aws-sdk-verifiedpermissions 1.39.0 → 1.40.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f1f7730af22109d5a66816d9407f56c6a8dd74976ca19637302043757ef21765
-  data.tar.gz: 278d1fbf7421be649ef5ee1b3eed3700541879e6d2736e88badaa339b80a1e04
+  metadata.gz: c917446259d2c9f641698cce1c8d684cb42052455c5a98e7ca2abac121db46a8
+  data.tar.gz: de98a48dba9ee7c25341754aa9fcc9d9a0b48955a250414d48e6eae52772442a
 SHA512:
-  metadata.gz: 48e664c63fd6b90ab1279299f03280ea08d47c3a49d329cc17cdf6228673b8ba49f96347ea0b94ddcc665d15958d801d0633250b130d35fce1eea55d32621e6f
-  data.tar.gz: 8b9d65ae214cdd3f5acb6ac13536a55a8d321093cc7a5c74d7d80de467d047ec98da79b3724f237ebddfc1cf6af35213c92edba68877394798d754b9e6dba9f7
+  metadata.gz: 8e5627bfb2ebfa6016f5aec61825ed5a16cacffc17427b0116ae7977d7970d2b634dda772ab64944bdaaee5e8ec11d1c3866ce0bc6031f886253e2b34ddfaba2
+  data.tar.gz: 6ee60792291a8173ad20dc5610cf447af1166c7669acbd90d06d1e676af57aa18bd7bc61344f9ef43edf31b20787b6bff0a24afd105d43c7c6bd1d3787906486

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.40.0 (2025-01-30)
+------------------
+
+* Feature - Adds Cedar JSON format support for entities and context data in authorization requests
+
 1.39.0 (2025-01-15)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.39.0
+1.40.0

data/lib/aws-sdk-verifiedpermissions/client.rb

@@ -842,6 +842,7 @@ module Aws::VerifiedPermissions
     #           ],
     #         },
     #       ],
+    #       cedar_json: "CedarJson",
     #     },
     #     requests: [ # required
     #       {
@@ -861,6 +862,7 @@ module Aws::VerifiedPermissions
     #           context_map: {
     #             "String" => "value", # value <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
     #           },
+    #           cedar_json: "CedarJson",
     #         },
     #       },
     #     ],
@@ -877,6 +879,7 @@ module Aws::VerifiedPermissions
     #   resp.results[0].request.resource.entity_id #=> String
     #   resp.results[0].request.context.context_map #=> Hash
     #   resp.results[0].request.context.context_map["String"] #=> <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
+    #   resp.results[0].request.context.cedar_json #=> String
     #   resp.results[0].decision #=> String, one of "ALLOW", "DENY"
     #   resp.results[0].determining_policies #=> Array
     #   resp.results[0].determining_policies[0].policy_id #=> String
@@ -1130,6 +1133,7 @@ module Aws::VerifiedPermissions
     #           ],
     #         },
     #       ],
+    #       cedar_json: "CedarJson",
     #     },
     #     requests: [ # required
     #       {
@@ -1145,6 +1149,7 @@ module Aws::VerifiedPermissions
     #           context_map: {
     #             "String" => "value", # value <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
     #           },
+    #           cedar_json: "CedarJson",
     #         },
     #       },
     #     ],
@@ -1161,6 +1166,7 @@ module Aws::VerifiedPermissions
     #   resp.results[0].request.resource.entity_id #=> String
     #   resp.results[0].request.context.context_map #=> Hash
     #   resp.results[0].request.context.context_map["String"] #=> <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
+    #   resp.results[0].request.context.cedar_json #=> String
     #   resp.results[0].decision #=> String, one of "ALLOW", "DENY"
     #   resp.results[0].determining_policies #=> Array
     #   resp.results[0].determining_policies[0].policy_id #=> String
@@ -2478,6 +2484,7 @@ module Aws::VerifiedPermissions
     #       context_map: {
     #         "String" => "value", # value <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
     #       },
+    #       cedar_json: "CedarJson",
     #     },
     #     entities: {
     #       entity_list: [
@@ -2497,6 +2504,7 @@ module Aws::VerifiedPermissions
     #           ],
     #         },
     #       ],
+    #       cedar_json: "CedarJson",
     #     },
     #   })
     #
@@ -2652,6 +2660,7 @@ module Aws::VerifiedPermissions
     #       context_map: {
     #         "String" => "value", # value <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
     #       },
+    #       cedar_json: "CedarJson",
     #     },
     #     entities: {
     #       entity_list: [
@@ -2671,6 +2680,7 @@ module Aws::VerifiedPermissions
     #           ],
     #         },
     #       ],
+    #       cedar_json: "CedarJson",
     #     },
     #   })
     #
@@ -3794,7 +3804,7 @@ module Aws::VerifiedPermissions
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-verifiedpermissions'
-      context[:gem_version] = '1.39.0'
+      context[:gem_version] = '1.40.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-verifiedpermissions/client_api.rb

@@ -45,6 +45,7 @@ module Aws::VerifiedPermissions
     BatchIsAuthorizedWithTokenOutputList = Shapes::ListShape.new(name: 'BatchIsAuthorizedWithTokenOutputList')
     Boolean = Shapes::BooleanShape.new(name: 'Boolean')
     BooleanAttribute = Shapes::BooleanShape.new(name: 'BooleanAttribute')
+    CedarJson = Shapes::StringShape.new(name: 'CedarJson')
     Claim = Shapes::StringShape.new(name: 'Claim')
     ClientId = Shapes::StringShape.new(name: 'ClientId')
     ClientIds = Shapes::ListShape.new(name: 'ClientIds')
@@ -386,8 +387,10 @@ module Aws::VerifiedPermissions
     ConflictException.struct_class = Types::ConflictException
 
     ContextDefinition.add_member(:context_map, Shapes::ShapeRef.new(shape: ContextMap, location_name: "contextMap"))
+    ContextDefinition.add_member(:cedar_json, Shapes::ShapeRef.new(shape: CedarJson, location_name: "cedarJson"))
     ContextDefinition.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
     ContextDefinition.add_member_subclass(:context_map, Types::ContextDefinition::ContextMap)
+    ContextDefinition.add_member_subclass(:cedar_json, Types::ContextDefinition::CedarJson)
     ContextDefinition.add_member_subclass(:unknown, Types::ContextDefinition::Unknown)
     ContextDefinition.struct_class = Types::ContextDefinition
 
@@ -474,8 +477,10 @@ module Aws::VerifiedPermissions
     DeterminingPolicyList.member = Shapes::ShapeRef.new(shape: DeterminingPolicyItem)
 
     EntitiesDefinition.add_member(:entity_list, Shapes::ShapeRef.new(shape: EntityList, location_name: "entityList"))
+    EntitiesDefinition.add_member(:cedar_json, Shapes::ShapeRef.new(shape: CedarJson, location_name: "cedarJson"))
     EntitiesDefinition.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
     EntitiesDefinition.add_member_subclass(:entity_list, Types::EntitiesDefinition::EntityList)
+    EntitiesDefinition.add_member_subclass(:cedar_json, Types::EntitiesDefinition::CedarJson)
     EntitiesDefinition.add_member_subclass(:unknown, Types::EntitiesDefinition::Unknown)
     EntitiesDefinition.struct_class = Types::EntitiesDefinition
 

data/lib/aws-sdk-verifiedpermissions/types.rb

@@ -1007,6 +1007,11 @@ module Aws::VerifiedPermissions
     # [IsAuthorized][1], [BatchIsAuthorized][2], and
     # [IsAuthorizedWithToken][3] operations.
     #
+    # If you're passing context as part of the request, exactly one
+    # instance of `context` must be passed. If you don't want to pass
+    # context, omit the `context` parameter from your request rather than
+    # sending `context {}`.
+    #
     # Example:
     # `"context":{"contextMap":{"<KeyName1>":{"boolean":true},"<KeyName2>":{"long":1234}}}`
     #
@@ -1029,16 +1034,26 @@ module Aws::VerifiedPermissions
     #   `"contextMap":{"<KeyName1>":{"boolean":true},"<KeyName2>":{"long":1234}}`
     #   @return [Hash<String,Types::AttributeValue>]
     #
+    # @!attribute [rw] cedar_json
+    #   A Cedar JSON string representation of the context needed to
+    #   successfully evaluate an authorization request.
+    #
+    #   Example: `{"cedarJson":"{"<KeyName1>": true, "<KeyName2>":
+    #   1234}" }`
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/verifiedpermissions-2021-12-01/ContextDefinition AWS API Documentation
     #
     class ContextDefinition < Struct.new(
       :context_map,
+      :cedar_json,
       :unknown)
-      SENSITIVE = [:context_map]
+      SENSITIVE = [:context_map, :cedar_json]
       include Aws::Structure
       include Aws::Structure::Union
 
       class ContextMap < ContextDefinition; end
+      class CedarJson < ContextDefinition; end
       class Unknown < ContextDefinition; end
     end
 
@@ -1532,18 +1547,33 @@ module Aws::VerifiedPermissions
     #   authorization request. Each entity in this array must include an
     #   identifier for the entity, the attributes of the entity, and a list
     #   of any parent entities.
+    #
+    #   <note markdown="1"> If you include multiple entities with the same `identifier`, only
+    #   the last one is processed in the request.
+    #
+    #    </note>
     #   @return [Array<Types::EntityItem>]
     #
+    # @!attribute [rw] cedar_json
+    #   A Cedar JSON string representation of the entities needed to
+    #   successfully evaluate an authorization request.
+    #
+    #   Example: `{"cedarJson":
+    #   "[{"uid":{"type":"Photo","id":"VacationPhoto94.jpg"},"attrs":{"accessLevel":"public"},"parents":[]}]"}`
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/verifiedpermissions-2021-12-01/EntitiesDefinition AWS API Documentation
     #
     class EntitiesDefinition < Struct.new(
       :entity_list,
+      :cedar_json,
       :unknown)
-      SENSITIVE = []
+      SENSITIVE = [:cedar_json]
       include Aws::Structure
       include Aws::Structure::Union
 
       class EntityList < EntitiesDefinition; end
+      class CedarJson < EntitiesDefinition; end
       class Unknown < EntitiesDefinition; end
     end
 

data/lib/aws-sdk-verifiedpermissions.rb

@@ -55,7 +55,7 @@ module Aws::VerifiedPermissions
   autoload :EndpointProvider, 'aws-sdk-verifiedpermissions/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-verifiedpermissions/endpoints'
 
-  GEM_VERSION = '1.39.0'
+  GEM_VERSION = '1.40.0'
 
 end
 

data/sig/client.rbs

@@ -116,7 +116,8 @@ module Aws
                                          },
                                        ]?
                                      },
-                                   ]?
+                                   ]?,
+                                   cedar_json: ::String?
                                  },
                                  requests: Array[
                                    {
@@ -133,7 +134,8 @@ module Aws
                                        entity_id: ::String
                                      }?,
                                      context: {
-                                       context_map: Hash[::String, untyped]?
+                                       context_map: Hash[::String, untyped]?,
+                                       cedar_json: ::String?
                                      }?
                                    },
                                  ]
@@ -165,7 +167,8 @@ module Aws
                                                     },
                                                   ]?
                                                 },
-                                              ]?
+                                              ]?,
+                                              cedar_json: ::String?
                                             },
                                             requests: Array[
                                               {
@@ -178,7 +181,8 @@ module Aws
                                                   entity_id: ::String
                                                 }?,
                                                 context: {
-                                                  context_map: Hash[::String, untyped]?
+                                                  context_map: Hash[::String, untyped]?,
+                                                  cedar_json: ::String?
                                                 }?
                                               },
                                             ]
@@ -439,7 +443,8 @@ module Aws
                              entity_id: ::String
                            },
                            ?context: {
-                             context_map: Hash[::String, untyped]?
+                             context_map: Hash[::String, untyped]?,
+                             cedar_json: ::String?
                            },
                            ?entities: {
                              entity_list: Array[
@@ -456,7 +461,8 @@ module Aws
                                    },
                                  ]?
                                },
-                             ]?
+                             ]?,
+                             cedar_json: ::String?
                            }
                          ) -> _IsAuthorizedResponseSuccess
                        | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _IsAuthorizedResponseSuccess
@@ -482,7 +488,8 @@ module Aws
                                         entity_id: ::String
                                       },
                                       ?context: {
-                                        context_map: Hash[::String, untyped]?
+                                        context_map: Hash[::String, untyped]?,
+                                        cedar_json: ::String?
                                       },
                                       ?entities: {
                                         entity_list: Array[
@@ -499,7 +506,8 @@ module Aws
                                               },
                                             ]?
                                           },
-                                        ]?
+                                        ]?,
+                                        cedar_json: ::String?
                                       }
                                     ) -> _IsAuthorizedWithTokenResponseSuccess
                                   | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _IsAuthorizedWithTokenResponseSuccess

data/sig/types.rbs

@@ -232,11 +232,14 @@ module Aws::VerifiedPermissions
 
     class ContextDefinition
       attr_accessor context_map: ::Hash[::String, Types::AttributeValue]
+      attr_accessor cedar_json: ::String
       attr_accessor unknown: untyped
-      SENSITIVE: [:context_map]
+      SENSITIVE: [:context_map, :cedar_json]
 
       class ContextMap < ContextDefinition
       end
+      class CedarJson < ContextDefinition
+      end
       class Unknown < ContextDefinition
       end
     end
@@ -350,11 +353,14 @@ module Aws::VerifiedPermissions
 
     class EntitiesDefinition
       attr_accessor entity_list: ::Array[Types::EntityItem]
+      attr_accessor cedar_json: ::String
       attr_accessor unknown: untyped
-      SENSITIVE: []
+      SENSITIVE: [:cedar_json]
 
       class EntityList < EntitiesDefinition
       end
+      class CedarJson < EntitiesDefinition
+      end
       class Unknown < EntitiesDefinition
       end
     end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-verifiedpermissions
 version: !ruby/object:Gem::Version
-  version: 1.39.0
+  version: 1.40.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-01-15 00:00:00.000000000 Z
+date: 2025-01-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core