@volcengine/pulumi
Version:
A Pulumi package for creating and managing volcengine cloud resources.
136 lines (135 loc) • 6.07 kB
TypeScript
import * as pulumi from "@pulumi/pulumi";
/**
* Provides a resource to manage cloud identity permission set provisioning
* ## Example Usage
*
* ```typescript
* import * as pulumi from "@pulumi/pulumi";
* import * as volcengine from "@volcengine/pulumi";
*
* const fooPermissionSet = new volcengine.cloud_identity.PermissionSet("fooPermissionSet", {
* description: "tf",
* sessionDuration: 5000,
* permissionPolicies: [
* {
* permissionPolicyType: "System",
* permissionPolicyName: "AdministratorAccess",
* inlinePolicyDocument: "",
* },
* {
* permissionPolicyType: "System",
* permissionPolicyName: "ReadOnlyAccess",
* inlinePolicyDocument: "",
* },
* {
* permissionPolicyType: "Inline",
* inlinePolicyDocument: "{\"Statement\":[{\"Effect\":\"Allow\",\"Action\":[\"auto_scaling:DescribeScalingGroups\"],\"Resource\":[\"*\"]}]}",
* },
* ],
* });
* const fooUser = new volcengine.cloud_identity.User("fooUser", {
* userName: "acc-test-user",
* displayName: "tf-test-user",
* description: "tf",
* email: "88@qq.com",
* phone: "181",
* });
* const fooPermissionSetAssignment = new volcengine.cloud_identity.PermissionSetAssignment("fooPermissionSetAssignment", {
* permissionSetId: fooPermissionSet.id,
* targetId: "210005****",
* principalType: "User",
* principalId: fooUser.id,
* deprovisionStrategy: "None",
* });
* // It is not recommended to use this resource to provision the permission_set.
* // When the `volcengine_cloud_identity_permission_set` is updated, you can use this resource to provision the permission set.
* // When deleting this resource, resource `volcengine_cloud_identity_permission_set_assignment` must be deleted first, and the `deprovision_strategy` of `volcengine_cloud_identity_permission_set_assignment` should be set as `None`.
* const fooPermissionSetProvisioning = new volcengine.cloud_identity.PermissionSetProvisioning("fooPermissionSetProvisioning", {
* permissionSetId: fooPermissionSet.id,
* targetId: "210005****",
* provisioningStatus: "Provisioned",
* });
* ```
*
* ## Import
*
* CloudIdentityPermissionSetProvisioning can be imported using the permission_set_id:target_id, e.g.
*
* ```sh
* $ pulumi import volcengine:cloud_identity/permissionSetProvisioning:PermissionSetProvisioning default resource_id
* ```
*/
export declare class PermissionSetProvisioning extends pulumi.CustomResource {
/**
* Get an existing PermissionSetProvisioning resource's state with the given name, ID, and optional extra
* properties used to qualify the lookup.
*
* @param name The _unique_ name of the resulting resource.
* @param id The _unique_ provider ID of the resource to lookup.
* @param state Any extra arguments used during the lookup.
* @param opts Optional settings to control the behavior of the CustomResource.
*/
static get(name: string, id: pulumi.Input<pulumi.ID>, state?: PermissionSetProvisioningState, opts?: pulumi.CustomResourceOptions): PermissionSetProvisioning;
/**
* Returns true if the given object is an instance of PermissionSetProvisioning. This is designed to work even
* when multiple copies of the Pulumi SDK have been loaded into the same process.
*/
static isInstance(obj: any): obj is PermissionSetProvisioning;
/**
* The id of the cloud identity permission set.
*/
readonly permissionSetId: pulumi.Output<string>;
/**
* The target provisioning status of the cloud identity permission set. This field must be specified as `Provisioned` in order to provision the updated permission set.
* When deleting this resource, resource `volcengine.cloud_identity.PermissionSetAssignment` must be deleted first.
*/
readonly provisioningStatus: pulumi.Output<string>;
/**
* The target account id of the cloud identity permission set provisioning.
*/
readonly targetId: pulumi.Output<string>;
/**
* Create a PermissionSetProvisioning resource with the given unique name, arguments, and options.
*
* @param name The _unique_ name of the resource.
* @param args The arguments to use to populate this resource's properties.
* @param opts A bag of options that control this resource's behavior.
*/
constructor(name: string, args: PermissionSetProvisioningArgs, opts?: pulumi.CustomResourceOptions);
}
/**
* Input properties used for looking up and filtering PermissionSetProvisioning resources.
*/
export interface PermissionSetProvisioningState {
/**
* The id of the cloud identity permission set.
*/
permissionSetId?: pulumi.Input<string>;
/**
* The target provisioning status of the cloud identity permission set. This field must be specified as `Provisioned` in order to provision the updated permission set.
* When deleting this resource, resource `volcengine.cloud_identity.PermissionSetAssignment` must be deleted first.
*/
provisioningStatus?: pulumi.Input<string>;
/**
* The target account id of the cloud identity permission set provisioning.
*/
targetId?: pulumi.Input<string>;
}
/**
* The set of arguments for constructing a PermissionSetProvisioning resource.
*/
export interface PermissionSetProvisioningArgs {
/**
* The id of the cloud identity permission set.
*/
permissionSetId: pulumi.Input<string>;
/**
* The target provisioning status of the cloud identity permission set. This field must be specified as `Provisioned` in order to provision the updated permission set.
* When deleting this resource, resource `volcengine.cloud_identity.PermissionSetAssignment` must be deleted first.
*/
provisioningStatus: pulumi.Input<string>;
/**
* The target account id of the cloud identity permission set provisioning.
*/
targetId: pulumi.Input<string>;
}