get_impersonation_role_effect

get_impersonation_role_effect(**kwargs)

Tests whether the given impersonation role can impersonate a target user.

See also: AWS API Documentation

Request Syntax

response = client.get_impersonation_role_effect(
    OrganizationId='string',
    ImpersonationRoleId='string',
    TargetUser='string'
)

Parameters

• OrganizationId (string) --

  [REQUIRED]

  The WorkMail organization where the impersonation role is defined.

• ImpersonationRoleId (string) --

  [REQUIRED]

  The impersonation role ID to test.

• TargetUser (string) --

  [REQUIRED]

  The WorkMail organization user chosen to test the impersonation role. The following identity formats are available:

  • User ID: 12345678-1234-1234-1234-123456789012 or S-1-1-12-1234567890-123456789-123456789-1234
  • Email address: user@domain.tld
  • User name: user

Return type

dict

Returns

Response Syntax

{
    'Type': 'FULL_ACCESS'|'READ_ONLY',
    'Effect': 'ALLOW'|'DENY',
    'MatchedRules': [
        {
            'ImpersonationRuleId': 'string',
            'Name': 'string'
        },
    ]
}

Response Structure

• (dict) --

  • Type (string) --

    The impersonation role type.

  • Effect (string) --

    Effect of the impersonation role on the target user based on its rules. Available effects are ALLOW or DENY .

  • MatchedRules (list) --

    A list of the rules that match the input and produce the configured effect.

    • (dict) --

      The impersonation rule that matched the input.

      • ImpersonationRuleId (string) --

        The ID of the rule that matched the input

      • Name (string) --

        The name of the rule that matched the input.

Exceptions

• WorkMail.Client.exceptions.InvalidParameterException
• WorkMail.Client.exceptions.OrganizationNotFoundException
• WorkMail.Client.exceptions.OrganizationStateException
• WorkMail.Client.exceptions.ResourceNotFoundException
• WorkMail.Client.exceptions.EntityNotFoundException
• WorkMail.Client.exceptions.EntityStateException