BatchIsAuthorizedOutputItem
The decision, based on policy evaluation, from an individual authorization request in
a BatchIsAuthorized API request.
Contents
Note
In the following list, the required parameters are described first.
- decision
-
An authorization decision that indicates if the authorization request should be allowed or denied.
Type: String
Valid Values:
ALLOW | DENYRequired: Yes
- determiningPolicies
-
The list of determining policies used to make the authorization decision. For example, if there are two matching policies, where one is a forbid and the other is a permit, then the forbid policy will be the determining policy. In the case of multiple matching permit policies then there would be multiple determining policies. In the case that no policies match, and hence the response is DENY, there would be no determining policies.
Type: Array of DeterminingPolicyItem objects
Required: Yes
- errors
-
Errors that occurred while making an authorization decision. For example, a policy might reference an entity or attribute that doesn't exist in the request.
Type: Array of EvaluationErrorItem objects
Required: Yes
- request
-
The authorization request that initiated the decision.
Type: BatchIsAuthorizedInputItem object
Required: Yes
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
