---
title: "POST /effective-policies"
method: POST
path: "/effective-policies"
---

# POST /effective-policies

`POST /effective-policies`

Gets a list of the policies that have an effect on the authorization behavior of the specified device when it connects to the IoT device gateway.

Requires permission to access the [GetEffectivePolicies](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html#awsiot-actions-as-permissions) action.

## Query parameters

- `thingName` string

## Request body

- object
  - `principal` string — The principal. Valid principals are CertificateArn (arn:aws:iot:<i>region</i>:<i>accountId</i>:cert/<i>certificateId</i>), thingGroupArn (arn:aws:iot:<i>region</i>:<i>accountId</i>:thinggroup/<i>groupName</i>) and CognitoId (<i>region</i>:<i>id</i>).
  - `cognitoIdentityPoolId` string — The Cognito identity pool ID.

## Response `200`

Success

- GetEffectivePoliciesResponse
  - `effectivePolicies` EffectivePolicy[] — The effective policies.
    - `policyName` string — The policy name.
    - `policyArn` string — The policy ARN.
    - `policyDocument` string — The IAM policy document.

## Other responses

- `480` — ResourceNotFoundException
- `481` — InvalidRequestException
- `482` — ThrottlingException
- `483` — UnauthorizedException
- `484` — ServiceUnavailableException
- `485` — InternalFailureException
- `486` — LimitExceededException

---

[API](https://skmtc.net/aws/apis/iot.md) · [All operations](https://skmtc.net/aws/apis/iot/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/iot/revisions/deef5c4b09f0/schema)