pulumi-vault-kotlin/com.pulumi.vault.aws.kotlin/AuthBackendConfigIdentityArgs

AuthBackendConfigIdentityArgs

data class AuthBackendConfigIdentityArgs(val backend: Output<String>? = null, val ec2Alias: Output<String>? = null, val ec2Metadatas: Output<List<String>>? = null, val iamAlias: Output<String>? = null, val iamMetadatas: Output<List<String>>? = null, val namespace: Output<String>? = null) : ConvertibleToJava<AuthBackendConfigIdentityArgs>

Manages an AWS auth backend identity configuration in a Vault server. This configuration defines how Vault interacts with the identity store. See the Vault documentation for more information.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as vault from "@pulumi/vault";
const aws = new vault.AuthBackend("aws", {type: "aws"});
const example = new vault.aws.AuthBackendConfigIdentity("example", {
    backend: aws.path,
    iamAlias: "full_arn",
    iamMetadatas: [
        "canonical_arn",
        "account_id",
    ],
});

import pulumi
import pulumi_vault as vault
aws = vault.AuthBackend("aws", type="aws")
example = vault.aws.AuthBackendConfigIdentity("example",
    backend=aws.path,
    iam_alias="full_arn",
    iam_metadatas=[
        "canonical_arn",
        "account_id",
    ])

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Vault = Pulumi.Vault;
return await Deployment.RunAsync(() =>
{
    var aws = new Vault.AuthBackend("aws", new()
    {
        Type = "aws",
    });
    var example = new Vault.Aws.AuthBackendConfigIdentity("example", new()
    {
        Backend = aws.Path,
        IamAlias = "full_arn",
        IamMetadatas = new[]
        {
            "canonical_arn",
            "account_id",
        },
    });
});

package main
import (
	"github.com/pulumi/pulumi-vault/sdk/v6/go/vault"
	"github.com/pulumi/pulumi-vault/sdk/v6/go/vault/aws"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		aws, err := vault.NewAuthBackend(ctx, "aws", &vault.AuthBackendArgs{
			Type: pulumi.String("aws"),
		})
		if err != nil {
			return err
		}
		_, err = aws.NewAuthBackendConfigIdentity(ctx, "example", &aws.AuthBackendConfigIdentityArgs{
			Backend:  aws.Path,
			IamAlias: pulumi.String("full_arn"),
			IamMetadatas: pulumi.StringArray{
				pulumi.String("canonical_arn"),
				pulumi.String("account_id"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.vault.AuthBackend;
import com.pulumi.vault.AuthBackendArgs;
import com.pulumi.vault.aws.AuthBackendConfigIdentity;
import com.pulumi.vault.aws.AuthBackendConfigIdentityArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var aws = new AuthBackend("aws", AuthBackendArgs.builder()
            .type("aws")
            .build());
        var example = new AuthBackendConfigIdentity("example", AuthBackendConfigIdentityArgs.builder()
            .backend(aws.path())
            .iamAlias("full_arn")
            .iamMetadatas(
                "canonical_arn",
                "account_id")
            .build());
    }
}

resources:
  aws:
    type: vault:AuthBackend
    properties:
      type: aws
  example:
    type: vault:aws:AuthBackendConfigIdentity
    properties:
      backend: ${aws.path}
      iamAlias: full_arn
      iamMetadatas:
        - canonical_arn
        - account_id

Import

AWS auth backend identity config can be imported using auth/, the backend path, and /config/identity e.g.

$ pulumi import vault:aws/authBackendConfigIdentity:AuthBackendConfigIdentity example auth/aws/config/identity

Constructors

AuthBackendConfigIdentityArgs

constructor(backend: Output<String>? = null, ec2Alias: Output<String>? = null, ec2Metadatas: Output<List<String>>? = null, iamAlias: Output<String>? = null, iamMetadatas: Output<List<String>>? = null, namespace: Output<String>? = null)

Properties

backend

val backend: Output<String>? = null

Unique name of the auth backend to configure.

ec2Alias

val ec2Alias: Output<String>? = null

How to generate the identity alias when using the ec2 auth method. Valid choices are role_id, instance_id, and image_id. Defaults to role_id

ec2Metadatas

val ec2Metadatas: Output<List<String>>? = null

The metadata to include on the token returned by the login endpoint. This metadata will be added to both audit logs, and on the ec2_alias

iamAlias

val iamAlias: Output<String>? = null

How to generate the identity alias when using the iam auth method. Valid choices are role_id, unique_id, and full_arn. Defaults to role_id

iamMetadatas

val iamMetadatas: Output<List<String>>? = null

The metadata to include on the token returned by the login endpoint. This metadata will be added to both audit logs, and on the iam_alias

namespace

val namespace: Output<String>? = null

The namespace to provision the resource in. The value should not contain leading or trailing forward slashes. The namespace is always relative to the provider's configured namespace. Available only for Vault Enterprise.

Functions

toJava

open override fun toJava(): AuthBackendConfigIdentityArgs