Policy: AWS > Turbot > Permissions > User > Group Membership Mode
Configure the group membership mode for the AWS > Turbot > IAM stack. In Exclusive mode, the AWS > Turbot > IAM stack will manage the users group memberships exactly - groups added outside of Guardrails will be removed. In Non-Exclusive mode, the AWS > Turbot > IAM stack will only manage the Guardrails groups that it creates - it will not remove groups added outside of Turbot.
Resource Types
This policy targets the following resource types:
Primary Policy
This policy is used with the following primary policy:
Policy Specification
Schema Type | |
|---|---|
Default | |
Valid Values [YAML] |
|
Examples [YAML] |
|
Category
In Your Workspace
Developers
- tmod:@turbot/turbot#/control/categories/iamPermissions
- tmod:@turbot/aws-iam#/policy/types/turbotUserGroupMembershipMode
- turbot graphql policy-type --id "tmod:@turbot/aws-iam#/policy/types/turbotUserGroupMembershipMode"
- turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/aws-iam#/policy/types/turbotUserGroupMembershipMode"
Get Policy TypeGet Policy Settings
Category URI
Policy Type URI
GraphQL
CLI