> ## Documentation Index
> Fetch the complete documentation index at: https://docs.nuon.co/llms.txt
> Use this file to discover all available pages before exploring further.

> JSON Schema reference for permission-policy configuration

# Permission Policy

# Permission Policy

## Properties

| Property                      | Description                                                                                                                                                                                              | Values         | Example                                                                                                          |
| ----------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------- | ---------------------------------------------------------------------------------------------------------------- |
| **`name`**<br />string        | AWS IAM managed policy name Name used for the customer-managed IAM policy in the install account, and the identifier roles use in \[\[named\_policies]]. Supports Nuon templating                        | **✅ Required** | `"{{.nuon.install.id}}-alb-create"`, `"shared-logs-policy"`                                                      |
| **`contents`**<br />string    | IAM policy document JSON policy document for the customer-managed IAM policy. Created in the install stack even when no role is enabled. Supports Nuon templating and external file sources: HTTP(S) ... | **✅ Required** | `"{\"Version\":\"2012-10-17\",\"Statement\":[{\"Effect\":\"Allow\",\"Action\":\"logs:*\",\"Resource\":\"*\"}]}"` |
| **`description`**<br />string | description of the policy Human-readable description of the named IAM policy                                                                                                                             | **Optional**   | `"Shared CloudWatch Logs access for runner roles"`                                                               |