iam

type AccessLevel string

type Action string

type ActionData struct {
	Name              string
	Description       string
	AccessLevel       string
	ResourceARNFormat string
	APIDocLink        string
	ConditionKeys     []string
	DependentActions  []string
}

type ActionDefinition struct {
	Name          string
	Description   string
	AccessLevel   string
	ResourceTypes map[string]*ActionResourceType
	APIDocLink    string
}

type ActionResourceType struct {
	Name             string
	Required         bool
	ConditionKeys    []string
	DependentActions []string
}

type ConditionKey struct {
	Name        string
	Description string
	Type        string
}

type Definitions struct {
	// contains filtered or unexported fields
}

type Effect string

type ExternalIDCondition struct {
	StringEquals struct {
		StsExternalID string `json:"sts:ExternalId"`
	} `json:"StringEquals"`
}

type GetActionsInput struct {
	ServicePrefix    string
	AccessLevel      AccessLevel
	ResourceTypeName string // * => wildcard arns only
	NamePattern      string // supports wildcards: '*', '?'
}

type PolicyDocument struct {
	ID         string      `json:"Id,omitempty"`
	Version    string      `json:"Version"`
	Statements []Statement `json:"Statement"`
}

type PricipalValue[T ~string] map[string][]T

type Principal string

type Resource string

type ResourceType struct {
	Name       string
	ARN        string
	Conditions []string
}

type ServiceDefinition struct {
	Name             string
	Prefix           string
	AuthorizationURL string
	Actions          map[string]*ActionDefinition
	ResourceTypes    map[string]*ResourceType
	ConditionKeys    map[string]*ConditionKey
}

type Statement struct {
	Sid          string                   `json:"Sid,omitempty"`          // statement ID, service specific
	Effect       Effect                   `json:"Effect"`                 // Allow or Deny
	Principal    PricipalValue[Principal] `json:"Principal,omitempty"`    // principal that is allowed or denied
	NotPrincipal PricipalValue[Principal] `json:"NotPrincipal,omitempty"` // exception to a list of principals
	Action       StatementValue[Action]   `json:"Action"`                 // allowed or denied action
	NotAction    StatementValue[Action]   `json:"NotAction,omitempty"`    // matches everything except
	Resource     StatementValue[Resource] `json:"Resource,omitempty"`     // object or objects that the statement covers
	NotResource  StatementValue[Resource] `json:"NotResource,omitempty"`  // matches everything except
	Condition    json.RawMessage          `json:"Condition,omitempty"`    // conditions for when a policy is in effect
}

type StatementValue[T ~string] []T