Ash IAM
AWS IAM-style policy evaluation for Ash Framework.
This extension provides IAM-style authorization for Ash resources using AWS IAM-like policy documents. It supports wildcard matching, deny precedence, configurable policy sources, multiple policy documents, and both CRUD and generic actions.
Key Features
- AWS IAM-compatible policy evaluation - Uses the same logic as AWS IAM
- High-performance authorization - Sub-microsecond evaluation with regex caching
- Multiple policy documents - Support for both single and multiple policy documents
- Deny precedence - Explicit deny statements override allow statements
- Wildcard matching - Support for wildcard patterns in resources and actions
- Configurable policy sources - Get policies from actor attributes or custom fetchers
- Complete Ash integration - Supports both CRUD actions (with filters) and generic actions (with simple checks)
- Flexible action mapping - Map Ash actions to custom IAM verbs for cleaner policies