wb resource iam-policy

Name

wb-resource-iam-policy - Generate an IAM policy for external AWS resources.

Synopsis

wb resource iam-policy [--include-healthomics-service-principal] [--existing-policy=<existingPolicy>] [--format=<format>] [--scope=<scope>] [--workspace=<id>] (--id=<id>)

Description

Generate an IAM policy for external AWS resources.

Options

  • --existing-policy=<existingPolicy>
    JSON string of an existing IAM policy to merge with the generated policy.

  • --format=<format>
    Set the format for printing command output. Defaults to the config format property.

    Valid values: JSON, TEXT

    Default: null
    
  • --id=<id>
    ID of the resource, scoped to the workspace. Only use letters, numbers, dashes, and underscores.

  • --include-healthomics-service-principal
    Include AWS HealthOmics service principal in ECR repository policies (ignored for other resource types).

  • --scope=<scope>
    Set the IAM policy access scope.

    Valid values: READ_ONLY, WRITE_READ

    Default: READ_ONLY
    
  • --workspace=<id>
    Workspace ID to use for this command only.

Last Modified: 10 February 2026