CmdID

CmdID / aws / aws iam

aws iam simulate-custom-policy

Simulate how a set of IAM policies and optionally a resource-based policy works with a list of API operations and Amazon Web Services resources to determine the policies' effective permissions. AWS CLI reference

12 options Its page in the AWS CLI reference

Opens CmdID with your command. It is read in your browser and sent nowhere.

Options

12 in the AWS CLI reference
--action-namesA list of names of API operations to evaluate in the simulation.
--caller-arnThe ARN of the IAM user, group, or role that you want to use as the simulated caller of the API operations.
--context-entriesA list of context keys and corresponding values for the simulation to use.
--markerUse this parameter only when paginating results and only after you receive a response indicating that the results are truncated.
--max-itemsUse this only when paginating results to indicate the maximum number of items you want in the response.
--ordered-organization-policy-input-listAn ordered list of service control policies (SCPs) to include in the simulation.
--permissions-boundary-policy-input-listThe IAM permissions boundary policy to simulate.
--policy-input-listA list of policy documents to include in the simulation.
--resource-arnsA list of ARNs of Amazon Web Services resources to include in the simulation.
--resource-handling-optionSpecifies the type of simulation to run.
--resource-ownerAn ARN representing the Amazon Web Services account ID that specifies the owner of any simulated resource that does not identify its owner in the resource ARN.
--resource-policyA resource-based policy to include in the simulation provided as a string.