Policy: AWS > SSM > Parameter > Approved > Parameter Type

A list of parameter type that the AWS SSM parameter is approved to use.

The expected format is an array of parameter type. You may use the * and ? wildcard characters (and more).

This policy will be evaluated by the Approved control. If an AWS SSM parameter is not matched by the approved list, it will be subject to the action specified in the AWS > SSM > Parameter > Approved policy.

example: SecureString

See Approved for more information.

Resource Types

This policy targets the following resource types:

AWS > SSM > Parameter

Primary Policy

This policy is used with the following primary policy:

AWS > SSM > Parameter > Approved

Controls

AWS > SSM > Parameter > Approved

Policy Specification

Schema Type	`array`
Default	`- '*'`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/resourceApproved

Policy Type URI

tmod:@turbot/aws-ssm#/policy/types/ssmParameterApprovedParameterType

GraphQL

query policyType(id: "tmod:@turbot/aws-ssm#/policy/types/ssmParameterApprovedParameterType") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/aws-ssm#/policy/types/ssmParameterApprovedParameterType'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/aws-ssm#/policy/types/ssmParameterApprovedParameterType'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/aws-ssm#/policy/types/ssmParameterApprovedParameterType"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/aws-ssm#/policy/types/ssmParameterApprovedParameterType"