Control
data class ControlPolicyArgs(val controlPolicyName: Output<String>? = null, val description: Output<String>? = null, val effectScope: Output<String>? = null, val policyDocument: Output<String>? = null) : ConvertibleToJava<ControlPolicyArgs>
Provides a Resource Manager Control Policy resource. For information about Resource Manager Control Policy and how to use it, see What is Control Policy.
NOTE: Available since v1.120.0.
Example Usage
Basic Usage
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.alicloud.resourcemanager.ControlPolicy;
import com.pulumi.alicloud.resourcemanager.ControlPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var config = ctx.config();
final var name = config.get("name").orElse("tf-example");
var example = new ControlPolicy("example", ControlPolicyArgs.builder()
.controlPolicyName(name)
.description(name)
.effectScope("RAM")
.policyDocument("""
{
"Version": "1",
"Statement": [
{
"Effect": "Deny",
"Action": [
"ram:UpdateRole",
"ram:DeleteRole",
"ram:AttachPolicyToRole",
"ram:DetachPolicyFromRole"
],
"Resource": "acs:ram:*:*:role/ResourceDirectoryAccountAccessRole"
}
]
}
""")
.build());
}
}Content copied to clipboard
Import
Resource Manager Control Policy can be imported using the id, e.g.
$ pulumi import alicloud:resourcemanager/controlPolicy:ControlPolicy example <id>Content copied to clipboard
Constructors
Link copied to clipboard
fun ControlPolicyArgs(controlPolicyName: Output<String>? = null, description: Output<String>? = null, effectScope: Output<String>? = null, policyDocument: Output<String>? = null)