components:
  terraform:
    sso:
      vars:
        account_assignments:
          artifacts:
            groups:
              admin:
                permission_sets:
                  - AdministratorAccess
              audit:
                permission_sets:
                  - ReadOnlyAccess
              engineer:
                permission_sets:
                  - ReadOnlyAccess
          audit:
            groups:
              admin:
                permission_sets:
                  - AdministratorAccess
              audit:
                permission_sets:
                  - ReadOnlyAccess
          demo:
            groups:
              admin:
                permission_sets:
                  - AdministratorAccess
              audit:
                permission_sets:
                  - ReadOnlyAccess
              engineer:
                permission_sets:
                  - ReadOnlyAccess
          dev:
            groups:
              admin:
                permission_sets:
                  - AdministratorAccess
              audit:
                permission_sets:
                  - ReadOnlyAccess
              engineer:
                permission_sets:
                  - PowerUserAccess
          identity:
            groups:
              admin:
                permission_sets:
                  - AdministratorAccess
              audit:
                permission_sets:
                  - ReadOnlyAccess
          infra:
            groups:
              admin:
                permission_sets:
                  - AdministratorAccess
              audit:
                permission_sets:
                  - ReadOnlyAccess
          palolo:
            groups:
              admin:
                permission_sets:
                  - AdministratorAccess
          prod:
            groups:
              admin:
                permission_sets:
                  - AdministratorAccess
              audit:
                permission_sets:
                  - ReadOnlyAccess
              engineer:
                permission_sets:
                  - ReadOnlyAccess
          secrets:
            groups:
              admin:
                permission_sets:
                  - AdministratorAccess
              audit:
                permission_sets:
                  - ReadOnlyAccess
              engineer:
                permission_sets:
                  - ReadOnlyAccess
        identitystore_groups:
          admin:
            display_name: admin
            description: administrator access group
          audit:
            display_name: audit
            description: read only access group
          billing:
            display_name: billing
            description: billing access group
          engineer:
            display_name: engineer
            description: power user access group