All Downloads are FREE. Search and download functionalities are using the official Maven repository.

com.pulumi.aws.ssoadmin.kotlin.AccountAssignmentArgs.kt Maven / Gradle / Ivy

Go to download

Build cloud applications and infrastructure by combining the safety and reliability of infrastructure as code with the power of the Kotlin programming language.

There is a newer version: 6.57.0.0
Show newest version
@file:Suppress("NAME_SHADOWING", "DEPRECATION")

package com.pulumi.aws.ssoadmin.kotlin

import com.pulumi.aws.ssoadmin.AccountAssignmentArgs.builder
import com.pulumi.core.Output
import com.pulumi.core.Output.of
import com.pulumi.kotlin.ConvertibleToJava
import com.pulumi.kotlin.PulumiTagMarker
import kotlin.String
import kotlin.Suppress
import kotlin.jvm.JvmName

/**
 * Provides a Single Sign-On (SSO) Account Assignment resource
 * ## Example Usage
 * ### Basic Usage
 * 
 * ```typescript
 * import * as pulumi from "@pulumi/pulumi";
 * import * as aws from "@pulumi/aws";
 * const example = aws.ssoadmin.getInstances({});
 * const exampleGetPermissionSet = example.then(example => aws.ssoadmin.getPermissionSet({
 *     instanceArn: example.arns?.[0],
 *     name: "AWSReadOnlyAccess",
 * }));
 * const exampleGetGroup = example.then(example => aws.identitystore.getGroup({
 *     identityStoreId: example.identityStoreIds?.[0],
 *     alternateIdentifier: {
 *         uniqueAttribute: {
 *             attributePath: "DisplayName",
 *             attributeValue: "ExampleGroup",
 *         },
 *     },
 * }));
 * const exampleAccountAssignment = new aws.ssoadmin.AccountAssignment("example", {
 *     instanceArn: example.then(example => example.arns?.[0]),
 *     permissionSetArn: exampleGetPermissionSet.then(exampleGetPermissionSet => exampleGetPermissionSet.arn),
 *     principalId: exampleGetGroup.then(exampleGetGroup => exampleGetGroup.groupId),
 *     principalType: "GROUP",
 *     targetId: "123456789012",
 *     targetType: "AWS_ACCOUNT",
 * });
 * ```
 * ```python
 * import pulumi
 * import pulumi_aws as aws
 * example = aws.ssoadmin.get_instances()
 * example_get_permission_set = aws.ssoadmin.get_permission_set(instance_arn=example.arns[0],
 *     name="AWSReadOnlyAccess")
 * example_get_group = aws.identitystore.get_group(identity_store_id=example.identity_store_ids[0],
 *     alternate_identifier={
 *         "unique_attribute": {
 *             "attribute_path": "DisplayName",
 *             "attribute_value": "ExampleGroup",
 *         },
 *     })
 * example_account_assignment = aws.ssoadmin.AccountAssignment("example",
 *     instance_arn=example.arns[0],
 *     permission_set_arn=example_get_permission_set.arn,
 *     principal_id=example_get_group.group_id,
 *     principal_type="GROUP",
 *     target_id="123456789012",
 *     target_type="AWS_ACCOUNT")
 * ```
 * ```csharp
 * using System.Collections.Generic;
 * using System.Linq;
 * using Pulumi;
 * using Aws = Pulumi.Aws;
 * return await Deployment.RunAsync(() =>
 * {
 *     var example = Aws.SsoAdmin.GetInstances.Invoke();
 *     var exampleGetPermissionSet = Aws.SsoAdmin.GetPermissionSet.Invoke(new()
 *     {
 *         InstanceArn = example.Apply(getInstancesResult => getInstancesResult.Arns[0]),
 *         Name = "AWSReadOnlyAccess",
 *     });
 *     var exampleGetGroup = Aws.IdentityStore.GetGroup.Invoke(new()
 *     {
 *         IdentityStoreId = example.Apply(getInstancesResult => getInstancesResult.IdentityStoreIds[0]),
 *         AlternateIdentifier = new Aws.IdentityStore.Inputs.GetGroupAlternateIdentifierInputArgs
 *         {
 *             UniqueAttribute = new Aws.IdentityStore.Inputs.GetGroupAlternateIdentifierUniqueAttributeInputArgs
 *             {
 *                 AttributePath = "DisplayName",
 *                 AttributeValue = "ExampleGroup",
 *             },
 *         },
 *     });
 *     var exampleAccountAssignment = new Aws.SsoAdmin.AccountAssignment("example", new()
 *     {
 *         InstanceArn = example.Apply(getInstancesResult => getInstancesResult.Arns[0]),
 *         PermissionSetArn = exampleGetPermissionSet.Apply(getPermissionSetResult => getPermissionSetResult.Arn),
 *         PrincipalId = exampleGetGroup.Apply(getGroupResult => getGroupResult.GroupId),
 *         PrincipalType = "GROUP",
 *         TargetId = "123456789012",
 *         TargetType = "AWS_ACCOUNT",
 *     });
 * });
 * ```
 * ```go
 * package main
 * import (
 * 	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/identitystore"
 * 	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/ssoadmin"
 * 	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
 * )
 * func main() {
 * 	pulumi.Run(func(ctx *pulumi.Context) error {
 * 		example, err := ssoadmin.GetInstances(ctx, map[string]interface{}{}, nil)
 * 		if err != nil {
 * 			return err
 * 		}
 * 		exampleGetPermissionSet, err := ssoadmin.LookupPermissionSet(ctx, &ssoadmin.LookupPermissionSetArgs{
 * 			InstanceArn: example.Arns[0],
 * 			Name:        pulumi.StringRef("AWSReadOnlyAccess"),
 * 		}, nil)
 * 		if err != nil {
 * 			return err
 * 		}
 * 		exampleGetGroup, err := identitystore.LookupGroup(ctx, &identitystore.LookupGroupArgs{
 * 			IdentityStoreId: example.IdentityStoreIds[0],
 * 			AlternateIdentifier: identitystore.GetGroupAlternateIdentifier{
 * 				UniqueAttribute: identitystore.GetGroupAlternateIdentifierUniqueAttribute{
 * 					AttributePath:  "DisplayName",
 * 					AttributeValue: "ExampleGroup",
 * 				},
 * 			},
 * 		}, nil)
 * 		if err != nil {
 * 			return err
 * 		}
 * 		_, err = ssoadmin.NewAccountAssignment(ctx, "example", &ssoadmin.AccountAssignmentArgs{
 * 			InstanceArn:      pulumi.String(example.Arns[0]),
 * 			PermissionSetArn: pulumi.String(exampleGetPermissionSet.Arn),
 * 			PrincipalId:      pulumi.String(exampleGetGroup.GroupId),
 * 			PrincipalType:    pulumi.String("GROUP"),
 * 			TargetId:         pulumi.String("123456789012"),
 * 			TargetType:       pulumi.String("AWS_ACCOUNT"),
 * 		})
 * 		if err != nil {
 * 			return err
 * 		}
 * 		return nil
 * 	})
 * }
 * ```
 * ```java
 * package generated_program;
 * import com.pulumi.Context;
 * import com.pulumi.Pulumi;
 * import com.pulumi.core.Output;
 * import com.pulumi.aws.ssoadmin.SsoadminFunctions;
 * import com.pulumi.aws.ssoadmin.inputs.GetPermissionSetArgs;
 * import com.pulumi.aws.identitystore.IdentitystoreFunctions;
 * import com.pulumi.aws.identitystore.inputs.GetGroupArgs;
 * import com.pulumi.aws.identitystore.inputs.GetGroupAlternateIdentifierArgs;
 * import com.pulumi.aws.identitystore.inputs.GetGroupAlternateIdentifierUniqueAttributeArgs;
 * import com.pulumi.aws.ssoadmin.AccountAssignment;
 * import com.pulumi.aws.ssoadmin.AccountAssignmentArgs;
 * import java.util.List;
 * import java.util.ArrayList;
 * import java.util.Map;
 * import java.io.File;
 * import java.nio.file.Files;
 * import java.nio.file.Paths;
 * public class App {
 *     public static void main(String[] args) {
 *         Pulumi.run(App::stack);
 *     }
 *     public static void stack(Context ctx) {
 *         final var example = SsoadminFunctions.getInstances();
 *         final var exampleGetPermissionSet = SsoadminFunctions.getPermissionSet(GetPermissionSetArgs.builder()
 *             .instanceArn(example.applyValue(getInstancesResult -> getInstancesResult.arns()[0]))
 *             .name("AWSReadOnlyAccess")
 *             .build());
 *         final var exampleGetGroup = IdentitystoreFunctions.getGroup(GetGroupArgs.builder()
 *             .identityStoreId(example.applyValue(getInstancesResult -> getInstancesResult.identityStoreIds()[0]))
 *             .alternateIdentifier(GetGroupAlternateIdentifierArgs.builder()
 *                 .uniqueAttribute(GetGroupAlternateIdentifierUniqueAttributeArgs.builder()
 *                     .attributePath("DisplayName")
 *                     .attributeValue("ExampleGroup")
 *                     .build())
 *                 .build())
 *             .build());
 *         var exampleAccountAssignment = new AccountAssignment("exampleAccountAssignment", AccountAssignmentArgs.builder()
 *             .instanceArn(example.applyValue(getInstancesResult -> getInstancesResult.arns()[0]))
 *             .permissionSetArn(exampleGetPermissionSet.applyValue(getPermissionSetResult -> getPermissionSetResult.arn()))
 *             .principalId(exampleGetGroup.applyValue(getGroupResult -> getGroupResult.groupId()))
 *             .principalType("GROUP")
 *             .targetId("123456789012")
 *             .targetType("AWS_ACCOUNT")
 *             .build());
 *     }
 * }
 * ```
 * ```yaml
 * resources:
 *   exampleAccountAssignment:
 *     type: aws:ssoadmin:AccountAssignment
 *     name: example
 *     properties:
 *       instanceArn: ${example.arns[0]}
 *       permissionSetArn: ${exampleGetPermissionSet.arn}
 *       principalId: ${exampleGetGroup.groupId}
 *       principalType: GROUP
 *       targetId: '123456789012'
 *       targetType: AWS_ACCOUNT
 * variables:
 *   example:
 *     fn::invoke:
 *       Function: aws:ssoadmin:getInstances
 *       Arguments: {}
 *   exampleGetPermissionSet:
 *     fn::invoke:
 *       Function: aws:ssoadmin:getPermissionSet
 *       Arguments:
 *         instanceArn: ${example.arns[0]}
 *         name: AWSReadOnlyAccess
 *   exampleGetGroup:
 *     fn::invoke:
 *       Function: aws:identitystore:getGroup
 *       Arguments:
 *         identityStoreId: ${example.identityStoreIds[0]}
 *         alternateIdentifier:
 *           uniqueAttribute:
 *             attributePath: DisplayName
 *             attributeValue: ExampleGroup
 * ```
 * 
 * ### With Managed Policy Attachment
 * > Because destruction of a managed policy attachment resource also re-provisions the associated permission set to all accounts, explicitly indicating the dependency with the account assignment resource via the `depends_on` meta argument is necessary to ensure proper deletion order when these resources are used together.
 * 
 * ```typescript
 * import * as pulumi from "@pulumi/pulumi";
 * import * as aws from "@pulumi/aws";
 * const example = aws.ssoadmin.getInstances({});
 * const examplePermissionSet = new aws.ssoadmin.PermissionSet("example", {
 *     name: "Example",
 *     instanceArn: example.then(example => example.arns?.[0]),
 * });
 * const exampleGroup = new aws.identitystore.Group("example", {
 *     identityStoreId: example.then(example => example.identityStoreIds?.[0]),
 *     displayName: "Admin",
 *     description: "Admin Group",
 * });
 * const accountAssignment = new aws.ssoadmin.AccountAssignment("account_assignment", {
 *     instanceArn: example.then(example => example.arns?.[0]),
 *     permissionSetArn: examplePermissionSet.arn,
 *     principalId: exampleGroup.groupId,
 *     principalType: "GROUP",
 *     targetId: "123456789012",
 *     targetType: "AWS_ACCOUNT",
 * });
 * const exampleManagedPolicyAttachment = new aws.ssoadmin.ManagedPolicyAttachment("example", {
 *     instanceArn: example.then(example => example.arns?.[0]),
 *     managedPolicyArn: "arn:aws:iam::aws:policy/AlexaForBusinessDeviceSetup",
 *     permissionSetArn: examplePermissionSet.arn,
 * }, {
 *     dependsOn: [exampleAwsSsoadminAccountAssignment],
 * });
 * ```
 * ```python
 * import pulumi
 * import pulumi_aws as aws
 * example = aws.ssoadmin.get_instances()
 * example_permission_set = aws.ssoadmin.PermissionSet("example",
 *     name="Example",
 *     instance_arn=example.arns[0])
 * example_group = aws.identitystore.Group("example",
 *     identity_store_id=example.identity_store_ids[0],
 *     display_name="Admin",
 *     description="Admin Group")
 * account_assignment = aws.ssoadmin.AccountAssignment("account_assignment",
 *     instance_arn=example.arns[0],
 *     permission_set_arn=example_permission_set.arn,
 *     principal_id=example_group.group_id,
 *     principal_type="GROUP",
 *     target_id="123456789012",
 *     target_type="AWS_ACCOUNT")
 * example_managed_policy_attachment = aws.ssoadmin.ManagedPolicyAttachment("example",
 *     instance_arn=example.arns[0],
 *     managed_policy_arn="arn:aws:iam::aws:policy/AlexaForBusinessDeviceSetup",
 *     permission_set_arn=example_permission_set.arn,
 *     opts = pulumi.ResourceOptions(depends_on=[example_aws_ssoadmin_account_assignment]))
 * ```
 * ```csharp
 * using System.Collections.Generic;
 * using System.Linq;
 * using Pulumi;
 * using Aws = Pulumi.Aws;
 * return await Deployment.RunAsync(() =>
 * {
 *     var example = Aws.SsoAdmin.GetInstances.Invoke();
 *     var examplePermissionSet = new Aws.SsoAdmin.PermissionSet("example", new()
 *     {
 *         Name = "Example",
 *         InstanceArn = example.Apply(getInstancesResult => getInstancesResult.Arns[0]),
 *     });
 *     var exampleGroup = new Aws.IdentityStore.Group("example", new()
 *     {
 *         IdentityStoreId = example.Apply(getInstancesResult => getInstancesResult.IdentityStoreIds[0]),
 *         DisplayName = "Admin",
 *         Description = "Admin Group",
 *     });
 *     var accountAssignment = new Aws.SsoAdmin.AccountAssignment("account_assignment", new()
 *     {
 *         InstanceArn = example.Apply(getInstancesResult => getInstancesResult.Arns[0]),
 *         PermissionSetArn = examplePermissionSet.Arn,
 *         PrincipalId = exampleGroup.GroupId,
 *         PrincipalType = "GROUP",
 *         TargetId = "123456789012",
 *         TargetType = "AWS_ACCOUNT",
 *     });
 *     var exampleManagedPolicyAttachment = new Aws.SsoAdmin.ManagedPolicyAttachment("example", new()
 *     {
 *         InstanceArn = example.Apply(getInstancesResult => getInstancesResult.Arns[0]),
 *         ManagedPolicyArn = "arn:aws:iam::aws:policy/AlexaForBusinessDeviceSetup",
 *         PermissionSetArn = examplePermissionSet.Arn,
 *     }, new CustomResourceOptions
 *     {
 *         DependsOn =
 *         {
 *             exampleAwsSsoadminAccountAssignment,
 *         },
 *     });
 * });
 * ```
 * ```go
 * package main
 * import (
 * 	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/identitystore"
 * 	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/ssoadmin"
 * 	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
 * )
 * func main() {
 * 	pulumi.Run(func(ctx *pulumi.Context) error {
 * 		example, err := ssoadmin.GetInstances(ctx, map[string]interface{}{}, nil)
 * 		if err != nil {
 * 			return err
 * 		}
 * 		examplePermissionSet, err := ssoadmin.NewPermissionSet(ctx, "example", &ssoadmin.PermissionSetArgs{
 * 			Name:        pulumi.String("Example"),
 * 			InstanceArn: pulumi.String(example.Arns[0]),
 * 		})
 * 		if err != nil {
 * 			return err
 * 		}
 * 		exampleGroup, err := identitystore.NewGroup(ctx, "example", &identitystore.GroupArgs{
 * 			IdentityStoreId: pulumi.String(example.IdentityStoreIds[0]),
 * 			DisplayName:     pulumi.String("Admin"),
 * 			Description:     pulumi.String("Admin Group"),
 * 		})
 * 		if err != nil {
 * 			return err
 * 		}
 * 		_, err = ssoadmin.NewAccountAssignment(ctx, "account_assignment", &ssoadmin.AccountAssignmentArgs{
 * 			InstanceArn:      pulumi.String(example.Arns[0]),
 * 			PermissionSetArn: examplePermissionSet.Arn,
 * 			PrincipalId:      exampleGroup.GroupId,
 * 			PrincipalType:    pulumi.String("GROUP"),
 * 			TargetId:         pulumi.String("123456789012"),
 * 			TargetType:       pulumi.String("AWS_ACCOUNT"),
 * 		})
 * 		if err != nil {
 * 			return err
 * 		}
 * 		_, err = ssoadmin.NewManagedPolicyAttachment(ctx, "example", &ssoadmin.ManagedPolicyAttachmentArgs{
 * 			InstanceArn:      pulumi.String(example.Arns[0]),
 * 			ManagedPolicyArn: pulumi.String("arn:aws:iam::aws:policy/AlexaForBusinessDeviceSetup"),
 * 			PermissionSetArn: examplePermissionSet.Arn,
 * 		}, pulumi.DependsOn([]pulumi.Resource{
 * 			exampleAwsSsoadminAccountAssignment,
 * 		}))
 * 		if err != nil {
 * 			return err
 * 		}
 * 		return nil
 * 	})
 * }
 * ```
 * ```java
 * package generated_program;
 * import com.pulumi.Context;
 * import com.pulumi.Pulumi;
 * import com.pulumi.core.Output;
 * import com.pulumi.aws.ssoadmin.SsoadminFunctions;
 * import com.pulumi.aws.ssoadmin.PermissionSet;
 * import com.pulumi.aws.ssoadmin.PermissionSetArgs;
 * import com.pulumi.aws.identitystore.Group;
 * import com.pulumi.aws.identitystore.GroupArgs;
 * import com.pulumi.aws.ssoadmin.AccountAssignment;
 * import com.pulumi.aws.ssoadmin.AccountAssignmentArgs;
 * import com.pulumi.aws.ssoadmin.ManagedPolicyAttachment;
 * import com.pulumi.aws.ssoadmin.ManagedPolicyAttachmentArgs;
 * import com.pulumi.resources.CustomResourceOptions;
 * import java.util.List;
 * import java.util.ArrayList;
 * import java.util.Map;
 * import java.io.File;
 * import java.nio.file.Files;
 * import java.nio.file.Paths;
 * public class App {
 *     public static void main(String[] args) {
 *         Pulumi.run(App::stack);
 *     }
 *     public static void stack(Context ctx) {
 *         final var example = SsoadminFunctions.getInstances();
 *         var examplePermissionSet = new PermissionSet("examplePermissionSet", PermissionSetArgs.builder()
 *             .name("Example")
 *             .instanceArn(example.applyValue(getInstancesResult -> getInstancesResult.arns()[0]))
 *             .build());
 *         var exampleGroup = new Group("exampleGroup", GroupArgs.builder()
 *             .identityStoreId(example.applyValue(getInstancesResult -> getInstancesResult.identityStoreIds()[0]))
 *             .displayName("Admin")
 *             .description("Admin Group")
 *             .build());
 *         var accountAssignment = new AccountAssignment("accountAssignment", AccountAssignmentArgs.builder()
 *             .instanceArn(example.applyValue(getInstancesResult -> getInstancesResult.arns()[0]))
 *             .permissionSetArn(examplePermissionSet.arn())
 *             .principalId(exampleGroup.groupId())
 *             .principalType("GROUP")
 *             .targetId("123456789012")
 *             .targetType("AWS_ACCOUNT")
 *             .build());
 *         var exampleManagedPolicyAttachment = new ManagedPolicyAttachment("exampleManagedPolicyAttachment", ManagedPolicyAttachmentArgs.builder()
 *             .instanceArn(example.applyValue(getInstancesResult -> getInstancesResult.arns()[0]))
 *             .managedPolicyArn("arn:aws:iam::aws:policy/AlexaForBusinessDeviceSetup")
 *             .permissionSetArn(examplePermissionSet.arn())
 *             .build(), CustomResourceOptions.builder()
 *                 .dependsOn(exampleAwsSsoadminAccountAssignment)
 *                 .build());
 *     }
 * }
 * ```
 * ```yaml
 * resources:
 *   examplePermissionSet:
 *     type: aws:ssoadmin:PermissionSet
 *     name: example
 *     properties:
 *       name: Example
 *       instanceArn: ${example.arns[0]}
 *   exampleGroup:
 *     type: aws:identitystore:Group
 *     name: example
 *     properties:
 *       identityStoreId: ${example.identityStoreIds[0]}
 *       displayName: Admin
 *       description: Admin Group
 *   accountAssignment:
 *     type: aws:ssoadmin:AccountAssignment
 *     name: account_assignment
 *     properties:
 *       instanceArn: ${example.arns[0]}
 *       permissionSetArn: ${examplePermissionSet.arn}
 *       principalId: ${exampleGroup.groupId}
 *       principalType: GROUP
 *       targetId: '123456789012'
 *       targetType: AWS_ACCOUNT
 *   exampleManagedPolicyAttachment:
 *     type: aws:ssoadmin:ManagedPolicyAttachment
 *     name: example
 *     properties:
 *       instanceArn: ${example.arns[0]}
 *       managedPolicyArn: arn:aws:iam::aws:policy/AlexaForBusinessDeviceSetup
 *       permissionSetArn: ${examplePermissionSet.arn}
 *     options:
 *       dependson:
 *         - ${exampleAwsSsoadminAccountAssignment}
 * variables:
 *   example:
 *     fn::invoke:
 *       Function: aws:ssoadmin:getInstances
 *       Arguments: {}
 * ```
 * 
 * ## Import
 * Using `pulumi import`, import SSO Account Assignments using the `principal_id`, `principal_type`, `target_id`, `target_type`, `permission_set_arn`, `instance_arn` separated by commas (`,`). For example:
 * ```sh
 * $ pulumi import aws:ssoadmin/accountAssignment:AccountAssignment example f81d4fae-7dec-11d0-a765-00a0c91e6bf6,GROUP,1234567890,AWS_ACCOUNT,arn:aws:sso:::permissionSet/ssoins-0123456789abcdef/ps-0123456789abcdef,arn:aws:sso:::instance/ssoins-0123456789abcdef
 * ```
 * @property instanceArn The Amazon Resource Name (ARN) of the SSO Instance.
 * @property permissionSetArn The Amazon Resource Name (ARN) of the Permission Set that the admin wants to grant the principal access to.
 * @property principalId An identifier for an object in SSO, such as a user or group. PrincipalIds are GUIDs (For example, `f81d4fae-7dec-11d0-a765-00a0c91e6bf6`).
 * @property principalType The entity type for which the assignment will be created. Valid values: `USER`, `GROUP`.
 * @property targetId An AWS account identifier, typically a 10-12 digit string.
 * @property targetType The entity type for which the assignment will be created. Valid values: `AWS_ACCOUNT`.
 */
public data class AccountAssignmentArgs(
    public val instanceArn: Output? = null,
    public val permissionSetArn: Output? = null,
    public val principalId: Output? = null,
    public val principalType: Output? = null,
    public val targetId: Output? = null,
    public val targetType: Output? = null,
) : ConvertibleToJava {
    override fun toJava(): com.pulumi.aws.ssoadmin.AccountAssignmentArgs =
        com.pulumi.aws.ssoadmin.AccountAssignmentArgs.builder()
            .instanceArn(instanceArn?.applyValue({ args0 -> args0 }))
            .permissionSetArn(permissionSetArn?.applyValue({ args0 -> args0 }))
            .principalId(principalId?.applyValue({ args0 -> args0 }))
            .principalType(principalType?.applyValue({ args0 -> args0 }))
            .targetId(targetId?.applyValue({ args0 -> args0 }))
            .targetType(targetType?.applyValue({ args0 -> args0 })).build()
}

/**
 * Builder for [AccountAssignmentArgs].
 */
@PulumiTagMarker
public class AccountAssignmentArgsBuilder internal constructor() {
    private var instanceArn: Output? = null

    private var permissionSetArn: Output? = null

    private var principalId: Output? = null

    private var principalType: Output? = null

    private var targetId: Output? = null

    private var targetType: Output? = null

    /**
     * @param value The Amazon Resource Name (ARN) of the SSO Instance.
     */
    @JvmName("ueglhxuiypcvxbvp")
    public suspend fun instanceArn(`value`: Output) {
        this.instanceArn = value
    }

    /**
     * @param value The Amazon Resource Name (ARN) of the Permission Set that the admin wants to grant the principal access to.
     */
    @JvmName("dtlvkxybpfalsmwy")
    public suspend fun permissionSetArn(`value`: Output) {
        this.permissionSetArn = value
    }

    /**
     * @param value An identifier for an object in SSO, such as a user or group. PrincipalIds are GUIDs (For example, `f81d4fae-7dec-11d0-a765-00a0c91e6bf6`).
     */
    @JvmName("qqhmjsmohvfejhhg")
    public suspend fun principalId(`value`: Output) {
        this.principalId = value
    }

    /**
     * @param value The entity type for which the assignment will be created. Valid values: `USER`, `GROUP`.
     */
    @JvmName("fxqueeblecwhayys")
    public suspend fun principalType(`value`: Output) {
        this.principalType = value
    }

    /**
     * @param value An AWS account identifier, typically a 10-12 digit string.
     */
    @JvmName("lmeikttbuyqsrigk")
    public suspend fun targetId(`value`: Output) {
        this.targetId = value
    }

    /**
     * @param value The entity type for which the assignment will be created. Valid values: `AWS_ACCOUNT`.
     */
    @JvmName("ddiiqntpxhbwoukr")
    public suspend fun targetType(`value`: Output) {
        this.targetType = value
    }

    /**
     * @param value The Amazon Resource Name (ARN) of the SSO Instance.
     */
    @JvmName("rfgghjimgpxwofwe")
    public suspend fun instanceArn(`value`: String?) {
        val toBeMapped = value
        val mapped = toBeMapped?.let({ args0 -> of(args0) })
        this.instanceArn = mapped
    }

    /**
     * @param value The Amazon Resource Name (ARN) of the Permission Set that the admin wants to grant the principal access to.
     */
    @JvmName("ssniwxfhqhnaoreq")
    public suspend fun permissionSetArn(`value`: String?) {
        val toBeMapped = value
        val mapped = toBeMapped?.let({ args0 -> of(args0) })
        this.permissionSetArn = mapped
    }

    /**
     * @param value An identifier for an object in SSO, such as a user or group. PrincipalIds are GUIDs (For example, `f81d4fae-7dec-11d0-a765-00a0c91e6bf6`).
     */
    @JvmName("ycqhhrhjtxjgisiu")
    public suspend fun principalId(`value`: String?) {
        val toBeMapped = value
        val mapped = toBeMapped?.let({ args0 -> of(args0) })
        this.principalId = mapped
    }

    /**
     * @param value The entity type for which the assignment will be created. Valid values: `USER`, `GROUP`.
     */
    @JvmName("yiymhuqrwwcduyoc")
    public suspend fun principalType(`value`: String?) {
        val toBeMapped = value
        val mapped = toBeMapped?.let({ args0 -> of(args0) })
        this.principalType = mapped
    }

    /**
     * @param value An AWS account identifier, typically a 10-12 digit string.
     */
    @JvmName("vftsytuudbuwsdpt")
    public suspend fun targetId(`value`: String?) {
        val toBeMapped = value
        val mapped = toBeMapped?.let({ args0 -> of(args0) })
        this.targetId = mapped
    }

    /**
     * @param value The entity type for which the assignment will be created. Valid values: `AWS_ACCOUNT`.
     */
    @JvmName("lxexispsdwwngyoq")
    public suspend fun targetType(`value`: String?) {
        val toBeMapped = value
        val mapped = toBeMapped?.let({ args0 -> of(args0) })
        this.targetType = mapped
    }

    internal fun build(): AccountAssignmentArgs = AccountAssignmentArgs(
        instanceArn = instanceArn,
        permissionSetArn = permissionSetArn,
        principalId = principalId,
        principalType = principalType,
        targetId = targetId,
        targetType = targetType,
    )
}




© 2015 - 2024 Weber Informatics LLC | Privacy Policy