This repository was archived by the owner on Apr 2, 2019. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 8
/
Copy pathsample.yaml
84 lines (84 loc) · 1.48 KB
/
sample.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
service: https://sample.yaml
identityProvider:
tags:
admins:
- userid:maria
policies:
-
id: "1"
description: This policy allows 'userid:foo' to update any resource
principals:
- userid:foo
- tag:admins
actions:
- update
resources:
- <.*>
effect: allow
-
id: "2"
description: This policy rejects everything from planet mars
principals:
- <.*>
actions:
- <.*>
resources:
- <.*>
conditions:
planet:
type: StringEqualCondition
options:
equals: mars
effect: deny
-
id: "3"
description: This policy allow read from localhost
principals:
- <.*>
actions:
- read
resources:
- <.*>
conditions:
ip:
type: CIDRCondition
options:
cidr: 127.0.0.0/8
effect: allow
-
id: "4"
description: Only owner
principals:
- <.*>
actions:
- <.*>
resources:
- <.*>
conditions:
owner:
type: MatchPrincipalsCondition
effect: allow
-
id: "5"
description: Admins on Mozilla domain
principals:
- group:admins
actions:
- create
resources:
- <.*>
conditions:
domain:
type: StringMatchCondition
options:
matches: .*\.mozilla\.org
effect: allow
-
id: "6"
description: Editors can update PTO
principals:
- role:editor
actions:
- update
resources:
- pto