Skip to content

Commit

Permalink
Remove the limitations from the README.md regarding Principal and Con…
Browse files Browse the repository at this point in the history
…dition (#9 #10)

The limitation that single-valued Principal and Condition keys
can only be a 1-length array does not hold true anymore.
  • Loading branch information
tdpauw committed Jan 31, 2022
1 parent 579567b commit 3c3c0e4
Showing 1 changed file with 0 additions and 26 deletions.
26 changes: 0 additions & 26 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -142,30 +142,4 @@ Supports different principals.
## Limitations
The library now supports a single string as `Action` and `Resource` value, though it does not yet support this for `Principal` and `Condition` key values.
For `Principal` and `Condition` it still expects the canonical form of an IAM Policy JSON document, i.e. everywhere a string or an array can be passed, an array is expected.
```json
{
"Statement": [
{
"Sid": "EC2ReadOnly",
"Effect": "Allow",
"Principal": {
"AWS": ["arn:aws:iam::123456789012:user/user-name"]
},
"Action": "ec2:Describe*",
"Resource": "*",
"Condition": {
"StringEquals": {
"kms:CallerAccount": ["123456789012"]
}
}
}
],
"Version": "2012-10-17",
}
```
The library does not implement `NotPrincipal`, `NotAction` and `NotResource`.

0 comments on commit 3c3c0e4

Please sign in to comment.