AWS verifiedpermissions documentation change
Summary
Added documentation about optional policy template names, including naming conventions and an example CLI command using a policy template name.
Security assessment
This change documents a feature for using friendly names for policy templates. It does not address any security issues or describe security features.
Diff
diff --git a/verifiedpermissions/latest/userguide/policy-templates.md b/verifiedpermissions/latest/userguide/policy-templates.md index ff3672e12..b2f7459c8 100644 --- a//verifiedpermissions/latest/userguide/policy-templates.md +++ b//verifiedpermissions/latest/userguide/policy-templates.md @@ -8,0 +9,7 @@ In Verified Permissions, policy templates are policies with placeholders for the +You can optionally assign a policy template name to a policy template. Policy template names must be unique within the policy store and prefixed with `name/`. You can use a policy template name in place of the policy template ID in control plane operations that accept a `policyTemplateId` parameter. Only `GetPolicyTemplate` and `ListPolicyTemplates` return the name in the output. The following example uses a policy template name to retrieve a policy template with `GetPolicyTemplate`. + + + $ aws verifiedpermissions get-policy-template \ + --policy-template-id name/example-policy-template \ + --policy-store-id PSEXAMPLEabcdefg111111 +