verify
Feed a generated policy back to AWS's own policy evaluation engine (SimulateCustomPolicy) and confirm it grants exactly the intended operations and nothing extra. Returns verified (True|False|unknown), grants_all, grants_extra. Requires AWS credentials; without them verified=unknown with the reason. Wildcarded operations are expanded to concrete actions first.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| policy | No | Optional. A complete IAM policy JSON document to verify. | |
| workflow | No | A named workflow from list_workflows to generate and then verify | |
| operations | No | Intended IAM actions, comma-separated. Required if policy is provided. |