Struct IamAction 

pub struct IamAction {
    pub service: &'static str,
    pub action: &'static str,
    pub resource: String,
}

One IAM action that the dispatch layer should evaluate against the caller’s effective policy set.

Produced by crate::service::AwsService::iam_action_for on services that opt into enforcement. The resource is a fully-qualified AWS ARN built from request.principal.account_id so multi-account isolation (#381) becomes a state-partitioning change rather than a cross-cutting rewrite.

Fields

service: &'static str

IAM service prefix, e.g. "s3", "sqs", "iam".

action: &'static str

AWS action name, e.g. "GetObject", "SendMessage".

resource: String

Fully-qualified ARN of the target resource.

Implementations

impl IamAction

pub fn action_string(&self) -> String

Compose the canonical service:Action string the evaluator matches against.

pub fn pass_role(role_arn: impl Into<String>) -> Self

iam:PassRole on role_arn: the authorization AWS requires of the caller whenever a request hands a role to a service (Lambda’s Role, a Scheduler target’s RoleArn, an S3 replication Role, …). It is evaluated in addition to the operation’s own action, and the service supplies the iam:PassedToService / iam:AssociatedResourceArn condition keys via pass_role_condition_keys.

pub fn is_pass_role(&self) -> bool

True for the iam:PassRole action built by IamAction::pass_role.

Trait Implementations

impl Clone for IamAction

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for IamAction

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for IamAction

impl PartialEq for IamAction

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for IamAction