Struct aws_sdk_ssoadmin::model::PermissionsBoundary

#[non_exhaustive]
pub struct PermissionsBoundary {
    pub customer_managed_policy_reference: Option<CustomerManagedPolicyReference>,
    pub managed_policy_arn: Option<String>,
}

Specifies the configuration of the Amazon Web Services managed or customer managed policy that you want to set as a permissions boundary. Specify either CustomerManagedPolicyReference to use the name and path of a customer managed policy, or ManagedPolicyArn to use the ARN of an Amazon Web Services managed IAM policy. A permissions boundary represents the maximum permissions that any policy can grant your role. For more information, see Permissions boundaries for IAM entities in the Identity and Access Management User Guide.

Policies used as permissions boundaries do not provide permissions. You must also attach an IAM policy to the role. To learn how the effective permissions for a role are evaluated, see IAM JSON policy evaluation logic in the Identity and Access Management User Guide.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

customer_managed_policy_reference: Option<CustomerManagedPolicyReference>

Specifies the name and path of the IAM customer managed policy. You must have an IAM policy that matches the name and path in each Amazon Web Services account where you want to deploy your permission set.

managed_policy_arn: Option<String>

The Amazon Web Services managed policy ARN that you want to attach to a permission set as a permissions boundary.

Implementations

impl PermissionsBoundary

pub fn customer_managed_policy_reference(
    &self
) -> Option<&CustomerManagedPolicyReference>

Specifies the name and path of the IAM customer managed policy. You must have an IAM policy that matches the name and path in each Amazon Web Services account where you want to deploy your permission set.

pub fn managed_policy_arn(&self) -> Option<&str>

The Amazon Web Services managed policy ARN that you want to attach to a permission set as a permissions boundary.

impl PermissionsBoundary

pub fn builder() -> Builder

Creates a new builder-style object to manufacture PermissionsBoundary.

Trait Implementations

impl Clone for PermissionsBoundary

fn clone(&self) -> PermissionsBoundary

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PermissionsBoundary

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq<PermissionsBoundary> for PermissionsBoundary

fn eq(&self, other: &PermissionsBoundary) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &PermissionsBoundary) -> bool

This method tests for !=.

impl StructuralPartialEq for PermissionsBoundary