Package com.pulumi.gcp.organizations

Class IamAuditConfig

  • public class IamAuditConfig
extends com.pulumi.resources.CustomResource
    Allows management of audit logging config for a given service for a Google Cloud Platform Organization. ## Example Usage ```java package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.gcp.organizations.IamAuditConfig; import com.pulumi.gcp.organizations.IamAuditConfigArgs; import com.pulumi.gcp.organizations.inputs.IamAuditConfigAuditLogConfigArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var config = new IamAuditConfig("config", IamAuditConfigArgs.builder() .auditLogConfigs(IamAuditConfigAuditLogConfigArgs.builder() .exemptedMembers("user:[email protected]") .logType("DATA_READ") .build()) .orgId("your-organization-id") .service("allServices") .build()); } } ``` ## Import IAM audit config imports use the identifier of the resource in question and the service, e.g. ```sh $ pulumi import gcp:organizations/iamAuditConfig:IamAuditConfig config "your-organization-id foo.googleapis.com" ```

    • Nested Class Summary

      • Nested classes/interfaces inherited from class com.pulumi.resources.CustomResource

        com.pulumi.resources.CustomResource.CustomResourceInternal

      • Nested classes/interfaces inherited from class com.pulumi.resources.Resource

        com.pulumi.resources.Resource.LazyField<T extends java.lang.Object>, com.pulumi.resources.Resource.LazyFields, com.pulumi.resources.Resource.ResourceInternal

    • Field Summary

      • Fields inherited from class com.pulumi.resources.Resource

        childResources, remote

    • Method Summary

      All Methods Static Methods Instance Methods Concrete Methods 
      Modifier and Type Method Description
      com.pulumi.core.Output<java.util.List<IamAuditConfigAuditLogConfig>> auditLogConfigs()  
      com.pulumi.core.Output<java.lang.String> etag()  
      static IamAuditConfig get​(java.lang.String name, com.pulumi.core.Output<java.lang.String> id, IamAuditConfigState state, com.pulumi.resources.CustomResourceOptions options)
      Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.
      com.pulumi.core.Output<java.lang.String> orgId()  
      com.pulumi.core.Output<java.lang.String> service()  

      • Methods inherited from class com.pulumi.resources.CustomResource

        getId, id, idFuture

      • Methods inherited from class com.pulumi.resources.Resource

        getChildResources, getResourceName, getResourceType, getUrn, pulumiChildResources, pulumiResourceName, pulumiResourceType, urn

      • Methods inherited from class java.lang.Object

        clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

    • Constructor Detail

      • IamAuditConfig

        public IamAuditConfig​(java.lang.String name)
        Parameters:
        name - The _unique_ name of the resulting resource.

      • IamAuditConfig

        public IamAuditConfig​(java.lang.String name,
                      IamAuditConfigArgs args)
        Parameters:
        name - The _unique_ name of the resulting resource.
        args - The arguments to use to populate this resource's properties.

      • IamAuditConfig

        public IamAuditConfig​(java.lang.String name,
                      IamAuditConfigArgs args,
                      @Nullable
                      com.pulumi.resources.CustomResourceOptions options)
        Parameters:
        name - The _unique_ name of the resulting resource.
        args - The arguments to use to populate this resource's properties.
        options - A bag of options that control this resource's behavior.

    • Method Detail

      • auditLogConfigs

        public com.pulumi.core.Output<java.util.List<IamAuditConfigAuditLogConfig>> auditLogConfigs()
        Returns:
        The configuration for logging of each type of permission. This can be specified multiple times. Structure is documented below.

      • etag

        public com.pulumi.core.Output<java.lang.String> etag()
        Returns:
        The etag of iam policy

      • orgId

        public com.pulumi.core.Output<java.lang.String> orgId()
        Returns:
        The numeric ID of the organization in which you want to manage the audit logging config.

      • service

        public com.pulumi.core.Output<java.lang.String> service()
        Returns:
        Service which will be enabled for audit logging. The special value `allServices` covers all services. Note that if there are google\_organization\_iam\_audit\_config resources covering both `allServices` and a specific service then the union of the two AuditConfigs is used for that service: the `log_types` specified in each `audit_log_config` are enabled, and the `exempted_members` in each `audit_log_config` are exempted.

      • get

        public static IamAuditConfig get​(java.lang.String name,
                                 com.pulumi.core.Output<java.lang.String> id,
                                 @Nullable
                                 IamAuditConfigState state,
                                 @Nullable
                                 com.pulumi.resources.CustomResourceOptions options)
        Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.
        Parameters:
        name - The _unique_ name of the resulting resource.
        id - The _unique_ provider ID of the resource to lookup.
        state -
        options - Optional settings to control the behavior of the CustomResource.