@pulumi/aws 6.13.0 → 6.13.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +4 -4
- package/apigateway/basePathMapping.d.ts +3 -3
- package/apigateway/basePathMapping.js +3 -3
- package/apigateway/domainName.d.ts +3 -3
- package/apigateway/domainName.js +3 -3
- package/appsync/function.d.ts +1 -1
- package/appsync/function.js +1 -1
- package/appsync/resolver.d.ts +1 -1
- package/appsync/resolver.js +1 -1
- package/cloudfront/fieldLevelEncryptionProfile.d.ts +1 -1
- package/cloudfront/fieldLevelEncryptionProfile.js +1 -1
- package/cloudfront/function.d.ts +1 -1
- package/cloudfront/function.js +1 -1
- package/cloudfront/keyGroup.d.ts +1 -1
- package/cloudfront/keyGroup.js +1 -1
- package/cloudfront/publicKey.d.ts +1 -1
- package/cloudfront/publicKey.js +1 -1
- package/cognito/identityPool.d.ts +1 -1
- package/cognito/identityPool.js +1 -1
- package/docdb/elasticCluster.d.ts +217 -0
- package/docdb/elasticCluster.js +107 -0
- package/docdb/elasticCluster.js.map +1 -0
- package/docdb/index.d.ts +3 -0
- package/docdb/index.js +6 -1
- package/docdb/index.js.map +1 -1
- package/ecs/taskDefinition.d.ts +4 -4
- package/ecs/taskDefinition.js +4 -4
- package/eks/index.d.ts +3 -0
- package/eks/index.js +6 -1
- package/eks/index.js.map +1 -1
- package/eks/podIdentityAssociation.d.ts +192 -0
- package/eks/podIdentityAssociation.js +129 -0
- package/eks/podIdentityAssociation.js.map +1 -0
- package/elasticsearch/domainSamlOptions.d.ts +1 -1
- package/elasticsearch/domainSamlOptions.js +1 -1
- package/elb/loadBalancerBackendServerPolicy.d.ts +1 -1
- package/elb/loadBalancerBackendServerPolicy.js +1 -1
- package/elb/loadBalancerPolicy.d.ts +1 -1
- package/elb/loadBalancerPolicy.js +1 -1
- package/iam/samlProvider.d.ts +1 -1
- package/iam/samlProvider.js +1 -1
- package/iam/serverCertificate.d.ts +4 -4
- package/iam/serverCertificate.js +4 -4
- package/iam/signingCertificate.d.ts +1 -1
- package/iam/signingCertificate.js +1 -1
- package/iot/authorizer.d.ts +1 -1
- package/iot/authorizer.js +1 -1
- package/iot/certificate.d.ts +2 -2
- package/iot/certificate.js +2 -2
- package/iot/policyAttachment.d.ts +1 -1
- package/iot/policyAttachment.js +1 -1
- package/iot/thingPrincipalAttachment.d.ts +1 -1
- package/iot/thingPrincipalAttachment.js +1 -1
- package/ivs/playbackKeyPair.d.ts +1 -1
- package/ivs/playbackKeyPair.js +1 -1
- package/kms/customKeyStore.d.ts +1 -1
- package/kms/customKeyStore.js +1 -1
- package/lightsail/keyPair.d.ts +1 -1
- package/lightsail/keyPair.js +1 -1
- package/networkfirewall/ruleGroup.d.ts +2 -2
- package/networkfirewall/ruleGroup.js +2 -2
- package/opensearch/domainSamlOptions.d.ts +1 -1
- package/opensearch/domainSamlOptions.js +1 -1
- package/opsworks/application.d.ts +2 -2
- package/opsworks/application.js +2 -2
- package/package.json +1 -1
- package/pinpoint/apnsChannel.d.ts +2 -2
- package/pinpoint/apnsChannel.js +2 -2
- package/pinpoint/apnsSandboxChannel.d.ts +2 -2
- package/pinpoint/apnsSandboxChannel.js +2 -2
- package/pinpoint/apnsVoipChannel.d.ts +2 -2
- package/pinpoint/apnsVoipChannel.js +2 -2
- package/pinpoint/apnsVoipSandboxChannel.d.ts +2 -2
- package/pinpoint/apnsVoipSandboxChannel.js +2 -2
- package/s3/bucket.d.ts +1 -1
- package/s3/bucket.js +1 -1
- package/s3control/accessGrant.d.ts +198 -0
- package/s3control/accessGrant.js +116 -0
- package/s3control/accessGrant.js.map +1 -0
- package/s3control/accessGrantsInstance.d.ts +139 -0
- package/s3control/accessGrantsInstance.js +93 -0
- package/s3control/accessGrantsInstance.js.map +1 -0
- package/s3control/accessGrantsInstanceResourcePolicy.d.ts +28 -0
- package/s3control/accessGrantsInstanceResourcePolicy.js +28 -0
- package/s3control/accessGrantsInstanceResourcePolicy.js.map +1 -1
- package/s3control/accessGrantsLocation.d.ts +146 -0
- package/s3control/accessGrantsLocation.js +99 -0
- package/s3control/accessGrantsLocation.js.map +1 -0
- package/s3control/index.d.ts +9 -0
- package/s3control/index.js +16 -1
- package/s3control/index.js.map +1 -1
- package/sagemaker/humanTaskUI.d.ts +1 -1
- package/sagemaker/humanTaskUI.js +1 -1
- package/transfer/certificate.d.ts +3 -3
- package/transfer/certificate.js +3 -3
- package/types/input.d.ts +21 -0
- package/types/output.d.ts +21 -0
- package/utilities.d.ts +4 -0
- package/utilities.js +33 -1
- package/utilities.js.map +1 -1
- package/worklink/fleet.d.ts +1 -1
- package/worklink/fleet.js +1 -1
- package/worklink/websiteCertificateAuthorityAssociation.d.ts +1 -1
- package/worklink/websiteCertificateAuthorityAssociation.js +1 -1
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"accessGrant.js","sourceRoot":"","sources":["../../s3control/accessGrant.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,MAAa,WAAY,SAAQ,MAAM,CAAC,cAAc;IAClD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwB,EAAE,IAAmC;QACtH,OAAO,IAAI,WAAW,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAClE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,YAAY,CAAC;IAC5D,CAAC;IAsDD,YAAY,IAAY,EAAE,WAAgD,EAAE,IAAmC;QAC3G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2C,CAAC;YAC1D,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,mCAAmC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC,SAAS,CAAC;YAClH,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAA0C,CAAC;YACxD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,sBAAsB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;aACzE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,cAAc,CAAC,mCAAmC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC,CAAC,SAAS,CAAC;YAChH,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,gBAAgB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACrD,cAAc,CAAC,eAAe,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACpD,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACjD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5D,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;;AAxHL,kCAyHC;AA3GG,gBAAgB;AACO,wBAAY,GAAG,uCAAuC,CAAC"}
|
|
@@ -0,0 +1,139 @@
|
|
|
1
|
+
import * as pulumi from "@pulumi/pulumi";
|
|
2
|
+
/**
|
|
3
|
+
* Provides a resource to manage an S3 Access Grants instance, which serves as a logical grouping for access grants.
|
|
4
|
+
* You can have one S3 Access Grants instance per Region in your account.
|
|
5
|
+
*
|
|
6
|
+
* ## Example Usage
|
|
7
|
+
* ### Basic Usage
|
|
8
|
+
*
|
|
9
|
+
* ```typescript
|
|
10
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
11
|
+
* import * as aws from "@pulumi/aws";
|
|
12
|
+
*
|
|
13
|
+
* const example = new aws.s3control.AccessGrantsInstance("example", {});
|
|
14
|
+
* ```
|
|
15
|
+
* ### AWS IAM Identity Center
|
|
16
|
+
*
|
|
17
|
+
* ```typescript
|
|
18
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
19
|
+
* import * as aws from "@pulumi/aws";
|
|
20
|
+
*
|
|
21
|
+
* const example = new aws.s3control.AccessGrantsInstance("example", {identityCenterArn: "arn:aws:sso:::instance/ssoins-890759e9c7bfdc1d"});
|
|
22
|
+
* ```
|
|
23
|
+
*
|
|
24
|
+
* ## Import
|
|
25
|
+
*
|
|
26
|
+
* Using `pulumi import`, import S3 Access Grants instances using the `account_id`. For example:
|
|
27
|
+
*
|
|
28
|
+
* ```sh
|
|
29
|
+
* $ pulumi import aws:s3control/accessGrantsInstance:AccessGrantsInstance example 123456789012
|
|
30
|
+
* ```
|
|
31
|
+
*/
|
|
32
|
+
export declare class AccessGrantsInstance extends pulumi.CustomResource {
|
|
33
|
+
/**
|
|
34
|
+
* Get an existing AccessGrantsInstance resource's state with the given name, ID, and optional extra
|
|
35
|
+
* properties used to qualify the lookup.
|
|
36
|
+
*
|
|
37
|
+
* @param name The _unique_ name of the resulting resource.
|
|
38
|
+
* @param id The _unique_ provider ID of the resource to lookup.
|
|
39
|
+
* @param state Any extra arguments used during the lookup.
|
|
40
|
+
* @param opts Optional settings to control the behavior of the CustomResource.
|
|
41
|
+
*/
|
|
42
|
+
static get(name: string, id: pulumi.Input<pulumi.ID>, state?: AccessGrantsInstanceState, opts?: pulumi.CustomResourceOptions): AccessGrantsInstance;
|
|
43
|
+
/**
|
|
44
|
+
* Returns true if the given object is an instance of AccessGrantsInstance. This is designed to work even
|
|
45
|
+
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
46
|
+
*/
|
|
47
|
+
static isInstance(obj: any): obj is AccessGrantsInstance;
|
|
48
|
+
/**
|
|
49
|
+
* Amazon Resource Name (ARN) of the S3 Access Grants instance.
|
|
50
|
+
*/
|
|
51
|
+
readonly accessGrantsInstanceArn: pulumi.Output<string>;
|
|
52
|
+
/**
|
|
53
|
+
* Unique ID of the S3 Access Grants instance.
|
|
54
|
+
*/
|
|
55
|
+
readonly accessGrantsInstanceId: pulumi.Output<string>;
|
|
56
|
+
readonly accountId: pulumi.Output<string>;
|
|
57
|
+
/**
|
|
58
|
+
* The ARN of the AWS IAM Identity Center instance application; a subresource of the original Identity Center instance.
|
|
59
|
+
*/
|
|
60
|
+
readonly identityCenterApplicationArn: pulumi.Output<string>;
|
|
61
|
+
/**
|
|
62
|
+
* The ARN of the AWS IAM Identity Center instance associated with the S3 Access Grants instance.
|
|
63
|
+
*/
|
|
64
|
+
readonly identityCenterArn: pulumi.Output<string | undefined>;
|
|
65
|
+
/**
|
|
66
|
+
* Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
|
|
67
|
+
*/
|
|
68
|
+
readonly tags: pulumi.Output<{
|
|
69
|
+
[key: string]: string;
|
|
70
|
+
} | undefined>;
|
|
71
|
+
/**
|
|
72
|
+
* A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
|
|
73
|
+
*
|
|
74
|
+
* @deprecated Please use `tags` instead.
|
|
75
|
+
*/
|
|
76
|
+
readonly tagsAll: pulumi.Output<{
|
|
77
|
+
[key: string]: string;
|
|
78
|
+
}>;
|
|
79
|
+
/**
|
|
80
|
+
* Create a AccessGrantsInstance resource with the given unique name, arguments, and options.
|
|
81
|
+
*
|
|
82
|
+
* @param name The _unique_ name of the resource.
|
|
83
|
+
* @param args The arguments to use to populate this resource's properties.
|
|
84
|
+
* @param opts A bag of options that control this resource's behavior.
|
|
85
|
+
*/
|
|
86
|
+
constructor(name: string, args?: AccessGrantsInstanceArgs, opts?: pulumi.CustomResourceOptions);
|
|
87
|
+
}
|
|
88
|
+
/**
|
|
89
|
+
* Input properties used for looking up and filtering AccessGrantsInstance resources.
|
|
90
|
+
*/
|
|
91
|
+
export interface AccessGrantsInstanceState {
|
|
92
|
+
/**
|
|
93
|
+
* Amazon Resource Name (ARN) of the S3 Access Grants instance.
|
|
94
|
+
*/
|
|
95
|
+
accessGrantsInstanceArn?: pulumi.Input<string>;
|
|
96
|
+
/**
|
|
97
|
+
* Unique ID of the S3 Access Grants instance.
|
|
98
|
+
*/
|
|
99
|
+
accessGrantsInstanceId?: pulumi.Input<string>;
|
|
100
|
+
accountId?: pulumi.Input<string>;
|
|
101
|
+
/**
|
|
102
|
+
* The ARN of the AWS IAM Identity Center instance application; a subresource of the original Identity Center instance.
|
|
103
|
+
*/
|
|
104
|
+
identityCenterApplicationArn?: pulumi.Input<string>;
|
|
105
|
+
/**
|
|
106
|
+
* The ARN of the AWS IAM Identity Center instance associated with the S3 Access Grants instance.
|
|
107
|
+
*/
|
|
108
|
+
identityCenterArn?: pulumi.Input<string>;
|
|
109
|
+
/**
|
|
110
|
+
* Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
|
|
111
|
+
*/
|
|
112
|
+
tags?: pulumi.Input<{
|
|
113
|
+
[key: string]: pulumi.Input<string>;
|
|
114
|
+
}>;
|
|
115
|
+
/**
|
|
116
|
+
* A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
|
|
117
|
+
*
|
|
118
|
+
* @deprecated Please use `tags` instead.
|
|
119
|
+
*/
|
|
120
|
+
tagsAll?: pulumi.Input<{
|
|
121
|
+
[key: string]: pulumi.Input<string>;
|
|
122
|
+
}>;
|
|
123
|
+
}
|
|
124
|
+
/**
|
|
125
|
+
* The set of arguments for constructing a AccessGrantsInstance resource.
|
|
126
|
+
*/
|
|
127
|
+
export interface AccessGrantsInstanceArgs {
|
|
128
|
+
accountId?: pulumi.Input<string>;
|
|
129
|
+
/**
|
|
130
|
+
* The ARN of the AWS IAM Identity Center instance associated with the S3 Access Grants instance.
|
|
131
|
+
*/
|
|
132
|
+
identityCenterArn?: pulumi.Input<string>;
|
|
133
|
+
/**
|
|
134
|
+
* Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
|
|
135
|
+
*/
|
|
136
|
+
tags?: pulumi.Input<{
|
|
137
|
+
[key: string]: pulumi.Input<string>;
|
|
138
|
+
}>;
|
|
139
|
+
}
|
|
@@ -0,0 +1,93 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
|
|
3
|
+
// *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
5
|
+
exports.AccessGrantsInstance = void 0;
|
|
6
|
+
const pulumi = require("@pulumi/pulumi");
|
|
7
|
+
const utilities = require("../utilities");
|
|
8
|
+
/**
|
|
9
|
+
* Provides a resource to manage an S3 Access Grants instance, which serves as a logical grouping for access grants.
|
|
10
|
+
* You can have one S3 Access Grants instance per Region in your account.
|
|
11
|
+
*
|
|
12
|
+
* ## Example Usage
|
|
13
|
+
* ### Basic Usage
|
|
14
|
+
*
|
|
15
|
+
* ```typescript
|
|
16
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
17
|
+
* import * as aws from "@pulumi/aws";
|
|
18
|
+
*
|
|
19
|
+
* const example = new aws.s3control.AccessGrantsInstance("example", {});
|
|
20
|
+
* ```
|
|
21
|
+
* ### AWS IAM Identity Center
|
|
22
|
+
*
|
|
23
|
+
* ```typescript
|
|
24
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
25
|
+
* import * as aws from "@pulumi/aws";
|
|
26
|
+
*
|
|
27
|
+
* const example = new aws.s3control.AccessGrantsInstance("example", {identityCenterArn: "arn:aws:sso:::instance/ssoins-890759e9c7bfdc1d"});
|
|
28
|
+
* ```
|
|
29
|
+
*
|
|
30
|
+
* ## Import
|
|
31
|
+
*
|
|
32
|
+
* Using `pulumi import`, import S3 Access Grants instances using the `account_id`. For example:
|
|
33
|
+
*
|
|
34
|
+
* ```sh
|
|
35
|
+
* $ pulumi import aws:s3control/accessGrantsInstance:AccessGrantsInstance example 123456789012
|
|
36
|
+
* ```
|
|
37
|
+
*/
|
|
38
|
+
class AccessGrantsInstance extends pulumi.CustomResource {
|
|
39
|
+
/**
|
|
40
|
+
* Get an existing AccessGrantsInstance resource's state with the given name, ID, and optional extra
|
|
41
|
+
* properties used to qualify the lookup.
|
|
42
|
+
*
|
|
43
|
+
* @param name The _unique_ name of the resulting resource.
|
|
44
|
+
* @param id The _unique_ provider ID of the resource to lookup.
|
|
45
|
+
* @param state Any extra arguments used during the lookup.
|
|
46
|
+
* @param opts Optional settings to control the behavior of the CustomResource.
|
|
47
|
+
*/
|
|
48
|
+
static get(name, id, state, opts) {
|
|
49
|
+
return new AccessGrantsInstance(name, state, Object.assign(Object.assign({}, opts), { id: id }));
|
|
50
|
+
}
|
|
51
|
+
/**
|
|
52
|
+
* Returns true if the given object is an instance of AccessGrantsInstance. This is designed to work even
|
|
53
|
+
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
54
|
+
*/
|
|
55
|
+
static isInstance(obj) {
|
|
56
|
+
if (obj === undefined || obj === null) {
|
|
57
|
+
return false;
|
|
58
|
+
}
|
|
59
|
+
return obj['__pulumiType'] === AccessGrantsInstance.__pulumiType;
|
|
60
|
+
}
|
|
61
|
+
constructor(name, argsOrState, opts) {
|
|
62
|
+
let resourceInputs = {};
|
|
63
|
+
opts = opts || {};
|
|
64
|
+
if (opts.id) {
|
|
65
|
+
const state = argsOrState;
|
|
66
|
+
resourceInputs["accessGrantsInstanceArn"] = state ? state.accessGrantsInstanceArn : undefined;
|
|
67
|
+
resourceInputs["accessGrantsInstanceId"] = state ? state.accessGrantsInstanceId : undefined;
|
|
68
|
+
resourceInputs["accountId"] = state ? state.accountId : undefined;
|
|
69
|
+
resourceInputs["identityCenterApplicationArn"] = state ? state.identityCenterApplicationArn : undefined;
|
|
70
|
+
resourceInputs["identityCenterArn"] = state ? state.identityCenterArn : undefined;
|
|
71
|
+
resourceInputs["tags"] = state ? state.tags : undefined;
|
|
72
|
+
resourceInputs["tagsAll"] = state ? state.tagsAll : undefined;
|
|
73
|
+
}
|
|
74
|
+
else {
|
|
75
|
+
const args = argsOrState;
|
|
76
|
+
resourceInputs["accountId"] = args ? args.accountId : undefined;
|
|
77
|
+
resourceInputs["identityCenterArn"] = args ? args.identityCenterArn : undefined;
|
|
78
|
+
resourceInputs["tags"] = args ? args.tags : undefined;
|
|
79
|
+
resourceInputs["accessGrantsInstanceArn"] = undefined /*out*/;
|
|
80
|
+
resourceInputs["accessGrantsInstanceId"] = undefined /*out*/;
|
|
81
|
+
resourceInputs["identityCenterApplicationArn"] = undefined /*out*/;
|
|
82
|
+
resourceInputs["tagsAll"] = undefined /*out*/;
|
|
83
|
+
}
|
|
84
|
+
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
|
|
85
|
+
const secretOpts = { additionalSecretOutputs: ["tagsAll"] };
|
|
86
|
+
opts = pulumi.mergeOptions(opts, secretOpts);
|
|
87
|
+
super(AccessGrantsInstance.__pulumiType, name, resourceInputs, opts);
|
|
88
|
+
}
|
|
89
|
+
}
|
|
90
|
+
exports.AccessGrantsInstance = AccessGrantsInstance;
|
|
91
|
+
/** @internal */
|
|
92
|
+
AccessGrantsInstance.__pulumiType = 'aws:s3control/accessGrantsInstance:AccessGrantsInstance';
|
|
93
|
+
//# sourceMappingURL=accessGrantsInstance.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"accessGrantsInstance.js","sourceRoot":"","sources":["../../s3control/accessGrantsInstance.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAa,oBAAqB,SAAQ,MAAM,CAAC,cAAc;IAC3D;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAiC,EAAE,IAAmC;QAC/H,OAAO,IAAI,oBAAoB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC3E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,oBAAoB,CAAC,YAAY,CAAC;IACrE,CAAC;IAsCD,YAAY,IAAY,EAAE,WAAkE,EAAE,IAAmC;QAC7H,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAoD,CAAC;YACnE,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,8BAA8B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC,SAAS,CAAC;YACxG,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAAmD,CAAC;YACjE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,yBAAyB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9D,cAAc,CAAC,wBAAwB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC7D,cAAc,CAAC,8BAA8B,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACnE,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACjD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5D,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,oBAAoB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACzE,CAAC;;AA1FL,oDA2FC;AA7EG,gBAAgB;AACO,iCAAY,GAAG,yDAAyD,CAAC"}
|
|
@@ -3,6 +3,34 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
3
3
|
* Provides a resource to manage an S3 Access Grants instance resource policy.
|
|
4
4
|
* Use a resource policy to manage cross-account access to your S3 Access Grants instance.
|
|
5
5
|
*
|
|
6
|
+
* ## Example Usage
|
|
7
|
+
*
|
|
8
|
+
* ```typescript
|
|
9
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
10
|
+
* import * as aws from "@pulumi/aws";
|
|
11
|
+
*
|
|
12
|
+
* const exampleAccessGrantsInstance = new aws.s3control.AccessGrantsInstance("exampleAccessGrantsInstance", {});
|
|
13
|
+
* const exampleAccessGrantsInstanceResourcePolicy = new aws.s3control.AccessGrantsInstanceResourcePolicy("exampleAccessGrantsInstanceResourcePolicy", {policy: pulumi.interpolate`{
|
|
14
|
+
* "Version": "2012-10-17",
|
|
15
|
+
* "Id": "S3AccessGrantsPolicy",
|
|
16
|
+
* "Statement": [{
|
|
17
|
+
* "Sid": "AllowAccessToS3AccessGrants",
|
|
18
|
+
* "Effect": "Allow",
|
|
19
|
+
* "Principal": {
|
|
20
|
+
* "AWS": "123456789456"
|
|
21
|
+
* },
|
|
22
|
+
* "Action": [
|
|
23
|
+
* "s3:ListAccessGrants",
|
|
24
|
+
* "s3:ListAccessGrantsLocations",
|
|
25
|
+
* "s3:GetDataAccess"
|
|
26
|
+
* ],
|
|
27
|
+
* "Resource": "${exampleAccessGrantsInstance.accessGrantsInstanceArn}"
|
|
28
|
+
* }]
|
|
29
|
+
* }
|
|
30
|
+
*
|
|
31
|
+
* `});
|
|
32
|
+
* ```
|
|
33
|
+
*
|
|
6
34
|
* ## Import
|
|
7
35
|
*
|
|
8
36
|
* Using `pulumi import`, import S3 Access Grants instance resource policies using the `account_id`. For example:
|
|
@@ -9,6 +9,34 @@ const utilities = require("../utilities");
|
|
|
9
9
|
* Provides a resource to manage an S3 Access Grants instance resource policy.
|
|
10
10
|
* Use a resource policy to manage cross-account access to your S3 Access Grants instance.
|
|
11
11
|
*
|
|
12
|
+
* ## Example Usage
|
|
13
|
+
*
|
|
14
|
+
* ```typescript
|
|
15
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
16
|
+
* import * as aws from "@pulumi/aws";
|
|
17
|
+
*
|
|
18
|
+
* const exampleAccessGrantsInstance = new aws.s3control.AccessGrantsInstance("exampleAccessGrantsInstance", {});
|
|
19
|
+
* const exampleAccessGrantsInstanceResourcePolicy = new aws.s3control.AccessGrantsInstanceResourcePolicy("exampleAccessGrantsInstanceResourcePolicy", {policy: pulumi.interpolate`{
|
|
20
|
+
* "Version": "2012-10-17",
|
|
21
|
+
* "Id": "S3AccessGrantsPolicy",
|
|
22
|
+
* "Statement": [{
|
|
23
|
+
* "Sid": "AllowAccessToS3AccessGrants",
|
|
24
|
+
* "Effect": "Allow",
|
|
25
|
+
* "Principal": {
|
|
26
|
+
* "AWS": "123456789456"
|
|
27
|
+
* },
|
|
28
|
+
* "Action": [
|
|
29
|
+
* "s3:ListAccessGrants",
|
|
30
|
+
* "s3:ListAccessGrantsLocations",
|
|
31
|
+
* "s3:GetDataAccess"
|
|
32
|
+
* ],
|
|
33
|
+
* "Resource": "${exampleAccessGrantsInstance.accessGrantsInstanceArn}"
|
|
34
|
+
* }]
|
|
35
|
+
* }
|
|
36
|
+
*
|
|
37
|
+
* `});
|
|
38
|
+
* ```
|
|
39
|
+
*
|
|
12
40
|
* ## Import
|
|
13
41
|
*
|
|
14
42
|
* Using `pulumi import`, import S3 Access Grants instance resource policies using the `account_id`. For example:
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"accessGrantsInstanceResourcePolicy.js","sourceRoot":"","sources":["../../s3control/accessGrantsInstanceResourcePolicy.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C
|
|
1
|
+
{"version":3,"file":"accessGrantsInstanceResourcePolicy.js","sourceRoot":"","sources":["../../s3control/accessGrantsInstanceResourcePolicy.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAa,kCAAmC,SAAQ,MAAM,CAAC,cAAc;IACzE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA+C,EAAE,IAAmC;QAC7I,OAAO,IAAI,kCAAkC,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACzF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,kCAAkC,CAAC,YAAY,CAAC;IACnF,CAAC;IAgBD,YAAY,IAAY,EAAE,WAA8F,EAAE,IAAmC;QACzJ,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAkE,CAAC;YACjF,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;aAAM;YACH,MAAM,IAAI,GAAG,WAAiE,CAAC;YAC/E,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,kCAAkC,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACvF,CAAC;;AA3DL,gFA4DC;AA9CG,gBAAgB;AACO,+CAAY,GAAG,qFAAqF,CAAC"}
|
|
@@ -0,0 +1,146 @@
|
|
|
1
|
+
import * as pulumi from "@pulumi/pulumi";
|
|
2
|
+
/**
|
|
3
|
+
* Provides a resource to manage an S3 Access Grants location.
|
|
4
|
+
* A location is an S3 resource (bucket or prefix) in a permission grant that the grantee can access.
|
|
5
|
+
* The S3 data must be in the same Region as your S3 Access Grants instance.
|
|
6
|
+
* When you register a location, you must include the IAM role that has permission to manage the S3 location that you are registering.
|
|
7
|
+
*
|
|
8
|
+
* ## Example Usage
|
|
9
|
+
*
|
|
10
|
+
* ```typescript
|
|
11
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
12
|
+
* import * as aws from "@pulumi/aws";
|
|
13
|
+
*
|
|
14
|
+
* const exampleAccessGrantsInstance = new aws.s3control.AccessGrantsInstance("exampleAccessGrantsInstance", {});
|
|
15
|
+
* const exampleAccessGrantsLocation = new aws.s3control.AccessGrantsLocation("exampleAccessGrantsLocation", {
|
|
16
|
+
* iamRoleArn: aws_iam_role.example.arn,
|
|
17
|
+
* locationScope: "s3://",
|
|
18
|
+
* }, {
|
|
19
|
+
* dependsOn: [exampleAccessGrantsInstance],
|
|
20
|
+
* });
|
|
21
|
+
* // Default scope.
|
|
22
|
+
* ```
|
|
23
|
+
*
|
|
24
|
+
* ## Import
|
|
25
|
+
*
|
|
26
|
+
* Using `pulumi import`, import S3 Access Grants locations using the `account_id` and `access_grants_location_id`, separated by a comma (`,`). For example:
|
|
27
|
+
*
|
|
28
|
+
* ```sh
|
|
29
|
+
* $ pulumi import aws:s3control/accessGrantsLocation:AccessGrantsLocation example 123456789012,default
|
|
30
|
+
* ```
|
|
31
|
+
*/
|
|
32
|
+
export declare class AccessGrantsLocation extends pulumi.CustomResource {
|
|
33
|
+
/**
|
|
34
|
+
* Get an existing AccessGrantsLocation resource's state with the given name, ID, and optional extra
|
|
35
|
+
* properties used to qualify the lookup.
|
|
36
|
+
*
|
|
37
|
+
* @param name The _unique_ name of the resulting resource.
|
|
38
|
+
* @param id The _unique_ provider ID of the resource to lookup.
|
|
39
|
+
* @param state Any extra arguments used during the lookup.
|
|
40
|
+
* @param opts Optional settings to control the behavior of the CustomResource.
|
|
41
|
+
*/
|
|
42
|
+
static get(name: string, id: pulumi.Input<pulumi.ID>, state?: AccessGrantsLocationState, opts?: pulumi.CustomResourceOptions): AccessGrantsLocation;
|
|
43
|
+
/**
|
|
44
|
+
* Returns true if the given object is an instance of AccessGrantsLocation. This is designed to work even
|
|
45
|
+
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
46
|
+
*/
|
|
47
|
+
static isInstance(obj: any): obj is AccessGrantsLocation;
|
|
48
|
+
/**
|
|
49
|
+
* Amazon Resource Name (ARN) of the S3 Access Grants location.
|
|
50
|
+
*/
|
|
51
|
+
readonly accessGrantsLocationArn: pulumi.Output<string>;
|
|
52
|
+
/**
|
|
53
|
+
* Unique ID of the S3 Access Grants location.
|
|
54
|
+
*/
|
|
55
|
+
readonly accessGrantsLocationId: pulumi.Output<string>;
|
|
56
|
+
readonly accountId: pulumi.Output<string>;
|
|
57
|
+
/**
|
|
58
|
+
* The ARN of the IAM role that S3 Access Grants should use when fulfilling runtime access
|
|
59
|
+
* requests to the location.
|
|
60
|
+
*/
|
|
61
|
+
readonly iamRoleArn: pulumi.Output<string>;
|
|
62
|
+
/**
|
|
63
|
+
* The default S3 URI `s3://` or the URI to a custom location, a specific bucket or prefix.
|
|
64
|
+
*/
|
|
65
|
+
readonly locationScope: pulumi.Output<string>;
|
|
66
|
+
/**
|
|
67
|
+
* Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
|
|
68
|
+
*/
|
|
69
|
+
readonly tags: pulumi.Output<{
|
|
70
|
+
[key: string]: string;
|
|
71
|
+
} | undefined>;
|
|
72
|
+
/**
|
|
73
|
+
* A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
|
|
74
|
+
*
|
|
75
|
+
* @deprecated Please use `tags` instead.
|
|
76
|
+
*/
|
|
77
|
+
readonly tagsAll: pulumi.Output<{
|
|
78
|
+
[key: string]: string;
|
|
79
|
+
}>;
|
|
80
|
+
/**
|
|
81
|
+
* Create a AccessGrantsLocation resource with the given unique name, arguments, and options.
|
|
82
|
+
*
|
|
83
|
+
* @param name The _unique_ name of the resource.
|
|
84
|
+
* @param args The arguments to use to populate this resource's properties.
|
|
85
|
+
* @param opts A bag of options that control this resource's behavior.
|
|
86
|
+
*/
|
|
87
|
+
constructor(name: string, args: AccessGrantsLocationArgs, opts?: pulumi.CustomResourceOptions);
|
|
88
|
+
}
|
|
89
|
+
/**
|
|
90
|
+
* Input properties used for looking up and filtering AccessGrantsLocation resources.
|
|
91
|
+
*/
|
|
92
|
+
export interface AccessGrantsLocationState {
|
|
93
|
+
/**
|
|
94
|
+
* Amazon Resource Name (ARN) of the S3 Access Grants location.
|
|
95
|
+
*/
|
|
96
|
+
accessGrantsLocationArn?: pulumi.Input<string>;
|
|
97
|
+
/**
|
|
98
|
+
* Unique ID of the S3 Access Grants location.
|
|
99
|
+
*/
|
|
100
|
+
accessGrantsLocationId?: pulumi.Input<string>;
|
|
101
|
+
accountId?: pulumi.Input<string>;
|
|
102
|
+
/**
|
|
103
|
+
* The ARN of the IAM role that S3 Access Grants should use when fulfilling runtime access
|
|
104
|
+
* requests to the location.
|
|
105
|
+
*/
|
|
106
|
+
iamRoleArn?: pulumi.Input<string>;
|
|
107
|
+
/**
|
|
108
|
+
* The default S3 URI `s3://` or the URI to a custom location, a specific bucket or prefix.
|
|
109
|
+
*/
|
|
110
|
+
locationScope?: pulumi.Input<string>;
|
|
111
|
+
/**
|
|
112
|
+
* Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
|
|
113
|
+
*/
|
|
114
|
+
tags?: pulumi.Input<{
|
|
115
|
+
[key: string]: pulumi.Input<string>;
|
|
116
|
+
}>;
|
|
117
|
+
/**
|
|
118
|
+
* A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
|
|
119
|
+
*
|
|
120
|
+
* @deprecated Please use `tags` instead.
|
|
121
|
+
*/
|
|
122
|
+
tagsAll?: pulumi.Input<{
|
|
123
|
+
[key: string]: pulumi.Input<string>;
|
|
124
|
+
}>;
|
|
125
|
+
}
|
|
126
|
+
/**
|
|
127
|
+
* The set of arguments for constructing a AccessGrantsLocation resource.
|
|
128
|
+
*/
|
|
129
|
+
export interface AccessGrantsLocationArgs {
|
|
130
|
+
accountId?: pulumi.Input<string>;
|
|
131
|
+
/**
|
|
132
|
+
* The ARN of the IAM role that S3 Access Grants should use when fulfilling runtime access
|
|
133
|
+
* requests to the location.
|
|
134
|
+
*/
|
|
135
|
+
iamRoleArn: pulumi.Input<string>;
|
|
136
|
+
/**
|
|
137
|
+
* The default S3 URI `s3://` or the URI to a custom location, a specific bucket or prefix.
|
|
138
|
+
*/
|
|
139
|
+
locationScope: pulumi.Input<string>;
|
|
140
|
+
/**
|
|
141
|
+
* Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
|
|
142
|
+
*/
|
|
143
|
+
tags?: pulumi.Input<{
|
|
144
|
+
[key: string]: pulumi.Input<string>;
|
|
145
|
+
}>;
|
|
146
|
+
}
|
|
@@ -0,0 +1,99 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
|
|
3
|
+
// *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
5
|
+
exports.AccessGrantsLocation = void 0;
|
|
6
|
+
const pulumi = require("@pulumi/pulumi");
|
|
7
|
+
const utilities = require("../utilities");
|
|
8
|
+
/**
|
|
9
|
+
* Provides a resource to manage an S3 Access Grants location.
|
|
10
|
+
* A location is an S3 resource (bucket or prefix) in a permission grant that the grantee can access.
|
|
11
|
+
* The S3 data must be in the same Region as your S3 Access Grants instance.
|
|
12
|
+
* When you register a location, you must include the IAM role that has permission to manage the S3 location that you are registering.
|
|
13
|
+
*
|
|
14
|
+
* ## Example Usage
|
|
15
|
+
*
|
|
16
|
+
* ```typescript
|
|
17
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
18
|
+
* import * as aws from "@pulumi/aws";
|
|
19
|
+
*
|
|
20
|
+
* const exampleAccessGrantsInstance = new aws.s3control.AccessGrantsInstance("exampleAccessGrantsInstance", {});
|
|
21
|
+
* const exampleAccessGrantsLocation = new aws.s3control.AccessGrantsLocation("exampleAccessGrantsLocation", {
|
|
22
|
+
* iamRoleArn: aws_iam_role.example.arn,
|
|
23
|
+
* locationScope: "s3://",
|
|
24
|
+
* }, {
|
|
25
|
+
* dependsOn: [exampleAccessGrantsInstance],
|
|
26
|
+
* });
|
|
27
|
+
* // Default scope.
|
|
28
|
+
* ```
|
|
29
|
+
*
|
|
30
|
+
* ## Import
|
|
31
|
+
*
|
|
32
|
+
* Using `pulumi import`, import S3 Access Grants locations using the `account_id` and `access_grants_location_id`, separated by a comma (`,`). For example:
|
|
33
|
+
*
|
|
34
|
+
* ```sh
|
|
35
|
+
* $ pulumi import aws:s3control/accessGrantsLocation:AccessGrantsLocation example 123456789012,default
|
|
36
|
+
* ```
|
|
37
|
+
*/
|
|
38
|
+
class AccessGrantsLocation extends pulumi.CustomResource {
|
|
39
|
+
/**
|
|
40
|
+
* Get an existing AccessGrantsLocation resource's state with the given name, ID, and optional extra
|
|
41
|
+
* properties used to qualify the lookup.
|
|
42
|
+
*
|
|
43
|
+
* @param name The _unique_ name of the resulting resource.
|
|
44
|
+
* @param id The _unique_ provider ID of the resource to lookup.
|
|
45
|
+
* @param state Any extra arguments used during the lookup.
|
|
46
|
+
* @param opts Optional settings to control the behavior of the CustomResource.
|
|
47
|
+
*/
|
|
48
|
+
static get(name, id, state, opts) {
|
|
49
|
+
return new AccessGrantsLocation(name, state, Object.assign(Object.assign({}, opts), { id: id }));
|
|
50
|
+
}
|
|
51
|
+
/**
|
|
52
|
+
* Returns true if the given object is an instance of AccessGrantsLocation. This is designed to work even
|
|
53
|
+
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
54
|
+
*/
|
|
55
|
+
static isInstance(obj) {
|
|
56
|
+
if (obj === undefined || obj === null) {
|
|
57
|
+
return false;
|
|
58
|
+
}
|
|
59
|
+
return obj['__pulumiType'] === AccessGrantsLocation.__pulumiType;
|
|
60
|
+
}
|
|
61
|
+
constructor(name, argsOrState, opts) {
|
|
62
|
+
let resourceInputs = {};
|
|
63
|
+
opts = opts || {};
|
|
64
|
+
if (opts.id) {
|
|
65
|
+
const state = argsOrState;
|
|
66
|
+
resourceInputs["accessGrantsLocationArn"] = state ? state.accessGrantsLocationArn : undefined;
|
|
67
|
+
resourceInputs["accessGrantsLocationId"] = state ? state.accessGrantsLocationId : undefined;
|
|
68
|
+
resourceInputs["accountId"] = state ? state.accountId : undefined;
|
|
69
|
+
resourceInputs["iamRoleArn"] = state ? state.iamRoleArn : undefined;
|
|
70
|
+
resourceInputs["locationScope"] = state ? state.locationScope : undefined;
|
|
71
|
+
resourceInputs["tags"] = state ? state.tags : undefined;
|
|
72
|
+
resourceInputs["tagsAll"] = state ? state.tagsAll : undefined;
|
|
73
|
+
}
|
|
74
|
+
else {
|
|
75
|
+
const args = argsOrState;
|
|
76
|
+
if ((!args || args.iamRoleArn === undefined) && !opts.urn) {
|
|
77
|
+
throw new Error("Missing required property 'iamRoleArn'");
|
|
78
|
+
}
|
|
79
|
+
if ((!args || args.locationScope === undefined) && !opts.urn) {
|
|
80
|
+
throw new Error("Missing required property 'locationScope'");
|
|
81
|
+
}
|
|
82
|
+
resourceInputs["accountId"] = args ? args.accountId : undefined;
|
|
83
|
+
resourceInputs["iamRoleArn"] = args ? args.iamRoleArn : undefined;
|
|
84
|
+
resourceInputs["locationScope"] = args ? args.locationScope : undefined;
|
|
85
|
+
resourceInputs["tags"] = args ? args.tags : undefined;
|
|
86
|
+
resourceInputs["accessGrantsLocationArn"] = undefined /*out*/;
|
|
87
|
+
resourceInputs["accessGrantsLocationId"] = undefined /*out*/;
|
|
88
|
+
resourceInputs["tagsAll"] = undefined /*out*/;
|
|
89
|
+
}
|
|
90
|
+
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
|
|
91
|
+
const secretOpts = { additionalSecretOutputs: ["tagsAll"] };
|
|
92
|
+
opts = pulumi.mergeOptions(opts, secretOpts);
|
|
93
|
+
super(AccessGrantsLocation.__pulumiType, name, resourceInputs, opts);
|
|
94
|
+
}
|
|
95
|
+
}
|
|
96
|
+
exports.AccessGrantsLocation = AccessGrantsLocation;
|
|
97
|
+
/** @internal */
|
|
98
|
+
AccessGrantsLocation.__pulumiType = 'aws:s3control/accessGrantsLocation:AccessGrantsLocation';
|
|
99
|
+
//# sourceMappingURL=accessGrantsLocation.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"accessGrantsLocation.js","sourceRoot":"","sources":["../../s3control/accessGrantsLocation.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAa,oBAAqB,SAAQ,MAAM,CAAC,cAAc;IAC3D;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAiC,EAAE,IAAmC;QAC/H,OAAO,IAAI,oBAAoB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC3E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,oBAAoB,CAAC,YAAY,CAAC;IACrE,CAAC;IAuCD,YAAY,IAAY,EAAE,WAAkE,EAAE,IAAmC;QAC7H,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAoD,CAAC;YACnE,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAAmD,CAAC;YACjE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;aAChE;YACD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,yBAAyB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9D,cAAc,CAAC,wBAAwB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC7D,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACjD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5D,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,oBAAoB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACzE,CAAC;;AAjGL,oDAkGC;AApFG,gBAAgB;AACO,iCAAY,GAAG,yDAAyD,CAAC"}
|
package/s3control/index.d.ts
CHANGED
|
@@ -1,6 +1,15 @@
|
|
|
1
|
+
export { AccessGrantArgs, AccessGrantState } from "./accessGrant";
|
|
2
|
+
export type AccessGrant = import("./accessGrant").AccessGrant;
|
|
3
|
+
export declare const AccessGrant: typeof import("./accessGrant").AccessGrant;
|
|
4
|
+
export { AccessGrantsInstanceArgs, AccessGrantsInstanceState } from "./accessGrantsInstance";
|
|
5
|
+
export type AccessGrantsInstance = import("./accessGrantsInstance").AccessGrantsInstance;
|
|
6
|
+
export declare const AccessGrantsInstance: typeof import("./accessGrantsInstance").AccessGrantsInstance;
|
|
1
7
|
export { AccessGrantsInstanceResourcePolicyArgs, AccessGrantsInstanceResourcePolicyState } from "./accessGrantsInstanceResourcePolicy";
|
|
2
8
|
export type AccessGrantsInstanceResourcePolicy = import("./accessGrantsInstanceResourcePolicy").AccessGrantsInstanceResourcePolicy;
|
|
3
9
|
export declare const AccessGrantsInstanceResourcePolicy: typeof import("./accessGrantsInstanceResourcePolicy").AccessGrantsInstanceResourcePolicy;
|
|
10
|
+
export { AccessGrantsLocationArgs, AccessGrantsLocationState } from "./accessGrantsLocation";
|
|
11
|
+
export type AccessGrantsLocation = import("./accessGrantsLocation").AccessGrantsLocation;
|
|
12
|
+
export declare const AccessGrantsLocation: typeof import("./accessGrantsLocation").AccessGrantsLocation;
|
|
4
13
|
export { AccessPointPolicyArgs, AccessPointPolicyState } from "./accessPointPolicy";
|
|
5
14
|
export type AccessPointPolicy = import("./accessPointPolicy").AccessPointPolicy;
|
|
6
15
|
export declare const AccessPointPolicy: typeof import("./accessPointPolicy").AccessPointPolicy;
|
package/s3control/index.js
CHANGED
|
@@ -2,11 +2,17 @@
|
|
|
2
2
|
// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
|
|
3
3
|
// *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
5
|
-
exports.StorageLensConfiguration = exports.ObjectLambdaAccessPointPolicy = exports.ObjectLambdaAccessPoint = exports.MultiRegionAccessPointPolicy = exports.MultiRegionAccessPoint = exports.getMultiRegionAccessPointOutput = exports.getMultiRegionAccessPoint = exports.BucketPolicy = exports.BucketLifecycleConfiguration = exports.Bucket = exports.AccessPointPolicy = exports.AccessGrantsInstanceResourcePolicy = void 0;
|
|
5
|
+
exports.StorageLensConfiguration = exports.ObjectLambdaAccessPointPolicy = exports.ObjectLambdaAccessPoint = exports.MultiRegionAccessPointPolicy = exports.MultiRegionAccessPoint = exports.getMultiRegionAccessPointOutput = exports.getMultiRegionAccessPoint = exports.BucketPolicy = exports.BucketLifecycleConfiguration = exports.Bucket = exports.AccessPointPolicy = exports.AccessGrantsLocation = exports.AccessGrantsInstanceResourcePolicy = exports.AccessGrantsInstance = exports.AccessGrant = void 0;
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("../utilities");
|
|
8
|
+
exports.AccessGrant = null;
|
|
9
|
+
utilities.lazyLoad(exports, ["AccessGrant"], () => require("./accessGrant"));
|
|
10
|
+
exports.AccessGrantsInstance = null;
|
|
11
|
+
utilities.lazyLoad(exports, ["AccessGrantsInstance"], () => require("./accessGrantsInstance"));
|
|
8
12
|
exports.AccessGrantsInstanceResourcePolicy = null;
|
|
9
13
|
utilities.lazyLoad(exports, ["AccessGrantsInstanceResourcePolicy"], () => require("./accessGrantsInstanceResourcePolicy"));
|
|
14
|
+
exports.AccessGrantsLocation = null;
|
|
15
|
+
utilities.lazyLoad(exports, ["AccessGrantsLocation"], () => require("./accessGrantsLocation"));
|
|
10
16
|
exports.AccessPointPolicy = null;
|
|
11
17
|
utilities.lazyLoad(exports, ["AccessPointPolicy"], () => require("./accessPointPolicy"));
|
|
12
18
|
exports.Bucket = null;
|
|
@@ -32,8 +38,14 @@ const _module = {
|
|
|
32
38
|
version: utilities.getVersion(),
|
|
33
39
|
construct: (name, type, urn) => {
|
|
34
40
|
switch (type) {
|
|
41
|
+
case "aws:s3control/accessGrant:AccessGrant":
|
|
42
|
+
return new exports.AccessGrant(name, undefined, { urn });
|
|
43
|
+
case "aws:s3control/accessGrantsInstance:AccessGrantsInstance":
|
|
44
|
+
return new exports.AccessGrantsInstance(name, undefined, { urn });
|
|
35
45
|
case "aws:s3control/accessGrantsInstanceResourcePolicy:AccessGrantsInstanceResourcePolicy":
|
|
36
46
|
return new exports.AccessGrantsInstanceResourcePolicy(name, undefined, { urn });
|
|
47
|
+
case "aws:s3control/accessGrantsLocation:AccessGrantsLocation":
|
|
48
|
+
return new exports.AccessGrantsLocation(name, undefined, { urn });
|
|
37
49
|
case "aws:s3control/accessPointPolicy:AccessPointPolicy":
|
|
38
50
|
return new exports.AccessPointPolicy(name, undefined, { urn });
|
|
39
51
|
case "aws:s3control/bucket:Bucket":
|
|
@@ -57,7 +69,10 @@ const _module = {
|
|
|
57
69
|
}
|
|
58
70
|
},
|
|
59
71
|
};
|
|
72
|
+
pulumi.runtime.registerResourceModule("aws", "s3control/accessGrant", _module);
|
|
73
|
+
pulumi.runtime.registerResourceModule("aws", "s3control/accessGrantsInstance", _module);
|
|
60
74
|
pulumi.runtime.registerResourceModule("aws", "s3control/accessGrantsInstanceResourcePolicy", _module);
|
|
75
|
+
pulumi.runtime.registerResourceModule("aws", "s3control/accessGrantsLocation", _module);
|
|
61
76
|
pulumi.runtime.registerResourceModule("aws", "s3control/accessPointPolicy", _module);
|
|
62
77
|
pulumi.runtime.registerResourceModule("aws", "s3control/bucket", _module);
|
|
63
78
|
pulumi.runtime.registerResourceModule("aws", "s3control/bucketLifecycleConfiguration", _module);
|