stratumctl resource-policies

Manage resource-attached Cedar policies

stratumctl resource-policies [flags]

Aliases: resource-policy, rpol

Subcommands

• stratumctl resource-policies delete: Clear a resource’s inline policy
• stratumctl resource-policies get: Show a resource’s inline policy
• stratumctl resource-policies list: List resource policies in a scope
• stratumctl resource-policies set: Set (create or replace) a resource’s inline policy

stratumctl resource-policies delete

Clear a resource’s inline policy

stratumctl resource-policies delete --resource-arn <arn> [flags]

Examples

stratumctl resource-policies delete --resource-arn arn:stratum:network:lab-1:p-team-a:vpc/vpc-9k2m4x7q

Flags

Flag	Type	Default	Description
--resource-arn	string		resource ARN (required)

stratumctl resource-policies get

Show a resource’s inline policy

stratumctl resource-policies get --resource-arn <arn> [flags]

Examples

stratumctl resource-policies get --resource-arn arn:stratum:network:lab-1:p-team-a:vpc/vpc-9k2m4x7q
stratumctl resource-policies get --resource-arn arn:stratum:network:lab-1:p-team-a:vpc/vpc-9k2m4x7q --output json

Flags

Flag	Type	Default	Description
--resource-arn	string		resource ARN (required)

stratumctl resource-policies list

List resource policies in a scope

stratumctl resource-policies list --scope-type <organization|project> --scope-id <id> [flags]

Examples

stratumctl resource-policies list --scope-type project --scope-id p-team-a
stratumctl resource-policies list --scope-type organization --scope-id o-acme --output json

Flags

Flag	Type	Default	Description
--scope-id	string		scope id (required)
--scope-type	string		organization|project (required)

stratumctl resource-policies set

Set (create or replace) a resource’s inline policy

stratumctl resource-policies set --resource-arn <arn> -f <statements.json> [flags]

Examples

stratumctl resource-policies set --resource-arn arn:stratum:network:lab-1:p-team-a:vpc/vpc-9k2m4x7q -f rp.json

Flags

Flag	Type	Default	Description
-f, --file	string		JSON statements array file (‘-’ = stdin)
--resource-arn	string		resource ARN (required)