Interface CheckOutput

Output from a CheckResources decision.

interface CheckOutput {
    actions: Record<string, CheckOutputActionEffect>;
    effectiveDerivedRoles: string[];
    outputs: OutputResult[];
    requestId: string;
    resourceId: string;
    validationErrors: ValidationError[];
}

Properties

The policy decisions for each action that was checked.

effectiveDerivedRoles: string[]

The derived roles that were applied to the principal for the resource that was checked.

User-defined outputs from policy rule evaluations.

Requires the Cerbos policy decision point server to be at least v0.27.

requestId: string

An identifier for tracing the request.

resourceId: string

Unique identifier of the resource that was checked.

validationErrors: ValidationError[]

Any schema validation errors for the principal or resource attributes.