aws-sdk-verifiedpermissions 1.11.0 → 1.13.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: d243dd7badcb9006ac876e69b7a664a3e85583f3952eb6b787170739018eba49
4
- data.tar.gz: 2faaa751a84ff71988c696f95a46024ebc5f80cc46f264666d7fc7e4b0f236e9
3
+ metadata.gz: 14746770155d98647ac68c863afbeda0c58d7bdf374c606031ffa46371f6dfa6
4
+ data.tar.gz: f68c99f00a49292d7a0d3ee96891924f71a27c96ed53c3772f03eae1c1377855
5
5
  SHA512:
6
- metadata.gz: c2a0103390b7c4aa0ed0c1e9edda956a63e6bfd1435634aa09d7994df9d74d73a34f7207309de44772de2f1c4adc87c98c02250db124507965f61a520b897ac7
7
- data.tar.gz: bfd1735ae52992f31ef72c2ea041a2824ef3cffcf820a0e06d0705991c27ab15963b7e806735a1924a48ca8e535d68518de7fc5014a4f9edeea28349ea92b3d2
6
+ metadata.gz: eb0f2cbc502e4c08f4f4dc0b95dc51d4aaf9f83cb67322cf9d2ecd68c8ea33327935815fac7e8b91d8adbe48b60c5858c6d2def40e19537b99c3ffcfc231a4ca
7
+ data.tar.gz: 794a8fa9d0da18e646424966902ca80b62bf947566ed618b7729841c89709348116bdc38bd46c8630935b01af2f8fed2f63de3e082a0d163dcc409623bd2b96e
data/CHANGELOG.md CHANGED
@@ -1,6 +1,16 @@
1
1
  Unreleased Changes
2
2
  ------------------
3
3
 
4
+ 1.13.0 (2023-11-22)
5
+ ------------------
6
+
7
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
8
+
9
+ 1.12.0 (2023-11-17)
10
+ ------------------
11
+
12
+ * Feature - Adding BatchIsAuthorized API which supports multiple authorization requests against a PolicyStore
13
+
4
14
  1.11.0 (2023-10-19)
5
15
  ------------------
6
16
 
data/VERSION CHANGED
@@ -1 +1 @@
1
- 1.11.0
1
+ 1.13.0
@@ -398,6 +398,119 @@ module Aws::VerifiedPermissions
398
398
 
399
399
  # @!group API Operations
400
400
 
401
+ # Makes a series of decisions about multiple authorization requests for
402
+ # one principal or resource. Each request contains the equivalent
403
+ # content of an `IsAuthorized` request: principal, action, resource, and
404
+ # context. Either the `principal` or the `resource` parameter must be
405
+ # identical across all requests. For example, Verified Permissions
406
+ # won't evaluate a pair of requests where `bob` views `photo1` and
407
+ # `alice` views `photo2`. Authorization of `bob` to view `photo1` and
408
+ # `photo2`, or `bob` and `alice` to view `photo1`, are valid batches.
409
+ #
410
+ # The request is evaluated against all policies in the specified policy
411
+ # store that match the entities that you declare. The result of the
412
+ # decisions is a series of `Allow` or `Deny` responses, along with the
413
+ # IDs of the policies that produced each decision.
414
+ #
415
+ # The `entities` of a `BatchIsAuthorized` API request can contain up to
416
+ # 100 principals and up to 100 resources. The `requests` of a
417
+ # `BatchIsAuthorized` API request can contain up to 30 requests.
418
+ #
419
+ # @option params [required, String] :policy_store_id
420
+ # Specifies the ID of the policy store. Policies in this policy store
421
+ # will be used to make the authorization decisions for the input.
422
+ #
423
+ # @option params [Types::EntitiesDefinition] :entities
424
+ # Specifies the list of resources and principals and their associated
425
+ # attributes that Verified Permissions can examine when evaluating the
426
+ # policies.
427
+ #
428
+ # <note markdown="1"> You can include only principal and resource entities in this
429
+ # parameter; you can't include actions. You must specify actions in the
430
+ # schema.
431
+ #
432
+ # </note>
433
+ #
434
+ # @option params [required, Array<Types::BatchIsAuthorizedInputItem>] :requests
435
+ # An array of up to 30 requests that you want Verified Permissions to
436
+ # evaluate.
437
+ #
438
+ # @return [Types::BatchIsAuthorizedOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
439
+ #
440
+ # * {Types::BatchIsAuthorizedOutput#results #results} => Array&lt;Types::BatchIsAuthorizedOutputItem&gt;
441
+ #
442
+ # @example Request syntax with placeholder values
443
+ #
444
+ # resp = client.batch_is_authorized({
445
+ # policy_store_id: "PolicyStoreId", # required
446
+ # entities: {
447
+ # entity_list: [
448
+ # {
449
+ # identifier: { # required
450
+ # entity_type: "EntityType", # required
451
+ # entity_id: "EntityId", # required
452
+ # },
453
+ # attributes: {
454
+ # "String" => "value", # value <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
455
+ # },
456
+ # parents: [
457
+ # {
458
+ # entity_type: "EntityType", # required
459
+ # entity_id: "EntityId", # required
460
+ # },
461
+ # ],
462
+ # },
463
+ # ],
464
+ # },
465
+ # requests: [ # required
466
+ # {
467
+ # principal: {
468
+ # entity_type: "EntityType", # required
469
+ # entity_id: "EntityId", # required
470
+ # },
471
+ # action: {
472
+ # action_type: "ActionType", # required
473
+ # action_id: "ActionId", # required
474
+ # },
475
+ # resource: {
476
+ # entity_type: "EntityType", # required
477
+ # entity_id: "EntityId", # required
478
+ # },
479
+ # context: {
480
+ # context_map: {
481
+ # "String" => "value", # value <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
482
+ # },
483
+ # },
484
+ # },
485
+ # ],
486
+ # })
487
+ #
488
+ # @example Response structure
489
+ #
490
+ # resp.results #=> Array
491
+ # resp.results[0].request.principal.entity_type #=> String
492
+ # resp.results[0].request.principal.entity_id #=> String
493
+ # resp.results[0].request.action.action_type #=> String
494
+ # resp.results[0].request.action.action_id #=> String
495
+ # resp.results[0].request.resource.entity_type #=> String
496
+ # resp.results[0].request.resource.entity_id #=> String
497
+ # resp.results[0].request.context.context_map #=> Hash
498
+ # resp.results[0].request.context.context_map["String"] #=> <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
499
+ # resp.results[0].decision #=> String, one of "ALLOW", "DENY"
500
+ # resp.results[0].determining_policies #=> Array
501
+ # resp.results[0].determining_policies[0].policy_id #=> String
502
+ # resp.results[0].errors #=> Array
503
+ # resp.results[0].errors[0].error_description #=> String
504
+ #
505
+ # @see http://docs.aws.amazon.com/goto/WebAPI/verifiedpermissions-2021-12-01/BatchIsAuthorized AWS API Documentation
506
+ #
507
+ # @overload batch_is_authorized(params = {})
508
+ # @param [Hash] params ({})
509
+ def batch_is_authorized(params = {}, options = {})
510
+ req = build_request(:batch_is_authorized, params)
511
+ req.send_request(options)
512
+ end
513
+
401
514
  # Creates a reference to an Amazon Cognito user pool as an external
402
515
  # identity provider (IdP).
403
516
  #
@@ -2077,7 +2190,7 @@ module Aws::VerifiedPermissions
2077
2190
  params: params,
2078
2191
  config: config)
2079
2192
  context[:gem_name] = 'aws-sdk-verifiedpermissions'
2080
- context[:gem_version] = '1.11.0'
2193
+ context[:gem_version] = '1.13.0'
2081
2194
  Seahorse::Client::Request.new(handlers, context)
2082
2195
  end
2083
2196
 
@@ -18,6 +18,12 @@ module Aws::VerifiedPermissions
18
18
  ActionIdentifier = Shapes::StructureShape.new(name: 'ActionIdentifier')
19
19
  ActionType = Shapes::StringShape.new(name: 'ActionType')
20
20
  AttributeValue = Shapes::UnionShape.new(name: 'AttributeValue')
21
+ BatchIsAuthorizedInput = Shapes::StructureShape.new(name: 'BatchIsAuthorizedInput')
22
+ BatchIsAuthorizedInputItem = Shapes::StructureShape.new(name: 'BatchIsAuthorizedInputItem')
23
+ BatchIsAuthorizedInputList = Shapes::ListShape.new(name: 'BatchIsAuthorizedInputList')
24
+ BatchIsAuthorizedOutput = Shapes::StructureShape.new(name: 'BatchIsAuthorizedOutput')
25
+ BatchIsAuthorizedOutputItem = Shapes::StructureShape.new(name: 'BatchIsAuthorizedOutputItem')
26
+ BatchIsAuthorizedOutputList = Shapes::ListShape.new(name: 'BatchIsAuthorizedOutputList')
21
27
  Boolean = Shapes::BooleanShape.new(name: 'Boolean')
22
28
  BooleanAttribute = Shapes::BooleanShape.new(name: 'BooleanAttribute')
23
29
  ClientId = Shapes::StringShape.new(name: 'ClientId')
@@ -179,6 +185,30 @@ module Aws::VerifiedPermissions
179
185
  AttributeValue.add_member_subclass(:unknown, Types::AttributeValue::Unknown)
180
186
  AttributeValue.struct_class = Types::AttributeValue
181
187
 
188
+ BatchIsAuthorizedInput.add_member(:policy_store_id, Shapes::ShapeRef.new(shape: PolicyStoreId, required: true, location_name: "policyStoreId"))
189
+ BatchIsAuthorizedInput.add_member(:entities, Shapes::ShapeRef.new(shape: EntitiesDefinition, location_name: "entities"))
190
+ BatchIsAuthorizedInput.add_member(:requests, Shapes::ShapeRef.new(shape: BatchIsAuthorizedInputList, required: true, location_name: "requests"))
191
+ BatchIsAuthorizedInput.struct_class = Types::BatchIsAuthorizedInput
192
+
193
+ BatchIsAuthorizedInputItem.add_member(:principal, Shapes::ShapeRef.new(shape: EntityIdentifier, location_name: "principal"))
194
+ BatchIsAuthorizedInputItem.add_member(:action, Shapes::ShapeRef.new(shape: ActionIdentifier, location_name: "action"))
195
+ BatchIsAuthorizedInputItem.add_member(:resource, Shapes::ShapeRef.new(shape: EntityIdentifier, location_name: "resource"))
196
+ BatchIsAuthorizedInputItem.add_member(:context, Shapes::ShapeRef.new(shape: ContextDefinition, location_name: "context"))
197
+ BatchIsAuthorizedInputItem.struct_class = Types::BatchIsAuthorizedInputItem
198
+
199
+ BatchIsAuthorizedInputList.member = Shapes::ShapeRef.new(shape: BatchIsAuthorizedInputItem)
200
+
201
+ BatchIsAuthorizedOutput.add_member(:results, Shapes::ShapeRef.new(shape: BatchIsAuthorizedOutputList, required: true, location_name: "results"))
202
+ BatchIsAuthorizedOutput.struct_class = Types::BatchIsAuthorizedOutput
203
+
204
+ BatchIsAuthorizedOutputItem.add_member(:request, Shapes::ShapeRef.new(shape: BatchIsAuthorizedInputItem, required: true, location_name: "request"))
205
+ BatchIsAuthorizedOutputItem.add_member(:decision, Shapes::ShapeRef.new(shape: Decision, required: true, location_name: "decision"))
206
+ BatchIsAuthorizedOutputItem.add_member(:determining_policies, Shapes::ShapeRef.new(shape: DeterminingPolicyList, required: true, location_name: "determiningPolicies"))
207
+ BatchIsAuthorizedOutputItem.add_member(:errors, Shapes::ShapeRef.new(shape: EvaluationErrorList, required: true, location_name: "errors"))
208
+ BatchIsAuthorizedOutputItem.struct_class = Types::BatchIsAuthorizedOutputItem
209
+
210
+ BatchIsAuthorizedOutputList.member = Shapes::ShapeRef.new(shape: BatchIsAuthorizedOutputItem)
211
+
182
212
  ClientIds.member = Shapes::ShapeRef.new(shape: ClientId)
183
213
 
184
214
  CognitoUserPoolConfiguration.add_member(:user_pool_arn, Shapes::ShapeRef.new(shape: UserPoolArn, required: true, location_name: "userPoolArn"))
@@ -696,6 +726,19 @@ module Aws::VerifiedPermissions
696
726
  "uid" => "verifiedpermissions-2021-12-01",
697
727
  }
698
728
 
729
+ api.add_operation(:batch_is_authorized, Seahorse::Model::Operation.new.tap do |o|
730
+ o.name = "BatchIsAuthorized"
731
+ o.http_method = "POST"
732
+ o.http_request_uri = "/"
733
+ o.input = Shapes::ShapeRef.new(shape: BatchIsAuthorizedInput)
734
+ o.output = Shapes::ShapeRef.new(shape: BatchIsAuthorizedOutput)
735
+ o.errors << Shapes::ShapeRef.new(shape: ValidationException)
736
+ o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
737
+ o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
738
+ o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
739
+ o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
740
+ end)
741
+
699
742
  api.add_operation(:create_identity_source, Seahorse::Model::Operation.new.tap do |o|
700
743
  o.name = "CreateIdentitySource"
701
744
  o.http_method = "POST"
@@ -12,6 +12,20 @@ module Aws::VerifiedPermissions
12
12
  # @api private
13
13
  module Endpoints
14
14
 
15
+ class BatchIsAuthorized
16
+ def self.build(context)
17
+ unless context.config.regional_endpoint
18
+ endpoint = context.config.endpoint.to_s
19
+ end
20
+ Aws::VerifiedPermissions::EndpointParameters.new(
21
+ region: context.config.region,
22
+ use_dual_stack: context.config.use_dualstack_endpoint,
23
+ use_fips: context.config.use_fips_endpoint,
24
+ endpoint: endpoint,
25
+ )
26
+ end
27
+ end
28
+
15
29
  class CreateIdentitySource
16
30
  def self.build(context)
17
31
  unless context.config.regional_endpoint
@@ -56,6 +56,8 @@ module Aws::VerifiedPermissions
56
56
 
57
57
  def parameters_for_operation(context)
58
58
  case context.operation_name
59
+ when :batch_is_authorized
60
+ Aws::VerifiedPermissions::Endpoints::BatchIsAuthorized.build(context)
59
61
  when :create_identity_source
60
62
  Aws::VerifiedPermissions::Endpoints::CreateIdentitySource.build(context)
61
63
  when :create_policy
@@ -26,15 +26,17 @@ module Aws::VerifiedPermissions
26
26
  # Contains information about an action for a request for which an
27
27
  # authorization decision is made.
28
28
  #
29
- # This data type is used as an request parameter to the
30
- # [IsAuthorized][1] and [IsAuthorizedWithToken][2] operations.
29
+ # This data type is used as a request parameter to the
30
+ # [IsAuthorized][1], [BatchIsAuthorized][2], and
31
+ # [IsAuthorizedWithToken][3] operations.
31
32
  #
32
33
  # Example: `\{ "actionId": "<action name>", "actionType": "Action" \}`
33
34
  #
34
35
  #
35
36
  #
36
37
  # [1]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html
37
- # [2]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html
38
+ # [2]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html
39
+ # [3]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html
38
40
  #
39
41
  # @!attribute [rw] action_type
40
42
  # The type of an action.
@@ -60,16 +62,20 @@ module Aws::VerifiedPermissions
60
62
  #
61
63
  # This data type is used as a member of the [ContextDefinition][1]
62
64
  # structure which is uses as a request parameter for the
63
- # [IsAuthorized][2] and [IsAuthorizedWithToken][3] operations.
65
+ # [IsAuthorized][2], [BatchIsAuthorized][3], and
66
+ # [IsAuthorizedWithToken][4] operations.
64
67
  #
65
68
  #
66
69
  #
67
70
  # [1]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_ContextDefinition.html
68
71
  # [2]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html
69
- # [3]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html
72
+ # [3]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html
73
+ # [4]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html
70
74
  #
71
75
  # @note AttributeValue is a union - when making an API calls you must set exactly one of the members.
72
76
  #
77
+ # @note AttributeValue is a union - when returned from an API call exactly one value will be set and the returned type will be a subclass of AttributeValue corresponding to the set member.
78
+ #
73
79
  # @!attribute [rw] boolean
74
80
  # An attribute value of [Boolean][1] type.
75
81
  #
@@ -154,6 +160,124 @@ module Aws::VerifiedPermissions
154
160
  class Unknown < AttributeValue; end
155
161
  end
156
162
 
163
+ # @!attribute [rw] policy_store_id
164
+ # Specifies the ID of the policy store. Policies in this policy store
165
+ # will be used to make the authorization decisions for the input.
166
+ # @return [String]
167
+ #
168
+ # @!attribute [rw] entities
169
+ # Specifies the list of resources and principals and their associated
170
+ # attributes that Verified Permissions can examine when evaluating the
171
+ # policies.
172
+ #
173
+ # <note markdown="1"> You can include only principal and resource entities in this
174
+ # parameter; you can't include actions. You must specify actions in
175
+ # the schema.
176
+ #
177
+ # </note>
178
+ # @return [Types::EntitiesDefinition]
179
+ #
180
+ # @!attribute [rw] requests
181
+ # An array of up to 30 requests that you want Verified Permissions to
182
+ # evaluate.
183
+ # @return [Array<Types::BatchIsAuthorizedInputItem>]
184
+ #
185
+ # @see http://docs.aws.amazon.com/goto/WebAPI/verifiedpermissions-2021-12-01/BatchIsAuthorizedInput AWS API Documentation
186
+ #
187
+ class BatchIsAuthorizedInput < Struct.new(
188
+ :policy_store_id,
189
+ :entities,
190
+ :requests)
191
+ SENSITIVE = []
192
+ include Aws::Structure
193
+ end
194
+
195
+ # An authorization request that you include in a `BatchIsAuthorized` API
196
+ # request.
197
+ #
198
+ # @!attribute [rw] principal
199
+ # Specifies the principal for which the authorization decision is to
200
+ # be made.
201
+ # @return [Types::EntityIdentifier]
202
+ #
203
+ # @!attribute [rw] action
204
+ # Specifies the requested action to be authorized. For example, is the
205
+ # principal authorized to perform this action on the resource?
206
+ # @return [Types::ActionIdentifier]
207
+ #
208
+ # @!attribute [rw] resource
209
+ # Specifies the resource for which the authorization decision is to be
210
+ # made.
211
+ # @return [Types::EntityIdentifier]
212
+ #
213
+ # @!attribute [rw] context
214
+ # Specifies additional context that can be used to make more granular
215
+ # authorization decisions.
216
+ # @return [Types::ContextDefinition]
217
+ #
218
+ # @see http://docs.aws.amazon.com/goto/WebAPI/verifiedpermissions-2021-12-01/BatchIsAuthorizedInputItem AWS API Documentation
219
+ #
220
+ class BatchIsAuthorizedInputItem < Struct.new(
221
+ :principal,
222
+ :action,
223
+ :resource,
224
+ :context)
225
+ SENSITIVE = []
226
+ include Aws::Structure
227
+ end
228
+
229
+ # @!attribute [rw] results
230
+ # A series of `Allow` or `Deny` decisions for each request, and the
231
+ # policies that produced them.
232
+ # @return [Array<Types::BatchIsAuthorizedOutputItem>]
233
+ #
234
+ # @see http://docs.aws.amazon.com/goto/WebAPI/verifiedpermissions-2021-12-01/BatchIsAuthorizedOutput AWS API Documentation
235
+ #
236
+ class BatchIsAuthorizedOutput < Struct.new(
237
+ :results)
238
+ SENSITIVE = []
239
+ include Aws::Structure
240
+ end
241
+
242
+ # The decision, based on policy evaluation, from an individual
243
+ # authorization request in a `BatchIsAuthorized` API request.
244
+ #
245
+ # @!attribute [rw] request
246
+ # The authorization request that initiated the decision.
247
+ # @return [Types::BatchIsAuthorizedInputItem]
248
+ #
249
+ # @!attribute [rw] decision
250
+ # An authorization decision that indicates if the authorization
251
+ # request should be allowed or denied.
252
+ # @return [String]
253
+ #
254
+ # @!attribute [rw] determining_policies
255
+ # The list of determining policies used to make the authorization
256
+ # decision. For example, if there are two matching policies, where one
257
+ # is a forbid and the other is a permit, then the forbid policy will
258
+ # be the determining policy. In the case of multiple matching permit
259
+ # policies then there would be multiple determining policies. In the
260
+ # case that no policies match, and hence the response is DENY, there
261
+ # would be no determining policies.
262
+ # @return [Array<Types::DeterminingPolicyItem>]
263
+ #
264
+ # @!attribute [rw] errors
265
+ # Errors that occurred while making an authorization decision, for
266
+ # example, a policy references an Entity or entity Attribute that does
267
+ # not exist in the slice.
268
+ # @return [Array<Types::EvaluationErrorItem>]
269
+ #
270
+ # @see http://docs.aws.amazon.com/goto/WebAPI/verifiedpermissions-2021-12-01/BatchIsAuthorizedOutputItem AWS API Documentation
271
+ #
272
+ class BatchIsAuthorizedOutputItem < Struct.new(
273
+ :request,
274
+ :decision,
275
+ :determining_policies,
276
+ :errors)
277
+ SENSITIVE = []
278
+ include Aws::Structure
279
+ end
280
+
157
281
  # The configuration for an identity source that represents a connection
158
282
  # to an Amazon Cognito user pool used as an identity provider for
159
283
  # Verified Permissions.
@@ -268,25 +392,29 @@ module Aws::VerifiedPermissions
268
392
  # part of the `when` and `unless` clauses in a policy.
269
393
  #
270
394
  # This data type is used as a request parameter for the
271
- # [IsAuthorized][1] and [IsAuthorizedWithToken][2] operations.
395
+ # [IsAuthorized][1], [BatchIsAuthorized][2], and
396
+ # [IsAuthorizedWithToken][3] operations.
272
397
  #
273
398
  # Example:
274
- # `"context":\{"Context":\{"<KeyName1>":\{"boolean":true\},"<KeyName2>":\{"long":1234\}\}\}`
399
+ # `"context":\{"contextMap":\{"<KeyName1>":\{"boolean":true\},"<KeyName2>":\{"long":1234\}\}\}`
275
400
  #
276
401
  #
277
402
  #
278
403
  # [1]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html
279
- # [2]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html
404
+ # [2]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html
405
+ # [3]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html
280
406
  #
281
407
  # @note ContextDefinition is a union - when making an API calls you must set exactly one of the members.
282
408
  #
409
+ # @note ContextDefinition is a union - when returned from an API call exactly one value will be set and the returned type will be a subclass of ContextDefinition corresponding to the set member.
410
+ #
283
411
  # @!attribute [rw] context_map
284
412
  # An list of attributes that are needed to successfully evaluate an
285
413
  # authorization request. Each attribute in this array must include a
286
414
  # map of a data type and its value.
287
415
  #
288
416
  # Example:
289
- # `"Context":\{"<KeyName1>":\{"boolean":true\},"<KeyName2>":\{"long":1234\}\}`
417
+ # `"contextMap":\{"<KeyName1>":\{"boolean":true\},"<KeyName2>":\{"long":1234\}\}`
290
418
  # @return [Hash<String,Types::AttributeValue>]
291
419
  #
292
420
  # @see http://docs.aws.amazon.com/goto/WebAPI/verifiedpermissions-2021-12-01/ContextDefinition AWS API Documentation
@@ -714,7 +842,8 @@ module Aws::VerifiedPermissions
714
842
  # authorization decision.
715
843
  #
716
844
  # This data type is used as an element in a response parameter for the
717
- # [IsAuthorized][1] and [IsAuthorizedWithToken][2] operations.
845
+ # [IsAuthorized][1], [BatchIsAuthorized][2], and
846
+ # [IsAuthorizedWithToken][3] operations.
718
847
  #
719
848
  # Example:
720
849
  # `"determiningPolicies":[\{"policyId":"SPEXAMPLEabcdefg111111"\}]`
@@ -722,7 +851,8 @@ module Aws::VerifiedPermissions
722
851
  #
723
852
  #
724
853
  # [1]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html
725
- # [2]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html
854
+ # [2]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html
855
+ # [3]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html
726
856
  #
727
857
  # @!attribute [rw] policy_id
728
858
  # The Id of a policy that determined to an authorization decision.
@@ -885,13 +1015,14 @@ module Aws::VerifiedPermissions
885
1015
 
886
1016
  # Contains a description of an evaluation error.
887
1017
  #
888
- # This data type is used as a request parameter in the [IsAuthorized][1]
889
- # and [IsAuthorizedWithToken][2] operations.
1018
+ # This data type is a response parameter of the [IsAuthorized][1],
1019
+ # [BatchIsAuthorized][2], and [IsAuthorizedWithToken][3] operations.
890
1020
  #
891
1021
  #
892
1022
  #
893
1023
  # [1]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html
894
- # [2]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html
1024
+ # [2]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html
1025
+ # [3]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html
895
1026
  #
896
1027
  # @!attribute [rw] error_description
897
1028
  # The error description.
@@ -33,7 +33,7 @@ require_relative 'aws-sdk-verifiedpermissions/customizations'
33
33
  # structure.
34
34
  #
35
35
  # verified_permissions = Aws::VerifiedPermissions::Client.new
36
- # resp = verified_permissions.create_identity_source(params)
36
+ # resp = verified_permissions.batch_is_authorized(params)
37
37
  #
38
38
  # See {Client} for more information.
39
39
  #
@@ -53,6 +53,6 @@ require_relative 'aws-sdk-verifiedpermissions/customizations'
53
53
  # @!group service
54
54
  module Aws::VerifiedPermissions
55
55
 
56
- GEM_VERSION = '1.11.0'
56
+ GEM_VERSION = '1.13.0'
57
57
 
58
58
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-verifiedpermissions
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.11.0
4
+ version: 1.13.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2023-10-19 00:00:00.000000000 Z
11
+ date: 2023-11-22 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: aws-sdk-core
@@ -19,7 +19,7 @@ dependencies:
19
19
  version: '3'
20
20
  - - ">="
21
21
  - !ruby/object:Gem::Version
22
- version: 3.184.0
22
+ version: 3.188.0
23
23
  type: :runtime
24
24
  prerelease: false
25
25
  version_requirements: !ruby/object:Gem::Requirement
@@ -29,7 +29,7 @@ dependencies:
29
29
  version: '3'
30
30
  - - ">="
31
31
  - !ruby/object:Gem::Version
32
- version: 3.184.0
32
+ version: 3.188.0
33
33
  - !ruby/object:Gem::Dependency
34
34
  name: aws-sigv4
35
35
  requirement: !ruby/object:Gem::Requirement
@@ -81,7 +81,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
81
81
  requirements:
82
82
  - - ">="
83
83
  - !ruby/object:Gem::Version
84
- version: '2.3'
84
+ version: '2.5'
85
85
  required_rubygems_version: !ruby/object:Gem::Requirement
86
86
  requirements:
87
87
  - - ">="