CloudKit server-to-server auth + security roles

Question

Is it possible to use security roles with server-to-server authentication in CloudKit? I would like only my server code to be able to create records in the public database.

Answer 1

You can use the system role 'Authenticated' and set its permission to "write/read" on the record type you want to lock down. Your server to server key will still be able to create records of this type.