clouddirectory:LookupPolicy

Read

clouddirectory:LookupPolicy is a Read access-level action in the clouddirectory service. Grants permission to list all policies from the root of the Directory to the object specified

Resource types

ARNs that clouddirectory:LookupPolicy can be scoped to in an IAM policy.

arn:${Partition}:clouddirectory:${Region}:${Account}:directory/${DirectoryId}
directory

Condition keys

No condition keys are documented for this action.

Example IAM policy

A minimal policy that allows clouddirectory:LookupPolicy. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowClouddirectoryLookupPolicy",
      "Effect": "Allow",
      "Action": "clouddirectory:LookupPolicy",
      "Resource": "*"
    }
  ]
}

Related actions in clouddirectory

clouddirectory:AddFacetToObject Write clouddirectory:ApplySchema Write clouddirectory:AttachObject Write clouddirectory:AttachPolicy Write clouddirectory:AttachToIndex Write clouddirectory:AttachTypedLink Write clouddirectory:BatchRead Read clouddirectory:BatchWrite Write clouddirectory:CreateDirectory Write clouddirectory:CreateFacet Write clouddirectory:CreateIndex Write clouddirectory:CreateObject Write

View all clouddirectory actions →