pulumi-alicloud-kotlin/com.pulumi.alicloud.ram.kotlin/RoleArgs

RoleArgs

data class RoleArgs(val description: Output<String>? = null, val document: Output<String>? = null, val force: Output<Boolean>? = null, val maxSessionDuration: Output<Int>? = null, val name: Output<String>? = null, val ramUsers: Output<List<String>>? = null, val services: Output<List<String>>? = null, val version: Output<String>? = null) : ConvertibleToJava<RoleArgs>

Example Usage

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.alicloud.ram.Role;
import com.pulumi.alicloud.ram.RoleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var role = new Role("role", RoleArgs.builder()
            .description("this is a role test.")
            .document("""
  {
    "Statement": [
      {
        "Action": "sts:AssumeRole",
        "Effect": "Allow",
        "Principal": {
          "Service": [
            "apigateway.aliyuncs.com",
            "ecs.aliyuncs.com"
          ]
        }
      }
    ],
    "Version": "1"
  }
            """)
            .force(true)
            .build());
    }
}

Import

RAM role can be imported using the id or name, e.g.

$ pulumi import alicloud:ram/role:Role example my-role

Constructors

RoleArgs

fun RoleArgs(description: Output<String>? = null, document: Output<String>? = null, force: Output<Boolean>? = null, maxSessionDuration: Output<Int>? = null, name: Output<String>? = null, ramUsers: Output<List<String>>? = null, services: Output<List<String>>? = null, version: Output<String>? = null)

Functions

toJava

open override fun toJava(): RoleArgs

Properties

description

val description: Output<String>? = null

Description of the RAM role. This name can have a string of 1 to 1024 characters. NOTE: The description supports modification since V1.144.0.

document

val document: Output<String>? = null

Authorization strategy of the RAM role. It is required when the services and ram_users are not specified.

force

val force: Output<Boolean>? = null

This parameter is used for resource destroy. Default value is false.

maxSessionDuration

val maxSessionDuration: Output<Int>? = null

The maximum session duration of the RAM role. Valid values: 3600 to 43200. Unit: seconds. Default value: 3600. The default value is used if the parameter is not specified.

name

val name: Output<String>? = null

Name of the RAM role. This name can have a string of 1 to 64 characters, must contain only alphanumeric characters or hyphens, such as "-", "_", and must not begin with a hyphen.

ramUsers

val ~~ramUsers~~: Output<List<String>>? = null

(It has been deprecated from version 1.49.0, and use field 'document' to replace.) List of ram users who can assume the RAM role. The format of each item in this list is acs:ram::${account_id}:root or acs:ram::${account_id}:user/${user_name}, such as acs:ram::1234567890000:root and acs:ram::1234567890001:user/Mary. The ${user_name} is the name of a RAM user which must exists in the Alicloud account indicated by the ${account_id}.

services

val ~~services~~: Output<List<String>>? = null

(It has been deprecated from version 1.49.0, and use field 'document' to replace.) List of services which can assume the RAM role. The format of each item in this list is ${service}.aliyuncs.com or ${account_id}@${service}.aliyuncs.com, such as ecs.aliyuncs.com and 1234567890000@ots.aliyuncs.com. The ${service} can be ecs, log, apigateway and so on, the ${account_id} refers to someone's Alicloud account id.

version

val ~~version~~: Output<String>? = null

(It has been deprecated from version 1.49.0, and use field 'document' to replace.) Version of the RAM role policy document. Valid value is 1. Default value is 1.