AWS verifiedpermissions documentation change
Summary
Added new documentation index page for Amazon Verified Permissions authorization service using Cedar policy language
Security assessment
This adds documentation for Amazon Verified Permissions, a new authorization service that controls user actions within applications. This is security-related documentation about access control and authorization policies, but there is no evidence it addresses a specific security vulnerability or incident - it appears to be introducing a new security service. The documentation describes the PARX model and Cedar policy language for authorization.
Diff
diff --git a/verifiedpermissions/index.md b/verifiedpermissions/index.md index 8b1378917..ae3b56593 100644 --- a//verifiedpermissions/index.md +++ b//verifiedpermissions/index.md @@ -0,0 +1 @@ +# Amazon Verified Permissions Documentation @@ -1,0 +3,9 @@ +Amazon Verified Permissions provides customer applications with the ability to control which users can perform which actions within the application. Verified Permissions uses policies written in the Cedar policy language to describe access using the standard PARX model: principal, actions, resource, and context. + +## Amazon Verified Permissions + +### [Amazon Verified Permissions User Guide Introduces you to Amazon Verified Permissions. Explains how to create and manage authorization policies written in the Cedar policy language. Also explains how to create a schema that describes your application's authorization environment. The schema can include the principals, resources, and actions that are part of your application's operational flow. Finally, it explains how to use Verified Permissions from within your application to authorize your users' requests. ](/verifiedpermissions/latest/userguide/) ### [Amazon Verified Permissions API Reference Describes the API operations for Amazon Verified Permissions in detail. It provides sample requests, responses, and errors for the supported web service protocols. ](/verifiedpermissions/latest/apireference/) + +## Cedar policy language + +### [Cedar Policy Language Reference Guide Introduces you to the Cedar policy language. Describes the available language elements and the grammar that you use to combine them into a policy. The Cedar policy language is an open source project hosted on GitHub. ](https://docs.cedarpolicy.com/)