PolicyStore

Source: src/AWS/VerifiedPermissions/PolicyStore.ts

An Amazon Verified Permissions policy store — the container for Cedar policies, policy templates, and a schema. Authorization requests (IsAuthorized) are evaluated against all policies in a store.

Creating a Policy Store

Basic Policy Store

import * as AWS from "alchemy/AWS";

const store = yield* AWS.VerifiedPermissions.PolicyStore("Store", {
  validationMode: "OFF",
});

Strict Validation with a Schema

const store = yield* AWS.VerifiedPermissions.PolicyStore("Store", {
  validationMode: "STRICT",
  description: "Photo app authorization",
});

yield* AWS.VerifiedPermissions.Schema("Schema", {
  policyStoreId: store.policyStoreId,
  cedarJson: JSON.stringify({
    PhotoApp: {
      entityTypes: { User: {}, Photo: {} },
      actions: { viewPhoto: { appliesTo: { principalTypes: ["User"], resourceTypes: ["Photo"] } } },
    },
  }),
});