feat: extend permissions for admin and user policies to include root access

Author: satyatulasijalandharch

python/amazon-verified-permissions-rest-api/stack/verified_permissions/policy/admin.py

@@ -19,7 +19,12 @@ def create_admin_policy(construct, policy_store, user_pool_id):
             static=StaticPolicyDefinitionProperty(
                 statement=f"""permit (
                 principal in amazonverified::UserGroup::"{user_pool_id}|admin",
-                action in [amazonverified::Action::"get /admin", amazonverified::Action::"get /user"],
+                action in 
+                [
+                    amazonverified::Action::"get /admin",
+                    amazonverified::Action::"get /user",
+                    amazonverified::Action::"get /"
+                ],
                 resource
                 );""",
                 description="Policy defining permissions for admin group",

python/amazon-verified-permissions-rest-api/stack/verified_permissions/policy/user.py

@@ -20,7 +20,10 @@ def create_user_policy(construct, policy_store, user_pool_id):
                 statement=f"""permit (
                     principal in amazonverified::UserGroup::"{user_pool_id}|user",
                     action in
-                        [amazonverified::Action::"get /user"],
+                    [
+                        amazonverified::Action::"get /user",
+                        amazonverified::Action::"get /"
+                    ],
                     resource
                 );""",
                 description="Policy defining permissions for user group",

python/amazon-verified-permissions-rest-api/stack/verified_permissions/schema.py

@@ -25,6 +25,13 @@
                     "resourceTypes": ["Application"],
                 }
             },
+            "get /": {
+                "appliesTo": {
+                    "context": {"type": "Record", "attributes": {}},
+                    "principalTypes": ["User"],
+                    "resourceTypes": ["Application"],
+                }
+            },
         },
     }
 }