avp-cli
Version:
Small CLI to help interacts with the Amazon Verified Permissions (AVP) service.
39 lines (38 loc) • 1.43 kB
JSON
{
"validationMode": "STRICT",
"policyStoreDescription": "Policy store for the Policy Template Scenario, created via avp-cli tool",
"name": "Ecommerce with Policy Template Scenario",
"description": "This scenario demonstrates the use of policy templates and template-linked policies in Amazon Verified Permissions. It allows sellers to list their own products.",
"schemaPath": "./scenarios/ecommercePolicyTemplateScenario/schema.json",
"policyTemplate":
{
"path": "./scenarios/ecommercePolicyTemplateScenario/template_policy.cedar",
"description": "Policy template that allows a seller to list a product"
}
,
"templateLinkedPolicies": [
{
"principal": {
"entityId": "123",
"entityType": "EcommercePlatform::Seller"
},
"resource": {
"entityId": "456",
"entityType": "EcommercePlatform::Product"
},
"description": "Template-linked policy that allows seller 123 to list product 456"
}
],
"tests": [
{
"path": "./scenarios/ecommercePolicyTemplateScenario/allow_test_1.json",
"description": "User 123 is allowed the ability to list (action) product 456 (resource)",
"type": "allow"
},
{
"path": "./scenarios/ecommercePolicyTemplateScenario/deny_test_1.json",
"description": "User 456 is denied the ability to list (action) product 123 (resource)",
"type": "forbid"
}
]
}