DicomStoreIamBindingArgs

data class DicomStoreIamBindingArgs(val condition: Output<DicomStoreIamBindingConditionArgs>? = null, val dicomStoreId: Output<String>? = null, val members: Output<List<String>>? = null, val role: Output<String>? = null) : ConvertibleToJava<DicomStoreIamBindingArgs>

Three different resources help you manage your IAM policy for Healthcare DICOM store. Each of these resources serves a different use case:

  • gcp.healthcare.DicomStoreIamPolicy: Authoritative. Sets the IAM policy for the DICOM store and replaces any existing policy already attached.

  • gcp.healthcare.DicomStoreIamBinding: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the DICOM store are preserved.

  • gcp.healthcare.DicomStoreIamMember: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the DICOM store are preserved.

Note: gcp.healthcare.DicomStoreIamPolicy cannot be used in conjunction with gcp.healthcare.DicomStoreIamBinding and gcp.healthcare.DicomStoreIamMember or they will fight over what your policy should be. Note: gcp.healthcare.DicomStoreIamBinding resources can be used in conjunction with gcp.healthcare.DicomStoreIamMember resources only if they do not grant privilege to the same role.

gcp.healthcare.DicomStoreIamPolicy

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const admin = gcp.organizations.getIAMPolicy({
bindings: [{
role: "roles/editor",
members: ["user:jane@example&#46;com"],
}],
});
const dicomStore = new gcp.healthcare.DicomStoreIamPolicy("dicom_store", {
dicomStoreId: "your-dicom-store-id",
policyData: admin.then(admin => admin.policyData),
});
import pulumi
import pulumi_gcp as gcp
admin = gcp.organizations.get_iam_policy(bindings=[{
"role": "roles/editor",
"members": ["user:jane@example&#46;com"],
}])
dicom_store = gcp.healthcare.DicomStoreIamPolicy("dicom_store",
dicom_store_id="your-dicom-store-id",
policy_data=admin.policy_data)
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() =>
{
var admin = Gcp.Organizations.GetIAMPolicy.Invoke(new()
{
Bindings = new[]
{
new Gcp.Organizations.Inputs.GetIAMPolicyBindingInputArgs
{
Role = "roles/editor",
Members = new[]
{
"user:jane@example.com",
},
},
},
});
var dicomStore = new Gcp.Healthcare.DicomStoreIamPolicy("dicom_store", new()
{
DicomStoreId = "your-dicom-store-id",
PolicyData = admin.Apply(getIAMPolicyResult => getIAMPolicyResult.PolicyData),
});
});
package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/healthcare"
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
Bindings: []organizations.GetIAMPolicyBinding{
{
Role: "roles/editor",
Members: []string{
"user:jane@example.com",
},
},
},
}, nil)
if err != nil {
return err
}
_, err = healthcare.NewDicomStoreIamPolicy(ctx, "dicom_store", &healthcare.DicomStoreIamPolicyArgs{
DicomStoreId: pulumi.String("your-dicom-store-id"),
PolicyData: pulumi.String(admin.PolicyData),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.organizations.OrganizationsFunctions;
import com.pulumi.gcp.organizations.inputs.GetIAMPolicyArgs;
import com.pulumi.gcp.healthcare.DicomStoreIamPolicy;
import com.pulumi.gcp.healthcare.DicomStoreIamPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var admin = OrganizationsFunctions.getIAMPolicy(GetIAMPolicyArgs.builder()
.bindings(GetIAMPolicyBindingArgs.builder()
.role("roles/editor")
.members("user:jane@example.com")
.build())
.build());
var dicomStore = new DicomStoreIamPolicy("dicomStore", DicomStoreIamPolicyArgs.builder()
.dicomStoreId("your-dicom-store-id")
.policyData(admin.applyValue(getIAMPolicyResult -> getIAMPolicyResult.policyData()))
.build());
}
}
resources:
dicomStore:
type: gcp:healthcare:DicomStoreIamPolicy
name: dicom_store
properties:
dicomStoreId: your-dicom-store-id
policyData: ${admin.policyData}
variables:
admin:
fn::invoke:
Function: gcp:organizations:getIAMPolicy
Arguments:
bindings:
- role: roles/editor
members:
- user:jane@example.com

gcp.healthcare.DicomStoreIamBinding

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const dicomStore = new gcp.healthcare.DicomStoreIamBinding("dicom_store", {
dicomStoreId: "your-dicom-store-id",
role: "roles/editor",
members: ["user:jane@example&#46;com"],
});
import pulumi
import pulumi_gcp as gcp
dicom_store = gcp.healthcare.DicomStoreIamBinding("dicom_store",
dicom_store_id="your-dicom-store-id",
role="roles/editor",
members=["user:jane@example&#46;com"])
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() =>
{
var dicomStore = new Gcp.Healthcare.DicomStoreIamBinding("dicom_store", new()
{
DicomStoreId = "your-dicom-store-id",
Role = "roles/editor",
Members = new[]
{
"user:jane@example.com",
},
});
});
package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/healthcare"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := healthcare.NewDicomStoreIamBinding(ctx, "dicom_store", &healthcare.DicomStoreIamBindingArgs{
DicomStoreId: pulumi.String("your-dicom-store-id"),
Role: pulumi.String("roles/editor"),
Members: pulumi.StringArray{
pulumi.String("user:jane@example.com"),
},
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.healthcare.DicomStoreIamBinding;
import com.pulumi.gcp.healthcare.DicomStoreIamBindingArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var dicomStore = new DicomStoreIamBinding("dicomStore", DicomStoreIamBindingArgs.builder()
.dicomStoreId("your-dicom-store-id")
.role("roles/editor")
.members("user:jane@example.com")
.build());
}
}
resources:
dicomStore:
type: gcp:healthcare:DicomStoreIamBinding
name: dicom_store
properties:
dicomStoreId: your-dicom-store-id
role: roles/editor
members:
- user:jane@example.com

gcp.healthcare.DicomStoreIamMember

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const dicomStore = new gcp.healthcare.DicomStoreIamMember("dicom_store", {
dicomStoreId: "your-dicom-store-id",
role: "roles/editor",
member: "user:jane@example.com",
});
import pulumi
import pulumi_gcp as gcp
dicom_store = gcp.healthcare.DicomStoreIamMember("dicom_store",
dicom_store_id="your-dicom-store-id",
role="roles/editor",
member="user:jane@example.com")
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() =>
{
var dicomStore = new Gcp.Healthcare.DicomStoreIamMember("dicom_store", new()
{
DicomStoreId = "your-dicom-store-id",
Role = "roles/editor",
Member = "user:jane@example.com",
});
});
package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/healthcare"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := healthcare.NewDicomStoreIamMember(ctx, "dicom_store", &healthcare.DicomStoreIamMemberArgs{
DicomStoreId: pulumi.String("your-dicom-store-id"),
Role: pulumi.String("roles/editor"),
Member: pulumi.String("user:jane@example.com"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.healthcare.DicomStoreIamMember;
import com.pulumi.gcp.healthcare.DicomStoreIamMemberArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var dicomStore = new DicomStoreIamMember("dicomStore", DicomStoreIamMemberArgs.builder()
.dicomStoreId("your-dicom-store-id")
.role("roles/editor")
.member("user:jane@example.com")
.build());
}
}
resources:
dicomStore:
type: gcp:healthcare:DicomStoreIamMember
name: dicom_store
properties:
dicomStoreId: your-dicom-store-id
role: roles/editor
member: user:jane@example.com

gcp.healthcare.DicomStoreIamBinding

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const dicomStore = new gcp.healthcare.DicomStoreIamBinding("dicom_store", {
dicomStoreId: "your-dicom-store-id",
role: "roles/editor",
members: ["user:jane@example&#46;com"],
});
import pulumi
import pulumi_gcp as gcp
dicom_store = gcp.healthcare.DicomStoreIamBinding("dicom_store",
dicom_store_id="your-dicom-store-id",
role="roles/editor",
members=["user:jane@example&#46;com"])
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() =>
{
var dicomStore = new Gcp.Healthcare.DicomStoreIamBinding("dicom_store", new()
{
DicomStoreId = "your-dicom-store-id",
Role = "roles/editor",
Members = new[]
{
"user:jane@example.com",
},
});
});
package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/healthcare"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := healthcare.NewDicomStoreIamBinding(ctx, "dicom_store", &healthcare.DicomStoreIamBindingArgs{
DicomStoreId: pulumi.String("your-dicom-store-id"),
Role: pulumi.String("roles/editor"),
Members: pulumi.StringArray{
pulumi.String("user:jane@example.com"),
},
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.healthcare.DicomStoreIamBinding;
import com.pulumi.gcp.healthcare.DicomStoreIamBindingArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var dicomStore = new DicomStoreIamBinding("dicomStore", DicomStoreIamBindingArgs.builder()
.dicomStoreId("your-dicom-store-id")
.role("roles/editor")
.members("user:jane@example.com")
.build());
}
}
resources:
dicomStore:
type: gcp:healthcare:DicomStoreIamBinding
name: dicom_store
properties:
dicomStoreId: your-dicom-store-id
role: roles/editor
members:
- user:jane@example.com

gcp.healthcare.DicomStoreIamMember

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const dicomStore = new gcp.healthcare.DicomStoreIamMember("dicom_store", {
dicomStoreId: "your-dicom-store-id",
role: "roles/editor",
member: "user:jane@example.com",
});
import pulumi
import pulumi_gcp as gcp
dicom_store = gcp.healthcare.DicomStoreIamMember("dicom_store",
dicom_store_id="your-dicom-store-id",
role="roles/editor",
member="user:jane@example.com")
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() =>
{
var dicomStore = new Gcp.Healthcare.DicomStoreIamMember("dicom_store", new()
{
DicomStoreId = "your-dicom-store-id",
Role = "roles/editor",
Member = "user:jane@example.com",
});
});
package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/healthcare"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := healthcare.NewDicomStoreIamMember(ctx, "dicom_store", &healthcare.DicomStoreIamMemberArgs{
DicomStoreId: pulumi.String("your-dicom-store-id"),
Role: pulumi.String("roles/editor"),
Member: pulumi.String("user:jane@example.com"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.healthcare.DicomStoreIamMember;
import com.pulumi.gcp.healthcare.DicomStoreIamMemberArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var dicomStore = new DicomStoreIamMember("dicomStore", DicomStoreIamMemberArgs.builder()
.dicomStoreId("your-dicom-store-id")
.role("roles/editor")
.member("user:jane@example.com")
.build());
}
}
resources:
dicomStore:
type: gcp:healthcare:DicomStoreIamMember
name: dicom_store
properties:
dicomStoreId: your-dicom-store-id
role: roles/editor
member: user:jane@example.com

Import

Importing IAM policies

IAM policy imports use the identifier of the Healthcare DICOM store resource. For example:

  • "{{project_id}}/{{location}}/{{dataset}}/{{dicom_store}}" An import block (Terraform v1.5.0 and later) can be used to import IAM policies: tf import { id = "{{project_id}}/{{location}}/{{dataset}}/{{dicom_store}}" to = google_healthcare_dicom_store_iam_policy.default } The pulumi import command can also be used:

$ pulumi import gcp:healthcare/dicomStoreIamBinding:DicomStoreIamBinding default {{project_id}}/{{location}}/{{dataset}}/{{dicom_store}}

Constructors

Link copied to clipboard
constructor(condition: Output<DicomStoreIamBindingConditionArgs>? = null, dicomStoreId: Output<String>? = null, members: Output<List<String>>? = null, role: Output<String>? = null)

Properties

Link copied to clipboard
Link copied to clipboard
val dicomStoreId: Output<String>? = null

The DICOM store ID, in the form {project_id}/{location_name}/{dataset_name}/{dicom_store_name} or {location_name}/{dataset_name}/{dicom_store_name}. In the second form, the provider's project setting will be used as a fallback.

Link copied to clipboard
val members: Output<List<String>>? = null

Identities that will be granted the privilege in role. Each entry can have one of the following values:

Link copied to clipboard
val role: Output<String>? = null

The role that should be applied. Only one gcp.healthcare.DicomStoreIamBinding can be used per role. Note that custom roles must be of the format [projects|organizations]/{parent-name}/roles/{role-name}.

Functions

Link copied to clipboard
open override fun toJava(): DicomStoreIamBindingArgs