PolicyEffect

Whether a policy grants or blocks its actions.

DENY always wins over ALLOW — if any deny policy matches a resource, the action is blocked even if other allow policies also match.

enum PolicyEffect {
  ALLOW
  DENY
}

Values

PolicyEffect.ALLOW {#allow}

Grant the policy's actions when the conditions match.

PolicyEffect.DENY {#deny}

Block the policy's actions when the conditions match. Deny policies override every matching allow policy.

Member Of

CreateGroupPolicyInput input ● Policy object ● PolicyEffectFilter input ● UpdatePolicyInput input