This version has an API Gateway the JWT to retrieve the tenant claim, and the tenant is in the RequestContext. We retrieve a role from the environment

An example of the Lambda with Cognito integration. The Authorization header containing the JWT is passed into the handler, which makes calls to Cognit

Version of the Policy Generator which provides more structure around the templates. While this ensures that the proper variables are set for each temp

An example client for interacting with DynamoDB.

An example client for DynamoDB.

An example of connecting to access points restricted by the EFSAccessPointPerTenantTemplate policy.

This version only evaluates the JWT to retrieve the tenant claim. We retrieve a role from the environmental variables. This is a simple flow that does

Version of the Policy Generator allowing caller to create the data and templates. This allows users to create utilize templates they create in other

An example client for interacting with the S3 service.

All of these examples are coded to just grant permissions to S3 and Dynamo DB. Your implementation needs to handle the different permutations of polic