refactor: identity -> iam

modules/iam/cerbos/policies/role.yaml

@@ -0,0 +1,14 @@
+# yaml-language-server: $schema=https://api.cerbos.dev/latest/cerbos/policy/v1/Policy.schema.json
+# docs: https://docs.cerbos.dev/cerbos/latest/policies/resource_policies
+
+apiVersion: api.cerbos.dev/v1
+resourcePolicy:
+  resource: role
+  version: default
+  rules:
+
+    # Admin can manage roles
+
+    - actions: ["manage"]
+      effect: EFFECT_ALLOW
+      roles: ["super"]