Role
data class RoleArgs(val policy: Output<String>? = null, val projectName: Output<String>? = null, val roleName: Output<String>? = null, val type: Output<String>? = null) : ConvertibleToJava<RoleArgs>
Provides a Max Compute Role resource. For information about Max Compute Role and how to use it, see What is Role.
NOTE: Available since v1.242.0.
Example Usage
Basic Usage
import * as pulumi from "@pulumi/pulumi";
import * as alicloud from "@pulumi/alicloud";
const config = new pulumi.Config();
const name = config.get("name") || "terraform-example";
const _default = new alicloud.maxcompute.Project("default", {
defaultQuota: "默认后付费Quota",
projectName: name,
comment: name,
productType: "PayAsYouGo",
});
const defaultRole = new alicloud.maxcompute.Role("default", {
type: "admin",
projectName: _default.id,
policy: JSON.stringify({
Statement: [{
Action: ["odps:*"],
Effect: "Allow",
Resource: [
"acs:odps:*:projects/project_name/authorization/roles",
"acs:odps:*:projects/project_name/authorization/roles/*/*",
],
}],
Version: "1",
}),
roleName: "tf_example112",
});Content copied to clipboard
import pulumi
import json
import pulumi_alicloud as alicloud
config = pulumi.Config()
name = config.get("name")
if name is None:
name = "terraform-example"
default = alicloud.maxcompute.Project("default",
default_quota="默认后付费Quota",
project_name=name,
comment=name,
product_type="PayAsYouGo")
default_role = alicloud.maxcompute.Role("default",
type="admin",
project_name=default.id,
policy=json.dumps({
"Statement": [{
"Action": ["odps:*"],
"Effect": "Allow",
"Resource": [
"acs:odps:*:projects/project_name/authorization/roles",
"acs:odps:*:projects/project_name/authorization/roles/*/*",
],
}],
"Version": "1",
}),
role_name="tf_example112")Content copied to clipboard
using System.Collections.Generic;
using System.Linq;
using System.Text.Json;
using Pulumi;
using AliCloud = Pulumi.AliCloud;
return await Deployment.RunAsync(() =>
{
var config = new Config();
var name = config.Get("name") ?? "terraform-example";
var @default = new AliCloud.MaxCompute.Project("default", new()
{
DefaultQuota = "默认后付费Quota",
ProjectName = name,
Comment = name,
ProductType = "PayAsYouGo",
});
var defaultRole = new AliCloud.MaxCompute.Role("default", new()
{
Type = "admin",
ProjectName = @default.Id,
Policy = JsonSerializer.Serialize(new Dictionary<string, object?>
{
["Statement"] = new[]
{
new Dictionary<string, object?>
{
["Action"] = new[]
{
"odps:*",
},
["Effect"] = "Allow",
["Resource"] = new[]
{
"acs:odps:*:projects/project_name/authorization/roles",
"acs:odps:*:projects/project_name/authorization/roles/*/*",
},
},
},
["Version"] = "1",
}),
RoleName = "tf_example112",
});
});Content copied to clipboard
package main
import (
"encoding/json"
"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/maxcompute"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
cfg := config.New(ctx, "")
name := "terraform-example"
if param := cfg.Get("name"); param != "" {
name = param
}
_default, err := maxcompute.NewProject(ctx, "default", &maxcompute.ProjectArgs{
DefaultQuota: pulumi.String("默认后付费Quota"),
ProjectName: pulumi.String(name),
Comment: pulumi.String(name),
ProductType: pulumi.String("PayAsYouGo"),
})
if err != nil {
return err
}
tmpJSON0, err := json.Marshal(map[string]interface{}{
"Statement": []map[string]interface{}{
map[string]interface{}{
"Action": []string{
"odps:*",
},
"Effect": "Allow",
"Resource": []string{
"acs:odps:*:projects/project_name/authorization/roles",
"acs:odps:*:projects/project_name/authorization/roles/*/*",
},
},
},
"Version": "1",
})
if err != nil {
return err
}
json0 := string(tmpJSON0)
_, err = maxcompute.NewRole(ctx, "default", &maxcompute.RoleArgs{
Type: pulumi.String("admin"),
ProjectName: _default.ID(),
Policy: pulumi.String(json0),
RoleName: pulumi.String("tf_example112"),
})
if err != nil {
return err
}
return nil
})
}Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.alicloud.maxcompute.Project;
import com.pulumi.alicloud.maxcompute.ProjectArgs;
import com.pulumi.alicloud.maxcompute.Role;
import com.pulumi.alicloud.maxcompute.RoleArgs;
import static com.pulumi.codegen.internal.Serialization.*;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var config = ctx.config();
final var name = config.get("name").orElse("terraform-example");
var default_ = new Project("default", ProjectArgs.builder()
.defaultQuota("默认后付费Quota")
.projectName(name)
.comment(name)
.productType("PayAsYouGo")
.build());
var defaultRole = new Role("defaultRole", RoleArgs.builder()
.type("admin")
.projectName(default_.id())
.policy(serializeJson(
jsonObject(
jsonProperty("Statement", jsonArray(jsonObject(
jsonProperty("Action", jsonArray("odps:*")),
jsonProperty("Effect", "Allow"),
jsonProperty("Resource", jsonArray(
"acs:odps:*:projects/project_name/authorization/roles",
"acs:odps:*:projects/project_name/authorization/roles/*/*"
))
))),
jsonProperty("Version", "1")
)))
.roleName("tf_example112")
.build());
}
}Content copied to clipboard
configuration:
name:
type: string
default: terraform-example
resources:
default:
type: alicloud:maxcompute:Project
properties:
defaultQuota: 默认后付费Quota
projectName: ${name}
comment: ${name}
productType: PayAsYouGo
defaultRole:
type: alicloud:maxcompute:Role
name: default
properties:
type: admin
projectName: ${default.id}
policy:
fn::toJSON:
Statement:
- Action:
- odps:*
Effect: Allow
Resource:
- acs:odps:*:projects/project_name/authorization/roles
- acs:odps:*:projects/project_name/authorization/roles/*/*
Version: '1'
roleName: tf_example112Content copied to clipboard
Import
Max Compute Role can be imported using the id, e.g.
$ pulumi import alicloud:maxcompute/role:Role example <project_name>:<role_name>Content copied to clipboard
Constructors
Properties
Link copied to clipboard
Policy Authorization Refer to Policy-based access control and Authorization practices
Link copied to clipboard
Project name