pulumi-alicloud-kotlin/com.pulumi.alicloud.ram.kotlin/RamFunctions/getPolicies

getPolicies

suspend fun getPolicies(argument: GetPoliciesPlainArgs): GetPoliciesResult

This data source provides a list of RAM policies in an Alibaba Cloud account according to the specified filters.

NOTE: Available since v1.0.0+.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as alicloud from "@pulumi/alicloud";
import * as random from "@pulumi/random";
const _default = new random.index.Integer("default", {
    min: 10000,
    max: 99999,
});
const group = new alicloud.ram.Group("group", {
    name: `groupName-${_default.result}`,
    comments: "this is a group comments.",
});
const policy = new alicloud.ram.Policy("policy", {
    policyName: `tf-example-${_default.result}`,
    policyDocument: `    {
      "Statement": [
        {
          "Action": [
            "oss:ListObjects",
            "oss:GetObject"
          ],
          "Effect": "Allow",
          "Resource": [
            "acs:oss:*:*:mybucket",
            "acs:oss:*:*:mybucket/*"
          ]
        }
      ],
        "Version": "1"
    }
`,
    description: "this is a policy test",
});
const attach = new alicloud.ram.GroupPolicyAttachment("attach", {
    policyName: policy.policyName,
    policyType: policy.type,
    groupName: group.name,
});
const policiesDs = alicloud.ram.getPoliciesOutput({
    groupName: attach.groupName,
    type: "Custom",
});
export const firstPolicyName = policiesDs.apply(policiesDs => policiesDs.policies?.[0]?.name);
Content copied to clipboard
import pulumi
import pulumi_alicloud as alicloud
import pulumi_random as random
default = random.index.Integer("default",
    min=10000,
    max=99999)
group = alicloud.ram.Group("group",
    name=f"groupName-{default['result']}",
    comments="this is a group comments.")
policy = alicloud.ram.Policy("policy",
    policy_name=f"tf-example-{default['result']}",
    policy_document="""    {
      "Statement": [
        {
          "Action": [
            "oss:ListObjects",
            "oss:GetObject"
          ],
          "Effect": "Allow",
          "Resource": [
            "acs:oss:*:*:mybucket",
            "acs:oss:*:*:mybucket/*"
          ]
        }
      ],
        "Version": "1"
    }
""",
    description="this is a policy test")
attach = alicloud.ram.GroupPolicyAttachment("attach",
    policy_name=policy.policy_name,
    policy_type=policy.type,
    group_name=group.name)
policies_ds = alicloud.ram.get_policies_output(group_name=attach.group_name,
    type="Custom")
pulumi.export("firstPolicyName", policies_ds.policies[0].name)
Content copied to clipboard
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AliCloud = Pulumi.AliCloud;
using Random = Pulumi.Random;
return await Deployment.RunAsync(() =>
{
    var @default = new Random.Index.Integer("default", new()
    {
        Min = 10000,
        Max = 99999,
    });
    var @group = new AliCloud.Ram.Group("group", new()
    {
        Name = $"groupName-{@default.Result}",
        Comments = "this is a group comments.",
    });
    var policy = new AliCloud.Ram.Policy("policy", new()
    {
        PolicyName = $"tf-example-{@default.Result}",
        PolicyDocument = @"    {
      ""Statement"": [
        {
          ""Action"": [
            ""oss:ListObjects"",
            ""oss:GetObject""
          ],
          ""Effect"": ""Allow"",
          ""Resource"": [
            ""acs:oss:*:*:mybucket"",
            ""acs:oss:*:*:mybucket/*""
          ]
        }
      ],
        ""Version"": ""1""
    }
",
        Description = "this is a policy test",
    });
    var attach = new AliCloud.Ram.GroupPolicyAttachment("attach", new()
    {
        PolicyName = policy.PolicyName,
        PolicyType = policy.Type,
        GroupName = @group.Name,
    });
    var policiesDs = AliCloud.Ram.GetPolicies.Invoke(new()
    {
        GroupName = attach.GroupName,
        Type = "Custom",
    });
    return new Dictionary<string, object?>
    {
        ["firstPolicyName"] = policiesDs&#46;Apply(getPoliciesResult => getPoliciesResult&#46;Policies[0]?.Name),
    };
});
Content copied to clipboard
package main
import (
	"fmt"
	"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/ram"
	"github.com/pulumi/pulumi-random/sdk/v4/go/random"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_default, err := random.NewInteger(ctx, "default", &random.IntegerArgs{
			Min: 10000,
			Max: 99999,
		})
		if err != nil {
			return err
		}
		group, err := ram.NewGroup(ctx, "group", &ram.GroupArgs{
			Name:     pulumi.Sprintf("groupName-%v", _default.Result),
			Comments: pulumi.String("this is a group comments."),
		})
		if err != nil {
			return err
		}
		policy, err := ram.NewPolicy(ctx, "policy", &ram.PolicyArgs{
			PolicyName: pulumi.Sprintf("tf-example-%v", _default.Result),
			PolicyDocument: pulumi.String(`    {
      "Statement": [
        {
          "Action": [
            "oss:ListObjects",
            "oss:GetObject"
          ],
          "Effect": "Allow",
          "Resource": [
            "acs:oss:*:*:mybucket",
            "acs:oss:*:*:mybucket/*"
          ]
        }
      ],
        "Version": "1"
    }
`),
			Description: pulumi.String("this is a policy test"),
		})
		if err != nil {
			return err
		}
		attach, err := ram.NewGroupPolicyAttachment(ctx, "attach", &ram.GroupPolicyAttachmentArgs{
			PolicyName: policy.PolicyName,
			PolicyType: policy.Type,
			GroupName:  group.Name,
		})
		if err != nil {
			return err
		}
		policiesDs := ram.GetPoliciesOutput(ctx, ram.GetPoliciesOutputArgs{
			GroupName: attach.GroupName,
			Type:      pulumi.String("Custom"),
		}, nil)
		ctx.Export("firstPolicyName", policiesDs.ApplyT(func(policiesDs ram.GetPoliciesResult) (*string, error) {
			return &policiesDs.Policies[0].Name, nil
		}).(pulumi.StringPtrOutput))
		return nil
	})
}
Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.random.integer;
import com.pulumi.random.IntegerArgs;
import com.pulumi.alicloud.ram.Group;
import com.pulumi.alicloud.ram.GroupArgs;
import com.pulumi.alicloud.ram.Policy;
import com.pulumi.alicloud.ram.PolicyArgs;
import com.pulumi.alicloud.ram.GroupPolicyAttachment;
import com.pulumi.alicloud.ram.GroupPolicyAttachmentArgs;
import com.pulumi.alicloud.ram.RamFunctions;
import com.pulumi.alicloud.ram.inputs.GetPoliciesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var default_ = new Integer("default", IntegerArgs.builder()
            .min(10000)
            .max(99999)
            .build());
        var group = new Group("group", GroupArgs.builder()
            .name(String.format("groupName-%s", default_.result()))
            .comments("this is a group comments.")
            .build());
        var policy = new Policy("policy", PolicyArgs.builder()
            .policyName(String.format("tf-example-%s", default_.result()))
            .policyDocument("""
    {
      "Statement": [
        {
          "Action": [
            "oss:ListObjects",
            "oss:GetObject"
          ],
          "Effect": "Allow",
          "Resource": [
            "acs:oss:*:*:mybucket",
            "acs:oss:*:*:mybucket/*"
          ]
        }
      ],
        "Version": "1"
    }
            """)
            .description("this is a policy test")
            .build());
        var attach = new GroupPolicyAttachment("attach", GroupPolicyAttachmentArgs.builder()
            .policyName(policy.policyName())
            .policyType(policy.type())
            .groupName(group.name())
            .build());
        final var policiesDs = RamFunctions.getPolicies(GetPoliciesArgs.builder()
            .groupName(attach.groupName())
            .type("Custom")
            .build());
        ctx.export("firstPolicyName", policiesDs.applyValue(getPoliciesResult -> getPoliciesResult).applyValue(policiesDs -> policiesDs.applyValue(getPoliciesResult -> getPoliciesResult.policies()[0].name())));
    }
}
Content copied to clipboard
resources:
  group:
    type: alicloud:ram:Group
    properties:
      name: groupName-${default.result}
      comments: this is a group comments.
  default:
    type: random:integer
    properties:
      min: 10000
      max: 99999
  policy:
    type: alicloud:ram:Policy
    properties:
      policyName: tf-example-${default.result}
      policyDocument: |2
            {
              "Statement": [
                {
                  "Action": [
                    "oss:ListObjects",
                    "oss:GetObject"
                  ],
                  "Effect": "Allow",
                  "Resource": [
                    "acs:oss:*:*:mybucket",
                    "acs:oss:*:*:mybucket/*"
                  ]
                }
              ],
                "Version": "1"
            }
      description: this is a policy test
  attach:
    type: alicloud:ram:GroupPolicyAttachment
    properties:
      policyName: ${policy.policyName}
      policyType: ${policy.type}
      groupName: ${group.name}
variables:
  policiesDs:
    fn::invoke:
      function: alicloud:ram:getPolicies
      arguments:
        groupName: ${attach.groupName}
        type: Custom
outputs:
  firstPolicyName: ${policiesDs.policies[0].name}
Content copied to clipboard

Return

A collection of values returned by getPolicies. //////

Parameters

argument

A collection of arguments for invoking getPolicies.

suspend fun getPolicies(enableDetails: Boolean? = null, groupName: String? = null, ids: List<String>? = null, nameRegex: String? = null, outputFile: String? = null, roleName: String? = null, type: String? = null, userName: String? = null): GetPoliciesResult

Return

A collection of values returned by getPolicies.

Parameters

enableDetails

Default to true. Set it to true can output more details.

groupName

Filter results by a specific group name. Returned policies are attached to the specified group.

ids

A list of ram group IDs.

nameRegex

A regex string to filter resulting policies by name.

outputFile

File name where to save data source results (after running pulumi preview).

roleName

Filter results by a specific role name. Returned policies are attached to the specified role.

type

Filter results by a specific policy type. Valid values are Custom and System.

userName

Filter results by a specific user name. Returned policies are attached to the specified user.

See also

.

suspend fun getPolicies(argument: suspend GetPoliciesPlainArgsBuilder.() -> Unit): GetPoliciesResult

Return

A collection of values returned by getPolicies.

Parameters

argument

Builder for com.pulumi.alicloud.ram.kotlin.inputs.GetPoliciesPlainArgs.

See also

.