Struct ServiceAccount 

pub struct ServiceAccount {
    pub id: String,
    pub stack_permission_sets: Vec<PermissionSet>,
}

Represents a non-human identity that can be assumed by compute services such as Lambda, Cloud Run, ECS, Container Apps, etc.

Maps to:

• AWS: IAM Role
• GCP: Service Account
• Azure: User-assigned Managed Identity

The ServiceAccount is automatically created from permission profiles in the stack and contains the resolved permission sets for both stack-level and resource-scoped access.

Fields

id: String

Identifier for the service account. Must contain only alphanumeric characters, hyphens, and underscores ([A-Za-z0-9-_]). Maximum 64 characters.

stack_permission_sets: Vec<PermissionSet>

Stack-level permission sets that apply to all resources in the stack. These are derived from the “*” scope in the permission profile. Resource-scoped permissions are handled by individual resource controllers.

Implementations

impl ServiceAccount

pub fn new(id: String) -> ServiceAccountBuilder

Create an instance of ServiceAccount using the builder syntax

impl ServiceAccount

pub const RESOURCE_TYPE: ResourceType

The resource type identifier for ServiceAccount

pub fn id(&self) -> &str

Returns the service account’s unique identifier.

pub fn from_permission_profile( id: String, profile: &PermissionProfile, permission_set_resolver: impl Fn(&str) -> Option<PermissionSet>, ) -> Result<Self>

Creates a ServiceAccount from a permission profile by resolving permission set references. This is used by the stack processor to convert profiles into concrete ServiceAccount resources. Only stack-level permissions (“*” scope) are processed - resource-scoped permissions are handled by individual resource controllers when they create their resources.

Trait Implementations

impl Clone for ServiceAccount

fn clone(&self) -> ServiceAccount

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ServiceAccount

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ServiceAccount

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for ServiceAccount

fn eq(&self, other: &ServiceAccount) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl ResourceDefinition for ServiceAccount

fn resource_type() -> ResourceType

Returns the static type identifier for this resource type (e.g., “Function”, “Storage”)

fn get_resource_type(&self) -> ResourceType

Returns the resource type for this instance (calls the static method)

fn id(&self) -> &str

Returns the unique identifier for this specific resource instance

fn get_dependencies(&self) -> Vec<ResourceRef>

Returns the list of other resources this resource depends on

fn validate_update(&self, new_config: &dyn ResourceDefinition) -> Result<()>

Validates if an update from the current configuration to a new configuration is allowed

fn as_any(&self) -> &dyn Any

Provides access to the underlying concrete type for downcasting

fn as_any_mut(&mut self) -> &mut dyn Any

Provides mutable access to the underlying concrete type for downcasting

fn box_clone(&self) -> Box<dyn ResourceDefinition>

Creates a boxed clone of this resource definition

fn resource_eq(&self, other: &dyn ResourceDefinition) -> bool

For equality comparison between resource definitions

fn get_permissions(&self) -> Option<&str>

Returns the permission profile name for this resource, if it has one.

impl Serialize for ServiceAccount

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for ServiceAccount

impl StructuralPartialEq for ServiceAccount