1 Resposta
- Mais recentes
- Mais votos
- Mais comentários
1
I would suggest having two entity types:
- User (memberOfTypes: Group)
- Group
Then you would have two policies granting the same access:
permit(principal == User::"MyUserForTesting", ...)
permit(principal in Group::"A", ...)
You could try to consolidate it into a single policy by adding 'groups' and 'userId' attribute on user but I think it will hurt policy readability.
respondido há 4 meses
Conteúdo relevante
- AWS OFICIALAtualizada há 2 anos
- AWS OFICIALAtualizada há um ano
- AWS OFICIALAtualizada há 2 anos
Great, thank you. I got it working.