Create an IAM Policy

Select

Policies

Add Policy

IAM

.

Enter your policy details—

Policy Name

and

Severity

.

(Optional) You can choose to add

Description

and

Labels

.



Click

Next

and build your RQL query.

The default option of

New Search

enables you to build a new RQL query from scratch while

Saved Search

enables you to use a RQL query that you previously saved. The following RQL query returns the net effective permissions of a user in your cloud account named

my-user

:

config from iam where source.cloud.service.name = 'iam' and source.cloud.resource.type = 'user' and source.cloud.resource.name = 'my-user'

A green check mark displays if you entered a valid query.



Click the search button.

Save

the policy.

After you successfully create your new policy, it displays on the

Policies

page.



Refer to the IAM Query reference to learn about IAM Query attributes and to see examples.

Use the

Filter

to search for custom or default (out-of-the-box) policies.