Skip to main content
The AVP Demo API provides endpoints for authorization checking, user management, and AI-powered policy queries. All endpoints are deployed as AWS Lambda functions behind API Gateway.

​
Base URL

Your API Gateway base URL will be provided after deployment: 
https://[your-api-id].execute-api.[region].amazonaws.com/prod

​
Available Endpoints

Check Access

Verify authorization using AWS Verified Permissions

Get Users

Retrieve demo users, resources, and available actions

Agent

Query permissions using natural language AI agent

​
Authentication

This demo application does not require authentication for API calls. In a production environment, you would integrate with Amazon Cognito or another identity provider.
This is a demo application. Do not use in production without proper authentication and authorization.

​
CORS Configuration

All endpoints support CORS with the following headers: 
{
  "Access-Control-Allow-Origin": "*",
  "Access-Control-Allow-Headers": "Content-Type",
  "Access-Control-Allow-Methods": "GET,POST,OPTIONS"
}
Preflight OPTIONS requests are automatically handled by all endpoints.

​
Error Responses

All endpoints return error responses in the following format:
​
error
string
required
Human-readable error message
​
details
string
Additional error details when available
​
tip
string
Helpful troubleshooting suggestion

​
Common Status Codes

Status CodeDescription
200Success
400Bad Request - Invalid input
500Internal Server Error - AWS service error

​
Demo Data

​
Users

The demo includes three users with different roles and attributes:
IDNameRoleDepartmentClearance Level
aliceAlice GarciaAnalystFinance2
bobBob TorresAdminFinance3
carolCarol MendezAuditorHR1

​
Resources

Three documents are available for access control:
IDDepartmentClassification
Q4-Report-2024Financeconfidential
HR-Payroll-2024HRrestricted
Sales-DashboardSalesinternal

​
Actions

Supported actions for authorization checks:
  • Read - View the document
  • Edit - Modify the document
  • Delete - Remove the document

​
Rate Limits

AWS Lambda and API Gateway have default concurrency and rate limits. Adjust these in your AWS account settings as needed.

Build docs developers (and LLMs) love

Get started for freeTalk to us