aws-sdk-verifiedpermissions 1.10.0 → 1.12.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f9adf56fed10cfe0d76d492cda22394d84c90eeaeabfa245cb2ade65820a768e
-  data.tar.gz: 0edb7f147ff11cd919576fd995f279caa47644ea95dd58c2d2494981029b1ad6
+  metadata.gz: e4350747f7c9d5eefcd327c3dd718371ef8ff17f79c5df5579d592494e994446
+  data.tar.gz: 4e373448bb0bef180106961947012043e12541e799d3686066a39ee6794ec6c6
 SHA512:
-  metadata.gz: 40de7ee70b9e47b89acc90292f00569f554ff49d1f77dc9f593315242c08131fd05cd2adac0c52d7c76b6031fad7ec9d38fad0d45f59bbfdfe0008cd34394fa3
-  data.tar.gz: 969aa107505301760df53b082bd5909608b245940279db6dffc540b718c3ac5104165e99ad47cf89db0ae6dc132eb2fd04062bd19ffc36e66825bae1933cd193
+  metadata.gz: 63e0f5ce5571a99c861a8a5c018afab8573f375053979cc11c9527c727062c4302c23166f148a9d5ecc21e9bf722c732da79ee878afbdffc520a55b09b53af55
+  data.tar.gz: b02ea3597ba9bde71f014fe6c86a787379c37cef92e2af68f00cc690ef199cd59a371435469acd9ac6de9dd52bc4c557ff23fd56cbd23b08d77a3456e9153137

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.12.0 (2023-11-17)
+------------------
+
+* Feature - Adding BatchIsAuthorized API which supports multiple authorization requests against a PolicyStore
+
+1.11.0 (2023-10-19)
+------------------
+
+* Feature - Improving Amazon Verified Permissions Create experience
+
 1.10.0 (2023-09-27)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.10.0
+1.12.0

data/lib/aws-sdk-verifiedpermissions/client.rb

@@ -398,6 +398,119 @@ module Aws::VerifiedPermissions
 
     # @!group API Operations
 
+    # Makes a series of decisions about multiple authorization requests for
+    # one principal or resource. Each request contains the equivalent
+    # content of an `IsAuthorized` request: principal, action, resource, and
+    # context. Either the `principal` or the `resource` parameter must be
+    # identical across all requests. For example, Verified Permissions
+    # won't evaluate a pair of requests where `bob` views `photo1` and
+    # `alice` views `photo2`. Authorization of `bob` to view `photo1` and
+    # `photo2`, or `bob` and `alice` to view `photo1`, are valid batches.
+    #
+    # The request is evaluated against all policies in the specified policy
+    # store that match the entities that you declare. The result of the
+    # decisions is a series of `Allow` or `Deny` responses, along with the
+    # IDs of the policies that produced each decision.
+    #
+    # The `entities` of a `BatchIsAuthorized` API request can contain up to
+    # 100 principals and up to 100 resources. The `requests` of a
+    # `BatchIsAuthorized` API request can contain up to 30 requests.
+    #
+    # @option params [required, String] :policy_store_id
+    #   Specifies the ID of the policy store. Policies in this policy store
+    #   will be used to make the authorization decisions for the input.
+    #
+    # @option params [Types::EntitiesDefinition] :entities
+    #   Specifies the list of resources and principals and their associated
+    #   attributes that Verified Permissions can examine when evaluating the
+    #   policies.
+    #
+    #   <note markdown="1"> You can include only principal and resource entities in this
+    #   parameter; you can't include actions. You must specify actions in the
+    #   schema.
+    #
+    #    </note>
+    #
+    # @option params [required, Array<Types::BatchIsAuthorizedInputItem>] :requests
+    #   An array of up to 30 requests that you want Verified Permissions to
+    #   evaluate.
+    #
+    # @return [Types::BatchIsAuthorizedOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::BatchIsAuthorizedOutput#results #results} => Array&lt;Types::BatchIsAuthorizedOutputItem&gt;
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.batch_is_authorized({
+    #     policy_store_id: "PolicyStoreId", # required
+    #     entities: {
+    #       entity_list: [
+    #         {
+    #           identifier: { # required
+    #             entity_type: "EntityType", # required
+    #             entity_id: "EntityId", # required
+    #           },
+    #           attributes: {
+    #             "String" => "value", # value <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
+    #           },
+    #           parents: [
+    #             {
+    #               entity_type: "EntityType", # required
+    #               entity_id: "EntityId", # required
+    #             },
+    #           ],
+    #         },
+    #       ],
+    #     },
+    #     requests: [ # required
+    #       {
+    #         principal: {
+    #           entity_type: "EntityType", # required
+    #           entity_id: "EntityId", # required
+    #         },
+    #         action: {
+    #           action_type: "ActionType", # required
+    #           action_id: "ActionId", # required
+    #         },
+    #         resource: {
+    #           entity_type: "EntityType", # required
+    #           entity_id: "EntityId", # required
+    #         },
+    #         context: {
+    #           context_map: {
+    #             "String" => "value", # value <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
+    #           },
+    #         },
+    #       },
+    #     ],
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.results #=> Array
+    #   resp.results[0].request.principal.entity_type #=> String
+    #   resp.results[0].request.principal.entity_id #=> String
+    #   resp.results[0].request.action.action_type #=> String
+    #   resp.results[0].request.action.action_id #=> String
+    #   resp.results[0].request.resource.entity_type #=> String
+    #   resp.results[0].request.resource.entity_id #=> String
+    #   resp.results[0].request.context.context_map #=> Hash
+    #   resp.results[0].request.context.context_map["String"] #=> <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
+    #   resp.results[0].decision #=> String, one of "ALLOW", "DENY"
+    #   resp.results[0].determining_policies #=> Array
+    #   resp.results[0].determining_policies[0].policy_id #=> String
+    #   resp.results[0].errors #=> Array
+    #   resp.results[0].errors[0].error_description #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/verifiedpermissions-2021-12-01/BatchIsAuthorized AWS API Documentation
+    #
+    # @overload batch_is_authorized(params = {})
+    # @param [Hash] params ({})
+    def batch_is_authorized(params = {}, options = {})
+      req = build_request(:batch_is_authorized, params)
+      req.send_request(options)
+    end
+
     # Creates a reference to an Amazon Cognito user pool as an external
     # identity provider (IdP).
     #
@@ -657,7 +770,7 @@ module Aws::VerifiedPermissions
     #
     #
     #
-    # [1]: https://docs.cedarpolicy.com/schema.html#namespace
+    # [1]: https://docs.cedarpolicy.com/schema/schema.html#namespace
     #
     # @option params [String] :client_token
     #   Specifies a unique, case-sensitive ID that you provide to ensure the
@@ -1988,8 +2101,9 @@ module Aws::VerifiedPermissions
     # description and the some elements of the [policyBody][1].
     #
     # Changes you make to the policy template content are immediately
-    # reflected in authorization decisions that involve all template-linked
-    # policies instantiated from this template.
+    # (within the constraints of eventual consistency) reflected in
+    # authorization decisions that involve all template-linked policies
+    # instantiated from this template.
     #
     # <note markdown="1"> Verified Permissions is <i> <a
     # href="https://wikipedia.org/wiki/Eventual_consistency">eventually
@@ -2076,7 +2190,7 @@ module Aws::VerifiedPermissions
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-verifiedpermissions'
-      context[:gem_version] = '1.10.0'
+      context[:gem_version] = '1.12.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-verifiedpermissions/client_api.rb

@@ -18,6 +18,12 @@ module Aws::VerifiedPermissions
     ActionIdentifier = Shapes::StructureShape.new(name: 'ActionIdentifier')
     ActionType = Shapes::StringShape.new(name: 'ActionType')
     AttributeValue = Shapes::UnionShape.new(name: 'AttributeValue')
+    BatchIsAuthorizedInput = Shapes::StructureShape.new(name: 'BatchIsAuthorizedInput')
+    BatchIsAuthorizedInputItem = Shapes::StructureShape.new(name: 'BatchIsAuthorizedInputItem')
+    BatchIsAuthorizedInputList = Shapes::ListShape.new(name: 'BatchIsAuthorizedInputList')
+    BatchIsAuthorizedOutput = Shapes::StructureShape.new(name: 'BatchIsAuthorizedOutput')
+    BatchIsAuthorizedOutputItem = Shapes::StructureShape.new(name: 'BatchIsAuthorizedOutputItem')
+    BatchIsAuthorizedOutputList = Shapes::ListShape.new(name: 'BatchIsAuthorizedOutputList')
     Boolean = Shapes::BooleanShape.new(name: 'Boolean')
     BooleanAttribute = Shapes::BooleanShape.new(name: 'BooleanAttribute')
     ClientId = Shapes::StringShape.new(name: 'ClientId')
@@ -179,6 +185,30 @@ module Aws::VerifiedPermissions
     AttributeValue.add_member_subclass(:unknown, Types::AttributeValue::Unknown)
     AttributeValue.struct_class = Types::AttributeValue
 
+    BatchIsAuthorizedInput.add_member(:policy_store_id, Shapes::ShapeRef.new(shape: PolicyStoreId, required: true, location_name: "policyStoreId"))
+    BatchIsAuthorizedInput.add_member(:entities, Shapes::ShapeRef.new(shape: EntitiesDefinition, location_name: "entities"))
+    BatchIsAuthorizedInput.add_member(:requests, Shapes::ShapeRef.new(shape: BatchIsAuthorizedInputList, required: true, location_name: "requests"))
+    BatchIsAuthorizedInput.struct_class = Types::BatchIsAuthorizedInput
+
+    BatchIsAuthorizedInputItem.add_member(:principal, Shapes::ShapeRef.new(shape: EntityIdentifier, location_name: "principal"))
+    BatchIsAuthorizedInputItem.add_member(:action, Shapes::ShapeRef.new(shape: ActionIdentifier, location_name: "action"))
+    BatchIsAuthorizedInputItem.add_member(:resource, Shapes::ShapeRef.new(shape: EntityIdentifier, location_name: "resource"))
+    BatchIsAuthorizedInputItem.add_member(:context, Shapes::ShapeRef.new(shape: ContextDefinition, location_name: "context"))
+    BatchIsAuthorizedInputItem.struct_class = Types::BatchIsAuthorizedInputItem
+
+    BatchIsAuthorizedInputList.member = Shapes::ShapeRef.new(shape: BatchIsAuthorizedInputItem)
+
+    BatchIsAuthorizedOutput.add_member(:results, Shapes::ShapeRef.new(shape: BatchIsAuthorizedOutputList, required: true, location_name: "results"))
+    BatchIsAuthorizedOutput.struct_class = Types::BatchIsAuthorizedOutput
+
+    BatchIsAuthorizedOutputItem.add_member(:request, Shapes::ShapeRef.new(shape: BatchIsAuthorizedInputItem, required: true, location_name: "request"))
+    BatchIsAuthorizedOutputItem.add_member(:decision, Shapes::ShapeRef.new(shape: Decision, required: true, location_name: "decision"))
+    BatchIsAuthorizedOutputItem.add_member(:determining_policies, Shapes::ShapeRef.new(shape: DeterminingPolicyList, required: true, location_name: "determiningPolicies"))
+    BatchIsAuthorizedOutputItem.add_member(:errors, Shapes::ShapeRef.new(shape: EvaluationErrorList, required: true, location_name: "errors"))
+    BatchIsAuthorizedOutputItem.struct_class = Types::BatchIsAuthorizedOutputItem
+
+    BatchIsAuthorizedOutputList.member = Shapes::ShapeRef.new(shape: BatchIsAuthorizedOutputItem)
+
     ClientIds.member = Shapes::ShapeRef.new(shape: ClientId)
 
     CognitoUserPoolConfiguration.add_member(:user_pool_arn, Shapes::ShapeRef.new(shape: UserPoolArn, required: true, location_name: "userPoolArn"))
@@ -696,6 +726,19 @@ module Aws::VerifiedPermissions
         "uid" => "verifiedpermissions-2021-12-01",
       }
 
+      api.add_operation(:batch_is_authorized, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "BatchIsAuthorized"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: BatchIsAuthorizedInput)
+        o.output = Shapes::ShapeRef.new(shape: BatchIsAuthorizedOutput)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+      end)
+
       api.add_operation(:create_identity_source, Seahorse::Model::Operation.new.tap do |o|
         o.name = "CreateIdentitySource"
         o.http_method = "POST"
@@ -704,6 +747,7 @@ module Aws::VerifiedPermissions
         o.output = Shapes::ShapeRef.new(shape: CreateIdentitySourceOutput)
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
+        o.errors << Shapes::ShapeRef.new(shape: ConflictException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
         o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
@@ -718,6 +762,7 @@ module Aws::VerifiedPermissions
         o.output = Shapes::ShapeRef.new(shape: CreatePolicyOutput)
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
+        o.errors << Shapes::ShapeRef.new(shape: ConflictException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
         o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
@@ -732,6 +777,7 @@ module Aws::VerifiedPermissions
         o.output = Shapes::ShapeRef.new(shape: CreatePolicyStoreOutput)
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
+        o.errors << Shapes::ShapeRef.new(shape: ConflictException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
         o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
@@ -745,6 +791,7 @@ module Aws::VerifiedPermissions
         o.output = Shapes::ShapeRef.new(shape: CreatePolicyTemplateOutput)
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
+        o.errors << Shapes::ShapeRef.new(shape: ConflictException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
         o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)

data/lib/aws-sdk-verifiedpermissions/endpoint_provider.rb

@@ -32,7 +32,7 @@ module Aws::VerifiedPermissions
             raise ArgumentError, "FIPS and DualStack are enabled, but this partition does not support one or both"
           end
           if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true)
-            if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS"))
+            if Aws::Endpoints::Matchers.boolean_equals?(Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS"), true)
               return Aws::Endpoints::Endpoint.new(url: "https://verifiedpermissions-fips.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
             end
             raise ArgumentError, "FIPS is enabled but this partition does not support FIPS"

data/lib/aws-sdk-verifiedpermissions/endpoints.rb

@@ -12,6 +12,20 @@ module Aws::VerifiedPermissions
   # @api private
   module Endpoints
 
+    class BatchIsAuthorized
+      def self.build(context)
+        unless context.config.regional_endpoint
+          endpoint = context.config.endpoint.to_s
+        end
+        Aws::VerifiedPermissions::EndpointParameters.new(
+          region: context.config.region,
+          use_dual_stack: context.config.use_dualstack_endpoint,
+          use_fips: context.config.use_fips_endpoint,
+          endpoint: endpoint,
+        )
+      end
+    end
+
     class CreateIdentitySource
       def self.build(context)
         unless context.config.regional_endpoint

data/lib/aws-sdk-verifiedpermissions/plugins/endpoints.rb

@@ -56,6 +56,8 @@ module Aws::VerifiedPermissions
 
         def parameters_for_operation(context)
           case context.operation_name
+          when :batch_is_authorized
+            Aws::VerifiedPermissions::Endpoints::BatchIsAuthorized.build(context)
           when :create_identity_source
             Aws::VerifiedPermissions::Endpoints::CreateIdentitySource.build(context)
           when :create_policy

data/lib/aws-sdk-verifiedpermissions/types.rb

@@ -26,15 +26,17 @@ module Aws::VerifiedPermissions
     # Contains information about an action for a request for which an
     # authorization decision is made.
     #
-    # This data type is used as an request parameter to the
-    # [IsAuthorized][1] and [IsAuthorizedWithToken][2] operations.
+    # This data type is used as a request parameter to the
+    # [IsAuthorized][1], [BatchIsAuthorized][2], and
+    # [IsAuthorizedWithToken][3] operations.
     #
     # Example: `\{ "actionId": "<action name>", "actionType": "Action" \}`
     #
     #
     #
     # [1]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html
-    # [2]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html
+    # [2]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html
+    # [3]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html
     #
     # @!attribute [rw] action_type
     #   The type of an action.
@@ -60,16 +62,20 @@ module Aws::VerifiedPermissions
     #
     # This data type is used as a member of the [ContextDefinition][1]
     # structure which is uses as a request parameter for the
-    # [IsAuthorized][2] and [IsAuthorizedWithToken][3] operations.
+    # [IsAuthorized][2], [BatchIsAuthorized][3], and
+    # [IsAuthorizedWithToken][4] operations.
     #
     #
     #
     # [1]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_ContextDefinition.html
     # [2]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html
-    # [3]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html
+    # [3]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html
+    # [4]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html
     #
     # @note AttributeValue is a union - when making an API calls you must set exactly one of the members.
     #
+    # @note AttributeValue is a union - when returned from an API call exactly one value will be set and the returned type will be a subclass of AttributeValue corresponding to the set member.
+    #
     # @!attribute [rw] boolean
     #   An attribute value of [Boolean][1] type.
     #
@@ -77,7 +83,7 @@ module Aws::VerifiedPermissions
     #
     #
     #
-    #   [1]: https://docs.cedarpolicy.com/syntax-datatypes.html#boolean
+    #   [1]: https://docs.cedarpolicy.com/policies/syntax-datatypes.html#boolean
     #   @return [Boolean]
     #
     # @!attribute [rw] entity_identifier
@@ -98,7 +104,7 @@ module Aws::VerifiedPermissions
     #
     #
     #
-    #   [1]: https://docs.cedarpolicy.com/syntax-datatypes.html#long
+    #   [1]: https://docs.cedarpolicy.com/policies/syntax-datatypes.html#long
     #   @return [Integer]
     #
     # @!attribute [rw] string
@@ -108,7 +114,7 @@ module Aws::VerifiedPermissions
     #
     #
     #
-    #   [1]: https://docs.cedarpolicy.com/syntax-datatypes.html#string
+    #   [1]: https://docs.cedarpolicy.com/policies/syntax-datatypes.html#string
     #   @return [String]
     #
     # @!attribute [rw] set
@@ -118,7 +124,7 @@ module Aws::VerifiedPermissions
     #
     #
     #
-    #   [1]: https://docs.cedarpolicy.com/syntax-datatypes.html#set
+    #   [1]: https://docs.cedarpolicy.com/policies/syntax-datatypes.html#set
     #   @return [Array<Types::AttributeValue>]
     #
     # @!attribute [rw] record
@@ -128,7 +134,7 @@ module Aws::VerifiedPermissions
     #
     #
     #
-    #   [1]: https://docs.cedarpolicy.com/syntax-datatypes.html#record
+    #   [1]: https://docs.cedarpolicy.com/policies/syntax-datatypes.html#record
     #   @return [Hash<String,Types::AttributeValue>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/verifiedpermissions-2021-12-01/AttributeValue AWS API Documentation
@@ -154,6 +160,124 @@ module Aws::VerifiedPermissions
       class Unknown < AttributeValue; end
     end
 
+    # @!attribute [rw] policy_store_id
+    #   Specifies the ID of the policy store. Policies in this policy store
+    #   will be used to make the authorization decisions for the input.
+    #   @return [String]
+    #
+    # @!attribute [rw] entities
+    #   Specifies the list of resources and principals and their associated
+    #   attributes that Verified Permissions can examine when evaluating the
+    #   policies.
+    #
+    #   <note markdown="1"> You can include only principal and resource entities in this
+    #   parameter; you can't include actions. You must specify actions in
+    #   the schema.
+    #
+    #    </note>
+    #   @return [Types::EntitiesDefinition]
+    #
+    # @!attribute [rw] requests
+    #   An array of up to 30 requests that you want Verified Permissions to
+    #   evaluate.
+    #   @return [Array<Types::BatchIsAuthorizedInputItem>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/verifiedpermissions-2021-12-01/BatchIsAuthorizedInput AWS API Documentation
+    #
+    class BatchIsAuthorizedInput < Struct.new(
+      :policy_store_id,
+      :entities,
+      :requests)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An authorization request that you include in a `BatchIsAuthorized` API
+    # request.
+    #
+    # @!attribute [rw] principal
+    #   Specifies the principal for which the authorization decision is to
+    #   be made.
+    #   @return [Types::EntityIdentifier]
+    #
+    # @!attribute [rw] action
+    #   Specifies the requested action to be authorized. For example, is the
+    #   principal authorized to perform this action on the resource?
+    #   @return [Types::ActionIdentifier]
+    #
+    # @!attribute [rw] resource
+    #   Specifies the resource for which the authorization decision is to be
+    #   made.
+    #   @return [Types::EntityIdentifier]
+    #
+    # @!attribute [rw] context
+    #   Specifies additional context that can be used to make more granular
+    #   authorization decisions.
+    #   @return [Types::ContextDefinition]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/verifiedpermissions-2021-12-01/BatchIsAuthorizedInputItem AWS API Documentation
+    #
+    class BatchIsAuthorizedInputItem < Struct.new(
+      :principal,
+      :action,
+      :resource,
+      :context)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] results
+    #   A series of `Allow` or `Deny` decisions for each request, and the
+    #   policies that produced them.
+    #   @return [Array<Types::BatchIsAuthorizedOutputItem>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/verifiedpermissions-2021-12-01/BatchIsAuthorizedOutput AWS API Documentation
+    #
+    class BatchIsAuthorizedOutput < Struct.new(
+      :results)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The decision, based on policy evaluation, from an individual
+    # authorization request in a `BatchIsAuthorized` API request.
+    #
+    # @!attribute [rw] request
+    #   The authorization request that initiated the decision.
+    #   @return [Types::BatchIsAuthorizedInputItem]
+    #
+    # @!attribute [rw] decision
+    #   An authorization decision that indicates if the authorization
+    #   request should be allowed or denied.
+    #   @return [String]
+    #
+    # @!attribute [rw] determining_policies
+    #   The list of determining policies used to make the authorization
+    #   decision. For example, if there are two matching policies, where one
+    #   is a forbid and the other is a permit, then the forbid policy will
+    #   be the determining policy. In the case of multiple matching permit
+    #   policies then there would be multiple determining policies. In the
+    #   case that no policies match, and hence the response is DENY, there
+    #   would be no determining policies.
+    #   @return [Array<Types::DeterminingPolicyItem>]
+    #
+    # @!attribute [rw] errors
+    #   Errors that occurred while making an authorization decision, for
+    #   example, a policy references an Entity or entity Attribute that does
+    #   not exist in the slice.
+    #   @return [Array<Types::EvaluationErrorItem>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/verifiedpermissions-2021-12-01/BatchIsAuthorizedOutputItem AWS API Documentation
+    #
+    class BatchIsAuthorizedOutputItem < Struct.new(
+      :request,
+      :decision,
+      :determining_policies,
+      :errors)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The configuration for an identity source that represents a connection
     # to an Amazon Cognito user pool used as an identity provider for
     # Verified Permissions.
@@ -268,25 +392,29 @@ module Aws::VerifiedPermissions
     # part of the `when` and `unless` clauses in a policy.
     #
     # This data type is used as a request parameter for the
-    # [IsAuthorized][1] and [IsAuthorizedWithToken][2] operations.
+    # [IsAuthorized][1], [BatchIsAuthorized][2], and
+    # [IsAuthorizedWithToken][3] operations.
     #
     # Example:
-    # `"context":\{"Context":\{"<KeyName1>":\{"boolean":true\},"<KeyName2>":\{"long":1234\}\}\}`
+    # `"context":\{"contextMap":\{"<KeyName1>":\{"boolean":true\},"<KeyName2>":\{"long":1234\}\}\}`
     #
     #
     #
     # [1]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html
-    # [2]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html
+    # [2]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html
+    # [3]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html
     #
     # @note ContextDefinition is a union - when making an API calls you must set exactly one of the members.
     #
+    # @note ContextDefinition is a union - when returned from an API call exactly one value will be set and the returned type will be a subclass of ContextDefinition corresponding to the set member.
+    #
     # @!attribute [rw] context_map
     #   An list of attributes that are needed to successfully evaluate an
     #   authorization request. Each attribute in this array must include a
     #   map of a data type and its value.
     #
     #   Example:
-    #   `"Context":\{"<KeyName1>":\{"boolean":true\},"<KeyName2>":\{"long":1234\}\}`
+    #   `"contextMap":\{"<KeyName1>":\{"boolean":true\},"<KeyName2>":\{"long":1234\}\}`
     #   @return [Hash<String,Types::AttributeValue>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/verifiedpermissions-2021-12-01/ContextDefinition AWS API Documentation
@@ -714,7 +842,8 @@ module Aws::VerifiedPermissions
     # authorization decision.
     #
     # This data type is used as an element in a response parameter for the
-    # [IsAuthorized][1] and [IsAuthorizedWithToken][2] operations.
+    # [IsAuthorized][1], [BatchIsAuthorized][2], and
+    # [IsAuthorizedWithToken][3] operations.
     #
     # Example:
     # `"determiningPolicies":[\{"policyId":"SPEXAMPLEabcdefg111111"\}]`
@@ -722,7 +851,8 @@ module Aws::VerifiedPermissions
     #
     #
     # [1]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html
-    # [2]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html
+    # [2]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html
+    # [3]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html
     #
     # @!attribute [rw] policy_id
     #   The Id of a policy that determined to an authorization decision.
@@ -885,13 +1015,14 @@ module Aws::VerifiedPermissions
 
     # Contains a description of an evaluation error.
     #
-    # This data type is used as a request parameter in the [IsAuthorized][1]
-    # and [IsAuthorizedWithToken][2] operations.
+    # This data type is a response parameter of the [IsAuthorized][1],
+    # [BatchIsAuthorized][2], and [IsAuthorizedWithToken][3] operations.
     #
     #
     #
     # [1]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html
-    # [2]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html
+    # [2]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html
+    # [3]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html
     #
     # @!attribute [rw] error_description
     #   The error description.
@@ -2913,7 +3044,7 @@ module Aws::VerifiedPermissions
     #
     #
     #
-    # [1]: https://docs.cedarpolicy.com/syntax-operators.html#has-presence-of-attribute-test
+    # [1]: https://docs.cedarpolicy.com/policies/syntax-operators.html#has-presence-of-attribute-test
     #
     # @!attribute [rw] message
     #   @return [String]

data/lib/aws-sdk-verifiedpermissions.rb

@@ -33,7 +33,7 @@ require_relative 'aws-sdk-verifiedpermissions/customizations'
 # structure.
 #
 #     verified_permissions = Aws::VerifiedPermissions::Client.new
-#     resp = verified_permissions.create_identity_source(params)
+#     resp = verified_permissions.batch_is_authorized(params)
 #
 # See {Client} for more information.
 #
@@ -53,6 +53,6 @@ require_relative 'aws-sdk-verifiedpermissions/customizations'
 # @!group service
 module Aws::VerifiedPermissions
 
-  GEM_VERSION = '1.10.0'
+  GEM_VERSION = '1.12.0'
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-verifiedpermissions
 version: !ruby/object:Gem::Version
-  version: 1.10.0
+  version: 1.12.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-09-27 00:00:00.000000000 Z
+date: 2023-11-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core