/dhall-aws-cloudformation/gh-pages/sam/policy-template/KMSDecryptPolicy.dhall.html
Copy path to clipboardSource
<!DOCTYPE HTML><html><head><title>/sam/policy-template/KMSDecryptPolicy.dhall</title><link rel="stylesheet" type="text/css" href="../../index.css"><link rel="stylesheet" type="text/css" href="https://fonts.googleapis.com/css2?family=Fira+Code:wght@400;500;600;700&family=Lato:ital,wght@0,400;0,700;1,400&display=swap"><script type="text/javascript" src="../../index.js"></script><meta charset="UTF-8"></head><body><div class="nav-bar"><img class="dhall-icon" src="../../dhall-icon.svg"><p class="package-title">dhall-aws-cloudformation</p><div class="nav-bar-content-divider"></div><a id="switch-light-dark-mode" class="nav-option">Switch Light/Dark Mode</a></div><div class="main-container"><h2 class="doc-title"><span class="crumb-divider">/</span><a href="../../index.html">dhall-aws-cloudformation</a><span class="crumb-divider">/</span><a class="title-crumb" href="../index.html">sam</a><span class="crumb-divider">/</span><a class="title-crumb" href="index.html">policy-template</a><span class="crumb-divider">/</span><span class="title-crumb" href="index.html">KMSDecryptPolicy.dhall</span></h2><a class="copy-to-clipboard" data-path="https://raw.githubusercontent.com/jcouyang/dhall-aws-cloudformation/0.9.81/sam/policy-template/KMSDecryptPolicy.dhall"><i><small>Copy path to clipboard</small></i></a><br><div class="doc-contents"></div><h3>Source</h3><div class="source-code"><pre>let <span id="var1-5" class="name-decl" data-name="var1-5">JSON</span> = (<a href="./../../Prelude.dhall.html">./../../Prelude.dhall</a>).JSON<br><br>let <span id="var3-5" class="name-decl" data-name="var3-5">Fn</span> = <a href="./../../Fn.dhall.html">./../../Fn.dhall</a><br><br>in \(<span id="var5-7" class="name-decl" data-name="var5-7">KeyId</span> : <a href="#var3-5" class="name-use" data-name="var3-5">Fn</a>.Type) -><br> <a href="#var1-5" class="name-use" data-name="var1-5">JSON</a>.object<br> ( toMap<br> { Statement =<br> <a href="#var1-5" class="name-use" data-name="var1-5">JSON</a>.array<br> [ <a href="#var1-5" class="name-use" data-name="var1-5">JSON</a>.object<br> ( toMap<br> { Effect = <a href="#var1-5" class="name-use" data-name="var1-5">JSON</a>.string "Allow"<br> , Action = <a href="#var1-5" class="name-use" data-name="var1-5">JSON</a>.array [ <a href="#var1-5" class="name-use" data-name="var1-5">JSON</a>.string "kms:Decrypt" ]<br> , Resource =<br> <a href="#var1-5" class="name-use" data-name="var1-5">JSON</a>.array<br> [ <a href="#var1-5" class="name-use" data-name="var1-5">JSON</a>.object<br> ( toMap<br> { `Fn::Sub` =<br> <a href="#var1-5" class="name-use" data-name="var1-5">JSON</a>.array<br> [ <a href="#var1-5" class="name-use" data-name="var1-5">JSON</a>.string<br> "arn:\${AWS::Partition}:kms:\${AWS::Region}:\${AWS::AccountId}:key/\${keyId}"<br> , <a href="#var1-5" class="name-use" data-name="var1-5">JSON</a>.object<br> ( toMap<br> { keyId = <a href="#var3-5" class="name-use" data-name="var3-5">Fn</a>.render <a href="#var5-7" class="name-use" data-name="var5-7">KeyId</a><br> }<br> )<br> ]<br> }<br> )<br> ]<br> , Condition = <a href="#var1-5" class="name-use" data-name="var1-5">JSON</a>.null<br> }<br> )<br> ]<br> }<br> )<br></pre></div></div></body></html>