Skip to main content

UpdatePolicyInput

Edit an existing policy in place. The principal cannot be changed.

input UpdatePolicyInput {
  actions: [String!]
  conditions: Conditions
  effect: PolicyEffect
}

Fields​

UpdatePolicyInput.actions ● [String!] list scalar {#actions}​

Replace the policy's full action list. Pass one or more action ids in {entity}:{verb} form. Omit the field to leave the existing list unchanged. Duplicate entries are rejected.

UpdatePolicyInput.conditions ● Conditions scalar {#conditions}​

Restrict the actions to entities whose attributes match every condition. Pass "*" to clear all conditions and make the policy a wildcard. Per-key, send "*" to match any value or a non-empty list of strings to match a closed set. Omit the field to leave conditions unchanged.

UpdatePolicyInput.effect ● PolicyEffect enum {#effect}​

ALLOW grants the actions. DENY blocks them and wins over any matching ALLOW.

Member Of​

updatePolicy mutation