pulumi-aws-kotlin/com.pulumi.aws.ecrpublic.kotlin/RepositoryPolicyArgs

RepositoryPolicyArgs

data class RepositoryPolicyArgs(val policy: Output<String>? = null, val repositoryName: Output<String>? = null) : ConvertibleToJava<RepositoryPolicyArgs>

Provides an Elastic Container Registry Public Repository Policy. Note that currently only one policy may be applied to a repository.

NOTE: This resource can only be used in the us-east-1 region.

Example Usage

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.ecrpublic.Repository;
import com.pulumi.aws.ecrpublic.RepositoryArgs;
import com.pulumi.aws.iam.IamFunctions;
import com.pulumi.aws.iam.inputs.GetPolicyDocumentArgs;
import com.pulumi.aws.ecrpublic.RepositoryPolicy;
import com.pulumi.aws.ecrpublic.RepositoryPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var exampleRepository = new Repository("exampleRepository", RepositoryArgs.builder()
            .repositoryName("example")
            .build());
        final var examplePolicyDocument = IamFunctions.getPolicyDocument(GetPolicyDocumentArgs.builder()
            .statements(GetPolicyDocumentStatementArgs.builder()
                .sid("new policy")
                .effect("Allow")
                .principals(GetPolicyDocumentStatementPrincipalArgs.builder()
                    .type("AWS")
                    .identifiers("123456789012")
                    .build())
                .actions(
                    "ecr:GetDownloadUrlForLayer",
                    "ecr:BatchGetImage",
                    "ecr:BatchCheckLayerAvailability",
                    "ecr:PutImage",
                    "ecr:InitiateLayerUpload",
                    "ecr:UploadLayerPart",
                    "ecr:CompleteLayerUpload",
                    "ecr:DescribeRepositories",
                    "ecr:GetRepositoryPolicy",
                    "ecr:ListImages",
                    "ecr:DeleteRepository",
                    "ecr:BatchDeleteImage",
                    "ecr:SetRepositoryPolicy",
                    "ecr:DeleteRepositoryPolicy")
                .build())
            .build());
        var exampleRepositoryPolicy = new RepositoryPolicy("exampleRepositoryPolicy", RepositoryPolicyArgs.builder()
            .repositoryName(exampleRepository.repositoryName())
            .policy(examplePolicyDocument.applyValue(getPolicyDocumentResult -> getPolicyDocumentResult.json()))
            .build());
    }
}
Content copied to clipboard

Import

ECR Public Repository Policy can be imported using the repository name, e.g.

$ pulumi import aws:ecrpublic/repositoryPolicy:RepositoryPolicy example example
Content copied to clipboard

Constructors

Link copied to clipboard
constructor(policy: Output<String>? = null, repositoryName: Output<String>? = null)

Properties

Link copied to clipboard
val policy: Output<String>? = null

The policy document. This is a JSON formatted string.

Link copied to clipboard
val repositoryName: Output<String>? = null

Name of the repository to apply the policy.

Functions

Link copied to clipboard
open override fun toJava(): RepositoryPolicyArgs