Sign in

v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-1438244196.2 KB

Adds a policy statement object. To retrieve a list of existing policy statements, use the <code>GetPolicy</code> API.

post/policies/{arn}/{statementId}

Path parameters

arnstring required

The Amazon Resource Name (ARN) of the resource that will be accessed by the principal.

statementIdstring required

A statement identifier that differentiates the statement from others in the same policy.

Request body

effect'Allow' | 'Deny' required
<p>Determines whether the permissions specified in the policy are to be allowed (<code>Allow</code>) or denied (<code>Deny</code>).</p> <important> <p> If you set the value of the <code>effect</code> parameter to <code>Deny</code> for the <code>AddPolicyStatement</code> operation, you must also set the value of the <code>effect</code> parameter in the <code>policy</code> to <code>Deny</code> for the <code>PutPolicy</code> operation.</p> </important>
actionStatementAction[] required
<p>The action that the principal can use on the resource. </p> <p>For example, <code>entityresolution:GetIdMappingJob</code>, <code>entityresolution:GetMatchingJob</code>.</p>
principalStatementPrincipal[] required

The Amazon Web Services service or Amazon Web Services account that can access the resource defined as ARN.

conditionstring

A set of condition keys that you can use in key policies.

Response

Success

arnstring required

The Amazon Resource Name (ARN) of the resource that will be accessed by the principal.

tokenstring required

A unique identifier for the current revision of the policy.

policystring

The resource-based policy.

All 38 operations