ResourcePolicy

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.codebuild.ReportGroup;
import com.pulumi.aws.codebuild.ReportGroupArgs;
import com.pulumi.aws.codebuild.inputs.ReportGroupExportConfigArgs;
import com.pulumi.aws.AwsFunctions;
import com.pulumi.aws.codebuild.ResourcePolicy;
import com.pulumi.aws.codebuild.ResourcePolicyArgs;
import static com.pulumi.codegen.internal.Serialization.*;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var exampleReportGroup = new ReportGroup("exampleReportGroup", ReportGroupArgs.builder()
            .type("TEST")
            .exportConfig(ReportGroupExportConfigArgs.builder()
                .type("NO_EXPORT")
                .build())
            .build());
        final var currentPartition = AwsFunctions.getPartition();
        final var currentCallerIdentity = AwsFunctions.getCallerIdentity();
        var exampleResourcePolicy = new ResourcePolicy("exampleResourcePolicy", ResourcePolicyArgs.builder()
            .resourceArn(exampleReportGroup.arn())
            .policy(exampleReportGroup.arn().applyValue(arn -> serializeJson(
                jsonObject(
                    jsonProperty("Version", "2012-10-17"),
                    jsonProperty("Id", "default"),
                    jsonProperty("Statement", jsonArray(jsonObject(
                        jsonProperty("Sid", "default"),
                        jsonProperty("Effect", "Allow"),
                        jsonProperty("Principal", jsonObject(
                            jsonProperty("AWS", String.format("arn:%s:iam::%s:root", currentPartition.applyValue(getPartitionResult -> getPartitionResult.partition()),currentCallerIdentity.applyValue(getCallerIdentityResult -> getCallerIdentityResult.accountId())))
                        )),
                        jsonProperty("Action", jsonArray(
                            "codebuild:BatchGetReportGroups",
                            "codebuild:BatchGetReports",
                            "codebuild:ListReportsForReportGroup",
                            "codebuild:DescribeTestCases"
                        )),
                        jsonProperty("Resource", arn)
                    )))
                ))))
            .build());
    }
}

$ pulumi import aws:codebuild/resourcePolicy:ResourcePolicy example arn:aws:codebuild:us-west-2:123456789:report-group/report-group-name