Policy: Turbot > IAM > Permissions > Compiled > Levels > AWS [Turbot]

A list of AWS permissions that Guardrails may use to grant permissions on folders that have aws accounts as children.

Resource Types

This policy targets the following resource types:

Policy Specification

Examples [YAML]	`- type: tmod:@turbot/aws-s3#/permission/types/s3 level: tmod:@turbot/turbot-iam#/permission/levels/admin - type: tmod:@turbot/aws-ec2#/permission/types/ec2 level: tmod:@turbot/turbot-iam#/permission/levels/admin`

Examples [YAML]

- type: tmod:@turbot/aws-s3#/permission/types/s3
  level: tmod:@turbot/turbot-iam#/permission/levels/admin
- type: tmod:@turbot/aws-ec2#/permission/types/ec2
  level: tmod:@turbot/turbot-iam#/permission/levels/admin

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/iamPermissions

Policy Type URI

tmod:@turbot/aws-iam#/policy/types/turbotPermissionsCompiledLevels

GraphQL

query policyType(id: "tmod:@turbot/aws-iam#/policy/types/turbotPermissionsCompiledLevels") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/aws-iam#/policy/types/turbotPermissionsCompiledLevels'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/aws-iam#/policy/types/turbotPermissionsCompiledLevels'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/aws-iam#/policy/types/turbotPermissionsCompiledLevels"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/aws-iam#/policy/types/turbotPermissionsCompiledLevels"