AccessConfigurationArgs

data class AccessConfigurationArgs(val accessConfigurationName: Output<String>? = null, val description: Output<String>? = null, val directoryId: Output<String>? = null, val forceRemovePermissionPolicies: Output<Boolean>? = null, val permissionPolicies: Output<List<AccessConfigurationPermissionPolicyArgs>>? = null, val relayState: Output<String>? = null, val sessionDuration: Output<Int>? = null) : ConvertibleToJava<AccessConfigurationArgs>

Provides a Cloud SSO Access Configuration resource. For information about Cloud SSO Access Configuration and how to use it, see What is Access Configuration.

NOTE: Available since v1.145.0.

Example Usage

Basic Usage

import * as pulumi from "@pulumi/pulumi";
import * as alicloud from "@pulumi/alicloud";
const config = new pulumi.Config();
const name = config.get("name") || "terraform-example";
const _default = alicloud.cloudsso.getDirectories({});
const defaultAccessConfiguration = new alicloud.cloudsso.AccessConfiguration("default", {
directoryId: _default.then(_default => _default.directories?.[0]?.id),
accessConfigurationName: name,
permissionPolicies: [{
permissionPolicyType: "Inline",
permissionPolicyName: name,
permissionPolicyDocument: ` {
"Statement":[
{
"Action":"ecs:Get*",
"Effect":"Allow",
"Resource":[
"*"
]
}
],
"Version": "1"
}
`,
}],
});
import pulumi
import pulumi_alicloud as alicloud
config = pulumi.Config()
name = config.get("name")
if name is None:
name = "terraform-example"
default = alicloud.cloudsso.get_directories()
default_access_configuration = alicloud.cloudsso.AccessConfiguration("default",
directory_id=default.directories[0].id,
access_configuration_name=name,
permission_policies=[{
"permission_policy_type": "Inline",
"permission_policy_name": name,
"permission_policy_document": """ {
"Statement":[
{
"Action":"ecs:Get*",
"Effect":"Allow",
"Resource":[
"*"
]
}
],
"Version": "1"
}
""",
}])
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AliCloud = Pulumi.AliCloud;
return await Deployment.RunAsync(() =>
{
var config = new Config();
var name = config.Get("name") ?? "terraform-example";
var @default = AliCloud.CloudSso.GetDirectories.Invoke();
var defaultAccessConfiguration = new AliCloud.CloudSso.AccessConfiguration("default", new()
{
DirectoryId = @default.Apply(@default => @default.Apply(getDirectoriesResult => getDirectoriesResult.Directories[0]?.Id)),
AccessConfigurationName = name,
PermissionPolicies = new[]
{
new AliCloud.CloudSso.Inputs.AccessConfigurationPermissionPolicyArgs
{
PermissionPolicyType = "Inline",
PermissionPolicyName = name,
PermissionPolicyDocument = @" {
""Statement"":[
{
""Action"":""ecs:Get*"",
""Effect"":""Allow"",
""Resource"":[
""*""
]
}
],
""Version"": ""1""
}
",
},
},
});
});
package main
import (
"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/cloudsso"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
cfg := config.New(ctx, "")
name := "terraform-example"
if param := cfg.Get("name"); param != "" {
name = param
}
_default, err := cloudsso.GetDirectories(ctx, &cloudsso.GetDirectoriesArgs{}, nil)
if err != nil {
return err
}
_, err = cloudsso.NewAccessConfiguration(ctx, "default", &cloudsso.AccessConfigurationArgs{
DirectoryId: pulumi.String(_default.Directories[0].Id),
AccessConfigurationName: pulumi.String(name),
PermissionPolicies: cloudsso.AccessConfigurationPermissionPolicyArray{
&cloudsso.AccessConfigurationPermissionPolicyArgs{
PermissionPolicyType: pulumi.String("Inline"),
PermissionPolicyName: pulumi.String(name),
PermissionPolicyDocument: pulumi.String(` {
"Statement":[
{
"Action":"ecs:Get*",
"Effect":"Allow",
"Resource":[
"*"
]
}
],
"Version": "1"
}
`),
},
},
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.alicloud.cloudsso.CloudssoFunctions;
import com.pulumi.alicloud.cloudsso.inputs.GetDirectoriesArgs;
import com.pulumi.alicloud.cloudsso.AccessConfiguration;
import com.pulumi.alicloud.cloudsso.AccessConfigurationArgs;
import com.pulumi.alicloud.cloudsso.inputs.AccessConfigurationPermissionPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var config = ctx.config();
final var name = config.get("name").orElse("terraform-example");
final var default = CloudssoFunctions.getDirectories(GetDirectoriesArgs.builder()
.build());
var defaultAccessConfiguration = new AccessConfiguration("defaultAccessConfiguration", AccessConfigurationArgs.builder()
.directoryId(default_.directories()[0].id())
.accessConfigurationName(name)
.permissionPolicies(AccessConfigurationPermissionPolicyArgs.builder()
.permissionPolicyType("Inline")
.permissionPolicyName(name)
.permissionPolicyDocument("""
{
"Statement":[
{
"Action":"ecs:Get*",
"Effect":"Allow",
"Resource":[
"*"
]
}
],
"Version": "1"
}
""")
.build())
.build());
}
}
configuration:
name:
type: string
default: terraform-example
resources:
defaultAccessConfiguration:
type: alicloud:cloudsso:AccessConfiguration
name: default
properties:
directoryId: ${default.directories[0].id}
accessConfigurationName: ${name}
permissionPolicies:
- permissionPolicyType: Inline
permissionPolicyName: ${name}
permissionPolicyDocument: |2
{
"Statement":[
{
"Action":"ecs:Get*",
"Effect":"Allow",
"Resource":[
"*"
]
}
],
"Version": "1"
}
variables:
default:
fn::invoke:
function: alicloud:cloudsso:getDirectories
arguments: {}

Import

Cloud SSO Access Configuration can be imported using the id, e.g.

$ pulumi import alicloud:cloudsso/accessConfiguration:AccessConfiguration example <directory_id>:<access_configuration_id>

Constructors

Link copied to clipboard
constructor(accessConfigurationName: Output<String>? = null, description: Output<String>? = null, directoryId: Output<String>? = null, forceRemovePermissionPolicies: Output<Boolean>? = null, permissionPolicies: Output<List<AccessConfigurationPermissionPolicyArgs>>? = null, relayState: Output<String>? = null, sessionDuration: Output<Int>? = null)

Properties

Link copied to clipboard
val accessConfigurationName: Output<String>? = null

The name of the access configuration. The name can be up to 32 characters long and can contain letters, digits, and hyphens (-).

Link copied to clipboard
val description: Output<String>? = null

The description of the access configuration. The description can be up to 1024 characters in length.

Link copied to clipboard
val directoryId: Output<String>? = null

The ID of the Directory.

Link copied to clipboard

This parameter is used to force deletion permission_policies. Valid Value: true, false.

Link copied to clipboard

The Policy List. See permission_policies below.

Link copied to clipboard
val relayState: Output<String>? = null

The RelayState of the Access Configuration, Cloud SSO users use this access configuration to access the RD account, the initial access page address. Must be the Alibaba Cloud console page, the default is the console home page.

Link copied to clipboard
val sessionDuration: Output<Int>? = null

The SessionDuration of the Access Configuration. Unit: Seconds. Valid values: 900 to 43200.

Functions

Link copied to clipboard
open override fun toJava(): AccessConfigurationArgs