Thanks for suggestion, played with CDK a little while back, much better than others.

What I'm looking for is some sort of advanced, battle testes designs or patterns. for example found iam role permission boundary.