iam library
Classes
- AccessBoundaryPolicy
- Represents a collection of access boundary policies to apply to a given resource. NOTE: This is a private feature and users should contact GCP support if they would like to test it.
- AccessBoundaryPolicyArgs
- The set of arguments for AccessBoundaryPolicy. The set of arguments for AccessBoundaryPolicy.
- AccessBoundaryPolicyRule
- AccessBoundaryPolicyRuleAccessBoundaryRule
- AccessBoundaryPolicyRuleAccessBoundaryRuleAvailabilityCondition
- AccessBoundaryPolicyState
- Input properties used for looking up and filtering AccessBoundaryPolicy resources.
- DenyPolicy
- Represents a collection of denial policies to apply to a given resource.
- DenyPolicyArgs
- The set of arguments for DenyPolicy. The set of arguments for DenyPolicy.
- DenyPolicyRule
- DenyPolicyRuleDenyRule
- DenyPolicyRuleDenyRuleDenialCondition
- DenyPolicyState
- Input properties used for looking up and filtering DenyPolicy resources.
- FolderAccessPolicy
- Represents an IAM v3 Access Policy parented by a Folder. This policy defines rules that allow or deny access to resources within the specified folder based on principals and conditions. See the Cloud IAM documentation for more details on Access Policies.
- FolderAccessPolicyArgs
- The set of arguments for FolderAccessPolicy. The set of arguments for FolderAccessPolicy.
- FolderAccessPolicyDetails
- FolderAccessPolicyDetailsRule
- FolderAccessPolicyDetailsRuleCondition
- FolderAccessPolicyDetailsRuleOperation
- FolderAccessPolicyState
- Input properties used for looking up and filtering FolderAccessPolicy resources.
- FoldersPolicyBinding
- A policy binding to a folder. This is a Terraform resource, and maps to a policy binding resource in GCP.
- FoldersPolicyBindingArgs
- The set of arguments for FoldersPolicyBinding. The set of arguments for FoldersPolicyBinding.
- FoldersPolicyBindingCondition
- FoldersPolicyBindingState
- Input properties used for looking up and filtering FoldersPolicyBinding resources.
- FoldersPolicyBindingTarget
- GetRuleArgs
- Arguments for getRule. Arguments for getRule.
- GetRuleResult
- Result data returned by getRule.
- GetTestablePermissionsArgs
- Arguments for getTestablePermissions. Arguments for getTestablePermissions.
- GetTestablePermissionsPermission
- GetTestablePermissionsResult
- Result data returned by getTestablePermissions.
- GetWorkforcePoolIamPolicyArgs
- Arguments for getWorkforcePoolIamPolicy. Arguments for getWorkforcePoolIamPolicy.
- GetWorkforcePoolIamPolicyResult
- Result data returned by getWorkforcePoolIamPolicy.
- GetWorkloadIdentityPoolArgs
- Arguments for getWorkloadIdentityPool. Arguments for getWorkloadIdentityPool.
- GetWorkloadIdentityPoolAttestationRule
- GetWorkloadIdentityPoolIamPolicyArgs
- Arguments for getWorkloadIdentityPoolIamPolicy. Arguments for getWorkloadIdentityPoolIamPolicy.
- GetWorkloadIdentityPoolIamPolicyResult
- Result data returned by getWorkloadIdentityPoolIamPolicy.
- GetWorkloadIdentityPoolInlineCertificateIssuanceConfig
- GetWorkloadIdentityPoolInlineTrustConfig
- GetWorkloadIdentityPoolInlineTrustConfigAdditionalTrustBundle
- GetWorkloadIdentityPoolInlineTrustConfigAdditionalTrustBundleTrustAnchor
- GetWorkloadIdentityPoolOpenidConfigArgs
- Arguments for getWorkloadIdentityPoolOpenidConfig. Arguments for getWorkloadIdentityPoolOpenidConfig.
- GetWorkloadIdentityPoolOpenidConfigResult
- Result data returned by getWorkloadIdentityPoolOpenidConfig.
- GetWorkloadIdentityPoolProviderArgs
- Arguments for getWorkloadIdentityPoolProvider. Arguments for getWorkloadIdentityPoolProvider.
- GetWorkloadIdentityPoolProviderAw
- GetWorkloadIdentityPoolProviderOidc
- GetWorkloadIdentityPoolProviderResult
- Result data returned by getWorkloadIdentityPoolProvider.
- GetWorkloadIdentityPoolProviderSaml
- GetWorkloadIdentityPoolProviderX509
- GetWorkloadIdentityPoolProviderX509TrustStore
- GetWorkloadIdentityPoolProviderX509TrustStoreIntermediateCa
- GetWorkloadIdentityPoolProviderX509TrustStoreTrustAnchor
- GetWorkloadIdentityPoolResult
- Result data returned by getWorkloadIdentityPool.
- OauthClient
- Represents an OAuth Client. Used to access Google Cloud resources on behalf of a Workforce Identity Federation user by using OAuth 2.0 Protocol to obtain an access token from Google Cloud.
- OauthClientArgs
- The set of arguments for OauthClient. The set of arguments for OauthClient.
- OauthClientCredential
- Represents an OAuth Client Credential. Used to authenticate an OAuth Client while accessing Google Cloud resources on behalf of a Workforce Identity Federation user by using OAuth 2.0 Protocol.
- OauthClientCredentialArgs
- The set of arguments for OauthClientCredential. The set of arguments for OauthClientCredential.
- OauthClientCredentialState
- Input properties used for looking up and filtering OauthClientCredential resources.
- OauthClientState
- Input properties used for looking up and filtering OauthClient resources.
- OrganizationAccessPolicy
- Represents an IAM v3 Access Policy parented by a Google Cloud Organization. This policy defines rules that allow or deny access to resources within the specified organization based on principals and conditions. See the Cloud IAM documentation for more details on Access Policies.
- OrganizationAccessPolicyArgs
- The set of arguments for OrganizationAccessPolicy. The set of arguments for OrganizationAccessPolicy.
- OrganizationAccessPolicyDetails
- OrganizationAccessPolicyDetailsRule
- OrganizationAccessPolicyDetailsRuleCondition
- OrganizationAccessPolicyDetailsRuleOperation
- OrganizationAccessPolicyState
- Input properties used for looking up and filtering OrganizationAccessPolicy resources.
- OrganizationsPolicyBinding
- A policy binding to an organization. This is a Terraform resource, and maps to a policy binding resource in GCP.
- OrganizationsPolicyBindingArgs
- The set of arguments for OrganizationsPolicyBinding. The set of arguments for OrganizationsPolicyBinding.
- OrganizationsPolicyBindingCondition
- OrganizationsPolicyBindingState
- Input properties used for looking up and filtering OrganizationsPolicyBinding resources.
- OrganizationsPolicyBindingTarget
- PrincipalAccessBoundaryPolicy
- An IAM Principal Access Boundary Policy resource. This resource has no effect on accesses until is bound to a target through policy bindings. You can see further documentation on policy bindings in:
- PrincipalAccessBoundaryPolicyArgs
- The set of arguments for PrincipalAccessBoundaryPolicy. The set of arguments for PrincipalAccessBoundaryPolicy.
- PrincipalAccessBoundaryPolicyDetails
- PrincipalAccessBoundaryPolicyDetailsRule
- PrincipalAccessBoundaryPolicyState
- Input properties used for looking up and filtering PrincipalAccessBoundaryPolicy resources.
- ProjectAccessPolicy
- Represents an IAM v3 Access Policy parented by a Project. This policy defines rules that allow or deny access to resources within the specified project based on principals and conditions. See the Cloud IAM documentation for more details on Access Policies.
- ProjectAccessPolicyArgs
- The set of arguments for ProjectAccessPolicy. The set of arguments for ProjectAccessPolicy.
- ProjectAccessPolicyDetails
- ProjectAccessPolicyDetailsRule
- ProjectAccessPolicyDetailsRuleCondition
- ProjectAccessPolicyDetailsRuleOperation
- ProjectAccessPolicyState
- Input properties used for looking up and filtering ProjectAccessPolicy resources.
- ProjectsPolicyBinding
- A policy binding to a project. This is a Terraform resource, and maps to a policy binding resource in GCP.
- ProjectsPolicyBindingArgs
- The set of arguments for ProjectsPolicyBinding. The set of arguments for ProjectsPolicyBinding.
- ProjectsPolicyBindingCondition
- ProjectsPolicyBindingState
- Input properties used for looking up and filtering ProjectsPolicyBinding resources.
- ProjectsPolicyBindingTarget
- WorkforcePool
- Represents a collection of external workforces. Provides namespaces for federated users that can be referenced in IAM policies.
- WorkforcePoolAccessRestrictions
- WorkforcePoolAccessRestrictionsAllowedService
- WorkforcePoolArgs
- The set of arguments for WorkforcePool. The set of arguments for WorkforcePool.
- WorkforcePoolIamBinding
- Three different resources help you manage your IAM policy for Cloud IAM WorkforcePool. Each of these resources serves a different use case:
- WorkforcePoolIamBindingArgs
- The set of arguments for WorkforcePoolIamBinding. The set of arguments for WorkforcePoolIamBinding.
- WorkforcePoolIamBindingCondition
- WorkforcePoolIamBindingState
- Input properties used for looking up and filtering WorkforcePoolIamBinding resources.
- WorkforcePoolIamMember
- Three different resources help you manage your IAM policy for Cloud IAM WorkforcePool. Each of these resources serves a different use case:
- WorkforcePoolIamMemberArgs
- The set of arguments for WorkforcePoolIamMember. The set of arguments for WorkforcePoolIamMember.
- WorkforcePoolIamMemberCondition
- WorkforcePoolIamMemberState
- Input properties used for looking up and filtering WorkforcePoolIamMember resources.
- WorkforcePoolIamPolicy
- Three different resources help you manage your IAM policy for Cloud IAM WorkforcePool. Each of these resources serves a different use case:
- WorkforcePoolIamPolicyArgs
- The set of arguments for WorkforcePoolIamPolicy. The set of arguments for WorkforcePoolIamPolicy.
- WorkforcePoolIamPolicyState
- Input properties used for looking up and filtering WorkforcePoolIamPolicy resources.
- WorkforcePoolProvider
- A configuration for an external identity provider.
- WorkforcePoolProviderArgs
- The set of arguments for WorkforcePoolProvider. The set of arguments for WorkforcePoolProvider.
- WorkforcePoolProviderExtendedAttributesOauth2Client
- WorkforcePoolProviderExtendedAttributesOauth2ClientClientSecret
- WorkforcePoolProviderExtendedAttributesOauth2ClientClientSecretValue
- WorkforcePoolProviderExtendedAttributesOauth2ClientQueryParameters
- WorkforcePoolProviderExtraAttributesOauth2Client
- WorkforcePoolProviderExtraAttributesOauth2ClientClientSecret
- WorkforcePoolProviderExtraAttributesOauth2ClientClientSecretValue
- WorkforcePoolProviderExtraAttributesOauth2ClientQueryParameters
- WorkforcePoolProviderKey
- Represents a public key configuration for a Workforce Pool Provider. The key can be configured in your identity provider to encrypt SAML assertions. Google holds the corresponding private key, which it uses to decrypt encrypted tokens.
- WorkforcePoolProviderKeyArgs
- The set of arguments for WorkforcePoolProviderKey. The set of arguments for WorkforcePoolProviderKey.
- WorkforcePoolProviderKeyKeyData
- WorkforcePoolProviderKeyState
- Input properties used for looking up and filtering WorkforcePoolProviderKey resources.
- WorkforcePoolProviderOidc
- WorkforcePoolProviderOidcClientSecret
- WorkforcePoolProviderOidcClientSecretValue
- WorkforcePoolProviderOidcWebSsoConfig
- WorkforcePoolProviderSaml
- WorkforcePoolProviderScimTenant
- Represents a SCIM tenant configuration for a Workforce Pool Provider. The SCIM tenant configuration allows for the synchronization of user/group identities from external identity provider into Google Cloud using the System for Cross-domain Identity Management (SCIM) protocol.
- WorkforcePoolProviderScimTenantArgs
- The set of arguments for WorkforcePoolProviderScimTenant. The set of arguments for WorkforcePoolProviderScimTenant.
- WorkforcePoolProviderScimTenantState
- Input properties used for looking up and filtering WorkforcePoolProviderScimTenant resources.
- WorkforcePoolProviderScimToken
- Represents a SCIM Token for a Workforce Pool Provider Scim Tenant. The SCIM Token is used for authenticating SCIM provisioning requests during the synchronization of user/group identities from external identity provider into Google Cloud using the System for Cross-domain Identity Management (SCIM) protocol. This needs to be provided in the Secret (Long Lived) Token field when configuring SCIM on an IdP.
- WorkforcePoolProviderScimTokenArgs
- The set of arguments for WorkforcePoolProviderScimToken. The set of arguments for WorkforcePoolProviderScimToken.
- WorkforcePoolProviderScimTokenState
- Input properties used for looking up and filtering WorkforcePoolProviderScimToken resources.
- WorkforcePoolProviderState
- Input properties used for looking up and filtering WorkforcePoolProvider resources.
- WorkforcePoolState
- Input properties used for looking up and filtering WorkforcePool resources.
- WorkloadIdentityPool
- Represents a collection of external workload identities. You can define IAM policies to grant these identities access to Google Cloud resources.
- WorkloadIdentityPoolArgs
- The set of arguments for WorkloadIdentityPool. The set of arguments for WorkloadIdentityPool.
- WorkloadIdentityPoolAttestationRule
- WorkloadIdentityPoolIamBinding
- Three different resources help you manage your IAM policy for Cloud IAM WorkloadIdentityPool. Each of these resources serves a different use case:
- WorkloadIdentityPoolIamBindingArgs
- The set of arguments for WorkloadIdentityPoolIamBinding. The set of arguments for WorkloadIdentityPoolIamBinding.
- WorkloadIdentityPoolIamBindingCondition
- WorkloadIdentityPoolIamBindingState
- Input properties used for looking up and filtering WorkloadIdentityPoolIamBinding resources.
- WorkloadIdentityPoolIamMember
- Three different resources help you manage your IAM policy for Cloud IAM WorkloadIdentityPool. Each of these resources serves a different use case:
- WorkloadIdentityPoolIamMemberArgs
- The set of arguments for WorkloadIdentityPoolIamMember. The set of arguments for WorkloadIdentityPoolIamMember.
- WorkloadIdentityPoolIamMemberCondition
- WorkloadIdentityPoolIamMemberState
- Input properties used for looking up and filtering WorkloadIdentityPoolIamMember resources.
- WorkloadIdentityPoolIamPolicy
- Three different resources help you manage your IAM policy for Cloud IAM WorkloadIdentityPool. Each of these resources serves a different use case:
- WorkloadIdentityPoolIamPolicyArgs
- The set of arguments for WorkloadIdentityPoolIamPolicy. The set of arguments for WorkloadIdentityPoolIamPolicy.
- WorkloadIdentityPoolIamPolicyState
- Input properties used for looking up and filtering WorkloadIdentityPoolIamPolicy resources.
- WorkloadIdentityPoolInlineCertificateIssuanceConfig
- WorkloadIdentityPoolInlineTrustConfig
- WorkloadIdentityPoolInlineTrustConfigAdditionalTrustBundle
- WorkloadIdentityPoolInlineTrustConfigAdditionalTrustBundleTrustAnchor
- WorkloadIdentityPoolManagedIdentity
- Represents a managed identity for a workload identity pool namespace.
- WorkloadIdentityPoolManagedIdentityArgs
- The set of arguments for WorkloadIdentityPoolManagedIdentity. The set of arguments for WorkloadIdentityPoolManagedIdentity.
- WorkloadIdentityPoolManagedIdentityAttestationRule
- WorkloadIdentityPoolManagedIdentityState
- Input properties used for looking up and filtering WorkloadIdentityPoolManagedIdentity resources.
- WorkloadIdentityPoolNamespace
- Represents a namespace for a workload identity pool. Namespaces are used to segment identities within the pool.
- WorkloadIdentityPoolNamespaceArgs
- The set of arguments for WorkloadIdentityPoolNamespace. The set of arguments for WorkloadIdentityPoolNamespace.
- WorkloadIdentityPoolNamespaceOwnerService
- WorkloadIdentityPoolNamespaceState
- Input properties used for looking up and filtering WorkloadIdentityPoolNamespace resources.
- WorkloadIdentityPoolProvider
- A configuration for an external identity provider.
- WorkloadIdentityPoolProviderArgs
- The set of arguments for WorkloadIdentityPoolProvider. The set of arguments for WorkloadIdentityPoolProvider.
- WorkloadIdentityPoolProviderAws
- WorkloadIdentityPoolProviderOidc
- WorkloadIdentityPoolProviderSaml
- WorkloadIdentityPoolProviderState
- Input properties used for looking up and filtering WorkloadIdentityPoolProvider resources.
- WorkloadIdentityPoolProviderX509
- WorkloadIdentityPoolProviderX509TrustStore
- WorkloadIdentityPoolProviderX509TrustStoreIntermediateCa
- WorkloadIdentityPoolProviderX509TrustStoreTrustAnchor
- WorkloadIdentityPoolState
- Input properties used for looking up and filtering WorkloadIdentityPool resources.
- WorkloadIdentityServiceAgent
- A Service Agent within the Workload Identity API.
- WorkloadIdentityServiceAgentArgs
- The set of arguments for WorkloadIdentityServiceAgent. The set of arguments for WorkloadIdentityServiceAgent.
- WorkloadIdentityServiceAgentServiceAgent
- WorkloadIdentityServiceAgentState
- Input properties used for looking up and filtering WorkloadIdentityServiceAgent resources.
Functions
-
getRule(
GetRuleArgs args, {InvokeOptions? options}) → Future< GetRuleResult> - Use this data source to get information about a Google IAM Role.
-
getRuleOutput(
GetRuleArgs args, {InvokeOutputOptions? options}) → Output< GetRuleResult> -
getTestablePermissions(
GetTestablePermissionsArgs args, {InvokeOptions? options}) → Future< GetTestablePermissionsResult> - Retrieve a list of testable permissions for a resource. Testable permissions mean the permissions that user can add or remove in a role at a given resource. The resource can be referenced either via the full resource name or via a URI.
-
getTestablePermissionsOutput(
GetTestablePermissionsArgs args, {InvokeOutputOptions? options}) → Output< GetTestablePermissionsResult> -
getWorkforcePoolIamPolicy(
GetWorkforcePoolIamPolicyArgs args, {InvokeOptions? options}) → Future< GetWorkforcePoolIamPolicyResult> - Retrieves the current IAM policy data for workforcepool
-
getWorkforcePoolIamPolicyOutput(
GetWorkforcePoolIamPolicyArgs args, {InvokeOutputOptions? options}) → Output< GetWorkforcePoolIamPolicyResult> -
getWorkloadIdentityPool(
GetWorkloadIdentityPoolArgs args, {InvokeOptions? options}) → Future< GetWorkloadIdentityPoolResult> - Get a IAM workload identity pool from Google Cloud by its id.
-
getWorkloadIdentityPoolIamPolicy(
GetWorkloadIdentityPoolIamPolicyArgs args, {InvokeOptions? options}) → Future< GetWorkloadIdentityPoolIamPolicyResult> - Retrieves the current IAM policy data for workloadidentitypool
-
getWorkloadIdentityPoolIamPolicyOutput(
GetWorkloadIdentityPoolIamPolicyArgs args, {InvokeOutputOptions? options}) → Output< GetWorkloadIdentityPoolIamPolicyResult> -
getWorkloadIdentityPoolOpenidConfig(
GetWorkloadIdentityPoolOpenidConfigArgs args, {InvokeOptions? options}) → Future< GetWorkloadIdentityPoolOpenidConfigResult> -
Get the OpenID provider configuration (
/.well-known/openid-configuration) for an Agent Workload Identity Pool from Google Cloud. -
getWorkloadIdentityPoolOpenidConfigOutput(
GetWorkloadIdentityPoolOpenidConfigArgs args, {InvokeOutputOptions? options}) → Output< GetWorkloadIdentityPoolOpenidConfigResult> -
getWorkloadIdentityPoolOutput(
GetWorkloadIdentityPoolArgs args, {InvokeOutputOptions? options}) → Output< GetWorkloadIdentityPoolResult> -
getWorkloadIdentityPoolProvider(
GetWorkloadIdentityPoolProviderArgs args, {InvokeOptions? options}) → Future< GetWorkloadIdentityPoolProviderResult> - Get a IAM workload identity provider from Google Cloud by its id.
-
getWorkloadIdentityPoolProviderOutput(
GetWorkloadIdentityPoolProviderArgs args, {InvokeOutputOptions? options}) → Output< GetWorkloadIdentityPoolProviderResult>