🔌 AWS IAM Policy - object.extracts.yaml

• Contextual name: 🔌 object.extracts.yaml
• ID: /types/CA10__CaAwsIamPolicy__c/object.extracts.yaml

Used In

Logic	Policy	Flags
🧠 prod.logic.yaml🟢	🛡️ AWS IAM AWSCloudShellFullAccess Policy is attached🟢	🟢 x3
🧠 prod.logic.yaml🟢	🛡️ AWS IAM Customer Managed Policy allows KMS decryption actions on all KMS keys🟢	🟢 x3
🧠 prod.logic.yaml🟢	🛡️ AWS IAM Policy allows full administrative privileges🟢	🟢 x3
🧠 prod.logic.yaml🟢	🛡️ AWS Support Role is not created🟢	🟢 x3

Content

Open File

# yaml-language-server: $schema=../../schema/Extracts.schema.json
---
extracts:
# Not Nullable. Can't have no Access, retrieved via iam:ListPolicies
- name: "CA10__name__c"
  value: 
    FIELD:
      path: "CA10__name__c"
      undeterminedIf:
        isEmpty: "Corrupted data. Policy Name cannot be empty."
# Not Nullable. Can't have no Access, retrieved via iam:ListPolicies
- name: "CA10__policyType__c"
  value:
    FIELD:
      path: "CA10__policyType__c"
      undeterminedIf:
        isEmpty: "Corrupted data. Policy Type cannot be empty."
# Checkbox. Can't have no Access, retrieved via iam:ListPolicies
- name: "CA10__attachable__c"
  value: 
    FIELD:
      path: "CA10__attachable__c"
- name: "CA10__attachmentCount__c"
  value: 
    FIELD:
      path: "CA10__attachmentCount__c"
- name: "CA10__policyDocument__c"
  value: 
    FIELD:
      path: CA10__policyDocument__c
      returnType: BYTES
      undeterminedIf:
        noAccessDelegate:
          path: "CA10__policyDocument__c"
          currentStateMessage: "Unable to determine the Policy Document. Possible permission issue with iam:GetPolicyVersion"
- name: "caJsonFrom_policyDocument__c"
  value:
    JSON_FROM:
      arg:
        EXTRACT: "CA10__policyDocument__c"
      undeterminedIf:
        isInvalid: "IAM policy document JSON is invalid"
# Not Nullable. Can't have no Access, retrieved via iam:ListPolicies
- name: "CA10__arn__c"
  value: 
    FIELD:
      path: CA10__arn__c
      undeterminedIf:
        isEmpty: "Corrupted data. Policy ARN cannot be empty."