-
Notifications
You must be signed in to change notification settings - Fork 1
/
ecommerceCognitoIntegrationScenario.json
26 lines (26 loc) · 1.31 KB
/
ecommerceCognitoIntegrationScenario.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
{
"validationMode": "STRICT",
"policyStoreDescription": "Policy store for the Cognito Integration Scenario, created via avp-cli tool",
"name": "Ecommerce with Cognito Integration Scenario",
"description": "This scenario demonstrates the integration of Amazon Verified Permissions with Amazon Cognito. It allows sellers to list their own products and uses Cognito for identity management.",
"schemaPath": "./scenarios/ecommerceCognitoIntegrationScenario/schema.json",
"principalEntityType": "MyEcommerceApp::Seller",
"policies": [
{
"path": "./scenarios/ecommerceCognitoIntegrationScenario/allow_policy.cedar",
"description": "Allow sellers to discount if they have the agreed discount privilege."
}
],
"tests": [
{
"path": "./scenarios/ecommerceCognitoIntegrationScenario/allow_test_1.json",
"description": "Cognito User is allowed the ability to discount (action) the product (resource), with custom.discountPrivilege claim setup as agreed in IdentityToken",
"type": "allow"
},
{
"path": "./scenarios/ecommerceCognitoIntegrationScenario/deny_test_1.json",
"description": "Cognito User is denied the ability to discount (action) the product (resource), with custom.discountPrivilege claim setup as rejected in IdentityToken",
"type": "forbid"
}
]
}