@pulumi/aws-native/datazone/policyGrant.d.ts

The Pulumi AWS Cloud Control Provider enables you to build, deploy, and manage [any AWS resource that's supported by the AWS Cloud Control API](https://github.com/pulumi/pulumi-aws-native/blob/master/provider/cmd/pulumi-gen-aws-native/supported-types.txt)

import * as pulumi from "@pulumi/pulumi";
import * as inputs from "../types/input";
import * as outputs from "../types/output";
import * as enums from "../types/enums";
/**
 * Policy Grant in AWS DataZone is an explicit authorization assignment that allows a specific principal (user, group, or project) to perform particular actions (such as creating glossary terms, managing projects, or accessing resources) on governed resources within a certain scope (like a Domain Unit or Project). Policy Grants are essentially the mechanism by which DataZone enforces fine-grained, role-based access control beyond what is possible through AWS IAM alone.
 */
export declare class PolicyGrant extends pulumi.CustomResource {
    /**
     * Get an existing PolicyGrant resource's state with the given name, ID, and optional extra
     * properties used to qualify the lookup.
     *
     * @param name The _unique_ name of the resulting resource.
     * @param id The _unique_ provider ID of the resource to lookup.
     * @param opts Optional settings to control the behavior of the CustomResource.
     */
    static get(name: string, id: pulumi.Input<pulumi.ID>, opts?: pulumi.CustomResourceOptions): PolicyGrant;
    /**
     * Returns true if the given object is an instance of PolicyGrant.  This is designed to work even
     * when multiple copies of the Pulumi SDK have been loaded into the same process.
     */
    static isInstance(obj: any): obj is PolicyGrant;
    /**
     * Specifies the timestamp at which policy grant member was created.
     */
    readonly createdAt: pulumi.Output<string>;
    /**
     * Specifies the user who created the policy grant member.
     */
    readonly createdBy: pulumi.Output<string>;
    /**
     * The details of the policy grant member.
     */
    readonly detail: pulumi.Output<outputs.datazone.PolicyGrantDetail0Properties | outputs.datazone.PolicyGrantDetail1Properties | outputs.datazone.PolicyGrantDetail2Properties | outputs.datazone.PolicyGrantDetail3Properties | outputs.datazone.PolicyGrantDetail4Properties | outputs.datazone.PolicyGrantDetail5Properties | outputs.datazone.PolicyGrantDetail6Properties | outputs.datazone.PolicyGrantDetail7Properties | outputs.datazone.PolicyGrantDetail8Properties | outputs.datazone.PolicyGrantDetail9Properties | outputs.datazone.PolicyGrantDetail10Properties | outputs.datazone.PolicyGrantDetail11Properties | outputs.datazone.PolicyGrantDetail12Properties | undefined>;
    /**
     * The ID of the domain where you want to add a policy grant.
     */
    readonly domainIdentifier: pulumi.Output<string>;
    /**
     * The ID of the entity (resource) to which you want to add a policy grant.
     */
    readonly entityIdentifier: pulumi.Output<string>;
    /**
     * The type of entity (resource) to which the grant is added.
     */
    readonly entityType: pulumi.Output<enums.datazone.PolicyGrantTargetEntityType>;
    /**
     * The unique identifier of the policy grant returned by the AddPolicyGrant API
     */
    readonly grantId: pulumi.Output<string>;
    /**
     * The type of policy that you want to grant.
     */
    readonly policyType: pulumi.Output<enums.datazone.PolicyGrantManagedPolicyType>;
    /**
     * The principal of the policy grant member.
     */
    readonly principal: pulumi.Output<outputs.datazone.PolicyGrantPrincipal0Properties | outputs.datazone.PolicyGrantPrincipal1Properties | outputs.datazone.PolicyGrantPrincipal2Properties | outputs.datazone.PolicyGrantPrincipal3Properties | undefined>;
    /**
     * Create a PolicyGrant resource with the given unique name, arguments, and options.
     *
     * @param name The _unique_ name of the resource.
     * @param args The arguments to use to populate this resource's properties.
     * @param opts A bag of options that control this resource's behavior.
     */
    constructor(name: string, args: PolicyGrantArgs, opts?: pulumi.CustomResourceOptions);
}
/**
 * The set of arguments for constructing a PolicyGrant resource.
 */
export interface PolicyGrantArgs {
    /**
     * The details of the policy grant member.
     */
    detail?: pulumi.Input<inputs.datazone.PolicyGrantDetail0PropertiesArgs | inputs.datazone.PolicyGrantDetail1PropertiesArgs | inputs.datazone.PolicyGrantDetail2PropertiesArgs | inputs.datazone.PolicyGrantDetail3PropertiesArgs | inputs.datazone.PolicyGrantDetail4PropertiesArgs | inputs.datazone.PolicyGrantDetail5PropertiesArgs | inputs.datazone.PolicyGrantDetail6PropertiesArgs | inputs.datazone.PolicyGrantDetail7PropertiesArgs | inputs.datazone.PolicyGrantDetail8PropertiesArgs | inputs.datazone.PolicyGrantDetail9PropertiesArgs | inputs.datazone.PolicyGrantDetail10PropertiesArgs | inputs.datazone.PolicyGrantDetail11PropertiesArgs | inputs.datazone.PolicyGrantDetail12PropertiesArgs>;
    /**
     * The ID of the domain where you want to add a policy grant.
     */
    domainIdentifier: pulumi.Input<string>;
    /**
     * The ID of the entity (resource) to which you want to add a policy grant.
     */
    entityIdentifier: pulumi.Input<string>;
    /**
     * The type of entity (resource) to which the grant is added.
     */
    entityType: pulumi.Input<enums.datazone.PolicyGrantTargetEntityType>;
    /**
     * The type of policy that you want to grant.
     */
    policyType: pulumi.Input<enums.datazone.PolicyGrantManagedPolicyType>;
    /**
     * The principal of the policy grant member.
     */
    principal?: pulumi.Input<inputs.datazone.PolicyGrantPrincipal0PropertiesArgs | inputs.datazone.PolicyGrantPrincipal1PropertiesArgs | inputs.datazone.PolicyGrantPrincipal2PropertiesArgs | inputs.datazone.PolicyGrantPrincipal3PropertiesArgs>;
}