com.pulumi.gcp.organizations.kotlin.inputs.GetIAMPolicyBinding.kt Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of pulumi-gcp-kotlin Show documentation
Build cloud applications and infrastructure by combining the safety and reliability of infrastructure as code with the power of the Kotlin programming language.
There is a newer version: 8.12.0.0
Show newest version
@file:Suppress("NAME_SHADOWING", "DEPRECATION")

package com.pulumi.gcp.organizations.kotlin.inputs

import com.pulumi.gcp.organizations.inputs.GetIAMPolicyBinding.builder
import com.pulumi.kotlin.ConvertibleToJava
import com.pulumi.kotlin.PulumiNullFieldException
import com.pulumi.kotlin.PulumiTagMarker
import com.pulumi.kotlin.applySuspend
import kotlin.String
import kotlin.Suppress
import kotlin.Unit
import kotlin.collections.List
import kotlin.jvm.JvmName

/**
 *
 * @property condition An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding. Structure is documented below.
 * @property members An array of identities that will be granted the privilege in the `role`. For more details on format and restrictions see https://cloud.google.com/billing/reference/rest/v1/Policy#Binding
 * Each entry can have one of the following values:
 * * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account. Some resources **don't** support this identity.
 * * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account. Some resources **don't** support this identity.
 * * **user:{emailid}**: An email address that represents a specific Google account. For example, [email protected].
 * * **serviceAccount:{emailid}**: An email address that represents a service account. For example, [email protected].
 * * **group:{emailid}**: An email address that represents a Google group. For example, [email protected].
 * * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
 * @property role The role/permission that will be granted to the members.
 * See the [IAM Roles](https://cloud.google.com/compute/docs/access/iam) documentation for a complete list of roles.
 * Note that custom roles must be of the format `[projects|organizations]/{parent-name}/roles/{role-name}`.
 */
public data class GetIAMPolicyBinding(
    public val condition: GetIAMPolicyBindingCondition? = null,
    public val members: List,
    public val role: String,
) : ConvertibleToJava {
    override fun toJava(): com.pulumi.gcp.organizations.inputs.GetIAMPolicyBinding =
        com.pulumi.gcp.organizations.inputs.GetIAMPolicyBinding.builder()
            .condition(condition?.let({ args0 -> args0.let({ args0 -> args0.toJava() }) }))
            .members(members.let({ args0 -> args0.map({ args0 -> args0 }) }))
            .role(role.let({ args0 -> args0 })).build()
}

/**
 * Builder for [GetIAMPolicyBinding].
 */
@PulumiTagMarker
public class GetIAMPolicyBindingBuilder internal constructor() {
    private var condition: GetIAMPolicyBindingCondition? = null

    private var members: List? = null

    private var role: String? = null

    /**
     * @param value An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding. Structure is documented below.
     */
    @JvmName("jswgdtrjgxxsrjra")
    public suspend fun condition(`value`: GetIAMPolicyBindingCondition?) {
        val toBeMapped = value
        val mapped = toBeMapped?.let({ args0 -> args0 })
        this.condition = mapped
    }

    /**
     * @param argument An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding. Structure is documented below.
     */
    @JvmName("odnidhbvtfpegqlj")
    public suspend fun condition(argument: suspend GetIAMPolicyBindingConditionBuilder.() -> Unit) {
        val toBeMapped = GetIAMPolicyBindingConditionBuilder().applySuspend { argument() }.build()
        val mapped = toBeMapped
        this.condition = mapped
    }

    /**
     * @param value An array of identities that will be granted the privilege in the `role`. For more details on format and restrictions see https://cloud.google.com/billing/reference/rest/v1/Policy#Binding
     * Each entry can have one of the following values:
     * * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account. Some resources **don't** support this identity.
     * * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account. Some resources **don't** support this identity.
     * * **user:{emailid}**: An email address that represents a specific Google account. For example, [email protected].
     * * **serviceAccount:{emailid}**: An email address that represents a service account. For example, [email protected].
     * * **group:{emailid}**: An email address that represents a Google group. For example, [email protected].
     * * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
     */
    @JvmName("xqjbeaeffwwkuaww")
    public suspend fun members(`value`: List) {
        val toBeMapped = value
        val mapped = toBeMapped.let({ args0 -> args0 })
        this.members = mapped
    }

    /**
     * @param values An array of identities that will be granted the privilege in the `role`. For more details on format and restrictions see https://cloud.google.com/billing/reference/rest/v1/Policy#Binding
     * Each entry can have one of the following values:
     * * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account. Some resources **don't** support this identity.
     * * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account. Some resources **don't** support this identity.
     * * **user:{emailid}**: An email address that represents a specific Google account. For example, [email protected].
     * * **serviceAccount:{emailid}**: An email address that represents a service account. For example, [email protected].
     * * **group:{emailid}**: An email address that represents a Google group. For example, [email protected].
     * * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
     */
    @JvmName("cyhcnjgryaxextny")
    public suspend fun members(vararg values: String) {
        val toBeMapped = values.toList()
        val mapped = toBeMapped.let({ args0 -> args0 })
        this.members = mapped
    }

    /**
     * @param value The role/permission that will be granted to the members.
     * See the [IAM Roles](https://cloud.google.com/compute/docs/access/iam) documentation for a complete list of roles.
     * Note that custom roles must be of the format `[projects|organizations]/{parent-name}/roles/{role-name}`.
     */
    @JvmName("glnivwrgopcjjmae")
    public suspend fun role(`value`: String) {
        val toBeMapped = value
        val mapped = toBeMapped.let({ args0 -> args0 })
        this.role = mapped
    }

    internal fun build(): GetIAMPolicyBinding = GetIAMPolicyBinding(
        condition = condition,
        members = members ?: throw PulumiNullFieldException("members"),
        role = role ?: throw PulumiNullFieldException("role"),
    )
}