@aws-sdk/client-verifiedpermissions 3.450.0 → 3.454.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -16,7 +16,8 @@ export declare class AccessDeniedException extends __BaseException {
16
16
  * @public
17
17
  * <p>Contains information about an action for a request for which an authorization decision
18
18
  * is made.</p>
19
- * <p>This data type is used as an request parameter to the <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html">IsAuthorized</a> and <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html">IsAuthorizedWithToken</a> operations.</p>
19
+ * <p>This data type is used as a request parameter to the <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html">IsAuthorized</a>, <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html">BatchIsAuthorized</a>, and <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html">IsAuthorizedWithToken</a>
20
+ * operations.</p>
20
21
  * <p>Example: <code>\{ "actionId": "&lt;action name&gt;", "actionType": "Action"
21
22
  * \}</code>
22
23
  * </p>
@@ -60,6 +61,237 @@ export interface EntityIdentifier {
60
61
  */
61
62
  entityId: string | undefined;
62
63
  }
64
+ /**
65
+ * @public
66
+ * @enum
67
+ */
68
+ export declare const Decision: {
69
+ readonly ALLOW: "ALLOW";
70
+ readonly DENY: "DENY";
71
+ };
72
+ /**
73
+ * @public
74
+ */
75
+ export type Decision = (typeof Decision)[keyof typeof Decision];
76
+ /**
77
+ * @public
78
+ * <p>Contains information about one of the policies that determined an authorization
79
+ * decision.</p>
80
+ * <p>This data type is used as an element in a response parameter for the <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html">IsAuthorized</a>, <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html">BatchIsAuthorized</a>, and <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html">IsAuthorizedWithToken</a>
81
+ * operations.</p>
82
+ * <p>Example: <code>"determiningPolicies":[\{"policyId":"SPEXAMPLEabcdefg111111"\}]</code>
83
+ * </p>
84
+ */
85
+ export interface DeterminingPolicyItem {
86
+ /**
87
+ * @public
88
+ * <p>The Id of a policy that determined to an authorization decision.</p>
89
+ * <p>Example: <code>"policyId":"SPEXAMPLEabcdefg111111"</code>
90
+ * </p>
91
+ */
92
+ policyId: string | undefined;
93
+ }
94
+ /**
95
+ * @public
96
+ * <p>Contains a description of an evaluation error.</p>
97
+ * <p>This data type is a response parameter of the <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html">IsAuthorized</a>, <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html">BatchIsAuthorized</a>, and <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html">IsAuthorizedWithToken</a> operations.</p>
98
+ */
99
+ export interface EvaluationErrorItem {
100
+ /**
101
+ * @public
102
+ * <p>The error description.</p>
103
+ */
104
+ errorDescription: string | undefined;
105
+ }
106
+ /**
107
+ * @public
108
+ * <p>The request failed because of an internal error. Try your request again later</p>
109
+ */
110
+ export declare class InternalServerException extends __BaseException {
111
+ readonly name: "InternalServerException";
112
+ readonly $fault: "server";
113
+ $retryable: {};
114
+ /**
115
+ * @internal
116
+ */
117
+ constructor(opts: __ExceptionOptionType<InternalServerException, __BaseException>);
118
+ }
119
+ /**
120
+ * @public
121
+ * @enum
122
+ */
123
+ export declare const ResourceType: {
124
+ readonly IDENTITY_SOURCE: "IDENTITY_SOURCE";
125
+ readonly POLICY: "POLICY";
126
+ readonly POLICY_STORE: "POLICY_STORE";
127
+ readonly POLICY_TEMPLATE: "POLICY_TEMPLATE";
128
+ readonly SCHEMA: "SCHEMA";
129
+ };
130
+ /**
131
+ * @public
132
+ */
133
+ export type ResourceType = (typeof ResourceType)[keyof typeof ResourceType];
134
+ /**
135
+ * @public
136
+ * <p>The request failed because it references a resource that doesn't exist.</p>
137
+ */
138
+ export declare class ResourceNotFoundException extends __BaseException {
139
+ readonly name: "ResourceNotFoundException";
140
+ readonly $fault: "client";
141
+ /**
142
+ * @public
143
+ * <p>The unique ID of the resource referenced in the failed request.</p>
144
+ */
145
+ resourceId: string | undefined;
146
+ /**
147
+ * @public
148
+ * <p>The resource type of the resource referenced in the failed request.</p>
149
+ */
150
+ resourceType: ResourceType | undefined;
151
+ /**
152
+ * @internal
153
+ */
154
+ constructor(opts: __ExceptionOptionType<ResourceNotFoundException, __BaseException>);
155
+ }
156
+ /**
157
+ * @public
158
+ * <p>The request failed because it exceeded a throttling quota.</p>
159
+ */
160
+ export declare class ThrottlingException extends __BaseException {
161
+ readonly name: "ThrottlingException";
162
+ readonly $fault: "client";
163
+ $retryable: {
164
+ throttling: boolean;
165
+ };
166
+ /**
167
+ * @public
168
+ * <p>The code for the Amazon Web Service that owns the quota.</p>
169
+ */
170
+ serviceCode?: string;
171
+ /**
172
+ * @public
173
+ * <p>The quota code recognized by the Amazon Web Services Service Quotas service.</p>
174
+ */
175
+ quotaCode?: string;
176
+ /**
177
+ * @internal
178
+ */
179
+ constructor(opts: __ExceptionOptionType<ThrottlingException, __BaseException>);
180
+ }
181
+ /**
182
+ * @public
183
+ * <p>Details about a field that failed policy validation.</p>
184
+ */
185
+ export interface ValidationExceptionField {
186
+ /**
187
+ * @public
188
+ * <p>The path to the specific element that Verified Permissions found to be not valid.</p>
189
+ */
190
+ path: string | undefined;
191
+ /**
192
+ * @public
193
+ * <p>Describes the policy validation error.</p>
194
+ */
195
+ message: string | undefined;
196
+ }
197
+ /**
198
+ * @public
199
+ * <p>The request failed because one or more input parameters don't satisfy their constraint
200
+ * requirements. The output is provided as a list of fields and a reason for each field that
201
+ * isn't valid.</p>
202
+ * <p>The possible reasons include the following:</p>
203
+ * <ul>
204
+ * <li>
205
+ * <p>
206
+ * <b>UnrecognizedEntityType</b>
207
+ * </p>
208
+ * <p>The policy includes an entity type that isn't found in the schema.</p>
209
+ * </li>
210
+ * <li>
211
+ * <p>
212
+ * <b>UnrecognizedActionId</b>
213
+ * </p>
214
+ * <p>The policy includes an action id that isn't found in the schema.</p>
215
+ * </li>
216
+ * <li>
217
+ * <p>
218
+ * <b>InvalidActionApplication</b>
219
+ * </p>
220
+ * <p>The policy includes an action that, according to the schema, doesn't support
221
+ * the specified principal and resource.</p>
222
+ * </li>
223
+ * <li>
224
+ * <p>
225
+ * <b>UnexpectedType</b>
226
+ * </p>
227
+ * <p>The policy included an operand that isn't a valid type for the specified
228
+ * operation.</p>
229
+ * </li>
230
+ * <li>
231
+ * <p>
232
+ * <b>IncompatibleTypes</b>
233
+ * </p>
234
+ * <p>The types of elements included in a <code>set</code>, or the types of
235
+ * expressions used in an <code>if...then...else</code> clause aren't compatible in
236
+ * this context.</p>
237
+ * </li>
238
+ * <li>
239
+ * <p>
240
+ * <b>MissingAttribute</b>
241
+ * </p>
242
+ * <p>The policy attempts to access a record or entity attribute that isn't
243
+ * specified in the schema. Test for the existence of the attribute first before
244
+ * attempting to access its value. For more information, see the <a href="https://docs.cedarpolicy.com/policies/syntax-operators.html#has-presence-of-attribute-test">has (presence of attribute test) operator</a> in the
245
+ * <i>Cedar Policy Language Guide</i>.</p>
246
+ * </li>
247
+ * <li>
248
+ * <p>
249
+ * <b>UnsafeOptionalAttributeAccess</b>
250
+ * </p>
251
+ * <p>The policy attempts to access a record or entity attribute that is optional
252
+ * and isn't guaranteed to be present. Test for the existence of the attribute
253
+ * first before attempting to access its value. For more information, see the
254
+ * <a href="https://docs.cedarpolicy.com/policies/syntax-operators.html#has-presence-of-attribute-test">has (presence of attribute test) operator</a> in the
255
+ * <i>Cedar Policy Language Guide</i>.</p>
256
+ * </li>
257
+ * <li>
258
+ * <p>
259
+ * <b>ImpossiblePolicy</b>
260
+ * </p>
261
+ * <p>Cedar has determined that a policy condition always evaluates to false. If
262
+ * the policy is always false, it can never apply to any query, and so it can never
263
+ * affect an authorization decision.</p>
264
+ * </li>
265
+ * <li>
266
+ * <p>
267
+ * <b>WrongNumberArguments</b>
268
+ * </p>
269
+ * <p>The policy references an extension type with the wrong number of
270
+ * arguments.</p>
271
+ * </li>
272
+ * <li>
273
+ * <p>
274
+ * <b>FunctionArgumentValidationError</b>
275
+ * </p>
276
+ * <p>Cedar couldn't parse the argument passed to an extension type. For example,
277
+ * a string that is to be parsed as an IPv4 address can contain only digits and the
278
+ * period character.</p>
279
+ * </li>
280
+ * </ul>
281
+ */
282
+ export declare class ValidationException extends __BaseException {
283
+ readonly name: "ValidationException";
284
+ readonly $fault: "client";
285
+ /**
286
+ * @public
287
+ * <p>The list of fields that aren't valid.</p>
288
+ */
289
+ fieldList?: ValidationExceptionField[];
290
+ /**
291
+ * @internal
292
+ */
293
+ constructor(opts: __ExceptionOptionType<ValidationException, __BaseException>);
294
+ }
63
295
  /**
64
296
  * @public
65
297
  * <p>The configuration for an identity source that represents a connection to an Amazon Cognito user pool used
@@ -133,21 +365,6 @@ export declare namespace Configuration {
133
365
  }
134
366
  const visit: <T>(value: Configuration, visitor: Visitor<T>) => T;
135
367
  }
136
- /**
137
- * @public
138
- * @enum
139
- */
140
- export declare const ResourceType: {
141
- readonly IDENTITY_SOURCE: "IDENTITY_SOURCE";
142
- readonly POLICY: "POLICY";
143
- readonly POLICY_STORE: "POLICY_STORE";
144
- readonly POLICY_TEMPLATE: "POLICY_TEMPLATE";
145
- readonly SCHEMA: "SCHEMA";
146
- };
147
- /**
148
- * @public
149
- */
150
- export type ResourceType = (typeof ResourceType)[keyof typeof ResourceType];
151
368
  /**
152
369
  * @public
153
370
  * <p>Contains information about a resource conflict.</p>
@@ -248,215 +465,41 @@ export interface CreateIdentitySourceOutput {
248
465
  lastUpdatedDate: Date | undefined;
249
466
  /**
250
467
  * @public
251
- * <p>The ID of the policy store that contains the identity source.</p>
252
- */
253
- policyStoreId: string | undefined;
254
- }
255
- /**
256
- * @public
257
- * <p>The request failed because of an internal error. Try your request again later</p>
258
- */
259
- export declare class InternalServerException extends __BaseException {
260
- readonly name: "InternalServerException";
261
- readonly $fault: "server";
262
- $retryable: {};
263
- /**
264
- * @internal
265
- */
266
- constructor(opts: __ExceptionOptionType<InternalServerException, __BaseException>);
267
- }
268
- /**
269
- * @public
270
- * <p>The request failed because it references a resource that doesn't exist.</p>
271
- */
272
- export declare class ResourceNotFoundException extends __BaseException {
273
- readonly name: "ResourceNotFoundException";
274
- readonly $fault: "client";
275
- /**
276
- * @public
277
- * <p>The unique ID of the resource referenced in the failed request.</p>
278
- */
279
- resourceId: string | undefined;
280
- /**
281
- * @public
282
- * <p>The resource type of the resource referenced in the failed request.</p>
283
- */
284
- resourceType: ResourceType | undefined;
285
- /**
286
- * @internal
287
- */
288
- constructor(opts: __ExceptionOptionType<ResourceNotFoundException, __BaseException>);
289
- }
290
- /**
291
- * @public
292
- * <p>The request failed because it would cause a service quota to be exceeded.</p>
293
- */
294
- export declare class ServiceQuotaExceededException extends __BaseException {
295
- readonly name: "ServiceQuotaExceededException";
296
- readonly $fault: "client";
297
- /**
298
- * @public
299
- * <p>The unique ID of the resource referenced in the failed request.</p>
300
- */
301
- resourceId?: string;
302
- /**
303
- * @public
304
- * <p>The resource type of the resource referenced in the failed request.</p>
305
- */
306
- resourceType: ResourceType | undefined;
307
- /**
308
- * @public
309
- * <p>The code for the Amazon Web Service that owns the quota.</p>
310
- */
311
- serviceCode?: string;
312
- /**
313
- * @public
314
- * <p>The quota code recognized by the Amazon Web Services Service Quotas service.</p>
315
- */
316
- quotaCode?: string;
317
- /**
318
- * @internal
319
- */
320
- constructor(opts: __ExceptionOptionType<ServiceQuotaExceededException, __BaseException>);
321
- }
322
- /**
323
- * @public
324
- * <p>The request failed because it exceeded a throttling quota.</p>
325
- */
326
- export declare class ThrottlingException extends __BaseException {
327
- readonly name: "ThrottlingException";
328
- readonly $fault: "client";
329
- $retryable: {
330
- throttling: boolean;
331
- };
332
- /**
333
- * @public
334
- * <p>The code for the Amazon Web Service that owns the quota.</p>
335
- */
336
- serviceCode?: string;
337
- /**
338
- * @public
339
- * <p>The quota code recognized by the Amazon Web Services Service Quotas service.</p>
340
- */
341
- quotaCode?: string;
342
- /**
343
- * @internal
344
- */
345
- constructor(opts: __ExceptionOptionType<ThrottlingException, __BaseException>);
346
- }
347
- /**
348
- * @public
349
- * <p>Details about a field that failed policy validation.</p>
350
- */
351
- export interface ValidationExceptionField {
352
- /**
353
- * @public
354
- * <p>The path to the specific element that Verified Permissions found to be not valid.</p>
355
- */
356
- path: string | undefined;
357
- /**
358
- * @public
359
- * <p>Describes the policy validation error.</p>
468
+ * <p>The ID of the policy store that contains the identity source.</p>
360
469
  */
361
- message: string | undefined;
470
+ policyStoreId: string | undefined;
362
471
  }
363
472
  /**
364
473
  * @public
365
- * <p>The request failed because one or more input parameters don't satisfy their constraint
366
- * requirements. The output is provided as a list of fields and a reason for each field that
367
- * isn't valid.</p>
368
- * <p>The possible reasons include the following:</p>
369
- * <ul>
370
- * <li>
371
- * <p>
372
- * <b>UnrecognizedEntityType</b>
373
- * </p>
374
- * <p>The policy includes an entity type that isn't found in the schema.</p>
375
- * </li>
376
- * <li>
377
- * <p>
378
- * <b>UnrecognizedActionId</b>
379
- * </p>
380
- * <p>The policy includes an action id that isn't found in the schema.</p>
381
- * </li>
382
- * <li>
383
- * <p>
384
- * <b>InvalidActionApplication</b>
385
- * </p>
386
- * <p>The policy includes an action that, according to the schema, doesn't support
387
- * the specified principal and resource.</p>
388
- * </li>
389
- * <li>
390
- * <p>
391
- * <b>UnexpectedType</b>
392
- * </p>
393
- * <p>The policy included an operand that isn't a valid type for the specified
394
- * operation.</p>
395
- * </li>
396
- * <li>
397
- * <p>
398
- * <b>IncompatibleTypes</b>
399
- * </p>
400
- * <p>The types of elements included in a <code>set</code>, or the types of
401
- * expressions used in an <code>if...then...else</code> clause aren't compatible in
402
- * this context.</p>
403
- * </li>
404
- * <li>
405
- * <p>
406
- * <b>MissingAttribute</b>
407
- * </p>
408
- * <p>The policy attempts to access a record or entity attribute that isn't
409
- * specified in the schema. Test for the existence of the attribute first before
410
- * attempting to access its value. For more information, see the <a href="https://docs.cedarpolicy.com/policies/syntax-operators.html#has-presence-of-attribute-test">has (presence of attribute test) operator</a> in the
411
- * <i>Cedar Policy Language Guide</i>.</p>
412
- * </li>
413
- * <li>
414
- * <p>
415
- * <b>UnsafeOptionalAttributeAccess</b>
416
- * </p>
417
- * <p>The policy attempts to access a record or entity attribute that is optional
418
- * and isn't guaranteed to be present. Test for the existence of the attribute
419
- * first before attempting to access its value. For more information, see the
420
- * <a href="https://docs.cedarpolicy.com/policies/syntax-operators.html#has-presence-of-attribute-test">has (presence of attribute test) operator</a> in the
421
- * <i>Cedar Policy Language Guide</i>.</p>
422
- * </li>
423
- * <li>
424
- * <p>
425
- * <b>ImpossiblePolicy</b>
426
- * </p>
427
- * <p>Cedar has determined that a policy condition always evaluates to false. If
428
- * the policy is always false, it can never apply to any query, and so it can never
429
- * affect an authorization decision.</p>
430
- * </li>
431
- * <li>
432
- * <p>
433
- * <b>WrongNumberArguments</b>
434
- * </p>
435
- * <p>The policy references an extension type with the wrong number of
436
- * arguments.</p>
437
- * </li>
438
- * <li>
439
- * <p>
440
- * <b>FunctionArgumentValidationError</b>
441
- * </p>
442
- * <p>Cedar couldn't parse the argument passed to an extension type. For example,
443
- * a string that is to be parsed as an IPv4 address can contain only digits and the
444
- * period character.</p>
445
- * </li>
446
- * </ul>
474
+ * <p>The request failed because it would cause a service quota to be exceeded.</p>
447
475
  */
448
- export declare class ValidationException extends __BaseException {
449
- readonly name: "ValidationException";
476
+ export declare class ServiceQuotaExceededException extends __BaseException {
477
+ readonly name: "ServiceQuotaExceededException";
450
478
  readonly $fault: "client";
451
479
  /**
452
480
  * @public
453
- * <p>The list of fields that aren't valid.</p>
481
+ * <p>The unique ID of the resource referenced in the failed request.</p>
454
482
  */
455
- fieldList?: ValidationExceptionField[];
483
+ resourceId?: string;
484
+ /**
485
+ * @public
486
+ * <p>The resource type of the resource referenced in the failed request.</p>
487
+ */
488
+ resourceType: ResourceType | undefined;
489
+ /**
490
+ * @public
491
+ * <p>The code for the Amazon Web Service that owns the quota.</p>
492
+ */
493
+ serviceCode?: string;
494
+ /**
495
+ * @public
496
+ * <p>The quota code recognized by the Amazon Web Services Service Quotas service.</p>
497
+ */
498
+ quotaCode?: string;
456
499
  /**
457
500
  * @internal
458
501
  */
459
- constructor(opts: __ExceptionOptionType<ValidationException, __BaseException>);
502
+ constructor(opts: __ExceptionOptionType<ServiceQuotaExceededException, __BaseException>);
460
503
  }
461
504
  /**
462
505
  * @public
@@ -803,18 +846,6 @@ export interface CreatePolicyTemplateOutput {
803
846
  */
804
847
  lastUpdatedDate: Date | undefined;
805
848
  }
806
- /**
807
- * @public
808
- * @enum
809
- */
810
- export declare const Decision: {
811
- readonly ALLOW: "ALLOW";
812
- readonly DENY: "DENY";
813
- };
814
- /**
815
- * @public
816
- */
817
- export type Decision = (typeof Decision)[keyof typeof Decision];
818
849
  /**
819
850
  * @public
820
851
  */
@@ -890,24 +921,6 @@ export interface DeletePolicyTemplateInput {
890
921
  */
891
922
  export interface DeletePolicyTemplateOutput {
892
923
  }
893
- /**
894
- * @public
895
- * <p>Contains information about one of the policies that determined an authorization
896
- * decision.</p>
897
- * <p>This data type is used as an element in a response parameter for the <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html">IsAuthorized</a>
898
- * and <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html">IsAuthorizedWithToken</a> operations.</p>
899
- * <p>Example: <code>"determiningPolicies":[\{"policyId":"SPEXAMPLEabcdefg111111"\}]</code>
900
- * </p>
901
- */
902
- export interface DeterminingPolicyItem {
903
- /**
904
- * @public
905
- * <p>The Id of a policy that determined to an authorization decision.</p>
906
- * <p>Example: <code>"policyId":"SPEXAMPLEabcdefg111111"</code>
907
- * </p>
908
- */
909
- policyId: string | undefined;
910
- }
911
924
  /**
912
925
  * @public
913
926
  * <p>Contains information about a principal or resource that can be referenced in a Cedar
@@ -956,18 +969,6 @@ export declare namespace EntityReference {
956
969
  }
957
970
  const visit: <T>(value: EntityReference, visitor: Visitor<T>) => T;
958
971
  }
959
- /**
960
- * @public
961
- * <p>Contains a description of an evaluation error.</p>
962
- * <p>This data type is used as a request parameter in the <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html">IsAuthorized</a> and <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html">IsAuthorizedWithToken</a> operations.</p>
963
- */
964
- export interface EvaluationErrorItem {
965
- /**
966
- * @public
967
- * <p>The error description.</p>
968
- */
969
- errorDescription: string | undefined;
970
- }
971
972
  /**
972
973
  * @public
973
974
  */
@@ -2412,7 +2413,8 @@ export interface UpdatePolicyStoreOutput {
2412
2413
  * <p>Contains information about the runtime context for a request for which an
2413
2414
  * authorization decision is made. </p>
2414
2415
  * <p>This data type is used as a member of the <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_ContextDefinition.html">ContextDefinition</a> structure
2415
- * which is uses as a request parameter for the <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html">IsAuthorized</a> and <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html">IsAuthorizedWithToken</a> operations.</p>
2416
+ * which is uses as a request parameter for the <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html">IsAuthorized</a>, <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html">BatchIsAuthorized</a>, and <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html">IsAuthorizedWithToken</a>
2417
+ * operations.</p>
2416
2418
  */
2417
2419
  export type AttributeValue = AttributeValue.BooleanMember | AttributeValue.EntityIdentifierMember | AttributeValue.LongMember | AttributeValue.RecordMember | AttributeValue.SetMember | AttributeValue.StringMember | AttributeValue.$UnknownMember;
2418
2420
  /**
@@ -2421,7 +2423,8 @@ export type AttributeValue = AttributeValue.BooleanMember | AttributeValue.Entit
2421
2423
  export declare namespace AttributeValue {
2422
2424
  /**
2423
2425
  * @public
2424
- * <p>An attribute value of <a href="https://docs.cedarpolicy.com/policies/syntax-datatypes.html#boolean">Boolean</a> type.</p>
2426
+ * <p>An attribute value of <a href="https://docs.cedarpolicy.com/policies/syntax-datatypes.html#boolean">Boolean</a>
2427
+ * type.</p>
2425
2428
  * <p>Example: <code>\{"boolean": true\}</code>
2426
2429
  * </p>
2427
2430
  */
@@ -2467,7 +2470,8 @@ export declare namespace AttributeValue {
2467
2470
  }
2468
2471
  /**
2469
2472
  * @public
2470
- * <p>An attribute value of <a href="https://docs.cedarpolicy.com/policies/syntax-datatypes.html#string">String</a> type.</p>
2473
+ * <p>An attribute value of <a href="https://docs.cedarpolicy.com/policies/syntax-datatypes.html#string">String</a>
2474
+ * type.</p>
2471
2475
  * <p>Example: <code>\{"string": "abc"\}</code>
2472
2476
  * </p>
2473
2477
  */
@@ -2497,7 +2501,8 @@ export declare namespace AttributeValue {
2497
2501
  }
2498
2502
  /**
2499
2503
  * @public
2500
- * <p>An attribute value of <a href="https://docs.cedarpolicy.com/policies/syntax-datatypes.html#record">Record</a> type.</p>
2504
+ * <p>An attribute value of <a href="https://docs.cedarpolicy.com/policies/syntax-datatypes.html#record">Record</a>
2505
+ * type.</p>
2501
2506
  * <p>Example: <code>\{"record": \{ "keyName": \{\} \} \}</code>
2502
2507
  * </p>
2503
2508
  */
@@ -2538,9 +2543,10 @@ export declare namespace AttributeValue {
2538
2543
  * <p>Contains additional details about the context of the request. Verified Permissions evaluates this
2539
2544
  * information in an authorization request as part of the <code>when</code> and
2540
2545
  * <code>unless</code> clauses in a policy.</p>
2541
- * <p>This data type is used as a request parameter for the <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html">IsAuthorized</a> and <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html">IsAuthorizedWithToken</a> operations.</p>
2546
+ * <p>This data type is used as a request parameter for the <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html">IsAuthorized</a>, <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html">BatchIsAuthorized</a>, and <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html">IsAuthorizedWithToken</a>
2547
+ * operations.</p>
2542
2548
  * <p>Example:
2543
- * <code>"context":\{"Context":\{"&lt;KeyName1&gt;":\{"boolean":true\},"&lt;KeyName2&gt;":\{"long":1234\}\}\}</code>
2549
+ * <code>"context":\{"contextMap":\{"&lt;KeyName1&gt;":\{"boolean":true\},"&lt;KeyName2&gt;":\{"long":1234\}\}\}</code>
2544
2550
  * </p>
2545
2551
  */
2546
2552
  export type ContextDefinition = ContextDefinition.ContextMapMember | ContextDefinition.$UnknownMember;
@@ -2554,7 +2560,7 @@ export declare namespace ContextDefinition {
2554
2560
  * request. Each attribute in this array must include a map of a data type and its
2555
2561
  * value.</p>
2556
2562
  * <p>Example:
2557
- * <code>"Context":\{"&lt;KeyName1&gt;":\{"boolean":true\},"&lt;KeyName2&gt;":\{"long":1234\}\}</code>
2563
+ * <code>"contextMap":\{"&lt;KeyName1&gt;":\{"boolean":true\},"&lt;KeyName2&gt;":\{"long":1234\}\}</code>
2558
2564
  * </p>
2559
2565
  */
2560
2566
  interface ContextMapMember {
@@ -2603,6 +2609,69 @@ export interface EntityItem {
2603
2609
  */
2604
2610
  parents?: EntityIdentifier[];
2605
2611
  }
2612
+ /**
2613
+ * @public
2614
+ * <p>An authorization request that you include in a <code>BatchIsAuthorized</code> API
2615
+ * request.</p>
2616
+ */
2617
+ export interface BatchIsAuthorizedInputItem {
2618
+ /**
2619
+ * @public
2620
+ * <p>Specifies the principal for which the authorization decision is to be made.</p>
2621
+ */
2622
+ principal?: EntityIdentifier;
2623
+ /**
2624
+ * @public
2625
+ * <p>Specifies the requested action to be authorized. For example, is the principal
2626
+ * authorized to perform this action on the resource?</p>
2627
+ */
2628
+ action?: ActionIdentifier;
2629
+ /**
2630
+ * @public
2631
+ * <p>Specifies the resource for which the authorization decision is to be made.</p>
2632
+ */
2633
+ resource?: EntityIdentifier;
2634
+ /**
2635
+ * @public
2636
+ * <p>Specifies additional context that can be used to make more granular authorization
2637
+ * decisions.</p>
2638
+ */
2639
+ context?: ContextDefinition;
2640
+ }
2641
+ /**
2642
+ * @public
2643
+ * <p>The decision, based on policy evaluation, from an individual authorization request in
2644
+ * a <code>BatchIsAuthorized</code> API request.</p>
2645
+ */
2646
+ export interface BatchIsAuthorizedOutputItem {
2647
+ /**
2648
+ * @public
2649
+ * <p>The authorization request that initiated the decision.</p>
2650
+ */
2651
+ request: BatchIsAuthorizedInputItem | undefined;
2652
+ /**
2653
+ * @public
2654
+ * <p>An authorization decision that indicates if the authorization request should be
2655
+ * allowed or denied.</p>
2656
+ */
2657
+ decision: Decision | undefined;
2658
+ /**
2659
+ * @public
2660
+ * <p>The list of determining policies used to make the authorization decision. For example,
2661
+ * if there are two matching policies, where one is a forbid and the other is a permit,
2662
+ * then the forbid policy will be the determining policy. In the case of multiple matching
2663
+ * permit policies then there would be multiple determining policies. In the case that no
2664
+ * policies match, and hence the response is DENY, there would be no determining
2665
+ * policies.</p>
2666
+ */
2667
+ determiningPolicies: DeterminingPolicyItem[] | undefined;
2668
+ /**
2669
+ * @public
2670
+ * <p>Errors that occurred while making an authorization decision, for example, a policy
2671
+ * references an Entity or entity Attribute that does not exist in the slice.</p>
2672
+ */
2673
+ errors: EvaluationErrorItem[] | undefined;
2674
+ }
2606
2675
  /**
2607
2676
  * @public
2608
2677
  * <p>Contains the list of entities to be considered during an authorization request. This
@@ -2639,6 +2708,17 @@ export declare namespace EntitiesDefinition {
2639
2708
  }
2640
2709
  const visit: <T>(value: EntitiesDefinition, visitor: Visitor<T>) => T;
2641
2710
  }
2711
+ /**
2712
+ * @public
2713
+ */
2714
+ export interface BatchIsAuthorizedOutput {
2715
+ /**
2716
+ * @public
2717
+ * <p>A series of <code>Allow</code> or <code>Deny</code> decisions for each request, and
2718
+ * the policies that produced them.</p>
2719
+ */
2720
+ results: BatchIsAuthorizedOutputItem[] | undefined;
2721
+ }
2642
2722
  /**
2643
2723
  * @public
2644
2724
  */
@@ -2751,6 +2831,32 @@ export interface IsAuthorizedWithTokenInput {
2751
2831
  */
2752
2832
  entities?: EntitiesDefinition;
2753
2833
  }
2834
+ /**
2835
+ * @public
2836
+ */
2837
+ export interface BatchIsAuthorizedInput {
2838
+ /**
2839
+ * @public
2840
+ * <p>Specifies the ID of the policy store. Policies in this policy store will be used to make the
2841
+ * authorization decisions for the input.</p>
2842
+ */
2843
+ policyStoreId: string | undefined;
2844
+ /**
2845
+ * @public
2846
+ * <p>Specifies the list of resources and principals and their associated attributes that
2847
+ * Verified Permissions can examine when evaluating the policies. </p>
2848
+ * <note>
2849
+ * <p>You can include only principal and resource entities in this parameter; you can't
2850
+ * include actions. You must specify actions in the schema.</p>
2851
+ * </note>
2852
+ */
2853
+ entities?: EntitiesDefinition;
2854
+ /**
2855
+ * @public
2856
+ * <p>An array of up to 30 requests that you want Verified Permissions to evaluate.</p>
2857
+ */
2858
+ requests: BatchIsAuthorizedInputItem[] | undefined;
2859
+ }
2754
2860
  /**
2755
2861
  * @internal
2756
2862
  */
@@ -2759,6 +2865,10 @@ export declare const ActionIdentifierFilterSensitiveLog: (obj: ActionIdentifier)
2759
2865
  * @internal
2760
2866
  */
2761
2867
  export declare const EntityIdentifierFilterSensitiveLog: (obj: EntityIdentifier) => any;
2868
+ /**
2869
+ * @internal
2870
+ */
2871
+ export declare const EvaluationErrorItemFilterSensitiveLog: (obj: EvaluationErrorItem) => any;
2762
2872
  /**
2763
2873
  * @internal
2764
2874
  */
@@ -2799,10 +2909,6 @@ export declare const CreatePolicyTemplateInputFilterSensitiveLog: (obj: CreatePo
2799
2909
  * @internal
2800
2910
  */
2801
2911
  export declare const EntityReferenceFilterSensitiveLog: (obj: EntityReference) => any;
2802
- /**
2803
- * @internal
2804
- */
2805
- export declare const EvaluationErrorItemFilterSensitiveLog: (obj: EvaluationErrorItem) => any;
2806
2912
  /**
2807
2913
  * @internal
2808
2914
  */
@@ -2955,10 +3061,22 @@ export declare const ContextDefinitionFilterSensitiveLog: (obj: ContextDefinitio
2955
3061
  * @internal
2956
3062
  */
2957
3063
  export declare const EntityItemFilterSensitiveLog: (obj: EntityItem) => any;
3064
+ /**
3065
+ * @internal
3066
+ */
3067
+ export declare const BatchIsAuthorizedInputItemFilterSensitiveLog: (obj: BatchIsAuthorizedInputItem) => any;
3068
+ /**
3069
+ * @internal
3070
+ */
3071
+ export declare const BatchIsAuthorizedOutputItemFilterSensitiveLog: (obj: BatchIsAuthorizedOutputItem) => any;
2958
3072
  /**
2959
3073
  * @internal
2960
3074
  */
2961
3075
  export declare const EntitiesDefinitionFilterSensitiveLog: (obj: EntitiesDefinition) => any;
3076
+ /**
3077
+ * @internal
3078
+ */
3079
+ export declare const BatchIsAuthorizedOutputFilterSensitiveLog: (obj: BatchIsAuthorizedOutput) => any;
2962
3080
  /**
2963
3081
  * @internal
2964
3082
  */
@@ -2967,3 +3085,7 @@ export declare const IsAuthorizedInputFilterSensitiveLog: (obj: IsAuthorizedInpu
2967
3085
  * @internal
2968
3086
  */
2969
3087
  export declare const IsAuthorizedWithTokenInputFilterSensitiveLog: (obj: IsAuthorizedWithTokenInput) => any;
3088
+ /**
3089
+ * @internal
3090
+ */
3091
+ export declare const BatchIsAuthorizedInputFilterSensitiveLog: (obj: BatchIsAuthorizedInput) => any;