account

type Account struct {
	Permissions []string
	Policies    []Ref
}

type Environment struct {
	Name        string
	Permissions []string
	Policies    []Ref
}

type Group struct {
	ID             string
	Name           string
	Description    string
	Account        *Account
	Environment    []Environment
	ManagementZone []ManagementZone
	OriginObjectID string
}

type GroupId = string

type ManagementZone struct {
	Environment    string
	ManagementZone string
	Permissions    []string
}

type Policy struct {
	ID             string
	Name           string
	Level          PolicyLevel
	Description    string
	Policy         string
	OriginObjectID string
}

type PolicyId = string

type PolicyLevel = any // either PolicyLevelAccount or PolicyLevelEnvironment is allowed

type PolicyLevelAccount struct {
	Type string
}

type PolicyLevelEnvironment struct {
	Type        string
	Environment string
}

type Ref interface {
	ID() string
}

type Reference struct {
	Type string
	Id   string
}

type Resources struct {
	Policies map[PolicyId]Policy
	Groups   map[GroupId]Group
	Users    map[UserId]User
}

type StrReference string

type User struct {
	Email  string
	Groups []Ref
}

type UserId = string