iam:TrustPolicy
A policy attached to an assumable resource controlling which consumers can assume it.
Extends: iam:Policy
Trust policies control iam:Assume — which consumers can assume an assumable resource. For agents, consumers are matrices (via matrix:proprietor). For roles, consumers are principals (via iam:hasRole). If no trust policy exists on an agent, only the defining matrix can assume it.
Properties
iam:action (optional)
The IAM action(s) this policy applies to.
Policy action must reference an IAM Action if specified
Specific iam:Action(s) such as act:InvokeAction, secrets:ResolveSecret, os:ReadStatement, os:WriteStatement. When omitted, policy applies to any action.
Values:
- iam:Assume: IAM action for assuming an assumable resource (agent or role).
Inherited from parent class.
iam:condition (optional)
Conditions that must be satisfied for this policy to apply.
condition must reference a Condition
Multiple conditions on a policy are ANDed together.
Inherited from parent class.
iam:effect (required, max 1)
Whether this policy allows or denies access.
Policy must have exactly one effect (Allow or Deny)
Values:
- iam:Allow: The policy permits the action.
- iam:Deny: The policy prohibits the action.
Inherited from parent class.