azure

type AzureOpRoleRaw ¶

type AzureOpRoleRaw struct {
	Actions      []string
	BuiltInRoles []string
}

AzureOpRoleRaw is the un-rendered payload for a standard operation role.

func ExtractAzureStandardRolesRaw(appCfg *app.AppConfig) (provision, maintenance, deprovision AzureOpRoleRaw)

type AzureRoleRaw ¶

type AzureRoleRaw struct {
	Name           string
	Actions        []string
	BuiltInRoles   []string
	EnabledInStack sql.NullBool
}

AzureRoleRaw is the un-rendered per-role payload the stack SDK consumes for break-glass and custom Azure roles.

Azure splits a role's grants across two axes, and the Terraform module treats them differently: Actions become a subscription-scoped custom role definition, BuiltInRoles become direct assignments at resource-group scope.

func ExtractAzureRolesRaw(roles []app.AppAWSIAMRoleConfig) []AzureRoleRaw