AWS cli documentation change
Summary
Updated AWS CLI version reference from 2.31.32 to 2.31.35 and made multiple documentation improvements including grammar fixes, corrected Cedar policy data type links, example standardization, and added comprehensive 'tags' documentation for entity attributes
Security assessment
The changes primarily improve documentation accuracy and add new 'tags' documentation for Cedar policy attributes. While authorization systems are security-related, there is no evidence these changes address specific vulnerabilities. The tags documentation adds details about security-relevant policy attributes (ipaddr, datetime constraints) but represents routine feature documentation rather than a security fix.
Diff
diff --git a/cli/latest/reference/verifiedpermissions/is-authorized-with-token.md b/cli/latest/reference/verifiedpermissions/is-authorized-with-token.md index 1ff7801c4..b435e55d9 100644 --- a//cli/latest/reference/verifiedpermissions/is-authorized-with-token.md +++ b//cli/latest/reference/verifiedpermissions/is-authorized-with-token.md @@ -15 +15 @@ - * [AWS CLI 2.31.32 Command Reference](../../index.html) » + * [AWS CLI 2.31.35 Command Reference](../../index.html) » @@ -257 +257 @@ JSON Syntax: ->>> This data type is used as a member of the [ContextDefinition](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_ContextDefinition.html) structure which is uses as a request parameter for the [IsAuthorized](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html) , [BatchIsAuthorized](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html) , and [IsAuthorizedWithToken](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html) operations. +>>> This data type is used as a member of the [ContextDefinition](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_ContextDefinition.html) structure which is used as a request parameter for the [IsAuthorized](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html) , [BatchIsAuthorized](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html) , and [IsAuthorizedWithToken](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html) operations. @@ -265 +265 @@ JSON Syntax: ->>>> An attribute value of [Boolean](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#boolean) type. +>>>> An attribute value of [Boolean](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-bool) type. @@ -273 +273 @@ JSON Syntax: ->>>> Example: `"entityIdentifier": { "entityId": "<id>", "entityType": "<entity type>"}` +>>>> Example: `{"entityIdentifier": { "entityId": "alice", "entityType": "User"} }` @@ -305 +305 @@ JSON Syntax: ->>>> An attribute value of [Long](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#long) type. +>>>> An attribute value of [Long](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-long) type. @@ -311 +311 @@ JSON Syntax: ->>>> An attribute value of [String](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#string) type. +>>>> An attribute value of [String](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-string) type. @@ -317 +317 @@ JSON Syntax: ->>>> An attribute value of [Set](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#set) type. +>>>> An attribute value of [Set](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-set) type. @@ -327 +327 @@ JSON Syntax: ->>>>> This data type is used as a member of the [ContextDefinition](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_ContextDefinition.html) structure which is uses as a request parameter for the [IsAuthorized](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html) , [BatchIsAuthorized](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html) , and [IsAuthorizedWithToken](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html) operations. +>>>>> This data type is used as a member of the [ContextDefinition](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_ContextDefinition.html) structure which is used as a request parameter for the [IsAuthorized](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html) , [BatchIsAuthorized](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html) , and [IsAuthorizedWithToken](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html) operations. @@ -335 +335 @@ JSON Syntax: ->>>>>> An attribute value of [Boolean](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#boolean) type. +>>>>>> An attribute value of [Boolean](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-bool) type. @@ -343 +343 @@ JSON Syntax: ->>>>>> Example: `"entityIdentifier": { "entityId": "<id>", "entityType": "<entity type>"}` +>>>>>> Example: `{"entityIdentifier": { "entityId": "alice", "entityType": "User"} }` @@ -375 +375 @@ JSON Syntax: ->>>>>> An attribute value of [Long](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#long) type. +>>>>>> An attribute value of [Long](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-long) type. @@ -381 +381 @@ JSON Syntax: ->>>>>> An attribute value of [String](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#string) type. +>>>>>> An attribute value of [String](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-string) type. @@ -387 +387 @@ JSON Syntax: ->>>>>> An attribute value of [Set](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#set) type. +>>>>>> An attribute value of [Set](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-set) type. @@ -395 +395 @@ JSON Syntax: ->>>>>> An attribute value of [Record](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#record) type. +>>>>>> An attribute value of [Record](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-record) type. @@ -461 +461 @@ JSON Syntax: ->>>> An attribute value of [Record](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#record) type. +>>>> An attribute value of [Record](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-record) type. @@ -473 +473 @@ JSON Syntax: ->>>>> This data type is used as a member of the [ContextDefinition](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_ContextDefinition.html) structure which is uses as a request parameter for the [IsAuthorized](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html) , [BatchIsAuthorized](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html) , and [IsAuthorizedWithToken](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html) operations. +>>>>> This data type is used as a member of the [ContextDefinition](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_ContextDefinition.html) structure which is used as a request parameter for the [IsAuthorized](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html) , [BatchIsAuthorized](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html) , and [IsAuthorizedWithToken](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html) operations. @@ -481 +481 @@ JSON Syntax: ->>>>>> An attribute value of [Boolean](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#boolean) type. +>>>>>> An attribute value of [Boolean](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-bool) type. @@ -489 +489 @@ JSON Syntax: ->>>>>> Example: `"entityIdentifier": { "entityId": "<id>", "entityType": "<entity type>"}` +>>>>>> Example: `{"entityIdentifier": { "entityId": "alice", "entityType": "User"} }` @@ -521 +521 @@ JSON Syntax: ->>>>>> An attribute value of [Long](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#long) type. +>>>>>> An attribute value of [Long](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-long) type. @@ -527 +527 @@ JSON Syntax: ->>>>>> An attribute value of [String](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#string) type. +>>>>>> An attribute value of [String](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-string) type. @@ -533 +533 @@ JSON Syntax: ->>>>>> An attribute value of [Set](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#set) type. +>>>>>> An attribute value of [Set](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-set) type. @@ -541 +541 @@ JSON Syntax: ->>>>>> An attribute value of [Record](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#record) type. +>>>>>> An attribute value of [Record](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-record) type. @@ -808 +808 @@ JSON Syntax: ->>>>> This data type is used as a member of the [ContextDefinition](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_ContextDefinition.html) structure which is uses as a request parameter for the [IsAuthorized](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html) , [BatchIsAuthorized](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html) , and [IsAuthorizedWithToken](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html) operations. +>>>>> This data type is used as a member of the [ContextDefinition](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_ContextDefinition.html) structure which is used as a request parameter for the [IsAuthorized](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html) , [BatchIsAuthorized](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html) , and [IsAuthorizedWithToken](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html) operations. @@ -816 +816 @@ JSON Syntax: ->>>>>> An attribute value of [Boolean](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#boolean) type. +>>>>>> An attribute value of [Boolean](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-bool) type. @@ -824 +824 @@ JSON Syntax: ->>>>>> Example: `"entityIdentifier": { "entityId": "<id>", "entityType": "<entity type>"}` +>>>>>> Example: `{"entityIdentifier": { "entityId": "alice", "entityType": "User"} }` @@ -856 +856 @@ JSON Syntax: ->>>>>> An attribute value of [Long](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#long) type. +>>>>>> An attribute value of [Long](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-long) type. @@ -862 +862 @@ JSON Syntax: ->>>>>> An attribute value of [String](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#string) type. +>>>>>> An attribute value of [String](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-string) type. @@ -868 +868 @@ JSON Syntax: ->>>>>> An attribute value of [Set](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#set) type. +>>>>>> An attribute value of [Set](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-set) type. @@ -878 +878 @@ JSON Syntax: ->>>>>>> This data type is used as a member of the [ContextDefinition](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_ContextDefinition.html) structure which is uses as a request parameter for the [IsAuthorized](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html) , [BatchIsAuthorized](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html) , and [IsAuthorizedWithToken](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html) operations. +>>>>>>> This data type is used as a member of the [ContextDefinition](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_ContextDefinition.html) structure which is used as a request parameter for the [IsAuthorized](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html) , [BatchIsAuthorized](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html) , and [IsAuthorizedWithToken](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html) operations. @@ -886 +886 @@ JSON Syntax: ->>>>>>>> An attribute value of [Boolean](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#boolean) type. +>>>>>>>> An attribute value of [Boolean](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-bool) type. @@ -894 +894 @@ JSON Syntax: ->>>>>>>> Example: `"entityIdentifier": { "entityId": "<id>", "entityType": "<entity type>"}` +>>>>>>>> Example: `{"entityIdentifier": { "entityId": "alice", "entityType": "User"} }` @@ -926 +926 @@ JSON Syntax: ->>>>>>>> An attribute value of [Long](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#long) type. +>>>>>>>> An attribute value of [Long](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-long) type. @@ -932 +932 @@ JSON Syntax: ->>>>>>>> An attribute value of [String](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#string) type. +>>>>>>>> An attribute value of [String](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-string) type. @@ -938 +938 @@ JSON Syntax: ->>>>>>>> An attribute value of [Set](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#set) type. +>>>>>>>> An attribute value of [Set](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-set) type. @@ -946 +946 @@ JSON Syntax: ->>>>>>>> An attribute value of [Record](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#record) type. +>>>>>>>> An attribute value of [Record](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-record) type. @@ -1012 +1012 @@ JSON Syntax: ->>>>>> An attribute value of [Record](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#record) type. +>>>>>> An attribute value of [Record](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-record) type. @@ -1024 +1024 @@ JSON Syntax: ->>>>>>> This data type is used as a member of the [ContextDefinition](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_ContextDefinition.html) structure which is uses as a request parameter for the [IsAuthorized](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html) , [BatchIsAuthorized](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html) , and [IsAuthorizedWithToken](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html) operations. +>>>>>>> This data type is used as a member of the [ContextDefinition](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_ContextDefinition.html) structure which is used as a request parameter for the [IsAuthorized](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html) , [BatchIsAuthorized](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html) , and [IsAuthorizedWithToken](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html) operations. @@ -1032 +1032 @@ JSON Syntax: ->>>>>>>> An attribute value of [Boolean](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#boolean) type. +>>>>>>>> An attribute value of [Boolean](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-bool) type. @@ -1040 +1040 @@ JSON Syntax: ->>>>>>>> Example: `"entityIdentifier": { "entityId": "<id>", "entityType": "<entity type>"}` +>>>>>>>> Example: `{"entityIdentifier": { "entityId": "alice", "entityType": "User"} }` @@ -1072 +1072 @@ JSON Syntax: ->>>>>>>> An attribute value of [Long](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#long) type. +>>>>>>>> An attribute value of [Long](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-long) type. @@ -1078 +1078 @@ JSON Syntax: ->>>>>>>> An attribute value of [String](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#string) type. +>>>>>>>> An attribute value of [String](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-string) type. @@ -1084 +1084 @@ JSON Syntax: ->>>>>>>> An attribute value of [Set](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#set) type. +>>>>>>>> An attribute value of [Set](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-set) type. @@ -1092 +1092 @@ JSON Syntax: ->>>>>>>> An attribute value of [Record](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#record) type. +>>>>>>>> An attribute value of [Record](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-record) type. @@ -1252,0 +1253,410 @@ JSON Syntax: +>>> +>>> tags -> (map) +>>> +>>>> A list of cedar tags for the entity. +>>>> +>>>> key -> (string) +>>>> +>>>> value -> (tagged union structure) +>>>> +>>>>> The value of an entity’s Cedar tag. +>>>>> +>>>>> This data type is used as a member of the [EntityItem](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_EntityItem.html) structure that forms the body of the `Entities` request parameter for the [IsAuthorized](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorized.html) , [BatchIsAuthorized](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorized.html) , [IsAuthorizedWithToken](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html) , and [BatchIsAuthorizedWithToken](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorizedWithToken.html) operations. +>>>>> +>>>>> ### Note +>>>>> +>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `boolean`, `entityIdentifier`, `long`, `string`, `set`, `record`, `ipaddr`, `decimal`, `datetime`, `duration`. +>>>>> +>>>>> boolean -> (boolean) +>>>>> +>>>>>> A Cedar tag value of [Boolean](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-bool) type. +>>>>>> +>>>>>> Example: `{"boolean": false}` +>>>>> +>>>>> entityIdentifier -> (structure) +>>>>> +>>>>>> A Cedar tag value of type [EntityIdentifier](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_EntityIdentifier.html) . +>>>>>> +>>>>>> Example: `{"entityIdentifier": { "entityId": "alice", "entityType": "User"} }` +>>>>>> +>>>>>> entityType -> (string) [required] +>>>>>> +>>>>>>> The type of an entity. +>>>>>>> +>>>>>>> Example: `"entityType":"*typeName* "` +>>>>>>> +>>>>>>> Constraints: +>>>>>>> +>>>>>>> * min: `1` +>>>>>>> * max: `200` +>>>>>>> * pattern: `.*` +>>>>>>> + +>>>>>> +>>>>>> entityId -> (string) [required] +>>>>>> +>>>>>>> The identifier of an entity. +>>>>>>> +>>>>>>>> `"entityId":"*identifier* "` +>>>>>>> +>>>>>>> Constraints: +>>>>>>> +>>>>>>> * min: `1` +>>>>>>> * max: `200` +>>>>>>> * pattern: `.*` +>>>>>>> + +>>>>> +>>>>> long -> (long) +>>>>> +>>>>>> A Cedar tag value of [Long](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-long) type. +>>>>>> +>>>>>> Example: `{"long": 0}` +>>>>> +>>>>> string -> (string) +>>>>> +>>>>>> A Cedar tag value of [String](https://docs.cedarpolicy.com/policies/syntax-datatypes.html#datatype-string) type.