Hello, I am wanting to create a service where I have a resource hierarchy
with cross cutting resource attributes that I'd like to match policies on.
For example, consider the hierarchy:
A -> B -> C (where C is a child of B and B is a child of A)
As I understand it, I can create this resource hierarchy in the service
definition, set each resource as a valid leaf, and then I should be able to
create policies that can match on combinations of resource names of A, B,
and C.
Now consider if the actual resources A, B and C have an attribute "colour"
(blue, green, red, etc.) and I want also to be able to have the policy
match these attributes that are not in themselves real resources. One
approach I can think of is to introduce non-leaf resources to the hierarchy:
Acolour -> A -> Bcolour -> B -> Ccolour -> C
My first question is "will this work"? My second is are there any less
verbose approaches I could use instead?
Many thanks,
Elliot.
