PolicyTemplateArgs

data class PolicyTemplateArgs(val description: Output<String>? = null, val policyStoreId: Output<String>? = null, val statement: Output<String>? = null) : ConvertibleToJava<PolicyTemplateArgs>

Resource for managing an AWS Verified Permissions Policy Template.

Example Usage

Basic Usage

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
const example = new aws.verifiedpermissions.PolicyTemplate("example", {
policyStoreId: exampleAwsVerifiedpermissionsPolicyStore.id,
statement: "permit (principal in ?principal, action in PhotoFlash::Action::\"FullPhotoAccess\", resource == ?resource) unless { resource.IsPrivate };",
});
import pulumi
import pulumi_aws as aws
example = aws.verifiedpermissions.PolicyTemplate("example",
policy_store_id=example_aws_verifiedpermissions_policy_store["id"],
statement="permit (principal in ?principal, action in PhotoFlash::Action::\"FullPhotoAccess\", resource == ?resource) unless { resource.IsPrivate };")
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
return await Deployment.RunAsync(() =>
{
var example = new Aws.VerifiedPermissions.PolicyTemplate("example", new()
{
PolicyStoreId = exampleAwsVerifiedpermissionsPolicyStore.Id,
Statement = "permit (principal in ?principal, action in PhotoFlash::Action::\"FullPhotoAccess\", resource == ?resource) unless { resource.IsPrivate };",
});
});
package main
import (
"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/verifiedpermissions"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := verifiedpermissions.NewPolicyTemplate(ctx, "example", &verifiedpermissions.PolicyTemplateArgs{
PolicyStoreId: pulumi.Any(exampleAwsVerifiedpermissionsPolicyStore.Id),
Statement: pulumi.String("permit (principal in ?principal, action in PhotoFlash::Action::\"FullPhotoAccess\", resource == ?resource) unless { resource.IsPrivate };"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.verifiedpermissions.PolicyTemplate;
import com.pulumi.aws.verifiedpermissions.PolicyTemplateArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new PolicyTemplate("example", PolicyTemplateArgs.builder()
.policyStoreId(exampleAwsVerifiedpermissionsPolicyStore.id())
.statement("permit (principal in ?principal, action in PhotoFlash::Action::\"FullPhotoAccess\", resource == ?resource) unless { resource.IsPrivate };")
.build());
}
}
resources:
example:
type: aws:verifiedpermissions:PolicyTemplate
properties:
policyStoreId: ${exampleAwsVerifiedpermissionsPolicyStore.id}
statement: permit (principal in ?principal, action in PhotoFlash::Action::"FullPhotoAccess", resource == ?resource) unless { resource.IsPrivate };

Import

Using pulumi import, import Verified Permissions Policy Store using the policy_store_id:policy_template_id. For example:

$ pulumi import aws:verifiedpermissions/policyTemplate:PolicyTemplate example policyStoreId:policyTemplateId

Constructors

Link copied to clipboard
constructor(description: Output<String>? = null, policyStoreId: Output<String>? = null, statement: Output<String>? = null)

Properties

Link copied to clipboard
val description: Output<String>? = null

Provides a description for the policy template.

Link copied to clipboard
val policyStoreId: Output<String>? = null

The ID of the Policy Store.

Link copied to clipboard
val statement: Output<String>? = null

Defines the content of the statement, written in Cedar policy language. The following arguments are optional:

Functions

Link copied to clipboard
open override fun toJava(): PolicyTemplateArgs