Package com.pulumi.aws.kms

Class GrantArgs.Builder

  • Enclosing class:
    GrantArgs
    public static final class GrantArgs.Builder
extends java.lang.Object

    • Constructor Detail

      • Builder

        public Builder()

      • Builder

        public Builder​(GrantArgs defaults)

    • Method Detail

      • constraints

        public GrantArgs.Builder constraints​(@Nullable
                                     com.pulumi.core.Output<java.util.List<GrantConstraintArgs>> constraints)
        Parameters:
        constraints - Structure that you can use to allow certain operations in the grant only when the desired encryption context is present. See `constraints` Block for details. For more information about encryption context, see [Encryption Context](https://docs.aws.amazon.com/kms/latest/developerguide/encrypt_context.html).
        Returns:
        builder

      • constraints

        public GrantArgs.Builder constraints​(java.util.List<GrantConstraintArgs> constraints)
        Parameters:
        constraints - Structure that you can use to allow certain operations in the grant only when the desired encryption context is present. See `constraints` Block for details. For more information about encryption context, see [Encryption Context](https://docs.aws.amazon.com/kms/latest/developerguide/encrypt_context.html).
        Returns:
        builder

      • constraints

        public GrantArgs.Builder constraints​(GrantConstraintArgs... constraints)
        Parameters:
        constraints - Structure that you can use to allow certain operations in the grant only when the desired encryption context is present. See `constraints` Block for details. For more information about encryption context, see [Encryption Context](https://docs.aws.amazon.com/kms/latest/developerguide/encrypt_context.html).
        Returns:
        builder

      • grantCreationTokens

        public GrantArgs.Builder grantCreationTokens​(@Nullable
                                             com.pulumi.core.Output<java.util.List<java.lang.String>> grantCreationTokens)
        Parameters:
        grantCreationTokens - List of grant tokens to be used when creating the grant. See [Grant Tokens](https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#grant_token) for more information about grant tokens.
        Returns:
        builder

      • grantCreationTokens

        public GrantArgs.Builder grantCreationTokens​(java.util.List<java.lang.String> grantCreationTokens)
        Parameters:
        grantCreationTokens - List of grant tokens to be used when creating the grant. See [Grant Tokens](https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#grant_token) for more information about grant tokens.
        Returns:
        builder

      • grantCreationTokens

        public GrantArgs.Builder grantCreationTokens​(java.lang.String... grantCreationTokens)
        Parameters:
        grantCreationTokens - List of grant tokens to be used when creating the grant. See [Grant Tokens](https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#grant_token) for more information about grant tokens.
        Returns:
        builder

      • granteePrincipal

        public GrantArgs.Builder granteePrincipal​(com.pulumi.core.Output<java.lang.String> granteePrincipal)
        Parameters:
        granteePrincipal - Principal that is given permission to perform the operations that the grant permits in ARN format. Note that due to eventual consistency issues around IAM principals, Terraform's state may not always be refreshed to reflect what is true in AWS.
        Returns:
        builder

      • granteePrincipal

        public GrantArgs.Builder granteePrincipal​(java.lang.String granteePrincipal)
        Parameters:
        granteePrincipal - Principal that is given permission to perform the operations that the grant permits in ARN format. Note that due to eventual consistency issues around IAM principals, Terraform's state may not always be refreshed to reflect what is true in AWS.
        Returns:
        builder

      • keyId

        public GrantArgs.Builder keyId​(com.pulumi.core.Output<java.lang.String> keyId)
        Parameters:
        keyId - Unique identifier for the customer master key (CMK) that the grant applies to. Specify the key ID or the ARN of the CMK. To specify a CMK in a different AWS account, you must use the key ARN.
        Returns:
        builder

      • keyId

        public GrantArgs.Builder keyId​(java.lang.String keyId)
        Parameters:
        keyId - Unique identifier for the customer master key (CMK) that the grant applies to. Specify the key ID or the ARN of the CMK. To specify a CMK in a different AWS account, you must use the key ARN.
        Returns:
        builder

      • name

        public GrantArgs.Builder name​(@Nullable
                              com.pulumi.core.Output<java.lang.String> name)
        Parameters:
        name - Friendly name for identifying the grant.
        Returns:
        builder

      • name

        public GrantArgs.Builder name​(java.lang.String name)
        Parameters:
        name - Friendly name for identifying the grant.
        Returns:
        builder

      • operations

        public GrantArgs.Builder operations​(com.pulumi.core.Output<java.util.List<java.lang.String>> operations)
        Parameters:
        operations - List of operations that the grant permits. The permitted values are: `Decrypt`, `Encrypt`, `GenerateDataKey`, `GenerateDataKeyWithoutPlaintext`, `ReEncryptFrom`, `ReEncryptTo`, `Sign`, `Verify`, `GetPublicKey`, `CreateGrant`, `RetireGrant`, `DescribeKey`, `GenerateDataKeyPair`, or `GenerateDataKeyPairWithoutPlaintext`.
        Returns:
        builder

      • operations

        public GrantArgs.Builder operations​(java.util.List<java.lang.String> operations)
        Parameters:
        operations - List of operations that the grant permits. The permitted values are: `Decrypt`, `Encrypt`, `GenerateDataKey`, `GenerateDataKeyWithoutPlaintext`, `ReEncryptFrom`, `ReEncryptTo`, `Sign`, `Verify`, `GetPublicKey`, `CreateGrant`, `RetireGrant`, `DescribeKey`, `GenerateDataKeyPair`, or `GenerateDataKeyPairWithoutPlaintext`.
        Returns:
        builder

      • operations

        public GrantArgs.Builder operations​(java.lang.String... operations)
        Parameters:
        operations - List of operations that the grant permits. The permitted values are: `Decrypt`, `Encrypt`, `GenerateDataKey`, `GenerateDataKeyWithoutPlaintext`, `ReEncryptFrom`, `ReEncryptTo`, `Sign`, `Verify`, `GetPublicKey`, `CreateGrant`, `RetireGrant`, `DescribeKey`, `GenerateDataKeyPair`, or `GenerateDataKeyPairWithoutPlaintext`.
        Returns:
        builder

      • region

        public GrantArgs.Builder region​(@Nullable
                                com.pulumi.core.Output<java.lang.String> region)
        Parameters:
        region - Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
        Returns:
        builder

      • region

        public GrantArgs.Builder region​(java.lang.String region)
        Parameters:
        region - Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
        Returns:
        builder

      • retireOnDelete

        public GrantArgs.Builder retireOnDelete​(@Nullable
                                        com.pulumi.core.Output<java.lang.Boolean> retireOnDelete)
        Parameters:
        retireOnDelete - If set to false (the default) the grants will be revoked upon deletion, and if set to true the grants will try to be retired upon deletion. Note that retiring grants requires special permissions, hence why we default to revoking grants. See [RetireGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RetireGrant.html) for more information.
        Returns:
        builder

      • retireOnDelete

        public GrantArgs.Builder retireOnDelete​(java.lang.Boolean retireOnDelete)
        Parameters:
        retireOnDelete - If set to false (the default) the grants will be revoked upon deletion, and if set to true the grants will try to be retired upon deletion. Note that retiring grants requires special permissions, hence why we default to revoking grants. See [RetireGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RetireGrant.html) for more information.
        Returns:
        builder

      • retiringPrincipal

        public GrantArgs.Builder retiringPrincipal​(@Nullable
                                           com.pulumi.core.Output<java.lang.String> retiringPrincipal)
        Parameters:
        retiringPrincipal - Principal that is given permission to retire the grant by using RetireGrant operation in ARN format. Note that due to eventual consistency issues around IAM principals, Terraform's state may not always be refreshed to reflect what is true in AWS.
        Returns:
        builder

      • retiringPrincipal

        public GrantArgs.Builder retiringPrincipal​(java.lang.String retiringPrincipal)
        Parameters:
        retiringPrincipal - Principal that is given permission to retire the grant by using RetireGrant operation in ARN format. Note that due to eventual consistency issues around IAM principals, Terraform's state may not always be refreshed to reflect what is true in AWS.
        Returns:
        builder