Package com.eqixiac.equinix.iam.model


package com.eqixiac.equinix.iam.model
  • Class
    Description
    A project-scoped IAM access policy - a set of permissions that may be granted to principals, groups or other projects.
    A grant associating a grantee (a principal, group or project) with an IAM access policy, as returned by the grant operations (GET .../accessPolicies/{accessPolicyId}/grants, operationId listGrants; POST .../grants, operationId addGrant).
    An attribute included on a resource type or action, as returned by the IAM resource-type and list-actions operations.
    The effective (resolved) permissions for a principal within a project and service, as returned by the IAM effective-permissions operation.
    A single effective-permission entry: the caller may perform any of the EffectivePermissions.Permission.getActions() on the referenced resources (or any except those referenced), optionally gated by a Cedar EffectivePermissions.Permission.getCondition() expression.
    An anyOf selector that is either an inclusion set (the listed values) or an exclusion set ({except: [...]}).
    An action available within a service, as returned by the IAM list-actions operation.
     
    The action mapping to access-management permissions, used when performing authorization via role-assignment token scope (spec schema RBACPermission).
    A named, reusable set of permissions within a project, as returned by the IAM permission set operations (listPermissionSets, createPermissionSet, getPermissionSet, updatePermissionSet).
    A lossless, typed wrapper for the polymorphic oneOf union members used throughout the IAM access-control schemas - the permissions/intersect/subtract entries of an AccessPolicy, PermissionSet and PrincipalPolicy, and the managedPolicies/managedPermissionSets/subtract fields of a PolicyMask.
    A policy mask that constrains the managed policies and permission sets available to a principal, as returned by the IAM policy-mask operations.
    An access policy attached directly to a principal (user), as returned by the IAM principal-policy operations.
    A registered resource type within the IAM access model, as returned by the IAM resource-type operations.
    The association between an action and a resource type, as returned by the IAM resource-type-action operations.
    A named set of role actions that can be granted to a principal, as returned by the IAM roles catalog (GET /v1/roles, operationId listRoles; and GET /v1/projects/{projectId}/roles, operationId listRolesByProjectId).
     
    An assignment of a Role to a principal within a scope, as returned by the IAM role assignment operations (GET /v1/roleAssignments, operationId listRoleAssignments; POST /v1/roleAssignments, operationId createRoleAssignment; GET /v1/roleAssignments/{roleAssignmentId}, operationId getRoleAssignment).
     
     
    A named set of actions grouped within a service, as returned by the IAM service-action-set operations.
    The policy schema for a service, describing the structure of policies the service accepts, as returned by the IAM service-policy-schema operation.