IAM Policy

Docs > DDSQL Reference > Data Directory > IAM Policy

An IAM Policy in AWS is a JSON document that defines permissions for actions on AWS resources. It specifies what actions are allowed or denied, on which resources, and under what conditions. Policies can be attached to users, groups, or roles to control access securely and consistently across AWS services.

aws.iam_policy

Fields

ID	Type	Data Type	Description
_key	core	string
account_id	core	string
arn	core	string	The Amazon Resource Name (ARN). ARNs are unique identifiers for Amazon Web Services resources. For more information about ARNs, go to Amazon Resource Names (ARNs) in the Amazon Web Services General Reference.
attachment_count	core	int64	The number of entities (users, groups, and roles) that the policy is attached to.
create_date	core	timestamp	The date and time, in ISO 8601 date-time format, when the policy was created.
default_version_id	core	string	The identifier for the version of the policy that is set as the default version.
description	core	string	A friendly description of the policy. This element is included in the response to the GetPolicy operation. It is not included in the response to the ListPolicies operation.
is_attachable	core	bool	Specifies whether the policy can be attached to an IAM user, group, or role.
path	core	string	The path to the policy. For more information about paths, see IAM identifiers in the IAM User Guide.
permissions_boundary_usage_count	core	int64	The number of entities (users and roles) for which the policy is used to set the permissions boundary. For more information about permissions boundaries, see Permissions boundaries for IAM identities in the IAM User Guide.
policy	core	json	A structure containing details about the policy.
policy_id	core	string	The stable and unique string identifying the policy. For more information about IDs, see IAM identifiers in the IAM User Guide.
policy_name	core	string	The friendly name (not ARN) identifying the policy.
policy_version	core	json
tags	core	hstore
update_date	core	timestamp	The date and time, in ISO 8601 date-time format, when the policy was last updated. When a policy has only one version, this field contains the date and time when the policy was created. When a policy has more than one version, this field contains the date and time when the most recent policy version was created.