pulumi-gcp-kotlin/com.pulumi.gcp.accesscontextmanager.kotlin/AccessLevelsArgs

AccessLevelsArgs

data class AccessLevelsArgs(val accessLevels: Output<List<AccessLevelsAccessLevelArgs>>? = null, val parent: Output<String>? = null) : ConvertibleToJava<AccessLevelsArgs>

Example Usage

Access Context Manager Access Levels Basic

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const access_policy = new gcp.accesscontextmanager.AccessPolicy("access-policy", {
    parent: "organizations/123456789",
    title: "my policy",
});
const access_levels = new gcp.accesscontextmanager.AccessLevels("access-levels", {
    parent: pulumi.interpolate`accessPolicies/${access_policy.name}`,
    accessLevels: [
        {
            name: pulumi.interpolate`accessPolicies/${access_policy.name}/accessLevels/chromeos_no_lock`,
            title: "chromeos_no_lock",
            basic: {
                conditions: [{
                    devicePolicy: {
                        requireScreenLock: true,
                        osConstraints: [{
                            osType: "DESKTOP_CHROME_OS",
                        }],
                    },
                    regions: [
                        "CH",
                        "IT",
                        "US",
                    ],
                }],
            },
        },
        {
            name: pulumi.interpolate`accessPolicies/${access_policy.name}/accessLevels/mac_no_lock`,
            title: "mac_no_lock",
            basic: {
                conditions: [{
                    devicePolicy: {
                        requireScreenLock: true,
                        osConstraints: [{
                            osType: "DESKTOP_MAC",
                        }],
                    },
                    regions: [
                        "CH",
                        "IT",
                        "US",
                    ],
                }],
            },
        },
    ],
});
Content copied to clipboard
import pulumi
import pulumi_gcp as gcp
access_policy = gcp.accesscontextmanager.AccessPolicy("access-policy",
    parent="organizations/123456789",
    title="my policy")
access_levels = gcp.accesscontextmanager.AccessLevels("access-levels",
    parent=access_policy.name.apply(lambda name: f"accessPolicies/{name}"),
    access_levels=[
        {
            "name": access_policy.name.apply(lambda name: f"accessPolicies/{name}/accessLevels/chromeos_no_lock"),
            "title": "chromeos_no_lock",
            "basic": {
                "conditions": [{
                    "device_policy": {
                        "require_screen_lock": True,
                        "os_constraints": [{
                            "os_type": "DESKTOP_CHROME_OS",
                        }],
                    },
                    "regions": [
                        "CH",
                        "IT",
                        "US",
                    ],
                }],
            },
        },
        {
            "name": access_policy.name.apply(lambda name: f"accessPolicies/{name}/accessLevels/mac_no_lock"),
            "title": "mac_no_lock",
            "basic": {
                "conditions": [{
                    "device_policy": {
                        "require_screen_lock": True,
                        "os_constraints": [{
                            "os_type": "DESKTOP_MAC",
                        }],
                    },
                    "regions": [
                        "CH",
                        "IT",
                        "US",
                    ],
                }],
            },
        },
    ])
Content copied to clipboard
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() =>
{
    var access_policy = new Gcp.AccessContextManager.AccessPolicy("access-policy", new()
    {
        Parent = "organizations/123456789",
        Title = "my policy",
    });
    var access_levels = new Gcp.AccessContextManager.AccessLevels("access-levels", new()
    {
        Parent = access_policy.Name.Apply(name => $"accessPolicies/{name}"),
        AccessLevelDetails = new[]
        {
            new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelArgs
            {
                Name = access_policy.Name.Apply(name => $"accessPolicies/{name}/accessLevels/chromeos_no_lock"),
                Title = "chromeos_no_lock",
                Basic = new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelBasicArgs
                {
                    Conditions = new[]
                    {
                        new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelBasicConditionArgs
                        {
                            DevicePolicy = new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelBasicConditionDevicePolicyArgs
                            {
                                RequireScreenLock = true,
                                OsConstraints = new[]
                                {
                                    new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs
                                    {
                                        OsType = "DESKTOP_CHROME_OS",
                                    },
                                },
                            },
                            Regions = new[]
                            {
                                "CH",
                                "IT",
                                "US",
                            },
                        },
                    },
                },
            },
            new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelArgs
            {
                Name = access_policy.Name.Apply(name => $"accessPolicies/{name}/accessLevels/mac_no_lock"),
                Title = "mac_no_lock",
                Basic = new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelBasicArgs
                {
                    Conditions = new[]
                    {
                        new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelBasicConditionArgs
                        {
                            DevicePolicy = new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelBasicConditionDevicePolicyArgs
                            {
                                RequireScreenLock = true,
                                OsConstraints = new[]
                                {
                                    new Gcp.AccessContextManager.Inputs.AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs
                                    {
                                        OsType = "DESKTOP_MAC",
                                    },
                                },
                            },
                            Regions = new[]
                            {
                                "CH",
                                "IT",
                                "US",
                            },
                        },
                    },
                },
            },
        },
    });
});
Content copied to clipboard
package main
import (
	"fmt"
	"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/accesscontextmanager"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := accesscontextmanager.NewAccessPolicy(ctx, "access-policy", &accesscontextmanager.AccessPolicyArgs{
			Parent: pulumi.String("organizations/123456789"),
			Title:  pulumi.String("my policy"),
		})
		if err != nil {
			return err
		}
		_, err = accesscontextmanager.NewAccessLevels(ctx, "access-levels", &accesscontextmanager.AccessLevelsArgs{
			Parent: access_policy.Name.ApplyT(func(name string) (string, error) {
				return fmt.Sprintf("accessPolicies/%v", name), nil
			}).(pulumi.StringOutput),
			AccessLevels: accesscontextmanager.AccessLevelsAccessLevelArray{
				&accesscontextmanager.AccessLevelsAccessLevelArgs{
					Name: access_policy.Name.ApplyT(func(name string) (string, error) {
						return fmt.Sprintf("accessPolicies/%v/accessLevels/chromeos_no_lock", name), nil
					}).(pulumi.StringOutput),
					Title: pulumi.String("chromeos_no_lock"),
					Basic: &accesscontextmanager.AccessLevelsAccessLevelBasicArgs{
						Conditions: accesscontextmanager.AccessLevelsAccessLevelBasicConditionArray{
							&accesscontextmanager.AccessLevelsAccessLevelBasicConditionArgs{
								DevicePolicy: &accesscontextmanager.AccessLevelsAccessLevelBasicConditionDevicePolicyArgs{
									RequireScreenLock: pulumi.Bool(true),
									OsConstraints: accesscontextmanager.AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArray{
										&accesscontextmanager.AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs{
											OsType: pulumi.String("DESKTOP_CHROME_OS"),
										},
									},
								},
								Regions: pulumi.StringArray{
									pulumi.String("CH"),
									pulumi.String("IT"),
									pulumi.String("US"),
								},
							},
						},
					},
				},
				&accesscontextmanager.AccessLevelsAccessLevelArgs{
					Name: access_policy.Name.ApplyT(func(name string) (string, error) {
						return fmt.Sprintf("accessPolicies/%v/accessLevels/mac_no_lock", name), nil
					}).(pulumi.StringOutput),
					Title: pulumi.String("mac_no_lock"),
					Basic: &accesscontextmanager.AccessLevelsAccessLevelBasicArgs{
						Conditions: accesscontextmanager.AccessLevelsAccessLevelBasicConditionArray{
							&accesscontextmanager.AccessLevelsAccessLevelBasicConditionArgs{
								DevicePolicy: &accesscontextmanager.AccessLevelsAccessLevelBasicConditionDevicePolicyArgs{
									RequireScreenLock: pulumi.Bool(true),
									OsConstraints: accesscontextmanager.AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArray{
										&accesscontextmanager.AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs{
											OsType: pulumi.String("DESKTOP_MAC"),
										},
									},
								},
								Regions: pulumi.StringArray{
									pulumi.String("CH"),
									pulumi.String("IT"),
									pulumi.String("US"),
								},
							},
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.accesscontextmanager.AccessPolicy;
import com.pulumi.gcp.accesscontextmanager.AccessPolicyArgs;
import com.pulumi.gcp.accesscontextmanager.AccessLevels;
import com.pulumi.gcp.accesscontextmanager.AccessLevelsArgs;
import com.pulumi.gcp.accesscontextmanager.inputs.AccessLevelsAccessLevelArgs;
import com.pulumi.gcp.accesscontextmanager.inputs.AccessLevelsAccessLevelBasicArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var access_policy = new AccessPolicy("access-policy", AccessPolicyArgs.builder()
            .parent("organizations/123456789")
            .title("my policy")
            .build());
        var access_levels = new AccessLevels("access-levels", AccessLevelsArgs.builder()
            .parent(access_policy.name().applyValue(name -> String.format("accessPolicies/%s", name)))
            .accessLevels(
                AccessLevelsAccessLevelArgs.builder()
                    .name(access_policy.name().applyValue(name -> String.format("accessPolicies/%s/accessLevels/chromeos_no_lock", name)))
                    .title("chromeos_no_lock")
                    .basic(AccessLevelsAccessLevelBasicArgs.builder()
                        .conditions(AccessLevelsAccessLevelBasicConditionArgs.builder()
                            .devicePolicy(AccessLevelsAccessLevelBasicConditionDevicePolicyArgs.builder()
                                .requireScreenLock(true)
                                .osConstraints(AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs.builder()
                                    .osType("DESKTOP_CHROME_OS")
                                    .build())
                                .build())
                            .regions(
                                "CH",
                                "IT",
                                "US")
                            .build())
                        .build())
                    .build(),
                AccessLevelsAccessLevelArgs.builder()
                    .name(access_policy.name().applyValue(name -> String.format("accessPolicies/%s/accessLevels/mac_no_lock", name)))
                    .title("mac_no_lock")
                    .basic(AccessLevelsAccessLevelBasicArgs.builder()
                        .conditions(AccessLevelsAccessLevelBasicConditionArgs.builder()
                            .devicePolicy(AccessLevelsAccessLevelBasicConditionDevicePolicyArgs.builder()
                                .requireScreenLock(true)
                                .osConstraints(AccessLevelsAccessLevelBasicConditionDevicePolicyOsConstraintArgs.builder()
                                    .osType("DESKTOP_MAC")
                                    .build())
                                .build())
                            .regions(
                                "CH",
                                "IT",
                                "US")
                            .build())
                        .build())
                    .build())
            .build());
    }
}
Content copied to clipboard
resources:
  access-levels:
    type: gcp:accesscontextmanager:AccessLevels
    properties:
      parent: accessPolicies/${["access-policy"].name}
      accessLevels:
        - name: accessPolicies/${["access-policy"].name}/accessLevels/chromeos_no_lock
          title: chromeos_no_lock
          basic:
            conditions:
              - devicePolicy:
                  requireScreenLock: true
                  osConstraints:
                    - osType: DESKTOP_CHROME_OS
                regions:
                  - CH
                  - IT
                  - US
        - name: accessPolicies/${["access-policy"].name}/accessLevels/mac_no_lock
          title: mac_no_lock
          basic:
            conditions:
              - devicePolicy:
                  requireScreenLock: true
                  osConstraints:
                    - osType: DESKTOP_MAC
                regions:
                  - CH
                  - IT
                  - US
  access-policy:
    type: gcp:accesscontextmanager:AccessPolicy
    properties:
      parent: organizations/123456789
      title: my policy
Content copied to clipboard

Import

AccessLevels can be imported using any of these accepted formats:

  • {{parent}}/accessLevels

  • {{parent}} When using the pulumi import command, AccessLevels can be imported using one of the formats above. For example:

$ pulumi import gcp:accesscontextmanager/accessLevels:AccessLevels default {{parent}}/accessLevels
Content copied to clipboard
$ pulumi import gcp:accesscontextmanager/accessLevels:AccessLevels default {{parent}}
Content copied to clipboard

Constructors

Link copied to clipboard
constructor(accessLevels: Output<List<AccessLevelsAccessLevelArgs>>? = null, parent: Output<String>? = null)

Properties

Link copied to clipboard
val accessLevels: Output<List<AccessLevelsAccessLevelArgs>>? = null

The desired Access Levels that should replace all existing Access Levels in the Access Policy. Structure is documented below.

Link copied to clipboard
val parent: Output<String>? = null

The AccessPolicy this AccessLevel lives in. Format: accessPolicies/{policy_id}

Functions

Link copied to clipboard
open override fun toJava(): AccessLevelsArgs