pulumi-gcp-kotlin/com.pulumi.gcp.healthcare.kotlin/FhirStoreIamPolicyArgs

FhirStoreIamPolicyArgs

data class FhirStoreIamPolicyArgs(val fhirStoreId: Output<String>? = null, val policyData: Output<String>? = null) : ConvertibleToJava<FhirStoreIamPolicyArgs>

Three different resources help you manage your IAM policy for Healthcare FHIR store. Each of these resources serves a different use case:

  • gcp.healthcare.FhirStoreIamPolicy: Authoritative. Sets the IAM policy for the FHIR store and replaces any existing policy already attached.

  • gcp.healthcare.FhirStoreIamBinding: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the FHIR store are preserved.

  • gcp.healthcare.FhirStoreIamMember: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the FHIR store are preserved.

Note: gcp.healthcare.FhirStoreIamPolicy cannot be used in conjunction with gcp.healthcare.FhirStoreIamBinding and gcp.healthcare.FhirStoreIamMember or they will fight over what your policy should be. Note: gcp.healthcare.FhirStoreIamBinding resources can be used in conjunction with gcp.healthcare.FhirStoreIamMember resources only if they do not grant privilege to the same role.

google\_healthcare\_fhir\_store\_iam\_policy

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const admin = gcp.organizations.getIAMPolicy({
    bindings: [{
        role: "roles/editor",
        members: ["user:jane@example&#46;com"],
    }],
});
const fhirStore = new gcp.healthcare.FhirStoreIamPolicy("fhirStore", {
    fhirStoreId: "your-fhir-store-id",
    policyData: admin.then(admin => admin.policyData),
});
Content copied to clipboard
import pulumi
import pulumi_gcp as gcp
admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
    role="roles/editor",
    members=["user:jane@example&#46;com"],
)])
fhir_store = gcp.healthcare.FhirStoreIamPolicy("fhirStore",
    fhir_store_id="your-fhir-store-id",
    policy_data=admin.policy_data)
Content copied to clipboard
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() =>
{
    var admin = Gcp.Organizations.GetIAMPolicy.Invoke(new()
    {
        Bindings = new[]
        {
            new Gcp.Organizations.Inputs.GetIAMPolicyBindingInputArgs
            {
                Role = "roles/editor",
                Members = new[]
                {
                    "user:jane@example.com",
                },
            },
        },
    });
    var fhirStore = new Gcp.Healthcare.FhirStoreIamPolicy("fhirStore", new()
    {
        FhirStoreId = "your-fhir-store-id",
        PolicyData = admin.Apply(getIAMPolicyResult => getIAMPolicyResult.PolicyData),
    });
});
Content copied to clipboard
package main
import (
	"github.com/pulumi/pulumi-gcp/sdk/v6/go/gcp/healthcare"
	"github.com/pulumi/pulumi-gcp/sdk/v6/go/gcp/organizations"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/editor",
					Members: []string{
						"user:jane@example.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = healthcare.NewFhirStoreIamPolicy(ctx, "fhirStore", &healthcare.FhirStoreIamPolicyArgs{
			FhirStoreId: pulumi.String("your-fhir-store-id"),
			PolicyData:  *pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.organizations.OrganizationsFunctions;
import com.pulumi.gcp.organizations.inputs.GetIAMPolicyArgs;
import com.pulumi.gcp.healthcare.FhirStoreIamPolicy;
import com.pulumi.gcp.healthcare.FhirStoreIamPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var admin = OrganizationsFunctions.getIAMPolicy(GetIAMPolicyArgs.builder()
            .bindings(GetIAMPolicyBindingArgs.builder()
                .role("roles/editor")
                .members("user:jane@example.com")
                .build())
            .build());
        var fhirStore = new FhirStoreIamPolicy("fhirStore", FhirStoreIamPolicyArgs.builder()
            .fhirStoreId("your-fhir-store-id")
            .policyData(admin.applyValue(getIAMPolicyResult -> getIAMPolicyResult.policyData()))
            .build());
    }
}
Content copied to clipboard
resources:
  fhirStore:
    type: gcp:healthcare:FhirStoreIamPolicy
    properties:
      fhirStoreId: your-fhir-store-id
      policyData: ${admin.policyData}
variables:
  admin:
    fn::invoke:
      Function: gcp:organizations:getIAMPolicy
      Arguments:
        bindings:
          - role: roles/editor
            members:
              - user:jane@example.com
Content copied to clipboard

google\_healthcare\_fhir\_store\_iam\_binding

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const fhirStore = new gcp.healthcare.FhirStoreIamBinding("fhirStore", {
    fhirStoreId: "your-fhir-store-id",
    members: ["user:jane@example&#46;com"],
    role: "roles/editor",
});
Content copied to clipboard
import pulumi
import pulumi_gcp as gcp
fhir_store = gcp.healthcare.FhirStoreIamBinding("fhirStore",
    fhir_store_id="your-fhir-store-id",
    members=["user:jane@example&#46;com"],
    role="roles/editor")
Content copied to clipboard
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() =>
{
    var fhirStore = new Gcp.Healthcare.FhirStoreIamBinding("fhirStore", new()
    {
        FhirStoreId = "your-fhir-store-id",
        Members = new[]
        {
            "user:jane@example.com",
        },
        Role = "roles/editor",
    });
});
Content copied to clipboard
package main
import (
	"github.com/pulumi/pulumi-gcp/sdk/v6/go/gcp/healthcare"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := healthcare.NewFhirStoreIamBinding(ctx, "fhirStore", &healthcare.FhirStoreIamBindingArgs{
			FhirStoreId: pulumi.String("your-fhir-store-id"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
			Role: pulumi.String("roles/editor"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.healthcare.FhirStoreIamBinding;
import com.pulumi.gcp.healthcare.FhirStoreIamBindingArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var fhirStore = new FhirStoreIamBinding("fhirStore", FhirStoreIamBindingArgs.builder()
            .fhirStoreId("your-fhir-store-id")
            .members("user:jane@example.com")
            .role("roles/editor")
            .build());
    }
}
Content copied to clipboard
resources:
  fhirStore:
    type: gcp:healthcare:FhirStoreIamBinding
    properties:
      fhirStoreId: your-fhir-store-id
      members:
        - user:jane@example.com
      role: roles/editor
Content copied to clipboard

google\_healthcare\_fhir\_store\_iam\_member

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const fhirStore = new gcp.healthcare.FhirStoreIamMember("fhirStore", {
    fhirStoreId: "your-fhir-store-id",
    member: "user:jane@example.com",
    role: "roles/editor",
});
Content copied to clipboard
import pulumi
import pulumi_gcp as gcp
fhir_store = gcp.healthcare.FhirStoreIamMember("fhirStore",
    fhir_store_id="your-fhir-store-id",
    member="user:jane@example.com",
    role="roles/editor")
Content copied to clipboard
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() =>
{
    var fhirStore = new Gcp.Healthcare.FhirStoreIamMember("fhirStore", new()
    {
        FhirStoreId = "your-fhir-store-id",
        Member = "user:jane@example.com",
        Role = "roles/editor",
    });
});
Content copied to clipboard
package main
import (
	"github.com/pulumi/pulumi-gcp/sdk/v6/go/gcp/healthcare"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := healthcare.NewFhirStoreIamMember(ctx, "fhirStore", &healthcare.FhirStoreIamMemberArgs{
			FhirStoreId: pulumi.String("your-fhir-store-id"),
			Member:      pulumi.String("user:jane@example.com"),
			Role:        pulumi.String("roles/editor"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.healthcare.FhirStoreIamMember;
import com.pulumi.gcp.healthcare.FhirStoreIamMemberArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var fhirStore = new FhirStoreIamMember("fhirStore", FhirStoreIamMemberArgs.builder()
            .fhirStoreId("your-fhir-store-id")
            .member("user:jane@example.com")
            .role("roles/editor")
            .build());
    }
}
Content copied to clipboard
resources:
  fhirStore:
    type: gcp:healthcare:FhirStoreIamMember
    properties:
      fhirStoreId: your-fhir-store-id
      member: user:jane@example.com
      role: roles/editor
Content copied to clipboard

Import

IAM member imports use space-delimited identifiers; the resource in question, the role, and the account. This member resource can be imported using the fhir_store_id, role, and account e.g.

$ pulumi import gcp:healthcare/fhirStoreIamPolicy:FhirStoreIamPolicy fhir_store_iam "your-project-id/location-name/dataset-name/fhir-store-name roles/viewer user:foo@example.com"
Content copied to clipboard

IAM binding imports use space-delimited identifiers; the resource in question and the role. This binding resource can be imported using the fhir_store_id and role, e.g.

$ pulumi import gcp:healthcare/fhirStoreIamPolicy:FhirStoreIamPolicy fhir_store_iam "your-project-id/location-name/dataset-name/fhir-store-name roles/viewer"
Content copied to clipboard

IAM policy imports use the identifier of the resource in question. This policy resource can be imported using the fhir_store_id, role, and account e.g.

$ pulumi import gcp:healthcare/fhirStoreIamPolicy:FhirStoreIamPolicy fhir_store_iam your-project-id/location-name/dataset-name/fhir-store-name
Content copied to clipboard

Constructors

Link copied to clipboard
constructor(fhirStoreId: Output<String>? = null, policyData: Output<String>? = null)

Properties

Link copied to clipboard
val fhirStoreId: Output<String>? = null

The FHIR store ID, in the form {project_id}/{location_name}/{dataset_name}/{fhir_store_name} or {location_name}/{dataset_name}/{fhir_store_name}. In the second form, the provider's project setting will be used as a fallback.

Link copied to clipboard
val policyData: Output<String>? = null

The policy data generated by a gcp.organizations.getIAMPolicy data source.

Functions

Link copied to clipboard
open override fun toJava(): FhirStoreIamPolicyArgs