IAM features (#715)

Author: smendis-scottlogic

services/identity/iam/features.yaml

@@ -0,0 +1,71 @@
+common_features:
+  - CCC.F03 # Access/Activity Logs
+  - CCC.F07 # Event Notifications
+  - CCC.F13 # Infrastructure as Code
+  - CCC.F14 # API Access
+  - CCC.F17 # Alerting
+  - CCC.F20 # Tagging
+features:
+  - id: CCC.IAM.F01
+    title: Global Identities
+    description: |
+      IAM identities are global across all regions. They are created
+      and managed from a single global namespace.
+  - id: CCC.IAM.F02
+    title: IAM Users
+    description: |
+      Ability to create, manage, list and delete IAM users.
+      IAM user represents a single person or application. Long-term
+      credentials (username/password, access keys).
+  - id: CCC.IAM.F03
+    title: IAM Groups
+    description: |
+      Ability to create, manage, list and delete IAM groups.
+      IMA group is a collection of users, roles or other groups.
+  - id: CCC.IAM.F04
+    title: IAM Roles / Service Principals
+    description: |
+      Ability to create, manage, list and delete IAM roles.
+      IMA role is an identity for applications or services to
+      access resources.
+  - id: CCC.IAM.F05
+    title: Managed Identities
+    description: |
+      Identity assigned to cloud resources (e.g., VMs, Functions) which
+      are managed by the cloud vendor.
+  - id: CCC.IAM.F06
+    title: Federated Identity - SAML
+    description: |
+      Support for user authentication outside the cloud service
+      provider using SAML. Authenticated federated identities can
+      assume IAM roles.
+  - id: CCC.IAM.F07
+    title: Federated Identity - OIDC
+    description: |
+      Support for user authentication outside the cloud service
+      provider using OIDC. Authenticated federated identities can
+      assume IAM roles.
+  - id: CCC.IAM.F08
+    title: Custom Roles
+    description: |
+      Ability to create, manage, list and delete custom roles.
+      Custom roles are user-defined roles that defines what
+      actions are allowed.
+  - id: CCC.IAM.F09
+    title: Resource-Level Access
+    description: |
+      Ability to restrict where actions are allowed, rather than
+      the entire service. Defines the scope of the assignment.
+  - id: CCC.IAM.F10
+    title: Policy Conditions
+    description: |
+      Ability to use conditions to add additional restrictions
+      to the permission being granted. Allow access control rules
+      to apply only when certain conditions are met.
+  - id: CCC.IAM.F11
+    title: Temporary Credentials
+    description: |
+      Ability to grant short-lived security credentials that provide
+      access to resources for a limited period of time. These credentials
+      are typically issued for a specific session or task and expire
+      after a predefined duration.