search

hexa-org / policy-orchestrator

Hexa Policy Orchestrator enables you to manage all of your access policies consistently across software providers.
https://hexaorchestration.org/
Apache License 2.0
98 stars 15 forks source link

Implement Authz for CanaryBank API via AWS policy #343

Closed ggebel closed 7 months ago

ggebel commented 1 year ago

You must be a member of specific role(s) have authorization via AWS IAM Policies to access pages in the canary bank application

saurabh-io commented 1 year ago

Login to https://canarybank-aws.hexademo.org with Cognito Try to access any page and you should get the "you do not have permissions" page. Add a policy to AWS DynamoDB granting your cognito userId GET /developer Access the developer page, and it should succeed.

You can repeat above two steps for /profile, /analytics, /humanresources Notes: Only GET action is currently supported Wildcards are not yet supported (e.g. /humanresources/*)