Policy Actions

The Policy JSON accepts a block where the applicable actions are determined. Each Resource type has it’s own actions, but usually they are:

  • Create

  • Read

  • Update

  • Delete

To determine which actions are applicable for the Policy, you can pass a string with a single action, or an array of actions. Also wildcards can be used, which means all possible actions.

Examples:

Use a wildcard to cover all possible actions:

... "statement": { ... "action": "*", "resource": [...], "condition": {...} ... }

Pass a string for a single action:

... "statement": { ... "action": "create", "resource": [...], "condition": {...} ... }

When using multiple actions, pass an array.

... "statement": { "action": [ "create", "update" ], "resource": [...], "condition": {...} ... }