Service Access Strategy - AWS Verified Permissions

Amazon Verified Permissions is a scalable permissions management and fine-grained authorization service for the applications that you build.

Support is enabled by including the following module in the overlay:

1
2
3
4
5
<dependency>
    <groupId>org.apereo.cas</groupId>
    <artifactId>cas-server-support-aws</artifactId>
    <version>${cas.version}</version>
</dependency>

1
implementation "org.apereo.cas:cas-server-support-aws:${project.'cas.version'}"

1
2
3
4
5
6
7
8
9
dependencyManagement {
    imports {
        mavenBom "org.apereo.cas:cas-server-support-bom:${project.'cas.version'}"
    }
}

dependencies {
    implementation "org.apereo.cas:cas-server-support-aws"
}

1
2
3
4
5
6
7
8
9
10
dependencies {
    /*
        The following platform references are included automatically and are listed for reference only.

        implementation enforcedPlatform("org.apereo.cas:cas-server-support-bom:${project.'cas.version'}")
        implementation platform(org.springframework.boot.gradle.plugin.SpringBootPlugin.BOM_COORDINATES)
        
    */
    implementation "org.apereo.cas:cas-server-support-aws"
}

This access strategy builds an authorization request and submits it to Amazon Verified Permissions. The specifics of the authorization request are taught to CAS using the settings typically defined within the access strategy itself:

1
2
3
4
5
6
7
8
9
10
11
12
{
  "@class": "org.apereo.cas.aws.authz.AmazonVerifiedPermissionsRegisteredServiceAccessStrategy",
  "credentialAccessKey": "...",
  "credentialSecretKey": "...",
  "region": "us-east-1",
  "policyStoreId": "...",
  "actionId": "read",
  "context": {
    "@class": "java.util.LinkedHashMap",
    "key": "value"
  }
}

The following fields are available to this access strategy:

_{[1] This field supports the Spring Expression Language syntax.}