pub fn initial_setup_permission_set_ids(stack: &Stack) -> Vec<String>Expand description
Collects all provision permission set IDs needed for a stack’s initial setup.
Walks resources emitted during setup and includes their <type>/provision
permission set if one exists in the registry. Live resources are excluded:
their provision permissions belong to the ongoing management profile.
Also adds cross-cutting permission sets (e.g. service-account/provision)
that any initial setup requires regardless of the resources declared.