---
title: "POST /put-resource-permission-statement"
method: POST
path: "/put-resource-permission-statement"
---

# POST /put-resource-permission-statement

`POST /put-resource-permission-statement`

Create a permission statement in the account's SignIn resource-based policy

## Request body

- object
  - `sourceVpc` string — VPC identifier for network-based access control
  - `signinSourceVpce` string — VPC endpoint identifier
  - `consoleSourceVpce` string — VPC endpoint identifier
  - `vpcSourceIp` string — Source IP address within a VPC
  - `sourceIp` string — Source IP address for access control
  - `requestedRegion` string — AWS region identifier for VPC and VPC endpoint pairing
  - `excludedPrincipal` string — Principal to exclude from permission statements
  - `clientToken` string — Idempotency token

## Response `200`

Success

- PutResourcePermissionStatementOutput — Output for PutResourcePermissionStatement operation
  - `statementId` string, required — Unique identifier for the created permission statement

## Other responses

- `480` — TooManyRequestsError
- `481` — ConflictException
- `482` — ServiceQuotaExceededException
- `483` — InternalServerException
- `484` — ValidationException
- `485` — AccessDeniedException

---

[API](https://skmtc.net/aws/apis/signin.md) · [All operations](https://skmtc.net/aws/apis/signin/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/signin/versions/589622887ba7/schema)