A linked list that contains extended information that is used to make authorization decisions. Attribute lists consist of a set of name = value pairs.