Managed
data class ManagedHardwareSecurityModuleRoleDefinitionArgs(val description: Output<String>? = null, val managedHsmId: Output<String>? = null, val name: Output<String>? = null, val permissions: Output<List<ManagedHardwareSecurityModuleRoleDefinitionPermissionArgs>>? = null, val roleName: Output<String>? = null, val vaultBaseUrl: Output<String>? = null) : ConvertibleToJava<ManagedHardwareSecurityModuleRoleDefinitionArgs>
Manages a KeyVault Managed Hardware Security Module Role Definition. This resource works together with Managed hardware security module resource.
Example Usage
resources:
example:
type: azure:keyvault:ManagedHardwareSecurityModule
properties:
name: example
resourceGroupName: ${exampleAzurermResourceGroup.name}
location: ${exampleAzurermResourceGroup.location}
skuName: Standard_B1
tenantId: ${current.tenantId}
adminObjectIds:
- ${current.objectId}
purgeProtectionEnabled: false
activeConfig:
- securityDomainCertificate:
- ${cert[0].id}
- ${cert[1].id}
- ${cert[2].id}
securityDomainQuorum: 2
exampleManagedHardwareSecurityModuleRoleDefinition:
type: azure:keyvault:ManagedHardwareSecurityModuleRoleDefinition
name: example
properties:
name: 7d206142-bf01-11ed-80bc-00155d61ee9e
vaultBaseUrl: ${example.hsmUri}
description: desc foo
permissions:
- dataActions:
- Microsoft.KeyVault/managedHsm/keys/read/actionContent copied to clipboard
Import
KeyVaults can be imported using the resource id, e.g.
$ pulumi import azure:keyvault/managedHardwareSecurityModuleRoleDefinition:ManagedHardwareSecurityModuleRoleDefinition example https://0000.managedhsm.azure.net///RoleDefinition/00000000-0000-0000-0000-000000000000Content copied to clipboard
Properties
Link copied to clipboard
Specifies a text description about this KeyVault Role Definition.
Link copied to clipboard
Link copied to clipboard
One or more permission blocks as defined below.
Link copied to clipboard
The base URL of the managed hardware security module resource. Changing this forces a new KeyVault Role Definition to be created.