IAM Actions:List Entities For Policy

Search (SHIFT+S)

ECS Management API

ECS Object Service API

ECS API Changes

List Entities For Policy

POST ListEntitiesForPolicy

Lists all IAM users, groups, and roles that the specified managed policy is attached to.

Query Parameters

PolicyArn	ARN of the IAM Managed policy to list.
Marker	For pagination, the value of the Marker element in the response that you received to indicate where the next call should start.
MaxItems	Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond the maximum you specify, the IsTruncated response element is true and Marker contains a value to include in the subsequent call that tells the service where to continue from.
EntityFilter	The entity type to use for filtering the results. Values {User, Role, Group, LocalManagedPolicy, AWSManagedPolicy}
PathPrefix	Path prefix for filtering the results. Optional, default to "/". Only "/" is allowed.
PolicyUsageFilter	The policy usage method to use for filtering the results. Values {PermissionsPolicy, PermissionsBoundary}

Required Roles

This call has no restrictions.

Request Payload

No Request Payload

Response Body

Field	Description	Type	Notes
ListEntitiesForPolicyResponse
ListEntitiesForPolicyResult
RoleNames			0-* Elements
GroupNames			0-* Elements
UserNames			0-* Elements
Marker	When IsTruncated is true, this element is present and contains the value to use for the Marker parameter in a subsequent pagination request.	String
ResponseMetadata
RequestId		String

Examples

Request

POST https://192.168.0.0:4443/iam?PolicyArn=urn:ecs:iam::ns:policy/FinanceTeamPolicy&Action=ListEntitiesForPolicy

Accept: application/xml
X-SDS-AUTH-TOKEN: <AUTH_TOKEN>
x-emc-namespace: <namespace>

Response

HTTP/1.1 200 OK

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<ns2:ListEntitiesForPolicyResponse xmlns:ns2="none">
    <ResponseMetadata>
        <RequestId>0af9f5b8:17178fe9282:10a37:0</RequestId>
    </ResponseMetadata>
    <ListEntitiesForPolicyResult>
        <Marker></Marker>
        <IsTruncated>false</IsTruncated>
        <PolicyRoles>
            <member>
                <RoleName>FinanceRole</RoleName>
                <RoleId>AROA8A4C6443F29AC5AD</RoleId>
            </member>
        </PolicyRoles>
        <PolicyGroups>
            <member>
                <GroupName>FinanceGroup</GroupName>
                <GroupId>AGPA11B2858814F35CA0</GroupId>
            </member>
        </PolicyGroups>
        <PolicyUsers>
            <member>
                <UserName>User1</UserName>
                <UserId>AIDA7079A32D6242C3A4</UserId>
            </member>
        </PolicyUsers>
    </ListEntitiesForPolicyResult>
</ns2:ListEntitiesForPolicyResponse>

Request

POST https://192.168.0.0:4443/iam?PolicyArn=urn:ecs:iam::ns:policy/FinanceTeamPolicy&Action=ListEntitiesForPolicy

Accept: application/json
X-SDS-AUTH-TOKEN: <AUTH_TOKEN>
x-emc-namespace: <namespace>

Response

HTTP/1.1 200 OK

{
    "ResponseMetadata": {
        "RequestId": "0af9f5b8:17178fe9282:10a55:b"
    },
    "ListEntitiesForPolicyResult": {
        "Marker": "",
        "PolicyRoles": [
            {
                "RoleName": "FinanceRole",
                "RoleId": "AROA8A4C6443F29AC5AD"
            }
        ],
        "PolicyGroups": [
            {
                "GroupName": "FinanceGroup",
                "GroupId": "AGPA11B2858814F35CA0"
            }
        ],
        "PolicyUsers": [
            {
                "UserName": "User1",
                "UserId": "AIDA7079A32D6242C3A4"
            }
        ],
        "IsTruncated": false
    }
}