Role

class Role : KotlinCustomResource

Provides a Resource Manager role resource. Members are resource containers in the resource directory, which can physically isolate resources to form an independent resource grouping unit. You can create members in the resource folder to manage them in a unified manner. For information about Resource Manager role and how to use it, see What is Resource Manager role.

NOTE: Available since v1.82.0.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as alicloud from "@pulumi/alicloud";
const config = new pulumi.Config();
const name = config.get("name") || "tfexample";
const _default = alicloud.getAccount({});
const example = new alicloud.resourcemanager.Role("example", {
roleName: name,
assumeRolePolicyDocument: _default.then(_default => ` {
"Statement": [
{
"Action": "sts:AssumeRole",
"Effect": "Allow",
"Principal": {
"RAM":[
"acs:ram::${_default.id}:root"
]
}
}
],
"Version": "1"
}
`),
});
import pulumi
import pulumi_alicloud as alicloud
config = pulumi.Config()
name = config.get("name")
if name is None:
name = "tfexample"
default = alicloud.get_account()
example = alicloud.resourcemanager.Role("example",
role_name=name,
assume_role_policy_document=f""" {{
"Statement": [
{{
"Action": "sts:AssumeRole",
"Effect": "Allow",
"Principal": {{
"RAM":[
"acs:ram::{default.id}:root"
]
}}
}}
],
"Version": "1"
}}
""")
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AliCloud = Pulumi.AliCloud;
return await Deployment.RunAsync(() =>
{
var config = new Config();
var name = config.Get("name") ?? "tfexample";
var @default = AliCloud.GetAccount.Invoke();
var example = new AliCloud.ResourceManager.Role("example", new()
{
RoleName = name,
AssumeRolePolicyDocument = @default.Apply(@default => @$" {{
""Statement"": [
{{
""Action"": ""sts:AssumeRole"",
""Effect"": ""Allow"",
""Principal"": {{
""RAM"":[
""acs:ram::{@default.Apply(getAccountResult => getAccountResult.Id)}:root""
]
}}
}}
],
""Version"": ""1""
}}
"),
});
});
package main
import (
"fmt"
"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud"
"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/resourcemanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
cfg := config.New(ctx, "")
name := "tfexample"
if param := cfg.Get("name"); param != "" {
name = param
}
_default, err := alicloud.GetAccount(ctx, map[string]interface{}{}, nil)
if err != nil {
return err
}
_, err = resourcemanager.NewRole(ctx, "example", &resourcemanager.RoleArgs{
RoleName: pulumi.String(name),
AssumeRolePolicyDocument: pulumi.Sprintf(` {
"Statement": [
{
"Action": "sts:AssumeRole",
"Effect": "Allow",
"Principal": {
"RAM":[
"acs:ram::%v:root"
]
}
}
],
"Version": "1"
}
`, _default.Id),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.alicloud.AlicloudFunctions;
import com.pulumi.alicloud.resourcemanager.Role;
import com.pulumi.alicloud.resourcemanager.RoleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var config = ctx.config();
final var name = config.get("name").orElse("tfexample");
final var default = AlicloudFunctions.getAccount();
var example = new Role("example", RoleArgs.builder()
.roleName(name)
.assumeRolePolicyDocument("""
{
"Statement": [
{
"Action": "sts:AssumeRole",
"Effect": "Allow",
"Principal": {
"RAM":[
"acs:ram::%s:root"
]
}
}
],
"Version": "1"
}
", default_.id()))
.build());
}
}
configuration:
name:
type: string
default: tfexample
resources:
example:
type: alicloud:resourcemanager:Role
properties:
roleName: ${name}
assumeRolePolicyDocument: |2
{
"Statement": [
{
"Action": "sts:AssumeRole",
"Effect": "Allow",
"Principal": {
"RAM":[
"acs:ram::${default.id}:root"
]
}
}
],
"Version": "1"
}
variables:
default:
fn::invoke:
function: alicloud:getAccount
arguments: {}

Import

Resource Manager can be imported using the id or role_name, e.g.

$ pulumi import alicloud:resourcemanager/role:Role example testrd

Properties

Link copied to clipboard
val arn: Output<String>

The resource descriptor of the role.

Link copied to clipboard

The content of the permissions strategy that plays a role.

Link copied to clipboard
val description: Output<String>?

The description of the Resource Manager role.

Link copied to clipboard
val id: Output<String>
Link copied to clipboard
val maxSessionDuration: Output<Int>?

Role maximum session time. Valid values: 3600-43200. Default to 3600.

Link copied to clipboard
val pulumiChildResources: Set<KotlinResource>
Link copied to clipboard
Link copied to clipboard
Link copied to clipboard
val roleId: Output<String>

This ID of Resource Manager role. The value is set to role_name.

Link copied to clipboard
val roleName: Output<String>

Role Name. The length is 1 ~ 64 characters, which can include English letters, numbers, dots "." and dashes "-".

Link copied to clipboard
val updateDate: Output<String>

Role update time.

Link copied to clipboard
val urn: Output<String>