ManagedHardwareSecurityModuleRoleDefinition

class ManagedHardwareSecurityModuleRoleDefinition : KotlinCustomResource

Manages a KeyVault Managed Hardware Security Module Role Definition. This resource works together with Managed hardware security module resource.

Example Usage

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.keyvault.ManagedHardwareSecurityModule;
import com.pulumi.azure.keyvault.ManagedHardwareSecurityModuleArgs;
import com.pulumi.azure.keyvault.ManagedHardwareSecurityModuleRoleDefinition;
import com.pulumi.azure.keyvault.ManagedHardwareSecurityModuleRoleDefinitionArgs;
import com.pulumi.azure.keyvault.inputs.ManagedHardwareSecurityModuleRoleDefinitionPermissionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new ManagedHardwareSecurityModule("example", ManagedHardwareSecurityModuleArgs.builder()
.name("example")
.resourceGroupName(exampleAzurermResourceGroup.name())
.location(exampleAzurermResourceGroup.location())
.skuName("Standard_B1")
.tenantId(current.tenantId())
.adminObjectIds(current.objectId())
.purgeProtectionEnabled(false)
.activeConfig(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
.build());
var exampleManagedHardwareSecurityModuleRoleDefinition = new ManagedHardwareSecurityModuleRoleDefinition("exampleManagedHardwareSecurityModuleRoleDefinition", ManagedHardwareSecurityModuleRoleDefinitionArgs.builder()
.name("7d206142-bf01-11ed-80bc-00155d61ee9e")
.vaultBaseUrl(example.hsmUri())
.description("desc foo")
.permissions(ManagedHardwareSecurityModuleRoleDefinitionPermissionArgs.builder()
.dataActions("Microsoft.KeyVault/managedHsm/keys/read/action")
.build())
.build());
}
}

Import

KeyVaults can be imported using the resource id, e.g.

$ pulumi import azure:keyvault/managedHardwareSecurityModuleRoleDefinition:ManagedHardwareSecurityModuleRoleDefinition example https://0000.managedhsm.azure.net///RoleDefinition/00000000-0000-0000-0000-000000000000

Properties

Link copied to clipboard
val description: Output<String>?

Specifies a text description about this KeyVault Role Definition.

Link copied to clipboard
val id: Output<String>
Link copied to clipboard
val name: Output<String>

The name which should be used for this KeyVault Role Definition. Changing this forces a new KeyVault Role Definition to be created.

Link copied to clipboard

One or more permission blocks as defined below.

Link copied to clipboard
val pulumiChildResources: Set<KotlinResource>
Link copied to clipboard
Link copied to clipboard
Link copied to clipboard

The ID of the role definition resource without Key Vault base URL.

Link copied to clipboard
val roleName: Output<String>?

Specify a name for this KeyVault Role Definition.

Link copied to clipboard
val roleType: Output<String>

The type of the role definition. Possible values are AKVBuiltInRole and CustomRole.

Link copied to clipboard
val urn: Output<String>
Link copied to clipboard
val vaultBaseUrl: Output<String>

The base URL of the managed hardware security module resource. Changing this forces a new KeyVault Role Definition to be created.