Amazon IAM Access Analyzer · JSON Structure

Iam Access Analyzer Iam Role Configuration Structure

The proposed access control configuration for an IAM role. You can propose a configuration for a new IAM role or an existing IAM role that you own by specifying the trust policy. If the configuration is for a new IAM role, you must specify the trust policy. If the configuration is for an existing IAM role that you own and you do not propose the trust policy, the access preview uses the existing trust policy for the role. The proposed trust policy cannot be an empty string. For more information about role trust policy limits, see IAM and STS quotas.

Type: object Properties: 1
Access ControlComplianceIAMPolicy ManagementSecurity

IamRoleConfiguration is a JSON Structure definition published by Amazon IAM Access Analyzer, describing 1 property. It conforms to the https://json-structure.org/meta/core/v0/# meta-schema.

Properties

trustPolicy

Meta-schema: https://json-structure.org/meta/core/v0/#

JSON Structure

Raw ↑
{
  "$schema": "https://json-structure.org/meta/core/v0/#",
  "$id": "https://raw.githubusercontent.com/api-evangelist/amazon-iam-access-analyzer/refs/heads/main/json-structure/iam-access-analyzer-iam-role-configuration-structure.json",
  "name": "IamRoleConfiguration",
  "description": "The proposed access control configuration for an IAM role. You can propose a configuration for a new IAM role or an existing IAM role that you own by specifying the trust policy. If the configuration is for a new IAM role, you must specify the trust policy. If the configuration is for an existing IAM role that you own and you do not propose the trust policy, the access preview uses the existing trust policy for the role. The proposed trust policy cannot be an empty string. For more information about role trust policy limits, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html\">IAM and STS quotas</a>.",
  "type": "object",
  "properties": {
    "trustPolicy": {
      "allOf": [
        {
          "$ref": "#/components/schemas/IamTrustPolicy"
        },
        {
          "description": "The proposed trust policy for the IAM role."
        }
      ]
    }
  }
}