Autoschematic

$ autoschematic plan
╔══════════════════════════════════════════════════════════════════════════════╗
║ At main/aws/iam/policies/west-europe-aux-db-access.ron:
║  ⟣ Create new IAM policy west-europe-aux-db-access
║ At main/aws/iam/roles/west-europe-support-staff.ron:
║  ⊬ Missing outputs: 
║    aws/iam/policies/west-europe-aux-db-access.ron[arn]
╚══════════════════════════════════════════════════════════════════════════════╝
 ◇ Plan complete.

$ autoschematic apply
╔══════════════════════════════════════════════════════════════════════════════╗
║ At main/aws/iam/policies/west-europe-aux-db-access.ron:
║  ⟣ Create new IAM policy west-europe-aux-db-access
╚══════════════════════════════════════════════════════════════════════════════╝
 ◇ Plan complete.
Type 7309 to execute all of the above actions and commit.
Hit Ctrl-c to cancel.
>7309
╔══════════════════════════════════════════════════════════════════════════════╗
║ At main/aws/iam/policies/west-europe-aux-db-access.ron:
║  ⟖ Created IAM policy `/west-europe-aux-db-access`
╚══════════════════════════════════════════════════════════════════════════════╝

The same -p, -c, and -s filters from import also work here when you want to narrow the scope to one prefix, one connector, or one address subtree.

Read-Only (Safe) Mode

If you want to avoid modifying any infra while you are exploring, run:

autoschematic safety lock

That prevents autoschematic apply and connector task execution until you run:

autoschematic safety unlock

Next: Scaffold New Resources