Skip to content

A Go library for determining the equivalence of AWS IAM policies written in JSON.

License

Notifications You must be signed in to change notification settings

hashicorp/awspolicyequivalence

 
 

AWS Policy Equivalence Package

This package checks for structural equivalence of two AWS policy documents. See Godoc for more information on usage.

Post v1.5 Validation vs. Equivalence

In versions 1.5 and earlier, this package has had a validation role. For example, {} is a valid JSON but an invalid AWS policy. But, AWS emits this empty JSON in some cases. Should this package determine {} is equivalent to itself or throw an error and say it's not equivalent to itself? Since the purpose of this package is primarily equivalence and not validation, we are removing some of the validation role.

In other words, for v1.5 and earlier, {} is not equivalent to itself and returns an error. Post v1.5, {} is equivalent to itself and does not return an error. This may impact you if you have relied on this package for validation!

CI

Go Build/Test

About

A Go library for determining the equivalence of AWS IAM policies written in JSON.

Resources

License

Code of conduct

Security policy

Stars

Watchers

Forks

Packages

No packages published

Languages

  • Go 100.0%