aws-cdk-lib.aws_iam.WithoutPolicyUpdatesOptions

interface WithoutPolicyUpdatesOptions

LanguageType name
.NETAmazon.CDK.AWS.IAM.WithoutPolicyUpdatesOptions
Gogithub.com/aws/aws-cdk-go/awscdk/v2/awsiam#WithoutPolicyUpdatesOptions
Javasoftware.amazon.awscdk.services.iam.WithoutPolicyUpdatesOptions
Pythonaws_cdk.aws_iam.WithoutPolicyUpdatesOptions
TypeScript (source)aws-cdk-lib » aws_iam » WithoutPolicyUpdatesOptions

Options for the withoutPolicyUpdates() modifier of a Role.

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_iam as iam } from 'aws-cdk-lib';
const withoutPolicyUpdatesOptions: iam.WithoutPolicyUpdatesOptions = {
  addGrantsToResources: false,
};

Properties

NameTypeDescription
addGrantsToResources?booleanAdd grants to resources instead of dropping them.

addGrantsToResources?

Type: boolean (optional, default: false)

Add grants to resources instead of dropping them.

If this is false or not specified, grant permissions added to this role are ignored. It is your own responsibility to make sure the role has the required permissions.

If this is true, any grant permissions will be added to the resource instead.