com.pulumi.aws.s3control.kotlin.AccessGrantsInstanceResourcePolicyArgs.kt Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of pulumi-aws-kotlin Show documentation
Build cloud applications and infrastructure by combining the safety and reliability of infrastructure as code with the power of the Kotlin programming language.
There is a newer version: 6.57.0.0
Show newest version
@file:Suppress("NAME_SHADOWING", "DEPRECATION")

package com.pulumi.aws.s3control.kotlin

import com.pulumi.aws.s3control.AccessGrantsInstanceResourcePolicyArgs.builder
import com.pulumi.core.Output
import com.pulumi.core.Output.of
import com.pulumi.kotlin.ConvertibleToJava
import com.pulumi.kotlin.PulumiTagMarker
import kotlin.String
import kotlin.Suppress
import kotlin.jvm.JvmName

/**
 * Provides a resource to manage an S3 Access Grants instance resource policy.
 * Use a resource policy to manage cross-account access to your S3 Access Grants instance.
 * ## Example Usage
 * 
 * ```typescript
 * import * as pulumi from "@pulumi/pulumi";
 * import * as aws from "@pulumi/aws";
 * const example = new aws.s3control.AccessGrantsInstance("example", {});
 * const exampleAccessGrantsInstanceResourcePolicy = new aws.s3control.AccessGrantsInstanceResourcePolicy("example", {policy: pulumi.interpolate`{
 *   "Version": "2012-10-17",
 *   "Id": "S3AccessGrantsPolicy",
 *   "Statement": [{
 *     "Sid": "AllowAccessToS3AccessGrants",
 *     "Effect": "Allow",
 *     "Principal": {
 *       "AWS": "123456789456"
 *     },
 *     "Action": [
 *       "s3:ListAccessGrants",
 *       "s3:ListAccessGrantsLocations",
 *       "s3:GetDataAccess"
 *     ],
 *     "Resource": "${example.accessGrantsInstanceArn}"
 *   }]
 * }
 * `});
 * ```
 * ```python
 * import pulumi
 * import pulumi_aws as aws
 * example = aws.s3control.AccessGrantsInstance("example")
 * example_access_grants_instance_resource_policy = aws.s3control.AccessGrantsInstanceResourcePolicy("example", policy=example.access_grants_instance_arn.apply(lambda access_grants_instance_arn: f"""{{
 *   "Version": "2012-10-17",
 *   "Id": "S3AccessGrantsPolicy",
 *   "Statement": [{{
 *     "Sid": "AllowAccessToS3AccessGrants",
 *     "Effect": "Allow",
 *     "Principal": {{
 *       "AWS": "123456789456"
 *     }},
 *     "Action": [
 *       "s3:ListAccessGrants",
 *       "s3:ListAccessGrantsLocations",
 *       "s3:GetDataAccess"
 *     ],
 *     "Resource": "{access_grants_instance_arn}"
 *   }}]
 * }}
 * """))
 * ```
 * ```csharp
 * using System.Collections.Generic;
 * using System.Linq;
 * using Pulumi;
 * using Aws = Pulumi.Aws;
 * return await Deployment.RunAsync(() =>
 * {
 *     var example = new Aws.S3Control.AccessGrantsInstance("example");
 *     var exampleAccessGrantsInstanceResourcePolicy = new Aws.S3Control.AccessGrantsInstanceResourcePolicy("example", new()
 *     {
 *         Policy = example.AccessGrantsInstanceArn.Apply(accessGrantsInstanceArn => @$"{{
 *   ""Version"": ""2012-10-17"",
 *   ""Id"": ""S3AccessGrantsPolicy"",
 *   ""Statement"": [{{
 *     ""Sid"": ""AllowAccessToS3AccessGrants"",
 *     ""Effect"": ""Allow"",
 *     ""Principal"": {{
 *       ""AWS"": ""123456789456""
 *     }},
 *     ""Action"": [
 *       ""s3:ListAccessGrants"",
 *       ""s3:ListAccessGrantsLocations"",
 *       ""s3:GetDataAccess""
 *     ],
 *     ""Resource"": ""{accessGrantsInstanceArn}""
 *   }}]
 * }}
 * "),
 *     });
 * });
 * ```
 * ```go
 * package main
 * import (
 * 	"fmt"
 * 	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/s3control"
 * 	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
 * )
 * func main() {
 * 	pulumi.Run(func(ctx *pulumi.Context) error {
 * 		example, err := s3control.NewAccessGrantsInstance(ctx, "example", nil)
 * 		if err != nil {
 * 			return err
 * 		}
 * 		_, err = s3control.NewAccessGrantsInstanceResourcePolicy(ctx, "example", &s3control.AccessGrantsInstanceResourcePolicyArgs{
 * 			Policy: example.AccessGrantsInstanceArn.ApplyT(func(accessGrantsInstanceArn string) (string, error) {
 * 				return fmt.Sprintf(`{
 *   "Version": "2012-10-17",
 *   "Id": "S3AccessGrantsPolicy",
 *   "Statement": [{
 *     "Sid": "AllowAccessToS3AccessGrants",
 *     "Effect": "Allow",
 *     "Principal": {
 *       "AWS": "123456789456"
 *     },
 *     "Action": [
 *       "s3:ListAccessGrants",
 *       "s3:ListAccessGrantsLocations",
 *       "s3:GetDataAccess"
 *     ],
 *     "Resource": "%v"
 *   }]
 * }
 * `, accessGrantsInstanceArn), nil
 * 			}).(pulumi.StringOutput),
 * 		})
 * 		if err != nil {
 * 			return err
 * 		}
 * 		return nil
 * 	})
 * }
 * ```
 * ```java
 * package generated_program;
 * import com.pulumi.Context;
 * import com.pulumi.Pulumi;
 * import com.pulumi.core.Output;
 * import com.pulumi.aws.s3control.AccessGrantsInstance;
 * import com.pulumi.aws.s3control.AccessGrantsInstanceResourcePolicy;
 * import com.pulumi.aws.s3control.AccessGrantsInstanceResourcePolicyArgs;
 * import java.util.List;
 * import java.util.ArrayList;
 * import java.util.Map;
 * import java.io.File;
 * import java.nio.file.Files;
 * import java.nio.file.Paths;
 * public class App {
 *     public static void main(String[] args) {
 *         Pulumi.run(App::stack);
 *     }
 *     public static void stack(Context ctx) {
 *         var example = new AccessGrantsInstance("example");
 *         var exampleAccessGrantsInstanceResourcePolicy = new AccessGrantsInstanceResourcePolicy("exampleAccessGrantsInstanceResourcePolicy", AccessGrantsInstanceResourcePolicyArgs.builder()
 *             .policy(example.accessGrantsInstanceArn().applyValue(accessGrantsInstanceArn -> """
 * {
 *   "Version": "2012-10-17",
 *   "Id": "S3AccessGrantsPolicy",
 *   "Statement": [{
 *     "Sid": "AllowAccessToS3AccessGrants",
 *     "Effect": "Allow",
 *     "Principal": {
 *       "AWS": "123456789456"
 *     },
 *     "Action": [
 *       "s3:ListAccessGrants",
 *       "s3:ListAccessGrantsLocations",
 *       "s3:GetDataAccess"
 *     ],
 *     "Resource": "%s"
 *   }]
 * }
 * ", accessGrantsInstanceArn)))
 *             .build());
 *     }
 * }
 * ```
 * ```yaml
 * resources:
 *   example:
 *     type: aws:s3control:AccessGrantsInstance
 *   exampleAccessGrantsInstanceResourcePolicy:
 *     type: aws:s3control:AccessGrantsInstanceResourcePolicy
 *     name: example
 *     properties:
 *       policy: |
 *         {
 *           "Version": "2012-10-17",
 *           "Id": "S3AccessGrantsPolicy",
 *           "Statement": [{
 *             "Sid": "AllowAccessToS3AccessGrants",
 *             "Effect": "Allow",
 *             "Principal": {
 *               "AWS": "123456789456"
 *             },
 *             "Action": [
 *               "s3:ListAccessGrants",
 *               "s3:ListAccessGrantsLocations",
 *               "s3:GetDataAccess"
 *             ],
 *             "Resource": "${example.accessGrantsInstanceArn}"
 *           }]
 *         }
 * ```
 * 
 * ## Import
 * Using `pulumi import`, import S3 Access Grants instance resource policies using the `account_id`. For example:
 * ```sh
 * $ pulumi import aws:s3control/accessGrantsInstanceResourcePolicy:AccessGrantsInstanceResourcePolicy example 123456789012
 * ```
 * @property accountId
 * @property policy The policy document.
 */
public data class AccessGrantsInstanceResourcePolicyArgs(
    public val accountId: Output? = null,
    public val policy: Output? = null,
) : ConvertibleToJava {
    override fun toJava(): com.pulumi.aws.s3control.AccessGrantsInstanceResourcePolicyArgs =
        com.pulumi.aws.s3control.AccessGrantsInstanceResourcePolicyArgs.builder()
            .accountId(accountId?.applyValue({ args0 -> args0 }))
            .policy(policy?.applyValue({ args0 -> args0 })).build()
}

/**
 * Builder for [AccessGrantsInstanceResourcePolicyArgs].
 */
@PulumiTagMarker
public class AccessGrantsInstanceResourcePolicyArgsBuilder internal constructor() {
    private var accountId: Output? = null

    private var policy: Output? = null

    /**
     * @param value
     */
    @JvmName("nktsepdlttxgfccq")
    public suspend fun accountId(`value`: Output) {
        this.accountId = value
    }

    /**
     * @param value The policy document.
     */
    @JvmName("ctrovonqhktgsgbg")
    public suspend fun policy(`value`: Output) {
        this.policy = value
    }

    /**
     * @param value
     */
    @JvmName("tpwghsongdmylapy")
    public suspend fun accountId(`value`: String?) {
        val toBeMapped = value
        val mapped = toBeMapped?.let({ args0 -> of(args0) })
        this.accountId = mapped
    }

    /**
     * @param value The policy document.
     */
    @JvmName("flsmimbfwwkrlyxd")
    public suspend fun policy(`value`: String?) {
        val toBeMapped = value
        val mapped = toBeMapped?.let({ args0 -> of(args0) })
        this.policy = mapped
    }

    internal fun build(): AccessGrantsInstanceResourcePolicyArgs =
        AccessGrantsInstanceResourcePolicyArgs(
            accountId = accountId,
            policy = policy,
        )
}