Package com.pulumi.aws.ssoadmin

Class PermissionSetInlinePolicy

java.lang.Object

com.pulumi.resources.Resource

com.pulumi.resources.CustomResource

com.pulumi.aws.ssoadmin.PermissionSetInlinePolicy

public class PermissionSetInlinePolicy
extends com.pulumi.resources.CustomResource

Provides an IAM inline policy for a Single Sign-On (SSO) Permission Set resource > **NOTE:** AWS Single Sign-On (SSO) only supports one IAM inline policy per `aws.ssoadmin.PermissionSet` resource. Creating or updating this resource will automatically [Provision the Permission Set](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ProvisionPermissionSet.html) to apply the corresponding updates to all assigned accounts. > **NOTE:** We suggest using `jsonencode()` or `aws.iam.getPolicyDocument` when assigning a value to `inlinePolicy`. They seamlessly translate Terraform language into JSON, enabling you to maintain consistency within your configuration without the need for context switches. Also, you can sidestep potential complications arising from formatting discrepancies, whitespace inconsistencies, and other nuances inherent to JSON. ## Example Usage

 
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.ssoadmin.SsoadminFunctions;
 import com.pulumi.aws.ssoadmin.inputs.GetInstancesArgs;
 import com.pulumi.aws.ssoadmin.PermissionSet;
 import com.pulumi.aws.ssoadmin.PermissionSetArgs;
 import com.pulumi.aws.iam.IamFunctions;
 import com.pulumi.aws.iam.inputs.GetPolicyDocumentArgs;
 import com.pulumi.aws.iam.inputs.GetPolicyDocumentStatementArgs;
 import com.pulumi.aws.ssoadmin.PermissionSetInlinePolicy;
 import com.pulumi.aws.ssoadmin.PermissionSetInlinePolicyArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         final var example = SsoadminFunctions.getInstances(GetInstancesArgs.builder()
             .build());
 
         var examplePermissionSet = new PermissionSet("examplePermissionSet", PermissionSetArgs.builder()
             .name("Example")
             .instanceArn(example.arns()[0])
             .build());
 
         final var exampleGetPolicyDocument = IamFunctions.getPolicyDocument(GetPolicyDocumentArgs.builder()
             .statements(GetPolicyDocumentStatementArgs.builder()
                 .sid("1")
                 .actions(                
                     "s3:ListAllMyBuckets",
                     "s3:GetBucketLocation")
                 .resources("arn:aws:s3:::*")
                 .build())
             .build());
 
         var examplePermissionSetInlinePolicy = new PermissionSetInlinePolicy("examplePermissionSetInlinePolicy", PermissionSetInlinePolicyArgs.builder()
             .inlinePolicy(exampleGetPolicyDocument.json())
             .instanceArn(example.arns()[0])
             .permissionSetArn(examplePermissionSet.arn())
             .build());
 
     }
 }
 
 

## Import Using `pulumi import`, import SSO Permission Set Inline Policies using the `permissionSetArn` and `instanceArn` separated by a comma (`,`). For example: ```sh $ pulumi import aws:ssoadmin/permissionSetInlinePolicy:PermissionSetInlinePolicy example arn:aws:sso:::permissionSet/ssoins-2938j0x8920sbj72/ps-80383020jr9302rk,arn:aws:sso:::instance/ssoins-2938j0x8920sbj72 ```

Nested Class Summary

Nested classes/interfaces inherited from class com.pulumi.resources.CustomResource

com.pulumi.resources.CustomResource.CustomResourceInternal

Nested classes/interfaces inherited from class com.pulumi.resources.Resource

com.pulumi.resources.Resource.LazyField<T extends java.lang.Object>, com.pulumi.resources.Resource.LazyFields, com.pulumi.resources.Resource.ResourceInternal

Field Summary

Fields inherited from class com.pulumi.resources.Resource

childResources, remote

Constructor Summary

Constructors

Constructor	Description
PermissionSetInlinePolicy(java.lang.String name)
PermissionSetInlinePolicy(java.lang.String name, PermissionSetInlinePolicyArgs args)
PermissionSetInlinePolicy(java.lang.String name, PermissionSetInlinePolicyArgs args, com.pulumi.resources.CustomResourceOptions options)

Method Summary

Modifier and Type	Method	Description
static PermissionSetInlinePolicy	get(java.lang.String name, com.pulumi.core.Output<java.lang.String> id, PermissionSetInlinePolicyState state, com.pulumi.resources.CustomResourceOptions options)	Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.
com.pulumi.core.Output<java.lang.String>	inlinePolicy()
com.pulumi.core.Output<java.lang.String>	instanceArn()
com.pulumi.core.Output<java.lang.String>	permissionSetArn()
com.pulumi.core.Output<java.lang.String>	region()

Methods inherited from class com.pulumi.resources.CustomResource

getId, id, idFuture

Methods inherited from class com.pulumi.resources.Resource

getChildResources, getResourceName, getResourceType, getUrn, pulumiChildResources, pulumiResourceName, pulumiResourceType, urn

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

PermissionSetInlinePolicy

public PermissionSetInlinePolicy(java.lang.String name)

Parameters:

name - The _unique_ name of the resulting resource.

PermissionSetInlinePolicy

public PermissionSetInlinePolicy(java.lang.String name,
                                 PermissionSetInlinePolicyArgs args)

Parameters:

name - The _unique_ name of the resulting resource.

args - The arguments to use to populate this resource's properties.

PermissionSetInlinePolicy

public PermissionSetInlinePolicy(java.lang.String name,
                                 PermissionSetInlinePolicyArgs args,
                                 @Nullable
                                 com.pulumi.resources.CustomResourceOptions options)

Parameters:

name - The _unique_ name of the resulting resource.

args - The arguments to use to populate this resource's properties.

options - A bag of options that control this resource's behavior.

Method Detail

inlinePolicy

public com.pulumi.core.Output<java.lang.String> inlinePolicy()

Returns:

The IAM inline policy to attach to a Permission Set.

instanceArn

public com.pulumi.core.Output<java.lang.String> instanceArn()

Returns:

ARN of the SSO Instance under which the operation will be executed.

permissionSetArn

public com.pulumi.core.Output<java.lang.String> permissionSetArn()

Returns:

ARN of the Permission Set.

region

public com.pulumi.core.Output<java.lang.String> region()

Returns:

Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

get

public static PermissionSetInlinePolicy get(java.lang.String name,
                                            com.pulumi.core.Output<java.lang.String> id,
                                            @Nullable
                                            PermissionSetInlinePolicyState state,
                                            @Nullable
                                            com.pulumi.resources.CustomResourceOptions options)

Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.

Parameters:

name - The _unique_ name of the resulting resource.

id - The _unique_ provider ID of the resource to lookup.

state -

options - Optional settings to control the behavior of the CustomResource.