Smaws_Client_IAM.GetContextKeysForPrincipalPolicyGets a list of all of the context keys referenced in all the IAM policies that are attached to the specified IAM entity. The entity can be an IAM user, group, or role. If you specify a user, then the request also includes all of the policies attached to groups that the user is a member of.
You can optionally include a list of one or more additional policies, specified as strings. If you want to include only a list of policies by string, use GetContextKeysForCustomPolicy instead.
Note: This operation discloses information about the permissions granted to other users. If you do not want users to see other user's permissions, then consider allowing them to use GetContextKeysForCustomPolicy instead.
Context keys are variables maintained by Amazon Web Services and its services that provide details about the context of an API query request. Context keys can be evaluated by testing against a value in an IAM policy. Use GetContextKeysForPrincipalPolicy to understand what key names and values you must supply when you call SimulatePrincipalPolicy.
val error_to_string :
[ Smaws_Lib.Protocols.AwsQuery.error
| `InvalidInputException of Types.invalid_input_exception
| `NoSuchEntityException of Types.no_such_entity_exception ] ->
stringval request :
'http_type Smaws_Lib.Context.t ->
Types.get_context_keys_for_principal_policy_request ->
(Types.get_context_keys_for_policy_response,
[> Smaws_Lib.Protocols.AwsQuery.error
| `InvalidInputException of Types.invalid_input_exception
| `NoSuchEntityException of Types.no_such_entity_exception ])
Stdlib.resultval request_with_metadata :
'http_type Smaws_Lib.Context.t ->
Types.get_context_keys_for_principal_policy_request ->
(Types.get_context_keys_for_policy_response Smaws_Lib.Response.t,
[> Smaws_Lib.Protocols.AwsQuery.error
| `InvalidInputException of Types.invalid_input_exception
| `NoSuchEntityException of Types.no_such_entity_exception ]
* Smaws_Lib.Response.metadata)
Stdlib.result