Collections

Attention

This is an early version of the package. The API might change when new features are implemented. Therefore make sure you use an exact version in your package.json/requirements.txt before it reaches 1.0.0.

IAM Floyd provides commonly used statement collections. These can be called via:

new statement.Collection().allowEc2InstanceDeleteByOwner();
new statement.Collection().allowEc2InstanceDeleteByOwner();
statement.Collection().allow_ec2_instance_delete_by_owner()

Collections return a list of statements, which then can be used in a policy like this:

const policy = {
  Version: '2012-10-17',
  Statement: [...new statement.Collection().allowEc2InstanceDeleteByOwner()],
};
const policy = {
  Version: '2012-10-17',
  Statement: [...new statement.Collection().allowEc2InstanceDeleteByOwner()],
};
statements = statement.Collection().allow_ec2_instance_delete_by_owner()

policy = {
    'Version': '2012-10-17',
    'Statement': list(map(lambda x: x.to_json(), statements)),
}

Available collections

allowEc2InstanceDeleteByOwner

Allows stopping EC2 instance only for the user who started them.