aws

type IAMPolicy struct {
	// Version specifies the policy language version
	Version string `json:"Version"`
	// Statement contains the list of permission statements
	Statement []IAMStatement `json:"Statement"`
}

type IAMResources struct {
	// Role is the IAM role that can be assumed by the Kubernetes workload
	Role *iam.Role
	// Policy defines the permissions granted to the role
	Policy *iam.Policy
	// PolicyAttachment connects the policy to the role
	PolicyAttachment *iam.RolePolicyAttachment
}

type IAMStatement struct {
	// Sid is an optional identifier for the statement
	Sid string `json:"sid,omitempty"`
	// Effect specifies whether the statement allows or denies access
	Effect string `json:"effect"`
	// Principal specifies who is allowed or denied access
	Principal struct {
		// Service contains a list of AWS services that can assume this role
		Service []string `json:"Service"`
	} `json:"Principal"`
	// Action specifies the AWS actions that are allowed or denied
	Action []string `json:"Action"`
}

type KMSPolicy struct {
	// Version specifies the policy language version
	Version string `json:"Version"`
	// Statement contains the list of KMS permission statements
	Statement []KMSStatement `json:"Statement"`
}

type KMSStatement struct {
	// Effect specifies whether the statement allows or denies access
	Effect string `json:"Effect"`
	// Action specifies the KMS actions that are allowed or denied
	Action []string `json:"Action"`
	// Resource specifies the KMS key ARN that the permissions apply to
	Resource string `json:"Resource"`
}

type PostgresDbArgs struct {
	DbSubnetGroupName string
	DbUsername        string
	DbPassword        string
	DbName            string
}

type PostgresDbComponent struct {
	pulumi.ResourceState
	DbCluster         *rds.Cluster
	DbClusterInstance *rds.ClusterInstance
	DbClusterEndpoint pulumi.StringOutput
	DbSubnetGroup     *rds.SubnetGroup
}