# yaml-language-server: $schema=https://api.cerbos.dev/latest/cerbos/policy/v1/Policy.schema.json
---
apiVersion: api.cerbos.dev/v1
resourcePolicy:
  version: default
  resource: infra
  schemas:
    principalSchema:
      ref: cerbos:///principal.json
    resourceSchema:
      ref: cerbos:///infra.json
  importDerivedRoles:
    - pde_teams
  rules:
  - name: list_bust_bludgeon_pdp_cache
    actions: ["list_cache", "bust_cache", "bludgeon_cache"]
    derivedRoles: ["pde_team_platform_oncall"]
    effect: EFFECT_ALLOW
  - name: check_idx_exchanges
    actions: ["id_to_uuid_exchange", "uuid_to_id_exchange"]
    derivedRoles: ["pde_team_platform_oncall"]
    effect: EFFECT_ALLOW