@pulumi/aws 5.24.0 → 5.25.0-alpha.1671707862

package/iam/getOpenidConnectProvider.d.ts

@@ -69,6 +69,31 @@ export interface GetOpenidConnectProviderResult {
     readonly thumbprintLists: string[];
     readonly url: string;
 }
+/**
+ * This data source can be used to fetch information about a specific
+ * IAM OpenID Connect provider. By using this data source, you can retrieve the
+ * the resource information by either its `arn` or `url`.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = aws.iam.getOpenidConnectProvider({
+ *     arn: "arn:aws:iam::123456789012:oidc-provider/accounts.google.com",
+ * });
+ * ```
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = aws.iam.getOpenidConnectProvider({
+ *     url: "https://accounts.google.com",
+ * });
+ * ```
+ */
 export declare function getOpenidConnectProviderOutput(args?: GetOpenidConnectProviderOutputArgs, opts?: pulumi.InvokeOptions): pulumi.Output<GetOpenidConnectProviderResult>;
 /**
  * A collection of arguments for invoking getOpenidConnectProvider.

package/iam/getOpenidConnectProvider.js

@@ -32,10 +32,7 @@ const utilities = require("../utilities");
  */
 function getOpenidConnectProvider(args, opts) {
     args = args || {};
-    if (!opts) {
-        opts = {};
-    }
-    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
     return pulumi.runtime.invoke("aws:iam/getOpenidConnectProvider:getOpenidConnectProvider", {
         "arn": args.arn,
         "tags": args.tags,
@@ -43,8 +40,33 @@ function getOpenidConnectProvider(args, opts) {
     }, opts);
 }
 exports.getOpenidConnectProvider = getOpenidConnectProvider;
+/**
+ * This data source can be used to fetch information about a specific
+ * IAM OpenID Connect provider. By using this data source, you can retrieve the
+ * the resource information by either its `arn` or `url`.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = aws.iam.getOpenidConnectProvider({
+ *     arn: "arn:aws:iam::123456789012:oidc-provider/accounts.google.com",
+ * });
+ * ```
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = aws.iam.getOpenidConnectProvider({
+ *     url: "https://accounts.google.com",
+ * });
+ * ```
+ */
 function getOpenidConnectProviderOutput(args, opts) {
-    return pulumi.output(args).apply(a => getOpenidConnectProvider(a, opts));
+    return pulumi.output(args).apply((a) => getOpenidConnectProvider(a, opts));
 }
 exports.getOpenidConnectProviderOutput = getOpenidConnectProviderOutput;
 //# sourceMappingURL=getOpenidConnectProvider.js.map

package/iam/getOpenidConnectProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"getOpenidConnectProvider.js","sourceRoot":"","sources":["../../iam/getOpenidConnectProvider.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,SAAgB,wBAAwB,CAAC,IAAmC,EAAE,IAA2B;IACrG,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAClB,IAAI,CAAC,IAAI,EAAE;QACP,IAAI,GAAG,EAAE,CAAA;KACZ;IAED,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,2DAA2D,EAAE;QACtF,KAAK,EAAE,IAAI,CAAC,GAAG;QACf,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,KAAK,EAAE,IAAI,CAAC,GAAG;KAClB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAZD,4DAYC;AA4CD,SAAgB,8BAA8B,CAAC,IAAyC,EAAE,IAA2B;IACjH,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AAC5E,CAAC;AAFD,wEAEC"}
+{"version":3,"file":"getOpenidConnectProvider.js","sourceRoot":"","sources":["../../iam/getOpenidConnectProvider.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,SAAgB,wBAAwB,CAAC,IAAmC,EAAE,IAA2B;IACrG,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAElB,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,2DAA2D,EAAE;QACtF,KAAK,EAAE,IAAI,CAAC,GAAG;QACf,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,KAAK,EAAE,IAAI,CAAC,GAAG;KAClB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AATD,4DASC;AA2CD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,SAAgB,8BAA8B,CAAC,IAAyC,EAAE,IAA2B;IACjH,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,wBAAwB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AACnF,CAAC;AAFD,wEAEC"}

package/iam/getPolicy.d.ts

@@ -90,6 +90,32 @@ export interface GetPolicyResult {
         [key: string]: string;
     };
 }
+/**
+ * This data source can be used to fetch information about a specific
+ * IAM policy.
+ *
+ * ## Example Usage
+ * ### By ARN
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = aws.iam.getPolicy({
+ *     arn: "arn:aws:iam::123456789012:policy/UsersManageOwnCredentials",
+ * });
+ * ```
+ * ### By Name
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = aws.iam.getPolicy({
+ *     name: "test_policy",
+ * });
+ * ```
+ */
 export declare function getPolicyOutput(args?: GetPolicyOutputArgs, opts?: pulumi.InvokeOptions): pulumi.Output<GetPolicyResult>;
 /**
  * A collection of arguments for invoking getPolicy.

package/iam/getPolicy.js

@@ -33,10 +33,7 @@ const utilities = require("../utilities");
  */
 function getPolicy(args, opts) {
     args = args || {};
-    if (!opts) {
-        opts = {};
-    }
-    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
     return pulumi.runtime.invoke("aws:iam/getPolicy:getPolicy", {
         "arn": args.arn,
         "name": args.name,
@@ -45,8 +42,34 @@ function getPolicy(args, opts) {
     }, opts);
 }
 exports.getPolicy = getPolicy;
+/**
+ * This data source can be used to fetch information about a specific
+ * IAM policy.
+ *
+ * ## Example Usage
+ * ### By ARN
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = aws.iam.getPolicy({
+ *     arn: "arn:aws:iam::123456789012:policy/UsersManageOwnCredentials",
+ * });
+ * ```
+ * ### By Name
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = aws.iam.getPolicy({
+ *     name: "test_policy",
+ * });
+ * ```
+ */
 function getPolicyOutput(args, opts) {
-    return pulumi.output(args).apply(a => getPolicy(a, opts));
+    return pulumi.output(args).apply((a) => getPolicy(a, opts));
 }
 exports.getPolicyOutput = getPolicyOutput;
 //# sourceMappingURL=getPolicy.js.map

package/iam/getPolicy.js.map

@@ -1 +1 @@
-{"version":3,"file":"getPolicy.js","sourceRoot":"","sources":["../../iam/getPolicy.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,SAAgB,SAAS,CAAC,IAAoB,EAAE,IAA2B;IACvE,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAClB,IAAI,CAAC,IAAI,EAAE;QACP,IAAI,GAAG,EAAE,CAAA;KACZ;IAED,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,6BAA6B,EAAE;QACxD,KAAK,EAAE,IAAI,CAAC,GAAG;QACf,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,YAAY,EAAE,IAAI,CAAC,UAAU;QAC7B,MAAM,EAAE,IAAI,CAAC,IAAI;KACpB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAbD,8BAaC;AAgED,SAAgB,eAAe,CAAC,IAA0B,EAAE,IAA2B;IACnF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AAC7D,CAAC;AAFD,0CAEC"}
+{"version":3,"file":"getPolicy.js","sourceRoot":"","sources":["../../iam/getPolicy.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,SAAgB,SAAS,CAAC,IAAoB,EAAE,IAA2B;IACvE,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAElB,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,6BAA6B,EAAE;QACxD,KAAK,EAAE,IAAI,CAAC,GAAG;QACf,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,YAAY,EAAE,IAAI,CAAC,UAAU;QAC7B,MAAM,EAAE,IAAI,CAAC,IAAI;KACpB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAVD,8BAUC;AA+DD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,SAAgB,eAAe,CAAC,IAA0B,EAAE,IAA2B;IACnF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AACpE,CAAC;AAFD,0CAEC"}

package/iam/getPolicyDocument.d.ts

@@ -401,6 +401,342 @@ export interface GetPolicyDocumentResult {
     readonly statements?: outputs.iam.GetPolicyDocumentStatement[];
     readonly version?: string;
 }
+/**
+ * Generates an IAM policy document in JSON format for use with resources that expect policy documents such as `aws.iam.Policy`.
+ *
+ * Using this data source to generate policy documents is *optional*. It is also valid to use literal JSON strings in your configuration or to use the `file` interpolation function to read a raw JSON policy document from a file.
+ *
+ * ## Example Usage
+ * ### Basic Example
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const examplePolicyDocument = aws.iam.getPolicyDocument({
+ *     statements: [
+ *         {
+ *             sid: "1",
+ *             actions: [
+ *                 "s3:ListAllMyBuckets",
+ *                 "s3:GetBucketLocation",
+ *             ],
+ *             resources: ["arn:aws:s3:::*"],
+ *         },
+ *         {
+ *             actions: ["s3:ListBucket"],
+ *             resources: [`arn:aws:s3:::${_var.s3_bucket_name}`],
+ *             conditions: [{
+ *                 test: "StringLike",
+ *                 variable: "s3:prefix",
+ *                 values: [
+ *                     "",
+ *                     "home/",
+ *                     "home/&{aws:username}/",
+ *                 ],
+ *             }],
+ *         },
+ *         {
+ *             actions: ["s3:*"],
+ *             resources: [
+ *                 `arn:aws:s3:::${_var.s3_bucket_name}/home/&{aws:username}`,
+ *                 `arn:aws:s3:::${_var.s3_bucket_name}/home/&{aws:username}/*`,
+ *             ],
+ *         },
+ *     ],
+ * });
+ * const examplePolicy = new aws.iam.Policy("examplePolicy", {
+ *     path: "/",
+ *     policy: examplePolicyDocument.then(examplePolicyDocument => examplePolicyDocument.json),
+ * });
+ * ```
+ * ### Example Multiple Condition Keys and Values
+ *
+ * You can specify a [condition with multiple keys and values](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_multi-value-conditions.html) by supplying multiple `condition` blocks with the same `test` value, but differing `variable` and `values` values.
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const exampleMultipleConditionKeysAndValues = aws.iam.getPolicyDocument({
+ *     statements: [{
+ *         actions: [
+ *             "kms:Decrypt",
+ *             "kms:GenerateDataKey",
+ *         ],
+ *         conditions: [
+ *             {
+ *                 test: "ForAnyValue:StringEquals",
+ *                 values: ["pi"],
+ *                 variable: "kms:EncryptionContext:service",
+ *             },
+ *             {
+ *                 test: "ForAnyValue:StringEquals",
+ *                 values: ["rds"],
+ *                 variable: "kms:EncryptionContext:aws:pi:service",
+ *             },
+ *             {
+ *                 test: "ForAnyValue:StringEquals",
+ *                 values: [
+ *                     "db-AAAAABBBBBCCCCCDDDDDEEEEE",
+ *                     "db-EEEEEDDDDDCCCCCBBBBBAAAAA",
+ *                 ],
+ *                 variable: "kms:EncryptionContext:aws:rds:db-id",
+ *             },
+ *         ],
+ *         resources: ["*"],
+ *     }],
+ * });
+ * ```
+ *
+ * `data.aws_iam_policy_document.example_multiple_condition_keys_and_values.json` will evaluate to:
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * ```
+ * ### Example Assume-Role Policy with Multiple Principals
+ *
+ * You can specify multiple principal blocks with different types. You can also use this data source to generate an assume-role policy.
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const eventStreamBucketRoleAssumeRolePolicy = aws.iam.getPolicyDocument({
+ *     statements: [{
+ *         actions: ["sts:AssumeRole"],
+ *         principals: [
+ *             {
+ *                 type: "Service",
+ *                 identifiers: ["firehose.amazonaws.com"],
+ *             },
+ *             {
+ *                 type: "AWS",
+ *                 identifiers: [_var.trusted_role_arn],
+ *             },
+ *             {
+ *                 type: "Federated",
+ *                 identifiers: [
+ *                     `arn:aws:iam::${_var.account_id}:saml-provider/${_var.provider_name}`,
+ *                     "cognito-identity.amazonaws.com",
+ *                 ],
+ *             },
+ *         ],
+ *     }],
+ * });
+ * ```
+ * ### Example Using A Source Document
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const source = aws.iam.getPolicyDocument({
+ *     statements: [
+ *         {
+ *             actions: ["ec2:*"],
+ *             resources: ["*"],
+ *         },
+ *         {
+ *             sid: "SidToOverride",
+ *             actions: ["s3:*"],
+ *             resources: ["*"],
+ *         },
+ *     ],
+ * });
+ * const sourceDocumentExample = source.then(source => aws.iam.getPolicyDocument({
+ *     sourcePolicyDocuments: [source.json],
+ *     statements: [{
+ *         sid: "SidToOverride",
+ *         actions: ["s3:*"],
+ *         resources: [
+ *             "arn:aws:s3:::somebucket",
+ *             "arn:aws:s3:::somebucket/*",
+ *         ],
+ *     }],
+ * }));
+ * ```
+ *
+ * `data.aws_iam_policy_document.source_document_example.json` will evaluate to:
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * ```
+ * ### Example Using An Override Document
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const override = aws.iam.getPolicyDocument({
+ *     statements: [{
+ *         sid: "SidToOverride",
+ *         actions: ["s3:*"],
+ *         resources: ["*"],
+ *     }],
+ * });
+ * const overridePolicyDocumentExample = override.then(override => aws.iam.getPolicyDocument({
+ *     overridePolicyDocuments: [override.json],
+ *     statements: [
+ *         {
+ *             actions: ["ec2:*"],
+ *             resources: ["*"],
+ *         },
+ *         {
+ *             sid: "SidToOverride",
+ *             actions: ["s3:*"],
+ *             resources: [
+ *                 "arn:aws:s3:::somebucket",
+ *                 "arn:aws:s3:::somebucket/*",
+ *             ],
+ *         },
+ *     ],
+ * }));
+ * ```
+ *
+ * `data.aws_iam_policy_document.override_policy_document_example.json` will evaluate to:
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * ```
+ * ### Example with Both Source and Override Documents
+ *
+ * You can also combine `sourcePolicyDocuments` and `overridePolicyDocuments` in the same document.
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const source = aws.iam.getPolicyDocument({
+ *     statements: [{
+ *         sid: "OverridePlaceholder",
+ *         actions: ["ec2:DescribeAccountAttributes"],
+ *         resources: ["*"],
+ *     }],
+ * });
+ * const override = aws.iam.getPolicyDocument({
+ *     statements: [{
+ *         sid: "OverridePlaceholder",
+ *         actions: ["s3:GetObject"],
+ *         resources: ["*"],
+ *     }],
+ * });
+ * const politik = Promise.all([source, override]).then(([source, override]) => aws.iam.getPolicyDocument({
+ *     sourcePolicyDocuments: [source.json],
+ *     overridePolicyDocuments: [override.json],
+ * }));
+ * ```
+ *
+ * `data.aws_iam_policy_document.politik.json` will evaluate to:
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * ```
+ * ### Example of Merging Source Documents
+ *
+ * Multiple documents can be combined using the `sourcePolicyDocuments` or `overridePolicyDocuments` attributes. `sourcePolicyDocuments` requires that all documents have unique Sids, while `overridePolicyDocuments` will iteratively override matching Sids.
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const sourceOne = aws.iam.getPolicyDocument({
+ *     statements: [
+ *         {
+ *             actions: ["ec2:*"],
+ *             resources: ["*"],
+ *         },
+ *         {
+ *             sid: "UniqueSidOne",
+ *             actions: ["s3:*"],
+ *             resources: ["*"],
+ *         },
+ *     ],
+ * });
+ * const sourceTwo = aws.iam.getPolicyDocument({
+ *     statements: [
+ *         {
+ *             sid: "UniqueSidTwo",
+ *             actions: ["iam:*"],
+ *             resources: ["*"],
+ *         },
+ *         {
+ *             actions: ["lambda:*"],
+ *             resources: ["*"],
+ *         },
+ *     ],
+ * });
+ * const combined = Promise.all([sourceOne, sourceTwo]).then(([sourceOne, sourceTwo]) => aws.iam.getPolicyDocument({
+ *     sourcePolicyDocuments: [
+ *         sourceOne.json,
+ *         sourceTwo.json,
+ *     ],
+ * }));
+ * ```
+ *
+ * `data.aws_iam_policy_document.combined.json` will evaluate to:
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * ```
+ * ### Example of Merging Override Documents
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const policyOne = aws.iam.getPolicyDocument({
+ *     statements: [{
+ *         sid: "OverridePlaceHolderOne",
+ *         effect: "Allow",
+ *         actions: ["s3:*"],
+ *         resources: ["*"],
+ *     }],
+ * });
+ * const policyTwo = aws.iam.getPolicyDocument({
+ *     statements: [
+ *         {
+ *             effect: "Allow",
+ *             actions: ["ec2:*"],
+ *             resources: ["*"],
+ *         },
+ *         {
+ *             sid: "OverridePlaceHolderTwo",
+ *             effect: "Allow",
+ *             actions: ["iam:*"],
+ *             resources: ["*"],
+ *         },
+ *     ],
+ * });
+ * const policyThree = aws.iam.getPolicyDocument({
+ *     statements: [{
+ *         sid: "OverridePlaceHolderOne",
+ *         effect: "Deny",
+ *         actions: ["logs:*"],
+ *         resources: ["*"],
+ *     }],
+ * });
+ * const combined = Promise.all([policyOne, policyTwo, policyThree]).then(([policyOne, policyTwo, policyThree]) => aws.iam.getPolicyDocument({
+ *     overridePolicyDocuments: [
+ *         policyOne.json,
+ *         policyTwo.json,
+ *         policyThree.json,
+ *     ],
+ *     statements: [{
+ *         sid: "OverridePlaceHolderTwo",
+ *         effect: "Deny",
+ *         actions: ["*"],
+ *         resources: ["*"],
+ *     }],
+ * }));
+ * ```
+ *
+ * `data.aws_iam_policy_document.combined.json` will evaluate to:
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * ```
+ */
 export declare function getPolicyDocumentOutput(args?: GetPolicyDocumentOutputArgs, opts?: pulumi.InvokeOptions): pulumi.Output<GetPolicyDocumentResult>;
 /**
  * A collection of arguments for invoking getPolicyDocument.