defmodule ExAws.Iam do
  @moduledoc """
  Creates ExAws operations for making IAM requests.

  For more information on individual actions, see the AWS
  IAM API documentation.

    * https://docs.aws.amazon.com/IAM/latest/APIReference/API_{OpName}.html

  Replace `OpName` is the name of the operation you want to consult.

  Actions that are currently implemented:

    * CreateAccessKey
    * CreateUser
    * DeleteAccessKey
    * DeleteUser
    * GetAccessKeyLastUsed
    * GetUser
    * ListAccessKeys
    * ListUsers
    * UpdateAccessKey
    * UpdateUser

  ## Shared Options

    * `:version` - The API version that the request is written for, expressed in the
      format YYYY-MM-DD. Defaults to `2010-05-08`.

  """

  import ExAws.Iam.Utils, only: [list_to_camelized_map: 1, camelize: 1]

  alias ExAws
  alias ExAws.Iam.{AccessKey, Parser, User}

  @shared_opts [version: "2010-05-08"]

  @doc """
  Creates an ExAws operation for a `ListUsers` IAM request.

  ## Options

    * `:marker` - Use this parameter only when paginating results.

    * `:max_items` - Use this only when paginating results to indicate
      the maximum number of items you want in the response.

    * `:path_prefix` - The path prefix for filtering the results.

  See shared options in moduledoc.

  """
  def list_users(opts \\ []) do
    :list_users
    |> to_params(opts)
    |> to_op(parser: &Parser.parse/2)
  end

  @doc """
  Creates an ExAws operation for a `GetUser` IAM request.

  ## Parameters

    * `username` - The name of the user to return.

  ## Options

  See shared options in moduledoc.

  """
  def get_user(username, opts \\ []) do
    :get_user
    |> to_params(opts, user_name: username)
    |> to_op(parser: &Parser.parse/2)
  end

  @doc """
  Creates an ExAws operation for a `CreateUser` IAM request.

  ## Parameters

    * `username` - The name of the user to create. Must match `[\w+=,.@-]+`.

  ## Options

    * `:path` - The path for the user name. See IAM Identifiers in the IAM User Guide.

    * `:permissions_boundary` - The ARN of the policy that is used to set the
      permissions boundary for the user.

  See shared options in moduledoc.

  """
  def create_user(username, opts \\ []) do
    :create_user
    |> to_params(opts, user_name: username)
    |> to_op(parser: &Parser.parse/2)
  end

  @doc """
  Creates an ExAws operation for an `UpdateUser` IAM request.

  ## Parameters

    * `username` - The name of the user to update. If you're changing the name
      of the user, this is the original user name.

  ## Options

    * `:new_path` - New path for the IAM user. Include this parameter only
      if you're changing the user's path.

    * `:new_user_name` - New name for the user. Include this parameter only
      if you're changing the user's name.

  See shared options in moduledoc.

  """
  def update_user(username, opts \\ []) do
    :update_user
    |> to_params(opts, user_name: username)
    |> to_op()
  end

  @doc """
  Creates an ExAws operation for a `DeleteUser` IAM request.

  ## Parameters

    * `username` - The name of the user to delete.

  ## Options

  See shared options in moduledoc.

  """
  def delete_user(username, opts \\ []) do
    :delete_user
    |> to_params(opts, user_name: username)
    |> to_op()
  end

  @doc """
  Creates an ExAws operation for a `ListAccessKeys` IAM request.

  ## Options

    * `:marker` - Use this parameter only when paginating results.

    * `:max_items` - Use this only when paginating results to indicate
      the maximum number of items you want in the response.

    * `:username` - Use this parameter to limit the results to the given username.

  See shared options in moduledoc.

  """
  def list_access_keys(opts \\ []) do
    :list_access_keys
    |> to_params(opts)
    |> to_op(parser: &Parser.parse/2)
  end

  @doc """
  Creates an ExAws operation for a `GetAccessKeyLastUsed` IAM request.

  ## Parameters

    * `access_key_id` - The identifier of the access key you want to query.

  ## Options

  See shared options in moduledoc.

  """
  def get_access_key_last_used(access_key_id, opts \\ []) do
    :get_access_key_last_used
    |> to_params(opts, access_key_id: access_key_id)
    |> to_op(parser: &Parser.parse/2)
  end

  @doc """
  Creates an ExAws operation for a `CreateAccessKey` IAM request.

  ## Parameters

    * `username` - The name of the IAM user that the new key will belong to.

  ## Options

  See shared options in moduledoc.

  """
  def create_access_key(username, opts \\ []) do
    :create_access_key
    |> to_params(opts, user_name: username)
    |> to_op(parser: &Parser.parse/2)
  end

  @doc """
  Creates an ExAws operation for an `UpdateAccessKey` IAM request.

  ## Parameters

    * `access_key_id` - The access key ID you want to update.

    * `status` - The status you want to assign to the secret access key.
      Can be `Active` or `Inactive`.

  ## Options

    * `:username` - The name of the user whose access key pair you want to update.

  See shared options in moduledoc.

  """
  def update_access_key(access_key_id, status, opts \\ []) do
    :update_access_key
    |> to_params(opts, access_key_id: access_key_id, status: status)
    |> to_op()
  end

  @doc """
  Creates an ExAws operation for a `DeleteAccessKey` IAM request.

  ## Parameters

    * `access_key_id` - The access key ID you want to delete.

    * `username` - The name of the user whose access key pair you want to delete.

  ## Options

  See shared options in moduledoc.

  """
  def delete_access_key(access_key_id, username, opts \\ []) do
    :delete_access_key
    |> to_params(opts, access_key_id: access_key_id, user_name: username)
    |> to_op()
  end

  @doc """
  Converts a parsed IAM response into a `User` struct.

  ## Parameters

    * `resp` - The parsed response of an IAM API query request.

  """
  def to_user({:ok, %{body: body}}) do
    User.new(body)
  end

  @doc """
  Converts a parsed IAM response into an `AccessKey` struct.

    * `resp` - The parsed response of an IAM API query request.

  """
  def to_access_key({:ok, %{body: body}}) do
    AccessKey.new(body)
  end

  defp to_params(action, opts, args \\ []) do
    @shared_opts
    |> Keyword.merge(opts)
    |> Keyword.merge(args)
    |> Keyword.put(:action, camelize(action))
    |> list_to_camelized_map()
  end

  defp to_op(params, opts \\ []) do
    %ExAws.Operation.Query{
      action: params["Action"],
      params: params,
      parser: Keyword.get(opts, :parser),
      path: params["Path"] || "/",
      service: :iam
    }
  end
end