Skip to main content

permission

Gets an individual permission resource

Overview

Namepermission
TypeResource
Descriptionpermission
Idawscc.ram.permission

Fields

NameDatatypeDescription
arnstring
namestringThe name of the permission.
versionstringVersion of the permission.
is_resource_type_defaultbooleanSet to true to use this as the default permission.
permission_typestring
resource_typestringThe resource type this permission can be used with.
policy_templateobjectPolicy template for the permission.
tagsarray
regionstringAWS region.

Methods

Currently only SELECT is supported for this resource resource.

Example

SELECT
region,
arn,
name,
version,
is_resource_type_default,
permission_type,
resource_type,
policy_template,
tags
FROM awscc.ram.permission
WHERE data__Identifier = '<Arn>';

Permissions

To operate on the permission resource, the following permissions are required:

Read

ram:GetPermission

Update

ram:CreatePermissionVersion,
ram:DeletePermissionVersion,
ram:SetDefaultPermissionVersion,
ram:GetPermission,
ram:ReplacePermissionAssociations,
ram:ListReplacePermissionAssociationsWork,
ram:ListPermissionVersions,
ram:UntagResource,
ram:TagResource

Delete

ram:DeletePermissionVersion,
ram:DeletePermission