Interface SubjectAccessReviewSpec

  • All Superinterfaces:
    software.amazon.jsii.JsiiSerializable
    All Known Implementing Classes:
    SubjectAccessReviewSpec.Jsii$Proxy

    @Generated(value="jsii-pacmak/1.71.0 (build f1f58ae)",
               date="2022-11-24T11:18:29.086Z")
    @Stability(Stable)
    public interface SubjectAccessReviewSpec
    extends software.amazon.jsii.JsiiSerializable
    SubjectAccessReviewSpec is a description of the access request.

    Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set

    • Method Detail

      • getExtra

        @Stability(Stable)
        @Nullable
        default Map<String,​List<String>> getExtra()
        Extra corresponds to the user.Info.GetExtra() method from the authenticator. Since that is input to the authorizer it needs a reflection here.
      • getGroups

        @Stability(Stable)
        @Nullable
        default List<String> getGroups()
        Groups is the groups you're testing for.
      • getNonResourceAttributes

        @Stability(Stable)
        @Nullable
        default NonResourceAttributes getNonResourceAttributes()
        NonResourceAttributes describes information for a non-resource access request.
      • getResourceAttributes

        @Stability(Stable)
        @Nullable
        default ResourceAttributes getResourceAttributes()
        ResourceAuthorizationAttributes describes information for a resource access request.
      • getUid

        @Stability(Stable)
        @Nullable
        default String getUid()
        UID information about the requesting user.
      • getUser

        @Stability(Stable)
        @Nullable
        default String getUser()
        User is the user you're testing for.

        If you specify "User" but not "Groups", then is it interpreted as "What if User were not a member of any groups