iam

var (

	//go:embed parameter-samples/policy-create.json
	IAMPolicyCreateExample string

	//go:embed parameter-samples/user-create.json
	UserCreateExample string

	//go:embed parameter-samples/user-edit.json
	UserEditExample string

	//go:embed parameter-samples/token-create.json
	TokenCreateExample string

	IAMPolicySpec struct {
		Name        string   `json:"name,omitempty"`
		Description string   `json:"description,omitempty"`
		ExpiredAt   string   `json:"expiredAt,omitempty"`
		Identities  []string `json:"identities,omitempty"`
		Permissions struct {
			Allow  []iamPermission `json:"allow,omitempty"`
			Deny   []iamPermission `json:"deny,omitempty"`
			Except []iamPermission `json:"except,omitempty"`
		} `json:"permissions,omitzero"`
		PermissionsGroups []iamResourceURN `json:"permissionsGroups,omitempty"`
		Resources         []iamResourceURN `json:"resources,omitempty"`

		// Fields used for edition through the CLI
		PermissionsAllowed    []string `json:"-"`
		PermissionsDenied     []string `json:"-"`
		PermissionsExcept     []string `json:"-"`
		PermissionsGroupsURNs []string `json:"-"`
		ResourcesURNs         []string `json:"-"`
	}

	IAMResourceSpec struct {
		Tags map[string]string `json:"tags,omitempty"`
	}

	UserSpec struct {
		Description string `json:"description,omitempty"`
		Email       string `json:"email,omitempty"`
		Group       string `json:"group,omitempty"`
		Login       string `json:"login,omitempty"`
		Password    string `json:"password,omitempty"`
		Type        string `json:"type,omitempty"`
	}

	TokenSpec struct {
		Name        string `json:"name,omitempty"`
		Description string `json:"description,omitempty"`
		ExpiredAt   string `json:"expiredAt,omitempty"`
		ExpiresIn   int    `json:"expiresIn,omitempty"`
	}
)