3 ms·

Looks like a decent improvement on readability of JSON IAM policy and the templating thing is cool. I’m a bit unclear on why they needed a new DSL to be able t

by danw1979 4y ago

Looks like a decent improvement on readability of JSON IAM policy and the templating thing is cool. I’m a bit unclear on why they needed a new DSL to be able to do “automated reasoning” on policy effects though. It doesn’t seem semantically that different from the existing policy docs we all know and love.

abofh 4y ago
It's not a substitute/replacement for IAM, it's for their verified access product - basically IAM for your own applications. Nothing to do with IAM for your AWS account
fulafel 4y ago
DSLs rarely strictly need custom syntax. It's for ergonomics.