Skip to content

Commit 077a808

Browse files
authored
[core][feat] Add IAM edge collection (#2198)
1 parent 61e97ea commit 077a808

2 files changed

Lines changed: 7 additions & 2 deletions

File tree

fixcore/fixcore/model/graph_access.py

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -104,9 +104,14 @@ class EdgeTypes:
104104
# A resource can be deleted, if all outgoing resources are deleted.
105105
delete: EdgeType = "delete"
106106

107+
# This edge type defines the IAM relationship.
108+
# It models allowed permissions between principals and resources, as well as the inter-principal relationship.
109+
# Example: AWS IAM User (principal) has permission to write to an S3 bucket (resource).
110+
iam: EdgeType = "iam"
111+
107112
# The set of all allowed edge types.
108113
# Note: the database schema has to be adapted to support additional edge types.
109-
all: Set[EdgeType] = {default, delete}
114+
all: Set[EdgeType] = {default, delete, iam}
110115

111116

112117
class Direction:

fixcore/fixcore/types.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@
2121
ValidationResult = Optional[Any]
2222
ValidationFn = Callable[[Any], ValidationResult]
2323

24-
EdgeType = Literal["default", "delete"]
24+
EdgeType = Literal["default", "delete", "iam"]
2525

2626

2727
# make sure jsons does not do something clever, when a json element needs to be parsed

0 commit comments

Comments
 (0)