SSM / Client / put_resource_policy

put_resource_policy#

SSM.Client.put_resource_policy(**kwargs)#

Creates or updates a Systems Manager resource policy. A resource policy helps you to define the IAM entity (for example, an Amazon Web Services account) that can manage your Systems Manager resources. Currently, OpsItemGroup is the only resource that supports Systems Manager resource policies. The resource policy for OpsItemGroup enables Amazon Web Services accounts to view and interact with OpsCenter operational work items (OpsItems).

See also: AWS API Documentation

Request Syntax

response = client.put_resource_policy(
    ResourceArn='string',
    Policy='string',
    PolicyId='string',
    PolicyHash='string'
)
Parameters:

  • ResourceArn (string) –

    [REQUIRED]

    Amazon Resource Name (ARN) of the resource to which you want to attach a policy.

  • Policy (string) –

    [REQUIRED]

    A policy you want to associate with a resource.

  • PolicyId (string) – The policy ID.

  • PolicyHash (string) – ID of the current policy version. The hash helps to prevent a situation where multiple users attempt to overwrite a policy. You must provide this hash when updating or deleting a policy.

Return type:

dict

Returns:

Response Syntax

{
    'PolicyId': 'string',
    'PolicyHash': 'string'
}

Response Structure

  • (dict) –

    • PolicyId (string) –

      The policy ID. To update a policy, you must specify PolicyId and PolicyHash.

    • PolicyHash (string) –

      ID of the current policy version.

Exceptions

  • SSM.Client.exceptions.InternalServerError

  • SSM.Client.exceptions.ResourcePolicyInvalidParameterException

  • SSM.Client.exceptions.ResourcePolicyLimitExceededException

  • SSM.Client.exceptions.ResourcePolicyConflictException