Struct PolicyDocument 

pub struct PolicyDocument { /* private fields */ }

Parsed policy document — only the fields the evaluator needs. Any statement that fails to parse (wrong shape, unknown effect, etc.) is dropped with a warn-level log and the rest of the document is still usable, matching how AWS behaves with invalid statements (the broken statement is ignored, not the whole policy).

Implementations

impl PolicyDocument

pub fn parse(json: &str) -> Self

Parse a policy document from its JSON string form. Returns an empty document on JSON errors so the caller can fall through to implicit-deny rather than panicking on malformed state.

pub fn from_value(value: &Value) -> Self

Parse a policy document from a serde_json::Value. Used by both PolicyDocument::parse and tests that build inline serde_json! values.

pub fn statement_count(&self) -> usize

Number of parsed statements in this document. Used by tests as a proxy for “did this statement parse successfully?” without exposing the internal representation.

pub fn matching_identity_statements( &self, request: &EvalRequest<'_>, allow: bool, ) -> usize

Count the identity-policy statements in this document that match the request’s action + resource (and condition, if any) and carry the given effect (allow selects Allow, otherwise Deny). Used by policy simulation to attribute MatchedStatements provenance: a statement that contributed to the decision is reported with its source policy id. Statements carrying a Principal/NotPrincipal (resource-policy only) are never identity matches.

Trait Implementations

impl Clone for PolicyDocument

fn clone(&self) -> PolicyDocument

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PolicyDocument

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PolicyDocument

fn default() -> PolicyDocument

Returns the “default value” for a type.