@pulumi/aws-native/datazone/getPolicyGrant.js

The Pulumi AWS Cloud Control Provider enables you to build, deploy, and manage [any AWS resource that's supported by the AWS Cloud Control API](https://github.com/pulumi/pulumi-aws-native/blob/master/provider/cmd/pulumi-gen-aws-native/supported-types.txt)

"use strict";
// *** WARNING: this file was generated by pulumi-language-nodejs. ***
// *** Do not edit by hand unless you're certain you know what you are doing! ***
Object.defineProperty(exports, "__esModule", { value: true });
exports.getPolicyGrantOutput = exports.getPolicyGrant = void 0;
const pulumi = require("@pulumi/pulumi");
const utilities = require("../utilities");
/**
 * Policy Grant in AWS DataZone is an explicit authorization assignment that allows a specific principal (user, group, or project) to perform particular actions (such as creating glossary terms, managing projects, or accessing resources) on governed resources within a certain scope (like a Domain Unit or Project). Policy Grants are essentially the mechanism by which DataZone enforces fine-grained, role-based access control beyond what is possible through AWS IAM alone.
 */
function getPolicyGrant(args, opts) {
    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
    return pulumi.runtime.invoke("aws-native:datazone:getPolicyGrant", {
        "domainIdentifier": args.domainIdentifier,
        "entityIdentifier": args.entityIdentifier,
        "entityType": args.entityType,
        "grantId": args.grantId,
        "policyType": args.policyType,
    }, opts);
}
exports.getPolicyGrant = getPolicyGrant;
/**
 * Policy Grant in AWS DataZone is an explicit authorization assignment that allows a specific principal (user, group, or project) to perform particular actions (such as creating glossary terms, managing projects, or accessing resources) on governed resources within a certain scope (like a Domain Unit or Project). Policy Grants are essentially the mechanism by which DataZone enforces fine-grained, role-based access control beyond what is possible through AWS IAM alone.
 */
function getPolicyGrantOutput(args, opts) {
    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
    return pulumi.runtime.invokeOutput("aws-native:datazone:getPolicyGrant", {
        "domainIdentifier": args.domainIdentifier,
        "entityIdentifier": args.entityIdentifier,
        "entityType": args.entityType,
        "grantId": args.grantId,
        "policyType": args.policyType,
    }, opts);
}
exports.getPolicyGrantOutput = getPolicyGrantOutput;
//# sourceMappingURL=getPolicyGrant.js.map