resource_policies

Creates, updates, deletes or gets a resource_policy resource or lists resource_policies in a region

Overview

Name	resource_policies
Type	Resource
Description	A resource policy with specified policy statements that attaches to a Lex bot or bot alias.
Id	aws.lex.resource_policies

Fields

Name	Datatype	Description
resource_arn	string	The Amazon Resource Name (ARN) of the bot or bot alias that the resource policy is attached to.
revision_id	string	The current revision of the resource policy. Use the revision ID to make sure that you are updating the most current version of a resource policy when you add a policy statement to a resource, delete a resource, or update a resource.
policy	object	A resource policy to add to the resource. The policy is a JSON structure following the IAM syntax that contains one or more statements that define the policy.
id	string	The Physical ID of the resource policy.
region	string	AWS region.

Methods

Name	Accessible by	Required Params
create_resource	INSERT	ResourceArn, Policy, region
delete_resource	DELETE	data__Identifier, region
update_resource	UPDATE	data__Identifier, data__PatchDocument, region
list_resources	SELECT	region
get_resource	SELECT	data__Identifier, region

SELECT examples

Gets all resource_policies in a region.

SELECT
region,
resource_arn,
revision_id,
policy,
id
FROM aws.lex.resource_policies
WHERE region = 'us-east-1';

Gets all properties from an individual resource_policy.

SELECT
region,
resource_arn,
revision_id,
policy,
id
FROM aws.lex.resource_policies
WHERE region = 'us-east-1' AND data__Identifier = '<Id>';

INSERT example

Use the following StackQL query and manifest file to create a new resource_policy resource, using stack-deploy.

Required Properties

/*+ create */
INSERT INTO aws.lex.resource_policies (
 ResourceArn,
 Policy,
 region
)
SELECT 
'{{ ResourceArn }}',
 '{{ Policy }}',
'{{ region }}';

All Properties

/*+ create */
INSERT INTO aws.lex.resource_policies (
 ResourceArn,
 Policy,
 region
)
SELECT 
 '{{ ResourceArn }}',
 '{{ Policy }}',
 '{{ region }}';

Manifest

version: 1
name: stack name
description: stack description
providers:
  - aws
globals:
  - name: region
    value: '{{ vars.AWS_REGION }}'
resources:
  - name: resource_policy
    props:
      - name: ResourceArn
        value: '{{ ResourceArn }}'
      - name: Policy
        value: {}

DELETE example

/*+ delete */
DELETE FROM aws.lex.resource_policies
WHERE data__Identifier = '<Id>'
AND region = 'us-east-1';

Permissions

To operate on the resource_policies resource, the following permissions are required:

Create

lex:CreateResourcePolicy,
lex:DescribeResourcePolicy

Read

lex:DescribeResourcePolicy

Update

lex:UpdateResourcePolicy,
lex:DescribeResourcePolicy

Delete

lex:DeleteResourcePolicy,
lex:DescribeResourcePolicy

List

lex:DescribeResourcePolicy