@cloud-copilot/iam-simulate
Version:
Simulate evaluation of AWS IAM policies
19 lines • 979 B
TypeScript
import { RequestAnalysis, ResourceAnalysis } from '../evaluate.js';
import { RequestResource } from '../request/requestResource.js';
import { DefaultServiceAuthorizer } from './DefaultServiceAuthorizer.js';
import { ServiceAuthorizationRequest } from './ServiceAuthorizer.js';
/**
* The default authorizer for services.
*/
export declare class StsServiceAuthorizer extends DefaultServiceAuthorizer {
authorize(request: ServiceAuthorizationRequest): RequestAnalysis;
/**
* Determines if the service trusts the principal's Account's IAM policies
*
* @param sameAccount - If the principal and resource are in the same account
* @param resourceAnalysis - The resource policy analysis
* @returns true if the service trusts the principal's account IAM policies
*/
serviceTrustsPrincipalAccount(sameAccount: boolean, resourceAnalysis: ResourceAnalysis, resource: RequestResource): boolean;
}
//# sourceMappingURL=StsServiceAuthorizer.d.ts.map