IAMBindingArgs

data class IAMBindingArgs(val condition: Output<IAMBindingConditionArgs>? = null, val members: Output<List<String>>? = null, val project: Output<String>? = null, val role: Output<String>? = null) : ConvertibleToJava<IAMBindingArgs>

Import

IAM member imports use space-delimited identifiers; the resource in question, the role, and the account. This member resource can be imported using the project_id, role, and member e.g.

$ pulumi import gcp:projects/iAMBinding:IAMBinding my_project "your-project-id roles/viewer user:foo@example.com"

IAM binding imports use space-delimited identifiers; the resource in question and the role. This binding resource can be imported using the project_id and role, e.g.

$ pulumi import gcp:projects/iAMBinding:IAMBinding my_project "your-project-id roles/viewer"

IAM policy imports use the identifier of the resource in question. This policy resource can be imported using the project_id.

$ pulumi import gcp:projects/iAMBinding:IAMBinding my_project your-project-id

IAM audit config imports use the identifier of the resource in question and the service, e.g.

$ pulumi import gcp:projects/iAMBinding:IAMBinding my_project "your-project-id foo.googleapis.com"

->Custom RolesIf you're importing a IAM resource with a custom role, make sure to use the full name of the custom role, e.g. [projects/my-project|organizations/my-org]/roles/my-custom-role. ->Conditional IAM BindingsIf you're importing a IAM binding with a condition block, make sure

$ pulumi import gcp:projects/iAMBinding:IAMBinding to include the title of condition, e.g. `google_project_iam_binding.my_project "{{your-project-id}} roles/{{role_id}} condition-title"`

Constructors

Link copied to clipboard
fun IAMBindingArgs(condition: Output<IAMBindingConditionArgs>? = null, members: Output<List<String>>? = null, project: Output<String>? = null, role: Output<String>? = null)

Functions

Link copied to clipboard
open override fun toJava(): IAMBindingArgs

Properties

Link copied to clipboard
val condition: Output<IAMBindingConditionArgs>? = null

An IAM Condition for a given binding. Structure is documented below.

Link copied to clipboard
val members: Output<List<String>>? = null
Link copied to clipboard
val project: Output<String>? = null

The project id of the target project. This is not inferred from the provider.

Link copied to clipboard
val role: Output<String>? = null

The role that should be applied. Only one gcp.projects.IAMBinding can be used per role. Note that custom roles must be of the format [projects|organizations]/{parent-name}/roles/{role-name}.