pulumi-aws-kotlin/com.pulumi.aws.rolesanywhere.kotlin/Profile

Profile

Resource for managing a Roles Anywhere Profile.

Example Usage

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.iam.Role;
import com.pulumi.aws.iam.RoleArgs;
import com.pulumi.aws.rolesanywhere.Profile;
import com.pulumi.aws.rolesanywhere.ProfileArgs;
import static com.pulumi.codegen.internal.Serialization.*;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var testRole = new Role("testRole", RoleArgs.builder()
            .path("/")
            .assumeRolePolicy(serializeJson(
                jsonObject(
                    jsonProperty("Version", "2012-10-17"),
                    jsonProperty("Statement", jsonArray(jsonObject(
                        jsonProperty("Action", jsonArray(
                            "sts:AssumeRole",
                            "sts:TagSession",
                            "sts:SetSourceIdentity"
                        )),
                        jsonProperty("Principal", jsonObject(
                            jsonProperty("Service", "rolesanywhere.amazonaws.com")
                        )),
                        jsonProperty("Effect", "Allow"),
                        jsonProperty("Sid", "")
                    )))
                )))
            .build());
        var testProfile = new Profile("testProfile", ProfileArgs.builder()
            .roleArns(testRole.arn())
            .build());
    }
}

Import

aws_rolesanywhere_profile can be imported using its id, e.g.

$ pulumi import aws:rolesanywhere/profile:Profile example db138a85-8925-4f9f-a409-08231233cacf

Properties

arn

val arn: Output<String>

Amazon Resource Name (ARN) of the Profile

durationSeconds

val durationSeconds: Output<Int>

The number of seconds the vended session credentials are valid for. Defaults to 3600.

enabled

val enabled: Output<Boolean>?

Whether or not the Profile is enabled.

val id: Output<String>

managedPolicyArns

val managedPolicyArns: Output<List<String>>?

A list of managed policy ARNs that apply to the vended session credentials.

name

val name: Output<String>

The name of the Profile.

pulumiChildResources

val pulumiChildResources: Set<KotlinResource>

pulumiResourceName

val pulumiResourceName: String

pulumiResourceType

val pulumiResourceType: String

requireInstanceProperties

val requireInstanceProperties: Output<Boolean>?

Specifies whether instance properties are required in CreateSession requests with this profile.

roleArns

val roleArns: Output<List<String>>

A list of IAM roles that this profile can assume

sessionPolicy

val sessionPolicy: Output<String>?

A session policy that applies to the trust boundary of the vended session credentials.