AWS verifiedpermissions documentation change
Summary
Added definitions for new terms: Policy store alias, Policy name, and Policy template name.
Security assessment
This change adds terminology for new features (aliases and names). It is purely a documentation update with no security context or implications.
Diff
diff --git a/verifiedpermissions/latest/userguide/terminology.md b/verifiedpermissions/latest/userguide/terminology.md index cd5a9dc4d..8496cc404 100644 --- a//verifiedpermissions/latest/userguide/terminology.md +++ b//verifiedpermissions/latest/userguide/terminology.md @@ -5 +5 @@ -Authorization modelAuthorization requestAuthorization responseConsidered policiesContext dataDetermining policiesEntity dataPermissions, authorization, and principalsPolicy enforcementPolicy storeSatisfied policies +Authorization modelAuthorization requestAuthorization responseConsidered policiesContext dataDetermining policiesEntity dataPermissions, authorization, and principalsPolicy enforcementPolicy storePolicy store aliasPolicy namePolicy template nameSatisfied policies @@ -32,0 +33,6 @@ You should understand the following concepts to use Amazon Verified Permissions. + * Policy store alias + + * Policy name + + * Policy template name + @@ -110,0 +117,12 @@ When evaluating an authorization request, Verified Permissions only considers th +## Policy store alias + +A _policy store alias_ is a friendly name for a policy store. You can use a policy store alias to identify a policy store in any Verified Permissions operation that accepts a `policyStoreId` parameter. Policy store aliases are independent AWS resources with their own ARNs. Each alias is associated with one policy store at a time, and multiple aliases can be associated with the same policy store. For more information, see [Amazon Verified Permissions policy store aliases](./policy-store-aliases.html). + +## Policy name + +A _policy name_ is an optional friendly name for a policy. Policy names must be unique for all policies within the policy store and prefixed with `name/`. You can use a policy name in place of the policy ID in control plane operations that accept a `policyId` parameter. Names can be set when creating or updating a policy. Only `GetPolicy` and `ListPolicies` return the name in the output. + +## Policy template name + +A _policy template name_ is an optional friendly name for a policy template. Policy template names must be unique for all policy templates within the policy store and prefixed with `name/`. You can use a policy template name in place of the policy template ID in control plane operations that accept a `policyTemplateId` parameter. Names can be set when creating or updating a policy template. Only `GetPolicyTemplate` and `ListPolicyTemplates` return the name in the output. +