Modifies a Cedar static policy in the specified policy store. You can change only certain elements of the UpdatePolicyDefinition parameter. You can directly update only static policies. To change a template-linked policy, you must update the template instead, using update_policy_template
.
See https://www.paws-r-sdk.com/docs/verifiedpermissions_update_policy/ for full documentation.
verifiedpermissions_update_policy(policyStoreId, policyId, definition)
[required] Specifies the ID of the policy store that contains the policy that you want to update.
[required] Specifies the ID of the policy that you want to update. To find this
value, you can use list_policies
.
[required] Specifies the updated policy content that you want to replace on the specified policy. The content must be valid Cedar policy language text.
You can change only the following elements from the policy definition:
The action
referenced by the policy.
Any conditional clauses, such as when
or unless
clauses.
You can't change the following elements:
Changing from static
to templateLinked
.
Changing the effect of the policy from permit
or forbid
.
The principal
referenced by the policy.
The resource
referenced by the policy.