d63af51f84
Some checks failed
api-governance / spectral-lint (push) Has been cancelled
Docs CI / lint-and-preview (push) Has been cancelled
oas-ci / oas-validate (push) Has been cancelled
SDK Publish & Sign / sdk-publish (push) Has been cancelled
Policy Lint & Smoke / policy-lint (push) Has been cancelled
Policy Simulation / policy-simulate (push) Has been cancelled
devportal-offline / build-offline (push) Has been cancelled
47 lines
1.0 KiB
JSON
47 lines
1.0 KiB
JSON
{
|
|
"apiVersion": "spl.stellaops/v1",
|
|
"kind": "Policy",
|
|
"metadata": {
|
|
"name": "demo-access",
|
|
"description": "Sample SPL policy allowing read access to demo resources",
|
|
"labels": {
|
|
"env": "demo",
|
|
"owner": "policy-guild"
|
|
}
|
|
},
|
|
"spec": {
|
|
"defaultEffect": "deny",
|
|
"statements": [
|
|
{
|
|
"id": "allow-read-demo",
|
|
"effect": "allow",
|
|
"description": "Allow read on demo resources",
|
|
"match": {
|
|
"resource": "demo/*",
|
|
"actions": ["read"],
|
|
"reachability": "direct",
|
|
"exploitability": {
|
|
"epss": 0.42,
|
|
"kev": false
|
|
},
|
|
"weighting": {
|
|
"reachability": 1.0,
|
|
"exploitability": 0.9
|
|
},
|
|
"conditions": [
|
|
{
|
|
"field": "request.tenant",
|
|
"operator": "eq",
|
|
"value": "demo"
|
|
}
|
|
]
|
|
},
|
|
"audit": {
|
|
"message": "demo read granted",
|
|
"severity": "info"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|