Permission Policy
Properties
| Property | Description | Values | Example |
|---|---|---|---|
namestring | AWS IAM managed policy name Name used for the customer-managed IAM policy in the install account, and the identifier roles use in [[named_policies]]. Supports Nuon templating | ✅ Required | "{{.nuon.install.id}}-alb-create", "shared-logs-policy" |
contentsstring | IAM policy document JSON policy document for the customer-managed IAM policy. Created in the install stack even when no role is enabled. Supports Nuon templating and external file sources: HTTP(S) … | ✅ Required | "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Effect\":\"Allow\",\"Action\":\"logs:*\",\"Resource\":\"*\"}]}" |
descriptionstring | description of the policy Human-readable description of the named IAM policy | Optional | "Shared CloudWatch Logs access for runner roles" |