policy

Gets an individual policy resource

Overview

Name	policy
Type	Resource
Description	policy
Id	awscc.fms.policy

Fields

Name	Datatype	Description
exclude_map	object
exclude_resource_tags	boolean
include_map	object
id	string
policy_name	string
policy_description	string
remediation_enabled	boolean
resource_tags	array
resource_type	string
resource_type_list	array
resource_set_ids	array
security_service_policy_data	object
arn	string
delete_all_policy_resources	boolean
resources_clean_up	boolean
tags	array
region	string	AWS region.

Methods

Currently only SELECT is supported for this resource resource.

Example

SELECT
region,
exclude_map,
exclude_resource_tags,
include_map,
id,
policy_name,
policy_description,
remediation_enabled,
resource_tags,
resource_type,
resource_type_list,
resource_set_ids,
security_service_policy_data,
arn,
delete_all_policy_resources,
resources_clean_up,
tags
FROM awscc.fms.policy
WHERE data__Identifier = '<Id>';

Permissions

To operate on the policy resource, the following permissions are required:

Update

fms:PutPolicy,
fms:GetPolicy,
fms:TagResource,
fms:UntagResource,
fms:ListTagsForResource,
waf-regional:ListRuleGroups,
wafv2:CheckCapacity,
wafv2:ListRuleGroups,
wafv2:ListAvailableManagedRuleGroups,
wafv2:ListAvailableManagedRuleGroupVersions,
network-firewall:DescribeRuleGroup,
network-firewall:DescribeRuleGroupMetadata,
route53resolver:ListFirewallRuleGroups,
ec2:DescribeAvailabilityZones,
s3:PutBucketPolicy,
s3:GetBucketPolicy

Read

fms:GetPolicy,
fms:ListTagsForResource

Delete

fms:DeletePolicy