Struct PermissionsBoundary

#[non_exhaustive]
pub struct PermissionsBoundary {
    pub customer_managed_policy_reference: Option<CustomerManagedPolicyReference>,
    pub managed_policy_arn: Option<String>,
}

Specifies the configuration of the Amazon Web Services managed or customer managed policy that you want to set as a permissions boundary. Specify either CustomerManagedPolicyReference to use the name and path of a customer managed policy, or ManagedPolicyArn to use the ARN of an Amazon Web Services managed policy. A permissions boundary represents the maximum permissions that any policy can grant your role. For more information, see Permissions boundaries for IAM entities in the IAM User Guide.

Policies used as permissions boundaries don't provide permissions. You must also attach an IAM policy to the role. To learn how the effective permissions for a role are evaluated, see IAM JSON policy evaluation logic in the IAM User Guide.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

customer_managed_policy_reference: Option<CustomerManagedPolicyReference>

Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each Amazon Web Services account where you want to deploy your permission set.

managed_policy_arn: Option<String>

The Amazon Web Services managed policy ARN that you want to attach to a permission set as a permissions boundary.

Implementations

impl PermissionsBoundary

pub fn customer_managed_policy_reference( &self, ) -> Option<&CustomerManagedPolicyReference>

Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each Amazon Web Services account where you want to deploy your permission set.

pub fn managed_policy_arn(&self) -> Option<&str>

The Amazon Web Services managed policy ARN that you want to attach to a permission set as a permissions boundary.

impl PermissionsBoundary

pub fn builder() -> PermissionsBoundaryBuilder

Creates a new builder-style object to manufacture PermissionsBoundary.

Trait Implementations

impl Clone for PermissionsBoundary

fn clone(&self) -> PermissionsBoundary

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PermissionsBoundary

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for PermissionsBoundary

fn eq(&self, other: &PermissionsBoundary) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for PermissionsBoundary