Class ResourceSpecificResult
- All Implemented Interfaces:
Serializable
,Cloneable
Contains the result of the simulation of a single API action call on a single resource.
This data type is used by a member of the EvaluationResult data type.
- See Also:
-
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionaddEvalDecisionDetailsEntry
(String key, String value) Removes all the entries added into EvalDecisionDetails.clone()
boolean
Additional details about the results of the evaluation decision.The result of the simulation of the simulated API action on the resource specified inEvalResourceName
.The name of the simulated resource, in Amazon Resource Name (ARN) format.A list of the statements in the input policies that determine the result for this part of the simulation.A list of context keys that are required by the included input policies but that were not provided by one of the input parameters.int
hashCode()
void
setEvalDecisionDetails
(Map<String, String> evalDecisionDetails) Additional details about the results of the evaluation decision.void
setEvalResourceDecision
(PolicyEvaluationDecisionType evalResourceDecision) The result of the simulation of the simulated API action on the resource specified inEvalResourceName
.void
setEvalResourceDecision
(String evalResourceDecision) The result of the simulation of the simulated API action on the resource specified inEvalResourceName
.void
setEvalResourceName
(String evalResourceName) The name of the simulated resource, in Amazon Resource Name (ARN) format.void
setMatchedStatements
(Collection<Statement> matchedStatements) A list of the statements in the input policies that determine the result for this part of the simulation.void
setMissingContextValues
(Collection<String> missingContextValues) A list of context keys that are required by the included input policies but that were not provided by one of the input parameters.toString()
Returns a string representation of this object; useful for testing and debugging.withEvalDecisionDetails
(Map<String, String> evalDecisionDetails) Additional details about the results of the evaluation decision.withEvalResourceDecision
(PolicyEvaluationDecisionType evalResourceDecision) The result of the simulation of the simulated API action on the resource specified inEvalResourceName
.withEvalResourceDecision
(String evalResourceDecision) The result of the simulation of the simulated API action on the resource specified inEvalResourceName
.withEvalResourceName
(String evalResourceName) The name of the simulated resource, in Amazon Resource Name (ARN) format.withMatchedStatements
(Statement... matchedStatements) A list of the statements in the input policies that determine the result for this part of the simulation.withMatchedStatements
(Collection<Statement> matchedStatements) A list of the statements in the input policies that determine the result for this part of the simulation.withMissingContextValues
(String... missingContextValues) A list of context keys that are required by the included input policies but that were not provided by one of the input parameters.withMissingContextValues
(Collection<String> missingContextValues) A list of context keys that are required by the included input policies but that were not provided by one of the input parameters.
-
Constructor Details
-
ResourceSpecificResult
public ResourceSpecificResult()
-
-
Method Details
-
setEvalResourceName
The name of the simulated resource, in Amazon Resource Name (ARN) format.
- Parameters:
evalResourceName
- The name of the simulated resource, in Amazon Resource Name (ARN) format.
-
getEvalResourceName
The name of the simulated resource, in Amazon Resource Name (ARN) format.
- Returns:
- The name of the simulated resource, in Amazon Resource Name (ARN) format.
-
withEvalResourceName
The name of the simulated resource, in Amazon Resource Name (ARN) format.
- Parameters:
evalResourceName
- The name of the simulated resource, in Amazon Resource Name (ARN) format.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
setEvalResourceDecision
The result of the simulation of the simulated API action on the resource specified in
EvalResourceName
.- Parameters:
evalResourceDecision
- The result of the simulation of the simulated API action on the resource specified inEvalResourceName
.- See Also:
-
getEvalResourceDecision
The result of the simulation of the simulated API action on the resource specified in
EvalResourceName
.- Returns:
- The result of the simulation of the simulated API action on the
resource specified in
EvalResourceName
. - See Also:
-
withEvalResourceDecision
The result of the simulation of the simulated API action on the resource specified in
EvalResourceName
.- Parameters:
evalResourceDecision
- The result of the simulation of the simulated API action on the resource specified inEvalResourceName
.- Returns:
- Returns a reference to this object so that method calls can be chained together.
- See Also:
-
setEvalResourceDecision
The result of the simulation of the simulated API action on the resource specified in
EvalResourceName
.- Parameters:
evalResourceDecision
- The result of the simulation of the simulated API action on the resource specified inEvalResourceName
.- See Also:
-
withEvalResourceDecision
public ResourceSpecificResult withEvalResourceDecision(PolicyEvaluationDecisionType evalResourceDecision) The result of the simulation of the simulated API action on the resource specified in
EvalResourceName
.- Parameters:
evalResourceDecision
- The result of the simulation of the simulated API action on the resource specified inEvalResourceName
.- Returns:
- Returns a reference to this object so that method calls can be chained together.
- See Also:
-
getMatchedStatements
A list of the statements in the input policies that determine the result for this part of the simulation. Remember that even if multiple statements allow the action on the resource, if any statement denies that action, then the explicit deny overrides any allow, and the deny statement is the only entry included in the result.
- Returns:
- A list of the statements in the input policies that determine the result for this part of the simulation. Remember that even if multiple statements allow the action on the resource, if any statement denies that action, then the explicit deny overrides any allow, and the deny statement is the only entry included in the result.
-
setMatchedStatements
A list of the statements in the input policies that determine the result for this part of the simulation. Remember that even if multiple statements allow the action on the resource, if any statement denies that action, then the explicit deny overrides any allow, and the deny statement is the only entry included in the result.
- Parameters:
matchedStatements
- A list of the statements in the input policies that determine the result for this part of the simulation. Remember that even if multiple statements allow the action on the resource, if any statement denies that action, then the explicit deny overrides any allow, and the deny statement is the only entry included in the result.
-
withMatchedStatements
A list of the statements in the input policies that determine the result for this part of the simulation. Remember that even if multiple statements allow the action on the resource, if any statement denies that action, then the explicit deny overrides any allow, and the deny statement is the only entry included in the result.
NOTE: This method appends the values to the existing list (if any). Use
setMatchedStatements(java.util.Collection)
orwithMatchedStatements(java.util.Collection)
if you want to override the existing values.- Parameters:
matchedStatements
- A list of the statements in the input policies that determine the result for this part of the simulation. Remember that even if multiple statements allow the action on the resource, if any statement denies that action, then the explicit deny overrides any allow, and the deny statement is the only entry included in the result.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
withMatchedStatements
A list of the statements in the input policies that determine the result for this part of the simulation. Remember that even if multiple statements allow the action on the resource, if any statement denies that action, then the explicit deny overrides any allow, and the deny statement is the only entry included in the result.
- Parameters:
matchedStatements
- A list of the statements in the input policies that determine the result for this part of the simulation. Remember that even if multiple statements allow the action on the resource, if any statement denies that action, then the explicit deny overrides any allow, and the deny statement is the only entry included in the result.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
getMissingContextValues
A list of context keys that are required by the included input policies but that were not provided by one of the input parameters. This list is used when a list of ARNs is included in the
ResourceArns
parameter instead of "*". If you do not specify individual resources, by settingResourceArns
to "*" or by not including theResourceArns
parameter, then any missing context values are instead included under theEvaluationResults
section. To discover the context keys used by a set of policies, you can call GetContextKeysForCustomPolicy or GetContextKeysForPrincipalPolicy.- Returns:
- A list of context keys that are required by the included input
policies but that were not provided by one of the input
parameters. This list is used when a list of ARNs is included in
the
ResourceArns
parameter instead of "*". If you do not specify individual resources, by settingResourceArns
to "*" or by not including theResourceArns
parameter, then any missing context values are instead included under theEvaluationResults
section. To discover the context keys used by a set of policies, you can call GetContextKeysForCustomPolicy or GetContextKeysForPrincipalPolicy.
-
setMissingContextValues
A list of context keys that are required by the included input policies but that were not provided by one of the input parameters. This list is used when a list of ARNs is included in the
ResourceArns
parameter instead of "*". If you do not specify individual resources, by settingResourceArns
to "*" or by not including theResourceArns
parameter, then any missing context values are instead included under theEvaluationResults
section. To discover the context keys used by a set of policies, you can call GetContextKeysForCustomPolicy or GetContextKeysForPrincipalPolicy.- Parameters:
missingContextValues
- A list of context keys that are required by the included input policies but that were not provided by one of the input parameters. This list is used when a list of ARNs is included in theResourceArns
parameter instead of "*". If you do not specify individual resources, by settingResourceArns
to "*" or by not including theResourceArns
parameter, then any missing context values are instead included under theEvaluationResults
section. To discover the context keys used by a set of policies, you can call GetContextKeysForCustomPolicy or GetContextKeysForPrincipalPolicy.
-
withMissingContextValues
A list of context keys that are required by the included input policies but that were not provided by one of the input parameters. This list is used when a list of ARNs is included in the
ResourceArns
parameter instead of "*". If you do not specify individual resources, by settingResourceArns
to "*" or by not including theResourceArns
parameter, then any missing context values are instead included under theEvaluationResults
section. To discover the context keys used by a set of policies, you can call GetContextKeysForCustomPolicy or GetContextKeysForPrincipalPolicy.NOTE: This method appends the values to the existing list (if any). Use
setMissingContextValues(java.util.Collection)
orwithMissingContextValues(java.util.Collection)
if you want to override the existing values.- Parameters:
missingContextValues
- A list of context keys that are required by the included input policies but that were not provided by one of the input parameters. This list is used when a list of ARNs is included in theResourceArns
parameter instead of "*". If you do not specify individual resources, by settingResourceArns
to "*" or by not including theResourceArns
parameter, then any missing context values are instead included under theEvaluationResults
section. To discover the context keys used by a set of policies, you can call GetContextKeysForCustomPolicy or GetContextKeysForPrincipalPolicy.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
withMissingContextValues
A list of context keys that are required by the included input policies but that were not provided by one of the input parameters. This list is used when a list of ARNs is included in the
ResourceArns
parameter instead of "*". If you do not specify individual resources, by settingResourceArns
to "*" or by not including theResourceArns
parameter, then any missing context values are instead included under theEvaluationResults
section. To discover the context keys used by a set of policies, you can call GetContextKeysForCustomPolicy or GetContextKeysForPrincipalPolicy.- Parameters:
missingContextValues
- A list of context keys that are required by the included input policies but that were not provided by one of the input parameters. This list is used when a list of ARNs is included in theResourceArns
parameter instead of "*". If you do not specify individual resources, by settingResourceArns
to "*" or by not including theResourceArns
parameter, then any missing context values are instead included under theEvaluationResults
section. To discover the context keys used by a set of policies, you can call GetContextKeysForCustomPolicy or GetContextKeysForPrincipalPolicy.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
getEvalDecisionDetails
Additional details about the results of the evaluation decision. When there are both IAM policies and resource policies, this parameter explains how each set of policies contributes to the final evaluation decision. When simulating cross-account access to a resource, both the resource-based policy and the caller's IAM policy must grant access.
- Returns:
- Additional details about the results of the evaluation decision. When there are both IAM policies and resource policies, this parameter explains how each set of policies contributes to the final evaluation decision. When simulating cross-account access to a resource, both the resource-based policy and the caller's IAM policy must grant access.
-
setEvalDecisionDetails
Additional details about the results of the evaluation decision. When there are both IAM policies and resource policies, this parameter explains how each set of policies contributes to the final evaluation decision. When simulating cross-account access to a resource, both the resource-based policy and the caller's IAM policy must grant access.
- Parameters:
evalDecisionDetails
- Additional details about the results of the evaluation decision. When there are both IAM policies and resource policies, this parameter explains how each set of policies contributes to the final evaluation decision. When simulating cross-account access to a resource, both the resource-based policy and the caller's IAM policy must grant access.
-
withEvalDecisionDetails
Additional details about the results of the evaluation decision. When there are both IAM policies and resource policies, this parameter explains how each set of policies contributes to the final evaluation decision. When simulating cross-account access to a resource, both the resource-based policy and the caller's IAM policy must grant access.
- Parameters:
evalDecisionDetails
- Additional details about the results of the evaluation decision. When there are both IAM policies and resource policies, this parameter explains how each set of policies contributes to the final evaluation decision. When simulating cross-account access to a resource, both the resource-based policy and the caller's IAM policy must grant access.- Returns:
- Returns a reference to this object so that method calls can be chained together.
-
addEvalDecisionDetailsEntry
-
clearEvalDecisionDetailsEntries
Removes all the entries added into EvalDecisionDetails. <p> Returns a reference to this object so that method calls can be chained together. -
toString
Returns a string representation of this object; useful for testing and debugging. -
equals
-
hashCode
public int hashCode() -
clone
-