedPolicyProps.Builder	ManagedPolicyProps.Builder.statements(List<? extends PolicyStatement> statements) Sets the value of ManagedPolicyProps.getStatements()
PolicyDocumentProps.Builder	PolicyDocumentProps.Builder.statements(List<? extends PolicyStatement> statements) Sets the value of PolicyDocumentProps.getStatements()
ManagedPolicy.Builder	ManagedPolicy.Builder.statements(List<? extends PolicyStatement> statements) (experimental) Initial set of permissions to add to this policy document.

Constructor parameters in software.amazon.awscdk.services.iam with type arguments of type PolicyStatement

Constructor and Description
Jsii$Proxy(Boolean assignSids, List<? extends PolicyStatement> statements) Constructor that initializes the object based on literal property values passed by the PolicyDocumentProps.Builder.
Jsii$Proxy(PolicyDocument document, Boolean force, List<? extends IGroup> groups, String policyName, List<? extends IRole> roles, List<? extends PolicyStatement> statements, List<? extends IUser> users) Constructor that initializes the object based on literal property values passed by the PolicyProps.Builder.
Jsii$Proxy(String description, PolicyDocument document, List<? extends IGroup> groups, String managedPolicyName, String path, List<? extends IRole> roles, List<? extends PolicyStatement> statements, List<? extends IUser> users) Constructor that initializes the object based on literal property values passed by the ManagedPolicyProps.Builder.

Uses of PolicyStatement in software.amazon.awscdk.services.kms

Methods in software.amazon.awscdk.services.kms with parameters of type PolicyStatement

Modifier and Type	Method and Description
AddToResourcePolicyResult	Key.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the KMS key resource policy.
AddToResourcePolicyResult	IAlias.Jsii$Proxy.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the KMS key resource policy.
AddToResourcePolicyResult	IKey.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the KMS key resource policy.
AddToResourcePolicyResult	IKey.Jsii$Proxy.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the KMS key resource policy.
AddToResourcePolicyResult	Alias.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the KMS key resource policy.
AddToResourcePolicyResult	Key.addToResourcePolicy(PolicyStatement statement, Boolean allowNoOp) (experimental) Adds a statement to the KMS key resource policy.
AddToResourcePolicyResult	IAlias.Jsii$Proxy.addToResourcePolicy(PolicyStatement statement, Boolean allowNoOp) (experimental) Adds a statement to the KMS key resource policy.
default AddToResourcePolicyResult	IAlias.Jsii$Default.addToResourcePolicy(PolicyStatement statement, Boolean allowNoOp) (experimental) Adds a statement to the KMS key resource policy.
AddToResourcePolicyResult	IKey.addToResourcePolicy(PolicyStatement statement, Boolean allowNoOp) (experimental) Adds a statement to the KMS key resource policy.
AddToResourcePolicyResult	IKey.Jsii$Proxy.addToResourcePolicy(PolicyStatement statement, Boolean allowNoOp) (experimental) Adds a statement to the KMS key resource policy.
default AddToResourcePolicyResult	IKey.Jsii$Default.addToResourcePolicy(PolicyStatement statement, Boolean allowNoOp) (experimental) Adds a statement to the KMS key resource policy.
AddToResourcePolicyResult	Alias.addToResourcePolicy(PolicyStatement statement, Boolean allowNoOp) (experimental) Adds a statement to the KMS key resource policy.

Uses of PolicyStatement in software.amazon.awscdk.services.lambda

Methods in software.amazon.awscdk.services.lambda that return types with arguments of type PolicyStatement

Modifier and Type	Method and Description
default List<PolicyStatement>	FunctionOptions.getInitialPolicy() (experimental) Initial policy statements to add to the created Lambda Role.
List<PolicyStatement>	FunctionOptions.Jsii$Proxy.getInitialPolicy()
List<PolicyStatement>	SingletonFunctionProps.Jsii$Proxy.getInitialPolicy()
List<PolicyStatement>	FunctionProps.Jsii$Proxy.getInitialPolicy()
default List<PolicyStatement>	FileSystemConfig.getPolicies() (experimental) additional IAM policies required for the lambda function.
List<PolicyStatement>	FileSystemConfig.Jsii$Proxy.getPolicies()

Methods in software.amazon.awscdk.services.lambda with parameters of type PolicyStatement

Modifier and Type	Method and Description
void	IVersion.Jsii$Proxy.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM role assumed by the instance.
default void	IVersion.Jsii$Default.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM role assumed by the instance.
void	IAlias.Jsii$Proxy.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM role assumed by the instance.
default void	IAlias.Jsii$Default.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM role assumed by the instance.
void	IFunction.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM role assumed by the instance.
void	IFunction.Jsii$Proxy.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM role assumed by the instance.
default void	IFunction.Jsii$Default.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM role assumed by the instance.
void	FunctionBase.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM role assumed by the instance.

Method parameters in software.amazon.awscdk.services.lambda with type arguments of type PolicyStatement

Modifier and Type	Method and Description
SingletonFunction.Builder	SingletonFunction.Builder.initialPolicy(List<? extends PolicyStatement> initialPolicy) (experimental) Initial policy statements to add to the created Lambda Role.
FunctionOptions.Builder	FunctionOptions.Builder.initialPolicy(List<? extends PolicyStatement> initialPolicy) Sets the value of FunctionOptions.getInitialPolicy()
Function.Builder	Function.Builder.initialPolicy(List<? extends PolicyStatement> initialPolicy) (experimental) Initial policy statements to add to the created Lambda Role.
SingletonFunctionProps.Builder	SingletonFunctionProps.Builder.initialPolicy(List<? extends PolicyStatement> initialPolicy) Sets the value of FunctionOptions.getInitialPolicy()
FunctionProps.Builder	FunctionProps.Builder.initialPolicy(List<? extends PolicyStatement> initialPolicy) Sets the value of FunctionOptions.getInitialPolicy()
FileSystemConfig.Builder	FileSystemConfig.Builder.policies(List<? extends PolicyStatement> policies) Sets the value of FileSystemConfig.getPolicies()

Constructor parameters in software.amazon.awscdk.services.lambda with type arguments of type PolicyStatement

Constructor and Description
Jsii$Proxy(Boolean allowAllOutbound, Boolean allowPublicSubnet, VersionOptions currentVersionOptions, IQueue deadLetterQueue, Boolean deadLetterQueueEnabled, String description, Map<String,String> environment, List<? extends IEventSource> events, FileSystem filesystem, String functionName, List<? extends PolicyStatement> initialPolicy, List<? extends ILayerVersion> layers, RetentionDays logRetention, LogRetentionRetryOptions logRetentionRetryOptions, IRole logRetentionRole, Number memorySize, Boolean profiling, IProfilingGroup profilingGroup, Number reservedConcurrentExecutions, IRole role, ISecurityGroup securityGroup, List<? extends ISecurityGroup> securityGroups, Duration timeout, Tracing tracing, IVpc vpc, SubnetSelection vpcSubnets, Duration maxEventAge, IDestination onFailure, IDestination onSuccess, Number retryAttempts) Constructor that initializes the object based on literal property values passed by the FunctionOptions.Builder.
Jsii$Proxy(Code code, String handler, Runtime runtime, Boolean allowAllOutbound, Boolean allowPublicSubnet, VersionOptions currentVersionOptions, IQueue deadLetterQueue, Boolean deadLetterQueueEnabled, String description, Map<String,String> environment, List<? extends IEventSource> events, FileSystem filesystem, String functionName, List<? extends PolicyStatement> initialPolicy, List<? extends ILayerVersion> layers, RetentionDays logRetention, LogRetentionRetryOptions logRetentionRetryOptions, IRole logRetentionRole, Number memorySize, Boolean profiling, IProfilingGroup profilingGroup, Number reservedConcurrentExecutions, IRole role, ISecurityGroup securityGroup, List<? extends ISecurityGroup> securityGroups, Duration timeout, Tracing tracing, IVpc vpc, SubnetSelection vpcSubnets, Duration maxEventAge, IDestination onFailure, IDestination onSuccess, Number retryAttempts) Constructor that initializes the object based on literal property values passed by the FunctionProps.Builder.
Jsii$Proxy(String uuid, String lambdaPurpose, Code code, String handler, Runtime runtime, Boolean allowAllOutbound, Boolean allowPublicSubnet, VersionOptions currentVersionOptions, IQueue deadLetterQueue, Boolean deadLetterQueueEnabled, String description, Map<String,String> environment, List<? extends IEventSource> events, FileSystem filesystem, String functionName, List<? extends PolicyStatement> initialPolicy, List<? extends ILayerVersion> layers, RetentionDays logRetention, LogRetentionRetryOptions logRetentionRetryOptions, IRole logRetentionRole, Number memorySize, Boolean profiling, IProfilingGroup profilingGroup, Number reservedConcurrentExecutions, IRole role, ISecurityGroup securityGroup, List<? extends ISecurityGroup> securityGroups, Duration timeout, Tracing tracing, IVpc vpc, SubnetSelection vpcSubnets, Duration maxEventAge, IDestination onFailure, IDestination onSuccess, Number retryAttempts) Constructor that initializes the object based on literal property values passed by the SingletonFunctionProps.Builder.
Jsii$Proxy(String arn, String localMountPath, Connections connections, List<? extends IDependable> dependency, List<? extends PolicyStatement> policies) Constructor that initializes the object based on literal property values passed by the FileSystemConfig.Builder.

Uses of PolicyStatement in software.amazon.awscdk.services.lambda.nodejs

Methods in software.amazon.awscdk.services.lambda.nodejs that return types with arguments of type PolicyStatement

Modifier and Type	Method and Description
List<PolicyStatement>	NodejsFunctionProps.Jsii$Proxy.getInitialPolicy()

Method parameters in software.amazon.awscdk.services.lambda.nodejs with type arguments of type PolicyStatement

Modifier and Type	Method and Description
NodejsFunctionProps.Builder	NodejsFunctionProps.Builder.initialPolicy(List<? extends PolicyStatement> initialPolicy) Sets the value of FunctionOptions.getInitialPolicy()
NodejsFunction.Builder	NodejsFunction.Builder.initialPolicy(List<? extends PolicyStatement> initialPolicy) (experimental) Initial policy statements to add to the created Lambda Role.

Constructor parameters in software.amazon.awscdk.services.lambda.nodejs with type arguments of type PolicyStatement

Constructor and Description

Jsii$Proxy(Boolean awsSdkConnectionReuse, String depsLockFilePath, String entry, String handler, Runtime runtime, Boolean allowAllOutbound, Boolean allowPublicSubnet, VersionOptions currentVersionOptions, IQueue deadLetterQueue, Boolean deadLetterQueueEnabled, String description, Map<String,String> environment, List<? extends IEventSource> events, FileSystem filesystem, String functionName, List<? extends PolicyStatement> initialPolicy, List<? extends ILayerVersion> layers, RetentionDays logRetention, LogRetentionRetryOptions logRetentionRetryOptions, IRole logRetentionRole, Number memorySize, Boolean profiling, IProfilingGroup profilingGroup, Number reservedConcurrentExecutions, IRole role, ISecurityGroup securityGroup, List<? extends ISecurityGroup> securityGroups, Duration timeout, Tracing tracing, IVpc vpc, SubnetSelection vpcSubnets, Duration maxEventAge, IDestination onFailure, IDestination onSuccess, Number retryAttempts, Map<String,String> buildArgs, BundlingDockerImage bundlingDockerImage, Map<String,String> bundlingEnvironment, String esbuildVersion, List<String> externalModules, Boolean forceDockerBundling, Map<String,String> loader, Boolean minify, List<String> nodeModules, Boolean sourceMap, String target) Constructor that initializes the object based on literal property values passed by the NodejsFunctionProps.Builder.

Uses of PolicyStatement in software.amazon.awscdk.services.lambda.python

Methods in software.amazon.awscdk.services.lambda.python that return types with arguments of type PolicyStatement

Modifier and Type	Method and Description
List<PolicyStatement>	PythonFunctionProps.Jsii$Proxy.getInitialPolicy()

Method parameters in software.amazon.awscdk.services.lambda.python with type arguments of type PolicyStatement

Modifier and Type	Method and Description
PythonFunction.Builder	PythonFunction.Builder.initialPolicy(List<? extends PolicyStatement> initialPolicy) (experimental) Initial policy statements to add to the created Lambda Role.
PythonFunctionProps.Builder	PythonFunctionProps.Builder.initialPolicy(List<? extends PolicyStatement> initialPolicy) Sets the value of FunctionOptions.getInitialPolicy()

Constructor parameters in software.amazon.awscdk.services.lambda.python with type arguments of type PolicyStatement

Constructor and Description

Jsii$Proxy(String entry, String handler, String index, Runtime runtime, Boolean allowAllOutbound, Boolean allowPublicSubnet, VersionOptions currentVersionOptions, IQueue deadLetterQueue, Boolean deadLetterQueueEnabled, String description, Map<String,String> environment, List<? extends IEventSource> events, FileSystem filesystem, String functionName, List<? extends PolicyStatement> initialPolicy, List<? extends ILayerVersion> layers, RetentionDays logRetention, LogRetentionRetryOptions logRetentionRetryOptions, IRole logRetentionRole, Number memorySize, Boolean profiling, IProfilingGroup profilingGroup, Number reservedConcurrentExecutions, IRole role, ISecurityGroup securityGroup, List<? extends ISecurityGroup> securityGroups, Duration timeout, Tracing tracing, IVpc vpc, SubnetSelection vpcSubnets, Duration maxEventAge, IDestination onFailure, IDestination onSuccess, Number retryAttempts) Constructor that initializes the object based on literal property values passed by the PythonFunctionProps.Builder.

Uses of PolicyStatement in software.amazon.awscdk.services.logs

Methods in software.amazon.awscdk.services.logs with parameters of type PolicyStatement

Modifier and Type	Method and Description
void	CrossAccountDestination.addToPolicy(PolicyStatement statement)

Uses of PolicyStatement in software.amazon.awscdk.services.s3

Methods in software.amazon.awscdk.services.s3 with parameters of type PolicyStatement

Modifier and Type	Method and Description
AddToResourcePolicyResult	Bucket.addToResourcePolicy(PolicyStatement permission) (experimental) Adds a statement to the resource policy for a principal (i.e.
AddToResourcePolicyResult	IBucket.addToResourcePolicy(PolicyStatement permission) (experimental) Adds a statement to the resource policy for a principal (i.e.
AddToResourcePolicyResult	IBucket.Jsii$Proxy.addToResourcePolicy(PolicyStatement permission) (experimental) Adds a statement to the resource policy for a principal (i.e.
default AddToResourcePolicyResult	IBucket.Jsii$Default.addToResourcePolicy(PolicyStatement permission) (experimental) Adds a statement to the resource policy for a principal (i.e.

Uses of PolicyStatement in software.amazon.awscdk.services.secretsmanager

Methods in software.amazon.awscdk.services.secretsmanager with parameters of type PolicyStatement

Modifier and Type	Method and Description
AddToResourcePolicyResult	Secret.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this secret.
AddToResourcePolicyResult	ISecret.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this secret.
AddToResourcePolicyResult	ISecret.Jsii$Proxy.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this secret.
default AddToResourcePolicyResult	ISecret.Jsii$Default.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this secret.
AddToResourcePolicyResult	ISecretTargetAttachment.Jsii$Proxy.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this secret.
default AddToResourcePolicyResult	ISecretTargetAttachment.Jsii$Default.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this secret.
AddToResourcePolicyResult	SecretTargetAttachment.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this secret.

Uses of PolicyStatement in software.amazon.awscdk.services.sns

Methods in software.amazon.awscdk.services.sns with parameters of type PolicyStatement

Modifier and Type	Method and Description
AddToResourcePolicyResult	ITopic.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this topic.
AddToResourcePolicyResult	ITopic.Jsii$Proxy.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this topic.
default AddToResourcePolicyResult	ITopic.Jsii$Default.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this topic.
AddToResourcePolicyResult	TopicBase.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this topic.

Uses of PolicyStatement in software.amazon.awscdk.services.sqs

Methods in software.amazon.awscdk.services.sqs with parameters of type PolicyStatement

Modifier and Type	Method and Description
AddToResourcePolicyResult	IQueue.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this queue.
AddToResourcePolicyResult	IQueue.Jsii$Proxy.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this queue.
default AddToResourcePolicyResult	IQueue.Jsii$Default.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this queue.
AddToResourcePolicyResult	QueueBase.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this queue.

Uses of PolicyStatement in software.amazon.awscdk.services.stepfunctions

Methods in software.amazon.awscdk.services.stepfunctions that return types with arguments of type PolicyStatement

Modifier and Type	Method and Description
List<PolicyStatement>	StateGraph.getPolicyStatements() (experimental) The accumulated policy statements.
default List<PolicyStatement>	StepFunctionsTaskConfig.getPolicyStatements() (experimental) Additional policy statements to add to the execution role.
List<PolicyStatement>	StepFunctionsTaskConfig.Jsii$Proxy.getPolicyStatements()
protected abstract List<PolicyStatement>	TaskStateBase.getTaskPolicies()

Methods in software.amazon.awscdk.services.stepfunctions with parameters of type PolicyStatement

Modifier and Type	Method and Description
void	StateMachine.addToRolePolicy(PolicyStatement statement) (experimental) Add the given statement to the role's policy.
void	StateGraph.registerPolicyStatement(PolicyStatement statement) (experimental) Register a Policy Statement used by states in this graph.

Method parameters in software.amazon.awscdk.services.stepfunctions with type arguments of type PolicyStatement

Modifier and Type	Method and Description
StepFunctionsTaskConfig.Builder	StepFunctionsTaskConfig.Builder.policyStatements(List<? extends PolicyStatement> policyStatements) Sets the value of StepFunctionsTaskConfig.getPolicyStatements()

Constructor parameters in software.amazon.awscdk.services.stepfunctions with type arguments of type PolicyStatement

Constructor and Description
Jsii$Proxy(String resourceArn, Duration heartbeat, Map<String,? extends Object> metricDimensions, String metricPrefixPlural, String metricPrefixSingular, Map<String,? extends Object> parameters, List<? extends PolicyStatement> policyStatements) Constructor that initializes the object based on literal property values passed by the StepFunctionsTaskConfig.Builder.

Uses of PolicyStatement in software.amazon.awscdk.services.stepfunctions.tasks

Methods in software.amazon.awscdk.services.stepfunctions.tasks that return types with arguments of type PolicyStatement

Modifier and Type	Method and Description
protected List<PolicyStatement>	GlueStartJobRun.getTaskPolicies()
protected List<PolicyStatement>	SnsPublish.getTaskPolicies()
protected List<PolicyStatement>	AthenaStopQueryExecution.getTaskPolicies()
protected List<PolicyStatement>	EmrCreateCluster.getTaskPolicies()
protected List<PolicyStatement>	EmrCancelStep.getTaskPolicies()
protected List<PolicyStatement>	LambdaInvoke.getTaskPolicies()
protected List<PolicyStatement>	AthenaGetQueryResults.getTaskPolicies()
protected List<PolicyStatement>	StepFunctionsInvokeActivity.getTaskPolicies()
protected List<PolicyStatement>	DynamoUpdateItem.getTaskPolicies()
protected List<PolicyStatement>	EmrModifyInstanceGroupByName.getTaskPolicies()
protected List<PolicyStatement>	EmrModifyInstanceFleetByName.getTaskPolicies()
protected List<PolicyStatement>	SqsSendMessage.getTaskPolicies()
protected List<PolicyStatement>	DynamoGetItem.getTaskPolicies()
protected List<PolicyStatement>	SageMakerUpdateEndpoint.getTaskPolicies()
protected List<PolicyStatement>	DynamoPutItem.getTaskPolicies()
protected List<PolicyStatement>	CodeBuildStartBuild.getTaskPolicies()
protected List<PolicyStatement>	SageMakerCreateTrainingJob.getTaskPolicies()
protected List<PolicyStatement>	DynamoDeleteItem.getTaskPolicies()
protected List<PolicyStatement>	SageMakerCreateTransformJob.getTaskPolicies()
protected List<PolicyStatement>	SageMakerCreateEndpoint.getTaskPolicies()
protected List<PolicyStatement>	BatchSubmitJob.getTaskPolicies()
protected List<PolicyStatement>	EvaluateExpression.getTaskPolicies()
protected List<PolicyStatement>	StepFunctionsStartExecution.getTaskPolicies()
protected List<PolicyStatement>	EmrTerminateCluster.getTaskPolicies()
protected List<PolicyStatement>	EcsRunTask.getTaskPolicies()
protected List<PolicyStatement>	SageMakerCreateEndpointConfig.getTaskPolicies()
protected List<PolicyStatement>	EmrSetClusterTerminationProtection.getTaskPolicies()
protected List<PolicyStatement>	AthenaGetQueryExecution.getTaskPolicies()
protected List<PolicyStatement>	AthenaStartQueryExecution.getTaskPolicies()
protected List<PolicyStatement>	EmrAddStep.getTaskPolicies()
protected List<PolicyStatement>	SageMakerCreateModel.getTaskPolicies()