pulumi-aws-kotlin/com.pulumi.aws.mediastore.kotlin/ContainerPolicyArgs

ContainerPolicyArgs

data class ContainerPolicyArgs(val containerName: Output<String>? = null, val policy: Output<String>? = null) : ConvertibleToJava<ContainerPolicyArgs>

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
const current = aws.getRegion({});
const currentGetCallerIdentity = aws.getCallerIdentity({});
const exampleContainer = new aws.mediastore.Container("example", {name: "example"});
const example = aws.iam.getPolicyDocumentOutput({
    statements: [{
        sid: "MediaStoreFullAccess",
        effect: "Allow",
        principals: [{
            type: "AWS",
            identifiers: [currentGetCallerIdentity&#46;then(currentGetCallerIdentity => `arn:aws:iam::${currentGetCallerIdentity&#46;accountId}:root`)],
        }],
        actions: ["mediastore:*"],
        resources: [pulumi&#46;all([current, currentGetCallerIdentity, exampleContainer&#46;name])&#46;apply(([current, currentGetCallerIdentity, name]) => `arn:aws:mediastore:${current&#46;name}:${currentGetCallerIdentity&#46;accountId}:container/${name}/*`)],
        conditions: [{
            test: "Bool",
            variable: "aws:SecureTransport",
            values: ["true"],
        }],
    }],
});
const exampleContainerPolicy = new aws.mediastore.ContainerPolicy("example", {
    containerName: exampleContainer.name,
    policy: example.apply(example => example.json),
});

import pulumi
import pulumi_aws as aws
current = aws.get_region()
current_get_caller_identity = aws.get_caller_identity()
example_container = aws.mediastore.Container("example", name="example")
example = aws.iam.get_policy_document_output(statements=[{
    "sid": "MediaStoreFullAccess",
    "effect": "Allow",
    "principals": [{
        "type": "AWS",
        "identifiers": [f"arn:aws:iam::{current_get_caller_identity&#46;account_id}:root"],
    }],
    "actions": ["mediastore:*"],
    "resources": [example_container&#46;name&#46;apply(lambda name: f"arn:aws:mediastore:{current&#46;name}:{current_get_caller_identity&#46;account_id}:container/{name}/*")],
    "conditions": [{
        "test": "Bool",
        "variable": "aws:SecureTransport",
        "values": ["true"],
    }],
}])
example_container_policy = aws.mediastore.ContainerPolicy("example",
    container_name=example_container.name,
    policy=example.json)

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
return await Deployment.RunAsync(() =>
{
    var current = Aws.GetRegion.Invoke();
    var currentGetCallerIdentity = Aws.GetCallerIdentity.Invoke();
    var exampleContainer = new Aws.MediaStore.Container("example", new()
    {
        Name = "example",
    });
    var example = Aws.Iam.GetPolicyDocument.Invoke(new()
    {
        Statements = new[]
        {
            new Aws.Iam.Inputs.GetPolicyDocumentStatementInputArgs
            {
                Sid = "MediaStoreFullAccess",
                Effect = "Allow",
                Principals = new[]
                {
                    new Aws.Iam.Inputs.GetPolicyDocumentStatementPrincipalInputArgs
                    {
                        Type = "AWS",
                        Identifiers = new[]
                        {
                            $"arn:aws:iam::{currentGetCallerIdentity.Apply(getCallerIdentityResult => getCallerIdentityResult.AccountId)}:root",
                        },
                    },
                },
                Actions = new[]
                {
                    "mediastore:*",
                },
                Resources = new[]
                {
                    $"arn:aws:mediastore:{current.Apply(getRegionResult => getRegionResult.Name)}:{currentGetCallerIdentity.Apply(getCallerIdentityResult => getCallerIdentityResult.AccountId)}:container/{exampleContainer.Name}/*",
                },
                Conditions = new[]
                {
                    new Aws.Iam.Inputs.GetPolicyDocumentStatementConditionInputArgs
                    {
                        Test = "Bool",
                        Variable = "aws:SecureTransport",
                        Values = new[]
                        {
                            "true",
                        },
                    },
                },
            },
        },
    });
    var exampleContainerPolicy = new Aws.MediaStore.ContainerPolicy("example", new()
    {
        ContainerName = exampleContainer.Name,
        Policy = example.Apply(getPolicyDocumentResult => getPolicyDocumentResult.Json),
    });
});

package main
import (
	"fmt"
	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws"
	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/iam"
	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/mediastore"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		current, err := aws.GetRegion(ctx, &aws.GetRegionArgs{}, nil)
		if err != nil {
			return err
		}
		currentGetCallerIdentity, err := aws.GetCallerIdentity(ctx, &aws.GetCallerIdentityArgs{}, nil)
		if err != nil {
			return err
		}
		exampleContainer, err := mediastore.NewContainer(ctx, "example", &mediastore.ContainerArgs{
			Name: pulumi.String("example"),
		})
		if err != nil {
			return err
		}
		example := iam.GetPolicyDocumentOutput(ctx, iam.GetPolicyDocumentOutputArgs{
			Statements: iam.GetPolicyDocumentStatementArray{
				&iam.GetPolicyDocumentStatementArgs{
					Sid:    pulumi.String("MediaStoreFullAccess"),
					Effect: pulumi.String("Allow"),
					Principals: iam.GetPolicyDocumentStatementPrincipalArray{
						&iam.GetPolicyDocumentStatementPrincipalArgs{
							Type: pulumi.String("AWS"),
							Identifiers: pulumi.StringArray{
								pulumi.Sprintf("arn:aws:iam::%v:root", currentGetCallerIdentity.AccountId),
							},
						},
					},
					Actions: pulumi.StringArray{
						pulumi.String("mediastore:*"),
					},
					Resources: pulumi.StringArray{
						exampleContainer.Name.ApplyT(func(name string) (string, error) {
							return fmt.Sprintf("arn:aws:mediastore:%v:%v:container/%v/*", current.Name, currentGetCallerIdentity.AccountId, name), nil
						}).(pulumi.StringOutput),
					},
					Conditions: iam.GetPolicyDocumentStatementConditionArray{
						&iam.GetPolicyDocumentStatementConditionArgs{
							Test:     pulumi.String("Bool"),
							Variable: pulumi.String("aws:SecureTransport"),
							Values: pulumi.StringArray{
								pulumi.String("true"),
							},
						},
					},
				},
			},
		}, nil)
		_, err = mediastore.NewContainerPolicy(ctx, "example", &mediastore.ContainerPolicyArgs{
			ContainerName: exampleContainer.Name,
			Policy: pulumi.String(example.ApplyT(func(example iam.GetPolicyDocumentResult) (*string, error) {
				return &example.Json, nil
			}).(pulumi.StringPtrOutput)),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.AwsFunctions;
import com.pulumi.aws.inputs.GetRegionArgs;
import com.pulumi.aws.inputs.GetCallerIdentityArgs;
import com.pulumi.aws.mediastore.Container;
import com.pulumi.aws.mediastore.ContainerArgs;
import com.pulumi.aws.iam.IamFunctions;
import com.pulumi.aws.iam.inputs.GetPolicyDocumentArgs;
import com.pulumi.aws.mediastore.ContainerPolicy;
import com.pulumi.aws.mediastore.ContainerPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var current = AwsFunctions.getRegion(GetRegionArgs.builder()
            .build());
        final var currentGetCallerIdentity = AwsFunctions.getCallerIdentity(GetCallerIdentityArgs.builder()
            .build());
        var exampleContainer = new Container("exampleContainer", ContainerArgs.builder()
            .name("example")
            .build());
        final var example = IamFunctions.getPolicyDocument(GetPolicyDocumentArgs.builder()
            .statements(GetPolicyDocumentStatementArgs.builder()
                .sid("MediaStoreFullAccess")
                .effect("Allow")
                .principals(GetPolicyDocumentStatementPrincipalArgs.builder()
                    .type("AWS")
                    .identifiers(String.format("arn:aws:iam::%s:root", currentGetCallerIdentity.accountId()))
                    .build())
                .actions("mediastore:*")
                .resources(exampleContainer.name().applyValue(_name -> String.format("arn:aws:mediastore:%s:%s:container/%s/*", current.name(),currentGetCallerIdentity.accountId(),_name)))
                .conditions(GetPolicyDocumentStatementConditionArgs.builder()
                    .test("Bool")
                    .variable("aws:SecureTransport")
                    .values("true")
                    .build())
                .build())
            .build());
        var exampleContainerPolicy = new ContainerPolicy("exampleContainerPolicy", ContainerPolicyArgs.builder()
            .containerName(exampleContainer.name())
            .policy(example.applyValue(_example -> _example.json()))
            .build());
    }
}

resources:
  exampleContainer:
    type: aws:mediastore:Container
    name: example
    properties:
      name: example
  exampleContainerPolicy:
    type: aws:mediastore:ContainerPolicy
    name: example
    properties:
      containerName: ${exampleContainer.name}
      policy: ${example.json}
variables:
  current:
    fn::invoke:
      function: aws:getRegion
      arguments: {}
  currentGetCallerIdentity:
    fn::invoke:
      function: aws:getCallerIdentity
      arguments: {}
  example:
    fn::invoke:
      function: aws:iam:getPolicyDocument
      arguments:
        statements:
          - sid: MediaStoreFullAccess
            effect: Allow
            principals:
              - type: AWS
                identifiers:
                  - arn:aws:iam::${currentGetCallerIdentity.accountId}:root
            actions:
              - mediastore:*
            resources:
              - arn:aws:mediastore:${current.name}:${currentGetCallerIdentity.accountId}:container/${exampleContainer.name}/*
            conditions:
              - test: Bool
                variable: aws:SecureTransport
                values:
                  - 'true'

Import

Using pulumi import, import MediaStore Container Policy using the MediaStore Container Name. For example:

$ pulumi import aws:mediastore/containerPolicy:ContainerPolicy example example

Constructors

ContainerPolicyArgs

constructor(containerName: Output<String>? = null, policy: Output<String>? = null)

Properties

containerName

val containerName: Output<String>? = null

The name of the container.

policy

val policy: Output<String>? = null

The contents of the policy. //////

Functions

toJava

open override fun toJava(): ContainerPolicyArgs