@pulumiverse/dynatrace
Version:
A Pulumi package for creating and managing Dynatrace cloud resources.
89 lines • 4.21 kB
JavaScript
;
// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
// *** Do not edit by hand unless you're certain you know what you are doing! ***
Object.defineProperty(exports, "__esModule", { value: true });
exports.IamPolicyBoundary = void 0;
const pulumi = require("@pulumi/pulumi");
const utilities = require("./utilities");
/**
* > **Dynatrace SaaS only**
*
* > To utilize this resource, please define the environment variables `DT_CLIENT_ID`, `DT_CLIENT_SECRET`, `DT_ACCOUNT_ID` with an OAuth client including the following permissions: **Allow IAM policy configuration for environments** (`iam-policies-management`) and **View environments** (`account-env-read`).
*
* > This resource is excluded by default in the export utility, please explicitly specify the resource to retrieve existing configuration.
*
* ## Dynatrace Documentation
*
* - Dynatrace IAM Group Permissions - https://docs.dynatrace.com/docs/manage/identity-access-management/permission-management/manage-user-permissions-policies
*
* - Settings API - https://www.dynatrace.com/support/help/how-to-use-dynatrace/user-management-and-sso/manage-groups-and-permissions/iam/iam-getting-started
*
* ## Resource Example Usage
*
* ```typescript
* import * as pulumi from "@pulumi/pulumi";
* import * as dynatrace from "@pulumiverse/dynatrace";
*
* const thisIamPolicyBoundary = new dynatrace.IamPolicyBoundary("thisIamPolicyBoundary", {query: "environment:management-zone startsWith \"[Foo]\";"});
* const thisIamGroup = new dynatrace.IamGroup("thisIamGroup", {});
* const thisIamPolicy = new dynatrace.IamPolicy("thisIamPolicy", {
* account: "########-####-####-####-############",
* statementQuery: "ALLOW settings:objects:read, settings:schemas:read WHERE settings:schemaId = \"#########\";",
* });
* const thisIamPolicyBindingsV2 = new dynatrace.IamPolicyBindingsV2("thisIamPolicyBindingsV2", {
* environment: "########",
* group: thisIamGroup.id,
* policies: [{
* id: thisIamPolicy.id,
* boundaries: [thisIamPolicyBoundary.id],
* }],
* });
* ```
*/
class IamPolicyBoundary extends pulumi.CustomResource {
/**
* Get an existing IamPolicyBoundary resource's state with the given name, ID, and optional extra
* properties used to qualify the lookup.
*
* @param name The _unique_ name of the resulting resource.
* @param id The _unique_ provider ID of the resource to lookup.
* @param state Any extra arguments used during the lookup.
* @param opts Optional settings to control the behavior of the CustomResource.
*/
static get(name, id, state, opts) {
return new IamPolicyBoundary(name, state, Object.assign(Object.assign({}, opts), { id: id }));
}
/**
* Returns true if the given object is an instance of IamPolicyBoundary. This is designed to work even
* when multiple copies of the Pulumi SDK have been loaded into the same process.
*/
static isInstance(obj) {
if (obj === undefined || obj === null) {
return false;
}
return obj['__pulumiType'] === IamPolicyBoundary.__pulumiType;
}
constructor(name, argsOrState, opts) {
let resourceInputs = {};
opts = opts || {};
if (opts.id) {
const state = argsOrState;
resourceInputs["name"] = state ? state.name : undefined;
resourceInputs["query"] = state ? state.query : undefined;
}
else {
const args = argsOrState;
if ((!args || args.query === undefined) && !opts.urn) {
throw new Error("Missing required property 'query'");
}
resourceInputs["name"] = args ? args.name : undefined;
resourceInputs["query"] = args ? args.query : undefined;
}
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
super(IamPolicyBoundary.__pulumiType, name, resourceInputs, opts);
}
}
exports.IamPolicyBoundary = IamPolicyBoundary;
/** @internal */
IamPolicyBoundary.__pulumiType = 'dynatrace:index/iamPolicyBoundary:IamPolicyBoundary';
//# sourceMappingURL=iamPolicyBoundary.js.map