Amazon S3 Configure and Verify Bucket CORS

arazzo: 1.0.1
info:
  title: Amazon S3 Configure and Verify Bucket CORS
  summary: Put a bucket CORS configuration then read it back to confirm.
  description: >-
    A browser-access flow for Amazon S3. The workflow writes a Cross-Origin
    Resource Sharing (CORS) configuration to the bucket so that web clients on
    other origins can call the bucket, and then reads the configuration back to
    confirm the rules are in effect. Every step spells out its request inline so
    the flow can be read and executed without opening the underlying OpenAPI
    description.
  version: 1.0.0
  x-realizes-capability-ids:
  - BC-600.50
  x-capability-derivation:
    method: 'deterministic join: sourceDescriptions -> per-tag OpenAPI -> tag/capability edge. No classification at this step.'
    min_confidence: 0.7
    sources:
    - capability_id: BC-600.50
      capability_name: IT Infrastructure Management
      spec: amazon-s3-bucket-configuration-api-openapi.yml
      confidence: 0.7
    model: Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities, CC BY 4.0
sourceDescriptions:
- name: bucketConfigurationApi
  url: ../openapi/amazon-s3-bucket-configuration-api-openapi.yml
  type: openapi
workflows:
- workflowId: set-and-verify-cors
  summary: Put a bucket CORS configuration then get it back to confirm.
  description: >-
    Applies a CORSConfiguration with PutBucketCors and confirms it with
    GetBucketCors.
  inputs:
    type: object
    required:
    - bucket
    - corsRules
    properties:
      bucket:
        type: string
        description: The bucket to configure CORS on.
      corsRules:
        type: array
        description: The CORSRule list defining allowed methods, origins, and headers.
        items:
          type: object
          properties:
            ID:
              type: string
            AllowedMethods:
              type: array
              items:
                type: string
            AllowedOrigins:
              type: array
              items:
                type: string
            AllowedHeaders:
              type: array
              items:
                type: string
            MaxAgeSeconds:
              type: integer
  steps:
  - stepId: putCors
    description: >-
      Write the CORS configuration to the bucket, replacing any existing
      configuration.
    operationId: PutBucketCors
    parameters:
    - name: Bucket
      in: path
      value: $inputs.bucket
    requestBody:
      contentType: application/xml
      payload:
        CORSRule: $inputs.corsRules
    successCriteria:
    - condition: $statusCode == 200
  - stepId: getCors
    description: >-
      Read the CORS configuration back to confirm the rules are now in effect on
      the bucket.
    operationId: GetBucketCors
    parameters:
    - name: Bucket
      in: path
      value: $inputs.bucket
    successCriteria:
    - condition: $statusCode == 200
    outputs:
      corsRules: $response.body#/CORSRule
  outputs:
    corsRules: $steps.getCors.outputs.corsRules