pulumi-vault-kotlin/com.pulumi.vault.aws.kotlin/AuthBackendRoleTagArgs

AuthBackendRoleTagArgs

data class AuthBackendRoleTagArgs(val allowInstanceMigration: Output<Boolean>? = null, val backend: Output<String>? = null, val disallowReauthentication: Output<Boolean>? = null, val instanceId: Output<String>? = null, val maxTtl: Output<String>? = null, val namespace: Output<String>? = null, val policies: Output<List<String>>? = null, val role: Output<String>? = null) : ConvertibleToJava<AuthBackendRoleTagArgs>

Reads role tag information from an AWS auth backend in Vault.

Example Usage

resources:
  aws:
    type: vault:AuthBackend
    properties:
      path: '%s'
      type: aws
  role:
    type: vault:aws:AuthBackendRole
    properties:
      backend: ${aws.path}
      role: '%s'
      authType: ec2
      boundAccountId: '123456789012'
      policies:
        - dev
        - prod
        - qa
        - test
      roleTag: VaultRoleTag
  test:
    type: vault:aws:AuthBackendRoleTag
    properties:
      backend: ${aws.path}
      role: ${role.role}
      policies:
        - prod
        - dev
        - test
      maxTtl: 1h
      instanceId: i-1234567

Constructors

AuthBackendRoleTagArgs

constructor(allowInstanceMigration: Output<Boolean>? = null, backend: Output<String>? = null, disallowReauthentication: Output<Boolean>? = null, instanceId: Output<String>? = null, maxTtl: Output<String>? = null, namespace: Output<String>? = null, policies: Output<List<String>>? = null, role: Output<String>? = null)

Properties

allowInstanceMigration

val allowInstanceMigration: Output<Boolean>? = null

If set, allows migration of the underlying instances where the client resides. Use with caution.

backend

val backend: Output<String>? = null

The path to the AWS auth backend to read role tags from, with no leading or trailing /s. Defaults to "aws".

disallowReauthentication

val disallowReauthentication: Output<Boolean>? = null

If set, only allows a single token to be granted per instance ID.

instanceId

val instanceId: Output<String>? = null

Instance ID for which this tag is intended for. If set, the created tag can only be used by the instance with the given ID.

maxTtl

val maxTtl: Output<String>? = null

The maximum TTL of the tokens issued using this role.

namespace

val namespace: Output<String>? = null

The namespace to provision the resource in. The value should not contain leading or trailing forward slashes. The namespace is always relative to the provider's configured namespace. Available only for Vault Enterprise.

policies

val policies: Output<List<String>>? = null

The policies to be associated with the tag. Must be a subset of the policies associated with the role.

role

val role: Output<String>? = null

The name of the AWS auth backend role to read role tags from, with no leading or trailing /s.

Functions

toJava

open override fun toJava(): AuthBackendRoleTagArgs