CmdID / aws / aws iam

aws iam simulate-principal-policy

Simulate how a set of IAM policies attached to an IAM entity works with a list of API operations and Amazon Web Services resources to determine the policies' effective permissions. AWS CLI reference

13 options Its page in the AWS CLI reference

Options

13 in the AWS CLI reference

--action-namesA list of names of API operations to evaluate in the simulation.

--caller-arnThe ARN of the IAM user, group, or role that you want to specify as the simulated caller of the API operations.

--context-entriesA list of context keys and corresponding values for the simulation to use.

--markerUse this parameter only when paginating results and only after you receive a response indicating that the results are truncated.

--max-itemsUse this only when paginating results to indicate the maximum number of items you want in the response.

--permissions-boundary-policy-input-listThe IAM permissions boundary policy to simulate.

--policy-exclusion-listA list of policies to exclude from the simulation.

--policy-input-listAn optional list of additional policy documents to include in the simulation.

--policy-source-arnThe Amazon Resource Name (ARN) of a user, group, or role whose policies you want to include in the simulation.

--resource-arnsA list of ARNs of Amazon Web Services resources to include in the simulation.

--resource-handling-optionSpecifies the type of simulation to run.

--resource-ownerAn Amazon Web Services account ID that specifies the owner of any simulated resource that does not identify its owner in the resource ARN.

--resource-policyA resource-based policy to include in the simulation provided as a string.