aws-iam-managed-policy-version-document-config
A customer-managed policy version is URL-encoded JSON and can contain sensitive condition values.
Where it sits
| location | GetPolicyVersion.PolicyVersion.Document |
|---|
| location kind | policy_document |
|---|
| data kinds | credential sensitive_data |
|---|
| emits edge | ContainsSecret |
|---|
| service | IAM (aws:iam) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | GetPolicyVersion |
|---|
| response path | PolicyVersion.Document |
|---|
| encoding | url_encoded |
|---|
| params | {"PolicyArn": "\u003cpolicy-arn\u003e", "VersionId": "\u003cversion-id\u003e"} |
|---|
Required permissions
iam:GetPolicyVersion
References