aws-sdk-verifiedpermissions 1.11.0 → 1.13.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +10 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-verifiedpermissions/client.rb +114 -1
- data/lib/aws-sdk-verifiedpermissions/client_api.rb +43 -0
- data/lib/aws-sdk-verifiedpermissions/endpoints.rb +14 -0
- data/lib/aws-sdk-verifiedpermissions/plugins/endpoints.rb +2 -0
- data/lib/aws-sdk-verifiedpermissions/types.rb +145 -14
- data/lib/aws-sdk-verifiedpermissions.rb +2 -2
- metadata +5 -5
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 14746770155d98647ac68c863afbeda0c58d7bdf374c606031ffa46371f6dfa6
|
4
|
+
data.tar.gz: f68c99f00a49292d7a0d3ee96891924f71a27c96ed53c3772f03eae1c1377855
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: eb0f2cbc502e4c08f4f4dc0b95dc51d4aaf9f83cb67322cf9d2ecd68c8ea33327935815fac7e8b91d8adbe48b60c5858c6d2def40e19537b99c3ffcfc231a4ca
|
7
|
+
data.tar.gz: 794a8fa9d0da18e646424966902ca80b62bf947566ed618b7729841c89709348116bdc38bd46c8630935b01af2f8fed2f63de3e082a0d163dcc409623bd2b96e
|
data/CHANGELOG.md
CHANGED
@@ -1,6 +1,16 @@
|
|
1
1
|
Unreleased Changes
|
2
2
|
------------------
|
3
3
|
|
4
|
+
1.13.0 (2023-11-22)
|
5
|
+
------------------
|
6
|
+
|
7
|
+
* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
|
8
|
+
|
9
|
+
1.12.0 (2023-11-17)
|
10
|
+
------------------
|
11
|
+
|
12
|
+
* Feature - Adding BatchIsAuthorized API which supports multiple authorization requests against a PolicyStore
|
13
|
+
|
4
14
|
1.11.0 (2023-10-19)
|
5
15
|
------------------
|
6
16
|
|
data/VERSION
CHANGED
@@ -1 +1 @@
|
|
1
|
-
1.
|
1
|
+
1.13.0
|
@@ -398,6 +398,119 @@ module Aws::VerifiedPermissions
|
|
398
398
|
|
399
399
|
# @!group API Operations
|
400
400
|
|
401
|
+
# Makes a series of decisions about multiple authorization requests for
|
402
|
+
# one principal or resource. Each request contains the equivalent
|
403
|
+
# content of an `IsAuthorized` request: principal, action, resource, and
|
404
|
+
# context. Either the `principal` or the `resource` parameter must be
|
405
|
+
# identical across all requests. For example, Verified Permissions
|
406
|
+
# won't evaluate a pair of requests where `bob` views `photo1` and
|
407
|
+
# `alice` views `photo2`. Authorization of `bob` to view `photo1` and
|
408
|
+
# `photo2`, or `bob` and `alice` to view `photo1`, are valid batches.
|
409
|
+
#
|
410
|
+
# The request is evaluated against all policies in the specified policy
|
411
|
+
# store that match the entities that you declare. The result of the
|
412
|
+
# decisions is a series of `Allow` or `Deny` responses, along with the
|
413
|
+
# IDs of the policies that produced each decision.
|
414
|
+
#
|
415
|
+
# The `entities` of a `BatchIsAuthorized` API request can contain up to
|
416
|
+
# 100 principals and up to 100 resources. The `requests` of a
|
417
|
+
# `BatchIsAuthorized` API request can contain up to 30 requests.
|
418
|
+
#
|
419
|
+
# @option params [required, String] :policy_store_id
|
420
|
+
# Specifies the ID of the policy store. Policies in this policy store
|
421
|
+
# will be used to make the authorization decisions for the input.
|
422
|
+
#
|
423
|
+
# @option params [Types::EntitiesDefinition] :entities
|
424
|
+
# Specifies the list of resources and principals and their associated
|
425
|
+
# attributes that Verified Permissions can examine when evaluating the
|
426
|
+
# policies.
|
427
|
+
#
|
428
|
+
# <note markdown="1"> You can include only principal and resource entities in this
|
429
|
+
# parameter; you can't include actions. You must specify actions in the
|
430
|
+
# schema.
|
431
|
+
#
|
432
|
+
# </note>
|
433
|
+
#
|
434
|
+
# @option params [required, Array<Types::BatchIsAuthorizedInputItem>] :requests
|
435
|
+
# An array of up to 30 requests that you want Verified Permissions to
|
436
|
+
# evaluate.
|
437
|
+
#
|
438
|
+
# @return [Types::BatchIsAuthorizedOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
439
|
+
#
|
440
|
+
# * {Types::BatchIsAuthorizedOutput#results #results} => Array<Types::BatchIsAuthorizedOutputItem>
|
441
|
+
#
|
442
|
+
# @example Request syntax with placeholder values
|
443
|
+
#
|
444
|
+
# resp = client.batch_is_authorized({
|
445
|
+
# policy_store_id: "PolicyStoreId", # required
|
446
|
+
# entities: {
|
447
|
+
# entity_list: [
|
448
|
+
# {
|
449
|
+
# identifier: { # required
|
450
|
+
# entity_type: "EntityType", # required
|
451
|
+
# entity_id: "EntityId", # required
|
452
|
+
# },
|
453
|
+
# attributes: {
|
454
|
+
# "String" => "value", # value <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
|
455
|
+
# },
|
456
|
+
# parents: [
|
457
|
+
# {
|
458
|
+
# entity_type: "EntityType", # required
|
459
|
+
# entity_id: "EntityId", # required
|
460
|
+
# },
|
461
|
+
# ],
|
462
|
+
# },
|
463
|
+
# ],
|
464
|
+
# },
|
465
|
+
# requests: [ # required
|
466
|
+
# {
|
467
|
+
# principal: {
|
468
|
+
# entity_type: "EntityType", # required
|
469
|
+
# entity_id: "EntityId", # required
|
470
|
+
# },
|
471
|
+
# action: {
|
472
|
+
# action_type: "ActionType", # required
|
473
|
+
# action_id: "ActionId", # required
|
474
|
+
# },
|
475
|
+
# resource: {
|
476
|
+
# entity_type: "EntityType", # required
|
477
|
+
# entity_id: "EntityId", # required
|
478
|
+
# },
|
479
|
+
# context: {
|
480
|
+
# context_map: {
|
481
|
+
# "String" => "value", # value <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
|
482
|
+
# },
|
483
|
+
# },
|
484
|
+
# },
|
485
|
+
# ],
|
486
|
+
# })
|
487
|
+
#
|
488
|
+
# @example Response structure
|
489
|
+
#
|
490
|
+
# resp.results #=> Array
|
491
|
+
# resp.results[0].request.principal.entity_type #=> String
|
492
|
+
# resp.results[0].request.principal.entity_id #=> String
|
493
|
+
# resp.results[0].request.action.action_type #=> String
|
494
|
+
# resp.results[0].request.action.action_id #=> String
|
495
|
+
# resp.results[0].request.resource.entity_type #=> String
|
496
|
+
# resp.results[0].request.resource.entity_id #=> String
|
497
|
+
# resp.results[0].request.context.context_map #=> Hash
|
498
|
+
# resp.results[0].request.context.context_map["String"] #=> <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
|
499
|
+
# resp.results[0].decision #=> String, one of "ALLOW", "DENY"
|
500
|
+
# resp.results[0].determining_policies #=> Array
|
501
|
+
# resp.results[0].determining_policies[0].policy_id #=> String
|
502
|
+
# resp.results[0].errors #=> Array
|
503
|
+
# resp.results[0].errors[0].error_description #=> String
|
504
|
+
#
|
505
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/verifiedpermissions-2021-12-01/BatchIsAuthorized AWS API Documentation
|
506
|
+
#
|
507
|
+
# @overload batch_is_authorized(params = {})
|
508
|
+
# @param [Hash] params ({})
|
509
|
+
def batch_is_authorized(params = {}, options = {})
|
510
|
+
req = build_request(:batch_is_authorized, params)
|
511
|
+
req.send_request(options)
|
512
|
+
end
|
513
|
+
|
401
514
|
# Creates a reference to an Amazon Cognito user pool as an external
|
402
515
|
# identity provider (IdP).
|
403
516
|
#
|
@@ -2077,7 +2190,7 @@ module Aws::VerifiedPermissions
|
|
2077
2190
|
params: params,
|
2078
2191
|
config: config)
|
2079
2192
|
context[:gem_name] = 'aws-sdk-verifiedpermissions'
|
2080
|
-
context[:gem_version] = '1.
|
2193
|
+
context[:gem_version] = '1.13.0'
|
2081
2194
|
Seahorse::Client::Request.new(handlers, context)
|
2082
2195
|
end
|
2083
2196
|
|
@@ -18,6 +18,12 @@ module Aws::VerifiedPermissions
|
|
18
18
|
ActionIdentifier = Shapes::StructureShape.new(name: 'ActionIdentifier')
|
19
19
|
ActionType = Shapes::StringShape.new(name: 'ActionType')
|
20
20
|
AttributeValue = Shapes::UnionShape.new(name: 'AttributeValue')
|
21
|
+
BatchIsAuthorizedInput = Shapes::StructureShape.new(name: 'BatchIsAuthorizedInput')
|
22
|
+
BatchIsAuthorizedInputItem = Shapes::StructureShape.new(name: 'BatchIsAuthorizedInputItem')
|
23
|
+
BatchIsAuthorizedInputList = Shapes::ListShape.new(name: 'BatchIsAuthorizedInputList')
|
24
|
+
BatchIsAuthorizedOutput = Shapes::StructureShape.new(name: 'BatchIsAuthorizedOutput')
|
25
|
+
BatchIsAuthorizedOutputItem = Shapes::StructureShape.new(name: 'BatchIsAuthorizedOutputItem')
|
26
|
+
BatchIsAuthorizedOutputList = Shapes::ListShape.new(name: 'BatchIsAuthorizedOutputList')
|
21
27
|
Boolean = Shapes::BooleanShape.new(name: 'Boolean')
|
22
28
|
BooleanAttribute = Shapes::BooleanShape.new(name: 'BooleanAttribute')
|
23
29
|
ClientId = Shapes::StringShape.new(name: 'ClientId')
|
@@ -179,6 +185,30 @@ module Aws::VerifiedPermissions
|
|
179
185
|
AttributeValue.add_member_subclass(:unknown, Types::AttributeValue::Unknown)
|
180
186
|
AttributeValue.struct_class = Types::AttributeValue
|
181
187
|
|
188
|
+
BatchIsAuthorizedInput.add_member(:policy_store_id, Shapes::ShapeRef.new(shape: PolicyStoreId, required: true, location_name: "policyStoreId"))
|
189
|
+
BatchIsAuthorizedInput.add_member(:entities, Shapes::ShapeRef.new(shape: EntitiesDefinition, location_name: "entities"))
|
190
|
+
BatchIsAuthorizedInput.add_member(:requests, Shapes::ShapeRef.new(shape: BatchIsAuthorizedInputList, required: true, location_name: "requests"))
|
191
|
+
BatchIsAuthorizedInput.struct_class = Types::BatchIsAuthorizedInput
|
192
|
+
|
193
|
+
BatchIsAuthorizedInputItem.add_member(:principal, Shapes::ShapeRef.new(shape: EntityIdentifier, location_name: "principal"))
|
194
|
+
BatchIsAuthorizedInputItem.add_member(:action, Shapes::ShapeRef.new(shape: ActionIdentifier, location_name: "action"))
|
195
|
+
BatchIsAuthorizedInputItem.add_member(:resource, Shapes::ShapeRef.new(shape: EntityIdentifier, location_name: "resource"))
|
196
|
+
BatchIsAuthorizedInputItem.add_member(:context, Shapes::ShapeRef.new(shape: ContextDefinition, location_name: "context"))
|
197
|
+
BatchIsAuthorizedInputItem.struct_class = Types::BatchIsAuthorizedInputItem
|
198
|
+
|
199
|
+
BatchIsAuthorizedInputList.member = Shapes::ShapeRef.new(shape: BatchIsAuthorizedInputItem)
|
200
|
+
|
201
|
+
BatchIsAuthorizedOutput.add_member(:results, Shapes::ShapeRef.new(shape: BatchIsAuthorizedOutputList, required: true, location_name: "results"))
|
202
|
+
BatchIsAuthorizedOutput.struct_class = Types::BatchIsAuthorizedOutput
|
203
|
+
|
204
|
+
BatchIsAuthorizedOutputItem.add_member(:request, Shapes::ShapeRef.new(shape: BatchIsAuthorizedInputItem, required: true, location_name: "request"))
|
205
|
+
BatchIsAuthorizedOutputItem.add_member(:decision, Shapes::ShapeRef.new(shape: Decision, required: true, location_name: "decision"))
|
206
|
+
BatchIsAuthorizedOutputItem.add_member(:determining_policies, Shapes::ShapeRef.new(shape: DeterminingPolicyList, required: true, location_name: "determiningPolicies"))
|
207
|
+
BatchIsAuthorizedOutputItem.add_member(:errors, Shapes::ShapeRef.new(shape: EvaluationErrorList, required: true, location_name: "errors"))
|
208
|
+
BatchIsAuthorizedOutputItem.struct_class = Types::BatchIsAuthorizedOutputItem
|
209
|
+
|
210
|
+
BatchIsAuthorizedOutputList.member = Shapes::ShapeRef.new(shape: BatchIsAuthorizedOutputItem)
|
211
|
+
|
182
212
|
ClientIds.member = Shapes::ShapeRef.new(shape: ClientId)
|
183
213
|
|
184
214
|
CognitoUserPoolConfiguration.add_member(:user_pool_arn, Shapes::ShapeRef.new(shape: UserPoolArn, required: true, location_name: "userPoolArn"))
|
@@ -696,6 +726,19 @@ module Aws::VerifiedPermissions
|
|
696
726
|
"uid" => "verifiedpermissions-2021-12-01",
|
697
727
|
}
|
698
728
|
|
729
|
+
api.add_operation(:batch_is_authorized, Seahorse::Model::Operation.new.tap do |o|
|
730
|
+
o.name = "BatchIsAuthorized"
|
731
|
+
o.http_method = "POST"
|
732
|
+
o.http_request_uri = "/"
|
733
|
+
o.input = Shapes::ShapeRef.new(shape: BatchIsAuthorizedInput)
|
734
|
+
o.output = Shapes::ShapeRef.new(shape: BatchIsAuthorizedOutput)
|
735
|
+
o.errors << Shapes::ShapeRef.new(shape: ValidationException)
|
736
|
+
o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
|
737
|
+
o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
|
738
|
+
o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
|
739
|
+
o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
|
740
|
+
end)
|
741
|
+
|
699
742
|
api.add_operation(:create_identity_source, Seahorse::Model::Operation.new.tap do |o|
|
700
743
|
o.name = "CreateIdentitySource"
|
701
744
|
o.http_method = "POST"
|
@@ -12,6 +12,20 @@ module Aws::VerifiedPermissions
|
|
12
12
|
# @api private
|
13
13
|
module Endpoints
|
14
14
|
|
15
|
+
class BatchIsAuthorized
|
16
|
+
def self.build(context)
|
17
|
+
unless context.config.regional_endpoint
|
18
|
+
endpoint = context.config.endpoint.to_s
|
19
|
+
end
|
20
|
+
Aws::VerifiedPermissions::EndpointParameters.new(
|
21
|
+
region: context.config.region,
|
22
|
+
use_dual_stack: context.config.use_dualstack_endpoint,
|
23
|
+
use_fips: context.config.use_fips_endpoint,
|
24
|
+
endpoint: endpoint,
|
25
|
+
)
|
26
|
+
end
|
27
|
+
end
|
28
|
+
|
15
29
|
class CreateIdentitySource
|
16
30
|
def self.build(context)
|
17
31
|
unless context.config.regional_endpoint
|
@@ -56,6 +56,8 @@ module Aws::VerifiedPermissions
|
|
56
56
|
|
57
57
|
def parameters_for_operation(context)
|
58
58
|
case context.operation_name
|
59
|
+
when :batch_is_authorized
|
60
|
+
Aws::VerifiedPermissions::Endpoints::BatchIsAuthorized.build(context)
|
59
61
|
when :create_identity_source
|
60
62
|
Aws::VerifiedPermissions::Endpoints::CreateIdentitySource.build(context)
|
61
63
|
when :create_policy
|
@@ -26,15 +26,17 @@ module Aws::VerifiedPermissions
|
|
26
26
|
# Contains information about an action for a request for which an
|
27
27
|
# authorization decision is made.
|
28
28
|
#
|
29
|
-
# This data type is used as
|
30
|
-
# [IsAuthorized][1]
|
29
|
+
# This data type is used as a request parameter to the
|
30
|
+
# [IsAuthorized][1], [BatchIsAuthorized][2], and
|
31
|
+
# [IsAuthorizedWithToken][3] operations.
|
31
32
|
#
|
32
33
|
# Example: `\{ "actionId": "<action name>", "actionType": "Action" \}`
|
33
34
|
#
|
34
35
|
#
|
35
36
|
#
|
36
37
|
# [1]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html
|
37
|
-
# [2]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/
|
38
|
+
# [2]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html
|
39
|
+
# [3]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html
|
38
40
|
#
|
39
41
|
# @!attribute [rw] action_type
|
40
42
|
# The type of an action.
|
@@ -60,16 +62,20 @@ module Aws::VerifiedPermissions
|
|
60
62
|
#
|
61
63
|
# This data type is used as a member of the [ContextDefinition][1]
|
62
64
|
# structure which is uses as a request parameter for the
|
63
|
-
# [IsAuthorized][2]
|
65
|
+
# [IsAuthorized][2], [BatchIsAuthorized][3], and
|
66
|
+
# [IsAuthorizedWithToken][4] operations.
|
64
67
|
#
|
65
68
|
#
|
66
69
|
#
|
67
70
|
# [1]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_ContextDefinition.html
|
68
71
|
# [2]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html
|
69
|
-
# [3]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/
|
72
|
+
# [3]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html
|
73
|
+
# [4]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html
|
70
74
|
#
|
71
75
|
# @note AttributeValue is a union - when making an API calls you must set exactly one of the members.
|
72
76
|
#
|
77
|
+
# @note AttributeValue is a union - when returned from an API call exactly one value will be set and the returned type will be a subclass of AttributeValue corresponding to the set member.
|
78
|
+
#
|
73
79
|
# @!attribute [rw] boolean
|
74
80
|
# An attribute value of [Boolean][1] type.
|
75
81
|
#
|
@@ -154,6 +160,124 @@ module Aws::VerifiedPermissions
|
|
154
160
|
class Unknown < AttributeValue; end
|
155
161
|
end
|
156
162
|
|
163
|
+
# @!attribute [rw] policy_store_id
|
164
|
+
# Specifies the ID of the policy store. Policies in this policy store
|
165
|
+
# will be used to make the authorization decisions for the input.
|
166
|
+
# @return [String]
|
167
|
+
#
|
168
|
+
# @!attribute [rw] entities
|
169
|
+
# Specifies the list of resources and principals and their associated
|
170
|
+
# attributes that Verified Permissions can examine when evaluating the
|
171
|
+
# policies.
|
172
|
+
#
|
173
|
+
# <note markdown="1"> You can include only principal and resource entities in this
|
174
|
+
# parameter; you can't include actions. You must specify actions in
|
175
|
+
# the schema.
|
176
|
+
#
|
177
|
+
# </note>
|
178
|
+
# @return [Types::EntitiesDefinition]
|
179
|
+
#
|
180
|
+
# @!attribute [rw] requests
|
181
|
+
# An array of up to 30 requests that you want Verified Permissions to
|
182
|
+
# evaluate.
|
183
|
+
# @return [Array<Types::BatchIsAuthorizedInputItem>]
|
184
|
+
#
|
185
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/verifiedpermissions-2021-12-01/BatchIsAuthorizedInput AWS API Documentation
|
186
|
+
#
|
187
|
+
class BatchIsAuthorizedInput < Struct.new(
|
188
|
+
:policy_store_id,
|
189
|
+
:entities,
|
190
|
+
:requests)
|
191
|
+
SENSITIVE = []
|
192
|
+
include Aws::Structure
|
193
|
+
end
|
194
|
+
|
195
|
+
# An authorization request that you include in a `BatchIsAuthorized` API
|
196
|
+
# request.
|
197
|
+
#
|
198
|
+
# @!attribute [rw] principal
|
199
|
+
# Specifies the principal for which the authorization decision is to
|
200
|
+
# be made.
|
201
|
+
# @return [Types::EntityIdentifier]
|
202
|
+
#
|
203
|
+
# @!attribute [rw] action
|
204
|
+
# Specifies the requested action to be authorized. For example, is the
|
205
|
+
# principal authorized to perform this action on the resource?
|
206
|
+
# @return [Types::ActionIdentifier]
|
207
|
+
#
|
208
|
+
# @!attribute [rw] resource
|
209
|
+
# Specifies the resource for which the authorization decision is to be
|
210
|
+
# made.
|
211
|
+
# @return [Types::EntityIdentifier]
|
212
|
+
#
|
213
|
+
# @!attribute [rw] context
|
214
|
+
# Specifies additional context that can be used to make more granular
|
215
|
+
# authorization decisions.
|
216
|
+
# @return [Types::ContextDefinition]
|
217
|
+
#
|
218
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/verifiedpermissions-2021-12-01/BatchIsAuthorizedInputItem AWS API Documentation
|
219
|
+
#
|
220
|
+
class BatchIsAuthorizedInputItem < Struct.new(
|
221
|
+
:principal,
|
222
|
+
:action,
|
223
|
+
:resource,
|
224
|
+
:context)
|
225
|
+
SENSITIVE = []
|
226
|
+
include Aws::Structure
|
227
|
+
end
|
228
|
+
|
229
|
+
# @!attribute [rw] results
|
230
|
+
# A series of `Allow` or `Deny` decisions for each request, and the
|
231
|
+
# policies that produced them.
|
232
|
+
# @return [Array<Types::BatchIsAuthorizedOutputItem>]
|
233
|
+
#
|
234
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/verifiedpermissions-2021-12-01/BatchIsAuthorizedOutput AWS API Documentation
|
235
|
+
#
|
236
|
+
class BatchIsAuthorizedOutput < Struct.new(
|
237
|
+
:results)
|
238
|
+
SENSITIVE = []
|
239
|
+
include Aws::Structure
|
240
|
+
end
|
241
|
+
|
242
|
+
# The decision, based on policy evaluation, from an individual
|
243
|
+
# authorization request in a `BatchIsAuthorized` API request.
|
244
|
+
#
|
245
|
+
# @!attribute [rw] request
|
246
|
+
# The authorization request that initiated the decision.
|
247
|
+
# @return [Types::BatchIsAuthorizedInputItem]
|
248
|
+
#
|
249
|
+
# @!attribute [rw] decision
|
250
|
+
# An authorization decision that indicates if the authorization
|
251
|
+
# request should be allowed or denied.
|
252
|
+
# @return [String]
|
253
|
+
#
|
254
|
+
# @!attribute [rw] determining_policies
|
255
|
+
# The list of determining policies used to make the authorization
|
256
|
+
# decision. For example, if there are two matching policies, where one
|
257
|
+
# is a forbid and the other is a permit, then the forbid policy will
|
258
|
+
# be the determining policy. In the case of multiple matching permit
|
259
|
+
# policies then there would be multiple determining policies. In the
|
260
|
+
# case that no policies match, and hence the response is DENY, there
|
261
|
+
# would be no determining policies.
|
262
|
+
# @return [Array<Types::DeterminingPolicyItem>]
|
263
|
+
#
|
264
|
+
# @!attribute [rw] errors
|
265
|
+
# Errors that occurred while making an authorization decision, for
|
266
|
+
# example, a policy references an Entity or entity Attribute that does
|
267
|
+
# not exist in the slice.
|
268
|
+
# @return [Array<Types::EvaluationErrorItem>]
|
269
|
+
#
|
270
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/verifiedpermissions-2021-12-01/BatchIsAuthorizedOutputItem AWS API Documentation
|
271
|
+
#
|
272
|
+
class BatchIsAuthorizedOutputItem < Struct.new(
|
273
|
+
:request,
|
274
|
+
:decision,
|
275
|
+
:determining_policies,
|
276
|
+
:errors)
|
277
|
+
SENSITIVE = []
|
278
|
+
include Aws::Structure
|
279
|
+
end
|
280
|
+
|
157
281
|
# The configuration for an identity source that represents a connection
|
158
282
|
# to an Amazon Cognito user pool used as an identity provider for
|
159
283
|
# Verified Permissions.
|
@@ -268,25 +392,29 @@ module Aws::VerifiedPermissions
|
|
268
392
|
# part of the `when` and `unless` clauses in a policy.
|
269
393
|
#
|
270
394
|
# This data type is used as a request parameter for the
|
271
|
-
# [IsAuthorized][1]
|
395
|
+
# [IsAuthorized][1], [BatchIsAuthorized][2], and
|
396
|
+
# [IsAuthorizedWithToken][3] operations.
|
272
397
|
#
|
273
398
|
# Example:
|
274
|
-
# `"context":\{"
|
399
|
+
# `"context":\{"contextMap":\{"<KeyName1>":\{"boolean":true\},"<KeyName2>":\{"long":1234\}\}\}`
|
275
400
|
#
|
276
401
|
#
|
277
402
|
#
|
278
403
|
# [1]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html
|
279
|
-
# [2]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/
|
404
|
+
# [2]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html
|
405
|
+
# [3]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html
|
280
406
|
#
|
281
407
|
# @note ContextDefinition is a union - when making an API calls you must set exactly one of the members.
|
282
408
|
#
|
409
|
+
# @note ContextDefinition is a union - when returned from an API call exactly one value will be set and the returned type will be a subclass of ContextDefinition corresponding to the set member.
|
410
|
+
#
|
283
411
|
# @!attribute [rw] context_map
|
284
412
|
# An list of attributes that are needed to successfully evaluate an
|
285
413
|
# authorization request. Each attribute in this array must include a
|
286
414
|
# map of a data type and its value.
|
287
415
|
#
|
288
416
|
# Example:
|
289
|
-
# `"
|
417
|
+
# `"contextMap":\{"<KeyName1>":\{"boolean":true\},"<KeyName2>":\{"long":1234\}\}`
|
290
418
|
# @return [Hash<String,Types::AttributeValue>]
|
291
419
|
#
|
292
420
|
# @see http://docs.aws.amazon.com/goto/WebAPI/verifiedpermissions-2021-12-01/ContextDefinition AWS API Documentation
|
@@ -714,7 +842,8 @@ module Aws::VerifiedPermissions
|
|
714
842
|
# authorization decision.
|
715
843
|
#
|
716
844
|
# This data type is used as an element in a response parameter for the
|
717
|
-
# [IsAuthorized][1]
|
845
|
+
# [IsAuthorized][1], [BatchIsAuthorized][2], and
|
846
|
+
# [IsAuthorizedWithToken][3] operations.
|
718
847
|
#
|
719
848
|
# Example:
|
720
849
|
# `"determiningPolicies":[\{"policyId":"SPEXAMPLEabcdefg111111"\}]`
|
@@ -722,7 +851,8 @@ module Aws::VerifiedPermissions
|
|
722
851
|
#
|
723
852
|
#
|
724
853
|
# [1]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html
|
725
|
-
# [2]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/
|
854
|
+
# [2]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html
|
855
|
+
# [3]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html
|
726
856
|
#
|
727
857
|
# @!attribute [rw] policy_id
|
728
858
|
# The Id of a policy that determined to an authorization decision.
|
@@ -885,13 +1015,14 @@ module Aws::VerifiedPermissions
|
|
885
1015
|
|
886
1016
|
# Contains a description of an evaluation error.
|
887
1017
|
#
|
888
|
-
# This data type is
|
889
|
-
# and [IsAuthorizedWithToken][
|
1018
|
+
# This data type is a response parameter of the [IsAuthorized][1],
|
1019
|
+
# [BatchIsAuthorized][2], and [IsAuthorizedWithToken][3] operations.
|
890
1020
|
#
|
891
1021
|
#
|
892
1022
|
#
|
893
1023
|
# [1]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html
|
894
|
-
# [2]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/
|
1024
|
+
# [2]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html
|
1025
|
+
# [3]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html
|
895
1026
|
#
|
896
1027
|
# @!attribute [rw] error_description
|
897
1028
|
# The error description.
|
@@ -33,7 +33,7 @@ require_relative 'aws-sdk-verifiedpermissions/customizations'
|
|
33
33
|
# structure.
|
34
34
|
#
|
35
35
|
# verified_permissions = Aws::VerifiedPermissions::Client.new
|
36
|
-
# resp = verified_permissions.
|
36
|
+
# resp = verified_permissions.batch_is_authorized(params)
|
37
37
|
#
|
38
38
|
# See {Client} for more information.
|
39
39
|
#
|
@@ -53,6 +53,6 @@ require_relative 'aws-sdk-verifiedpermissions/customizations'
|
|
53
53
|
# @!group service
|
54
54
|
module Aws::VerifiedPermissions
|
55
55
|
|
56
|
-
GEM_VERSION = '1.
|
56
|
+
GEM_VERSION = '1.13.0'
|
57
57
|
|
58
58
|
end
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: aws-sdk-verifiedpermissions
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 1.
|
4
|
+
version: 1.13.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Amazon Web Services
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2023-
|
11
|
+
date: 2023-11-22 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: aws-sdk-core
|
@@ -19,7 +19,7 @@ dependencies:
|
|
19
19
|
version: '3'
|
20
20
|
- - ">="
|
21
21
|
- !ruby/object:Gem::Version
|
22
|
-
version: 3.
|
22
|
+
version: 3.188.0
|
23
23
|
type: :runtime
|
24
24
|
prerelease: false
|
25
25
|
version_requirements: !ruby/object:Gem::Requirement
|
@@ -29,7 +29,7 @@ dependencies:
|
|
29
29
|
version: '3'
|
30
30
|
- - ">="
|
31
31
|
- !ruby/object:Gem::Version
|
32
|
-
version: 3.
|
32
|
+
version: 3.188.0
|
33
33
|
- !ruby/object:Gem::Dependency
|
34
34
|
name: aws-sigv4
|
35
35
|
requirement: !ruby/object:Gem::Requirement
|
@@ -81,7 +81,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
|
|
81
81
|
requirements:
|
82
82
|
- - ">="
|
83
83
|
- !ruby/object:Gem::Version
|
84
|
-
version: '2.
|
84
|
+
version: '2.5'
|
85
85
|
required_rubygems_version: !ruby/object:Gem::Requirement
|
86
86
|
requirements:
|
87
87
|
- - ">="
|