awspolicy

README

AWS Policy Equivalence Library

This library checks for structural equivalence of two AWS policy documents. See Godoc for more information on usage.

CI

Documentation

Overview

Package awspolicy contains functions to compare structural equivalence of AWS IAM policies.

Index

• func PoliciesAreEquivalent(policy1, policy2 string) (bool, error)

Functions

func PoliciesAreEquivalent

func PoliciesAreEquivalent(policy1, policy2 string) (bool, error)

PoliciesAreEquivalent tests for the structural equivalence of two AWS policies. It does not read into the semantics, other than treating single element string arrays as equivalent to a string without an array, as the AWS endpoints do.

It will, however, detect reordering and ignore whitespace.

Returns true if the policies are structurally equivalent, false otherwise. If either of the input strings are not valid JSON, false is returned along with an error.