@aws-sdk/client-verifiedpermissions 3.799.0 → 3.803.0

package/README.md

@@ -6,71 +6,7 @@
 
 AWS SDK for JavaScript VerifiedPermissions Client for Node.js, Browser and React Native.
 
-<p>Amazon Verified Permissions is a permissions management service from Amazon Web Services. You can use Verified Permissions to manage
-permissions for your application, and authorize user access based on those permissions.
-Using Verified Permissions, application developers can grant access based on information about the
-users, resources, and requested actions. You can also evaluate additional information
-like group membership, attributes of the resources, and session context, such as time of
-request and IP addresses. Verified Permissions manages these permissions by letting you create and
-store authorization policies for your applications, such as consumer-facing web sites
-and enterprise business systems.</p>
-<p>Verified Permissions uses Cedar as the policy language to express your permission requirements.
-Cedar supports both role-based access control (RBAC) and attribute-based access
-control (ABAC) authorization models.</p>
-<p>For more information about configuring, administering, and using Amazon Verified Permissions in your
-applications, see the <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/userguide/">Amazon Verified Permissions User Guide</a>.</p>
-<p>For more information about the Cedar policy language, see the <a href="https://docs.cedarpolicy.com/">Cedar Policy Language Guide</a>.</p>
-<important>
-<p>When you write Cedar policies that reference principals, resources and actions,
-you can define the unique identifiers used for each of those elements. We strongly
-recommend that you follow these best practices:</p>
-<ul>
-<li>
-<p>
-<b>Use values like universally unique identifiers
-(UUIDs) for all principal and resource identifiers.</b>
-</p>
-<p>For example, if user <code>jane</code> leaves the company, and you later
-let someone else use the name <code>jane</code>, then that new user
-automatically gets access to everything granted by policies that still
-reference <code>User::"jane"</code>. Cedar can’t distinguish between the
-new user and the old. This applies to both principal and resource
-identifiers. Always use identifiers that are guaranteed unique and never
-reused to ensure that you don’t unintentionally grant access because of the
-presence of an old identifier in a policy.</p>
-<p>Where you use a UUID for an entity, we recommend that you follow it with
-the // comment specifier and the ‘friendly’ name of your entity. This helps
-to make your policies easier to understand. For example: principal ==
-User::"a1b2c3d4-e5f6-a1b2-c3d4-EXAMPLE11111", // alice</p>
-</li>
-<li>
-<p>
-<b>Do not include personally identifying, confidential,
-or sensitive information as part of the unique identifier for your
-principals or resources.</b> These identifiers are included in
-log entries shared in CloudTrail trails.</p>
-</li>
-</ul>
-</important>
-<p>Several operations return structures that appear similar, but have different purposes.
-As new functionality is added to the product, the structure used in a parameter of one
-operation might need to change in a way that wouldn't make sense for the same parameter
-in a different operation. To help you understand the purpose of each, the following
-naming convention is used for the structures:</p>
-<ul>
-<li>
-<p>Parameter type structures that end in <code>Detail</code> are used in
-<code>Get</code> operations.</p>
-</li>
-<li>
-<p>Parameter type structures that end in <code>Item</code> are used in
-<code>List</code> operations.</p>
-</li>
-<li>
-<p>Parameter type structures that use neither suffix are used in the mutating
-(create and update) operations.</p>
-</li>
-</ul>
+<p>Amazon Verified Permissions is a permissions management service from Amazon Web Services. You can use Verified Permissions to manage permissions for your application, and authorize user access based on those permissions. Using Verified Permissions, application developers can grant access based on information about the users, resources, and requested actions. You can also evaluate additional information like group membership, attributes of the resources, and session context, such as time of request and IP addresses. Verified Permissions manages these permissions by letting you create and store authorization policies for your applications, such as consumer-facing web sites and enterprise business systems.</p> <p>Verified Permissions uses Cedar as the policy language to express your permission requirements. Cedar supports both role-based access control (RBAC) and attribute-based access control (ABAC) authorization models.</p> <p>For more information about configuring, administering, and using Amazon Verified Permissions in your applications, see the <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/userguide/">Amazon Verified Permissions User Guide</a>.</p> <p>For more information about the Cedar policy language, see the <a href="https://docs.cedarpolicy.com/">Cedar Policy Language Guide</a>.</p> <important> <p>When you write Cedar policies that reference principals, resources and actions, you can define the unique identifiers used for each of those elements. We strongly recommend that you follow these best practices:</p> <ul> <li> <p> <b>Use values like universally unique identifiers (UUIDs) for all principal and resource identifiers.</b> </p> <p>For example, if user <code>jane</code> leaves the company, and you later let someone else use the name <code>jane</code>, then that new user automatically gets access to everything granted by policies that still reference <code>User::"jane"</code>. Cedar can’t distinguish between the new user and the old. This applies to both principal and resource identifiers. Always use identifiers that are guaranteed unique and never reused to ensure that you don’t unintentionally grant access because of the presence of an old identifier in a policy.</p> <p>Where you use a UUID for an entity, we recommend that you follow it with the // comment specifier and the ‘friendly’ name of your entity. This helps to make your policies easier to understand. For example: principal == User::"a1b2c3d4-e5f6-a1b2-c3d4-EXAMPLE11111", // alice</p> </li> <li> <p> <b>Do not include personally identifying, confidential, or sensitive information as part of the unique identifier for your principals or resources.</b> These identifiers are included in log entries shared in CloudTrail trails.</p> </li> </ul> </important> <p>Several operations return structures that appear similar, but have different purposes. As new functionality is added to the product, the structure used in a parameter of one operation might need to change in a way that wouldn't make sense for the same parameter in a different operation. To help you understand the purpose of each, the following naming convention is used for the structures:</p> <ul> <li> <p>Parameter type structures that end in <code>Detail</code> are used in <code>Get</code> operations.</p> </li> <li> <p>Parameter type structures that end in <code>Item</code> are used in <code>List</code> operations.</p> </li> <li> <p>Parameter type structures that use neither suffix are used in the mutating (create and update) operations.</p> </li> </ul>
 
 ## Installing
 
@@ -442,6 +378,14 @@ ListPolicyTemplates
 
 [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/verifiedpermissions/command/ListPolicyTemplatesCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-verifiedpermissions/Interface/ListPolicyTemplatesCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-verifiedpermissions/Interface/ListPolicyTemplatesCommandOutput/)
 
+</details>
+<details>
+<summary>
+ListTagsForResource
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/verifiedpermissions/command/ListTagsForResourceCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-verifiedpermissions/Interface/ListTagsForResourceCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-verifiedpermissions/Interface/ListTagsForResourceCommandOutput/)
+
 </details>
 <details>
 <summary>
@@ -450,6 +394,22 @@ PutSchema
 
 [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/verifiedpermissions/command/PutSchemaCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-verifiedpermissions/Interface/PutSchemaCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-verifiedpermissions/Interface/PutSchemaCommandOutput/)
 
+</details>
+<details>
+<summary>
+TagResource
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/verifiedpermissions/command/TagResourceCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-verifiedpermissions/Interface/TagResourceCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-verifiedpermissions/Interface/TagResourceCommandOutput/)
+
+</details>
+<details>
+<summary>
+UntagResource
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/verifiedpermissions/command/UntagResourceCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-verifiedpermissions/Interface/UntagResourceCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-verifiedpermissions/Interface/UntagResourceCommandOutput/)
+
 </details>
 <details>
 <summary>

package/dist-cjs/index.js

@@ -39,6 +39,7 @@ __export(index_exports, {
   BatchIsAuthorizedWithTokenInputItemFilterSensitiveLog: () => BatchIsAuthorizedWithTokenInputItemFilterSensitiveLog,
   BatchIsAuthorizedWithTokenOutputFilterSensitiveLog: () => BatchIsAuthorizedWithTokenOutputFilterSensitiveLog,
   BatchIsAuthorizedWithTokenOutputItemFilterSensitiveLog: () => BatchIsAuthorizedWithTokenOutputItemFilterSensitiveLog,
+  CedarVersion: () => CedarVersion,
   CognitoGroupConfigurationDetailFilterSensitiveLog: () => CognitoGroupConfigurationDetailFilterSensitiveLog,
   CognitoGroupConfigurationFilterSensitiveLog: () => CognitoGroupConfigurationFilterSensitiveLog,
   CognitoGroupConfigurationItemFilterSensitiveLog: () => CognitoGroupConfigurationItemFilterSensitiveLog,
@@ -108,6 +109,7 @@ __export(index_exports, {
   ListPolicyStoresOutputFilterSensitiveLog: () => ListPolicyStoresOutputFilterSensitiveLog,
   ListPolicyTemplatesCommand: () => ListPolicyTemplatesCommand,
   ListPolicyTemplatesOutputFilterSensitiveLog: () => ListPolicyTemplatesOutputFilterSensitiveLog,
+  ListTagsForResourceCommand: () => ListTagsForResourceCommand,
   OpenIdConnectAccessTokenConfigurationDetailFilterSensitiveLog: () => OpenIdConnectAccessTokenConfigurationDetailFilterSensitiveLog,
   OpenIdConnectAccessTokenConfigurationFilterSensitiveLog: () => OpenIdConnectAccessTokenConfigurationFilterSensitiveLog,
   OpenIdConnectAccessTokenConfigurationItemFilterSensitiveLog: () => OpenIdConnectAccessTokenConfigurationItemFilterSensitiveLog,
@@ -150,10 +152,13 @@ __export(index_exports, {
   StaticPolicyDefinitionDetailFilterSensitiveLog: () => StaticPolicyDefinitionDetailFilterSensitiveLog,
   StaticPolicyDefinitionFilterSensitiveLog: () => StaticPolicyDefinitionFilterSensitiveLog,
   StaticPolicyDefinitionItemFilterSensitiveLog: () => StaticPolicyDefinitionItemFilterSensitiveLog,
+  TagResourceCommand: () => TagResourceCommand,
   TemplateLinkedPolicyDefinitionDetailFilterSensitiveLog: () => TemplateLinkedPolicyDefinitionDetailFilterSensitiveLog,
   TemplateLinkedPolicyDefinitionFilterSensitiveLog: () => TemplateLinkedPolicyDefinitionFilterSensitiveLog,
   TemplateLinkedPolicyDefinitionItemFilterSensitiveLog: () => TemplateLinkedPolicyDefinitionItemFilterSensitiveLog,
   ThrottlingException: () => ThrottlingException,
+  TooManyTagsException: () => TooManyTagsException,
+  UntagResourceCommand: () => UntagResourceCommand,
   UpdateCognitoGroupConfigurationFilterSensitiveLog: () => UpdateCognitoGroupConfigurationFilterSensitiveLog,
   UpdateCognitoUserPoolConfigurationFilterSensitiveLog: () => UpdateCognitoUserPoolConfigurationFilterSensitiveLog,
   UpdateConfiguration: () => UpdateConfiguration,
@@ -508,6 +513,10 @@ var ResourceNotFoundException = class _ResourceNotFoundException extends Verifie
     this.resourceType = opts.resourceType;
   }
 };
+var CedarVersion = {
+  CEDAR_2: "CEDAR_2",
+  CEDAR_4: "CEDAR_4"
+};
 var OpenIdConnectTokenSelection;
 ((OpenIdConnectTokenSelection3) => {
   OpenIdConnectTokenSelection3.visit = /* @__PURE__ */ __name((value, visitor) => {
@@ -717,6 +726,30 @@ var SchemaDefinition;
     return visitor._(value.$unknown[0], value.$unknown[1]);
   }, "visit");
 })(SchemaDefinition || (SchemaDefinition = {}));
+var TooManyTagsException = class _TooManyTagsException extends VerifiedPermissionsServiceException {
+  static {
+    __name(this, "TooManyTagsException");
+  }
+  name = "TooManyTagsException";
+  $fault = "client";
+  /**
+   * An Amazon Resource Name (ARN) uniquely identifies an AWS resource.
+   * @public
+   */
+  resourceName;
+  /**
+   * @internal
+   */
+  constructor(opts) {
+    super({
+      name: "TooManyTagsException",
+      $fault: "client",
+      ...opts
+    });
+    Object.setPrototypeOf(this, _TooManyTagsException.prototype);
+    this.resourceName = opts.resourceName;
+  }
+};
 var AttributeValue;
 ((AttributeValue2) => {
   AttributeValue2.visit = /* @__PURE__ */ __name((value, visitor) => {
@@ -1452,12 +1485,30 @@ var se_ListPolicyTemplatesCommand = /* @__PURE__ */ __name(async (input, context
   body = JSON.stringify((0, import_smithy_client._json)(input));
   return buildHttpRpcRequest(context, headers, "/", void 0, body);
 }, "se_ListPolicyTemplatesCommand");
+var se_ListTagsForResourceCommand = /* @__PURE__ */ __name(async (input, context) => {
+  const headers = sharedHeaders("ListTagsForResource");
+  let body;
+  body = JSON.stringify((0, import_smithy_client._json)(input));
+  return buildHttpRpcRequest(context, headers, "/", void 0, body);
+}, "se_ListTagsForResourceCommand");
 var se_PutSchemaCommand = /* @__PURE__ */ __name(async (input, context) => {
   const headers = sharedHeaders("PutSchema");
   let body;
   body = JSON.stringify((0, import_smithy_client._json)(input));
   return buildHttpRpcRequest(context, headers, "/", void 0, body);
 }, "se_PutSchemaCommand");
+var se_TagResourceCommand = /* @__PURE__ */ __name(async (input, context) => {
+  const headers = sharedHeaders("TagResource");
+  let body;
+  body = JSON.stringify((0, import_smithy_client._json)(input));
+  return buildHttpRpcRequest(context, headers, "/", void 0, body);
+}, "se_TagResourceCommand");
+var se_UntagResourceCommand = /* @__PURE__ */ __name(async (input, context) => {
+  const headers = sharedHeaders("UntagResource");
+  let body;
+  body = JSON.stringify((0, import_smithy_client._json)(input));
+  return buildHttpRpcRequest(context, headers, "/", void 0, body);
+}, "se_UntagResourceCommand");
 var se_UpdateIdentitySourceCommand = /* @__PURE__ */ __name(async (input, context) => {
   const headers = sharedHeaders("UpdateIdentitySource");
   let body;
@@ -1768,6 +1819,19 @@ var de_ListPolicyTemplatesCommand = /* @__PURE__ */ __name(async (output, contex
   };
   return response;
 }, "de_ListPolicyTemplatesCommand");
+var de_ListTagsForResourceCommand = /* @__PURE__ */ __name(async (output, context) => {
+  if (output.statusCode >= 300) {
+    return de_CommandError(output, context);
+  }
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
+  let contents = {};
+  contents = (0, import_smithy_client._json)(data);
+  const response = {
+    $metadata: deserializeMetadata(output),
+    ...contents
+  };
+  return response;
+}, "de_ListTagsForResourceCommand");
 var de_PutSchemaCommand = /* @__PURE__ */ __name(async (output, context) => {
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
@@ -1781,6 +1845,32 @@ var de_PutSchemaCommand = /* @__PURE__ */ __name(async (output, context) => {
   };
   return response;
 }, "de_PutSchemaCommand");
+var de_TagResourceCommand = /* @__PURE__ */ __name(async (output, context) => {
+  if (output.statusCode >= 300) {
+    return de_CommandError(output, context);
+  }
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
+  let contents = {};
+  contents = (0, import_smithy_client._json)(data);
+  const response = {
+    $metadata: deserializeMetadata(output),
+    ...contents
+  };
+  return response;
+}, "de_TagResourceCommand");
+var de_UntagResourceCommand = /* @__PURE__ */ __name(async (output, context) => {
+  if (output.statusCode >= 300) {
+    return de_CommandError(output, context);
+  }
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
+  let contents = {};
+  contents = (0, import_smithy_client._json)(data);
+  const response = {
+    $metadata: deserializeMetadata(output),
+    ...contents
+  };
+  return response;
+}, "de_UntagResourceCommand");
 var de_UpdateIdentitySourceCommand = /* @__PURE__ */ __name(async (output, context) => {
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
@@ -1864,6 +1954,9 @@ var de_CommandError = /* @__PURE__ */ __name(async (output, context) => {
     case "InvalidStateException":
     case "com.amazonaws.verifiedpermissions#InvalidStateException":
       throw await de_InvalidStateExceptionRes(parsedOutput, context);
+    case "TooManyTagsException":
+    case "com.amazonaws.verifiedpermissions#TooManyTagsException":
+      throw await de_TooManyTagsExceptionRes(parsedOutput, context);
     default:
       const parsedBody = parsedOutput.body;
       return throwDefaultError({
@@ -1936,6 +2029,15 @@ var de_ThrottlingExceptionRes = /* @__PURE__ */ __name(async (parsedOutput, cont
   });
   return (0, import_smithy_client.decorateServiceException)(exception, body);
 }, "de_ThrottlingExceptionRes");
+var de_TooManyTagsExceptionRes = /* @__PURE__ */ __name(async (parsedOutput, context) => {
+  const body = parsedOutput.body;
+  const deserialized = (0, import_smithy_client._json)(body);
+  const exception = new TooManyTagsException({
+    $metadata: deserializeMetadata(parsedOutput),
+    ...deserialized
+  });
+  return (0, import_smithy_client.decorateServiceException)(exception, body);
+}, "de_TooManyTagsExceptionRes");
 var de_ValidationExceptionRes = /* @__PURE__ */ __name(async (parsedOutput, context) => {
   const body = parsedOutput.body;
   const deserialized = (0, import_smithy_client._json)(body);
@@ -2035,6 +2137,7 @@ var se_CreatePolicyStoreInput = /* @__PURE__ */ __name((input, context) => {
     clientToken: [true, (_) => _ ?? (0, import_uuid.v4)()],
     deletionProtection: [],
     description: [],
+    tags: import_smithy_client._json,
     validationSettings: import_smithy_client._json
   });
 }, "se_CreatePolicyStoreInput");
@@ -2303,11 +2406,13 @@ var de_GetPolicyOutput = /* @__PURE__ */ __name((output, context) => {
 var de_GetPolicyStoreOutput = /* @__PURE__ */ __name((output, context) => {
   return (0, import_smithy_client.take)(output, {
     arn: import_smithy_client.expectString,
+    cedarVersion: import_smithy_client.expectString,
     createdDate: /* @__PURE__ */ __name((_) => (0, import_smithy_client.expectNonNull)((0, import_smithy_client.parseRfc3339DateTimeWithOffset)(_)), "createdDate"),
     deletionProtection: import_smithy_client.expectString,
     description: import_smithy_client.expectString,
     lastUpdatedDate: /* @__PURE__ */ __name((_) => (0, import_smithy_client.expectNonNull)((0, import_smithy_client.parseRfc3339DateTimeWithOffset)(_)), "lastUpdatedDate"),
     policyStoreId: import_smithy_client.expectString,
+    tags: import_smithy_client._json,
     validationSettings: import_smithy_client._json
   });
 }, "de_GetPolicyStoreOutput");
@@ -2841,6 +2946,21 @@ var ListPolicyTemplatesCommand = class extends import_smithy_client.Command.clas
   }
 };
 
+// src/commands/ListTagsForResourceCommand.ts
+
+
+
+var ListTagsForResourceCommand = class extends import_smithy_client.Command.classBuilder().ep(commonParams).m(function(Command, cs, config, o) {
+  return [
+    (0, import_middleware_serde.getSerdePlugin)(config, this.serialize, this.deserialize),
+    (0, import_middleware_endpoint.getEndpointPlugin)(config, Command.getEndpointParameterInstructions())
+  ];
+}).s("VerifiedPermissions", "ListTagsForResource", {}).n("VerifiedPermissionsClient", "ListTagsForResourceCommand").f(void 0, void 0).ser(se_ListTagsForResourceCommand).de(de_ListTagsForResourceCommand).build() {
+  static {
+    __name(this, "ListTagsForResourceCommand");
+  }
+};
+
 // src/commands/PutSchemaCommand.ts
 
 
@@ -2856,6 +2976,36 @@ var PutSchemaCommand = class extends import_smithy_client.Command.classBuilder()
   }
 };
 
+// src/commands/TagResourceCommand.ts
+
+
+
+var TagResourceCommand = class extends import_smithy_client.Command.classBuilder().ep(commonParams).m(function(Command, cs, config, o) {
+  return [
+    (0, import_middleware_serde.getSerdePlugin)(config, this.serialize, this.deserialize),
+    (0, import_middleware_endpoint.getEndpointPlugin)(config, Command.getEndpointParameterInstructions())
+  ];
+}).s("VerifiedPermissions", "TagResource", {}).n("VerifiedPermissionsClient", "TagResourceCommand").f(void 0, void 0).ser(se_TagResourceCommand).de(de_TagResourceCommand).build() {
+  static {
+    __name(this, "TagResourceCommand");
+  }
+};
+
+// src/commands/UntagResourceCommand.ts
+
+
+
+var UntagResourceCommand = class extends import_smithy_client.Command.classBuilder().ep(commonParams).m(function(Command, cs, config, o) {
+  return [
+    (0, import_middleware_serde.getSerdePlugin)(config, this.serialize, this.deserialize),
+    (0, import_middleware_endpoint.getEndpointPlugin)(config, Command.getEndpointParameterInstructions())
+  ];
+}).s("VerifiedPermissions", "UntagResource", {}).n("VerifiedPermissionsClient", "UntagResourceCommand").f(void 0, void 0).ser(se_UntagResourceCommand).de(de_UntagResourceCommand).build() {
+  static {
+    __name(this, "UntagResourceCommand");
+  }
+};
+
 // src/commands/UpdateIdentitySourceCommand.ts
 
 
@@ -2940,7 +3090,10 @@ var commands = {
   ListPoliciesCommand,
   ListPolicyStoresCommand,
   ListPolicyTemplatesCommand,
+  ListTagsForResourceCommand,
   PutSchemaCommand,
+  TagResourceCommand,
+  UntagResourceCommand,
   UpdateIdentitySourceCommand,
   UpdatePolicyCommand,
   UpdatePolicyStoreCommand,
@@ -2998,7 +3151,10 @@ var paginateListPolicyTemplates = (0, import_core.createPaginator)(VerifiedPermi
   ListPoliciesCommand,
   ListPolicyStoresCommand,
   ListPolicyTemplatesCommand,
+  ListTagsForResourceCommand,
   PutSchemaCommand,
+  TagResourceCommand,
+  UntagResourceCommand,
   UpdateIdentitySourceCommand,
   UpdatePolicyCommand,
   UpdatePolicyStoreCommand,
@@ -3017,6 +3173,7 @@ var paginateListPolicyTemplates = (0, import_core.createPaginator)(VerifiedPermi
   Decision,
   ResourceType,
   ResourceNotFoundException,
+  CedarVersion,
   OpenIdConnectTokenSelection,
   Configuration,
   OpenIdConnectTokenSelectionDetail,
@@ -3037,6 +3194,7 @@ var paginateListPolicyTemplates = (0, import_core.createPaginator)(VerifiedPermi
   PolicyDefinitionItem,
   UpdatePolicyDefinition,
   SchemaDefinition,
+  TooManyTagsException,
   AttributeValue,
   ContextDefinition,
   EntitiesDefinition,

package/dist-es/VerifiedPermissions.js

@@ -21,7 +21,10 @@ import { ListIdentitySourcesCommand, } from "./commands/ListIdentitySourcesComma
 import { ListPoliciesCommand, } from "./commands/ListPoliciesCommand";
 import { ListPolicyStoresCommand, } from "./commands/ListPolicyStoresCommand";
 import { ListPolicyTemplatesCommand, } from "./commands/ListPolicyTemplatesCommand";
+import { ListTagsForResourceCommand, } from "./commands/ListTagsForResourceCommand";
 import { PutSchemaCommand } from "./commands/PutSchemaCommand";
+import { TagResourceCommand } from "./commands/TagResourceCommand";
+import { UntagResourceCommand, } from "./commands/UntagResourceCommand";
 import { UpdateIdentitySourceCommand, } from "./commands/UpdateIdentitySourceCommand";
 import { UpdatePolicyCommand, } from "./commands/UpdatePolicyCommand";
 import { UpdatePolicyStoreCommand, } from "./commands/UpdatePolicyStoreCommand";
@@ -50,7 +53,10 @@ const commands = {
     ListPoliciesCommand,
     ListPolicyStoresCommand,
     ListPolicyTemplatesCommand,
+    ListTagsForResourceCommand,
     PutSchemaCommand,
+    TagResourceCommand,
+    UntagResourceCommand,
     UpdateIdentitySourceCommand,
     UpdatePolicyCommand,
     UpdatePolicyStoreCommand,

package/dist-es/commands/ListTagsForResourceCommand.js

@@ -0,0 +1,22 @@
+import { getEndpointPlugin } from "@smithy/middleware-endpoint";
+import { getSerdePlugin } from "@smithy/middleware-serde";
+import { Command as $Command } from "@smithy/smithy-client";
+import { commonParams } from "../endpoint/EndpointParameters";
+import { de_ListTagsForResourceCommand, se_ListTagsForResourceCommand } from "../protocols/Aws_json1_0";
+export { $Command };
+export class ListTagsForResourceCommand extends $Command
+    .classBuilder()
+    .ep(commonParams)
+    .m(function (Command, cs, config, o) {
+    return [
+        getSerdePlugin(config, this.serialize, this.deserialize),
+        getEndpointPlugin(config, Command.getEndpointParameterInstructions()),
+    ];
+})
+    .s("VerifiedPermissions", "ListTagsForResource", {})
+    .n("VerifiedPermissionsClient", "ListTagsForResourceCommand")
+    .f(void 0, void 0)
+    .ser(se_ListTagsForResourceCommand)
+    .de(de_ListTagsForResourceCommand)
+    .build() {
+}

package/dist-es/commands/TagResourceCommand.js

@@ -0,0 +1,22 @@
+import { getEndpointPlugin } from "@smithy/middleware-endpoint";
+import { getSerdePlugin } from "@smithy/middleware-serde";
+import { Command as $Command } from "@smithy/smithy-client";
+import { commonParams } from "../endpoint/EndpointParameters";
+import { de_TagResourceCommand, se_TagResourceCommand } from "../protocols/Aws_json1_0";
+export { $Command };
+export class TagResourceCommand extends $Command
+    .classBuilder()
+    .ep(commonParams)
+    .m(function (Command, cs, config, o) {
+    return [
+        getSerdePlugin(config, this.serialize, this.deserialize),
+        getEndpointPlugin(config, Command.getEndpointParameterInstructions()),
+    ];
+})
+    .s("VerifiedPermissions", "TagResource", {})
+    .n("VerifiedPermissionsClient", "TagResourceCommand")
+    .f(void 0, void 0)
+    .ser(se_TagResourceCommand)
+    .de(de_TagResourceCommand)
+    .build() {
+}

package/dist-es/commands/UntagResourceCommand.js

@@ -0,0 +1,22 @@
+import { getEndpointPlugin } from "@smithy/middleware-endpoint";
+import { getSerdePlugin } from "@smithy/middleware-serde";
+import { Command as $Command } from "@smithy/smithy-client";
+import { commonParams } from "../endpoint/EndpointParameters";
+import { de_UntagResourceCommand, se_UntagResourceCommand } from "../protocols/Aws_json1_0";
+export { $Command };
+export class UntagResourceCommand extends $Command
+    .classBuilder()
+    .ep(commonParams)
+    .m(function (Command, cs, config, o) {
+    return [
+        getSerdePlugin(config, this.serialize, this.deserialize),
+        getEndpointPlugin(config, Command.getEndpointParameterInstructions()),
+    ];
+})
+    .s("VerifiedPermissions", "UntagResource", {})
+    .n("VerifiedPermissionsClient", "UntagResourceCommand")
+    .f(void 0, void 0)
+    .ser(se_UntagResourceCommand)
+    .de(de_UntagResourceCommand)
+    .build() {
+}

package/dist-es/commands/index.js

@@ -20,7 +20,10 @@ export * from "./ListIdentitySourcesCommand";
 export * from "./ListPoliciesCommand";
 export * from "./ListPolicyStoresCommand";
 export * from "./ListPolicyTemplatesCommand";
+export * from "./ListTagsForResourceCommand";
 export * from "./PutSchemaCommand";
+export * from "./TagResourceCommand";
+export * from "./UntagResourceCommand";
 export * from "./UpdateIdentitySourceCommand";
 export * from "./UpdatePolicyCommand";
 export * from "./UpdatePolicyStoreCommand";

package/dist-es/models/models_0.js

@@ -103,6 +103,10 @@ export class ResourceNotFoundException extends __BaseException {
         this.resourceType = opts.resourceType;
     }
 }
+export const CedarVersion = {
+    CEDAR_2: "CEDAR_2",
+    CEDAR_4: "CEDAR_4",
+};
 export var OpenIdConnectTokenSelection;
 (function (OpenIdConnectTokenSelection) {
     OpenIdConnectTokenSelection.visit = (value, visitor) => {
@@ -290,6 +294,20 @@ export var SchemaDefinition;
         return visitor._(value.$unknown[0], value.$unknown[1]);
     };
 })(SchemaDefinition || (SchemaDefinition = {}));
+export class TooManyTagsException extends __BaseException {
+    name = "TooManyTagsException";
+    $fault = "client";
+    resourceName;
+    constructor(opts) {
+        super({
+            name: "TooManyTagsException",
+            $fault: "client",
+            ...opts,
+        });
+        Object.setPrototypeOf(this, TooManyTagsException.prototype);
+        this.resourceName = opts.resourceName;
+    }
+}
 export var AttributeValue;
 (function (AttributeValue) {
     AttributeValue.visit = (value, visitor) => {