wami 0.16.0

Who Am I - Multicloud Identity, IAM, STS, and SSO operations library for Rust
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113

//! # WAMI - Web-compatible Access Management Interface
//!
//! A unified, multi-cloud identity and access management system.
//!
//! ## Structure
//!
//! This module is organized by **functionality**, matching the store architecture:
//!
//! - **`identity/`** - Users, Groups, Roles, Service-Linked Roles
//! - **`credentials/`** - Access Keys, MFA Devices, Login Profiles, Certificates
//! - **`policies/`** - IAM Policies and policy evaluation
//! - **`reports/`** - Credential reports and auditing
//! - **`sts/`** - Security Token Service (sessions, federation, assume role)
//! - **`sso_admin/`** - Single Sign-On administration
//! - **`tenant/`** - Multi-tenant management and isolation

// ============================================================================
// Functional Modules (matching store structure)
// ============================================================================

/// Instance management: bootstrap and initialization
pub mod instance;

/// Identity management: users, groups, roles, identity providers
pub mod identity {
    pub mod group;
    pub mod identity_provider;
    pub mod role;
    pub mod root_user;
    pub mod service_linked_role;
    pub mod user;

    // Re-export types for convenience
    pub use group::Group;
    pub use role::Role;
    pub use root_user::RootUser;
    pub use service_linked_role::DeletionTaskInfo;
    pub use user::User;
}

/// Policy management, evaluation, and permissions boundaries
pub mod policies {
    pub mod attachment;
    pub mod evaluation;
    pub mod inline;
    pub mod permissions_boundary;
    pub mod policy;

    // Re-export types for convenience
    #[allow(ambiguous_glob_reexports)]
    pub use attachment::*;
    #[allow(ambiguous_glob_reexports)]
    pub use inline::*;
    pub use policy::Policy;
}

/// Report generation and auditing
pub mod reports {
    pub mod credential_report;

    // Re-export types for convenience
    pub use credential_report::CredentialReport;
}

// ============================================================================
// Service Modules
// ============================================================================

/// Security Token Service (STS) - temporary credentials and federation
pub mod sts;

/// Single Sign-On Administration
pub mod sso_admin;

/// Resource tagging
pub mod tags;

/// Tenant management and multi-tenancy
pub mod tenant;

/// GDPR compliance, consent management, audit trail, and data rights
pub mod gdpr;

/// OAuth 2.0 authorization server (machine-to-machine grants).
pub mod oauth;

// Client operations (IAM operations)
// Operations moved to service/ layer
// pub mod operations;
// pub mod operations_simple;

// Re-export STS client and types
pub use sts::{Credentials, StsSession};

// Re-export tenant client and types
pub use tenant::{Tenant, TenantId};
// pub use tenant::TenantClient; // TODO: Rebuild in service layer

// ============================================================================
// Legacy IAM Module Compatibility (Temporary)
// ============================================================================

/// Legacy IAM module - to be removed after full migration
#[deprecated(
    since = "0.2.0",
    note = "Use `wami::identity`, `wami::credentials`, etc. instead"
)]
pub mod iam {
    pub use super::identity::*;
    pub use super::policies::*;
    pub use super::reports::*;
    pub use crate::credentials::*;
}