GroupPolicyAttachmentArgs

data class GroupPolicyAttachmentArgs(val group: Output<String>? = null, val policyArn: Output<String>? = null) : ConvertibleToJava<GroupPolicyAttachmentArgs>

Attaches a Managed IAM Policy to an IAM group

NOTE: The usage of this resource conflicts with the aws.iam.PolicyAttachment resource and will permanently show a difference if both are defined.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
const group = new aws.iam.Group("group", {name: "test-group"});
const policy = new aws.iam.Policy("policy", {
name: "test-policy",
description: "A test policy",
policy: "{ ... policy JSON ... }",
});
const test_attach = new aws.iam.GroupPolicyAttachment("test-attach", {
group: group.name,
policyArn: policy.arn,
});
import pulumi
import pulumi_aws as aws
group = aws.iam.Group("group", name="test-group")
policy = aws.iam.Policy("policy",
name="test-policy",
description="A test policy",
policy="{ ... policy JSON ... }")
test_attach = aws.iam.GroupPolicyAttachment("test-attach",
group=group.name,
policy_arn=policy.arn)
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
return await Deployment.RunAsync(() =>
{
var @group = new Aws.Iam.Group("group", new()
{
Name = "test-group",
});
var policy = new Aws.Iam.Policy("policy", new()
{
Name = "test-policy",
Description = "A test policy",
PolicyDocument = "{ ... policy JSON ... }",
});
var test_attach = new Aws.Iam.GroupPolicyAttachment("test-attach", new()
{
Group = @group.Name,
PolicyArn = policy.Arn,
});
});
package main
import (
"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/iam"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
group, err := iam.NewGroup(ctx, "group", &iam.GroupArgs{
Name: pulumi.String("test-group"),
})
if err != nil {
return err
}
policy, err := iam.NewPolicy(ctx, "policy", &iam.PolicyArgs{
Name: pulumi.String("test-policy"),
Description: pulumi.String("A test policy"),
Policy: pulumi.Any("{ ... policy JSON ... }"),
})
if err != nil {
return err
}
_, err = iam.NewGroupPolicyAttachment(ctx, "test-attach", &iam.GroupPolicyAttachmentArgs{
Group: group.Name,
PolicyArn: policy.Arn,
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.iam.Group;
import com.pulumi.aws.iam.GroupArgs;
import com.pulumi.aws.iam.Policy;
import com.pulumi.aws.iam.PolicyArgs;
import com.pulumi.aws.iam.GroupPolicyAttachment;
import com.pulumi.aws.iam.GroupPolicyAttachmentArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var group = new Group("group", GroupArgs.builder()
.name("test-group")
.build());
var policy = new Policy("policy", PolicyArgs.builder()
.name("test-policy")
.description("A test policy")
.policy("{ ... policy JSON ... }")
.build());
var test_attach = new GroupPolicyAttachment("test-attach", GroupPolicyAttachmentArgs.builder()
.group(group.name())
.policyArn(policy.arn())
.build());
}
}
resources:
group:
type: aws:iam:Group
properties:
name: test-group
policy:
type: aws:iam:Policy
properties:
name: test-policy
description: A test policy
policy: '{ ... policy JSON ... }'
test-attach:
type: aws:iam:GroupPolicyAttachment
properties:
group: ${group.name}
policyArn: ${policy.arn}

Import

Using pulumi import, import IAM group policy attachments using the group name and policy arn separated by /. For example:

$ pulumi import aws:iam/groupPolicyAttachment:GroupPolicyAttachment test-attach test-group/arn:aws:iam::xxxxxxxxxxxx:policy/test-policy

Constructors

Link copied to clipboard
constructor(group: Output<String>? = null, policyArn: Output<String>? = null)

Properties

Link copied to clipboard
val group: Output<String>? = null

The group the policy should be applied to

Link copied to clipboard
val policyArn: Output<String>? = null

The ARN of the policy you want to apply

Functions

Link copied to clipboard
open override fun toJava(): GroupPolicyAttachmentArgs