亚马逊 iam 在 boto3 中获取内联政策声明

Question

I'am using boto3 list_role_policies to get all inline policies but I'm getting only PolicyNames. I would like to obtain the json statement as well.

Something like this:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "mobileanalytics:PutEvents",
                "cognito-sync:*",
                "cognito-identity:*"
            ],
            "Resource": [
                "*"
            ]
        }
    ]
}

Please, remember I don't want managed policies, only Inline .

Thanx in advance.

Answer 1

You can use iam.Role.policies to iterate all inline policies for a specific role. You will get iterable of iam.RolePolicy instances which have policy_document attribute with policy JSON.

import boto3

iam = boto3.resource('iam')

role_name = 'RoleName'
role = iam.Role(role_name)
for policy in role.policies.all():
    print(policy.name)
    print(policy.policy_document)

Answer 2

You can use the result of list_role_policies() to call get_role_policy() on each of the policy names returned:

Retrieves the specified inline policy document that is embedded with the specified IAM role.

response = client.get_role_policy(
    RoleName='string',
    PolicyName='string'
)