flowchart TB
druidA-->apigateway
druidB-->apigateway
druidC-->apigateway
druidA-->identitypool
druidB-->identitypool
druidC-->identitypool
druidA-->nodeA
druidA-->nodeB
druidA-->nodeC
druidB-->nodeA
druidB-->nodeB
druidB-->nodeC
druidC-->nodeA
druidC-->nodeB
druidC-->nodeC
apigateway-->lambda
userpool-->lambda
identitypool-->userpool
tables-->lambda
nodeA-->lambda
nodeB-->lambda
nodeC-->lambda
siteA-->objectsA1
siteA-->objectsA2
siteB-->objectsB
siteC-->objectsC
siteA-->buildA
siteB-->buildB
siteC-->buildC
lambda-->objectsA1
lambda-->objectsA2
lambda-->objectsB
lambda-->objectsC
buildA-->staticwebapps
buildB-->staticwebapps
buildC-->staticwebapps
subgraph Browser
druidA
druidB
druidC
end
subgraph Cloud
subgraph AWS
userpool
apigateway
lambda
subgraph Keyspaces
tables
end
subgraph Cognito
userpool
identitypool
end
subgraph Opensearch
nodeA
nodeB
nodeC
end
end
subgraph Azure
druidA-->staticwebapps
druidB-->staticwebapps
druidC-->staticwebapps
end
subgraph Github
subgraph Site C
buildC
subgraph Data Store
objectsC
end
siteC
end
subgraph Site B
buildB
subgraph Data Store
objectsB
end
siteB
end
subgraph Site A
buildA
subgraph Data Store
objectsA1
objectsA2
end
siteA
end
end
end

Resources

Druid Site

Assets

• HTML File
• JavaScript File
• CSS File

Cognito User Pool

Assets

• user

Opensearch Node

Assets

• index
• document
• field

Github Repo

Assets

• json file
• image file
• video file
• audio file

Cassandra Table

Assets

• Table
• Row

Governance

1. Can site access requested resource.
2. Can user access requested resource
3. Can user execute operation on resource
4. Can user execute operation on resource asset
5. Does operation have specific restrictions / limitations for the user

erDiagram
Resource {
  user string
  type string
  resource string
  asset string
  op string
}