pulumi-aws-kotlin/com.pulumi.aws.organizations.kotlin/PolicyArgs

PolicyArgs

data class PolicyArgs(val content: Output<String>? = null, val description: Output<String>? = null, val name: Output<String>? = null, val skipDestroy: Output<Boolean>? = null, val tags: Output<Map<String, String>>? = null, val type: Output<String>? = null) : ConvertibleToJava<PolicyArgs>

Provides a resource to manage an AWS Organizations policy.

Example Usage

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.iam.IamFunctions;
import com.pulumi.aws.iam.inputs.GetPolicyDocumentArgs;
import com.pulumi.aws.organizations.Policy;
import com.pulumi.aws.organizations.PolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var examplePolicyDocument = IamFunctions.getPolicyDocument(GetPolicyDocumentArgs.builder()
            .statements(GetPolicyDocumentStatementArgs.builder()
                .effect("Allow")
                .actions("*")
                .resources("*")
                .build())
            .build());
        var examplePolicy = new Policy("examplePolicy", PolicyArgs.builder()
            .content(examplePolicyDocument.applyValue(getPolicyDocumentResult -> getPolicyDocumentResult.json()))
            .build());
    }
}

Import

aws_organizations_policy can be imported by using the policy ID, e.g.,

$ pulumi import aws:organizations/policy:Policy example p-12345678

Constructors

PolicyArgs

fun PolicyArgs(content: Output<String>? = null, description: Output<String>? = null, name: Output<String>? = null, skipDestroy: Output<Boolean>? = null, tags: Output<Map<String, String>>? = null, type: Output<String>? = null)

Functions

toJava

open override fun toJava(): PolicyArgs

Properties

content

val content: Output<String>? = null

The policy content to add to the new policy. For example, if you create a service control policy (SCP), this string must be JSON text that specifies the permissions that admins in attached accounts can delegate to their users, groups, and roles. For more information about the SCP syntax, see the Service Control Policy Syntax documentation and for more information on the Tag Policy syntax, see the Tag Policy Syntax documentation.

description

val description: Output<String>? = null

A description to assign to the policy.

name

val name: Output<String>? = null

The friendly name to assign to the policy.

skipDestroy

val skipDestroy: Output<Boolean>? = null

If set to true, destroy will not delete the policy and instead just remove the resource from state. This can be useful in situations where the policies (and the associated attachment) must be preserved to meet the AWS minimum requirement of 1 attached policy.