aws-sdk-verifiedpermissions 1.38.0 → 1.40.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ce398d3fb90966bdde54ecc7e2f73b4c45c735d1f9a82c3ddfdcc0516374cf6c
-  data.tar.gz: 67ed70a02330773408d0da44694e6a4121c0e504b94d85f6d25b5809b073dc94
+  metadata.gz: c917446259d2c9f641698cce1c8d684cb42052455c5a98e7ca2abac121db46a8
+  data.tar.gz: de98a48dba9ee7c25341754aa9fcc9d9a0b48955a250414d48e6eae52772442a
 SHA512:
-  metadata.gz: 4643ea367d7eaaaaf0bc38ba717bcc020be433940fdf6950b860b936d86f1f2c0c7ba5c3348abdfcf7af2dcef78d83a95b79eca7d71498ac77e44455cdf75f5e
-  data.tar.gz: 17578bfd602aeb480a702107145626b4a6a9ee6d9619e1b4ad4cd47ad0b5ef10ce64065592fdaa48dbfa99bd5e24dd2d9cfdc913e93c254170c423adfa8f8e48
+  metadata.gz: 8e5627bfb2ebfa6016f5aec61825ed5a16cacffc17427b0116ae7977d7970d2b634dda772ab64944bdaaee5e8ec11d1c3866ce0bc6031f886253e2b34ddfaba2
+  data.tar.gz: 6ee60792291a8173ad20dc5610cf447af1166c7669acbd90d06d1e676af57aa18bd7bc61344f9ef43edf31b20787b6bff0a24afd105d43c7c6bd1d3787906486

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.40.0 (2025-01-30)
+------------------
+
+* Feature - Adds Cedar JSON format support for entities and context data in authorization requests
+
+1.39.0 (2025-01-15)
+------------------
+
+* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
+
 1.38.0 (2024-11-18)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.38.0
+1.40.0

data/lib/aws-sdk-verifiedpermissions/client.rb

@@ -257,11 +257,34 @@ module Aws::VerifiedPermissions
     #     Used when loading credentials from the shared credentials file
     #     at HOME/.aws/credentials.  When not specified, 'default' is used.
     #
+    #   @option options [String] :request_checksum_calculation ("when_supported")
+    #     Determines when a checksum will be calculated for request payloads. Values are:
+    #
+    #     * `when_supported` - (default) When set, a checksum will be
+    #       calculated for all request payloads of operations modeled with the
+    #       `httpChecksum` trait where `requestChecksumRequired` is `true` and/or a
+    #       `requestAlgorithmMember` is modeled.
+    #     * `when_required` - When set, a checksum will only be calculated for
+    #       request payloads of operations modeled with the  `httpChecksum` trait where
+    #       `requestChecksumRequired` is `true` or where a `requestAlgorithmMember`
+    #       is modeled and supplied.
+    #
     #   @option options [Integer] :request_min_compression_size_bytes (10240)
     #     The minimum size in bytes that triggers compression for request
     #     bodies. The value must be non-negative integer value between 0
     #     and 10485780 bytes inclusive.
     #
+    #   @option options [String] :response_checksum_validation ("when_supported")
+    #     Determines when checksum validation will be performed on response payloads. Values are:
+    #
+    #     * `when_supported` - (default) When set, checksum validation is performed on all
+    #       response payloads of operations modeled with the `httpChecksum` trait where
+    #       `responseAlgorithms` is modeled, except when no modeled checksum algorithms
+    #       are supported.
+    #     * `when_required` - When set, checksum validation is not performed on
+    #       response payloads of operations unless the checksum algorithm is supported and
+    #       the `requestValidationModeMember` member is set to `ENABLED`.
+    #
     #   @option options [Proc] :retry_backoff
     #     A proc or lambda used for backoff. Defaults to 2**retries * retry_base_delay.
     #     This option is only used in the `legacy` retry mode.
@@ -819,6 +842,7 @@ module Aws::VerifiedPermissions
     #           ],
     #         },
     #       ],
+    #       cedar_json: "CedarJson",
     #     },
     #     requests: [ # required
     #       {
@@ -838,6 +862,7 @@ module Aws::VerifiedPermissions
     #           context_map: {
     #             "String" => "value", # value <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
     #           },
+    #           cedar_json: "CedarJson",
     #         },
     #       },
     #     ],
@@ -854,6 +879,7 @@ module Aws::VerifiedPermissions
     #   resp.results[0].request.resource.entity_id #=> String
     #   resp.results[0].request.context.context_map #=> Hash
     #   resp.results[0].request.context.context_map["String"] #=> <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
+    #   resp.results[0].request.context.cedar_json #=> String
     #   resp.results[0].decision #=> String, one of "ALLOW", "DENY"
     #   resp.results[0].determining_policies #=> Array
     #   resp.results[0].determining_policies[0].policy_id #=> String
@@ -1107,6 +1133,7 @@ module Aws::VerifiedPermissions
     #           ],
     #         },
     #       ],
+    #       cedar_json: "CedarJson",
     #     },
     #     requests: [ # required
     #       {
@@ -1122,6 +1149,7 @@ module Aws::VerifiedPermissions
     #           context_map: {
     #             "String" => "value", # value <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
     #           },
+    #           cedar_json: "CedarJson",
     #         },
     #       },
     #     ],
@@ -1138,6 +1166,7 @@ module Aws::VerifiedPermissions
     #   resp.results[0].request.resource.entity_id #=> String
     #   resp.results[0].request.context.context_map #=> Hash
     #   resp.results[0].request.context.context_map["String"] #=> <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
+    #   resp.results[0].request.context.cedar_json #=> String
     #   resp.results[0].decision #=> String, one of "ALLOW", "DENY"
     #   resp.results[0].determining_policies #=> Array
     #   resp.results[0].determining_policies[0].policy_id #=> String
@@ -2455,6 +2484,7 @@ module Aws::VerifiedPermissions
     #       context_map: {
     #         "String" => "value", # value <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
     #       },
+    #       cedar_json: "CedarJson",
     #     },
     #     entities: {
     #       entity_list: [
@@ -2474,6 +2504,7 @@ module Aws::VerifiedPermissions
     #           ],
     #         },
     #       ],
+    #       cedar_json: "CedarJson",
     #     },
     #   })
     #
@@ -2629,6 +2660,7 @@ module Aws::VerifiedPermissions
     #       context_map: {
     #         "String" => "value", # value <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
     #       },
+    #       cedar_json: "CedarJson",
     #     },
     #     entities: {
     #       entity_list: [
@@ -2648,6 +2680,7 @@ module Aws::VerifiedPermissions
     #           ],
     #         },
     #       ],
+    #       cedar_json: "CedarJson",
     #     },
     #   })
     #
@@ -3771,7 +3804,7 @@ module Aws::VerifiedPermissions
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-verifiedpermissions'
-      context[:gem_version] = '1.38.0'
+      context[:gem_version] = '1.40.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-verifiedpermissions/client_api.rb

@@ -45,6 +45,7 @@ module Aws::VerifiedPermissions
     BatchIsAuthorizedWithTokenOutputList = Shapes::ListShape.new(name: 'BatchIsAuthorizedWithTokenOutputList')
     Boolean = Shapes::BooleanShape.new(name: 'Boolean')
     BooleanAttribute = Shapes::BooleanShape.new(name: 'BooleanAttribute')
+    CedarJson = Shapes::StringShape.new(name: 'CedarJson')
     Claim = Shapes::StringShape.new(name: 'Claim')
     ClientId = Shapes::StringShape.new(name: 'ClientId')
     ClientIds = Shapes::ListShape.new(name: 'ClientIds')
@@ -386,8 +387,10 @@ module Aws::VerifiedPermissions
     ConflictException.struct_class = Types::ConflictException
 
     ContextDefinition.add_member(:context_map, Shapes::ShapeRef.new(shape: ContextMap, location_name: "contextMap"))
+    ContextDefinition.add_member(:cedar_json, Shapes::ShapeRef.new(shape: CedarJson, location_name: "cedarJson"))
     ContextDefinition.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
     ContextDefinition.add_member_subclass(:context_map, Types::ContextDefinition::ContextMap)
+    ContextDefinition.add_member_subclass(:cedar_json, Types::ContextDefinition::CedarJson)
     ContextDefinition.add_member_subclass(:unknown, Types::ContextDefinition::Unknown)
     ContextDefinition.struct_class = Types::ContextDefinition
 
@@ -474,8 +477,10 @@ module Aws::VerifiedPermissions
     DeterminingPolicyList.member = Shapes::ShapeRef.new(shape: DeterminingPolicyItem)
 
     EntitiesDefinition.add_member(:entity_list, Shapes::ShapeRef.new(shape: EntityList, location_name: "entityList"))
+    EntitiesDefinition.add_member(:cedar_json, Shapes::ShapeRef.new(shape: CedarJson, location_name: "cedarJson"))
     EntitiesDefinition.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
     EntitiesDefinition.add_member_subclass(:entity_list, Types::EntitiesDefinition::EntityList)
+    EntitiesDefinition.add_member_subclass(:cedar_json, Types::EntitiesDefinition::CedarJson)
     EntitiesDefinition.add_member_subclass(:unknown, Types::EntitiesDefinition::Unknown)
     EntitiesDefinition.struct_class = Types::EntitiesDefinition
 

data/lib/aws-sdk-verifiedpermissions/types.rb

@@ -1007,6 +1007,11 @@ module Aws::VerifiedPermissions
     # [IsAuthorized][1], [BatchIsAuthorized][2], and
     # [IsAuthorizedWithToken][3] operations.
     #
+    # If you're passing context as part of the request, exactly one
+    # instance of `context` must be passed. If you don't want to pass
+    # context, omit the `context` parameter from your request rather than
+    # sending `context {}`.
+    #
     # Example:
     # `"context":{"contextMap":{"<KeyName1>":{"boolean":true},"<KeyName2>":{"long":1234}}}`
     #
@@ -1029,16 +1034,26 @@ module Aws::VerifiedPermissions
     #   `"contextMap":{"<KeyName1>":{"boolean":true},"<KeyName2>":{"long":1234}}`
     #   @return [Hash<String,Types::AttributeValue>]
     #
+    # @!attribute [rw] cedar_json
+    #   A Cedar JSON string representation of the context needed to
+    #   successfully evaluate an authorization request.
+    #
+    #   Example: `{"cedarJson":"{"<KeyName1>": true, "<KeyName2>":
+    #   1234}" }`
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/verifiedpermissions-2021-12-01/ContextDefinition AWS API Documentation
     #
     class ContextDefinition < Struct.new(
       :context_map,
+      :cedar_json,
       :unknown)
-      SENSITIVE = [:context_map]
+      SENSITIVE = [:context_map, :cedar_json]
       include Aws::Structure
       include Aws::Structure::Union
 
       class ContextMap < ContextDefinition; end
+      class CedarJson < ContextDefinition; end
       class Unknown < ContextDefinition; end
     end
 
@@ -1532,18 +1547,33 @@ module Aws::VerifiedPermissions
     #   authorization request. Each entity in this array must include an
     #   identifier for the entity, the attributes of the entity, and a list
     #   of any parent entities.
+    #
+    #   <note markdown="1"> If you include multiple entities with the same `identifier`, only
+    #   the last one is processed in the request.
+    #
+    #    </note>
     #   @return [Array<Types::EntityItem>]
     #
+    # @!attribute [rw] cedar_json
+    #   A Cedar JSON string representation of the entities needed to
+    #   successfully evaluate an authorization request.
+    #
+    #   Example: `{"cedarJson":
+    #   "[{"uid":{"type":"Photo","id":"VacationPhoto94.jpg"},"attrs":{"accessLevel":"public"},"parents":[]}]"}`
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/verifiedpermissions-2021-12-01/EntitiesDefinition AWS API Documentation
     #
     class EntitiesDefinition < Struct.new(
       :entity_list,
+      :cedar_json,
       :unknown)
-      SENSITIVE = []
+      SENSITIVE = [:cedar_json]
       include Aws::Structure
       include Aws::Structure::Union
 
       class EntityList < EntitiesDefinition; end
+      class CedarJson < EntitiesDefinition; end
       class Unknown < EntitiesDefinition; end
     end
 

data/lib/aws-sdk-verifiedpermissions.rb

@@ -55,7 +55,7 @@ module Aws::VerifiedPermissions
   autoload :EndpointProvider, 'aws-sdk-verifiedpermissions/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-verifiedpermissions/endpoints'
 
-  GEM_VERSION = '1.38.0'
+  GEM_VERSION = '1.40.0'
 
 end
 

data/sig/client.rbs

@@ -39,7 +39,9 @@ module Aws
                       ?logger: untyped,
                       ?max_attempts: Integer,
                       ?profile: String,
+                      ?request_checksum_calculation: String,
                       ?request_min_compression_size_bytes: Integer,
+                      ?response_checksum_validation: String,
                       ?retry_backoff: Proc,
                       ?retry_base_delay: Float,
                       ?retry_jitter: (:none | :equal | :full | ^(Integer) -> Integer),
@@ -114,7 +116,8 @@ module Aws
                                          },
                                        ]?
                                      },
-                                   ]?
+                                   ]?,
+                                   cedar_json: ::String?
                                  },
                                  requests: Array[
                                    {
@@ -131,7 +134,8 @@ module Aws
                                        entity_id: ::String
                                      }?,
                                      context: {
-                                       context_map: Hash[::String, untyped]?
+                                       context_map: Hash[::String, untyped]?,
+                                       cedar_json: ::String?
                                      }?
                                    },
                                  ]
@@ -163,7 +167,8 @@ module Aws
                                                     },
                                                   ]?
                                                 },
-                                              ]?
+                                              ]?,
+                                              cedar_json: ::String?
                                             },
                                             requests: Array[
                                               {
@@ -176,7 +181,8 @@ module Aws
                                                   entity_id: ::String
                                                 }?,
                                                 context: {
-                                                  context_map: Hash[::String, untyped]?
+                                                  context_map: Hash[::String, untyped]?,
+                                                  cedar_json: ::String?
                                                 }?
                                               },
                                             ]
@@ -437,7 +443,8 @@ module Aws
                              entity_id: ::String
                            },
                            ?context: {
-                             context_map: Hash[::String, untyped]?
+                             context_map: Hash[::String, untyped]?,
+                             cedar_json: ::String?
                            },
                            ?entities: {
                              entity_list: Array[
@@ -454,7 +461,8 @@ module Aws
                                    },
                                  ]?
                                },
-                             ]?
+                             ]?,
+                             cedar_json: ::String?
                            }
                          ) -> _IsAuthorizedResponseSuccess
                        | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _IsAuthorizedResponseSuccess
@@ -480,7 +488,8 @@ module Aws
                                         entity_id: ::String
                                       },
                                       ?context: {
-                                        context_map: Hash[::String, untyped]?
+                                        context_map: Hash[::String, untyped]?,
+                                        cedar_json: ::String?
                                       },
                                       ?entities: {
                                         entity_list: Array[
@@ -497,7 +506,8 @@ module Aws
                                               },
                                             ]?
                                           },
-                                        ]?
+                                        ]?,
+                                        cedar_json: ::String?
                                       }
                                     ) -> _IsAuthorizedWithTokenResponseSuccess
                                   | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _IsAuthorizedWithTokenResponseSuccess

data/sig/resource.rbs

@@ -39,7 +39,9 @@ module Aws
                         ?logger: untyped,
                         ?max_attempts: Integer,
                         ?profile: String,
+                        ?request_checksum_calculation: String,
                         ?request_min_compression_size_bytes: Integer,
+                        ?response_checksum_validation: String,
                         ?retry_backoff: Proc,
                         ?retry_base_delay: Float,
                         ?retry_jitter: (:none | :equal | :full | ^(Integer) -> Integer),

data/sig/types.rbs

@@ -232,11 +232,14 @@ module Aws::VerifiedPermissions
 
     class ContextDefinition
       attr_accessor context_map: ::Hash[::String, Types::AttributeValue]
+      attr_accessor cedar_json: ::String
       attr_accessor unknown: untyped
-      SENSITIVE: [:context_map]
+      SENSITIVE: [:context_map, :cedar_json]
 
       class ContextMap < ContextDefinition
       end
+      class CedarJson < ContextDefinition
+      end
       class Unknown < ContextDefinition
       end
     end
@@ -350,11 +353,14 @@ module Aws::VerifiedPermissions
 
     class EntitiesDefinition
       attr_accessor entity_list: ::Array[Types::EntityItem]
+      attr_accessor cedar_json: ::String
       attr_accessor unknown: untyped
-      SENSITIVE: []
+      SENSITIVE: [:cedar_json]
 
       class EntityList < EntitiesDefinition
       end
+      class CedarJson < EntitiesDefinition
+      end
       class Unknown < EntitiesDefinition
       end
     end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-verifiedpermissions
 version: !ruby/object:Gem::Version
-  version: 1.38.0
+  version: 1.40.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-11-18 00:00:00.000000000 Z
+date: 2025-01-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core
@@ -19,7 +19,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.210.0
+        version: 3.216.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -29,7 +29,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.210.0
+        version: 3.216.0
 - !ruby/object:Gem::Dependency
   name: aws-sigv4
   requirement: !ruby/object:Gem::Requirement