Control
data class ControlPolicyAttachmentArgs(val policyId: Output<String>? = null, val targetId: Output<String>? = null) : ConvertibleToJava<ControlPolicyAttachmentArgs>
Provides a Resource Manager Control Policy Attachment resource. For information about Resource Manager Control Policy Attachment and how to use it, see What is Control Policy Attachment.
NOTE: Available in v1.120.0+.
Example Usage
Basic Usage
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.alicloud.resourcemanager.ResourceDirectory;
import com.pulumi.alicloud.resourcemanager.ResourceDirectoryArgs;
import com.pulumi.alicloud.resourcemanager.ControlPolicy;
import com.pulumi.alicloud.resourcemanager.ControlPolicyArgs;
import com.pulumi.alicloud.resourcemanager.Folder;
import com.pulumi.alicloud.resourcemanager.FolderArgs;
import com.pulumi.alicloud.resourcemanager.ControlPolicyAttachment;
import com.pulumi.alicloud.resourcemanager.ControlPolicyAttachmentArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var exampleResourceDirectory = new ResourceDirectory("exampleResourceDirectory", ResourceDirectoryArgs.builder()
.status("Enabled")
.build());
var exampleControlPolicy = new ControlPolicy("exampleControlPolicy", ControlPolicyArgs.builder()
.controlPolicyName("tf-testAccName")
.description("tf-testAccRDControlPolicy")
.effectScope("RAM")
.policyDocument("""
{
"Version": "1",
"Statement": [
{
"Effect": "Deny",
"Action": [
"ram:UpdateRole",
"ram:DeleteRole",
"ram:AttachPolicyToRole",
"ram:DetachPolicyFromRole"
],
"Resource": "acs:ram:*:*:role/ResourceDirectoryAccountAccessRole"
}
]
}
""")
.build());
var exampleFolder = new Folder("exampleFolder", FolderArgs.builder()
.folderName("tf-testAccName")
.build());
var exampleControlPolicyAttachment = new ControlPolicyAttachment("exampleControlPolicyAttachment", ControlPolicyAttachmentArgs.builder()
.policyId(exampleControlPolicy.id())
.targetId(exampleFolder.id())
.build(), CustomResourceOptions.builder()
.dependsOn(exampleResourceDirectory)
.build());
}
}Content copied to clipboard
Import
Resource Manager Control Policy Attachment can be imported using the id, e.g.
$ pulumi import alicloud:resourcemanager/controlPolicyAttachment:ControlPolicyAttachment example <policy_id>:<target_id>Content copied to clipboard