PutPrincipalPolicyRequest
The next signed state of a principal policy with everything it commits to.
Shape
object
6 fields
encryptedPayloadobjectrequiredEncrypted payload, such as the group's name.
3 fields
cipherSuitestringrequired- always
aes-256-gcm
- always
ciphertextstringrequiredciphertextHashstringrequired
Other fields are allowed.
The principal's complete container grant list after this state.
memberEnvelopeslist of objectrequiredThe new key epoch's key, encapsulated to each member.
4 fields
kemCipherTextstringrequiredmemberKeyFingerprintstringrequireduserIdstringrequired- lowercase UUID v4
wrappedKeystringrequired
Other fields are allowed.
projectionlist of objectrequiredThe complete membership with roles after this state.
2 fields
rolestringrequired- one of
member,admin
- one of
userIdstringrequired- lowercase UUID v4
Other fields are allowed.
stateobjectrequiredThe signed state.
20 fields
encapsulationPublicKeystringrequiredexternalAuthorityobjectrequirednullable6 fields
keyEpochintegerrequired- at least 1
keyFingerprintstringrequiredprincipalIdstringrequired- lowercase UUID v4
principalTypestringrequired- always
group
- always
stateHashstringrequiredversionintegerrequired- at least 1
Other fields are allowed.
grantCountintegerrequired- at least 0
grantRootstringrequiredkeyEpochintegerrequired- at least 1
keyFingerprintstringrequiredmemberCountintegerrequired- at least 0
memberEnvelopesRootstringrequiredmembershipModestringrequired- always
projection
- always
membershipRootstringrequiredpayloadCiphertextHashstringrequiredprevStateHashstringrequirednullableprincipalIdstringrequired- lowercase UUID v4
principalTypestringrequired- one of
group,organization
- one of
projectionRootstringrequiredsignaturestringrequiredsignedAtstringrequired- pattern
^(?:19[7-9]\d|[2-9]\d{3})-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$
- pattern
signerUserIdstringrequired- lowercase UUID v4
signerUserKeyFingerprintstringrequiredversionintegerrequired- at least 1
Other fields are allowed.
Other fields are allowed.