models/

README

Models for Translating IDQL Policy

This directory contains models for translating different types of policies that may be used by 1 or more providers or directly in the Hexa CLI tool.

The conditionLangs directory holds AST parsers for other policy languages such as gcpcel (Google Condition Expression Language). These parsers are meant to work with the IDQL Condition Parser. For an example, see: examples/cel.

The formats directory holds parsers for syntactical policies such as Google Bind, and Amazon Cedar. For examples on using these parsers, see the Hexa CLI commands.go, and look for the MapToCmd and MapFromCmd Run functions.

The rar directory contains a Resource Action Role model used by multiple providers that are directory centric. This model is currently used in the awsapigwProvider and the azure azarm package which is used by the azureProvider.