aws

type ApiGateway struct {
	pulumi.ResourceState

	Name string
	Api  *apigatewayv2.Api
}

type ApiGatewayArgs struct {
	OpenAPISpec     *openapi3.T
	LambdaFunctions map[string]*Lambda
}

type ECRImage struct {
	pulumi.ResourceState

	Name        string
	DockerImage *docker.Image
}

type ECRImageArgs struct {
	LocalImageName  string
	SourceImageName string
	TempDir         string

	AuthToken *ecr.GetAuthorizationTokenResult
}

type Lambda struct {
	pulumi.ResourceState

	Name     string
	Function *awslambda.Function
	Role     *iam.Role
}

type LambdaArgs struct {
	Topics      map[string]*sns.Topic
	DockerImage *docker.Image
	Compute     stack.Compute
}

type Policy struct {
	pulumi.ResourceState

	Name         string
	RolePolicies []*iam.RolePolicy
}

type PolicyArgs struct {
	Policy *v1.PolicyResource
	// Resources in the stack that must be protected
	Resources *StackResources
	// Resources in the stack that may act as actors
	Principals PrincipalMap
}

type PrincipalMap = map[v1.ResourceType]map[string]*iam.Role

type StackResources struct {
	Topics      map[string]*sns.Topic
	Queues      map[string]*sqs.Queue
	Buckets     map[string]*s3.Bucket
	Collections map[string]*dynamodb.Table
}