ADR-014: AWS IAM Policy Entity Type — Introduce permission_set
Introduce type='permission_set' for AWS IAM Policies (and analogous policy-holder entities) rather than reusing type='role'
2 docs tagged with "permission-set"
View all tagsEntity Classification — Identity vs Permission-Grouping (Cross-System)
How SecurityV0 decides whether a thing is an identity (principal), a permission grouping (role / permission_set), a permission, or a resource — by behavior, not by the word a vendor uses. Includes the litmus test and a cross-system mapping table (AWS, Entra ID, ServiceNow, GitHub, Kubernetes). Read this whenever a type label looks wrong.