Package com.pulumi.gcp.endpoints
Class ConsumersIamPolicy
- java.lang.Object
-
- com.pulumi.resources.Resource
-
- com.pulumi.resources.CustomResource
-
- com.pulumi.gcp.endpoints.ConsumersIamPolicy
-
public class ConsumersIamPolicy extends com.pulumi.resources.CustomResource
Three different resources help you manage your IAM policy for Cloud Endpoints ServiceConsumers. Each of these resources serves a different use case: * `gcp.endpoints.ConsumersIamPolicy`: Authoritative. Sets the IAM policy for the serviceconsumers and replaces any existing policy already attached. * `gcp.endpoints.ConsumersIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the serviceconsumers are preserved. * `gcp.endpoints.ConsumersIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the serviceconsumers are preserved. A data source can be used to retrieve policy data in advent you do not need creation * `gcp.endpoints.ConsumersIamPolicy`: Retrieves the IAM policy for the serviceconsumers > **Note:** `gcp.endpoints.ConsumersIamPolicy` **cannot** be used in conjunction with `gcp.endpoints.ConsumersIamBinding` and `gcp.endpoints.ConsumersIamMember` or they will fight over what your policy should be. > **Note:** `gcp.endpoints.ConsumersIamBinding` resources **can be** used in conjunction with `gcp.endpoints.ConsumersIamMember` resources **only if** they do not grant privilege to the same role. ## Import For all import syntaxes, the "resource in question" can take any of the following forms* services/{{service_name}}/consumers/{{consumer_project}} * {{service_name}}/{{consumer_project}} * {{consumer_project}} Any variables not passed in the import command will be taken from the provider configuration. Cloud Endpoints serviceconsumers IAM resources can be imported using the resource identifiers, role, and member. IAM member imports use space-delimited identifiersthe resource in question, the role, and the member identity, e.g. ```sh $ pulumi import gcp:endpoints/consumersIamPolicy:ConsumersIamPolicy editor "services/{{service_name}}/consumers/{{consumer_project}} roles/servicemanagement.serviceController user:[email protected]" ``` IAM binding imports use space-delimited identifiersthe resource in question and the role, e.g. ```sh $ pulumi import gcp:endpoints/consumersIamPolicy:ConsumersIamPolicy editor "services/{{service_name}}/consumers/{{consumer_project}} roles/servicemanagement.serviceController" ``` IAM policy imports use the identifier of the resource in question, e.g. ```sh $ pulumi import gcp:endpoints/consumersIamPolicy:ConsumersIamPolicy editor services/{{service_name}}/consumers/{{consumer_project}} ``` -> **Custom Roles**If you're importing a IAM resource with a custom role, make sure to use the full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
-
-
Constructor Summary
Constructors Constructor Description ConsumersIamPolicy(java.lang.String name)
ConsumersIamPolicy(java.lang.String name, ConsumersIamPolicyArgs args)
ConsumersIamPolicy(java.lang.String name, ConsumersIamPolicyArgs args, com.pulumi.resources.CustomResourceOptions options)
-
Method Summary
All Methods Static Methods Instance Methods Concrete Methods Modifier and Type Method Description com.pulumi.core.Output<java.lang.String>
consumerProject()
com.pulumi.core.Output<java.lang.String>
etag()
static ConsumersIamPolicy
get(java.lang.String name, com.pulumi.core.Output<java.lang.String> id, ConsumersIamPolicyState state, com.pulumi.resources.CustomResourceOptions options)
Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.com.pulumi.core.Output<java.lang.String>
policyData()
com.pulumi.core.Output<java.lang.String>
serviceName()
-
-
-
Constructor Detail
-
ConsumersIamPolicy
public ConsumersIamPolicy(java.lang.String name)
- Parameters:
name
- The _unique_ name of the resulting resource.
-
ConsumersIamPolicy
public ConsumersIamPolicy(java.lang.String name, ConsumersIamPolicyArgs args)
- Parameters:
name
- The _unique_ name of the resulting resource.args
- The arguments to use to populate this resource's properties.
-
ConsumersIamPolicy
public ConsumersIamPolicy(java.lang.String name, ConsumersIamPolicyArgs args, @Nullable com.pulumi.resources.CustomResourceOptions options)
- Parameters:
name
- The _unique_ name of the resulting resource.args
- The arguments to use to populate this resource's properties.options
- A bag of options that control this resource's behavior.
-
-
Method Detail
-
consumerProject
public com.pulumi.core.Output<java.lang.String> consumerProject()
-
etag
public com.pulumi.core.Output<java.lang.String> etag()
- Returns:
- (Computed) The etag of the IAM policy.
-
policyData
public com.pulumi.core.Output<java.lang.String> policyData()
- Returns:
- The policy data generated by a `gcp.organizations.getIAMPolicy` data source.
-
serviceName
public com.pulumi.core.Output<java.lang.String> serviceName()
-
get
public static ConsumersIamPolicy get(java.lang.String name, com.pulumi.core.Output<java.lang.String> id, @Nullable ConsumersIamPolicyState state, @Nullable com.pulumi.resources.CustomResourceOptions options)
Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.- Parameters:
name
- The _unique_ name of the resulting resource.id
- The _unique_ provider ID of the resource to lookup.state
-options
- Optional settings to control the behavior of the CustomResource.
-
-