# CreatePolicyRequest

**name** string required

Name of the policy. Must be unique within the organization.
Only alphanumeric characters and `+=,.@_-` are allowed.

**Possible values:** `<= 128 characters`

**document** object required

AWS IAM-compatible policy document.
See [IAM Policies documentation](/content/docs/iam/policies/index.html) for details.

**Version** string required

Policy language version.

**Possible values:** [`2012-10-17`]

**Statement** object[] required

Array [

**Sid** string

Optional identifier for the statement

**Effect** string required

Whether this statement allows or denies the specified actions

**Possible values:** [`Allow`, `Deny`]

**Action** string[] required

S3 actions to allow or deny. Common actions: `s3:GetObject`, `s3:PutObject`, `s3:DeleteObject`, `s3:ListBucket`, `s3:*`.
See [supported actions](/content/docs/iam/policies/supported-actions/index.html).

**Resource** string[] required

S3 resource ARNs. Use `arn:aws:s3:::bucket` for bucket-level and `arn:aws:s3:::bucket/prefix/*` for prefix-scoped access.

**Condition** object

Optional conditions (IP, time-based).
See [condition examples](/content/docs/iam/policies/examples/ip-restrictions/index.html).

]

**description** string

A description for the policy

**Possible values:** `<= 1000 characters`

CreatePolicyRequest

```json
{

"name": "string",

"document": {

"Version": "2012-10-17",

"Statement": [

{

"Sid": "string",

"Effect": "Allow",

"Action": [

"string"

],

"Resource": [

"string"

],

"Condition": {}

}

]

},

"description": "string"

}
```