@pulumiverse/scaleway
Version:
A Pulumi package for creating and managing Scaleway cloud resources.
157 lines • 6.6 kB
JavaScript
;
// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
// *** Do not edit by hand unless you're certain you know what you are doing! ***
Object.defineProperty(exports, "__esModule", { value: true });
exports.Policy = void 0;
const pulumi = require("@pulumi/pulumi");
const utilities = require("../utilities");
/**
* Creates and manages Scaleway IAM Policies. For more information refer to the [IAM API documentation](https://www.scaleway.com/en/developers/api/iam/#path-policies-create-a-new-policy).
*
* > You can find a detailed list of all permission sets available at Scaleway in the permission sets [reference page](https://www.scaleway.com/en/docs/iam/reference-content/permission-sets/).
*
* ## Example Usage
*
* ### Create a policy for an organization's project
*
* ```typescript
* import * as pulumi from "@pulumi/pulumi";
* import * as scaleway from "@pulumi/scaleway";
* import * as scaleway from "@pulumiverse/scaleway";
*
* const _default = scaleway.account.getProject({
* name: "default",
* });
* const app = new scaleway.iam.Application("app", {name: "my app"});
* const objectReadOnly = new scaleway.iam.Policy("object_read_only", {
* name: "my policy",
* description: "gives app readonly access to object storage in project",
* applicationId: app.id,
* rules: [{
* projectIds: [_default.then(_default => _default.id)],
* permissionSetNames: ["ObjectStorageReadOnly"],
* }],
* });
* ```
*
* ### Create a policy for all current and future projects in an organization
*
* ```typescript
* import * as pulumi from "@pulumi/pulumi";
* import * as scaleway from "@pulumiverse/scaleway";
*
* const app = new scaleway.iam.Application("app", {name: "my app"});
* const objectReadOnly = new scaleway.iam.Policy("object_read_only", {
* name: "my policy",
* description: "gives app readonly access to object storage in project",
* applicationId: app.id,
* rules: [{
* organizationId: app.organizationId,
* permissionSetNames: ["ObjectStorageReadOnly"],
* }],
* });
* ```
*
* ### Create a policy with a particular condition
*
* IAM policy rule can use a condition to be applied.
* The following variables are available:
*
* - `request.ip`
* - `request.user_agent`
* - `request.time`
*
* ```typescript
* import * as pulumi from "@pulumi/pulumi";
* import * as scaleway from "@pulumiverse/scaleway";
*
* const main = new scaleway.iam.Policy("main", {
* name: "tf_tests_policy_condition",
* noPrincipal: true,
* rules: [{
* organizationId: "%s",
* permissionSetNames: ["AllProductsFullAccess"],
* condition: "request.user_agent == 'My User Agent'",
* }],
* });
* ```
*
* ## Import
*
* Policies can be imported using the `{id}`, e.g.
*
* bash
*
* ```sh
* $ pulumi import scaleway:iam/policy:Policy main 11111111-1111-1111-1111-111111111111
* ```
*/
class Policy extends pulumi.CustomResource {
/**
* Get an existing Policy resource's state with the given name, ID, and optional extra
* properties used to qualify the lookup.
*
* @param name The _unique_ name of the resulting resource.
* @param id The _unique_ provider ID of the resource to lookup.
* @param state Any extra arguments used during the lookup.
* @param opts Optional settings to control the behavior of the CustomResource.
*/
static get(name, id, state, opts) {
return new Policy(name, state, Object.assign(Object.assign({}, opts), { id: id }));
}
/**
* Returns true if the given object is an instance of Policy. This is designed to work even
* when multiple copies of the Pulumi SDK have been loaded into the same process.
*/
static isInstance(obj) {
if (obj === undefined || obj === null) {
return false;
}
return obj['__pulumiType'] === Policy.__pulumiType;
}
constructor(name, argsOrState, opts) {
let resourceInputs = {};
opts = opts || {};
if (opts.id) {
const state = argsOrState;
resourceInputs["applicationId"] = state ? state.applicationId : undefined;
resourceInputs["createdAt"] = state ? state.createdAt : undefined;
resourceInputs["description"] = state ? state.description : undefined;
resourceInputs["editable"] = state ? state.editable : undefined;
resourceInputs["groupId"] = state ? state.groupId : undefined;
resourceInputs["name"] = state ? state.name : undefined;
resourceInputs["noPrincipal"] = state ? state.noPrincipal : undefined;
resourceInputs["organizationId"] = state ? state.organizationId : undefined;
resourceInputs["rules"] = state ? state.rules : undefined;
resourceInputs["tags"] = state ? state.tags : undefined;
resourceInputs["updatedAt"] = state ? state.updatedAt : undefined;
resourceInputs["userId"] = state ? state.userId : undefined;
}
else {
const args = argsOrState;
if ((!args || args.rules === undefined) && !opts.urn) {
throw new Error("Missing required property 'rules'");
}
resourceInputs["applicationId"] = args ? args.applicationId : undefined;
resourceInputs["description"] = args ? args.description : undefined;
resourceInputs["groupId"] = args ? args.groupId : undefined;
resourceInputs["name"] = args ? args.name : undefined;
resourceInputs["noPrincipal"] = args ? args.noPrincipal : undefined;
resourceInputs["organizationId"] = args ? args.organizationId : undefined;
resourceInputs["rules"] = args ? args.rules : undefined;
resourceInputs["tags"] = args ? args.tags : undefined;
resourceInputs["userId"] = args ? args.userId : undefined;
resourceInputs["createdAt"] = undefined /*out*/;
resourceInputs["editable"] = undefined /*out*/;
resourceInputs["updatedAt"] = undefined /*out*/;
}
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
const aliasOpts = { aliases: [{ type: "scaleway:index/iamPolicy:IamPolicy" }] };
opts = pulumi.mergeOptions(opts, aliasOpts);
super(Policy.__pulumiType, name, resourceInputs, opts);
}
}
exports.Policy = Policy;
/** @internal */
Policy.__pulumiType = 'scaleway:iam/policy:Policy';
//# sourceMappingURL=policy.js.map