account

type Account struct {
	Permissions []string
	Policies    []Ref
}

type AccountInfo struct {
	Name        string
	AccountUUID string
}

type Environment struct {
	Name        string
	Permissions []string
	Policies    []Ref
}

type Group struct {
	ID                       string
	Name                     string
	Description              string
	FederatedAttributeValues []string
	Account                  *Account
	Environment              []Environment
	ManagementZone           []ManagementZone
	OriginObjectID           string
}

type GroupId = string

type ManagementZone struct {
	Environment    string
	ManagementZone string
	Permissions    []string
}

type Policy struct {
	ID             string
	Name           string
	Level          PolicyLevel
	Description    string
	Policy         string
	OriginObjectID string
}

type PolicyId = string

type PolicyLevel = any // either PolicyLevelAccount or PolicyLevelEnvironment is allowed

type PolicyLevelAccount struct {
	Type string
}

type PolicyLevelEnvironment struct {
	Type        string
	Environment string
}

type Ref interface {
	ID() string
}

type Reference struct {
	Id string
}

type Resources struct {
	Policies map[PolicyId]Policy
	Groups   map[GroupId]Group
	Users    map[UserId]User
}

type StrReference string

type User struct {
	Email  secret.Email
	Groups []Ref
}

type UserId = string