account

type Account struct {
	Permissions []string
	Policies    []PolicyBinding
}

type AccountInfo struct {
	Name        string
	AccountUUID string
}

type Boundary struct {
	ID             string
	Name           string
	Query          string
	OriginObjectID string
}

type BoundaryId = string

type Environment struct {
	Name        string
	Permissions []string
	Policies    []PolicyBinding
}

type Group struct {
	ID                       string
	Name                     string
	Description              string
	FederatedAttributeValues []string
	Account                  *Account
	Environment              []Environment
	ManagementZone           []ManagementZone
	OriginObjectID           string
}

type GroupId = string

type ManagementZone struct {
	Environment    string
	ManagementZone string
	Permissions    []string
}

type Policy struct {
	ID             string
	Name           string
	Level          PolicyLevel
	Description    string
	Policy         string
	OriginObjectID string
}

type PolicyBinding struct {
	Policy     Ref
	Boundaries []Ref
}

type PolicyId = string

type PolicyLevel = any // either PolicyLevelAccount or PolicyLevelEnvironment is allowed

type PolicyLevelAccount struct {
	Type string
}

type PolicyLevelEnvironment struct {
	Type        string
	Environment string
}

type Ref interface {
	ID() string
}

type Reference struct {
	Id string
}

type Resources struct {
	Boundaries   map[BoundaryId]Boundary
	Policies     map[PolicyId]Policy
	Groups       map[GroupId]Group
	Users        map[UserId]User
	ServiceUsers []ServiceUser
}

type ServiceUser struct {
	Name           string
	Description    string
	Groups         []Ref
	OriginObjectID string
}

type StrReference string

type User struct {
	Email  secret.Email
	Groups []Ref
}

type UserId = string