Uses of Class
software.amazon.awscdk.services.iam.PolicyStatement

Packages that use PolicyStatement

Package	Description
software.amazon.awscdk.customresources	AWS CDK Custom Resources
software.amazon.awscdk.services.applicationautoscaling	AWS Auto Scaling Construct Library
software.amazon.awscdk.services.autoscaling	Amazon EC2 Auto Scaling Construct Library
software.amazon.awscdk.services.chatbot	AWS::Chatbot Construct Library
software.amazon.awscdk.services.cloudfront.experimental
software.amazon.awscdk.services.codebuild	AWS CodeBuild Construct Library
software.amazon.awscdk.services.codepipeline	AWS CodePipeline Construct Library
software.amazon.awscdk.services.codepipeline.actions	AWS CodePipeline Actions
software.amazon.awscdk.services.ec2	Amazon EC2 Construct Library
software.amazon.awscdk.services.ecr	Amazon ECR Construct Library
software.amazon.awscdk.services.ecs	Amazon ECS Construct Library
software.amazon.awscdk.services.eks	Amazon EKS Construct Library
software.amazon.awscdk.services.elasticsearch	Amazon Elasticsearch Service Construct Library
software.amazon.awscdk.services.events.targets	Event Targets for Amazon EventBridge
software.amazon.awscdk.services.iam	AWS Identity and Access Management Construct Library
software.amazon.awscdk.services.kms	AWS Key Management Service Construct Library
software.amazon.awscdk.services.lambda	AWS Lambda Construct Library
software.amazon.awscdk.services.lambda.nodejs	Amazon Lambda Node.js Library
software.amazon.awscdk.services.logs	Amazon CloudWatch Logs Construct Library
software.amazon.awscdk.services.s3	Amazon S3 Construct Library
software.amazon.awscdk.services.secretsmanager	AWS Secrets Manager Construct Library
software.amazon.awscdk.services.sns	Amazon Simple Notification Service Construct Library
software.amazon.awscdk.services.sqs	Amazon Simple Queue Service Construct Library
software.amazon.awscdk.services.stepfunctions	AWS Step Functions Construct Library
software.amazon.awscdk.services.stepfunctions.tasks	Tasks for AWS Step Functions

Uses of PolicyStatement in software.amazon.awscdk.customresources

Methods in software.amazon.awscdk.customresources that return types with arguments of type PolicyStatement

Modifier and Type	Method and Description
List<PolicyStatement>	AwsCustomResourcePolicy.getStatements() (experimental) statements for explicit policy.

Method parameters in software.amazon.awscdk.customresources with type arguments of type PolicyStatement

Modifier and Type	Method and Description
static AwsCustomResourcePolicy	AwsCustomResourcePolicy.fromStatements(List<? extends PolicyStatement> statements) (experimental) Explicit IAM Policy Statements.

Uses of PolicyStatement in software.amazon.awscdk.services.applicationautoscaling

Methods in software.amazon.awscdk.services.applicationautoscaling with parameters of type PolicyStatement

Modifier and Type	Method and Description
void	ScalableTarget.addToRolePolicy(PolicyStatement statement) (experimental) Add a policy statement to the role's policy.

Uses of PolicyStatement in software.amazon.awscdk.services.autoscaling

Methods in software.amazon.awscdk.services.autoscaling with parameters of type PolicyStatement

Modifier and Type	Method and Description
void	AutoScalingGroup.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM role assumed by instances of this fleet.

Uses of PolicyStatement in software.amazon.awscdk.services.chatbot

Methods in software.amazon.awscdk.services.chatbot with parameters of type PolicyStatement

Modifier and Type	Method and Description
void	SlackChannelConfiguration.addToRolePolicy(PolicyStatement statement) (experimental) Adds extra permission to iam-role of Slack channel configuration.
void	ISlackChannelConfiguration.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM role.
void	ISlackChannelConfiguration.Jsii$Proxy.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM role.
default void	ISlackChannelConfiguration.Jsii$Default.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM role.

Uses of PolicyStatement in software.amazon.awscdk.services.cloudfront.experimental

Methods in software.amazon.awscdk.services.cloudfront.experimental that return types with arguments of type PolicyStatement

Modifier and Type	Method and Description
List<PolicyStatement>	EdgeFunctionProps.Jsii$Proxy.getInitialPolicy()

Methods in software.amazon.awscdk.services.cloudfront.experimental with parameters of type PolicyStatement

Modifier and Type	Method and Description
void	EdgeFunction.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM role assumed by the instance.

Method parameters in software.amazon.awscdk.services.cloudfront.experimental with type arguments of type PolicyStatement

Modifier and Type	Method and Description
EdgeFunction.Builder	EdgeFunction.Builder.initialPolicy(List<? extends PolicyStatement> initialPolicy) (experimental) Initial policy statements to add to the created Lambda Role.
EdgeFunctionProps.Builder	EdgeFunctionProps.Builder.initialPolicy(List<? extends PolicyStatement> initialPolicy) Sets the value of FunctionOptions.getInitialPolicy()

Constructor parameters in software.amazon.awscdk.services.cloudfront.experimental with type arguments of type PolicyStatement

Constructor and Description

Jsii$Proxy(String stackId, Code code, String handler, Runtime runtime, Boolean allowAllOutbound, Boolean allowPublicSubnet, ICodeSigningConfig codeSigningConfig, VersionOptions currentVersionOptions, IQueue deadLetterQueue, Boolean deadLetterQueueEnabled, String description, Map<String,String> environment, IKey environmentEncryption, List<? extends IEventSource> events, FileSystem filesystem, String functionName, List<? extends PolicyStatement> initialPolicy, List<? extends ILayerVersion> layers, RetentionDays logRetention, LogRetentionRetryOptions logRetentionRetryOptions, IRole logRetentionRole, Number memorySize, Boolean profiling, IProfilingGroup profilingGroup, Number reservedConcurrentExecutions, IRole role, List<? extends ISecurityGroup> securityGroups, Duration timeout, Tracing tracing, IVpc vpc, SubnetSelection vpcSubnets, Duration maxEventAge, IDestination onFailure, IDestination onSuccess, Number retryAttempts) Constructor that initializes the object based on literal property values passed by the EdgeFunctionProps.Builder.

Uses of PolicyStatement in software.amazon.awscdk.services.codebuild

Methods in software.amazon.awscdk.services.codebuild that return types with arguments of type PolicyStatement

Modifier and Type	Method and Description
default List<PolicyStatement>	UntrustedCodeBoundaryPolicyProps.getAdditionalStatements() (experimental) Additional statements to add to the default set of statements.
List<PolicyStatement>	UntrustedCodeBoundaryPolicyProps.Jsii$Proxy.getAdditionalStatements()

Methods in software.amazon.awscdk.services.codebuild with parameters of type PolicyStatement

Modifier and Type	Method and Description
void	Project.addToRolePolicy(PolicyStatement statement) (experimental) Add a permission only if there's a policy attached.
void	IProject.addToRolePolicy(PolicyStatement policyStatement)
void	IProject.Jsii$Proxy.addToRolePolicy(PolicyStatement policyStatement)
default void	IProject.Jsii$Default.addToRolePolicy(PolicyStatement policyStatement)

Method parameters in software.amazon.awscdk.services.codebuild with type arguments of type PolicyStatement

Modifier and Type	Method and Description
UntrustedCodeBoundaryPolicyProps.Builder	UntrustedCodeBoundaryPolicyProps.Builder.additionalStatements(List<? extends PolicyStatement> additionalStatements) Sets the value of UntrustedCodeBoundaryPolicyProps.getAdditionalStatements()
UntrustedCodeBoundaryPolicy.Builder	UntrustedCodeBoundaryPolicy.Builder.additionalStatements(List<? extends PolicyStatement> additionalStatements) (experimental) Additional statements to add to the default set of statements.

Constructor parameters in software.amazon.awscdk.services.codebuild with type arguments of type PolicyStatement

Constructor and Description
Jsii$Proxy(List<? extends PolicyStatement> additionalStatements, String managedPolicyName) Constructor that initializes the object based on literal property values passed by the UntrustedCodeBoundaryPolicyProps.Builder.

Uses of PolicyStatement in software.amazon.awscdk.services.codepipeline

Methods in software.amazon.awscdk.services.codepipeline with parameters of type PolicyStatement

Modifier and Type	Method and Description
void	Pipeline.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the pipeline role.

Uses of PolicyStatement in software.amazon.awscdk.services.codepipeline.actions

Methods in software.amazon.awscdk.services.codepipeline.actions with parameters of type PolicyStatement

Modifier and Type	Method and Description
Boolean	CloudFormationCreateUpdateStackAction.addToDeploymentRolePolicy(PolicyStatement statement) (experimental) Add statement to the service role assumed by CloudFormation while executing this action.
Boolean	CloudFormationDeleteStackAction.addToDeploymentRolePolicy(PolicyStatement statement) (experimental) Add statement to the service role assumed by CloudFormation while executing this action.
Boolean	CloudFormationCreateReplaceChangeSetAction.addToDeploymentRolePolicy(PolicyStatement statement) (experimental) Add statement to the service role assumed by CloudFormation while executing this action.

Uses of PolicyStatement in software.amazon.awscdk.services.ec2

Methods in software.amazon.awscdk.services.ec2 with parameters of type PolicyStatement

Modifier and Type	Method and Description
void	VpcEndpoint.addToPolicy(PolicyStatement statement) (experimental) Adds a statement to the policy document of the VPC endpoint.
void	Instance.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM role assumed by the instance.

Uses of PolicyStatement in software.amazon.awscdk.services.ecr

Methods in software.amazon.awscdk.services.ecr with parameters of type PolicyStatement

Modifier and Type	Method and Description
abstract AddToResourcePolicyResult	RepositoryBase.addToResourcePolicy(PolicyStatement statement) (experimental) Add a policy statement to the repository's resource policy.
AddToResourcePolicyResult	IRepository.addToResourcePolicy(PolicyStatement statement) (experimental) Add a policy statement to the repository's resource policy.
AddToResourcePolicyResult	IRepository.Jsii$Proxy.addToResourcePolicy(PolicyStatement statement) (experimental) Add a policy statement to the repository's resource policy.
default AddToResourcePolicyResult	IRepository.Jsii$Default.addToResourcePolicy(PolicyStatement statement) (experimental) Add a policy statement to the repository's resource policy.
AddToResourcePolicyResult	Repository.addToResourcePolicy(PolicyStatement statement) (experimental) Add a policy statement to the repository's resource policy.

Uses of PolicyStatement in software.amazon.awscdk.services.ecs

Methods in software.amazon.awscdk.services.ecs with parameters of type PolicyStatement

Modifier and Type	Method and Description
void	ContainerDefinition.addToExecutionPolicy(PolicyStatement statement) (experimental) This method adds the specified statement to the IAM task execution policy in the task definition.
void	TaskDefinition.addToExecutionRolePolicy(PolicyStatement statement) (experimental) Adds a policy statement to the task execution IAM role.
void	TaskDefinition.addToTaskRolePolicy(PolicyStatement statement) (experimental) Adds a policy statement to the task IAM role.

Uses of PolicyStatement in software.amazon.awscdk.services.eks

Methods in software.amazon.awscdk.services.eks with parameters of type PolicyStatement

Modifier and Type	Method and Description
AddToPrincipalPolicyResult	ServiceAccount.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.

Uses of PolicyStatement in software.amazon.awscdk.services.elasticsearch

Methods in software.amazon.awscdk.services.elasticsearch that return types with arguments of type PolicyStatement

Modifier and Type	Method and Description
default List<PolicyStatement>	DomainProps.getAccessPolicies() (experimental) Domain Access policies.
List<PolicyStatement>	DomainProps.Jsii$Proxy.getAccessPolicies()

Method parameters in software.amazon.awscdk.services.elasticsearch with type arguments of type PolicyStatement

Modifier and Type	Method and Description
Domain.Builder	Domain.Builder.accessPolicies(List<? extends PolicyStatement> accessPolicies) (experimental) Domain Access policies.
DomainProps.Builder	DomainProps.Builder.accessPolicies(List<? extends PolicyStatement> accessPolicies) Sets the value of DomainProps.getAccessPolicies()

Constructor parameters in software.amazon.awscdk.services.elasticsearch with type arguments of type PolicyStatement

Constructor and Description

Jsii$Proxy(ElasticsearchVersion version, List<? extends PolicyStatement> accessPolicies, Map<String,String> advancedOptions, Number automatedSnapshotStartHour, CapacityConfig capacity, CognitoOptions cognitoKibanaAuth, CustomEndpointOptions customEndpoint, String domainName, EbsOptions ebs, Boolean enableVersionUpgrade, EncryptionAtRestOptions encryptionAtRest, Boolean enforceHttps, AdvancedSecurityOptions fineGrainedAccessControl, LoggingOptions logging, Boolean nodeToNodeEncryption, RemovalPolicy removalPolicy, List<? extends ISecurityGroup> securityGroups, TLSSecurityPolicy tlsSecurityPolicy, Boolean useUnsignedBasicAuth, IVpc vpc, List<? extends SubnetSelection> vpcSubnets, ZoneAwarenessConfig zoneAwareness) Constructor that initializes the object based on literal property values passed by the DomainProps.Builder.

Uses of PolicyStatement in software.amazon.awscdk.services.events.targets

Methods in software.amazon.awscdk.services.events.targets that return PolicyStatement

Modifier and Type	Method and Description
default PolicyStatement	AwsApiProps.getPolicyStatement() (experimental) The IAM policy statement to allow the API call.
PolicyStatement	AwsApiProps.Jsii$Proxy.getPolicyStatement()

Methods in software.amazon.awscdk.services.events.targets with parameters of type PolicyStatement

Modifier and Type	Method and Description
AwsApiProps.Builder	AwsApiProps.Builder.policyStatement(PolicyStatement policyStatement) Sets the value of AwsApiProps.getPolicyStatement()
AwsApi.Builder	AwsApi.Builder.policyStatement(PolicyStatement policyStatement) (experimental) The IAM policy statement to allow the API call.

Constructors in software.amazon.awscdk.services.events.targets with parameters of type PolicyStatement

Constructor and Description
Jsii$Proxy(PolicyStatement policyStatement, String action, String service, String apiVersion, String catchErrorPattern, Object parameters) Constructor that initializes the object based on literal property values passed by the AwsApiProps.Builder.

Uses of PolicyStatement in software.amazon.awscdk.services.iam

Methods in software.amazon.awscdk.services.iam that return PolicyStatement

Modifier and Type	Method and Description
PolicyStatement	PolicyStatement.Builder.build()
static PolicyStatement	PolicyStatement.fromJson(Object obj) (experimental) Creates a new PolicyStatement based on the object provided.
PolicyStatement	Grant.getPrincipalStatement() (experimental) The statement that was added to the principal's policy.
PolicyStatement	Grant.getResourceStatement() (experimental) The statement that was added to the resource policy.

Methods in software.amazon.awscdk.services.iam that return types with arguments of type PolicyStatement

Modifier and Type	Method and Description
default List<PolicyStatement>	ManagedPolicyProps.getStatements() (experimental) Initial set of permissions to add to this policy document.
List<PolicyStatement>	ManagedPolicyProps.Jsii$Proxy.getStatements()
default List<PolicyStatement>	PolicyProps.getStatements() (experimental) Initial set of permissions to add to this policy document.
List<PolicyStatement>	PolicyProps.Jsii$Proxy.getStatements()
default List<PolicyStatement>	PolicyDocumentProps.getStatements() (experimental) Initial statements to add to the policy document.
List<PolicyStatement>	PolicyDocumentProps.Jsii$Proxy.getStatements()

Methods in software.amazon.awscdk.services.iam with parameters of type PolicyStatement

Modifier and Type	Method and Description
void	PolicyDocument.addStatements(PolicyStatement... statement) (experimental) Adds a statement to the policy document.
void	ManagedPolicy.addStatements(PolicyStatement... statement) (experimental) Adds a statement to the policy document.
void	Policy.addStatements(PolicyStatement... statement) (experimental) Adds a statement to the policy document.
Boolean	Group.addToPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
Boolean	PrincipalWithConditions.addToPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
Boolean	LazyRole.addToPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
Boolean	Role.addToPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
Boolean	PrincipalBase.addToPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
Boolean	UnknownPrincipal.addToPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
Boolean	User.addToPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
AddToPrincipalPolicyResult	IIdentity.Jsii$Proxy.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
default AddToPrincipalPolicyResult	IIdentity.Jsii$Default.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
AddToPrincipalPolicyResult	Group.addToPrincipalPolicy(PolicyStatement statement) (experimental) Adds an IAM statement to the default policy.
AddToPrincipalPolicyResult	PrincipalWithConditions.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
AddToPrincipalPolicyResult	LazyRole.addToPrincipalPolicy(PolicyStatement statement) (experimental) Adds a permission to the role's default policy document.
AddToPrincipalPolicyResult	Role.addToPrincipalPolicy(PolicyStatement statement) (experimental) Adds a permission to the role's default policy document.
AddToPrincipalPolicyResult	PrincipalBase.addToPrincipalPolicy(PolicyStatement _statement) (experimental) Add to the policy of this principal.
AddToPrincipalPolicyResult	UnknownPrincipal.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
AddToPrincipalPolicyResult	User.addToPrincipalPolicy(PolicyStatement statement) (experimental) Adds an IAM statement to the default policy.
AddToPrincipalPolicyResult	IRole.Jsii$Proxy.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
default AddToPrincipalPolicyResult	IRole.Jsii$Default.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
AddToPrincipalPolicyResult	IGroup.Jsii$Proxy.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
default AddToPrincipalPolicyResult	IGroup.Jsii$Default.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
AddToPrincipalPolicyResult	IPrincipal.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
AddToPrincipalPolicyResult	IPrincipal.Jsii$Proxy.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
default AddToPrincipalPolicyResult	IPrincipal.Jsii$Default.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
AddToPrincipalPolicyResult	IUser.Jsii$Proxy.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
default AddToPrincipalPolicyResult	IUser.Jsii$Default.addToPrincipalPolicy(PolicyStatement statement) (experimental) Add to the policy of this principal.
AddToResourcePolicyResult	IResourceWithPolicy.addToResourcePolicy(PolicyStatement statement) (experimental) Add a statement to the resource's resource policy.
AddToResourcePolicyResult	IResourceWithPolicy.Jsii$Proxy.addToResourcePolicy(PolicyStatement statement) (experimental) Add a statement to the resource's resource policy.
default AddToResourcePolicyResult	IResourceWithPolicy.Jsii$Default.addToResourcePolicy(PolicyStatement statement) (experimental) Add a statement to the resource's resource policy.

Method parameters in software.amazon.awscdk.services.iam with type arguments of type PolicyStatement

Modifier and Type	Method and Description
ManagedPolicyProps.Builder	ManagedPolicyProps.Builder.statements(List<? extends PolicyStatement> statements) Sets the value of ManagedPolicyProps.getStatements()
PolicyProps.Builder	PolicyProps.Builder.statements(List<? extends PolicyStatement> statements) Sets the value of PolicyProps.getStatements()
PolicyDocument.Builder	PolicyDocument.Builder.statements(List<? extends PolicyStatement> statements) (experimental) Initial statements to add to the policy document.
ManagedPolicy.Builder	ManagedPolicy.Builder.statements(List<? extends PolicyStatement> statements) (experimental) Initial set of permissions to add to this policy document.
PolicyDocumentProps.Builder	PolicyDocumentProps.Builder.statements(List<? extends PolicyStatement> statements) Sets the value of PolicyDocumentProps.getStatements()
Policy.Builder	Policy.Builder.statements(List<? extends PolicyStatement> statements) (experimental) Initial set of permissions to add to this policy document.

Constructor parameters in software.amazon.awscdk.services.iam with type arguments of type PolicyStatement

Constructor and Description
Jsii$Proxy(Boolean assignSids, List<? extends PolicyStatement> statements) Constructor that initializes the object based on literal property values passed by the PolicyDocumentProps.Builder.
Jsii$Proxy(PolicyDocument document, Boolean force, List<? extends IGroup> groups, String policyName, List<? extends IRole> roles, List<? extends PolicyStatement> statements, List<? extends IUser> users) Constructor that initializes the object based on literal property values passed by the PolicyProps.Builder.
Jsii$Proxy(String description, PolicyDocument document, List<? extends IGroup> groups, String managedPolicyName, String path, List<? extends IRole> roles, List<? extends PolicyStatement> statements, List<? extends IUser> users) Constructor that initializes the object based on literal property values passed by the ManagedPolicyProps.Builder.

Uses of PolicyStatement in software.amazon.awscdk.services.kms

Methods in software.amazon.awscdk.services.kms with parameters of type PolicyStatement

Modifier and Type	Method and Description
AddToResourcePolicyResult	Alias.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the KMS key resource policy.
AddToResourcePolicyResult	Key.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the KMS key resource policy.
AddToResourcePolicyResult	IKey.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the KMS key resource policy.
AddToResourcePolicyResult	IKey.Jsii$Proxy.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the KMS key resource policy.
AddToResourcePolicyResult	IAlias.Jsii$Proxy.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the KMS key resource policy.
AddToResourcePolicyResult	Alias.addToResourcePolicy(PolicyStatement statement, Boolean allowNoOp) (experimental) Adds a statement to the KMS key resource policy.
AddToResourcePolicyResult	Key.addToResourcePolicy(PolicyStatement statement, Boolean allowNoOp) (experimental) Adds a statement to the KMS key resource policy.
AddToResourcePolicyResult	IKey.addToResourcePolicy(PolicyStatement statement, Boolean allowNoOp) (experimental) Adds a statement to the KMS key resource policy.
AddToResourcePolicyResult	IKey.Jsii$Proxy.addToResourcePolicy(PolicyStatement statement, Boolean allowNoOp) (experimental) Adds a statement to the KMS key resource policy.
default AddToResourcePolicyResult	IKey.Jsii$Default.addToResourcePolicy(PolicyStatement statement, Boolean allowNoOp) (experimental) Adds a statement to the KMS key resource policy.
AddToResourcePolicyResult	IAlias.Jsii$Proxy.addToResourcePolicy(PolicyStatement statement, Boolean allowNoOp) (experimental) Adds a statement to the KMS key resource policy.
default AddToResourcePolicyResult	IAlias.Jsii$Default.addToResourcePolicy(PolicyStatement statement, Boolean allowNoOp) (experimental) Adds a statement to the KMS key resource policy.

Uses of PolicyStatement in software.amazon.awscdk.services.lambda

Methods in software.amazon.awscdk.services.lambda that return types with arguments of type PolicyStatement

Modifier and Type	Method and Description
List<PolicyStatement>	DockerImageFunctionProps.Jsii$Proxy.getInitialPolicy()
default List<PolicyStatement>	FunctionOptions.getInitialPolicy() (experimental) Initial policy statements to add to the created Lambda Role.
List<PolicyStatement>	FunctionOptions.Jsii$Proxy.getInitialPolicy()
List<PolicyStatement>	SingletonFunctionProps.Jsii$Proxy.getInitialPolicy()
List<PolicyStatement>	FunctionProps.Jsii$Proxy.getInitialPolicy()
default List<PolicyStatement>	FileSystemConfig.getPolicies() (experimental) additional IAM policies required for the lambda function.
List<PolicyStatement>	FileSystemConfig.Jsii$Proxy.getPolicies()

Methods in software.amazon.awscdk.services.lambda with parameters of type PolicyStatement

Modifier and Type	Method and Description
void	FunctionBase.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM role assumed by the instance.
void	IVersion.Jsii$Proxy.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM role assumed by the instance.
default void	IVersion.Jsii$Default.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM role assumed by the instance.
void	IAlias.Jsii$Proxy.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM role assumed by the instance.
default void	IAlias.Jsii$Default.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM role assumed by the instance.
void	IFunction.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM role assumed by the instance.
void	IFunction.Jsii$Proxy.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM role assumed by the instance.
default void	IFunction.Jsii$Default.addToRolePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM role assumed by the instance.

Method parameters in software.amazon.awscdk.services.lambda with type arguments of type PolicyStatement

Modifier and Type	Method and Description
DockerImageFunctionProps.Builder	DockerImageFunctionProps.Builder.initialPolicy(List<? extends PolicyStatement> initialPolicy) Sets the value of FunctionOptions.getInitialPolicy()
FunctionOptions.Builder	FunctionOptions.Builder.initialPolicy(List<? extends PolicyStatement> initialPolicy) Sets the value of FunctionOptions.getInitialPolicy()
SingletonFunctionProps.Builder	SingletonFunctionProps.Builder.initialPolicy(List<? extends PolicyStatement> initialPolicy) Sets the value of FunctionOptions.getInitialPolicy()
Function.Builder	Function.Builder.initialPolicy(List<? extends PolicyStatement> initialPolicy) (experimental) Initial policy statements to add to the created Lambda Role.
DockerImageFunction.Builder	DockerImageFunction.Builder.initialPolicy(List<? extends PolicyStatement> initialPolicy) (experimental) Initial policy statements to add to the created Lambda Role.
SingletonFunction.Builder	SingletonFunction.Builder.initialPolicy(List<? extends PolicyStatement> initialPolicy) (experimental) Initial policy statements to add to the created Lambda Role.
FunctionProps.Builder	FunctionProps.Builder.initialPolicy(List<? extends PolicyStatement> initialPolicy) Sets the value of FunctionOptions.getInitialPolicy()
FileSystemConfig.Builder	FileSystemConfig.Builder.policies(List<? extends PolicyStatement> policies) Sets the value of FileSystemConfig.getPolicies()

Constructor parameters in software.amazon.awscdk.services.lambda with type arguments of type PolicyStatement

Constructor and Description
Jsii$Proxy(Boolean allowAllOutbound, Boolean allowPublicSubnet, ICodeSigningConfig codeSigningConfig, VersionOptions currentVersionOptions, IQueue deadLetterQueue, Boolean deadLetterQueueEnabled, String description, Map<String,String> environment, IKey environmentEncryption, List<? extends IEventSource> events, FileSystem filesystem, String functionName, List<? extends PolicyStatement> initialPolicy, List<? extends ILayerVersion> layers, RetentionDays logRetention, LogRetentionRetryOptions logRetentionRetryOptions, IRole logRetentionRole, Number memorySize, Boolean profiling, IProfilingGroup profilingGroup, Number reservedConcurrentExecutions, IRole role, List<? extends ISecurityGroup> securityGroups, Duration timeout, Tracing tracing, IVpc vpc, SubnetSelection vpcSubnets, Duration maxEventAge, IDestination onFailure, IDestination onSuccess, Number retryAttempts) Constructor that initializes the object based on literal property values passed by the FunctionOptions.Builder.
Jsii$Proxy(Code code, String handler, Runtime runtime, Boolean allowAllOutbound, Boolean allowPublicSubnet, ICodeSigningConfig codeSigningConfig, VersionOptions currentVersionOptions, IQueue deadLetterQueue, Boolean deadLetterQueueEnabled, String description, Map<String,String> environment, IKey environmentEncryption, List<? extends IEventSource> events, FileSystem filesystem, String functionName, List<? extends PolicyStatement> initialPolicy, List<? extends ILayerVersion> layers, RetentionDays logRetention, LogRetentionRetryOptions logRetentionRetryOptions, IRole logRetentionRole, Number memorySize, Boolean profiling, IProfilingGroup profilingGroup, Number reservedConcurrentExecutions, IRole role, List<? extends ISecurityGroup> securityGroups, Duration timeout, Tracing tracing, IVpc vpc, SubnetSelection vpcSubnets, Duration maxEventAge, IDestination onFailure, IDestination onSuccess, Number retryAttempts) Constructor that initializes the object based on literal property values passed by the FunctionProps.Builder.
Jsii$Proxy(DockerImageCode code, Boolean allowAllOutbound, Boolean allowPublicSubnet, ICodeSigningConfig codeSigningConfig, VersionOptions currentVersionOptions, IQueue deadLetterQueue, Boolean deadLetterQueueEnabled, String description, Map<String,String> environment, IKey environmentEncryption, List<? extends IEventSource> events, FileSystem filesystem, String functionName, List<? extends PolicyStatement> initialPolicy, List<? extends ILayerVersion> layers, RetentionDays logRetention, LogRetentionRetryOptions logRetentionRetryOptions, IRole logRetentionRole, Number memorySize, Boolean profiling, IProfilingGroup profilingGroup, Number reservedConcurrentExecutions, IRole role, List<? extends ISecurityGroup> securityGroups, Duration timeout, Tracing tracing, IVpc vpc, SubnetSelection vpcSubnets, Duration maxEventAge, IDestination onFailure, IDestination onSuccess, Number retryAttempts) Constructor that initializes the object based on literal property values passed by the DockerImageFunctionProps.Builder.
Jsii$Proxy(String uuid, String lambdaPurpose, Code code, String handler, Runtime runtime, Boolean allowAllOutbound, Boolean allowPublicSubnet, ICodeSigningConfig codeSigningConfig, VersionOptions currentVersionOptions, IQueue deadLetterQueue, Boolean deadLetterQueueEnabled, String description, Map<String,String> environment, IKey environmentEncryption, List<? extends IEventSource> events, FileSystem filesystem, String functionName, List<? extends PolicyStatement> initialPolicy, List<? extends ILayerVersion> layers, RetentionDays logRetention, LogRetentionRetryOptions logRetentionRetryOptions, IRole logRetentionRole, Number memorySize, Boolean profiling, IProfilingGroup profilingGroup, Number reservedConcurrentExecutions, IRole role, List<? extends ISecurityGroup> securityGroups, Duration timeout, Tracing tracing, IVpc vpc, SubnetSelection vpcSubnets, Duration maxEventAge, IDestination onFailure, IDestination onSuccess, Number retryAttempts) Constructor that initializes the object based on literal property values passed by the SingletonFunctionProps.Builder.
Jsii$Proxy(String arn, String localMountPath, Connections connections, List<? extends software.constructs.IDependable> dependency, List<? extends PolicyStatement> policies) Constructor that initializes the object based on literal property values passed by the FileSystemConfig.Builder.

Uses of PolicyStatement in software.amazon.awscdk.services.lambda.nodejs

Methods in software.amazon.awscdk.services.lambda.nodejs that return types with arguments of type PolicyStatement

Modifier and Type	Method and Description
List<PolicyStatement>	NodejsFunctionProps.Jsii$Proxy.getInitialPolicy()

Method parameters in software.amazon.awscdk.services.lambda.nodejs with type arguments of type PolicyStatement

Modifier and Type	Method and Description
NodejsFunctionProps.Builder	NodejsFunctionProps.Builder.initialPolicy(List<? extends PolicyStatement> initialPolicy) Sets the value of FunctionOptions.getInitialPolicy()
NodejsFunction.Builder	NodejsFunction.Builder.initialPolicy(List<? extends PolicyStatement> initialPolicy) (experimental) Initial policy statements to add to the created Lambda Role.

Constructor parameters in software.amazon.awscdk.services.lambda.nodejs with type arguments of type PolicyStatement

Constructor and Description

Jsii$Proxy(Boolean awsSdkConnectionReuse, BundlingOptions bundling, String depsLockFilePath, String entry, String handler, Runtime runtime, Boolean allowAllOutbound, Boolean allowPublicSubnet, ICodeSigningConfig codeSigningConfig, VersionOptions currentVersionOptions, IQueue deadLetterQueue, Boolean deadLetterQueueEnabled, String description, Map<String,String> environment, IKey environmentEncryption, List<? extends IEventSource> events, FileSystem filesystem, String functionName, List<? extends PolicyStatement> initialPolicy, List<? extends ILayerVersion> layers, RetentionDays logRetention, LogRetentionRetryOptions logRetentionRetryOptions, IRole logRetentionRole, Number memorySize, Boolean profiling, IProfilingGroup profilingGroup, Number reservedConcurrentExecutions, IRole role, List<? extends ISecurityGroup> securityGroups, Duration timeout, Tracing tracing, IVpc vpc, SubnetSelection vpcSubnets, Duration maxEventAge, IDestination onFailure, IDestination onSuccess, Number retryAttempts) Constructor that initializes the object based on literal property values passed by the NodejsFunctionProps.Builder.

Uses of PolicyStatement in software.amazon.awscdk.services.logs

Methods in software.amazon.awscdk.services.logs with parameters of type PolicyStatement

Modifier and Type	Method and Description
void	CrossAccountDestination.addToPolicy(PolicyStatement statement)

Uses of PolicyStatement in software.amazon.awscdk.services.s3

Methods in software.amazon.awscdk.services.s3 with parameters of type PolicyStatement

Modifier and Type	Method and Description
AddToResourcePolicyResult	Bucket.addToResourcePolicy(PolicyStatement permission) (experimental) Adds a statement to the resource policy for a principal (i.e.
AddToResourcePolicyResult	IBucket.addToResourcePolicy(PolicyStatement permission) (experimental) Adds a statement to the resource policy for a principal (i.e.
AddToResourcePolicyResult	IBucket.Jsii$Proxy.addToResourcePolicy(PolicyStatement permission) (experimental) Adds a statement to the resource policy for a principal (i.e.
default AddToResourcePolicyResult	IBucket.Jsii$Default.addToResourcePolicy(PolicyStatement permission) (experimental) Adds a statement to the resource policy for a principal (i.e.

Uses of PolicyStatement in software.amazon.awscdk.services.secretsmanager

Methods in software.amazon.awscdk.services.secretsmanager with parameters of type PolicyStatement

Modifier and Type	Method and Description
AddToResourcePolicyResult	ISecret.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this secret.
AddToResourcePolicyResult	ISecret.Jsii$Proxy.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this secret.
default AddToResourcePolicyResult	ISecret.Jsii$Default.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this secret.
AddToResourcePolicyResult	SecretTargetAttachment.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this secret.
AddToResourcePolicyResult	ISecretTargetAttachment.Jsii$Proxy.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this secret.
default AddToResourcePolicyResult	ISecretTargetAttachment.Jsii$Default.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this secret.
AddToResourcePolicyResult	Secret.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this secret.

Uses of PolicyStatement in software.amazon.awscdk.services.sns

Methods in software.amazon.awscdk.services.sns with parameters of type PolicyStatement

Modifier and Type	Method and Description
AddToResourcePolicyResult	ITopic.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this topic.
AddToResourcePolicyResult	ITopic.Jsii$Proxy.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this topic.
default AddToResourcePolicyResult	ITopic.Jsii$Default.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this topic.
AddToResourcePolicyResult	TopicBase.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this topic.

Uses of PolicyStatement in software.amazon.awscdk.services.sqs

Methods in software.amazon.awscdk.services.sqs with parameters of type PolicyStatement

Modifier and Type	Method and Description
AddToResourcePolicyResult	QueueBase.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this queue.
AddToResourcePolicyResult	IQueue.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this queue.
AddToResourcePolicyResult	IQueue.Jsii$Proxy.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this queue.
default AddToResourcePolicyResult	IQueue.Jsii$Default.addToResourcePolicy(PolicyStatement statement) (experimental) Adds a statement to the IAM resource policy associated with this queue.

Uses of PolicyStatement in software.amazon.awscdk.services.stepfunctions

Methods in software.amazon.awscdk.services.stepfunctions that return types with arguments of type PolicyStatement

Modifier and Type	Method and Description
List<PolicyStatement>	StateGraph.getPolicyStatements() (experimental) The accumulated policy statements.
protected abstract List<PolicyStatement>	TaskStateBase.getTaskPolicies()

Methods in software.amazon.awscdk.services.stepfunctions with parameters of type PolicyStatement

Modifier and Type	Method and Description
void	StateMachine.addToRolePolicy(PolicyStatement statement) (experimental) Add the given statement to the role's policy.
void	StateGraph.registerPolicyStatement(PolicyStatement statement) (experimental) Register a Policy Statement used by states in this graph.

Uses of PolicyStatement in software.amazon.awscdk.services.stepfunctions.tasks

Methods in software.amazon.awscdk.services.stepfunctions.tasks that return types with arguments of type PolicyStatement

Modifier and Type	Method and Description
protected List<PolicyStatement>	CallApiGatewayRestApiEndpoint.createPolicyStatements()
protected List<PolicyStatement>	CallApiGatewayHttpApiEndpoint.createPolicyStatements()
protected List<PolicyStatement>	EcsRunTask.getTaskPolicies()
protected List<PolicyStatement>	EmrSetClusterTerminationProtection.getTaskPolicies()
protected List<PolicyStatement>	SageMakerCreateEndpointConfig.getTaskPolicies()
protected List<PolicyStatement>	SageMakerCreateModel.getTaskPolicies()
protected List<PolicyStatement>	CodeBuildStartBuild.getTaskPolicies()
protected List<PolicyStatement>	LambdaInvoke.getTaskPolicies()
protected List<PolicyStatement>	EmrTerminateCluster.getTaskPolicies()
protected List<PolicyStatement>	DynamoGetItem.getTaskPolicies()
protected List<PolicyStatement>	SageMakerUpdateEndpoint.getTaskPolicies()
protected List<PolicyStatement>	AthenaStopQueryExecution.getTaskPolicies()
protected List<PolicyStatement>	EmrAddStep.getTaskPolicies()
protected List<PolicyStatement>	DynamoDeleteItem.getTaskPolicies()
protected List<PolicyStatement>	AthenaGetQueryResults.getTaskPolicies()
protected List<PolicyStatement>	EksCall.getTaskPolicies()
protected List<PolicyStatement>	SageMakerCreateTransformJob.getTaskPolicies()
protected List<PolicyStatement>	DynamoPutItem.getTaskPolicies()
protected List<PolicyStatement>	CallApiGatewayRestApiEndpoint.getTaskPolicies()
protected List<PolicyStatement>	AthenaGetQueryExecution.getTaskPolicies()
protected List<PolicyStatement>	SageMakerCreateEndpoint.getTaskPolicies()
protected List<PolicyStatement>	EmrModifyInstanceGroupByName.getTaskPolicies()
protected List<PolicyStatement>	DynamoUpdateItem.getTaskPolicies()
protected List<PolicyStatement>	EmrCreateCluster.getTaskPolicies()
protected List<PolicyStatement>	StepFunctionsStartExecution.getTaskPolicies()
protected List<PolicyStatement>	StepFunctionsInvokeActivity.getTaskPolicies()
protected List<PolicyStatement>	SqsSendMessage.getTaskPolicies()
protected List<PolicyStatement>	EmrModifyInstanceFleetByName.getTaskPolicies()
protected List<PolicyStatement>	EvaluateExpression.getTaskPolicies()
protected List<PolicyStatement>	BatchSubmitJob.getTaskPolicies()
protected List<PolicyStatement>	SnsPublish.getTaskPolicies()
protected List<PolicyStatement>	AthenaStartQueryExecution.getTaskPolicies()
protected List<PolicyStatement>	CallApiGatewayHttpApiEndpoint.getTaskPolicies()
protected List<PolicyStatement>	SageMakerCreateTrainingJob.getTaskPolicies()
protected List<PolicyStatement>	GlueStartJobRun.getTaskPolicies()
protected List<PolicyStatement>	GlueDataBrewStartJobRun.getTaskPolicies()
protected List<PolicyStatement>	EmrCancelStep.getTaskPolicies()