aws-sdk-verifiedpermissions 1.7.0 → 1.9.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +10 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-verifiedpermissions/client.rb +180 -55
- data/lib/aws-sdk-verifiedpermissions/types.rb +87 -70
- data/lib/aws-sdk-verifiedpermissions.rb +1 -1
- metadata +2 -2
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 83cad55f6bb678338569f4425ca119c344a28f3f263716d2d74b960b9a5c8f4a
|
4
|
+
data.tar.gz: 8c24e7cbc36c6a0e9573d7f5454e9013d63da2d1ea4d397c21ecab0dc45b27bc
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 07f289382374f7d33fc9a1871fd3e2d2608e9d5c18405f7309c2d4ac1a6663acb41825fc5a709f0dc454622d9f52720f5cc4488b34b5dd1ebb8238aab5829f5d
|
7
|
+
data.tar.gz: '08f5808dcc4ea525023c8454b964c63c05288c0d757b36b0eb599bb81a131ca748922d240992a693a2563f04559c5c05445b8364ed1c4cf7bf9f501f51871f76'
|
data/CHANGELOG.md
CHANGED
@@ -1,6 +1,16 @@
|
|
1
1
|
Unreleased Changes
|
2
2
|
------------------
|
3
3
|
|
4
|
+
1.9.0 (2023-08-24)
|
5
|
+
------------------
|
6
|
+
|
7
|
+
* Feature - Documentation updates for Amazon Verified Permissions.
|
8
|
+
|
9
|
+
1.8.0 (2023-08-22)
|
10
|
+
------------------
|
11
|
+
|
12
|
+
* Feature - Documentation updates for Amazon Verified Permissions. Increases max results per page for ListPolicyStores, ListPolicies, and ListPolicyTemplates APIs from 20 to 50.
|
13
|
+
|
4
14
|
1.7.0 (2023-07-11)
|
5
15
|
------------------
|
6
16
|
|
data/VERSION
CHANGED
@@ -1 +1 @@
|
|
1
|
-
1.
|
1
|
+
1.9.0
|
@@ -432,6 +432,14 @@ module Aws::VerifiedPermissions
|
|
432
432
|
#
|
433
433
|
# </note>
|
434
434
|
#
|
435
|
+
# <note markdown="1"> Verified Permissions is <i> <a
|
436
|
+
# href="https://wikipedia.org/wiki/Eventual_consistency">eventually
|
437
|
+
# consistent</a> </i>. It can take a few seconds for a new or changed
|
438
|
+
# element to be propagate through the service and be visible in the
|
439
|
+
# results of other Verified Permissions operations.
|
440
|
+
#
|
441
|
+
# </note>
|
442
|
+
#
|
435
443
|
#
|
436
444
|
#
|
437
445
|
# [1]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html
|
@@ -536,6 +544,14 @@ module Aws::VerifiedPermissions
|
|
536
544
|
#
|
537
545
|
# </note>
|
538
546
|
#
|
547
|
+
# <note markdown="1"> Verified Permissions is <i> <a
|
548
|
+
# href="https://wikipedia.org/wiki/Eventual_consistency">eventually
|
549
|
+
# consistent</a> </i>. It can take a few seconds for a new or changed
|
550
|
+
# element to be propagate through the service and be visible in the
|
551
|
+
# results of other Verified Permissions operations.
|
552
|
+
#
|
553
|
+
# </note>
|
554
|
+
#
|
539
555
|
# @option params [String] :client_token
|
540
556
|
# Specifies a unique, case-sensitive ID that you provide to ensure the
|
541
557
|
# idempotency of the request. This lets you safely retry the request
|
@@ -631,6 +647,14 @@ module Aws::VerifiedPermissions
|
|
631
647
|
#
|
632
648
|
# </note>
|
633
649
|
#
|
650
|
+
# <note markdown="1"> Verified Permissions is <i> <a
|
651
|
+
# href="https://wikipedia.org/wiki/Eventual_consistency">eventually
|
652
|
+
# consistent</a> </i>. It can take a few seconds for a new or changed
|
653
|
+
# element to be propagate through the service and be visible in the
|
654
|
+
# results of other Verified Permissions operations.
|
655
|
+
#
|
656
|
+
# </note>
|
657
|
+
#
|
634
658
|
#
|
635
659
|
#
|
636
660
|
# [1]: https://docs.cedarpolicy.com/schema.html#namespace
|
@@ -714,6 +738,14 @@ module Aws::VerifiedPermissions
|
|
714
738
|
# template. If the template changes, then any policies that are linked
|
715
739
|
# to that template are immediately updated as well.
|
716
740
|
#
|
741
|
+
# <note markdown="1"> Verified Permissions is <i> <a
|
742
|
+
# href="https://wikipedia.org/wiki/Eventual_consistency">eventually
|
743
|
+
# consistent</a> </i>. It can take a few seconds for a new or changed
|
744
|
+
# element to be propagate through the service and be visible in the
|
745
|
+
# results of other Verified Permissions operations.
|
746
|
+
#
|
747
|
+
# </note>
|
748
|
+
#
|
717
749
|
# @option params [String] :client_token
|
718
750
|
# Specifies a unique, case-sensitive ID that you provide to ensure the
|
719
751
|
# idempotency of the request. This lets you safely retry the request
|
@@ -1226,17 +1258,36 @@ module Aws::VerifiedPermissions
|
|
1226
1258
|
|
1227
1259
|
# Makes an authorization decision about a service request described in
|
1228
1260
|
# the parameters. The principal in this request comes from an external
|
1229
|
-
# identity source
|
1261
|
+
# identity source in the form of an identity token formatted as a [JSON
|
1262
|
+
# web token (JWT)][1]. The information in the parameters can also define
|
1230
1263
|
# additional context that Verified Permissions can include in the
|
1231
1264
|
# evaluation. The request is evaluated against all matching policies in
|
1232
1265
|
# the specified policy store. The result of the decision is either
|
1233
1266
|
# `Allow` or `Deny`, along with a list of the policies that resulted in
|
1234
1267
|
# the decision.
|
1235
1268
|
#
|
1269
|
+
# If you specify the `identityToken` parameter, then this operation
|
1270
|
+
# derives the principal from that token. You must not also include that
|
1271
|
+
# principal in the `entities` parameter or the operation fails and
|
1272
|
+
# reports a conflict between the two entity sources.
|
1273
|
+
#
|
1274
|
+
# If you provide only an `accessToken`, then you can include the entity
|
1275
|
+
# as part of the `entities` parameter to provide additional attributes.
|
1276
|
+
#
|
1277
|
+
# At this time, Verified Permissions accepts tokens from only Amazon
|
1278
|
+
# Cognito.
|
1279
|
+
#
|
1280
|
+
# Verified Permissions validates each token that is specified in a
|
1281
|
+
# request by checking its expiration date and its signature.
|
1282
|
+
#
|
1236
1283
|
# If you delete a Amazon Cognito user pool or user, tokens from that
|
1237
1284
|
# deleted pool or that deleted user continue to be usable until they
|
1238
1285
|
# expire.
|
1239
1286
|
#
|
1287
|
+
#
|
1288
|
+
#
|
1289
|
+
# [1]: https://wikipedia.org/wiki/JSON_Web_Token
|
1290
|
+
#
|
1240
1291
|
# @option params [required, String] :policy_store_id
|
1241
1292
|
# Specifies the ID of the policy store. Policies in this policy store
|
1242
1293
|
# will be used to make an authorization decision for the input.
|
@@ -1245,13 +1296,13 @@ module Aws::VerifiedPermissions
|
|
1245
1296
|
# Specifies an identity token for the principal to be authorized. This
|
1246
1297
|
# token is provided to you by the identity provider (IdP) associated
|
1247
1298
|
# with the specified identity source. You must specify either an
|
1248
|
-
# `AccessToken` or an `IdentityToken`,
|
1299
|
+
# `AccessToken` or an `IdentityToken`, or both.
|
1249
1300
|
#
|
1250
1301
|
# @option params [String] :access_token
|
1251
1302
|
# Specifies an access token for the principal to be authorized. This
|
1252
1303
|
# token is provided to you by the identity provider (IdP) associated
|
1253
1304
|
# with the specified identity source. You must specify either an
|
1254
|
-
# `AccessToken
|
1305
|
+
# `AccessToken`, or an `IdentityToken`, or both.
|
1255
1306
|
#
|
1256
1307
|
# @option params [Types::ActionIdentifier] :action
|
1257
1308
|
# Specifies the requested action to be authorized. Is the specified
|
@@ -1267,13 +1318,18 @@ module Aws::VerifiedPermissions
|
|
1267
1318
|
# authorization decisions.
|
1268
1319
|
#
|
1269
1320
|
# @option params [Types::EntitiesDefinition] :entities
|
1270
|
-
# Specifies the list of resources and
|
1271
|
-
#
|
1272
|
-
# policies.
|
1321
|
+
# Specifies the list of resources and their associated attributes that
|
1322
|
+
# Verified Permissions can examine when evaluating the policies.
|
1273
1323
|
#
|
1274
|
-
# <note markdown="1"> You can include only
|
1275
|
-
#
|
1276
|
-
#
|
1324
|
+
# <note markdown="1"> You can include only resource and action entities in this parameter;
|
1325
|
+
# you can't include principals.
|
1326
|
+
#
|
1327
|
+
# * The `IsAuthorizedWithToken` operation takes principal attributes
|
1328
|
+
# from <b> <i>only</i> </b> the `identityToken` or `accessToken`
|
1329
|
+
# passed to the operation.
|
1330
|
+
#
|
1331
|
+
# * For action entities, you can include only their `Identifier` and
|
1332
|
+
# `EntityType`.
|
1277
1333
|
#
|
1278
1334
|
# </note>
|
1279
1335
|
#
|
@@ -1355,16 +1411,18 @@ module Aws::VerifiedPermissions
|
|
1355
1411
|
# response to request the next page of results.
|
1356
1412
|
#
|
1357
1413
|
# @option params [Integer] :max_results
|
1358
|
-
# Specifies the total number of results that you want included
|
1359
|
-
#
|
1360
|
-
#
|
1361
|
-
#
|
1362
|
-
#
|
1363
|
-
#
|
1364
|
-
#
|
1365
|
-
#
|
1366
|
-
#
|
1367
|
-
#
|
1414
|
+
# Specifies the total number of results that you want included in each
|
1415
|
+
# response. If additional items exist beyond the number you specify, the
|
1416
|
+
# `NextToken` response element is returned with a value (not null).
|
1417
|
+
# Include the specified value as the `NextToken` request parameter in
|
1418
|
+
# the next call to the operation to get the next set of results. Note
|
1419
|
+
# that the service might return fewer results than the maximum even when
|
1420
|
+
# there are more results available. You should check `NextToken` after
|
1421
|
+
# every operation to ensure that you receive all of the results.
|
1422
|
+
#
|
1423
|
+
# If you do not specify this parameter, the operation defaults to 10
|
1424
|
+
# identity sources per response. You can specify a maximum of 200
|
1425
|
+
# identity sources per response.
|
1368
1426
|
#
|
1369
1427
|
# @option params [Array<Types::IdentitySourceFilter>] :filters
|
1370
1428
|
# Specifies characteristics of an identity source that you can use to
|
@@ -1428,16 +1486,18 @@ module Aws::VerifiedPermissions
|
|
1428
1486
|
# response to request the next page of results.
|
1429
1487
|
#
|
1430
1488
|
# @option params [Integer] :max_results
|
1431
|
-
# Specifies the total number of results that you want included
|
1432
|
-
#
|
1433
|
-
#
|
1434
|
-
#
|
1435
|
-
#
|
1436
|
-
#
|
1437
|
-
#
|
1438
|
-
#
|
1439
|
-
#
|
1440
|
-
#
|
1489
|
+
# Specifies the total number of results that you want included in each
|
1490
|
+
# response. If additional items exist beyond the number you specify, the
|
1491
|
+
# `NextToken` response element is returned with a value (not null).
|
1492
|
+
# Include the specified value as the `NextToken` request parameter in
|
1493
|
+
# the next call to the operation to get the next set of results. Note
|
1494
|
+
# that the service might return fewer results than the maximum even when
|
1495
|
+
# there are more results available. You should check `NextToken` after
|
1496
|
+
# every operation to ensure that you receive all of the results.
|
1497
|
+
#
|
1498
|
+
# If you do not specify this parameter, the operation defaults to 10
|
1499
|
+
# policies per response. You can specify a maximum of 50 policies per
|
1500
|
+
# response.
|
1441
1501
|
#
|
1442
1502
|
# @option params [Types::PolicyFilter] :filter
|
1443
1503
|
# Specifies a filter that limits the response to only policies that
|
@@ -1517,16 +1577,18 @@ module Aws::VerifiedPermissions
|
|
1517
1577
|
# response to request the next page of results.
|
1518
1578
|
#
|
1519
1579
|
# @option params [Integer] :max_results
|
1520
|
-
# Specifies the total number of results that you want included
|
1521
|
-
#
|
1522
|
-
#
|
1523
|
-
#
|
1524
|
-
#
|
1525
|
-
#
|
1526
|
-
#
|
1527
|
-
#
|
1528
|
-
#
|
1529
|
-
#
|
1580
|
+
# Specifies the total number of results that you want included in each
|
1581
|
+
# response. If additional items exist beyond the number you specify, the
|
1582
|
+
# `NextToken` response element is returned with a value (not null).
|
1583
|
+
# Include the specified value as the `NextToken` request parameter in
|
1584
|
+
# the next call to the operation to get the next set of results. Note
|
1585
|
+
# that the service might return fewer results than the maximum even when
|
1586
|
+
# there are more results available. You should check `NextToken` after
|
1587
|
+
# every operation to ensure that you receive all of the results.
|
1588
|
+
#
|
1589
|
+
# If you do not specify this parameter, the operation defaults to 10
|
1590
|
+
# policy stores per response. You can specify a maximum of 50 policy
|
1591
|
+
# stores per response.
|
1530
1592
|
#
|
1531
1593
|
# @return [Types::ListPolicyStoresOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
1532
1594
|
#
|
@@ -1574,16 +1636,18 @@ module Aws::VerifiedPermissions
|
|
1574
1636
|
# response to request the next page of results.
|
1575
1637
|
#
|
1576
1638
|
# @option params [Integer] :max_results
|
1577
|
-
# Specifies the total number of results that you want included
|
1578
|
-
#
|
1579
|
-
#
|
1580
|
-
#
|
1581
|
-
#
|
1582
|
-
#
|
1583
|
-
#
|
1584
|
-
#
|
1585
|
-
#
|
1586
|
-
#
|
1639
|
+
# Specifies the total number of results that you want included in each
|
1640
|
+
# response. If additional items exist beyond the number you specify, the
|
1641
|
+
# `NextToken` response element is returned with a value (not null).
|
1642
|
+
# Include the specified value as the `NextToken` request parameter in
|
1643
|
+
# the next call to the operation to get the next set of results. Note
|
1644
|
+
# that the service might return fewer results than the maximum even when
|
1645
|
+
# there are more results available. You should check `NextToken` after
|
1646
|
+
# every operation to ensure that you receive all of the results.
|
1647
|
+
#
|
1648
|
+
# If you do not specify this parameter, the operation defaults to 10
|
1649
|
+
# policy templates per response. You can specify a maximum of 50 policy
|
1650
|
+
# templates per response.
|
1587
1651
|
#
|
1588
1652
|
# @return [Types::ListPolicyTemplatesOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
1589
1653
|
#
|
@@ -1627,6 +1691,14 @@ module Aws::VerifiedPermissions
|
|
1627
1691
|
# schema. If you later update a policy, then it is evaluated against the
|
1628
1692
|
# new schema at that time.
|
1629
1693
|
#
|
1694
|
+
# <note markdown="1"> Verified Permissions is <i> <a
|
1695
|
+
# href="https://wikipedia.org/wiki/Eventual_consistency">eventually
|
1696
|
+
# consistent</a> </i>. It can take a few seconds for a new or changed
|
1697
|
+
# element to be propagate through the service and be visible in the
|
1698
|
+
# results of other Verified Permissions operations.
|
1699
|
+
#
|
1700
|
+
# </note>
|
1701
|
+
#
|
1630
1702
|
# @option params [required, String] :policy_store_id
|
1631
1703
|
# Specifies the ID of the policy store in which to place the schema.
|
1632
1704
|
#
|
@@ -1671,6 +1743,14 @@ module Aws::VerifiedPermissions
|
|
1671
1743
|
# (IdP) source, or to change the mapping of identities from the IdP to a
|
1672
1744
|
# different principal entity type.
|
1673
1745
|
#
|
1746
|
+
# <note markdown="1"> Verified Permissions is <i> <a
|
1747
|
+
# href="https://wikipedia.org/wiki/Eventual_consistency">eventually
|
1748
|
+
# consistent</a> </i>. It can take a few seconds for a new or changed
|
1749
|
+
# element to be propagate through the service and be visible in the
|
1750
|
+
# results of other Verified Permissions operations.
|
1751
|
+
#
|
1752
|
+
# </note>
|
1753
|
+
#
|
1674
1754
|
# @option params [required, String] :policy_store_id
|
1675
1755
|
# Specifies the ID of the policy store that contains the identity source
|
1676
1756
|
# that you want to update.
|
@@ -1736,11 +1816,40 @@ module Aws::VerifiedPermissions
|
|
1736
1816
|
# template-linked policy, you must update the template instead, using
|
1737
1817
|
# [UpdatePolicyTemplate][2].
|
1738
1818
|
#
|
1739
|
-
# <note markdown="1"> If policy validation is enabled in the policy store, then updating a
|
1740
|
-
#
|
1741
|
-
#
|
1742
|
-
#
|
1743
|
-
#
|
1819
|
+
# <note markdown="1"> * If policy validation is enabled in the policy store, then updating a
|
1820
|
+
# static policy causes Verified Permissions to validate the policy
|
1821
|
+
# against the schema in the policy store. If the updated static policy
|
1822
|
+
# doesn't pass validation, the operation fails and the update isn't
|
1823
|
+
# stored.
|
1824
|
+
#
|
1825
|
+
# * When you edit a static policy, You can change only certain elements
|
1826
|
+
# of a static policy:
|
1827
|
+
#
|
1828
|
+
# * The action referenced by the policy.
|
1829
|
+
#
|
1830
|
+
# * A condition clause, such as when and unless.
|
1831
|
+
#
|
1832
|
+
# You can't change these elements of a static policy:
|
1833
|
+
#
|
1834
|
+
# * Changing a policy from a static policy to a template-linked
|
1835
|
+
# policy.
|
1836
|
+
#
|
1837
|
+
# * Changing the effect of a static policy from permit or forbid.
|
1838
|
+
#
|
1839
|
+
# * The principal referenced by a static policy.
|
1840
|
+
#
|
1841
|
+
# * The resource referenced by a static policy.
|
1842
|
+
#
|
1843
|
+
# * To update a template-linked policy, you must update the template
|
1844
|
+
# instead.
|
1845
|
+
#
|
1846
|
+
# </note>
|
1847
|
+
#
|
1848
|
+
# <note markdown="1"> Verified Permissions is <i> <a
|
1849
|
+
# href="https://wikipedia.org/wiki/Eventual_consistency">eventually
|
1850
|
+
# consistent</a> </i>. It can take a few seconds for a new or changed
|
1851
|
+
# element to be propagate through the service and be visible in the
|
1852
|
+
# results of other Verified Permissions operations.
|
1744
1853
|
#
|
1745
1854
|
# </note>
|
1746
1855
|
#
|
@@ -1828,6 +1937,14 @@ module Aws::VerifiedPermissions
|
|
1828
1937
|
|
1829
1938
|
# Modifies the validation setting for a policy store.
|
1830
1939
|
#
|
1940
|
+
# <note markdown="1"> Verified Permissions is <i> <a
|
1941
|
+
# href="https://wikipedia.org/wiki/Eventual_consistency">eventually
|
1942
|
+
# consistent</a> </i>. It can take a few seconds for a new or changed
|
1943
|
+
# element to be propagate through the service and be visible in the
|
1944
|
+
# results of other Verified Permissions operations.
|
1945
|
+
#
|
1946
|
+
# </note>
|
1947
|
+
#
|
1831
1948
|
# @option params [required, String] :policy_store_id
|
1832
1949
|
# Specifies the ID of the policy store that you want to update
|
1833
1950
|
#
|
@@ -1874,6 +1991,14 @@ module Aws::VerifiedPermissions
|
|
1874
1991
|
# reflected in authorization decisions that involve all template-linked
|
1875
1992
|
# policies instantiated from this template.
|
1876
1993
|
#
|
1994
|
+
# <note markdown="1"> Verified Permissions is <i> <a
|
1995
|
+
# href="https://wikipedia.org/wiki/Eventual_consistency">eventually
|
1996
|
+
# consistent</a> </i>. It can take a few seconds for a new or changed
|
1997
|
+
# element to be propagate through the service and be visible in the
|
1998
|
+
# results of other Verified Permissions operations.
|
1999
|
+
#
|
2000
|
+
# </note>
|
2001
|
+
#
|
1877
2002
|
#
|
1878
2003
|
#
|
1879
2004
|
# [1]: https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_UpdatePolicyTemplate.html#amazonverifiedpermissions-UpdatePolicyTemplate-request-policyBody
|
@@ -1951,7 +2076,7 @@ module Aws::VerifiedPermissions
|
|
1951
2076
|
params: params,
|
1952
2077
|
config: config)
|
1953
2078
|
context[:gem_name] = 'aws-sdk-verifiedpermissions'
|
1954
|
-
context[:gem_version] = '1.
|
2079
|
+
context[:gem_version] = '1.9.0'
|
1955
2080
|
Seahorse::Client::Request.new(handlers, context)
|
1956
2081
|
end
|
1957
2082
|
|
@@ -49,7 +49,7 @@ module Aws::VerifiedPermissions
|
|
49
49
|
class ActionIdentifier < Struct.new(
|
50
50
|
:action_type,
|
51
51
|
:action_id)
|
52
|
-
SENSITIVE = []
|
52
|
+
SENSITIVE = [:action_type, :action_id]
|
53
53
|
include Aws::Structure
|
54
54
|
end
|
55
55
|
|
@@ -141,7 +141,7 @@ module Aws::VerifiedPermissions
|
|
141
141
|
:set,
|
142
142
|
:record,
|
143
143
|
:unknown)
|
144
|
-
SENSITIVE = []
|
144
|
+
SENSITIVE = [:boolean, :long, :string]
|
145
145
|
include Aws::Structure
|
146
146
|
include Aws::Structure::Union
|
147
147
|
|
@@ -356,7 +356,7 @@ module Aws::VerifiedPermissions
|
|
356
356
|
:policy_store_id,
|
357
357
|
:configuration,
|
358
358
|
:principal_entity_type)
|
359
|
-
SENSITIVE = []
|
359
|
+
SENSITIVE = [:principal_entity_type]
|
360
360
|
include Aws::Structure
|
361
361
|
end
|
362
362
|
|
@@ -597,7 +597,7 @@ module Aws::VerifiedPermissions
|
|
597
597
|
:policy_store_id,
|
598
598
|
:description,
|
599
599
|
:statement)
|
600
|
-
SENSITIVE = []
|
600
|
+
SENSITIVE = [:description, :statement]
|
601
601
|
include Aws::Structure
|
602
602
|
end
|
603
603
|
|
@@ -804,7 +804,7 @@ module Aws::VerifiedPermissions
|
|
804
804
|
class EntityIdentifier < Struct.new(
|
805
805
|
:entity_type,
|
806
806
|
:entity_id)
|
807
|
-
SENSITIVE = []
|
807
|
+
SENSITIVE = [:entity_type, :entity_id]
|
808
808
|
include Aws::Structure
|
809
809
|
end
|
810
810
|
|
@@ -814,9 +814,9 @@ module Aws::VerifiedPermissions
|
|
814
814
|
# This data type is used as one of the fields in the
|
815
815
|
# [EntitiesDefinition][1] structure.
|
816
816
|
#
|
817
|
-
# `\{ "
|
818
|
-
# \}, "
|
819
|
-
# "entityId": "alice_folder" \} ] \}`
|
817
|
+
# `\{ "identifier": \{ "entityType": "Photo", "entityId":
|
818
|
+
# "VacationPhoto94.jpg" \}, "attributes": \{\}, "parents": [ \{
|
819
|
+
# "entityType": "Album", "entityId": "alice_folder" \} ] \}`
|
820
820
|
#
|
821
821
|
#
|
822
822
|
#
|
@@ -958,7 +958,7 @@ module Aws::VerifiedPermissions
|
|
958
958
|
:last_updated_date,
|
959
959
|
:policy_store_id,
|
960
960
|
:principal_entity_type)
|
961
|
-
SENSITIVE = []
|
961
|
+
SENSITIVE = [:principal_entity_type]
|
962
962
|
include Aws::Structure
|
963
963
|
end
|
964
964
|
|
@@ -1131,7 +1131,7 @@ module Aws::VerifiedPermissions
|
|
1131
1131
|
:statement,
|
1132
1132
|
:created_date,
|
1133
1133
|
:last_updated_date)
|
1134
|
-
SENSITIVE = []
|
1134
|
+
SENSITIVE = [:description, :statement]
|
1135
1135
|
include Aws::Structure
|
1136
1136
|
end
|
1137
1137
|
|
@@ -1170,7 +1170,7 @@ module Aws::VerifiedPermissions
|
|
1170
1170
|
:schema,
|
1171
1171
|
:created_date,
|
1172
1172
|
:last_updated_date)
|
1173
|
-
SENSITIVE = []
|
1173
|
+
SENSITIVE = [:schema]
|
1174
1174
|
include Aws::Structure
|
1175
1175
|
end
|
1176
1176
|
|
@@ -1245,7 +1245,7 @@ module Aws::VerifiedPermissions
|
|
1245
1245
|
#
|
1246
1246
|
class IdentitySourceFilter < Struct.new(
|
1247
1247
|
:principal_entity_type)
|
1248
|
-
SENSITIVE = []
|
1248
|
+
SENSITIVE = [:principal_entity_type]
|
1249
1249
|
include Aws::Structure
|
1250
1250
|
end
|
1251
1251
|
|
@@ -1294,7 +1294,7 @@ module Aws::VerifiedPermissions
|
|
1294
1294
|
:last_updated_date,
|
1295
1295
|
:policy_store_id,
|
1296
1296
|
:principal_entity_type)
|
1297
|
-
SENSITIVE = []
|
1297
|
+
SENSITIVE = [:principal_entity_type]
|
1298
1298
|
include Aws::Structure
|
1299
1299
|
end
|
1300
1300
|
|
@@ -1449,14 +1449,14 @@ module Aws::VerifiedPermissions
|
|
1449
1449
|
# Specifies an identity token for the principal to be authorized. This
|
1450
1450
|
# token is provided to you by the identity provider (IdP) associated
|
1451
1451
|
# with the specified identity source. You must specify either an
|
1452
|
-
# `AccessToken` or an `IdentityToken`,
|
1452
|
+
# `AccessToken` or an `IdentityToken`, or both.
|
1453
1453
|
# @return [String]
|
1454
1454
|
#
|
1455
1455
|
# @!attribute [rw] access_token
|
1456
1456
|
# Specifies an access token for the principal to be authorized. This
|
1457
1457
|
# token is provided to you by the identity provider (IdP) associated
|
1458
1458
|
# with the specified identity source. You must specify either an
|
1459
|
-
# `AccessToken
|
1459
|
+
# `AccessToken`, or an `IdentityToken`, or both.
|
1460
1460
|
# @return [String]
|
1461
1461
|
#
|
1462
1462
|
# @!attribute [rw] action
|
@@ -1477,13 +1477,18 @@ module Aws::VerifiedPermissions
|
|
1477
1477
|
# @return [Types::ContextDefinition]
|
1478
1478
|
#
|
1479
1479
|
# @!attribute [rw] entities
|
1480
|
-
# Specifies the list of resources and
|
1481
|
-
#
|
1482
|
-
# policies.
|
1480
|
+
# Specifies the list of resources and their associated attributes that
|
1481
|
+
# Verified Permissions can examine when evaluating the policies.
|
1483
1482
|
#
|
1484
|
-
# <note markdown="1"> You can include only
|
1485
|
-
#
|
1486
|
-
#
|
1483
|
+
# <note markdown="1"> You can include only resource and action entities in this parameter;
|
1484
|
+
# you can't include principals.
|
1485
|
+
#
|
1486
|
+
# * The `IsAuthorizedWithToken` operation takes principal attributes
|
1487
|
+
# from <b> <i>only</i> </b> the `identityToken` or `accessToken`
|
1488
|
+
# passed to the operation.
|
1489
|
+
#
|
1490
|
+
# * For action entities, you can include only their `Identifier` and
|
1491
|
+
# `EntityType`.
|
1487
1492
|
#
|
1488
1493
|
# </note>
|
1489
1494
|
# @return [Types::EntitiesDefinition]
|
@@ -1498,7 +1503,7 @@ module Aws::VerifiedPermissions
|
|
1498
1503
|
:resource,
|
1499
1504
|
:context,
|
1500
1505
|
:entities)
|
1501
|
-
SENSITIVE = []
|
1506
|
+
SENSITIVE = [:identity_token, :access_token]
|
1502
1507
|
include Aws::Structure
|
1503
1508
|
end
|
1504
1509
|
|
@@ -1547,16 +1552,19 @@ module Aws::VerifiedPermissions
|
|
1547
1552
|
# @return [String]
|
1548
1553
|
#
|
1549
1554
|
# @!attribute [rw] max_results
|
1550
|
-
# Specifies the total number of results that you want included
|
1551
|
-
#
|
1552
|
-
#
|
1553
|
-
#
|
1554
|
-
#
|
1555
|
-
#
|
1556
|
-
#
|
1557
|
-
#
|
1558
|
-
# results
|
1559
|
-
#
|
1555
|
+
# Specifies the total number of results that you want included in each
|
1556
|
+
# response. If additional items exist beyond the number you specify,
|
1557
|
+
# the `NextToken` response element is returned with a value (not
|
1558
|
+
# null). Include the specified value as the `NextToken` request
|
1559
|
+
# parameter in the next call to the operation to get the next set of
|
1560
|
+
# results. Note that the service might return fewer results than the
|
1561
|
+
# maximum even when there are more results available. You should check
|
1562
|
+
# `NextToken` after every operation to ensure that you receive all of
|
1563
|
+
# the results.
|
1564
|
+
#
|
1565
|
+
# If you do not specify this parameter, the operation defaults to 10
|
1566
|
+
# identity sources per response. You can specify a maximum of 200
|
1567
|
+
# identity sources per response.
|
1560
1568
|
# @return [Integer]
|
1561
1569
|
#
|
1562
1570
|
# @!attribute [rw] filters
|
@@ -1610,16 +1618,19 @@ module Aws::VerifiedPermissions
|
|
1610
1618
|
# @return [String]
|
1611
1619
|
#
|
1612
1620
|
# @!attribute [rw] max_results
|
1613
|
-
# Specifies the total number of results that you want included
|
1614
|
-
#
|
1615
|
-
#
|
1616
|
-
#
|
1617
|
-
#
|
1618
|
-
#
|
1619
|
-
#
|
1620
|
-
#
|
1621
|
-
# results
|
1622
|
-
#
|
1621
|
+
# Specifies the total number of results that you want included in each
|
1622
|
+
# response. If additional items exist beyond the number you specify,
|
1623
|
+
# the `NextToken` response element is returned with a value (not
|
1624
|
+
# null). Include the specified value as the `NextToken` request
|
1625
|
+
# parameter in the next call to the operation to get the next set of
|
1626
|
+
# results. Note that the service might return fewer results than the
|
1627
|
+
# maximum even when there are more results available. You should check
|
1628
|
+
# `NextToken` after every operation to ensure that you receive all of
|
1629
|
+
# the results.
|
1630
|
+
#
|
1631
|
+
# If you do not specify this parameter, the operation defaults to 10
|
1632
|
+
# policies per response. You can specify a maximum of 50 policies per
|
1633
|
+
# response.
|
1623
1634
|
# @return [Integer]
|
1624
1635
|
#
|
1625
1636
|
# @!attribute [rw] filter
|
@@ -1670,16 +1681,19 @@ module Aws::VerifiedPermissions
|
|
1670
1681
|
# @return [String]
|
1671
1682
|
#
|
1672
1683
|
# @!attribute [rw] max_results
|
1673
|
-
# Specifies the total number of results that you want included
|
1674
|
-
#
|
1675
|
-
#
|
1676
|
-
#
|
1677
|
-
#
|
1678
|
-
#
|
1679
|
-
#
|
1680
|
-
#
|
1681
|
-
# results
|
1682
|
-
#
|
1684
|
+
# Specifies the total number of results that you want included in each
|
1685
|
+
# response. If additional items exist beyond the number you specify,
|
1686
|
+
# the `NextToken` response element is returned with a value (not
|
1687
|
+
# null). Include the specified value as the `NextToken` request
|
1688
|
+
# parameter in the next call to the operation to get the next set of
|
1689
|
+
# results. Note that the service might return fewer results than the
|
1690
|
+
# maximum even when there are more results available. You should check
|
1691
|
+
# `NextToken` after every operation to ensure that you receive all of
|
1692
|
+
# the results.
|
1693
|
+
#
|
1694
|
+
# If you do not specify this parameter, the operation defaults to 10
|
1695
|
+
# policy stores per response. You can specify a maximum of 50 policy
|
1696
|
+
# stores per response.
|
1683
1697
|
# @return [Integer]
|
1684
1698
|
#
|
1685
1699
|
# @see http://docs.aws.amazon.com/goto/WebAPI/verifiedpermissions-2021-12-01/ListPolicyStoresInput AWS API Documentation
|
@@ -1727,16 +1741,19 @@ module Aws::VerifiedPermissions
|
|
1727
1741
|
# @return [String]
|
1728
1742
|
#
|
1729
1743
|
# @!attribute [rw] max_results
|
1730
|
-
# Specifies the total number of results that you want included
|
1731
|
-
#
|
1732
|
-
#
|
1733
|
-
#
|
1734
|
-
#
|
1735
|
-
#
|
1736
|
-
#
|
1737
|
-
#
|
1738
|
-
# results
|
1739
|
-
#
|
1744
|
+
# Specifies the total number of results that you want included in each
|
1745
|
+
# response. If additional items exist beyond the number you specify,
|
1746
|
+
# the `NextToken` response element is returned with a value (not
|
1747
|
+
# null). Include the specified value as the `NextToken` request
|
1748
|
+
# parameter in the next call to the operation to get the next set of
|
1749
|
+
# results. Note that the service might return fewer results than the
|
1750
|
+
# maximum even when there are more results available. You should check
|
1751
|
+
# `NextToken` after every operation to ensure that you receive all of
|
1752
|
+
# the results.
|
1753
|
+
#
|
1754
|
+
# If you do not specify this parameter, the operation defaults to 10
|
1755
|
+
# policy templates per response. You can specify a maximum of 50
|
1756
|
+
# policy templates per response.
|
1740
1757
|
# @return [Integer]
|
1741
1758
|
#
|
1742
1759
|
# @see http://docs.aws.amazon.com/goto/WebAPI/verifiedpermissions-2021-12-01/ListPolicyTemplatesInput AWS API Documentation
|
@@ -2064,7 +2081,7 @@ module Aws::VerifiedPermissions
|
|
2064
2081
|
:description,
|
2065
2082
|
:created_date,
|
2066
2083
|
:last_updated_date)
|
2067
|
-
SENSITIVE = []
|
2084
|
+
SENSITIVE = [:description]
|
2068
2085
|
include Aws::Structure
|
2069
2086
|
end
|
2070
2087
|
|
@@ -2179,7 +2196,7 @@ module Aws::VerifiedPermissions
|
|
2179
2196
|
class SchemaDefinition < Struct.new(
|
2180
2197
|
:cedar_json,
|
2181
2198
|
:unknown)
|
2182
|
-
SENSITIVE = []
|
2199
|
+
SENSITIVE = [:cedar_json]
|
2183
2200
|
include Aws::Structure
|
2184
2201
|
include Aws::Structure::Union
|
2185
2202
|
|
@@ -2245,7 +2262,7 @@ module Aws::VerifiedPermissions
|
|
2245
2262
|
class StaticPolicyDefinition < Struct.new(
|
2246
2263
|
:description,
|
2247
2264
|
:statement)
|
2248
|
-
SENSITIVE = []
|
2265
|
+
SENSITIVE = [:description, :statement]
|
2249
2266
|
include Aws::Structure
|
2250
2267
|
end
|
2251
2268
|
|
@@ -2274,7 +2291,7 @@ module Aws::VerifiedPermissions
|
|
2274
2291
|
class StaticPolicyDefinitionDetail < Struct.new(
|
2275
2292
|
:description,
|
2276
2293
|
:statement)
|
2277
|
-
SENSITIVE = []
|
2294
|
+
SENSITIVE = [:description, :statement]
|
2278
2295
|
include Aws::Structure
|
2279
2296
|
end
|
2280
2297
|
|
@@ -2297,7 +2314,7 @@ module Aws::VerifiedPermissions
|
|
2297
2314
|
#
|
2298
2315
|
class StaticPolicyDefinitionItem < Struct.new(
|
2299
2316
|
:description)
|
2300
|
-
SENSITIVE = []
|
2317
|
+
SENSITIVE = [:description]
|
2301
2318
|
include Aws::Structure
|
2302
2319
|
end
|
2303
2320
|
|
@@ -2516,7 +2533,7 @@ module Aws::VerifiedPermissions
|
|
2516
2533
|
:identity_source_id,
|
2517
2534
|
:update_configuration,
|
2518
2535
|
:principal_entity_type)
|
2519
|
-
SENSITIVE = []
|
2536
|
+
SENSITIVE = [:principal_entity_type]
|
2520
2537
|
include Aws::Structure
|
2521
2538
|
end
|
2522
2539
|
|
@@ -2760,7 +2777,7 @@ module Aws::VerifiedPermissions
|
|
2760
2777
|
:policy_template_id,
|
2761
2778
|
:description,
|
2762
2779
|
:statement)
|
2763
|
-
SENSITIVE = []
|
2780
|
+
SENSITIVE = [:description, :statement]
|
2764
2781
|
include Aws::Structure
|
2765
2782
|
end
|
2766
2783
|
|
@@ -2827,7 +2844,7 @@ module Aws::VerifiedPermissions
|
|
2827
2844
|
class UpdateStaticPolicyDefinition < Struct.new(
|
2828
2845
|
:description,
|
2829
2846
|
:statement)
|
2830
|
-
SENSITIVE = []
|
2847
|
+
SENSITIVE = [:description, :statement]
|
2831
2848
|
include Aws::Structure
|
2832
2849
|
end
|
2833
2850
|
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: aws-sdk-verifiedpermissions
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 1.
|
4
|
+
version: 1.9.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Amazon Web Services
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2023-
|
11
|
+
date: 2023-08-24 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: aws-sdk-core
|