amper

type Account struct {
	ID        string
	Name      string
	ShortName string

	Limits AccountLimits
}

type AccountLimits struct {
	ManagedPolicySize      int
	ManagedPoliciesPerRole int
}

type AmperConfig struct {
	S3          *s3.S3
	StateBucket string
	KeyFormat   string
}

type Attachment struct {
	// contains filtered or unexported fields
}

type ByPolicySize []*IAMPolicyStatement

type Container struct {
	sync.RWMutex

	ID string
	// contains filtered or unexported fields
}

type IAMPolicyDoc IAMPolicyDocRaw

type IAMPolicyDocRaw struct {
	Version string `json:",omitempty"`
	Id      string `json:",omitempty"`

	Statements []*IAMPolicyStatement `json:"Statement"`
}

type IAMPolicyStatement struct {
	Sid          string
	Effect       string     `json:",omitempty"`
	Actions      StringList `json:"Action,omitempty"`
	NotActions   StringList `json:"NotAction,omitempty"`
	Resources    StringList `json:"Resource,omitempty"`
	NotResources StringList `json:"NotResource,omitempty"`

	Principals    map[string]StringList `json:"Principal,omitempty"`
	NotPrincipals map[string]StringList `json:"NotPrincipal,omitempty"`

	Conditions map[string]map[string]StringList `json:"Condition,omitempty"`
	// contains filtered or unexported fields
}

type Kernel struct {
	sync.RWMutex

	StateBucket string
	S3          *s3.S3

	KeyFormat string
	// contains filtered or unexported fields
}

type Policy struct {
	AccountPolicies     map[string][]*IAMPolicyDoc
	AccountRolePolicies map[string][]*IAMPolicyDoc

	ServiceRolePolicies map[string]map[string]*ServiceRolePolicy
	// contains filtered or unexported fields
}

type PolicyTemplate struct {
	sync.Mutex

	// Key is the uniqie identifier of policy template
	Key string

	// Template is pointer to template's content.
	// If it's nil, template will be fetched from StateBucket
	Template *string

	// Vars contains list of required variables for rendering this template
	Vars []string

	// Consts contains list of constants.
	Consts map[string]interface{}

	// Scope defines AWS IAM services, covered by this template.
	// Formate is same, as for Action field in IAM Policy Statement.
	Scope []string

	ServiceRole *ServiceRoleTemplate
	// contains filtered or unexported fields
}

type ServiceRolePolicy struct {
	Policy           *IAMPolicyDoc
	AssumeRolePolicy *IAMPolicyDoc
}

type ServiceRoleTemplate struct {
	Name               string
	Template           *string
	AssumeRoleTemplate *string
}

type StringList []string