pulumi-gcp-kotlin/com.pulumi.gcp.folder.kotlin/IAMBindingArgs

IAMBindingArgs

data class IAMBindingArgs(val condition: Output<IAMBindingConditionArgs>? = null, val folder: Output<String>? = null, val members: Output<List<String>>? = null, val role: Output<String>? = null) : ConvertibleToJava<IAMBindingArgs>

Allows creation and management of a single binding within IAM policy for an existing Google Cloud Platform folder.

Note: This resource must not be used in conjunction with gcp.folder.IAMPolicy or they will fight over what your policy should be. Note: On create, this resource will overwrite members of any existing roles. Use pulumi import and inspect the output to ensure your existing members are preserved.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const department1 = new gcp.organizations.Folder("department1", {
    displayName: "Department 1",
    parent: "organizations/1234567",
});
const admin = new gcp.folder.IAMBinding("admin", {
    folder: department1.name,
    role: "roles/editor",
    members: ["user:alice@gmail&#46;com"],
});

import pulumi
import pulumi_gcp as gcp
department1 = gcp.organizations.Folder("department1",
    display_name="Department 1",
    parent="organizations/1234567")
admin = gcp.folder.IAMBinding("admin",
    folder=department1.name,
    role="roles/editor",
    members=["user:alice@gmail&#46;com"])

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() =>
{
    var department1 = new Gcp.Organizations.Folder("department1", new()
    {
        DisplayName = "Department 1",
        Parent = "organizations/1234567",
    });
    var admin = new Gcp.Folder.IAMBinding("admin", new()
    {
        Folder = department1.Name,
        Role = "roles/editor",
        Members = new[]
        {
            "user:alice@gmail.com",
        },
    });
});

package main
import (
	"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/folder"
	"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/organizations"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		department1, err := organizations.NewFolder(ctx, "department1", &organizations.FolderArgs{
			DisplayName: pulumi.String("Department 1"),
			Parent:      pulumi.String("organizations/1234567"),
		})
		if err != nil {
			return err
		}
		_, err = folder.NewIAMBinding(ctx, "admin", &folder.IAMBindingArgs{
			Folder: department1.Name,
			Role:   pulumi.String("roles/editor"),
			Members: pulumi.StringArray{
				pulumi.String("user:alice@gmail.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.organizations.Folder;
import com.pulumi.gcp.organizations.FolderArgs;
import com.pulumi.gcp.folder.IAMBinding;
import com.pulumi.gcp.folder.IAMBindingArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var department1 = new Folder("department1", FolderArgs.builder()
            .displayName("Department 1")
            .parent("organizations/1234567")
            .build());
        var admin = new IAMBinding("admin", IAMBindingArgs.builder()
            .folder(department1.name())
            .role("roles/editor")
            .members("user:alice@gmail.com")
            .build());
    }
}

resources:
  department1:
    type: gcp:organizations:Folder
    properties:
      displayName: Department 1
      parent: organizations/1234567
  admin:
    type: gcp:folder:IAMBinding
    properties:
      folder: ${department1.name}
      role: roles/editor
      members:
        - user:alice@gmail.com

Import

IAM binding imports use space-delimited identifiers; first the resource in question and then the role. These bindings can be imported using the folder and role, e.g.

$ pulumi import gcp:folder/iAMBinding:IAMBinding viewer "folder-name roles/viewer"

->Custom Roles: If you're importing a IAM binding with a custom role, make sure to use the full name of the custom role, e.g. [projects/my-project|organizations/my-org]/roles/my-custom-role.

Constructors

IAMBindingArgs

constructor(condition: Output<IAMBindingConditionArgs>? = null, folder: Output<String>? = null, members: Output<List<String>>? = null, role: Output<String>? = null)

Properties

condition

val condition: Output<IAMBindingConditionArgs>? = null

folder

val folder: Output<String>? = null

The resource name of the folder the policy is attached to. Its format is folders/{folder_id}.

members

val members: Output<List<String>>? = null

An array of identities that will be granted the privilege in the role. Each entry can have one of the following values:

role

val role: Output<String>? = null

The role that should be applied. Only one gcp.folder.IAMBinding can be used per role. Note that custom roles must be of the format [projects|organizations]/{parent-name}/roles/{role-name}.

Functions

toJava

open override fun toJava(): IAMBindingArgs