@aws-sdk/client-verifiedpermissions 3.927.0 → 3.928.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (58) hide show
  1. package/dist-cjs/index.js +1739 -2225
  2. package/dist-cjs/runtimeConfig.shared.js +7 -0
  3. package/dist-es/VerifiedPermissionsClient.js +2 -0
  4. package/dist-es/commands/BatchGetPolicyCommand.js +3 -10
  5. package/dist-es/commands/BatchIsAuthorizedCommand.js +3 -10
  6. package/dist-es/commands/BatchIsAuthorizedWithTokenCommand.js +3 -10
  7. package/dist-es/commands/CreateIdentitySourceCommand.js +3 -10
  8. package/dist-es/commands/CreatePolicyCommand.js +3 -10
  9. package/dist-es/commands/CreatePolicyStoreCommand.js +3 -10
  10. package/dist-es/commands/CreatePolicyTemplateCommand.js +3 -10
  11. package/dist-es/commands/DeleteIdentitySourceCommand.js +3 -9
  12. package/dist-es/commands/DeletePolicyCommand.js +3 -9
  13. package/dist-es/commands/DeletePolicyStoreCommand.js +3 -9
  14. package/dist-es/commands/DeletePolicyTemplateCommand.js +3 -9
  15. package/dist-es/commands/GetIdentitySourceCommand.js +3 -10
  16. package/dist-es/commands/GetPolicyCommand.js +3 -10
  17. package/dist-es/commands/GetPolicyStoreCommand.js +3 -10
  18. package/dist-es/commands/GetPolicyTemplateCommand.js +3 -10
  19. package/dist-es/commands/GetSchemaCommand.js +3 -10
  20. package/dist-es/commands/IsAuthorizedCommand.js +3 -10
  21. package/dist-es/commands/IsAuthorizedWithTokenCommand.js +3 -10
  22. package/dist-es/commands/ListIdentitySourcesCommand.js +3 -10
  23. package/dist-es/commands/ListPoliciesCommand.js +3 -10
  24. package/dist-es/commands/ListPolicyStoresCommand.js +3 -10
  25. package/dist-es/commands/ListPolicyTemplatesCommand.js +3 -10
  26. package/dist-es/commands/ListTagsForResourceCommand.js +3 -9
  27. package/dist-es/commands/PutSchemaCommand.js +3 -10
  28. package/dist-es/commands/TagResourceCommand.js +3 -9
  29. package/dist-es/commands/UntagResourceCommand.js +3 -9
  30. package/dist-es/commands/UpdateIdentitySourceCommand.js +3 -10
  31. package/dist-es/commands/UpdatePolicyCommand.js +3 -10
  32. package/dist-es/commands/UpdatePolicyStoreCommand.js +3 -10
  33. package/dist-es/commands/UpdatePolicyTemplateCommand.js +3 -10
  34. package/dist-es/models/models_0.js +26 -593
  35. package/dist-es/runtimeConfig.shared.js +7 -0
  36. package/dist-es/schemas/schemas_0.js +1628 -0
  37. package/dist-types/VerifiedPermissionsClient.d.ts +10 -1
  38. package/dist-types/commands/BatchIsAuthorizedCommand.d.ts +33 -0
  39. package/dist-types/commands/BatchIsAuthorizedWithTokenCommand.d.ts +33 -0
  40. package/dist-types/commands/IsAuthorizedCommand.d.ts +33 -0
  41. package/dist-types/commands/IsAuthorizedWithTokenCommand.d.ts +33 -0
  42. package/dist-types/models/models_0.d.ts +268 -441
  43. package/dist-types/runtimeConfig.browser.d.ts +1 -0
  44. package/dist-types/runtimeConfig.d.ts +1 -0
  45. package/dist-types/runtimeConfig.native.d.ts +1 -0
  46. package/dist-types/runtimeConfig.shared.d.ts +1 -0
  47. package/dist-types/schemas/schemas_0.d.ts +229 -0
  48. package/dist-types/ts3.4/VerifiedPermissionsClient.d.ts +4 -0
  49. package/dist-types/ts3.4/models/models_0.d.ts +184 -297
  50. package/dist-types/ts3.4/runtimeConfig.browser.d.ts +4 -0
  51. package/dist-types/ts3.4/runtimeConfig.d.ts +4 -0
  52. package/dist-types/ts3.4/runtimeConfig.native.d.ts +4 -0
  53. package/dist-types/ts3.4/runtimeConfig.shared.d.ts +4 -0
  54. package/dist-types/ts3.4/schemas/schemas_0.d.ts +236 -0
  55. package/package.json +5 -6
  56. package/dist-es/protocols/Aws_json1_0.js +0 -1303
  57. package/dist-types/protocols/Aws_json1_0.d.ts +0 -272
  58. package/dist-types/ts3.4/protocols/Aws_json1_0.d.ts +0 -365
@@ -2960,7 +2960,7 @@ export interface UntagResourceInput {
2960
2960
  export interface UntagResourceOutput {
2961
2961
  }
2962
2962
  /**
2963
- * <p>The value of an attribute.</p> <p>Contains information about the runtime context for a request for which an authorization decision is made. </p> <p>This data type is used as a member of the <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_ContextDefinition.html">ContextDefinition</a> structure which is uses as a request parameter for the <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html">IsAuthorized</a>, <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html">BatchIsAuthorized</a>, and <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html">IsAuthorizedWithToken</a> operations.</p>
2963
+ * <p>The value of an attribute.</p> <p>Contains information about the runtime context for a request for which an authorization decision is made. </p> <p>This data type is used as a member of the <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_ContextDefinition.html">ContextDefinition</a> structure which is used as a request parameter for the <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html">IsAuthorized</a>, <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html">BatchIsAuthorized</a>, and <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html">IsAuthorizedWithToken</a> operations.</p>
2964
2964
  * @public
2965
2965
  */
2966
2966
  export type AttributeValue = AttributeValue.BooleanMember | AttributeValue.DatetimeMember | AttributeValue.DecimalMember | AttributeValue.DurationMember | AttributeValue.EntityIdentifierMember | AttributeValue.IpaddrMember | AttributeValue.LongMember | AttributeValue.RecordMember | AttributeValue.SetMember | AttributeValue.StringMember | AttributeValue.$UnknownMember;
@@ -2969,7 +2969,7 @@ export type AttributeValue = AttributeValue.BooleanMember | AttributeValue.Datet
2969
2969
  */
2970
2970
  export declare namespace AttributeValue {
2971
2971
  /**
2972
- * <p>An attribute value of <a href="https://docs.cedarpolicy.com/policies/syntax-datatypes.html#boolean">Boolean</a> type.</p> <p>Example: <code>\{"boolean": true\}</code> </p>
2972
+ * <p>An attribute value of <a href="https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-bool">Boolean</a> type.</p> <p>Example: <code>\{"boolean": true\}</code> </p>
2973
2973
  * @public
2974
2974
  */
2975
2975
  interface BooleanMember {
@@ -2986,7 +2986,7 @@ export declare namespace AttributeValue {
2986
2986
  $unknown?: never;
2987
2987
  }
2988
2988
  /**
2989
- * <p>An attribute value of type <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_EntityIdentifier.html">EntityIdentifier</a>.</p> <p>Example: <code>"entityIdentifier": \{ "entityId": "&lt;id&gt;", "entityType": "&lt;entity type&gt;"\}</code> </p>
2989
+ * <p>An attribute value of type <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_EntityIdentifier.html">EntityIdentifier</a>.</p> <p>Example: <code>\{"entityIdentifier": \{ "entityId": "alice", "entityType": "User"\} \}</code> </p>
2990
2990
  * @public
2991
2991
  */
2992
2992
  interface EntityIdentifierMember {
@@ -3003,7 +3003,7 @@ export declare namespace AttributeValue {
3003
3003
  $unknown?: never;
3004
3004
  }
3005
3005
  /**
3006
- * <p>An attribute value of <a href="https://docs.cedarpolicy.com/policies/syntax-datatypes.html#long">Long</a> type.</p> <p>Example: <code>\{"long": 0\}</code> </p>
3006
+ * <p>An attribute value of <a href="https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-long">Long</a> type.</p> <p>Example: <code>\{"long": 0\}</code> </p>
3007
3007
  * @public
3008
3008
  */
3009
3009
  interface LongMember {
@@ -3020,7 +3020,7 @@ export declare namespace AttributeValue {
3020
3020
  $unknown?: never;
3021
3021
  }
3022
3022
  /**
3023
- * <p>An attribute value of <a href="https://docs.cedarpolicy.com/policies/syntax-datatypes.html#string">String</a> type.</p> <p>Example: <code>\{"string": "abc"\}</code> </p>
3023
+ * <p>An attribute value of <a href="https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-string">String</a> type.</p> <p>Example: <code>\{"string": "abc"\}</code> </p>
3024
3024
  * @public
3025
3025
  */
3026
3026
  interface StringMember {
@@ -3037,7 +3037,7 @@ export declare namespace AttributeValue {
3037
3037
  $unknown?: never;
3038
3038
  }
3039
3039
  /**
3040
- * <p>An attribute value of <a href="https://docs.cedarpolicy.com/policies/syntax-datatypes.html#set">Set</a> type.</p> <p>Example: <code>\{"set": [ \{\} ] \}</code> </p>
3040
+ * <p>An attribute value of <a href="https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-set">Set</a> type.</p> <p>Example: <code>\{"set": [ \{\} ] \}</code> </p>
3041
3041
  * @public
3042
3042
  */
3043
3043
  interface SetMember {
@@ -3054,7 +3054,7 @@ export declare namespace AttributeValue {
3054
3054
  $unknown?: never;
3055
3055
  }
3056
3056
  /**
3057
- * <p>An attribute value of <a href="https://docs.cedarpolicy.com/policies/syntax-datatypes.html#record">Record</a> type.</p> <p>Example: <code>\{"record": \{ "keyName": \{\} \} \}</code> </p>
3057
+ * <p>An attribute value of <a href="https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-record">Record</a> type.</p> <p>Example: <code>\{"record": \{ "keyName": \{\} \} \}</code> </p>
3058
3058
  * @public
3059
3059
  */
3060
3060
  interface RecordMember {
@@ -3169,6 +3169,216 @@ export declare namespace AttributeValue {
3169
3169
  }
3170
3170
  const visit: <T>(value: AttributeValue, visitor: Visitor<T>) => T;
3171
3171
  }
3172
+ /**
3173
+ * <p>The value of an entity's Cedar tag.</p> <p>This data type is used as a member of the <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_EntityItem.html">EntityItem</a> structure that forms the body of the <code>Entities</code> request parameter for the <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html">IsAuthorized</a>, <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html">BatchIsAuthorized</a>, <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html">IsAuthorizedWithToken</a>, and <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorizedWithToken.html">BatchIsAuthorizedWithToken</a> operations.</p>
3174
+ * @public
3175
+ */
3176
+ export type CedarTagValue = CedarTagValue.BooleanMember | CedarTagValue.DatetimeMember | CedarTagValue.DecimalMember | CedarTagValue.DurationMember | CedarTagValue.EntityIdentifierMember | CedarTagValue.IpaddrMember | CedarTagValue.LongMember | CedarTagValue.RecordMember | CedarTagValue.SetMember | CedarTagValue.StringMember | CedarTagValue.$UnknownMember;
3177
+ /**
3178
+ * @public
3179
+ */
3180
+ export declare namespace CedarTagValue {
3181
+ /**
3182
+ * <p>A Cedar tag value of <a href="https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-bool">Boolean</a> type.</p> <p>Example: <code>\{"boolean": false\}</code> </p>
3183
+ * @public
3184
+ */
3185
+ interface BooleanMember {
3186
+ boolean: boolean;
3187
+ entityIdentifier?: never;
3188
+ long?: never;
3189
+ string?: never;
3190
+ set?: never;
3191
+ record?: never;
3192
+ ipaddr?: never;
3193
+ decimal?: never;
3194
+ datetime?: never;
3195
+ duration?: never;
3196
+ $unknown?: never;
3197
+ }
3198
+ /**
3199
+ * <p>A Cedar tag value of type <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_EntityIdentifier.html">EntityIdentifier</a>.</p> <p>Example: <code>\{"entityIdentifier": \{ "entityId": "alice", "entityType": "User"\} \}</code> </p>
3200
+ * @public
3201
+ */
3202
+ interface EntityIdentifierMember {
3203
+ boolean?: never;
3204
+ entityIdentifier: EntityIdentifier;
3205
+ long?: never;
3206
+ string?: never;
3207
+ set?: never;
3208
+ record?: never;
3209
+ ipaddr?: never;
3210
+ decimal?: never;
3211
+ datetime?: never;
3212
+ duration?: never;
3213
+ $unknown?: never;
3214
+ }
3215
+ /**
3216
+ * <p>A Cedar tag value of <a href="https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-long">Long</a> type.</p> <p>Example: <code>\{"long": 0\}</code> </p>
3217
+ * @public
3218
+ */
3219
+ interface LongMember {
3220
+ boolean?: never;
3221
+ entityIdentifier?: never;
3222
+ long: number;
3223
+ string?: never;
3224
+ set?: never;
3225
+ record?: never;
3226
+ ipaddr?: never;
3227
+ decimal?: never;
3228
+ datetime?: never;
3229
+ duration?: never;
3230
+ $unknown?: never;
3231
+ }
3232
+ /**
3233
+ * <p>A Cedar tag value of <a href="https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-string">String</a> type.</p> <p>Example: <code>\{"string": "abc"\}</code> </p>
3234
+ * @public
3235
+ */
3236
+ interface StringMember {
3237
+ boolean?: never;
3238
+ entityIdentifier?: never;
3239
+ long?: never;
3240
+ string: string;
3241
+ set?: never;
3242
+ record?: never;
3243
+ ipaddr?: never;
3244
+ decimal?: never;
3245
+ datetime?: never;
3246
+ duration?: never;
3247
+ $unknown?: never;
3248
+ }
3249
+ /**
3250
+ * <p>A Cedar tag value of <a href="https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-set">Set</a> type.</p> <p>Example: <code>\{"set": [ \{ "string": "abc" \} ] \}</code> </p>
3251
+ * @public
3252
+ */
3253
+ interface SetMember {
3254
+ boolean?: never;
3255
+ entityIdentifier?: never;
3256
+ long?: never;
3257
+ string?: never;
3258
+ set: CedarTagValue[];
3259
+ record?: never;
3260
+ ipaddr?: never;
3261
+ decimal?: never;
3262
+ datetime?: never;
3263
+ duration?: never;
3264
+ $unknown?: never;
3265
+ }
3266
+ /**
3267
+ * <p>A Cedar tag value of <a href="https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-record">Record</a> type.</p> <p>Example: <code>\{"record": \{ "keyName": \{\} \} \}</code> </p>
3268
+ * @public
3269
+ */
3270
+ interface RecordMember {
3271
+ boolean?: never;
3272
+ entityIdentifier?: never;
3273
+ long?: never;
3274
+ string?: never;
3275
+ set?: never;
3276
+ record: Record<string, CedarTagValue>;
3277
+ ipaddr?: never;
3278
+ decimal?: never;
3279
+ datetime?: never;
3280
+ duration?: never;
3281
+ $unknown?: never;
3282
+ }
3283
+ /**
3284
+ * <p>A Cedar tag value of <a href="https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-ipaddr">ipaddr</a> type.</p> <p>Example: <code>\{"ip": "10.50.0.0/24"\}</code> </p>
3285
+ * @public
3286
+ */
3287
+ interface IpaddrMember {
3288
+ boolean?: never;
3289
+ entityIdentifier?: never;
3290
+ long?: never;
3291
+ string?: never;
3292
+ set?: never;
3293
+ record?: never;
3294
+ ipaddr: string;
3295
+ decimal?: never;
3296
+ datetime?: never;
3297
+ duration?: never;
3298
+ $unknown?: never;
3299
+ }
3300
+ /**
3301
+ * <p>A Cedar tag value of <a href="https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-decimal">decimal</a> type.</p> <p>Example: <code>\{"decimal": "-2.0"\}</code> </p>
3302
+ * @public
3303
+ */
3304
+ interface DecimalMember {
3305
+ boolean?: never;
3306
+ entityIdentifier?: never;
3307
+ long?: never;
3308
+ string?: never;
3309
+ set?: never;
3310
+ record?: never;
3311
+ ipaddr?: never;
3312
+ decimal: string;
3313
+ datetime?: never;
3314
+ duration?: never;
3315
+ $unknown?: never;
3316
+ }
3317
+ /**
3318
+ * <p>A Cedar tag value of <a href="https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-datetime">datetime</a> type.</p> <p>Example: <code>\{"datetime": "2025-11-04T11:35:00.000+0100"\}</code> </p>
3319
+ * @public
3320
+ */
3321
+ interface DatetimeMember {
3322
+ boolean?: never;
3323
+ entityIdentifier?: never;
3324
+ long?: never;
3325
+ string?: never;
3326
+ set?: never;
3327
+ record?: never;
3328
+ ipaddr?: never;
3329
+ decimal?: never;
3330
+ datetime: string;
3331
+ duration?: never;
3332
+ $unknown?: never;
3333
+ }
3334
+ /**
3335
+ * <p>A Cedar tag value of <a href="https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-duration">duration</a> type.</p> <p>Example: <code>\{"duration": "-1d12h"\}</code> </p>
3336
+ * @public
3337
+ */
3338
+ interface DurationMember {
3339
+ boolean?: never;
3340
+ entityIdentifier?: never;
3341
+ long?: never;
3342
+ string?: never;
3343
+ set?: never;
3344
+ record?: never;
3345
+ ipaddr?: never;
3346
+ decimal?: never;
3347
+ datetime?: never;
3348
+ duration: string;
3349
+ $unknown?: never;
3350
+ }
3351
+ /**
3352
+ * @public
3353
+ */
3354
+ interface $UnknownMember {
3355
+ boolean?: never;
3356
+ entityIdentifier?: never;
3357
+ long?: never;
3358
+ string?: never;
3359
+ set?: never;
3360
+ record?: never;
3361
+ ipaddr?: never;
3362
+ decimal?: never;
3363
+ datetime?: never;
3364
+ duration?: never;
3365
+ $unknown: [string, any];
3366
+ }
3367
+ interface Visitor<T> {
3368
+ boolean: (value: boolean) => T;
3369
+ entityIdentifier: (value: EntityIdentifier) => T;
3370
+ long: (value: number) => T;
3371
+ string: (value: string) => T;
3372
+ set: (value: CedarTagValue[]) => T;
3373
+ record: (value: Record<string, CedarTagValue>) => T;
3374
+ ipaddr: (value: string) => T;
3375
+ decimal: (value: string) => T;
3376
+ datetime: (value: string) => T;
3377
+ duration: (value: string) => T;
3378
+ _: (name: string, value: any) => T;
3379
+ }
3380
+ const visit: <T>(value: CedarTagValue, visitor: Visitor<T>) => T;
3381
+ }
3172
3382
  /**
3173
3383
  * <p>Contains additional details about the context of the request. Verified Permissions evaluates this information in an authorization request as part of the <code>when</code> and <code>unless</code> clauses in a policy.</p> <p>This data type is used as a request parameter for the <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html">IsAuthorized</a>, <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html">BatchIsAuthorized</a>, and <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html">IsAuthorizedWithToken</a> operations.</p> <p>If you're passing context as part of the request, exactly one instance of <code>context</code> must be passed. If you don't want to pass context, omit the <code>context</code> parameter from your request rather than sending <code>context \{\}</code>.</p> <p>Example: <code>"context":\{"contextMap":\{"&lt;KeyName1&gt;":\{"boolean":true\},"&lt;KeyName2&gt;":\{"long":1234\}\}\}</code> </p>
3174
3384
  * @public
@@ -3211,27 +3421,6 @@ export declare namespace ContextDefinition {
3211
3421
  }
3212
3422
  const visit: <T>(value: ContextDefinition, visitor: Visitor<T>) => T;
3213
3423
  }
3214
- /**
3215
- * <p>Contains information about an entity that can be referenced in a Cedar policy.</p> <p>This data type is used as one of the fields in the <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_EntitiesDefinition.html">EntitiesDefinition</a> structure.</p> <p> <code>\{ "identifier": \{ "entityType": "Photo", "entityId": "VacationPhoto94.jpg" \}, "attributes": \{\}, "parents": [ \{ "entityType": "Album", "entityId": "alice_folder" \} ] \}</code> </p>
3216
- * @public
3217
- */
3218
- export interface EntityItem {
3219
- /**
3220
- * <p>The identifier of the entity.</p>
3221
- * @public
3222
- */
3223
- identifier: EntityIdentifier | undefined;
3224
- /**
3225
- * <p>A list of attributes for the entity.</p>
3226
- * @public
3227
- */
3228
- attributes?: Record<string, AttributeValue> | undefined;
3229
- /**
3230
- * <p>The parent entities in the hierarchy that contains the entity. A principal or resource entity can be defined with at most 99 <i>transitive parents</i> per authorization request. </p> <p>A transitive parent is an entity in the hierarchy of entities including all direct parents, and parents of parents. For example, a user can be a member of 91 groups if one of those groups is a member of eight groups, for a total of 100: one entity, 91 entity parents, and eight parents of parents. </p>
3231
- * @public
3232
- */
3233
- parents?: EntityIdentifier[] | undefined;
3234
- }
3235
3424
  /**
3236
3425
  * <p>An authorization request that you include in a <code>BatchIsAuthorized</code> API request.</p>
3237
3426
  * @public
@@ -3331,6 +3520,57 @@ export interface BatchIsAuthorizedWithTokenOutputItem {
3331
3520
  */
3332
3521
  errors: EvaluationErrorItem[] | undefined;
3333
3522
  }
3523
+ /**
3524
+ * @public
3525
+ */
3526
+ export interface BatchIsAuthorizedOutput {
3527
+ /**
3528
+ * <p>A series of <code>Allow</code> or <code>Deny</code> decisions for each request, and the policies that produced them. These results are returned in the order they were requested.</p>
3529
+ * @public
3530
+ */
3531
+ results: BatchIsAuthorizedOutputItem[] | undefined;
3532
+ }
3533
+ /**
3534
+ * @public
3535
+ */
3536
+ export interface BatchIsAuthorizedWithTokenOutput {
3537
+ /**
3538
+ * <p>The identifier of the principal in the ID or access token.</p>
3539
+ * @public
3540
+ */
3541
+ principal?: EntityIdentifier | undefined;
3542
+ /**
3543
+ * <p>A series of <code>Allow</code> or <code>Deny</code> decisions for each request, and the policies that produced them. These results are returned in the order they were requested.</p>
3544
+ * @public
3545
+ */
3546
+ results: BatchIsAuthorizedWithTokenOutputItem[] | undefined;
3547
+ }
3548
+ /**
3549
+ * <p>Contains information about an entity that can be referenced in a Cedar policy.</p> <p>This data type is used as one of the fields in the <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_EntitiesDefinition.html">EntitiesDefinition</a> structure.</p> <p> <code>\{ "identifier": \{ "entityType": "Photo", "entityId": "VacationPhoto94.jpg" \}, "attributes": \{\}, "parents": [ \{ "entityType": "Album", "entityId": "alice_folder" \} ] \}</code> </p>
3550
+ * @public
3551
+ */
3552
+ export interface EntityItem {
3553
+ /**
3554
+ * <p>The identifier of the entity.</p>
3555
+ * @public
3556
+ */
3557
+ identifier: EntityIdentifier | undefined;
3558
+ /**
3559
+ * <p>A list of attributes for the entity.</p>
3560
+ * @public
3561
+ */
3562
+ attributes?: Record<string, AttributeValue> | undefined;
3563
+ /**
3564
+ * <p>The parent entities in the hierarchy that contains the entity. A principal or resource entity can be defined with at most 99 <i>transitive parents</i> per authorization request. </p> <p>A transitive parent is an entity in the hierarchy of entities including all direct parents, and parents of parents. For example, a user can be a member of 91 groups if one of those groups is a member of eight groups, for a total of 100: one entity, 91 entity parents, and eight parents of parents. </p>
3565
+ * @public
3566
+ */
3567
+ parents?: EntityIdentifier[] | undefined;
3568
+ /**
3569
+ * <p>A list of cedar tags for the entity.</p>
3570
+ * @public
3571
+ */
3572
+ tags?: Record<string, CedarTagValue> | undefined;
3573
+ }
3334
3574
  /**
3335
3575
  * <p>Contains the list of entities to be considered during an authorization request. This includes all principals, resources, and actions required to successfully evaluate the request.</p> <p>This data type is used as a field in the response parameter for the <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html">IsAuthorized</a> and <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html">IsAuthorizedWithToken</a> operations.</p>
3336
3576
  * @public
@@ -3373,31 +3613,6 @@ export declare namespace EntitiesDefinition {
3373
3613
  }
3374
3614
  const visit: <T>(value: EntitiesDefinition, visitor: Visitor<T>) => T;
3375
3615
  }
3376
- /**
3377
- * @public
3378
- */
3379
- export interface BatchIsAuthorizedOutput {
3380
- /**
3381
- * <p>A series of <code>Allow</code> or <code>Deny</code> decisions for each request, and the policies that produced them. These results are returned in the order they were requested.</p>
3382
- * @public
3383
- */
3384
- results: BatchIsAuthorizedOutputItem[] | undefined;
3385
- }
3386
- /**
3387
- * @public
3388
- */
3389
- export interface BatchIsAuthorizedWithTokenOutput {
3390
- /**
3391
- * <p>The identifier of the principal in the ID or access token.</p>
3392
- * @public
3393
- */
3394
- principal?: EntityIdentifier | undefined;
3395
- /**
3396
- * <p>A series of <code>Allow</code> or <code>Deny</code> decisions for each request, and the policies that produced them. These results are returned in the order they were requested.</p>
3397
- * @public
3398
- */
3399
- results: BatchIsAuthorizedWithTokenOutputItem[] | undefined;
3400
- }
3401
3616
  /**
3402
3617
  * @public
3403
3618
  */
@@ -3523,391 +3738,3 @@ export interface BatchIsAuthorizedWithTokenInput {
3523
3738
  */
3524
3739
  requests: BatchIsAuthorizedWithTokenInputItem[] | undefined;
3525
3740
  }
3526
- /**
3527
- * @internal
3528
- */
3529
- export declare const ActionIdentifierFilterSensitiveLog: (obj: ActionIdentifier) => any;
3530
- /**
3531
- * @internal
3532
- */
3533
- export declare const EntityIdentifierFilterSensitiveLog: (obj: EntityIdentifier) => any;
3534
- /**
3535
- * @internal
3536
- */
3537
- export declare const StaticPolicyDefinitionDetailFilterSensitiveLog: (obj: StaticPolicyDefinitionDetail) => any;
3538
- /**
3539
- * @internal
3540
- */
3541
- export declare const TemplateLinkedPolicyDefinitionDetailFilterSensitiveLog: (obj: TemplateLinkedPolicyDefinitionDetail) => any;
3542
- /**
3543
- * @internal
3544
- */
3545
- export declare const PolicyDefinitionDetailFilterSensitiveLog: (obj: PolicyDefinitionDetail) => any;
3546
- /**
3547
- * @internal
3548
- */
3549
- export declare const BatchGetPolicyOutputItemFilterSensitiveLog: (obj: BatchGetPolicyOutputItem) => any;
3550
- /**
3551
- * @internal
3552
- */
3553
- export declare const BatchGetPolicyOutputFilterSensitiveLog: (obj: BatchGetPolicyOutput) => any;
3554
- /**
3555
- * @internal
3556
- */
3557
- export declare const EvaluationErrorItemFilterSensitiveLog: (obj: EvaluationErrorItem) => any;
3558
- /**
3559
- * @internal
3560
- */
3561
- export declare const CognitoGroupConfigurationFilterSensitiveLog: (obj: CognitoGroupConfiguration) => any;
3562
- /**
3563
- * @internal
3564
- */
3565
- export declare const CognitoGroupConfigurationDetailFilterSensitiveLog: (obj: CognitoGroupConfigurationDetail) => any;
3566
- /**
3567
- * @internal
3568
- */
3569
- export declare const CognitoGroupConfigurationItemFilterSensitiveLog: (obj: CognitoGroupConfigurationItem) => any;
3570
- /**
3571
- * @internal
3572
- */
3573
- export declare const CognitoUserPoolConfigurationFilterSensitiveLog: (obj: CognitoUserPoolConfiguration) => any;
3574
- /**
3575
- * @internal
3576
- */
3577
- export declare const CognitoUserPoolConfigurationDetailFilterSensitiveLog: (obj: CognitoUserPoolConfigurationDetail) => any;
3578
- /**
3579
- * @internal
3580
- */
3581
- export declare const CognitoUserPoolConfigurationItemFilterSensitiveLog: (obj: CognitoUserPoolConfigurationItem) => any;
3582
- /**
3583
- * @internal
3584
- */
3585
- export declare const OpenIdConnectGroupConfigurationFilterSensitiveLog: (obj: OpenIdConnectGroupConfiguration) => any;
3586
- /**
3587
- * @internal
3588
- */
3589
- export declare const OpenIdConnectAccessTokenConfigurationFilterSensitiveLog: (obj: OpenIdConnectAccessTokenConfiguration) => any;
3590
- /**
3591
- * @internal
3592
- */
3593
- export declare const OpenIdConnectIdentityTokenConfigurationFilterSensitiveLog: (obj: OpenIdConnectIdentityTokenConfiguration) => any;
3594
- /**
3595
- * @internal
3596
- */
3597
- export declare const OpenIdConnectTokenSelectionFilterSensitiveLog: (obj: OpenIdConnectTokenSelection) => any;
3598
- /**
3599
- * @internal
3600
- */
3601
- export declare const OpenIdConnectConfigurationFilterSensitiveLog: (obj: OpenIdConnectConfiguration) => any;
3602
- /**
3603
- * @internal
3604
- */
3605
- export declare const ConfigurationFilterSensitiveLog: (obj: Configuration) => any;
3606
- /**
3607
- * @internal
3608
- */
3609
- export declare const OpenIdConnectGroupConfigurationDetailFilterSensitiveLog: (obj: OpenIdConnectGroupConfigurationDetail) => any;
3610
- /**
3611
- * @internal
3612
- */
3613
- export declare const OpenIdConnectAccessTokenConfigurationDetailFilterSensitiveLog: (obj: OpenIdConnectAccessTokenConfigurationDetail) => any;
3614
- /**
3615
- * @internal
3616
- */
3617
- export declare const OpenIdConnectIdentityTokenConfigurationDetailFilterSensitiveLog: (obj: OpenIdConnectIdentityTokenConfigurationDetail) => any;
3618
- /**
3619
- * @internal
3620
- */
3621
- export declare const OpenIdConnectTokenSelectionDetailFilterSensitiveLog: (obj: OpenIdConnectTokenSelectionDetail) => any;
3622
- /**
3623
- * @internal
3624
- */
3625
- export declare const OpenIdConnectConfigurationDetailFilterSensitiveLog: (obj: OpenIdConnectConfigurationDetail) => any;
3626
- /**
3627
- * @internal
3628
- */
3629
- export declare const ConfigurationDetailFilterSensitiveLog: (obj: ConfigurationDetail) => any;
3630
- /**
3631
- * @internal
3632
- */
3633
- export declare const OpenIdConnectGroupConfigurationItemFilterSensitiveLog: (obj: OpenIdConnectGroupConfigurationItem) => any;
3634
- /**
3635
- * @internal
3636
- */
3637
- export declare const OpenIdConnectAccessTokenConfigurationItemFilterSensitiveLog: (obj: OpenIdConnectAccessTokenConfigurationItem) => any;
3638
- /**
3639
- * @internal
3640
- */
3641
- export declare const OpenIdConnectIdentityTokenConfigurationItemFilterSensitiveLog: (obj: OpenIdConnectIdentityTokenConfigurationItem) => any;
3642
- /**
3643
- * @internal
3644
- */
3645
- export declare const OpenIdConnectTokenSelectionItemFilterSensitiveLog: (obj: OpenIdConnectTokenSelectionItem) => any;
3646
- /**
3647
- * @internal
3648
- */
3649
- export declare const OpenIdConnectConfigurationItemFilterSensitiveLog: (obj: OpenIdConnectConfigurationItem) => any;
3650
- /**
3651
- * @internal
3652
- */
3653
- export declare const ConfigurationItemFilterSensitiveLog: (obj: ConfigurationItem) => any;
3654
- /**
3655
- * @internal
3656
- */
3657
- export declare const CreateIdentitySourceInputFilterSensitiveLog: (obj: CreateIdentitySourceInput) => any;
3658
- /**
3659
- * @internal
3660
- */
3661
- export declare const StaticPolicyDefinitionFilterSensitiveLog: (obj: StaticPolicyDefinition) => any;
3662
- /**
3663
- * @internal
3664
- */
3665
- export declare const TemplateLinkedPolicyDefinitionFilterSensitiveLog: (obj: TemplateLinkedPolicyDefinition) => any;
3666
- /**
3667
- * @internal
3668
- */
3669
- export declare const PolicyDefinitionFilterSensitiveLog: (obj: PolicyDefinition) => any;
3670
- /**
3671
- * @internal
3672
- */
3673
- export declare const CreatePolicyInputFilterSensitiveLog: (obj: CreatePolicyInput) => any;
3674
- /**
3675
- * @internal
3676
- */
3677
- export declare const CreatePolicyOutputFilterSensitiveLog: (obj: CreatePolicyOutput) => any;
3678
- /**
3679
- * @internal
3680
- */
3681
- export declare const CreatePolicyStoreInputFilterSensitiveLog: (obj: CreatePolicyStoreInput) => any;
3682
- /**
3683
- * @internal
3684
- */
3685
- export declare const CreatePolicyTemplateInputFilterSensitiveLog: (obj: CreatePolicyTemplateInput) => any;
3686
- /**
3687
- * @internal
3688
- */
3689
- export declare const EntityReferenceFilterSensitiveLog: (obj: EntityReference) => any;
3690
- /**
3691
- * @internal
3692
- */
3693
- export declare const IdentitySourceDetailsFilterSensitiveLog: (obj: IdentitySourceDetails) => any;
3694
- /**
3695
- * @internal
3696
- */
3697
- export declare const GetIdentitySourceOutputFilterSensitiveLog: (obj: GetIdentitySourceOutput) => any;
3698
- /**
3699
- * @internal
3700
- */
3701
- export declare const GetPolicyOutputFilterSensitiveLog: (obj: GetPolicyOutput) => any;
3702
- /**
3703
- * @internal
3704
- */
3705
- export declare const GetPolicyStoreOutputFilterSensitiveLog: (obj: GetPolicyStoreOutput) => any;
3706
- /**
3707
- * @internal
3708
- */
3709
- export declare const GetPolicyTemplateOutputFilterSensitiveLog: (obj: GetPolicyTemplateOutput) => any;
3710
- /**
3711
- * @internal
3712
- */
3713
- export declare const GetSchemaOutputFilterSensitiveLog: (obj: GetSchemaOutput) => any;
3714
- /**
3715
- * @internal
3716
- */
3717
- export declare const IdentitySourceFilterFilterSensitiveLog: (obj: IdentitySourceFilter) => any;
3718
- /**
3719
- * @internal
3720
- */
3721
- export declare const ListIdentitySourcesInputFilterSensitiveLog: (obj: ListIdentitySourcesInput) => any;
3722
- /**
3723
- * @internal
3724
- */
3725
- export declare const IdentitySourceItemDetailsFilterSensitiveLog: (obj: IdentitySourceItemDetails) => any;
3726
- /**
3727
- * @internal
3728
- */
3729
- export declare const IdentitySourceItemFilterSensitiveLog: (obj: IdentitySourceItem) => any;
3730
- /**
3731
- * @internal
3732
- */
3733
- export declare const ListIdentitySourcesOutputFilterSensitiveLog: (obj: ListIdentitySourcesOutput) => any;
3734
- /**
3735
- * @internal
3736
- */
3737
- export declare const UpdateCognitoGroupConfigurationFilterSensitiveLog: (obj: UpdateCognitoGroupConfiguration) => any;
3738
- /**
3739
- * @internal
3740
- */
3741
- export declare const UpdateCognitoUserPoolConfigurationFilterSensitiveLog: (obj: UpdateCognitoUserPoolConfiguration) => any;
3742
- /**
3743
- * @internal
3744
- */
3745
- export declare const UpdateOpenIdConnectGroupConfigurationFilterSensitiveLog: (obj: UpdateOpenIdConnectGroupConfiguration) => any;
3746
- /**
3747
- * @internal
3748
- */
3749
- export declare const UpdateOpenIdConnectAccessTokenConfigurationFilterSensitiveLog: (obj: UpdateOpenIdConnectAccessTokenConfiguration) => any;
3750
- /**
3751
- * @internal
3752
- */
3753
- export declare const UpdateOpenIdConnectIdentityTokenConfigurationFilterSensitiveLog: (obj: UpdateOpenIdConnectIdentityTokenConfiguration) => any;
3754
- /**
3755
- * @internal
3756
- */
3757
- export declare const UpdateOpenIdConnectTokenSelectionFilterSensitiveLog: (obj: UpdateOpenIdConnectTokenSelection) => any;
3758
- /**
3759
- * @internal
3760
- */
3761
- export declare const UpdateOpenIdConnectConfigurationFilterSensitiveLog: (obj: UpdateOpenIdConnectConfiguration) => any;
3762
- /**
3763
- * @internal
3764
- */
3765
- export declare const UpdateConfigurationFilterSensitiveLog: (obj: UpdateConfiguration) => any;
3766
- /**
3767
- * @internal
3768
- */
3769
- export declare const UpdateIdentitySourceInputFilterSensitiveLog: (obj: UpdateIdentitySourceInput) => any;
3770
- /**
3771
- * @internal
3772
- */
3773
- export declare const IsAuthorizedOutputFilterSensitiveLog: (obj: IsAuthorizedOutput) => any;
3774
- /**
3775
- * @internal
3776
- */
3777
- export declare const IsAuthorizedWithTokenOutputFilterSensitiveLog: (obj: IsAuthorizedWithTokenOutput) => any;
3778
- /**
3779
- * @internal
3780
- */
3781
- export declare const PolicyFilterFilterSensitiveLog: (obj: PolicyFilter) => any;
3782
- /**
3783
- * @internal
3784
- */
3785
- export declare const ListPoliciesInputFilterSensitiveLog: (obj: ListPoliciesInput) => any;
3786
- /**
3787
- * @internal
3788
- */
3789
- export declare const StaticPolicyDefinitionItemFilterSensitiveLog: (obj: StaticPolicyDefinitionItem) => any;
3790
- /**
3791
- * @internal
3792
- */
3793
- export declare const TemplateLinkedPolicyDefinitionItemFilterSensitiveLog: (obj: TemplateLinkedPolicyDefinitionItem) => any;
3794
- /**
3795
- * @internal
3796
- */
3797
- export declare const PolicyDefinitionItemFilterSensitiveLog: (obj: PolicyDefinitionItem) => any;
3798
- /**
3799
- * @internal
3800
- */
3801
- export declare const PolicyItemFilterSensitiveLog: (obj: PolicyItem) => any;
3802
- /**
3803
- * @internal
3804
- */
3805
- export declare const ListPoliciesOutputFilterSensitiveLog: (obj: ListPoliciesOutput) => any;
3806
- /**
3807
- * @internal
3808
- */
3809
- export declare const PolicyStoreItemFilterSensitiveLog: (obj: PolicyStoreItem) => any;
3810
- /**
3811
- * @internal
3812
- */
3813
- export declare const ListPolicyStoresOutputFilterSensitiveLog: (obj: ListPolicyStoresOutput) => any;
3814
- /**
3815
- * @internal
3816
- */
3817
- export declare const PolicyTemplateItemFilterSensitiveLog: (obj: PolicyTemplateItem) => any;
3818
- /**
3819
- * @internal
3820
- */
3821
- export declare const ListPolicyTemplatesOutputFilterSensitiveLog: (obj: ListPolicyTemplatesOutput) => any;
3822
- /**
3823
- * @internal
3824
- */
3825
- export declare const UpdateStaticPolicyDefinitionFilterSensitiveLog: (obj: UpdateStaticPolicyDefinition) => any;
3826
- /**
3827
- * @internal
3828
- */
3829
- export declare const UpdatePolicyDefinitionFilterSensitiveLog: (obj: UpdatePolicyDefinition) => any;
3830
- /**
3831
- * @internal
3832
- */
3833
- export declare const UpdatePolicyInputFilterSensitiveLog: (obj: UpdatePolicyInput) => any;
3834
- /**
3835
- * @internal
3836
- */
3837
- export declare const UpdatePolicyOutputFilterSensitiveLog: (obj: UpdatePolicyOutput) => any;
3838
- /**
3839
- * @internal
3840
- */
3841
- export declare const UpdatePolicyTemplateInputFilterSensitiveLog: (obj: UpdatePolicyTemplateInput) => any;
3842
- /**
3843
- * @internal
3844
- */
3845
- export declare const SchemaDefinitionFilterSensitiveLog: (obj: SchemaDefinition) => any;
3846
- /**
3847
- * @internal
3848
- */
3849
- export declare const PutSchemaInputFilterSensitiveLog: (obj: PutSchemaInput) => any;
3850
- /**
3851
- * @internal
3852
- */
3853
- export declare const PutSchemaOutputFilterSensitiveLog: (obj: PutSchemaOutput) => any;
3854
- /**
3855
- * @internal
3856
- */
3857
- export declare const UpdatePolicyStoreInputFilterSensitiveLog: (obj: UpdatePolicyStoreInput) => any;
3858
- /**
3859
- * @internal
3860
- */
3861
- export declare const AttributeValueFilterSensitiveLog: (obj: AttributeValue) => any;
3862
- /**
3863
- * @internal
3864
- */
3865
- export declare const ContextDefinitionFilterSensitiveLog: (obj: ContextDefinition) => any;
3866
- /**
3867
- * @internal
3868
- */
3869
- export declare const EntityItemFilterSensitiveLog: (obj: EntityItem) => any;
3870
- /**
3871
- * @internal
3872
- */
3873
- export declare const BatchIsAuthorizedInputItemFilterSensitiveLog: (obj: BatchIsAuthorizedInputItem) => any;
3874
- /**
3875
- * @internal
3876
- */
3877
- export declare const BatchIsAuthorizedWithTokenInputItemFilterSensitiveLog: (obj: BatchIsAuthorizedWithTokenInputItem) => any;
3878
- /**
3879
- * @internal
3880
- */
3881
- export declare const BatchIsAuthorizedOutputItemFilterSensitiveLog: (obj: BatchIsAuthorizedOutputItem) => any;
3882
- /**
3883
- * @internal
3884
- */
3885
- export declare const BatchIsAuthorizedWithTokenOutputItemFilterSensitiveLog: (obj: BatchIsAuthorizedWithTokenOutputItem) => any;
3886
- /**
3887
- * @internal
3888
- */
3889
- export declare const EntitiesDefinitionFilterSensitiveLog: (obj: EntitiesDefinition) => any;
3890
- /**
3891
- * @internal
3892
- */
3893
- export declare const BatchIsAuthorizedOutputFilterSensitiveLog: (obj: BatchIsAuthorizedOutput) => any;
3894
- /**
3895
- * @internal
3896
- */
3897
- export declare const BatchIsAuthorizedWithTokenOutputFilterSensitiveLog: (obj: BatchIsAuthorizedWithTokenOutput) => any;
3898
- /**
3899
- * @internal
3900
- */
3901
- export declare const IsAuthorizedInputFilterSensitiveLog: (obj: IsAuthorizedInput) => any;
3902
- /**
3903
- * @internal
3904
- */
3905
- export declare const IsAuthorizedWithTokenInputFilterSensitiveLog: (obj: IsAuthorizedWithTokenInput) => any;
3906
- /**
3907
- * @internal
3908
- */
3909
- export declare const BatchIsAuthorizedInputFilterSensitiveLog: (obj: BatchIsAuthorizedInput) => any;
3910
- /**
3911
- * @internal
3912
- */
3913
- export declare const BatchIsAuthorizedWithTokenInputFilterSensitiveLog: (obj: BatchIsAuthorizedWithTokenInput) => any;