Package com.pulumi.aws.accountaccess
Class Application
- java.lang.Object
-
- com.pulumi.resources.Resource
-
- com.pulumi.resources.CustomResource
-
- com.pulumi.aws.accountaccess.Application
-
public class Application extends com.pulumi.resources.CustomResourceManages an AWS Account Access Application. An Application binds Account Access to an IAM Identity Center instance and serves as the parent container for entitlements that grant principals access to roles in target accounts. > **Note:** Only one Application may exist per IAM Identity Center instance. Attempting to create a second Application for the same instance produces an error directing you to import the existing resource. > **Note:** Granting access to roles in target accounts is done with `aws.accountaccess.Entitlement`. Each target role must trust the Account Access service in its `assumeRolePolicy` — see that resource's documentation for the required trust policy. ## Example Usage ### Basic Usage
### With Tagspackage generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.aws.ssoadmin.SsoadminFunctions; import com.pulumi.aws.ssoadmin.inputs.GetInstancesArgs; import com.pulumi.aws.accountaccess.Application; import com.pulumi.aws.accountaccess.ApplicationArgs; import com.pulumi.aws.accountaccess.inputs.ApplicationIdentitySourceArgs; import com.pulumi.aws.accountaccess.inputs.ApplicationIdentitySourceIdentityCenterArgs; import java.util.ArrayList; import java.util.Arrays; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { final var example = SsoadminFunctions.getInstances(GetInstancesArgs.builder() .build()); var exampleApplication = new Application("exampleApplication", ApplicationArgs.builder() .identitySource(ApplicationIdentitySourceArgs.builder() .identityCenter(ApplicationIdentitySourceIdentityCenterArgs.builder() .instanceArn(example.arns()[0]) .build()) .build()) .build()); } }
## Import ### Identity Schema #### Required * `arn` (String) ARN of the Account Access Application. Using `pulumi import`, import Account Access Applications using the Application ARN. For example: ```sh $ pulumi import aws:accountaccess/application:Application example arn:aws:account-access:us-east-1:123456789012:application/aam-0123456789abcdef ```package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.aws.accountaccess.Application; import com.pulumi.aws.accountaccess.ApplicationArgs; import com.pulumi.aws.accountaccess.inputs.ApplicationIdentitySourceArgs; import com.pulumi.aws.accountaccess.inputs.ApplicationIdentitySourceIdentityCenterArgs; import java.util.ArrayList; import java.util.Arrays; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var example = new Application("example", ApplicationArgs.builder() .identitySource(ApplicationIdentitySourceArgs.builder() .identityCenter(ApplicationIdentitySourceIdentityCenterArgs.builder() .instanceArn(exampleAwsSsoadminInstances.arns()[0]) .build()) .build()) .tags(Map.ofEntries( Map.entry("Environment", "production"), Map.entry("ManagedBy", "terraform") )) .build()); } }
-
-
Constructor Summary
Constructors Constructor Description Application(java.lang.String name)Application(java.lang.String name, ApplicationArgs args)Application(java.lang.String name, ApplicationArgs args, com.pulumi.resources.CustomResourceOptions options)
-
Method Summary
All Methods Static Methods Instance Methods Concrete Methods Modifier and Type Method Description com.pulumi.core.Output<java.lang.String>arn()static Applicationget(java.lang.String name, com.pulumi.core.Output<java.lang.String> id, ApplicationState state, com.pulumi.resources.CustomResourceOptions options)Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.com.pulumi.core.Output<ApplicationIdentitySource>identitySource()com.pulumi.core.Output<java.lang.String>region()com.pulumi.core.Output<java.util.Optional<java.util.Map<java.lang.String,java.lang.String>>>tags()com.pulumi.core.Output<java.util.Map<java.lang.String,java.lang.String>>tagsAll()com.pulumi.core.Output<java.lang.String>tenantId()com.pulumi.core.Output<java.util.Optional<ApplicationTimeouts>>timeouts()
-
-
-
Constructor Detail
-
Application
public Application(java.lang.String name)
- Parameters:
name- The _unique_ name of the resulting resource.
-
Application
public Application(java.lang.String name, ApplicationArgs args)- Parameters:
name- The _unique_ name of the resulting resource.args- The arguments to use to populate this resource's properties.
-
Application
public Application(java.lang.String name, ApplicationArgs args, @Nullable com.pulumi.resources.CustomResourceOptions options)- Parameters:
name- The _unique_ name of the resulting resource.args- The arguments to use to populate this resource's properties.options- A bag of options that control this resource's behavior.
-
-
Method Detail
-
arn
public com.pulumi.core.Output<java.lang.String> arn()
- Returns:
- ARN of the Application. Used as the resource ID.
-
identitySource
public com.pulumi.core.Output<ApplicationIdentitySource> identitySource()
- Returns:
- Identity source for the application. Forces replacement when changed. See `identitySource` Block below. The following arguments are optional:
-
region
public com.pulumi.core.Output<java.lang.String> region()
- Returns:
- Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
-
tags
public com.pulumi.core.Output<java.util.Optional<java.util.Map<java.lang.String,java.lang.String>>> tags()
- Returns:
- Map of tags to assign to the Application. If configured with a provider `defaultTags` configuration block, tags with matching keys will overwrite those defined at the provider-level.
-
tagsAll
public com.pulumi.core.Output<java.util.Map<java.lang.String,java.lang.String>> tagsAll()
- Returns:
- Map of tags assigned to the Application, including those inherited from the provider `defaultTags` configuration block.
-
tenantId
public com.pulumi.core.Output<java.lang.String> tenantId()
- Returns:
- Internal tenant identifier returned by the service.
-
timeouts
public com.pulumi.core.Output<java.util.Optional<ApplicationTimeouts>> timeouts()
-
get
public static Application get(java.lang.String name, com.pulumi.core.Output<java.lang.String> id, @Nullable ApplicationState state, @Nullable com.pulumi.resources.CustomResourceOptions options)
Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.- Parameters:
name- The _unique_ name of the resulting resource.id- The _unique_ provider ID of the resource to lookup.state-options- Optional settings to control the behavior of the CustomResource.
-
-