Struct AvpClient 

pub struct AvpClient { /* private fields */ }

AVP client for Code Mode policy evaluation.

Wraps the AWS SDK verifiedpermissions::Client and provides typed methods for authorizing GraphQL operations and JavaScript scripts against Cedar policies managed in AWS Verified Permissions.

Implementations

impl AvpClient

pub async fn new(config: AvpConfig) -> Result<Self, AvpError>

Create a new AVP client.

Errors

Returns AvpError::ConfigError if the policy store ID is empty.

pub async fn is_authorized( &self, operation: &OperationEntity, server_config: &ServerConfigEntity, ) -> Result<AuthorizationDecision, AvpError>

Check if a GraphQL operation is authorized.

pub async fn is_authorized_raw( &self, principal_type: &str, principal_id: &str, action_type: &str, action_id: &str, resource_type: &str, resource_id: &str, entities: Vec<EntityItem>, ) -> Result<AuthorizationDecision, AvpError>

Generic authorization check using raw entity types and attributes.

Use this when your server type has a unique Cedar schema that doesn’t match the typed entity structs (OperationEntity, ScriptEntity, etc.).

pub async fn batch_is_authorized( &self, requests: Vec<(OperationEntity, ServerConfigEntity)>, ) -> Result<Vec<AuthorizationDecision>, AvpError>

Batch authorization for multiple operations (chunks of 30 per API limit).

impl AvpClient

pub async fn is_script_authorized( &self, script: &ScriptEntity, server: &OpenAPIServerEntity, ) -> Result<AuthorizationDecision, AvpError>

Check if a JavaScript script is authorized (OpenAPI Code Mode).

impl AvpClient

pub async fn is_statement_authorized( &self, statement: &StatementEntity, server: &SqlServerEntity, ) -> Result<AuthorizationDecision, AvpError>

Check if a SQL statement is authorized (SQL Code Mode).

Trait Implementations

impl Clone for AvpClient

fn clone(&self) -> AvpClient

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.