---
title: "POST /policies/{arn}/{statementId}"
method: POST
path: "/policies/{arn}/{statementId}"
---

# POST /policies/{arn}/{statementId}

`POST /policies/{arn}/{statementId}`

Adds a policy statement object. To retrieve a list of existing policy statements, use the <code>GetPolicy</code> API.

## Path parameters

- `arn` string, required
- `statementId` string, required

## Request body

- object
  - `effect` 'Allow' | 'Deny', required — <p>Determines whether the permissions specified in the policy are to be allowed (<code>Allow</code>) or denied (<code>Deny</code>).</p> <important> <p> If you set the value of the <code>effect</code> parameter to <code>Deny</code> for the <code>AddPolicyStatement</code> operation, you must also set the value of the <code>effect</code> parameter in the <code>policy</code> to <code>Deny</code> for the <code>PutPolicy</code> operation.</p> </important>
  - `action` StatementAction[], required — <p>The action that the principal can use on the resource. </p> <p>For example, <code>entityresolution:GetIdMappingJob</code>, <code>entityresolution:GetMatchingJob</code>.</p>
  - `principal` StatementPrincipal[], required — The Amazon Web Services service or Amazon Web Services account that can access the resource defined as ARN.
  - `condition` string — A set of condition keys that you can use in key policies.

## Response `200`

Success

- AddPolicyStatementOutput
  - `arn` string, required — The Amazon Resource Name (ARN) of the resource that will be accessed by the principal.
  - `token` string, required — A unique identifier for the current revision of the policy.
  - `policy` string — The resource-based policy.

## Other responses

- `480` — ThrottlingException
- `481` — InternalServerException
- `482` — ResourceNotFoundException
- `483` — AccessDeniedException
- `484` — ConflictException
- `485` — ValidationException

---

[API](https://skmtc.net/aws/apis/entityresolution.md) · [All operations](https://skmtc.net/aws/apis/entityresolution/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/entityresolution/versions/480b85498767/schema)