Class ManagerAwsCapabilityCatalog

java.lang.Object

com.cloudforge.core.manager.ManagerAwsCapabilityCatalog

public final class ManagerAwsCapabilityCatalog
extends Object

Versioned catalog of AWS API capabilities CloudForge Manager uses for per-instance operator actions (RDS snapshot/restore/upgrade, ECS lifecycle, CFN inventory/delete).

Panel auth/RBAC is separate — this catalog governs generated task-role IAM only.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static enum	ManagerAwsCapabilityCatalog.Capability

Field Summary

Fields

Modifier and Type	Field	Description
static final String	CATALOG_VERSION

Method Summary

Modifier and Type	Method	Description
static Set<ManagerAwsCapabilityCatalog.Capability>	deployCapabilities()	Direct-deploy capabilities — never included in operatorBaseline(), always attached separately (and conditionally, per-capability) by ManagerOperatorIamSupport only when the deploying caller actually holds the matching deploy:* ManagerPolicyCatalog policy.
static Set<String>	iamActions(Iterable<ManagerAwsCapabilityCatalog.Capability> capabilities)
static boolean	isKnownIamAction(String action)
static Set<ManagerAwsCapabilityCatalog.Capability>	operatorBaseline()	Baseline operator capabilities — inventory/delete + RDS/ECS operator paths.
static Set<String>	operatorBaselineIamActions()
static ManagerAwsCapabilityCatalog.Capability	parse(String id)

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

CATALOG_VERSION

public static final String CATALOG_VERSION

See Also:

• Constant Field Values

Method Details

operatorBaseline

public static Set<ManagerAwsCapabilityCatalog.Capability> operatorBaseline()

Baseline operator capabilities — inventory/delete + RDS/ECS operator paths.

deployCapabilities

public static Set<ManagerAwsCapabilityCatalog.Capability> deployCapabilities()

Direct-deploy capabilities — never included in operatorBaseline(), always attached separately (and conditionally, per-capability) by ManagerOperatorIamSupport only when the deploying caller actually holds the matching deploy:* ManagerPolicyCatalog policy.

iamActions

public static Set<String> iamActions(Iterable<ManagerAwsCapabilityCatalog.Capability> capabilities)

operatorBaselineIamActions

public static Set<String> operatorBaselineIamActions()

parse

public static ManagerAwsCapabilityCatalog.Capability parse(String id)

isKnownIamAction

public static boolean isKnownIamAction(String action)