NAME

Paws::IAM::EvaluationResult

USAGE

This class represents one of two things:

Arguments in a call to a service

Use the attributes of this class as arguments to methods. You shouldn't make instances of this class. Each attribute should be used as a named argument in the calls that expect this type of object.

As an example, if Att1 is expected to be a Paws::IAM::EvaluationResult object:

  $service_obj->Method(Att1 => { EvalActionName => $value, ..., ResourceSpecificResults => $value  });

Results returned from an API call

Use accessors for each attribute. If Att1 is expected to be an Paws::IAM::EvaluationResult object:

  $result = $service_obj->Method(...);
  $result->Att1->EvalActionName

DESCRIPTION

Contains the results of a simulation.

This data type is used by the return parameter of SimulateCustomPolicy and SimulatePrincipalPolicy .

ATTRIBUTES

REQUIRED EvalActionName => Str

  The name of the API operation tested on the indicated resource.

REQUIRED EvalDecision => Str

  The result of the simulation.

EvalDecisionDetails => Paws::IAM::EvalDecisionDetailsType

  Additional details about the results of the evaluation decision. When
there are both IAM policies and resource policies, this parameter
explains how each set of policies contributes to the final evaluation
decision. When simulating cross-account access to a resource, both the
resource-based policy and the caller's IAM policy must grant access.
See How IAM Roles Differ from Resource-based Policies
(https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_compare-resource-policies.html)

EvalResourceName => Str

  The ARN of the resource that the indicated API operation was tested on.

MatchedStatements => ArrayRef[Paws::IAM::Statement]

  A list of the statements in the input policies that determine the
result for this scenario. Remember that even if multiple statements
allow the operation on the resource, if only one statement denies that
operation, then the explicit deny overrides any allow. In addition, the
deny statement is the only entry included in the result.

MissingContextValues => ArrayRef[Str|Undef]

  A list of context keys that are required by the included input policies
but that were not provided by one of the input parameters. This list is
used when the resource in a simulation is "*", either explicitly, or
when the C<ResourceArns> parameter blank. If you include a list of
resources, then any missing context values are instead included under
the C<ResourceSpecificResults> section. To discover the context keys
used by a set of policies, you can call GetContextKeysForCustomPolicy
or GetContextKeysForPrincipalPolicy.

OrganizationsDecisionDetail => Paws::IAM::OrganizationsDecisionDetail

  A structure that details how Organizations and its service control
policies affect the results of the simulation. Only applies if the
simulated user's account is part of an organization.

ResourceSpecificResults => ArrayRef[Paws::IAM::ResourceSpecificResult]

  The individual results of the simulation of the API operation specified
in EvalActionName on each resource.

SEE ALSO

This class forms part of Paws, describing an object used in Paws::IAM

BUGS and CONTRIBUTIONS

The source code is located here: https://github.com/pplu/aws-sdk-perl

Please report bugs to: https://github.com/pplu/aws-sdk-perl/issues