awsiam

package
v0.2.0 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: May 24, 2023 License: Apache-2.0 Imports: 10 Imported by: 0

Documentation

Overview

Package awsiam exports types, functions, subpackages for provisioning awsiam resources.

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func PkgVersion 

func PkgVersion() (semver.Version, error)

PkgVersion uses reflection to determine the version of the current package. If a version cannot be determined, v1 will be assumed. The second return value is always nil.

Types

type AccessKeyOutput 

type AccessKeyOutput struct {
	// The encrypted secret, base64 encoded.
	EncryptedSecret *string `pulumi:"encryptedSecret"`
	// The access key ID.
	Id *string `pulumi:"id"`
	// The fingerprint of the PGP key used to encrypt the secret.
	KeyFingerprint *string `pulumi:"keyFingerprint"`
	// The access key secret.
	Secret *string `pulumi:"secret"`
	// The secret access key converted into an SES SMTP password by applying AWS's Sigv4 conversion algorithm.
	SesSmtpPasswordV4 *string `pulumi:"sesSmtpPasswordV4"`
	// Active or Inactive. Keys are initially active, but can be made inactive by other means.
	Status *string `pulumi:"status"`
}

The IAM access key.

type AccessKeyOutputOutput 

type AccessKeyOutputOutput struct{ *pulumi.OutputState }

The IAM access key.

func (AccessKeyOutputOutput) ElementType 

func (AccessKeyOutputOutput) ElementType() reflect.Type

func (AccessKeyOutputOutput) EncryptedSecret 

func (o AccessKeyOutputOutput) EncryptedSecret() pulumi.StringPtrOutput

The encrypted secret, base64 encoded.

func (AccessKeyOutputOutput) Id 

func (o AccessKeyOutputOutput) Id() pulumi.StringPtrOutput

The access key ID.

func (AccessKeyOutputOutput) KeyFingerprint 

func (o AccessKeyOutputOutput) KeyFingerprint() pulumi.StringPtrOutput

The fingerprint of the PGP key used to encrypt the secret.

func (AccessKeyOutputOutput) Secret 

func (o AccessKeyOutputOutput) Secret() pulumi.StringPtrOutput

The access key secret.

func (AccessKeyOutputOutput) SesSmtpPasswordV4 

func (o AccessKeyOutputOutput) SesSmtpPasswordV4() pulumi.StringPtrOutput

The secret access key converted into an SES SMTP password by applying AWS's Sigv4 conversion algorithm.

func (AccessKeyOutputOutput) Status 

func (o AccessKeyOutputOutput) Status() pulumi.StringPtrOutput

Active or Inactive. Keys are initially active, but can be made inactive by other means.

func (AccessKeyOutputOutput) ToAccessKeyOutputOutput 

func (o AccessKeyOutputOutput) ToAccessKeyOutputOutput() AccessKeyOutputOutput

func (AccessKeyOutputOutput) ToAccessKeyOutputOutputWithContext 

func (o AccessKeyOutputOutput) ToAccessKeyOutputOutputWithContext(ctx context.Context) AccessKeyOutputOutput

type Account 

type Account struct {
	pulumi.ResourceState

	// The AWS ARN associated with the calling entity.
	Arn pulumi.StringOutput `pulumi:"arn"`
	// The AWS Account ID number of the account that owns or contains the calling entity.
	Id pulumi.StringOutput `pulumi:"id"`
	// Indicates whether passwords in the account expire. Returns true if max password
	// age contains a value greater than 0. Returns false if it is 0 or not present.
	PasswordPolicyExpirePasswords pulumi.BoolOutput `pulumi:"passwordPolicyExpirePasswords"`
	// The unique identifier of the calling entity.
	UserId pulumi.StringOutput `pulumi:"userId"`
}

This resource helps you manage an Iam Account's Alias and Password Policy. If your IAM Account Alias was previously set (either via the AWS console or when AWS created your Account) you will see an error like the below:

If you want to manage you Alias using Pulumi you will need to import this resource.

## Example Usage ## Account

```go package main

import ( 

iam "github.com/pulumi/pulumi-aws-iam/sdk/go/aws-iam"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
    pulumi.Run(func(ctx *pulumi.Context) error {
        account, err := iam.NewAccount(ctx, "account", &iam.AccountArgs{
            AccountAlias: pulumi.String("cool-alias"),
            PasswordPolicy: iam.AccountPasswordPolicyArgs{
                MinimumLength:              pulumi.IntPtr(37),
                RequireNumbers:             pulumi.Bool(false),
                AllowUsersToChange:         pulumi.Bool(true),
                HardExpiry:                 pulumi.Bool(true),
                RequireSymbols:             pulumi.Bool(true),
                RequireLowercaseCharacters: pulumi.Bool(true),
                RequireUppercaseCharacters: pulumi.Bool(true),
            },
        })
        if err != nil {
            return err
        }

        ctx.Export("account", account)

        return nil
    })
}

``` {{ /example }}

func NewAccount 

func NewAccount(ctx *pulumi.Context,
	name string, args *AccountArgs, opts ...pulumi.ResourceOption) (*Account, error)

NewAccount registers a new resource with the given unique name, arguments, and options.

func (*Account) ElementType 

func (*Account) ElementType() reflect.Type

func (*Account) ToAccountOutput 

func (i *Account) ToAccountOutput() AccountOutput

func (*Account) ToAccountOutputWithContext 

func (i *Account) ToAccountOutputWithContext(ctx context.Context) AccountOutput

type AccountArgs 

type AccountArgs struct {
	// AWS IAM account alias for this account.
	AccountAlias pulumi.StringInput
	// Options to specify complexity requirements and mandatory rotation periods for your IAM users' passwords. If
	// left empty the default AWS password policy will be applied.
	PasswordPolicy AccountPasswordPolicyInput
}

The set of arguments for constructing a Account resource.

func (AccountArgs) ElementType 

func (AccountArgs) ElementType() reflect.Type

type AccountArray 

type AccountArray []AccountInput

func (AccountArray) ElementType 

func (AccountArray) ElementType() reflect.Type

func (AccountArray) ToAccountArrayOutput 

func (i AccountArray) ToAccountArrayOutput() AccountArrayOutput

func (AccountArray) ToAccountArrayOutputWithContext 

func (i AccountArray) ToAccountArrayOutputWithContext(ctx context.Context) AccountArrayOutput

type AccountArrayInput 

type AccountArrayInput interface {
	pulumi.Input

	ToAccountArrayOutput() AccountArrayOutput
	ToAccountArrayOutputWithContext(context.Context) AccountArrayOutput
}

AccountArrayInput is an input type that accepts AccountArray and AccountArrayOutput values. You can construct a concrete instance of `AccountArrayInput` via: 

AccountArray{ AccountArgs{...} }

type AccountArrayOutput 

type AccountArrayOutput struct{ *pulumi.OutputState }

func (AccountArrayOutput) ElementType 

func (AccountArrayOutput) ElementType() reflect.Type

func (AccountArrayOutput) Index 

func (o AccountArrayOutput) Index(i pulumi.IntInput) AccountOutput

func (AccountArrayOutput) ToAccountArrayOutput 

func (o AccountArrayOutput) ToAccountArrayOutput() AccountArrayOutput

func (AccountArrayOutput) ToAccountArrayOutputWithContext 

func (o AccountArrayOutput) ToAccountArrayOutputWithContext(ctx context.Context) AccountArrayOutput

type AccountInput 

type AccountInput interface {
	pulumi.Input

	ToAccountOutput() AccountOutput
	ToAccountOutputWithContext(ctx context.Context) AccountOutput
}

type AccountMap 

type AccountMap map[string]AccountInput

func (AccountMap) ElementType 

func (AccountMap) ElementType() reflect.Type

func (AccountMap) ToAccountMapOutput 

func (i AccountMap) ToAccountMapOutput() AccountMapOutput

func (AccountMap) ToAccountMapOutputWithContext 

func (i AccountMap) ToAccountMapOutputWithContext(ctx context.Context) AccountMapOutput

type AccountMapInput 

type AccountMapInput interface {
	pulumi.Input

	ToAccountMapOutput() AccountMapOutput
	ToAccountMapOutputWithContext(context.Context) AccountMapOutput
}

AccountMapInput is an input type that accepts AccountMap and AccountMapOutput values. You can construct a concrete instance of `AccountMapInput` via: 

AccountMap{ "key": AccountArgs{...} }

type AccountMapOutput 

type AccountMapOutput struct{ *pulumi.OutputState }

func (AccountMapOutput) ElementType 

func (AccountMapOutput) ElementType() reflect.Type

func (AccountMapOutput) MapIndex 

func (o AccountMapOutput) MapIndex(k pulumi.StringInput) AccountOutput

func (AccountMapOutput) ToAccountMapOutput 

func (o AccountMapOutput) ToAccountMapOutput() AccountMapOutput

func (AccountMapOutput) ToAccountMapOutputWithContext 

func (o AccountMapOutput) ToAccountMapOutputWithContext(ctx context.Context) AccountMapOutput

type AccountOutput 

type AccountOutput struct{ *pulumi.OutputState }

func (AccountOutput) Arn 

func (o AccountOutput) Arn() pulumi.StringOutput

The AWS ARN associated with the calling entity.

func (AccountOutput) ElementType 

func (AccountOutput) ElementType() reflect.Type

func (AccountOutput) Id 

func (o AccountOutput) Id() pulumi.StringOutput

The AWS Account ID number of the account that owns or contains the calling entity.

func (AccountOutput) PasswordPolicyExpirePasswords 

func (o AccountOutput) PasswordPolicyExpirePasswords() pulumi.BoolOutput

Indicates whether passwords in the account expire. Returns true if max password age contains a value greater than 0. Returns false if it is 0 or not present.

func (AccountOutput) ToAccountOutput 

func (o AccountOutput) ToAccountOutput() AccountOutput

func (AccountOutput) ToAccountOutputWithContext 

func (o AccountOutput) ToAccountOutputWithContext(ctx context.Context) AccountOutput

func (AccountOutput) UserId 

func (o AccountOutput) UserId() pulumi.StringOutput

The unique identifier of the calling entity.

type AccountPasswordPolicy 

type AccountPasswordPolicy struct {
	// Whether to allow users to change their own password.
	AllowUsersToChange bool `pulumi:"allowUsersToChange"`
	// Whether users are prevented from setting a new password after their password has
	// expired (i.e. require administrator reset).
	HardExpiry bool `pulumi:"hardExpiry"`
	// The number of days that an user password is valid. If not set or a value of `0` is provided, then
	// passwords will not expire.
	MaxAge *int `pulumi:"maxAge"`
	// Minimum length to require for user passwords. Defaults to `8` if not set or
	// the provided value is invalid. Valid values are between 6 and 128.
	MinimumLength *int `pulumi:"minimumLength"`
	// Whether to require lowercase characters for user passwords.
	RequireLowercaseCharacters bool `pulumi:"requireLowercaseCharacters"`
	// Whether to require numbers for user passwords.
	RequireNumbers bool `pulumi:"requireNumbers"`
	// Whether to require symbols for user passwords.
	RequireSymbols bool `pulumi:"requireSymbols"`
	// Whether to require uppercase characters for user passwords.
	RequireUppercaseCharacters bool `pulumi:"requireUppercaseCharacters"`
	// The number of previous passwords that users are prevented from reusing. If not set or a
	// value of `0` is provided, no reuse prevention policy will be used.
	ReusePrevention *int `pulumi:"reusePrevention"`
}

Options to specify complexity requirements and mandatory rotation periods for your IAM users' passwords.

type AccountPasswordPolicyArgs 

type AccountPasswordPolicyArgs struct {
	// Whether to allow users to change their own password.
	AllowUsersToChange pulumi.BoolInput `pulumi:"allowUsersToChange"`
	// Whether users are prevented from setting a new password after their password has
	// expired (i.e. require administrator reset).
	HardExpiry pulumi.BoolInput `pulumi:"hardExpiry"`
	// The number of days that an user password is valid. If not set or a value of `0` is provided, then
	// passwords will not expire.
	MaxAge pulumi.IntPtrInput `pulumi:"maxAge"`
	// Minimum length to require for user passwords. Defaults to `8` if not set or
	// the provided value is invalid. Valid values are between 6 and 128.
	MinimumLength pulumi.IntPtrInput `pulumi:"minimumLength"`
	// Whether to require lowercase characters for user passwords.
	RequireLowercaseCharacters pulumi.BoolInput `pulumi:"requireLowercaseCharacters"`
	// Whether to require numbers for user passwords.
	RequireNumbers pulumi.BoolInput `pulumi:"requireNumbers"`
	// Whether to require symbols for user passwords.
	RequireSymbols pulumi.BoolInput `pulumi:"requireSymbols"`
	// Whether to require uppercase characters for user passwords.
	RequireUppercaseCharacters pulumi.BoolInput `pulumi:"requireUppercaseCharacters"`
	// The number of previous passwords that users are prevented from reusing. If not set or a
	// value of `0` is provided, no reuse prevention policy will be used.
	ReusePrevention pulumi.IntPtrInput `pulumi:"reusePrevention"`
}

Options to specify complexity requirements and mandatory rotation periods for your IAM users' passwords.

func (AccountPasswordPolicyArgs) ElementType 

func (AccountPasswordPolicyArgs) ElementType() reflect.Type

func (AccountPasswordPolicyArgs) ToAccountPasswordPolicyOutput 

func (i AccountPasswordPolicyArgs) ToAccountPasswordPolicyOutput() AccountPasswordPolicyOutput

func (AccountPasswordPolicyArgs) ToAccountPasswordPolicyOutputWithContext 

func (i AccountPasswordPolicyArgs) ToAccountPasswordPolicyOutputWithContext(ctx context.Context) AccountPasswordPolicyOutput

type AccountPasswordPolicyInput 

type AccountPasswordPolicyInput interface {
	pulumi.Input

	ToAccountPasswordPolicyOutput() AccountPasswordPolicyOutput
	ToAccountPasswordPolicyOutputWithContext(context.Context) AccountPasswordPolicyOutput
}

AccountPasswordPolicyInput is an input type that accepts AccountPasswordPolicyArgs and AccountPasswordPolicyOutput values. You can construct a concrete instance of `AccountPasswordPolicyInput` via: 

AccountPasswordPolicyArgs{...}

type AccountPasswordPolicyOutput 

type AccountPasswordPolicyOutput struct{ *pulumi.OutputState }

Options to specify complexity requirements and mandatory rotation periods for your IAM users' passwords.

func (AccountPasswordPolicyOutput) AllowUsersToChange 

func (o AccountPasswordPolicyOutput) AllowUsersToChange() pulumi.BoolOutput

Whether to allow users to change their own password.

func (AccountPasswordPolicyOutput) ElementType 

func (AccountPasswordPolicyOutput) ElementType() reflect.Type

func (AccountPasswordPolicyOutput) HardExpiry 

func (o AccountPasswordPolicyOutput) HardExpiry() pulumi.BoolOutput

Whether users are prevented from setting a new password after their password has expired (i.e. require administrator reset).

func (AccountPasswordPolicyOutput) MaxAge 

func (o AccountPasswordPolicyOutput) MaxAge() pulumi.IntPtrOutput

The number of days that an user password is valid. If not set or a value of `0` is provided, then passwords will not expire.

func (AccountPasswordPolicyOutput) MinimumLength 

func (o AccountPasswordPolicyOutput) MinimumLength() pulumi.IntPtrOutput

Minimum length to require for user passwords. Defaults to `8` if not set or the provided value is invalid. Valid values are between 6 and 128.

func (AccountPasswordPolicyOutput) RequireLowercaseCharacters 

func (o AccountPasswordPolicyOutput) RequireLowercaseCharacters() pulumi.BoolOutput

Whether to require lowercase characters for user passwords.

func (AccountPasswordPolicyOutput) RequireNumbers 

func (o AccountPasswordPolicyOutput) RequireNumbers() pulumi.BoolOutput

Whether to require numbers for user passwords.

func (AccountPasswordPolicyOutput) RequireSymbols 

func (o AccountPasswordPolicyOutput) RequireSymbols() pulumi.BoolOutput

Whether to require symbols for user passwords.

func (AccountPasswordPolicyOutput) RequireUppercaseCharacters 

func (o AccountPasswordPolicyOutput) RequireUppercaseCharacters() pulumi.BoolOutput

Whether to require uppercase characters for user passwords.

func (AccountPasswordPolicyOutput) ReusePrevention 

func (o AccountPasswordPolicyOutput) ReusePrevention() pulumi.IntPtrOutput

The number of previous passwords that users are prevented from reusing. If not set or a value of `0` is provided, no reuse prevention policy will be used.

func (AccountPasswordPolicyOutput) ToAccountPasswordPolicyOutput 

func (o AccountPasswordPolicyOutput) ToAccountPasswordPolicyOutput() AccountPasswordPolicyOutput

func (AccountPasswordPolicyOutput) ToAccountPasswordPolicyOutputWithContext 

func (o AccountPasswordPolicyOutput) ToAccountPasswordPolicyOutputWithContext(ctx context.Context) AccountPasswordPolicyOutput

type AdminRole 

type AdminRole struct {
	// IAM role with admin access.
	Name *string `pulumi:"name"`
	// Path of admin IAM role. Defaults to '/'
	Path *string `pulumi:"path"`
	// Permissions boundary ARN to use for admin role.
	PermissionsBoundaryArn *string `pulumi:"permissionsBoundaryArn"`
	// List of policy ARNs to use for admin role.
	PolicyArns []string `pulumi:"policyArns"`
	// A map of tags to add.
	Tags map[string]string `pulumi:"tags"`
}

The admin role.

func (*AdminRole) Defaults 

func (val *AdminRole) Defaults() *AdminRole

Defaults sets the appropriate defaults for AdminRole

type AdminRoleArgs 

type AdminRoleArgs struct {
	// IAM role with admin access.
	Name pulumi.StringPtrInput `pulumi:"name"`
	// Path of admin IAM role. Defaults to '/'
	Path pulumi.StringPtrInput `pulumi:"path"`
	// Permissions boundary ARN to use for admin role.
	PermissionsBoundaryArn pulumi.StringPtrInput `pulumi:"permissionsBoundaryArn"`
	// List of policy ARNs to use for admin role.
	PolicyArns pulumi.StringArrayInput `pulumi:"policyArns"`
	// A map of tags to add.
	Tags pulumi.StringMapInput `pulumi:"tags"`
}

The admin role.

func (*AdminRoleArgs) Defaults 

func (val *AdminRoleArgs) Defaults() *AdminRoleArgs

Defaults sets the appropriate defaults for AdminRoleArgs

func (AdminRoleArgs) ElementType 

func (AdminRoleArgs) ElementType() reflect.Type

func (AdminRoleArgs) ToAdminRoleOutput 

func (i AdminRoleArgs) ToAdminRoleOutput() AdminRoleOutput

func (AdminRoleArgs) ToAdminRoleOutputWithContext 

func (i AdminRoleArgs) ToAdminRoleOutputWithContext(ctx context.Context) AdminRoleOutput

func (AdminRoleArgs) ToAdminRolePtrOutput 

func (i AdminRoleArgs) ToAdminRolePtrOutput() AdminRolePtrOutput

func (AdminRoleArgs) ToAdminRolePtrOutputWithContext 

func (i AdminRoleArgs) ToAdminRolePtrOutputWithContext(ctx context.Context) AdminRolePtrOutput

type AdminRoleInput 

type AdminRoleInput interface {
	pulumi.Input

	ToAdminRoleOutput() AdminRoleOutput
	ToAdminRoleOutputWithContext(context.Context) AdminRoleOutput
}

AdminRoleInput is an input type that accepts AdminRoleArgs and AdminRoleOutput values. You can construct a concrete instance of `AdminRoleInput` via: 

AdminRoleArgs{...}

type AdminRoleOutput 

type AdminRoleOutput struct{ *pulumi.OutputState }

The admin role.

func (AdminRoleOutput) ElementType 

func (AdminRoleOutput) ElementType() reflect.Type

func (AdminRoleOutput) Name 

func (o AdminRoleOutput) Name() pulumi.StringPtrOutput

IAM role with admin access.

func (AdminRoleOutput) Path 

func (o AdminRoleOutput) Path() pulumi.StringPtrOutput

Path of admin IAM role. Defaults to '/'

func (AdminRoleOutput) PermissionsBoundaryArn 

func (o AdminRoleOutput) PermissionsBoundaryArn() pulumi.StringPtrOutput

Permissions boundary ARN to use for admin role.

func (AdminRoleOutput) PolicyArns 

func (o AdminRoleOutput) PolicyArns() pulumi.StringArrayOutput

List of policy ARNs to use for admin role.

func (AdminRoleOutput) Tags 

func (o AdminRoleOutput) Tags() pulumi.StringMapOutput

A map of tags to add.

func (AdminRoleOutput) ToAdminRoleOutput 

func (o AdminRoleOutput) ToAdminRoleOutput() AdminRoleOutput

func (AdminRoleOutput) ToAdminRoleOutputWithContext 

func (o AdminRoleOutput) ToAdminRoleOutputWithContext(ctx context.Context) AdminRoleOutput

func (AdminRoleOutput) ToAdminRolePtrOutput 

func (o AdminRoleOutput) ToAdminRolePtrOutput() AdminRolePtrOutput

func (AdminRoleOutput) ToAdminRolePtrOutputWithContext 

func (o AdminRoleOutput) ToAdminRolePtrOutputWithContext(ctx context.Context) AdminRolePtrOutput

type AdminRolePtrInput 

type AdminRolePtrInput interface {
	pulumi.Input

	ToAdminRolePtrOutput() AdminRolePtrOutput
	ToAdminRolePtrOutputWithContext(context.Context) AdminRolePtrOutput
}

AdminRolePtrInput is an input type that accepts AdminRoleArgs, AdminRolePtr and AdminRolePtrOutput values. You can construct a concrete instance of `AdminRolePtrInput` via: 

        AdminRoleArgs{...}

or:

        nil

func AdminRolePtr 

func AdminRolePtr(v *AdminRoleArgs) AdminRolePtrInput

type AdminRolePtrOutput 

type AdminRolePtrOutput struct{ *pulumi.OutputState }

func (AdminRolePtrOutput) Elem 

func (o AdminRolePtrOutput) Elem() AdminRoleOutput

func (AdminRolePtrOutput) ElementType 

func (AdminRolePtrOutput) ElementType() reflect.Type

func (AdminRolePtrOutput) Name 

func (o AdminRolePtrOutput) Name() pulumi.StringPtrOutput

IAM role with admin access.

func (AdminRolePtrOutput) Path 

func (o AdminRolePtrOutput) Path() pulumi.StringPtrOutput

Path of admin IAM role. Defaults to '/'

func (AdminRolePtrOutput) PermissionsBoundaryArn 

func (o AdminRolePtrOutput) PermissionsBoundaryArn() pulumi.StringPtrOutput

Permissions boundary ARN to use for admin role.

func (AdminRolePtrOutput) PolicyArns 

func (o AdminRolePtrOutput) PolicyArns() pulumi.StringArrayOutput

List of policy ARNs to use for admin role.

func (AdminRolePtrOutput) Tags 

func (o AdminRolePtrOutput) Tags() pulumi.StringMapOutput

A map of tags to add.

func (AdminRolePtrOutput) ToAdminRolePtrOutput 

func (o AdminRolePtrOutput) ToAdminRolePtrOutput() AdminRolePtrOutput

func (AdminRolePtrOutput) ToAdminRolePtrOutputWithContext 

func (o AdminRolePtrOutput) ToAdminRolePtrOutputWithContext(ctx context.Context) AdminRolePtrOutput

type AdminRoleWithMFA 

type AdminRoleWithMFA struct {
	// IAM role with admin access.
	Name *string `pulumi:"name"`
	// Path of admin IAM role.
	Path *string `pulumi:"path"`
	// Permissions boundary ARN to use for admin role.
	PermissionsBoundaryArn *string `pulumi:"permissionsBoundaryArn"`
	// List of policy ARNs to use for admin role.
	PolicyArns []string `pulumi:"policyArns"`
	// Whether admin role requires MFA.
	RequiresMfa *bool `pulumi:"requiresMfa"`
	// A map of tags to add.
	Tags map[string]string `pulumi:"tags"`
}

The admin role.

type AdminRoleWithMFAArgs 

type AdminRoleWithMFAArgs struct {
	// IAM role with admin access.
	Name pulumi.StringPtrInput `pulumi:"name"`
	// Path of admin IAM role.
	Path pulumi.StringPtrInput `pulumi:"path"`
	// Permissions boundary ARN to use for admin role.
	PermissionsBoundaryArn pulumi.StringPtrInput `pulumi:"permissionsBoundaryArn"`
	// List of policy ARNs to use for admin role.
	PolicyArns pulumi.StringArrayInput `pulumi:"policyArns"`
	// Whether admin role requires MFA.
	RequiresMfa pulumi.BoolPtrInput `pulumi:"requiresMfa"`
	// A map of tags to add.
	Tags pulumi.StringMapInput `pulumi:"tags"`
}

The admin role.

func (AdminRoleWithMFAArgs) ElementType 

func (AdminRoleWithMFAArgs) ElementType() reflect.Type

func (AdminRoleWithMFAArgs) ToAdminRoleWithMFAOutput 

func (i AdminRoleWithMFAArgs) ToAdminRoleWithMFAOutput() AdminRoleWithMFAOutput

func (AdminRoleWithMFAArgs) ToAdminRoleWithMFAOutputWithContext 

func (i AdminRoleWithMFAArgs) ToAdminRoleWithMFAOutputWithContext(ctx context.Context) AdminRoleWithMFAOutput

type AdminRoleWithMFAInput 

type AdminRoleWithMFAInput interface {
	pulumi.Input

	ToAdminRoleWithMFAOutput() AdminRoleWithMFAOutput
	ToAdminRoleWithMFAOutputWithContext(context.Context) AdminRoleWithMFAOutput
}

AdminRoleWithMFAInput is an input type that accepts AdminRoleWithMFAArgs and AdminRoleWithMFAOutput values. You can construct a concrete instance of `AdminRoleWithMFAInput` via: 

AdminRoleWithMFAArgs{...}

type AdminRoleWithMFAOutput 

type AdminRoleWithMFAOutput struct{ *pulumi.OutputState }

The admin role.

func (AdminRoleWithMFAOutput) ElementType 

func (AdminRoleWithMFAOutput) ElementType() reflect.Type

func (AdminRoleWithMFAOutput) Name 

func (o AdminRoleWithMFAOutput) Name() pulumi.StringPtrOutput

IAM role with admin access.

func (AdminRoleWithMFAOutput) Path 

func (o AdminRoleWithMFAOutput) Path() pulumi.StringPtrOutput

Path of admin IAM role.

func (AdminRoleWithMFAOutput) PermissionsBoundaryArn 

func (o AdminRoleWithMFAOutput) PermissionsBoundaryArn() pulumi.StringPtrOutput

Permissions boundary ARN to use for admin role.

func (AdminRoleWithMFAOutput) PolicyArns 

func (o AdminRoleWithMFAOutput) PolicyArns() pulumi.StringArrayOutput

List of policy ARNs to use for admin role.

func (AdminRoleWithMFAOutput) RequiresMfa 

func (o AdminRoleWithMFAOutput) RequiresMfa() pulumi.BoolPtrOutput

Whether admin role requires MFA.

func (AdminRoleWithMFAOutput) Tags 

func (o AdminRoleWithMFAOutput) Tags() pulumi.StringMapOutput

A map of tags to add.

func (AdminRoleWithMFAOutput) ToAdminRoleWithMFAOutput 

func (o AdminRoleWithMFAOutput) ToAdminRoleWithMFAOutput() AdminRoleWithMFAOutput

func (AdminRoleWithMFAOutput) ToAdminRoleWithMFAOutputWithContext 

func (o AdminRoleWithMFAOutput) ToAdminRoleWithMFAOutputWithContext(ctx context.Context) AdminRoleWithMFAOutput

type AssumableRole 

type AssumableRole struct {
	pulumi.ResourceState

	InstanceProfile pulumi.StringMapOutput `pulumi:"instanceProfile"`
	Role            pulumi.StringMapOutput `pulumi:"role"`
}

This resource helps you create a single IAM Role which can be assumed by trusted resources. Trusted resources can be any IAM ARNs, typically, AWS Accounts and Users.

## Example Usage ## Assumable Role

```go package main

import ( 

iam "github.com/pulumi/pulumi-aws-iam/sdk/go/aws-iam"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
    pulumi.Run(func(ctx *pulumi.Context) error {
        assumableRole, err := iam.NewAssumableRole(ctx, "assumable-role", &iam.AssumableRoleArgs{
            TrustedRoleArns: pulumi.ToStringArray([]string{"arn:aws:iam::307990089504:root", "arn:aws:iam::835367859851:user/pulumipus"}),
            Role: &iam.RoleWithMFAArgs{
                Name:        pulumi.String("custom"),
                RequiresMfa: pulumi.BoolPtr(true),
                PolicyArns:  pulumi.ToStringArray([]string{"arn:aws:iam::aws:policy/AmazonCognitoReadOnly", "arn:aws:iam::aws:policy/AlexaForBusinessFullAccess"}),
            },
        })
        if err != nil {
            return err
        }

        ctx.Export("assumableRole", assumableRole)

        return nil
    })
}

``` {{ /example }}

func NewAssumableRole 

func NewAssumableRole(ctx *pulumi.Context,
	name string, args *AssumableRoleArgs, opts ...pulumi.ResourceOption) (*AssumableRole, error)

NewAssumableRole registers a new resource with the given unique name, arguments, and options.

func (*AssumableRole) ElementType 

func (*AssumableRole) ElementType() reflect.Type

func (*AssumableRole) ToAssumableRoleOutput 

func (i *AssumableRole) ToAssumableRoleOutput() AssumableRoleOutput

func (*AssumableRole) ToAssumableRoleOutputWithContext 

func (i *AssumableRole) ToAssumableRoleOutputWithContext(ctx context.Context) AssumableRoleOutput

type AssumableRoleArgs 

type AssumableRoleArgs struct {
	// Whether to attach an admin policy to a role.
	AttachAdminPolicy pulumi.BoolPtrInput
	// Whether to attach a poweruser policy to a role.
	AttachPoweruserPolicy pulumi.BoolPtrInput
	// Whether to attach a readonly policy to a role.
	AttachReadonlyPolicy pulumi.BoolPtrInput
	// A custom role trust policy.
	CustomRoleTrustPolicy pulumi.StringPtrInput
	// Whether policies should be detached from this role when destroying.
	ForceDetachPolicies pulumi.BoolPtrInput
	// Maximum CLI/API session duration in seconds between 3600 and 43200.
	MaxSessionDuration pulumi.IntPtrInput
	// Max age of valid MFA (in seconds) for roles which require MFA.
	MfaAge pulumi.IntPtrInput
	// An IAM role that requires MFA.
	Role RoleWithMFAPtrInput
	// STS ExternalId condition values to use with a role (when MFA is not required).
	RoleStsExternalIds pulumi.StringArrayInput
	// A map of tags to add.
	Tags pulumi.StringMapInput
	// Actions of STS.
	TrustedRoleActions pulumi.StringArrayInput
	// ARNs of AWS entities who can assume these roles.
	TrustedRoleArns pulumi.StringArrayInput
	// AWS Services that can assume these roles.
	TrustedRoleServices pulumi.StringArrayInput
}

The set of arguments for constructing a AssumableRole resource.

func (AssumableRoleArgs) ElementType 

func (AssumableRoleArgs) ElementType() reflect.Type

type AssumableRoleArray 

type AssumableRoleArray []AssumableRoleInput

func (AssumableRoleArray) ElementType 

func (AssumableRoleArray) ElementType() reflect.Type

func (AssumableRoleArray) ToAssumableRoleArrayOutput 

func (i AssumableRoleArray) ToAssumableRoleArrayOutput() AssumableRoleArrayOutput

func (AssumableRoleArray) ToAssumableRoleArrayOutputWithContext 

func (i AssumableRoleArray) ToAssumableRoleArrayOutputWithContext(ctx context.Context) AssumableRoleArrayOutput

type AssumableRoleArrayInput 

type AssumableRoleArrayInput interface {
	pulumi.Input

	ToAssumableRoleArrayOutput() AssumableRoleArrayOutput
	ToAssumableRoleArrayOutputWithContext(context.Context) AssumableRoleArrayOutput
}

AssumableRoleArrayInput is an input type that accepts AssumableRoleArray and AssumableRoleArrayOutput values. You can construct a concrete instance of `AssumableRoleArrayInput` via: 

AssumableRoleArray{ AssumableRoleArgs{...} }

type AssumableRoleArrayOutput 

type AssumableRoleArrayOutput struct{ *pulumi.OutputState }

func (AssumableRoleArrayOutput) ElementType 

func (AssumableRoleArrayOutput) ElementType() reflect.Type

func (AssumableRoleArrayOutput) Index 

func (o AssumableRoleArrayOutput) Index(i pulumi.IntInput) AssumableRoleOutput

func (AssumableRoleArrayOutput) ToAssumableRoleArrayOutput 

func (o AssumableRoleArrayOutput) ToAssumableRoleArrayOutput() AssumableRoleArrayOutput

func (AssumableRoleArrayOutput) ToAssumableRoleArrayOutputWithContext 

func (o AssumableRoleArrayOutput) ToAssumableRoleArrayOutputWithContext(ctx context.Context) AssumableRoleArrayOutput

type AssumableRoleInput 

type AssumableRoleInput interface {
	pulumi.Input

	ToAssumableRoleOutput() AssumableRoleOutput
	ToAssumableRoleOutputWithContext(ctx context.Context) AssumableRoleOutput
}

type AssumableRoleMap 

type AssumableRoleMap map[string]AssumableRoleInput

func (AssumableRoleMap) ElementType 

func (AssumableRoleMap) ElementType() reflect.Type

func (AssumableRoleMap) ToAssumableRoleMapOutput 

func (i AssumableRoleMap) ToAssumableRoleMapOutput() AssumableRoleMapOutput

func (AssumableRoleMap) ToAssumableRoleMapOutputWithContext 

func (i AssumableRoleMap) ToAssumableRoleMapOutputWithContext(ctx context.Context) AssumableRoleMapOutput

type AssumableRoleMapInput 

type AssumableRoleMapInput interface {
	pulumi.Input

	ToAssumableRoleMapOutput() AssumableRoleMapOutput
	ToAssumableRoleMapOutputWithContext(context.Context) AssumableRoleMapOutput
}

AssumableRoleMapInput is an input type that accepts AssumableRoleMap and AssumableRoleMapOutput values. You can construct a concrete instance of `AssumableRoleMapInput` via: 

AssumableRoleMap{ "key": AssumableRoleArgs{...} }

type AssumableRoleMapOutput 

type AssumableRoleMapOutput struct{ *pulumi.OutputState }

func (AssumableRoleMapOutput) ElementType 

func (AssumableRoleMapOutput) ElementType() reflect.Type

func (AssumableRoleMapOutput) MapIndex 

func (o AssumableRoleMapOutput) MapIndex(k pulumi.StringInput) AssumableRoleOutput

func (AssumableRoleMapOutput) ToAssumableRoleMapOutput 

func (o AssumableRoleMapOutput) ToAssumableRoleMapOutput() AssumableRoleMapOutput

func (AssumableRoleMapOutput) ToAssumableRoleMapOutputWithContext 

func (o AssumableRoleMapOutput) ToAssumableRoleMapOutputWithContext(ctx context.Context) AssumableRoleMapOutput

type AssumableRoleOutput 

type AssumableRoleOutput struct{ *pulumi.OutputState }

func (AssumableRoleOutput) ElementType 

func (AssumableRoleOutput) ElementType() reflect.Type

func (AssumableRoleOutput) InstanceProfile 

func (o AssumableRoleOutput) InstanceProfile() pulumi.StringMapOutput

func (AssumableRoleOutput) Role 

func (o AssumableRoleOutput) Role() pulumi.StringMapOutput

func (AssumableRoleOutput) ToAssumableRoleOutput 

func (o AssumableRoleOutput) ToAssumableRoleOutput() AssumableRoleOutput

func (AssumableRoleOutput) ToAssumableRoleOutputWithContext 

func (o AssumableRoleOutput) ToAssumableRoleOutputWithContext(ctx context.Context) AssumableRoleOutput

type AssumableRoleWithOIDC 

type AssumableRoleWithOIDC struct {
	pulumi.ResourceState

	// ARN of IAM role.
	Arn pulumi.StringOutput `pulumi:"arn"`
	// Name of IAM role.
	Name pulumi.StringOutput `pulumi:"name"`
	// Path of IAM role.
	Path pulumi.StringOutput `pulumi:"path"`
	// Unique ID of IAM role.
	UniqueId pulumi.StringOutput `pulumi:"uniqueId"`
}

This resources helps you create a single IAM role which can be assume by trusted resources using OpenID Connect Federated Users.

## Example Usage ## Assumable Role With OIDC

```go package main

import ( 

iam "github.com/pulumi/pulumi-aws-iam/sdk/go/aws-iam"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
    pulumi.Run(func(ctx *pulumi.Context) error {
        assumableRoleWithOIDC, err := iam.NewAssumableRoleWithOIDC(ctx, "assumable-role-with-oidc", &iam.AssumableRoleWithOIDCArgs{
            Role: iam.RoleArgs{
                Name:       pulumi.String("oidc-role"),
                PolicyArns: pulumi.ToStringArray([]string{"arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy"}),
            },
            Tags: pulumi.ToStringMap(map[string]string{
                "Role": "oidc-role",
            }),
            ProviderUrls: pulumi.ToStringArray([]string{"oidc.eks.eu-west-1.amazonaws.com/id/BA9E170D464AF7B92084EF72A69B9DC8"}),
        })
        if err != nil {
            return err
        }

        ctx.Export("assumableRoleWithOIDC", assumableRoleWithOIDC)

        return nil
    })
}

``` {{ /example }}

func NewAssumableRoleWithOIDC 

func NewAssumableRoleWithOIDC(ctx *pulumi.Context,
	name string, args *AssumableRoleWithOIDCArgs, opts ...pulumi.ResourceOption) (*AssumableRoleWithOIDC, error)

NewAssumableRoleWithOIDC registers a new resource with the given unique name, arguments, and options.

func (*AssumableRoleWithOIDC) ElementType 

func (*AssumableRoleWithOIDC) ElementType() reflect.Type

func (*AssumableRoleWithOIDC) ToAssumableRoleWithOIDCOutput 

func (i *AssumableRoleWithOIDC) ToAssumableRoleWithOIDCOutput() AssumableRoleWithOIDCOutput

func (*AssumableRoleWithOIDC) ToAssumableRoleWithOIDCOutputWithContext 

func (i *AssumableRoleWithOIDC) ToAssumableRoleWithOIDCOutputWithContext(ctx context.Context) AssumableRoleWithOIDCOutput

type AssumableRoleWithOIDCArgs 

type AssumableRoleWithOIDCArgs struct {
	// The AWS account ID where the OIDC provider lives, leave empty to use the account for the AWS provider.
	AwsAccountId pulumi.StringPtrInput
	// Whether policies should be detached from this role when destroying.
	ForceDetachPolicies pulumi.BoolPtrInput
	// Maximum CLI/API session duration in seconds between 3600 and 43200.
	MaxSessionDuration pulumi.IntPtrInput
	// The audience to be added to the role policy. Set to sts.amazonaws.com for cross-account assumable role. Leave empty otherwise.
	OidcFullyQualifiedAudiences pulumi.StringArrayInput
	// The fully qualified OIDC subjects to be added to the role policy.
	OidcFullyQualifiedSubjects pulumi.StringArrayInput
	// The OIDC subject using wildcards to be added to the role policy.
	OidcSubjectsWithWildcards pulumi.StringArrayInput
	// List of URLs of the OIDC Providers.
	ProviderUrls pulumi.StringArrayInput
	// The IAM role.
	Role RolePtrInput
	// A map of tags to add.
	Tags pulumi.StringMapInput
}

The set of arguments for constructing a AssumableRoleWithOIDC resource.

func (AssumableRoleWithOIDCArgs) ElementType 

func (AssumableRoleWithOIDCArgs) ElementType() reflect.Type

type AssumableRoleWithOIDCArray 

type AssumableRoleWithOIDCArray []AssumableRoleWithOIDCInput

func (AssumableRoleWithOIDCArray) ElementType 

func (AssumableRoleWithOIDCArray) ElementType() reflect.Type

func (AssumableRoleWithOIDCArray) ToAssumableRoleWithOIDCArrayOutput 

func (i AssumableRoleWithOIDCArray) ToAssumableRoleWithOIDCArrayOutput() AssumableRoleWithOIDCArrayOutput

func (AssumableRoleWithOIDCArray) ToAssumableRoleWithOIDCArrayOutputWithContext 

func (i AssumableRoleWithOIDCArray) ToAssumableRoleWithOIDCArrayOutputWithContext(ctx context.Context) AssumableRoleWithOIDCArrayOutput

type AssumableRoleWithOIDCArrayInput 

type AssumableRoleWithOIDCArrayInput interface {
	pulumi.Input

	ToAssumableRoleWithOIDCArrayOutput() AssumableRoleWithOIDCArrayOutput
	ToAssumableRoleWithOIDCArrayOutputWithContext(context.Context) AssumableRoleWithOIDCArrayOutput
}

AssumableRoleWithOIDCArrayInput is an input type that accepts AssumableRoleWithOIDCArray and AssumableRoleWithOIDCArrayOutput values. You can construct a concrete instance of `AssumableRoleWithOIDCArrayInput` via: 

AssumableRoleWithOIDCArray{ AssumableRoleWithOIDCArgs{...} }

type AssumableRoleWithOIDCArrayOutput 

type AssumableRoleWithOIDCArrayOutput struct{ *pulumi.OutputState }

func (AssumableRoleWithOIDCArrayOutput) ElementType 

func (AssumableRoleWithOIDCArrayOutput) ElementType() reflect.Type

func (AssumableRoleWithOIDCArrayOutput) Index 

func (o AssumableRoleWithOIDCArrayOutput) Index(i pulumi.IntInput) AssumableRoleWithOIDCOutput

func (AssumableRoleWithOIDCArrayOutput) ToAssumableRoleWithOIDCArrayOutput 

func (o AssumableRoleWithOIDCArrayOutput) ToAssumableRoleWithOIDCArrayOutput() AssumableRoleWithOIDCArrayOutput

func (AssumableRoleWithOIDCArrayOutput) ToAssumableRoleWithOIDCArrayOutputWithContext 

func (o AssumableRoleWithOIDCArrayOutput) ToAssumableRoleWithOIDCArrayOutputWithContext(ctx context.Context) AssumableRoleWithOIDCArrayOutput

type AssumableRoleWithOIDCInput 

type AssumableRoleWithOIDCInput interface {
	pulumi.Input

	ToAssumableRoleWithOIDCOutput() AssumableRoleWithOIDCOutput
	ToAssumableRoleWithOIDCOutputWithContext(ctx context.Context) AssumableRoleWithOIDCOutput
}

type AssumableRoleWithOIDCMap 

type AssumableRoleWithOIDCMap map[string]AssumableRoleWithOIDCInput

func (AssumableRoleWithOIDCMap) ElementType 

func (AssumableRoleWithOIDCMap) ElementType() reflect.Type

func (AssumableRoleWithOIDCMap) ToAssumableRoleWithOIDCMapOutput 

func (i AssumableRoleWithOIDCMap) ToAssumableRoleWithOIDCMapOutput() AssumableRoleWithOIDCMapOutput

func (AssumableRoleWithOIDCMap) ToAssumableRoleWithOIDCMapOutputWithContext 

func (i AssumableRoleWithOIDCMap) ToAssumableRoleWithOIDCMapOutputWithContext(ctx context.Context) AssumableRoleWithOIDCMapOutput

type AssumableRoleWithOIDCMapInput 

type AssumableRoleWithOIDCMapInput interface {
	pulumi.Input

	ToAssumableRoleWithOIDCMapOutput() AssumableRoleWithOIDCMapOutput
	ToAssumableRoleWithOIDCMapOutputWithContext(context.Context) AssumableRoleWithOIDCMapOutput
}

AssumableRoleWithOIDCMapInput is an input type that accepts AssumableRoleWithOIDCMap and AssumableRoleWithOIDCMapOutput values. You can construct a concrete instance of `AssumableRoleWithOIDCMapInput` via: 

AssumableRoleWithOIDCMap{ "key": AssumableRoleWithOIDCArgs{...} }

type AssumableRoleWithOIDCMapOutput 

type AssumableRoleWithOIDCMapOutput struct{ *pulumi.OutputState }

func (AssumableRoleWithOIDCMapOutput) ElementType 

func (AssumableRoleWithOIDCMapOutput) ElementType() reflect.Type

func (AssumableRoleWithOIDCMapOutput) MapIndex 

func (o AssumableRoleWithOIDCMapOutput) MapIndex(k pulumi.StringInput) AssumableRoleWithOIDCOutput

func (AssumableRoleWithOIDCMapOutput) ToAssumableRoleWithOIDCMapOutput 

func (o AssumableRoleWithOIDCMapOutput) ToAssumableRoleWithOIDCMapOutput() AssumableRoleWithOIDCMapOutput

func (AssumableRoleWithOIDCMapOutput) ToAssumableRoleWithOIDCMapOutputWithContext 

func (o AssumableRoleWithOIDCMapOutput) ToAssumableRoleWithOIDCMapOutputWithContext(ctx context.Context) AssumableRoleWithOIDCMapOutput

type AssumableRoleWithOIDCOutput 

type AssumableRoleWithOIDCOutput struct{ *pulumi.OutputState }

func (AssumableRoleWithOIDCOutput) Arn 

func (o AssumableRoleWithOIDCOutput) Arn() pulumi.StringOutput

ARN of IAM role.

func (AssumableRoleWithOIDCOutput) ElementType 

func (AssumableRoleWithOIDCOutput) ElementType() reflect.Type

func (AssumableRoleWithOIDCOutput) Name 

func (o AssumableRoleWithOIDCOutput) Name() pulumi.StringOutput

Name of IAM role.

func (AssumableRoleWithOIDCOutput) Path 

func (o AssumableRoleWithOIDCOutput) Path() pulumi.StringOutput

Path of IAM role.

func (AssumableRoleWithOIDCOutput) ToAssumableRoleWithOIDCOutput 

func (o AssumableRoleWithOIDCOutput) ToAssumableRoleWithOIDCOutput() AssumableRoleWithOIDCOutput

func (AssumableRoleWithOIDCOutput) ToAssumableRoleWithOIDCOutputWithContext 

func (o AssumableRoleWithOIDCOutput) ToAssumableRoleWithOIDCOutputWithContext(ctx context.Context) AssumableRoleWithOIDCOutput

func (AssumableRoleWithOIDCOutput) UniqueId 

func (o AssumableRoleWithOIDCOutput) UniqueId() pulumi.StringOutput

Unique ID of IAM role.

type AssumableRoleWithSAML 

type AssumableRoleWithSAML struct {
	pulumi.ResourceState

	// ARN of IAM role.
	RoleArn pulumi.StringOutput `pulumi:"roleArn"`
	// Name of IAM role.
	RoleName pulumi.StringOutput `pulumi:"roleName"`
	// Path of IAM role.
	RolePath pulumi.StringOutput `pulumi:"rolePath"`
	// Unique ID of IAM role.
	RoleUniqueId pulumi.StringOutput `pulumi:"roleUniqueId"`
}

This resource helps you create a single IAM Role which can be assumed by trusted resources using SAML Federated Users.

## Example Usage ## Assumable Role With SAML

```go package main

import ( 

iam "github.com/pulumi/pulumi-aws-iam/sdk/go/aws-iam"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
    pulumi.Run(func(ctx *pulumi.Context) error {
        assumableRoleWithSAML, err := iam.NewAssumableRoleWithSAML(ctx, "assumable-role-with-saml", &iam.AssumableRoleWithSAMLArgs{
            Role: iam.RoleArgs{
                Name:       pulumi.String("saml-role"),
                PolicyArns: pulumi.ToStringArray([]string{"arn:aws:iam::aws:policy/ReadOnlyAccess"}),
            },
            Tags: pulumi.ToStringMap(map[string]string{
                "Role": "saml-role",
            }),
            ProviderIds: pulumi.ToStringArray([]string{"arn:aws:iam::235367859851:saml-provider/idp_saml"}),
        })
        if err != nil {
            return err
        }

        ctx.Export("assumableRoleWithSAML", assumableRoleWithSAML)

        return nil
    })
}

``` {{ /example }}

func NewAssumableRoleWithSAML 

func NewAssumableRoleWithSAML(ctx *pulumi.Context,
	name string, args *AssumableRoleWithSAMLArgs, opts ...pulumi.ResourceOption) (*AssumableRoleWithSAML, error)

NewAssumableRoleWithSAML registers a new resource with the given unique name, arguments, and options.

func (*AssumableRoleWithSAML) ElementType 

func (*AssumableRoleWithSAML) ElementType() reflect.Type

func (*AssumableRoleWithSAML) ToAssumableRoleWithSAMLOutput 

func (i *AssumableRoleWithSAML) ToAssumableRoleWithSAMLOutput() AssumableRoleWithSAMLOutput

func (*AssumableRoleWithSAML) ToAssumableRoleWithSAMLOutputWithContext 

func (i *AssumableRoleWithSAML) ToAssumableRoleWithSAMLOutputWithContext(ctx context.Context) AssumableRoleWithSAMLOutput

type AssumableRoleWithSAMLArgs 

type AssumableRoleWithSAMLArgs struct {
	// AWS SAML Endpoint.
	AwsSamlEndpoint pulumi.StringPtrInput
	// Whether policies should be detached from this role when destroying.
	ForceDetachPolicies pulumi.BoolPtrInput
	// Maximum CLI/API session duration in seconds between 3600 and 43200.
	MaxSessionDuration pulumi.IntPtrInput
	// List of SAML Provider IDs.
	ProviderIds pulumi.StringArrayInput
	Role        RolePtrInput
	// A map of tags to add.
	Tags pulumi.StringMapInput
}

The set of arguments for constructing a AssumableRoleWithSAML resource.

func (AssumableRoleWithSAMLArgs) ElementType 

func (AssumableRoleWithSAMLArgs) ElementType() reflect.Type

type AssumableRoleWithSAMLArray 

type AssumableRoleWithSAMLArray []AssumableRoleWithSAMLInput

func (AssumableRoleWithSAMLArray) ElementType 

func (AssumableRoleWithSAMLArray) ElementType() reflect.Type

func (AssumableRoleWithSAMLArray) ToAssumableRoleWithSAMLArrayOutput 

func (i AssumableRoleWithSAMLArray) ToAssumableRoleWithSAMLArrayOutput() AssumableRoleWithSAMLArrayOutput

func (AssumableRoleWithSAMLArray) ToAssumableRoleWithSAMLArrayOutputWithContext 

func (i AssumableRoleWithSAMLArray) ToAssumableRoleWithSAMLArrayOutputWithContext(ctx context.Context) AssumableRoleWithSAMLArrayOutput

type AssumableRoleWithSAMLArrayInput 

type AssumableRoleWithSAMLArrayInput interface {
	pulumi.Input

	ToAssumableRoleWithSAMLArrayOutput() AssumableRoleWithSAMLArrayOutput
	ToAssumableRoleWithSAMLArrayOutputWithContext(context.Context) AssumableRoleWithSAMLArrayOutput
}

AssumableRoleWithSAMLArrayInput is an input type that accepts AssumableRoleWithSAMLArray and AssumableRoleWithSAMLArrayOutput values. You can construct a concrete instance of `AssumableRoleWithSAMLArrayInput` via: 

AssumableRoleWithSAMLArray{ AssumableRoleWithSAMLArgs{...} }

type AssumableRoleWithSAMLArrayOutput 

type AssumableRoleWithSAMLArrayOutput struct{ *pulumi.OutputState }

func (AssumableRoleWithSAMLArrayOutput) ElementType 

func (AssumableRoleWithSAMLArrayOutput) ElementType() reflect.Type

func (AssumableRoleWithSAMLArrayOutput) Index 

func (o AssumableRoleWithSAMLArrayOutput) Index(i pulumi.IntInput) AssumableRoleWithSAMLOutput

func (AssumableRoleWithSAMLArrayOutput) ToAssumableRoleWithSAMLArrayOutput 

func (o AssumableRoleWithSAMLArrayOutput) ToAssumableRoleWithSAMLArrayOutput() AssumableRoleWithSAMLArrayOutput

func (AssumableRoleWithSAMLArrayOutput) ToAssumableRoleWithSAMLArrayOutputWithContext 

func (o AssumableRoleWithSAMLArrayOutput) ToAssumableRoleWithSAMLArrayOutputWithContext(ctx context.Context) AssumableRoleWithSAMLArrayOutput

type AssumableRoleWithSAMLInput 

type AssumableRoleWithSAMLInput interface {
	pulumi.Input

	ToAssumableRoleWithSAMLOutput() AssumableRoleWithSAMLOutput
	ToAssumableRoleWithSAMLOutputWithContext(ctx context.Context) AssumableRoleWithSAMLOutput
}

type AssumableRoleWithSAMLMap 

type AssumableRoleWithSAMLMap map[string]AssumableRoleWithSAMLInput

func (AssumableRoleWithSAMLMap) ElementType 

func (AssumableRoleWithSAMLMap) ElementType() reflect.Type

func (AssumableRoleWithSAMLMap) ToAssumableRoleWithSAMLMapOutput 

func (i AssumableRoleWithSAMLMap) ToAssumableRoleWithSAMLMapOutput() AssumableRoleWithSAMLMapOutput

func (AssumableRoleWithSAMLMap) ToAssumableRoleWithSAMLMapOutputWithContext 

func (i AssumableRoleWithSAMLMap) ToAssumableRoleWithSAMLMapOutputWithContext(ctx context.Context) AssumableRoleWithSAMLMapOutput

type AssumableRoleWithSAMLMapInput 

type AssumableRoleWithSAMLMapInput interface {
	pulumi.Input

	ToAssumableRoleWithSAMLMapOutput() AssumableRoleWithSAMLMapOutput
	ToAssumableRoleWithSAMLMapOutputWithContext(context.Context) AssumableRoleWithSAMLMapOutput
}

AssumableRoleWithSAMLMapInput is an input type that accepts AssumableRoleWithSAMLMap and AssumableRoleWithSAMLMapOutput values. You can construct a concrete instance of `AssumableRoleWithSAMLMapInput` via: 

AssumableRoleWithSAMLMap{ "key": AssumableRoleWithSAMLArgs{...} }

type AssumableRoleWithSAMLMapOutput 

type AssumableRoleWithSAMLMapOutput struct{ *pulumi.OutputState }

func (AssumableRoleWithSAMLMapOutput) ElementType 

func (AssumableRoleWithSAMLMapOutput) ElementType() reflect.Type

func (AssumableRoleWithSAMLMapOutput) MapIndex 

func (o AssumableRoleWithSAMLMapOutput) MapIndex(k pulumi.StringInput) AssumableRoleWithSAMLOutput

func (AssumableRoleWithSAMLMapOutput) ToAssumableRoleWithSAMLMapOutput 

func (o AssumableRoleWithSAMLMapOutput) ToAssumableRoleWithSAMLMapOutput() AssumableRoleWithSAMLMapOutput

func (AssumableRoleWithSAMLMapOutput) ToAssumableRoleWithSAMLMapOutputWithContext 

func (o AssumableRoleWithSAMLMapOutput) ToAssumableRoleWithSAMLMapOutputWithContext(ctx context.Context) AssumableRoleWithSAMLMapOutput

type AssumableRoleWithSAMLOutput 

type AssumableRoleWithSAMLOutput struct{ *pulumi.OutputState }

func (AssumableRoleWithSAMLOutput) ElementType 

func (AssumableRoleWithSAMLOutput) ElementType() reflect.Type

func (AssumableRoleWithSAMLOutput) RoleArn 

func (o AssumableRoleWithSAMLOutput) RoleArn() pulumi.StringOutput

ARN of IAM role.

func (AssumableRoleWithSAMLOutput) RoleName 

func (o AssumableRoleWithSAMLOutput) RoleName() pulumi.StringOutput

Name of IAM role.

func (AssumableRoleWithSAMLOutput) RolePath 

func (o AssumableRoleWithSAMLOutput) RolePath() pulumi.StringOutput

Path of IAM role.

func (AssumableRoleWithSAMLOutput) RoleUniqueId 

func (o AssumableRoleWithSAMLOutput) RoleUniqueId() pulumi.StringOutput

Unique ID of IAM role.

func (AssumableRoleWithSAMLOutput) ToAssumableRoleWithSAMLOutput 

func (o AssumableRoleWithSAMLOutput) ToAssumableRoleWithSAMLOutput() AssumableRoleWithSAMLOutput

func (AssumableRoleWithSAMLOutput) ToAssumableRoleWithSAMLOutputWithContext 

func (o AssumableRoleWithSAMLOutput) ToAssumableRoleWithSAMLOutputWithContext(ctx context.Context) AssumableRoleWithSAMLOutput

type AssumableRoles 

type AssumableRoles struct {
	pulumi.ResourceState

	Admin     pulumi.StringMapOutput `pulumi:"admin"`
	Poweruser pulumi.StringMapOutput `pulumi:"poweruser"`
	Readonly  pulumi.StringMapOutput `pulumi:"readonly"`
}

This resource helps you create predefined IAM roles (`admin`, `poweruser`, and `readonly`) which can be assumed by trusted resources. Trusted resources can be any IAM ARNs, typically, AWS Accounts and Users.

## Example Usage ## Assumable Roles

```go package main

import ( 

iam "github.com/pulumi/pulumi-aws-iam/sdk/go/aws-iam"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
    pulumi.Run(func(ctx *pulumi.Context) error {
        assumableRoles, err := iam.NewAssumableRoles(ctx, "assumable-roles", &iam.AssumableRolesArgs{
            TrustedRoleArns: pulumi.ToStringArray([]string{"arn:aws:iam::307990089504:root", "arn:aws:iam::835367859851:user/pulumipus"}),
            Admin:           iam.AdminRoleWithMFAArgs{},
            Poweruser: iam.PoweruserRoleWithMFAArgs{
                Name: pulumi.String("developer"),
            },
            Readonly: iam.ReadonlyRoleWithMFAArgs{
                RequiresMfa: pulumi.BoolPtr(true),
            },
        })
        if err != nil {
            return err
        }

        ctx.Export("assumableRoles", assumableRoles)

        return nil
    })
}

``` {{ /example }}

func NewAssumableRoles 

func NewAssumableRoles(ctx *pulumi.Context,
	name string, args *AssumableRolesArgs, opts ...pulumi.ResourceOption) (*AssumableRoles, error)

NewAssumableRoles registers a new resource with the given unique name, arguments, and options.

func (*AssumableRoles) ElementType 

func (*AssumableRoles) ElementType() reflect.Type

func (*AssumableRoles) ToAssumableRolesOutput 

func (i *AssumableRoles) ToAssumableRolesOutput() AssumableRolesOutput

func (*AssumableRoles) ToAssumableRolesOutputWithContext 

func (i *AssumableRoles) ToAssumableRolesOutputWithContext(ctx context.Context) AssumableRolesOutput

type AssumableRolesArgs 

type AssumableRolesArgs struct {
	Admin AdminRoleWithMFAInput
	// Whether policies should be detached from this role when destroying.
	ForceDetachPolicies pulumi.BoolPtrInput
	// Maximum CLI/API session duration in seconds between 3600 and 43200.
	MaxSessionDuration pulumi.IntPtrInput
	// Max age of valid MFA (in seconds) for roles which require MFA.
	MfaAge    pulumi.IntPtrInput
	Poweruser PoweruserRoleWithMFAPtrInput
	Readonly  ReadonlyRoleWithMFAPtrInput
	// ARNs of AWS entities who can assume these roles.
	TrustedRoleArns pulumi.StringArrayInput
	// AWS Services that can assume these roles.
	TrustedRoleServices pulumi.StringArrayInput
}

The set of arguments for constructing a AssumableRoles resource.

func (AssumableRolesArgs) ElementType 

func (AssumableRolesArgs) ElementType() reflect.Type

type AssumableRolesArray 

type AssumableRolesArray []AssumableRolesInput

func (AssumableRolesArray) ElementType 

func (AssumableRolesArray) ElementType() reflect.Type

func (AssumableRolesArray) ToAssumableRolesArrayOutput 

func (i AssumableRolesArray) ToAssumableRolesArrayOutput() AssumableRolesArrayOutput

func (AssumableRolesArray) ToAssumableRolesArrayOutputWithContext 

func (i AssumableRolesArray) ToAssumableRolesArrayOutputWithContext(ctx context.Context) AssumableRolesArrayOutput

type AssumableRolesArrayInput 

type AssumableRolesArrayInput interface {
	pulumi.Input

	ToAssumableRolesArrayOutput() AssumableRolesArrayOutput
	ToAssumableRolesArrayOutputWithContext(context.Context) AssumableRolesArrayOutput
}

AssumableRolesArrayInput is an input type that accepts AssumableRolesArray and AssumableRolesArrayOutput values. You can construct a concrete instance of `AssumableRolesArrayInput` via: 

AssumableRolesArray{ AssumableRolesArgs{...} }

type AssumableRolesArrayOutput 

type AssumableRolesArrayOutput struct{ *pulumi.OutputState }

func (AssumableRolesArrayOutput) ElementType 

func (AssumableRolesArrayOutput) ElementType() reflect.Type

func (AssumableRolesArrayOutput) Index 

func (o AssumableRolesArrayOutput) Index(i pulumi.IntInput) AssumableRolesOutput

func (AssumableRolesArrayOutput) ToAssumableRolesArrayOutput 

func (o AssumableRolesArrayOutput) ToAssumableRolesArrayOutput() AssumableRolesArrayOutput

func (AssumableRolesArrayOutput) ToAssumableRolesArrayOutputWithContext 

func (o AssumableRolesArrayOutput) ToAssumableRolesArrayOutputWithContext(ctx context.Context) AssumableRolesArrayOutput

type AssumableRolesInput 

type AssumableRolesInput interface {
	pulumi.Input

	ToAssumableRolesOutput() AssumableRolesOutput
	ToAssumableRolesOutputWithContext(ctx context.Context) AssumableRolesOutput
}

type AssumableRolesMap 

type AssumableRolesMap map[string]AssumableRolesInput

func (AssumableRolesMap) ElementType 

func (AssumableRolesMap) ElementType() reflect.Type

func (AssumableRolesMap) ToAssumableRolesMapOutput 

func (i AssumableRolesMap) ToAssumableRolesMapOutput() AssumableRolesMapOutput

func (AssumableRolesMap) ToAssumableRolesMapOutputWithContext 

func (i AssumableRolesMap) ToAssumableRolesMapOutputWithContext(ctx context.Context) AssumableRolesMapOutput

type AssumableRolesMapInput 

type AssumableRolesMapInput interface {
	pulumi.Input

	ToAssumableRolesMapOutput() AssumableRolesMapOutput
	ToAssumableRolesMapOutputWithContext(context.Context) AssumableRolesMapOutput
}

AssumableRolesMapInput is an input type that accepts AssumableRolesMap and AssumableRolesMapOutput values. You can construct a concrete instance of `AssumableRolesMapInput` via: 

AssumableRolesMap{ "key": AssumableRolesArgs{...} }

type AssumableRolesMapOutput 

type AssumableRolesMapOutput struct{ *pulumi.OutputState }

func (AssumableRolesMapOutput) ElementType 

func (AssumableRolesMapOutput) ElementType() reflect.Type

func (AssumableRolesMapOutput) MapIndex 

func (o AssumableRolesMapOutput) MapIndex(k pulumi.StringInput) AssumableRolesOutput

func (AssumableRolesMapOutput) ToAssumableRolesMapOutput 

func (o AssumableRolesMapOutput) ToAssumableRolesMapOutput() AssumableRolesMapOutput

func (AssumableRolesMapOutput) ToAssumableRolesMapOutputWithContext 

func (o AssumableRolesMapOutput) ToAssumableRolesMapOutputWithContext(ctx context.Context) AssumableRolesMapOutput

type AssumableRolesOutput 

type AssumableRolesOutput struct{ *pulumi.OutputState }

func (AssumableRolesOutput) Admin 

func (o AssumableRolesOutput) Admin() pulumi.StringMapOutput

func (AssumableRolesOutput) ElementType 

func (AssumableRolesOutput) ElementType() reflect.Type

func (AssumableRolesOutput) Poweruser 

func (o AssumableRolesOutput) Poweruser() pulumi.StringMapOutput

func (AssumableRolesOutput) Readonly 

func (o AssumableRolesOutput) Readonly() pulumi.StringMapOutput

func (AssumableRolesOutput) ToAssumableRolesOutput 

func (o AssumableRolesOutput) ToAssumableRolesOutput() AssumableRolesOutput

func (AssumableRolesOutput) ToAssumableRolesOutputWithContext 

func (o AssumableRolesOutput) ToAssumableRolesOutputWithContext(ctx context.Context) AssumableRolesOutput

type AssumableRolesWithSAML 

type AssumableRolesWithSAML struct {
	pulumi.ResourceState

	Admin     pulumi.StringMapOutput `pulumi:"admin"`
	Poweruser pulumi.StringMapOutput `pulumi:"poweruser"`
	Readonly  pulumi.StringMapOutput `pulumi:"readonly"`
}

This resource helps you create predefined IAM roles (`admin`, `poweruser`, and `readonly`) which can be assumed by trusted resources using SAML Federated Users.

## Example Usage ### Assumable Roles With SAML

```go package main

import ( 

iam "github.com/pulumi/pulumi-aws-iam/sdk/go/aws-iam"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
    pulumi.Run(func(ctx *pulumi.Context) error {
        assumableRolesWithSAML, err := iam.NewAssumableRolesWithSAML(ctx, "assumable-roles-with-saml", &iam.AssumableRolesWithSAMLArgs{
            ProviderIds: pulumi.ToStringArray([]string{"arn:aws:iam::235367859851:saml-provider/idp_saml"}),
            Admin:       iam.AdminRoleArgs{},
            Readonly:    iam.ReadonlyRoleArgs{},
            Poweruser: iam.PoweruserRoleArgs{
                Name: pulumi.String("developer"),
            },
        })
        if err != nil {
            return err
        }

        ctx.Export("assumableRolesWithSAML", assumableRolesWithSAML)

        return nil
    })
}

``` {{ /example }}

func NewAssumableRolesWithSAML 

func NewAssumableRolesWithSAML(ctx *pulumi.Context,
	name string, args *AssumableRolesWithSAMLArgs, opts ...pulumi.ResourceOption) (*AssumableRolesWithSAML, error)

NewAssumableRolesWithSAML registers a new resource with the given unique name, arguments, and options.

func (*AssumableRolesWithSAML) ElementType 

func (*AssumableRolesWithSAML) ElementType() reflect.Type

func (*AssumableRolesWithSAML) ToAssumableRolesWithSAMLOutput 

func (i *AssumableRolesWithSAML) ToAssumableRolesWithSAMLOutput() AssumableRolesWithSAMLOutput

func (*AssumableRolesWithSAML) ToAssumableRolesWithSAMLOutputWithContext 

func (i *AssumableRolesWithSAML) ToAssumableRolesWithSAMLOutputWithContext(ctx context.Context) AssumableRolesWithSAMLOutput

type AssumableRolesWithSAMLArgs 

type AssumableRolesWithSAMLArgs struct {
	Admin AdminRolePtrInput
	// AWS SAML Endpoint.
	AwsSamlEndpoint pulumi.StringPtrInput
	// Whether policies should be detached from this role when destroying.
	ForceDetachPolicies pulumi.BoolPtrInput
	// Maximum CLI/API session duration in seconds between 3600 and 43200.
	MaxSessionDuration pulumi.IntPtrInput
	Poweruser          PoweruserRolePtrInput
	// List of SAML Provider IDs.
	ProviderIds pulumi.StringArrayInput
	Readonly    ReadonlyRolePtrInput
}

The set of arguments for constructing a AssumableRolesWithSAML resource.

func (AssumableRolesWithSAMLArgs) ElementType 

func (AssumableRolesWithSAMLArgs) ElementType() reflect.Type

type AssumableRolesWithSAMLArray 

type AssumableRolesWithSAMLArray []AssumableRolesWithSAMLInput

func (AssumableRolesWithSAMLArray) ElementType 

func (AssumableRolesWithSAMLArray) ElementType() reflect.Type

func (AssumableRolesWithSAMLArray) ToAssumableRolesWithSAMLArrayOutput 

func (i AssumableRolesWithSAMLArray) ToAssumableRolesWithSAMLArrayOutput() AssumableRolesWithSAMLArrayOutput

func (AssumableRolesWithSAMLArray) ToAssumableRolesWithSAMLArrayOutputWithContext 

func (i AssumableRolesWithSAMLArray) ToAssumableRolesWithSAMLArrayOutputWithContext(ctx context.Context) AssumableRolesWithSAMLArrayOutput

type AssumableRolesWithSAMLArrayInput 

type AssumableRolesWithSAMLArrayInput interface {
	pulumi.Input

	ToAssumableRolesWithSAMLArrayOutput() AssumableRolesWithSAMLArrayOutput
	ToAssumableRolesWithSAMLArrayOutputWithContext(context.Context) AssumableRolesWithSAMLArrayOutput
}

AssumableRolesWithSAMLArrayInput is an input type that accepts AssumableRolesWithSAMLArray and AssumableRolesWithSAMLArrayOutput values. You can construct a concrete instance of `AssumableRolesWithSAMLArrayInput` via: 

AssumableRolesWithSAMLArray{ AssumableRolesWithSAMLArgs{...} }

type AssumableRolesWithSAMLArrayOutput 

type AssumableRolesWithSAMLArrayOutput struct{ *pulumi.OutputState }

func (AssumableRolesWithSAMLArrayOutput) ElementType 

func (AssumableRolesWithSAMLArrayOutput) ElementType() reflect.Type

func (AssumableRolesWithSAMLArrayOutput) Index 

func (o AssumableRolesWithSAMLArrayOutput) Index(i pulumi.IntInput) AssumableRolesWithSAMLOutput

func (AssumableRolesWithSAMLArrayOutput) ToAssumableRolesWithSAMLArrayOutput 

func (o AssumableRolesWithSAMLArrayOutput) ToAssumableRolesWithSAMLArrayOutput() AssumableRolesWithSAMLArrayOutput

func (AssumableRolesWithSAMLArrayOutput) ToAssumableRolesWithSAMLArrayOutputWithContext 

func (o AssumableRolesWithSAMLArrayOutput) ToAssumableRolesWithSAMLArrayOutputWithContext(ctx context.Context) AssumableRolesWithSAMLArrayOutput

type AssumableRolesWithSAMLInput 

type AssumableRolesWithSAMLInput interface {
	pulumi.Input

	ToAssumableRolesWithSAMLOutput() AssumableRolesWithSAMLOutput
	ToAssumableRolesWithSAMLOutputWithContext(ctx context.Context) AssumableRolesWithSAMLOutput
}

type AssumableRolesWithSAMLMap 

type AssumableRolesWithSAMLMap map[string]AssumableRolesWithSAMLInput

func (AssumableRolesWithSAMLMap) ElementType 

func (AssumableRolesWithSAMLMap) ElementType() reflect.Type

func (AssumableRolesWithSAMLMap) ToAssumableRolesWithSAMLMapOutput 

func (i AssumableRolesWithSAMLMap) ToAssumableRolesWithSAMLMapOutput() AssumableRolesWithSAMLMapOutput

func (AssumableRolesWithSAMLMap) ToAssumableRolesWithSAMLMapOutputWithContext 

func (i AssumableRolesWithSAMLMap) ToAssumableRolesWithSAMLMapOutputWithContext(ctx context.Context) AssumableRolesWithSAMLMapOutput

type AssumableRolesWithSAMLMapInput 

type AssumableRolesWithSAMLMapInput interface {
	pulumi.Input

	ToAssumableRolesWithSAMLMapOutput() AssumableRolesWithSAMLMapOutput
	ToAssumableRolesWithSAMLMapOutputWithContext(context.Context) AssumableRolesWithSAMLMapOutput
}

AssumableRolesWithSAMLMapInput is an input type that accepts AssumableRolesWithSAMLMap and AssumableRolesWithSAMLMapOutput values. You can construct a concrete instance of `AssumableRolesWithSAMLMapInput` via: 

AssumableRolesWithSAMLMap{ "key": AssumableRolesWithSAMLArgs{...} }

type AssumableRolesWithSAMLMapOutput 

type AssumableRolesWithSAMLMapOutput struct{ *pulumi.OutputState }

func (AssumableRolesWithSAMLMapOutput) ElementType 

func (AssumableRolesWithSAMLMapOutput) ElementType() reflect.Type

func (AssumableRolesWithSAMLMapOutput) MapIndex 

func (o AssumableRolesWithSAMLMapOutput) MapIndex(k pulumi.StringInput) AssumableRolesWithSAMLOutput

func (AssumableRolesWithSAMLMapOutput) ToAssumableRolesWithSAMLMapOutput 

func (o AssumableRolesWithSAMLMapOutput) ToAssumableRolesWithSAMLMapOutput() AssumableRolesWithSAMLMapOutput

func (AssumableRolesWithSAMLMapOutput) ToAssumableRolesWithSAMLMapOutputWithContext 

func (o AssumableRolesWithSAMLMapOutput) ToAssumableRolesWithSAMLMapOutputWithContext(ctx context.Context) AssumableRolesWithSAMLMapOutput

type AssumableRolesWithSAMLOutput 

type AssumableRolesWithSAMLOutput struct{ *pulumi.OutputState }

func (AssumableRolesWithSAMLOutput) Admin 

func (o AssumableRolesWithSAMLOutput) Admin() pulumi.StringMapOutput

func (AssumableRolesWithSAMLOutput) ElementType 

func (AssumableRolesWithSAMLOutput) ElementType() reflect.Type

func (AssumableRolesWithSAMLOutput) Poweruser 

func (o AssumableRolesWithSAMLOutput) Poweruser() pulumi.StringMapOutput

func (AssumableRolesWithSAMLOutput) Readonly 

func (o AssumableRolesWithSAMLOutput) Readonly() pulumi.StringMapOutput

func (AssumableRolesWithSAMLOutput) ToAssumableRolesWithSAMLOutput 

func (o AssumableRolesWithSAMLOutput) ToAssumableRolesWithSAMLOutput() AssumableRolesWithSAMLOutput

func (AssumableRolesWithSAMLOutput) ToAssumableRolesWithSAMLOutputWithContext 

func (o AssumableRolesWithSAMLOutput) ToAssumableRolesWithSAMLOutputWithContext(ctx context.Context) AssumableRolesWithSAMLOutput

type EKSAmazonManagedServicePrometheusPolicy 

type EKSAmazonManagedServicePrometheusPolicy struct {
	// Determines whether to attach the Amazon Managed Service for Prometheus IAM policy to the role.
	Attach bool `pulumi:"attach"`
	// List of AMP Workspace ARNs to read and write metrics. If not provided, a default ARN of "*"
	// will be provided.
	WorkspaceArns []string `pulumi:"workspaceArns"`
}

The Amazon Managed Service for Prometheus IAM policy to the role.

type EKSAmazonManagedServicePrometheusPolicyArgs 

type EKSAmazonManagedServicePrometheusPolicyArgs struct {
	// Determines whether to attach the Amazon Managed Service for Prometheus IAM policy to the role.
	Attach pulumi.BoolInput `pulumi:"attach"`
	// List of AMP Workspace ARNs to read and write metrics. If not provided, a default ARN of "*"
	// will be provided.
	WorkspaceArns pulumi.StringArrayInput `pulumi:"workspaceArns"`
}

The Amazon Managed Service for Prometheus IAM policy to the role.

func (EKSAmazonManagedServicePrometheusPolicyArgs) ElementType 

func (EKSAmazonManagedServicePrometheusPolicyArgs) ElementType() reflect.Type

func (EKSAmazonManagedServicePrometheusPolicyArgs) ToEKSAmazonManagedServicePrometheusPolicyOutput 

func (i EKSAmazonManagedServicePrometheusPolicyArgs) ToEKSAmazonManagedServicePrometheusPolicyOutput() EKSAmazonManagedServicePrometheusPolicyOutput

func (EKSAmazonManagedServicePrometheusPolicyArgs) ToEKSAmazonManagedServicePrometheusPolicyOutputWithContext 

func (i EKSAmazonManagedServicePrometheusPolicyArgs) ToEKSAmazonManagedServicePrometheusPolicyOutputWithContext(ctx context.Context) EKSAmazonManagedServicePrometheusPolicyOutput

func (EKSAmazonManagedServicePrometheusPolicyArgs) ToEKSAmazonManagedServicePrometheusPolicyPtrOutput 

func (i EKSAmazonManagedServicePrometheusPolicyArgs) ToEKSAmazonManagedServicePrometheusPolicyPtrOutput() EKSAmazonManagedServicePrometheusPolicyPtrOutput

func (EKSAmazonManagedServicePrometheusPolicyArgs) ToEKSAmazonManagedServicePrometheusPolicyPtrOutputWithContext 

func (i EKSAmazonManagedServicePrometheusPolicyArgs) ToEKSAmazonManagedServicePrometheusPolicyPtrOutputWithContext(ctx context.Context) EKSAmazonManagedServicePrometheusPolicyPtrOutput

type EKSAmazonManagedServicePrometheusPolicyInput 

type EKSAmazonManagedServicePrometheusPolicyInput interface {
	pulumi.Input

	ToEKSAmazonManagedServicePrometheusPolicyOutput() EKSAmazonManagedServicePrometheusPolicyOutput
	ToEKSAmazonManagedServicePrometheusPolicyOutputWithContext(context.Context) EKSAmazonManagedServicePrometheusPolicyOutput
}

EKSAmazonManagedServicePrometheusPolicyInput is an input type that accepts EKSAmazonManagedServicePrometheusPolicyArgs and EKSAmazonManagedServicePrometheusPolicyOutput values. You can construct a concrete instance of `EKSAmazonManagedServicePrometheusPolicyInput` via: 

EKSAmazonManagedServicePrometheusPolicyArgs{...}

type EKSAmazonManagedServicePrometheusPolicyOutput 

type EKSAmazonManagedServicePrometheusPolicyOutput struct{ *pulumi.OutputState }

The Amazon Managed Service for Prometheus IAM policy to the role.

func (EKSAmazonManagedServicePrometheusPolicyOutput) Attach 

func (o EKSAmazonManagedServicePrometheusPolicyOutput) Attach() pulumi.BoolOutput

Determines whether to attach the Amazon Managed Service for Prometheus IAM policy to the role.

func (EKSAmazonManagedServicePrometheusPolicyOutput) ElementType 

func (EKSAmazonManagedServicePrometheusPolicyOutput) ElementType() reflect.Type

func (EKSAmazonManagedServicePrometheusPolicyOutput) ToEKSAmazonManagedServicePrometheusPolicyOutput 

func (o EKSAmazonManagedServicePrometheusPolicyOutput) ToEKSAmazonManagedServicePrometheusPolicyOutput() EKSAmazonManagedServicePrometheusPolicyOutput

func (EKSAmazonManagedServicePrometheusPolicyOutput) ToEKSAmazonManagedServicePrometheusPolicyOutputWithContext 

func (o EKSAmazonManagedServicePrometheusPolicyOutput) ToEKSAmazonManagedServicePrometheusPolicyOutputWithContext(ctx context.Context) EKSAmazonManagedServicePrometheusPolicyOutput

func (EKSAmazonManagedServicePrometheusPolicyOutput) ToEKSAmazonManagedServicePrometheusPolicyPtrOutput 

func (o EKSAmazonManagedServicePrometheusPolicyOutput) ToEKSAmazonManagedServicePrometheusPolicyPtrOutput() EKSAmazonManagedServicePrometheusPolicyPtrOutput

func (EKSAmazonManagedServicePrometheusPolicyOutput) ToEKSAmazonManagedServicePrometheusPolicyPtrOutputWithContext 

func (o EKSAmazonManagedServicePrometheusPolicyOutput) ToEKSAmazonManagedServicePrometheusPolicyPtrOutputWithContext(ctx context.Context) EKSAmazonManagedServicePrometheusPolicyPtrOutput

func (EKSAmazonManagedServicePrometheusPolicyOutput) WorkspaceArns 

func (o EKSAmazonManagedServicePrometheusPolicyOutput) WorkspaceArns() pulumi.StringArrayOutput

List of AMP Workspace ARNs to read and write metrics. If not provided, a default ARN of "*" will be provided.

type EKSAmazonManagedServicePrometheusPolicyPtrInput 

type EKSAmazonManagedServicePrometheusPolicyPtrInput interface {
	pulumi.Input

	ToEKSAmazonManagedServicePrometheusPolicyPtrOutput() EKSAmazonManagedServicePrometheusPolicyPtrOutput
	ToEKSAmazonManagedServicePrometheusPolicyPtrOutputWithContext(context.Context) EKSAmazonManagedServicePrometheusPolicyPtrOutput
}

EKSAmazonManagedServicePrometheusPolicyPtrInput is an input type that accepts EKSAmazonManagedServicePrometheusPolicyArgs, EKSAmazonManagedServicePrometheusPolicyPtr and EKSAmazonManagedServicePrometheusPolicyPtrOutput values. You can construct a concrete instance of `EKSAmazonManagedServicePrometheusPolicyPtrInput` via: 

        EKSAmazonManagedServicePrometheusPolicyArgs{...}

or:

        nil

func EKSAmazonManagedServicePrometheusPolicyPtr 

func EKSAmazonManagedServicePrometheusPolicyPtr(v *EKSAmazonManagedServicePrometheusPolicyArgs) EKSAmazonManagedServicePrometheusPolicyPtrInput

type EKSAmazonManagedServicePrometheusPolicyPtrOutput 

type EKSAmazonManagedServicePrometheusPolicyPtrOutput struct{ *pulumi.OutputState }

func (EKSAmazonManagedServicePrometheusPolicyPtrOutput) Attach 

func (o EKSAmazonManagedServicePrometheusPolicyPtrOutput) Attach() pulumi.BoolPtrOutput

Determines whether to attach the Amazon Managed Service for Prometheus IAM policy to the role.

func (EKSAmazonManagedServicePrometheusPolicyPtrOutput) Elem 

func (o EKSAmazonManagedServicePrometheusPolicyPtrOutput) Elem() EKSAmazonManagedServicePrometheusPolicyOutput

func (EKSAmazonManagedServicePrometheusPolicyPtrOutput) ElementType 

func (EKSAmazonManagedServicePrometheusPolicyPtrOutput) ElementType() reflect.Type

func (EKSAmazonManagedServicePrometheusPolicyPtrOutput) ToEKSAmazonManagedServicePrometheusPolicyPtrOutput 

func (o EKSAmazonManagedServicePrometheusPolicyPtrOutput) ToEKSAmazonManagedServicePrometheusPolicyPtrOutput() EKSAmazonManagedServicePrometheusPolicyPtrOutput

func (EKSAmazonManagedServicePrometheusPolicyPtrOutput) ToEKSAmazonManagedServicePrometheusPolicyPtrOutputWithContext 

func (o EKSAmazonManagedServicePrometheusPolicyPtrOutput) ToEKSAmazonManagedServicePrometheusPolicyPtrOutputWithContext(ctx context.Context) EKSAmazonManagedServicePrometheusPolicyPtrOutput

func (EKSAmazonManagedServicePrometheusPolicyPtrOutput) WorkspaceArns 

func (o EKSAmazonManagedServicePrometheusPolicyPtrOutput) WorkspaceArns() pulumi.StringArrayOutput

List of AMP Workspace ARNs to read and write metrics. If not provided, a default ARN of "*" will be provided.

type EKSAppmeshPolicy 

type EKSAppmeshPolicy struct {
	// Determines whether to attach the Appmesh Controller policy to the role.
	Controller *bool `pulumi:"controller"`
	// Determines whether to attach the Appmesh envoy proxy policy to the role.
	EnvoyProxy *bool `pulumi:"envoyProxy"`
}

The Appmesh policies.

type EKSAppmeshPolicyArgs 

type EKSAppmeshPolicyArgs struct {
	// Determines whether to attach the Appmesh Controller policy to the role.
	Controller pulumi.BoolPtrInput `pulumi:"controller"`
	// Determines whether to attach the Appmesh envoy proxy policy to the role.
	EnvoyProxy pulumi.BoolPtrInput `pulumi:"envoyProxy"`
}

The Appmesh policies.

func (EKSAppmeshPolicyArgs) ElementType 

func (EKSAppmeshPolicyArgs) ElementType() reflect.Type

func (EKSAppmeshPolicyArgs) ToEKSAppmeshPolicyOutput 

func (i EKSAppmeshPolicyArgs) ToEKSAppmeshPolicyOutput() EKSAppmeshPolicyOutput

func (EKSAppmeshPolicyArgs) ToEKSAppmeshPolicyOutputWithContext 

func (i EKSAppmeshPolicyArgs) ToEKSAppmeshPolicyOutputWithContext(ctx context.Context) EKSAppmeshPolicyOutput

func (EKSAppmeshPolicyArgs) ToEKSAppmeshPolicyPtrOutput 

func (i EKSAppmeshPolicyArgs) ToEKSAppmeshPolicyPtrOutput() EKSAppmeshPolicyPtrOutput

func (EKSAppmeshPolicyArgs) ToEKSAppmeshPolicyPtrOutputWithContext 

func (i EKSAppmeshPolicyArgs) ToEKSAppmeshPolicyPtrOutputWithContext(ctx context.Context) EKSAppmeshPolicyPtrOutput

type EKSAppmeshPolicyInput 

type EKSAppmeshPolicyInput interface {
	pulumi.Input

	ToEKSAppmeshPolicyOutput() EKSAppmeshPolicyOutput
	ToEKSAppmeshPolicyOutputWithContext(context.Context) EKSAppmeshPolicyOutput
}

EKSAppmeshPolicyInput is an input type that accepts EKSAppmeshPolicyArgs and EKSAppmeshPolicyOutput values. You can construct a concrete instance of `EKSAppmeshPolicyInput` via: 

EKSAppmeshPolicyArgs{...}

type EKSAppmeshPolicyOutput 

type EKSAppmeshPolicyOutput struct{ *pulumi.OutputState }

The Appmesh policies.

func (EKSAppmeshPolicyOutput) Controller 

func (o EKSAppmeshPolicyOutput) Controller() pulumi.BoolPtrOutput

Determines whether to attach the Appmesh Controller policy to the role.

func (EKSAppmeshPolicyOutput) ElementType 

func (EKSAppmeshPolicyOutput) ElementType() reflect.Type

func (EKSAppmeshPolicyOutput) EnvoyProxy 

func (o EKSAppmeshPolicyOutput) EnvoyProxy() pulumi.BoolPtrOutput

Determines whether to attach the Appmesh envoy proxy policy to the role.

func (EKSAppmeshPolicyOutput) ToEKSAppmeshPolicyOutput 

func (o EKSAppmeshPolicyOutput) ToEKSAppmeshPolicyOutput() EKSAppmeshPolicyOutput

func (EKSAppmeshPolicyOutput) ToEKSAppmeshPolicyOutputWithContext 

func (o EKSAppmeshPolicyOutput) ToEKSAppmeshPolicyOutputWithContext(ctx context.Context) EKSAppmeshPolicyOutput

func (EKSAppmeshPolicyOutput) ToEKSAppmeshPolicyPtrOutput 

func (o EKSAppmeshPolicyOutput) ToEKSAppmeshPolicyPtrOutput() EKSAppmeshPolicyPtrOutput

func (EKSAppmeshPolicyOutput) ToEKSAppmeshPolicyPtrOutputWithContext 

func (o EKSAppmeshPolicyOutput) ToEKSAppmeshPolicyPtrOutputWithContext(ctx context.Context) EKSAppmeshPolicyPtrOutput

type EKSAppmeshPolicyPtrInput 

type EKSAppmeshPolicyPtrInput interface {
	pulumi.Input

	ToEKSAppmeshPolicyPtrOutput() EKSAppmeshPolicyPtrOutput
	ToEKSAppmeshPolicyPtrOutputWithContext(context.Context) EKSAppmeshPolicyPtrOutput
}

EKSAppmeshPolicyPtrInput is an input type that accepts EKSAppmeshPolicyArgs, EKSAppmeshPolicyPtr and EKSAppmeshPolicyPtrOutput values. You can construct a concrete instance of `EKSAppmeshPolicyPtrInput` via: 

        EKSAppmeshPolicyArgs{...}

or:

        nil

func EKSAppmeshPolicyPtr 

func EKSAppmeshPolicyPtr(v *EKSAppmeshPolicyArgs) EKSAppmeshPolicyPtrInput

type EKSAppmeshPolicyPtrOutput 

type EKSAppmeshPolicyPtrOutput struct{ *pulumi.OutputState }

func (EKSAppmeshPolicyPtrOutput) Controller 

func (o EKSAppmeshPolicyPtrOutput) Controller() pulumi.BoolPtrOutput

Determines whether to attach the Appmesh Controller policy to the role.

func (EKSAppmeshPolicyPtrOutput) Elem 

func (o EKSAppmeshPolicyPtrOutput) Elem() EKSAppmeshPolicyOutput

func (EKSAppmeshPolicyPtrOutput) ElementType 

func (EKSAppmeshPolicyPtrOutput) ElementType() reflect.Type

func (EKSAppmeshPolicyPtrOutput) EnvoyProxy 

func (o EKSAppmeshPolicyPtrOutput) EnvoyProxy() pulumi.BoolPtrOutput

Determines whether to attach the Appmesh envoy proxy policy to the role.

func (EKSAppmeshPolicyPtrOutput) ToEKSAppmeshPolicyPtrOutput 

func (o EKSAppmeshPolicyPtrOutput) ToEKSAppmeshPolicyPtrOutput() EKSAppmeshPolicyPtrOutput

func (EKSAppmeshPolicyPtrOutput) ToEKSAppmeshPolicyPtrOutputWithContext 

func (o EKSAppmeshPolicyPtrOutput) ToEKSAppmeshPolicyPtrOutputWithContext(ctx context.Context) EKSAppmeshPolicyPtrOutput

type EKSCertManagerPolicy 

type EKSCertManagerPolicy struct {
	// Determines whether to attach the Cert Manager IAM policy to the role.
	Attach bool `pulumi:"attach"`
	// Route53 hosted zone ARNs to allow Cert manager to manage records. If not provided,
	// the default ARN "arn:aws:route53:::hostedzone/*" will be applied.
	HostedZoneArns []string `pulumi:"hostedZoneArns"`
}

The Cert Manager IAM policy to attach to the role.

type EKSCertManagerPolicyArgs 

type EKSCertManagerPolicyArgs struct {
	// Determines whether to attach the Cert Manager IAM policy to the role.
	Attach pulumi.BoolInput `pulumi:"attach"`
	// Route53 hosted zone ARNs to allow Cert manager to manage records. If not provided,
	// the default ARN "arn:aws:route53:::hostedzone/*" will be applied.
	HostedZoneArns pulumi.StringArrayInput `pulumi:"hostedZoneArns"`
}

The Cert Manager IAM policy to attach to the role.

func (EKSCertManagerPolicyArgs) ElementType 

func (EKSCertManagerPolicyArgs) ElementType() reflect.Type

func (EKSCertManagerPolicyArgs) ToEKSCertManagerPolicyOutput 

func (i EKSCertManagerPolicyArgs) ToEKSCertManagerPolicyOutput() EKSCertManagerPolicyOutput

func (EKSCertManagerPolicyArgs) ToEKSCertManagerPolicyOutputWithContext 

func (i EKSCertManagerPolicyArgs) ToEKSCertManagerPolicyOutputWithContext(ctx context.Context) EKSCertManagerPolicyOutput

func (EKSCertManagerPolicyArgs) ToEKSCertManagerPolicyPtrOutput 

func (i EKSCertManagerPolicyArgs) ToEKSCertManagerPolicyPtrOutput() EKSCertManagerPolicyPtrOutput

func (EKSCertManagerPolicyArgs) ToEKSCertManagerPolicyPtrOutputWithContext 

func (i EKSCertManagerPolicyArgs) ToEKSCertManagerPolicyPtrOutputWithContext(ctx context.Context) EKSCertManagerPolicyPtrOutput

type EKSCertManagerPolicyInput 

type EKSCertManagerPolicyInput interface {
	pulumi.Input

	ToEKSCertManagerPolicyOutput() EKSCertManagerPolicyOutput
	ToEKSCertManagerPolicyOutputWithContext(context.Context) EKSCertManagerPolicyOutput
}

EKSCertManagerPolicyInput is an input type that accepts EKSCertManagerPolicyArgs and EKSCertManagerPolicyOutput values. You can construct a concrete instance of `EKSCertManagerPolicyInput` via: 

EKSCertManagerPolicyArgs{...}

type EKSCertManagerPolicyOutput 

type EKSCertManagerPolicyOutput struct{ *pulumi.OutputState }

The Cert Manager IAM policy to attach to the role.

func (EKSCertManagerPolicyOutput) Attach 

func (o EKSCertManagerPolicyOutput) Attach() pulumi.BoolOutput

Determines whether to attach the Cert Manager IAM policy to the role.

func (EKSCertManagerPolicyOutput) ElementType 

func (EKSCertManagerPolicyOutput) ElementType() reflect.Type

func (EKSCertManagerPolicyOutput) HostedZoneArns 

func (o EKSCertManagerPolicyOutput) HostedZoneArns() pulumi.StringArrayOutput

Route53 hosted zone ARNs to allow Cert manager to manage records. If not provided, the default ARN "arn:aws:route53:::hostedzone/*" will be applied.

func (EKSCertManagerPolicyOutput) ToEKSCertManagerPolicyOutput 

func (o EKSCertManagerPolicyOutput) ToEKSCertManagerPolicyOutput() EKSCertManagerPolicyOutput

func (EKSCertManagerPolicyOutput) ToEKSCertManagerPolicyOutputWithContext 

func (o EKSCertManagerPolicyOutput) ToEKSCertManagerPolicyOutputWithContext(ctx context.Context) EKSCertManagerPolicyOutput

func (EKSCertManagerPolicyOutput) ToEKSCertManagerPolicyPtrOutput 

func (o EKSCertManagerPolicyOutput) ToEKSCertManagerPolicyPtrOutput() EKSCertManagerPolicyPtrOutput

func (EKSCertManagerPolicyOutput) ToEKSCertManagerPolicyPtrOutputWithContext 

func (o EKSCertManagerPolicyOutput) ToEKSCertManagerPolicyPtrOutputWithContext(ctx context.Context) EKSCertManagerPolicyPtrOutput

type EKSCertManagerPolicyPtrInput 

type EKSCertManagerPolicyPtrInput interface {
	pulumi.Input

	ToEKSCertManagerPolicyPtrOutput() EKSCertManagerPolicyPtrOutput
	ToEKSCertManagerPolicyPtrOutputWithContext(context.Context) EKSCertManagerPolicyPtrOutput
}

EKSCertManagerPolicyPtrInput is an input type that accepts EKSCertManagerPolicyArgs, EKSCertManagerPolicyPtr and EKSCertManagerPolicyPtrOutput values. You can construct a concrete instance of `EKSCertManagerPolicyPtrInput` via: 

        EKSCertManagerPolicyArgs{...}

or:

        nil

func EKSCertManagerPolicyPtr 

func EKSCertManagerPolicyPtr(v *EKSCertManagerPolicyArgs) EKSCertManagerPolicyPtrInput

type EKSCertManagerPolicyPtrOutput 

type EKSCertManagerPolicyPtrOutput struct{ *pulumi.OutputState }

func (EKSCertManagerPolicyPtrOutput) Attach 

func (o EKSCertManagerPolicyPtrOutput) Attach() pulumi.BoolPtrOutput

Determines whether to attach the Cert Manager IAM policy to the role.

func (EKSCertManagerPolicyPtrOutput) Elem 

func (o EKSCertManagerPolicyPtrOutput) Elem() EKSCertManagerPolicyOutput

func (EKSCertManagerPolicyPtrOutput) ElementType 

func (EKSCertManagerPolicyPtrOutput) ElementType() reflect.Type

func (EKSCertManagerPolicyPtrOutput) HostedZoneArns 

func (o EKSCertManagerPolicyPtrOutput) HostedZoneArns() pulumi.StringArrayOutput

Route53 hosted zone ARNs to allow Cert manager to manage records. If not provided, the default ARN "arn:aws:route53:::hostedzone/*" will be applied.

func (EKSCertManagerPolicyPtrOutput) ToEKSCertManagerPolicyPtrOutput 

func (o EKSCertManagerPolicyPtrOutput) ToEKSCertManagerPolicyPtrOutput() EKSCertManagerPolicyPtrOutput

func (EKSCertManagerPolicyPtrOutput) ToEKSCertManagerPolicyPtrOutputWithContext 

func (o EKSCertManagerPolicyPtrOutput) ToEKSCertManagerPolicyPtrOutputWithContext(ctx context.Context) EKSCertManagerPolicyPtrOutput

type EKSClusterAutoscalerPolicy 

type EKSClusterAutoscalerPolicy struct {
	// Determines whether to attach the Cluster Autoscaler IAM policy to the role.
	Attach bool `pulumi:"attach"`
	// List of cluster IDs to appropriately scope permissions within the Cluster Autoscaler IAM policy.
	ClusterIds []string `pulumi:"clusterIds"`
}

The Cluster Autoscaler IAM policy to the role.

type EKSClusterAutoscalerPolicyArgs 

type EKSClusterAutoscalerPolicyArgs struct {
	// Determines whether to attach the Cluster Autoscaler IAM policy to the role.
	Attach pulumi.BoolInput `pulumi:"attach"`
	// List of cluster IDs to appropriately scope permissions within the Cluster Autoscaler IAM policy.
	ClusterIds pulumi.StringArrayInput `pulumi:"clusterIds"`
}

The Cluster Autoscaler IAM policy to the role.

func (EKSClusterAutoscalerPolicyArgs) ElementType 

func (EKSClusterAutoscalerPolicyArgs) ElementType() reflect.Type

func (EKSClusterAutoscalerPolicyArgs) ToEKSClusterAutoscalerPolicyOutput 

func (i EKSClusterAutoscalerPolicyArgs) ToEKSClusterAutoscalerPolicyOutput() EKSClusterAutoscalerPolicyOutput

func (EKSClusterAutoscalerPolicyArgs) ToEKSClusterAutoscalerPolicyOutputWithContext 

func (i EKSClusterAutoscalerPolicyArgs) ToEKSClusterAutoscalerPolicyOutputWithContext(ctx context.Context) EKSClusterAutoscalerPolicyOutput

func (EKSClusterAutoscalerPolicyArgs) ToEKSClusterAutoscalerPolicyPtrOutput 

func (i EKSClusterAutoscalerPolicyArgs) ToEKSClusterAutoscalerPolicyPtrOutput() EKSClusterAutoscalerPolicyPtrOutput

func (EKSClusterAutoscalerPolicyArgs) ToEKSClusterAutoscalerPolicyPtrOutputWithContext 

func (i EKSClusterAutoscalerPolicyArgs) ToEKSClusterAutoscalerPolicyPtrOutputWithContext(ctx context.Context) EKSClusterAutoscalerPolicyPtrOutput

type EKSClusterAutoscalerPolicyInput 

type EKSClusterAutoscalerPolicyInput interface {
	pulumi.Input

	ToEKSClusterAutoscalerPolicyOutput() EKSClusterAutoscalerPolicyOutput
	ToEKSClusterAutoscalerPolicyOutputWithContext(context.Context) EKSClusterAutoscalerPolicyOutput
}

EKSClusterAutoscalerPolicyInput is an input type that accepts EKSClusterAutoscalerPolicyArgs and EKSClusterAutoscalerPolicyOutput values. You can construct a concrete instance of `EKSClusterAutoscalerPolicyInput` via: 

EKSClusterAutoscalerPolicyArgs{...}

type EKSClusterAutoscalerPolicyOutput 

type EKSClusterAutoscalerPolicyOutput struct{ *pulumi.OutputState }

The Cluster Autoscaler IAM policy to the role.

func (EKSClusterAutoscalerPolicyOutput) Attach 

func (o EKSClusterAutoscalerPolicyOutput) Attach() pulumi.BoolOutput

Determines whether to attach the Cluster Autoscaler IAM policy to the role.

func (EKSClusterAutoscalerPolicyOutput) ClusterIds 

func (o EKSClusterAutoscalerPolicyOutput) ClusterIds() pulumi.StringArrayOutput

List of cluster IDs to appropriately scope permissions within the Cluster Autoscaler IAM policy.

func (EKSClusterAutoscalerPolicyOutput) ElementType 

func (EKSClusterAutoscalerPolicyOutput) ElementType() reflect.Type

func (EKSClusterAutoscalerPolicyOutput) ToEKSClusterAutoscalerPolicyOutput 

func (o EKSClusterAutoscalerPolicyOutput) ToEKSClusterAutoscalerPolicyOutput() EKSClusterAutoscalerPolicyOutput

func (EKSClusterAutoscalerPolicyOutput) ToEKSClusterAutoscalerPolicyOutputWithContext 

func (o EKSClusterAutoscalerPolicyOutput) ToEKSClusterAutoscalerPolicyOutputWithContext(ctx context.Context) EKSClusterAutoscalerPolicyOutput

func (EKSClusterAutoscalerPolicyOutput) ToEKSClusterAutoscalerPolicyPtrOutput 

func (o EKSClusterAutoscalerPolicyOutput) ToEKSClusterAutoscalerPolicyPtrOutput() EKSClusterAutoscalerPolicyPtrOutput

func (EKSClusterAutoscalerPolicyOutput) ToEKSClusterAutoscalerPolicyPtrOutputWithContext 

func (o EKSClusterAutoscalerPolicyOutput) ToEKSClusterAutoscalerPolicyPtrOutputWithContext(ctx context.Context) EKSClusterAutoscalerPolicyPtrOutput

type EKSClusterAutoscalerPolicyPtrInput 

type EKSClusterAutoscalerPolicyPtrInput interface {
	pulumi.Input

	ToEKSClusterAutoscalerPolicyPtrOutput() EKSClusterAutoscalerPolicyPtrOutput
	ToEKSClusterAutoscalerPolicyPtrOutputWithContext(context.Context) EKSClusterAutoscalerPolicyPtrOutput
}

EKSClusterAutoscalerPolicyPtrInput is an input type that accepts EKSClusterAutoscalerPolicyArgs, EKSClusterAutoscalerPolicyPtr and EKSClusterAutoscalerPolicyPtrOutput values. You can construct a concrete instance of `EKSClusterAutoscalerPolicyPtrInput` via: 

        EKSClusterAutoscalerPolicyArgs{...}

or:

        nil

func EKSClusterAutoscalerPolicyPtr 

func EKSClusterAutoscalerPolicyPtr(v *EKSClusterAutoscalerPolicyArgs) EKSClusterAutoscalerPolicyPtrInput

type EKSClusterAutoscalerPolicyPtrOutput 

type EKSClusterAutoscalerPolicyPtrOutput struct{ *pulumi.OutputState }

func (EKSClusterAutoscalerPolicyPtrOutput) Attach 

func (o EKSClusterAutoscalerPolicyPtrOutput) Attach() pulumi.BoolPtrOutput

Determines whether to attach the Cluster Autoscaler IAM policy to the role.

func (EKSClusterAutoscalerPolicyPtrOutput) ClusterIds 

func (o EKSClusterAutoscalerPolicyPtrOutput) ClusterIds() pulumi.StringArrayOutput

List of cluster IDs to appropriately scope permissions within the Cluster Autoscaler IAM policy.

func (EKSClusterAutoscalerPolicyPtrOutput) Elem 

func (o EKSClusterAutoscalerPolicyPtrOutput) Elem() EKSClusterAutoscalerPolicyOutput

func (EKSClusterAutoscalerPolicyPtrOutput) ElementType 

func (EKSClusterAutoscalerPolicyPtrOutput) ElementType() reflect.Type

func (EKSClusterAutoscalerPolicyPtrOutput) ToEKSClusterAutoscalerPolicyPtrOutput 

func (o EKSClusterAutoscalerPolicyPtrOutput) ToEKSClusterAutoscalerPolicyPtrOutput() EKSClusterAutoscalerPolicyPtrOutput

func (EKSClusterAutoscalerPolicyPtrOutput) ToEKSClusterAutoscalerPolicyPtrOutputWithContext 

func (o EKSClusterAutoscalerPolicyPtrOutput) ToEKSClusterAutoscalerPolicyPtrOutputWithContext(ctx context.Context) EKSClusterAutoscalerPolicyPtrOutput

type EKSEBSCSIPolicy 

type EKSEBSCSIPolicy struct {
	// Determines whether to attach the EBS CSI IAM policy to the role.
	Attach bool `pulumi:"attach"`
	// KMS CMK IDs to allow EBS CSI to manage encrypted volumes.
	KmsCmkIds []string `pulumi:"kmsCmkIds"`
}

The EBS CSI IAM policy to the role.

type EKSEBSCSIPolicyArgs 

type EKSEBSCSIPolicyArgs struct {
	// Determines whether to attach the EBS CSI IAM policy to the role.
	Attach pulumi.BoolInput `pulumi:"attach"`
	// KMS CMK IDs to allow EBS CSI to manage encrypted volumes.
	KmsCmkIds pulumi.StringArrayInput `pulumi:"kmsCmkIds"`
}

The EBS CSI IAM policy to the role.

func (EKSEBSCSIPolicyArgs) ElementType 

func (EKSEBSCSIPolicyArgs) ElementType() reflect.Type

func (EKSEBSCSIPolicyArgs) ToEKSEBSCSIPolicyOutput 

func (i EKSEBSCSIPolicyArgs) ToEKSEBSCSIPolicyOutput() EKSEBSCSIPolicyOutput

func (EKSEBSCSIPolicyArgs) ToEKSEBSCSIPolicyOutputWithContext 

func (i EKSEBSCSIPolicyArgs) ToEKSEBSCSIPolicyOutputWithContext(ctx context.Context) EKSEBSCSIPolicyOutput

func (EKSEBSCSIPolicyArgs) ToEKSEBSCSIPolicyPtrOutput 

func (i EKSEBSCSIPolicyArgs) ToEKSEBSCSIPolicyPtrOutput() EKSEBSCSIPolicyPtrOutput

func (EKSEBSCSIPolicyArgs) ToEKSEBSCSIPolicyPtrOutputWithContext 

func (i EKSEBSCSIPolicyArgs) ToEKSEBSCSIPolicyPtrOutputWithContext(ctx context.Context) EKSEBSCSIPolicyPtrOutput

type EKSEBSCSIPolicyInput 

type EKSEBSCSIPolicyInput interface {
	pulumi.Input

	ToEKSEBSCSIPolicyOutput() EKSEBSCSIPolicyOutput
	ToEKSEBSCSIPolicyOutputWithContext(context.Context) EKSEBSCSIPolicyOutput
}

EKSEBSCSIPolicyInput is an input type that accepts EKSEBSCSIPolicyArgs and EKSEBSCSIPolicyOutput values. You can construct a concrete instance of `EKSEBSCSIPolicyInput` via: 

EKSEBSCSIPolicyArgs{...}

type EKSEBSCSIPolicyOutput 

type EKSEBSCSIPolicyOutput struct{ *pulumi.OutputState }

The EBS CSI IAM policy to the role.

func (EKSEBSCSIPolicyOutput) Attach 

func (o EKSEBSCSIPolicyOutput) Attach() pulumi.BoolOutput

Determines whether to attach the EBS CSI IAM policy to the role.

func (EKSEBSCSIPolicyOutput) ElementType 

func (EKSEBSCSIPolicyOutput) ElementType() reflect.Type

func (EKSEBSCSIPolicyOutput) KmsCmkIds 

func (o EKSEBSCSIPolicyOutput) KmsCmkIds() pulumi.StringArrayOutput

KMS CMK IDs to allow EBS CSI to manage encrypted volumes.

func (EKSEBSCSIPolicyOutput) ToEKSEBSCSIPolicyOutput 

func (o EKSEBSCSIPolicyOutput) ToEKSEBSCSIPolicyOutput() EKSEBSCSIPolicyOutput

func (EKSEBSCSIPolicyOutput) ToEKSEBSCSIPolicyOutputWithContext 

func (o EKSEBSCSIPolicyOutput) ToEKSEBSCSIPolicyOutputWithContext(ctx context.Context) EKSEBSCSIPolicyOutput

func (EKSEBSCSIPolicyOutput) ToEKSEBSCSIPolicyPtrOutput 

func (o EKSEBSCSIPolicyOutput) ToEKSEBSCSIPolicyPtrOutput() EKSEBSCSIPolicyPtrOutput

func (EKSEBSCSIPolicyOutput) ToEKSEBSCSIPolicyPtrOutputWithContext 

func (o EKSEBSCSIPolicyOutput) ToEKSEBSCSIPolicyPtrOutputWithContext(ctx context.Context) EKSEBSCSIPolicyPtrOutput

type EKSEBSCSIPolicyPtrInput 

type EKSEBSCSIPolicyPtrInput interface {
	pulumi.Input

	ToEKSEBSCSIPolicyPtrOutput() EKSEBSCSIPolicyPtrOutput
	ToEKSEBSCSIPolicyPtrOutputWithContext(context.Context) EKSEBSCSIPolicyPtrOutput
}

EKSEBSCSIPolicyPtrInput is an input type that accepts EKSEBSCSIPolicyArgs, EKSEBSCSIPolicyPtr and EKSEBSCSIPolicyPtrOutput values. You can construct a concrete instance of `EKSEBSCSIPolicyPtrInput` via: 

        EKSEBSCSIPolicyArgs{...}

or:

        nil

func EKSEBSCSIPolicyPtr 

func EKSEBSCSIPolicyPtr(v *EKSEBSCSIPolicyArgs) EKSEBSCSIPolicyPtrInput

type EKSEBSCSIPolicyPtrOutput 

type EKSEBSCSIPolicyPtrOutput struct{ *pulumi.OutputState }

func (EKSEBSCSIPolicyPtrOutput) Attach 

func (o EKSEBSCSIPolicyPtrOutput) Attach() pulumi.BoolPtrOutput

Determines whether to attach the EBS CSI IAM policy to the role.

func (EKSEBSCSIPolicyPtrOutput) Elem 

func (o EKSEBSCSIPolicyPtrOutput) Elem() EKSEBSCSIPolicyOutput

func (EKSEBSCSIPolicyPtrOutput) ElementType 

func (EKSEBSCSIPolicyPtrOutput) ElementType() reflect.Type

func (EKSEBSCSIPolicyPtrOutput) KmsCmkIds 

func (o EKSEBSCSIPolicyPtrOutput) KmsCmkIds() pulumi.StringArrayOutput

KMS CMK IDs to allow EBS CSI to manage encrypted volumes.

func (EKSEBSCSIPolicyPtrOutput) ToEKSEBSCSIPolicyPtrOutput 

func (o EKSEBSCSIPolicyPtrOutput) ToEKSEBSCSIPolicyPtrOutput() EKSEBSCSIPolicyPtrOutput

func (EKSEBSCSIPolicyPtrOutput) ToEKSEBSCSIPolicyPtrOutputWithContext 

func (o EKSEBSCSIPolicyPtrOutput) ToEKSEBSCSIPolicyPtrOutputWithContext(ctx context.Context) EKSEBSCSIPolicyPtrOutput

type EKSEFSCSIPolicy 

type EKSEFSCSIPolicy struct {
	// Determines whether to attach the EFS CSI IAM policy to the role.
	Attach bool `pulumi:"attach"`
}

The EFS CSI IAM policy to the role.

type EKSEFSCSIPolicyArgs 

type EKSEFSCSIPolicyArgs struct {
	// Determines whether to attach the EFS CSI IAM policy to the role.
	Attach pulumi.BoolInput `pulumi:"attach"`
}

The EFS CSI IAM policy to the role.

func (EKSEFSCSIPolicyArgs) ElementType 

func (EKSEFSCSIPolicyArgs) ElementType() reflect.Type

func (EKSEFSCSIPolicyArgs) ToEKSEFSCSIPolicyOutput 

func (i EKSEFSCSIPolicyArgs) ToEKSEFSCSIPolicyOutput() EKSEFSCSIPolicyOutput

func (EKSEFSCSIPolicyArgs) ToEKSEFSCSIPolicyOutputWithContext 

func (i EKSEFSCSIPolicyArgs) ToEKSEFSCSIPolicyOutputWithContext(ctx context.Context) EKSEFSCSIPolicyOutput

func (EKSEFSCSIPolicyArgs) ToEKSEFSCSIPolicyPtrOutput 

func (i EKSEFSCSIPolicyArgs) ToEKSEFSCSIPolicyPtrOutput() EKSEFSCSIPolicyPtrOutput

func (EKSEFSCSIPolicyArgs) ToEKSEFSCSIPolicyPtrOutputWithContext 

func (i EKSEFSCSIPolicyArgs) ToEKSEFSCSIPolicyPtrOutputWithContext(ctx context.Context) EKSEFSCSIPolicyPtrOutput

type EKSEFSCSIPolicyInput 

type EKSEFSCSIPolicyInput interface {
	pulumi.Input

	ToEKSEFSCSIPolicyOutput() EKSEFSCSIPolicyOutput
	ToEKSEFSCSIPolicyOutputWithContext(context.Context) EKSEFSCSIPolicyOutput
}

EKSEFSCSIPolicyInput is an input type that accepts EKSEFSCSIPolicyArgs and EKSEFSCSIPolicyOutput values. You can construct a concrete instance of `EKSEFSCSIPolicyInput` via: 

EKSEFSCSIPolicyArgs{...}

type EKSEFSCSIPolicyOutput 

type EKSEFSCSIPolicyOutput struct{ *pulumi.OutputState }

The EFS CSI IAM policy to the role.

func (EKSEFSCSIPolicyOutput) Attach 

func (o EKSEFSCSIPolicyOutput) Attach() pulumi.BoolOutput

Determines whether to attach the EFS CSI IAM policy to the role.

func (EKSEFSCSIPolicyOutput) ElementType 

func (EKSEFSCSIPolicyOutput) ElementType() reflect.Type

func (EKSEFSCSIPolicyOutput) ToEKSEFSCSIPolicyOutput 

func (o EKSEFSCSIPolicyOutput) ToEKSEFSCSIPolicyOutput() EKSEFSCSIPolicyOutput

func (EKSEFSCSIPolicyOutput) ToEKSEFSCSIPolicyOutputWithContext 

func (o EKSEFSCSIPolicyOutput) ToEKSEFSCSIPolicyOutputWithContext(ctx context.Context) EKSEFSCSIPolicyOutput

func (EKSEFSCSIPolicyOutput) ToEKSEFSCSIPolicyPtrOutput 

func (o EKSEFSCSIPolicyOutput) ToEKSEFSCSIPolicyPtrOutput() EKSEFSCSIPolicyPtrOutput

func (EKSEFSCSIPolicyOutput) ToEKSEFSCSIPolicyPtrOutputWithContext 

func (o EKSEFSCSIPolicyOutput) ToEKSEFSCSIPolicyPtrOutputWithContext(ctx context.Context) EKSEFSCSIPolicyPtrOutput

type EKSEFSCSIPolicyPtrInput 

type EKSEFSCSIPolicyPtrInput interface {
	pulumi.Input

	ToEKSEFSCSIPolicyPtrOutput() EKSEFSCSIPolicyPtrOutput
	ToEKSEFSCSIPolicyPtrOutputWithContext(context.Context) EKSEFSCSIPolicyPtrOutput
}

EKSEFSCSIPolicyPtrInput is an input type that accepts EKSEFSCSIPolicyArgs, EKSEFSCSIPolicyPtr and EKSEFSCSIPolicyPtrOutput values. You can construct a concrete instance of `EKSEFSCSIPolicyPtrInput` via: 

        EKSEFSCSIPolicyArgs{...}

or:

        nil

func EKSEFSCSIPolicyPtr 

func EKSEFSCSIPolicyPtr(v *EKSEFSCSIPolicyArgs) EKSEFSCSIPolicyPtrInput

type EKSEFSCSIPolicyPtrOutput 

type EKSEFSCSIPolicyPtrOutput struct{ *pulumi.OutputState }

func (EKSEFSCSIPolicyPtrOutput) Attach 

func (o EKSEFSCSIPolicyPtrOutput) Attach() pulumi.BoolPtrOutput

Determines whether to attach the EFS CSI IAM policy to the role.

func (EKSEFSCSIPolicyPtrOutput) Elem 

func (o EKSEFSCSIPolicyPtrOutput) Elem() EKSEFSCSIPolicyOutput

func (EKSEFSCSIPolicyPtrOutput) ElementType 

func (EKSEFSCSIPolicyPtrOutput) ElementType() reflect.Type

func (EKSEFSCSIPolicyPtrOutput) ToEKSEFSCSIPolicyPtrOutput 

func (o EKSEFSCSIPolicyPtrOutput) ToEKSEFSCSIPolicyPtrOutput() EKSEFSCSIPolicyPtrOutput

func (EKSEFSCSIPolicyPtrOutput) ToEKSEFSCSIPolicyPtrOutputWithContext 

func (o EKSEFSCSIPolicyPtrOutput) ToEKSEFSCSIPolicyPtrOutputWithContext(ctx context.Context) EKSEFSCSIPolicyPtrOutput

type EKSExternalDNSPolicy 

type EKSExternalDNSPolicy struct {
	// Determines whether to attach the External DNS IAM policy to the role.
	Attach bool `pulumi:"attach"`
	// Route53 hosted zone ARNs to allow External DNS to manage records. If not provided,
	// the default ARN "arn:aws:route53:::hostedzone/*" will be applied.
	HostedZoneArns []string `pulumi:"hostedZoneArns"`
}

The External DNS IAM policy to the role.

type EKSExternalDNSPolicyArgs 

type EKSExternalDNSPolicyArgs struct {
	// Determines whether to attach the External DNS IAM policy to the role.
	Attach pulumi.BoolInput `pulumi:"attach"`
	// Route53 hosted zone ARNs to allow External DNS to manage records. If not provided,
	// the default ARN "arn:aws:route53:::hostedzone/*" will be applied.
	HostedZoneArns pulumi.StringArrayInput `pulumi:"hostedZoneArns"`
}

The External DNS IAM policy to the role.

func (EKSExternalDNSPolicyArgs) ElementType 

func (EKSExternalDNSPolicyArgs) ElementType() reflect.Type

func (EKSExternalDNSPolicyArgs) ToEKSExternalDNSPolicyOutput 

func (i EKSExternalDNSPolicyArgs) ToEKSExternalDNSPolicyOutput() EKSExternalDNSPolicyOutput

func (EKSExternalDNSPolicyArgs) ToEKSExternalDNSPolicyOutputWithContext 

func (i EKSExternalDNSPolicyArgs) ToEKSExternalDNSPolicyOutputWithContext(ctx context.Context) EKSExternalDNSPolicyOutput

func (EKSExternalDNSPolicyArgs) ToEKSExternalDNSPolicyPtrOutput 

func (i EKSExternalDNSPolicyArgs) ToEKSExternalDNSPolicyPtrOutput() EKSExternalDNSPolicyPtrOutput

func (EKSExternalDNSPolicyArgs) ToEKSExternalDNSPolicyPtrOutputWithContext 

func (i EKSExternalDNSPolicyArgs) ToEKSExternalDNSPolicyPtrOutputWithContext(ctx context.Context) EKSExternalDNSPolicyPtrOutput

type EKSExternalDNSPolicyInput 

type EKSExternalDNSPolicyInput interface {
	pulumi.Input

	ToEKSExternalDNSPolicyOutput() EKSExternalDNSPolicyOutput
	ToEKSExternalDNSPolicyOutputWithContext(context.Context) EKSExternalDNSPolicyOutput
}

EKSExternalDNSPolicyInput is an input type that accepts EKSExternalDNSPolicyArgs and EKSExternalDNSPolicyOutput values. You can construct a concrete instance of `EKSExternalDNSPolicyInput` via: 

EKSExternalDNSPolicyArgs{...}

type EKSExternalDNSPolicyOutput 

type EKSExternalDNSPolicyOutput struct{ *pulumi.OutputState }

The External DNS IAM policy to the role.

func (EKSExternalDNSPolicyOutput) Attach 

func (o EKSExternalDNSPolicyOutput) Attach() pulumi.BoolOutput

Determines whether to attach the External DNS IAM policy to the role.

func (EKSExternalDNSPolicyOutput) ElementType 

func (EKSExternalDNSPolicyOutput) ElementType() reflect.Type

func (EKSExternalDNSPolicyOutput) HostedZoneArns 

func (o EKSExternalDNSPolicyOutput) HostedZoneArns() pulumi.StringArrayOutput

Route53 hosted zone ARNs to allow External DNS to manage records. If not provided, the default ARN "arn:aws:route53:::hostedzone/*" will be applied.

func (EKSExternalDNSPolicyOutput) ToEKSExternalDNSPolicyOutput 

func (o EKSExternalDNSPolicyOutput) ToEKSExternalDNSPolicyOutput() EKSExternalDNSPolicyOutput

func (EKSExternalDNSPolicyOutput) ToEKSExternalDNSPolicyOutputWithContext 

func (o EKSExternalDNSPolicyOutput) ToEKSExternalDNSPolicyOutputWithContext(ctx context.Context) EKSExternalDNSPolicyOutput

func (EKSExternalDNSPolicyOutput) ToEKSExternalDNSPolicyPtrOutput 

func (o EKSExternalDNSPolicyOutput) ToEKSExternalDNSPolicyPtrOutput() EKSExternalDNSPolicyPtrOutput

func (EKSExternalDNSPolicyOutput) ToEKSExternalDNSPolicyPtrOutputWithContext 

func (o EKSExternalDNSPolicyOutput) ToEKSExternalDNSPolicyPtrOutputWithContext(ctx context.Context) EKSExternalDNSPolicyPtrOutput

type EKSExternalDNSPolicyPtrInput 

type EKSExternalDNSPolicyPtrInput interface {
	pulumi.Input

	ToEKSExternalDNSPolicyPtrOutput() EKSExternalDNSPolicyPtrOutput
	ToEKSExternalDNSPolicyPtrOutputWithContext(context.Context) EKSExternalDNSPolicyPtrOutput
}

EKSExternalDNSPolicyPtrInput is an input type that accepts EKSExternalDNSPolicyArgs, EKSExternalDNSPolicyPtr and EKSExternalDNSPolicyPtrOutput values. You can construct a concrete instance of `EKSExternalDNSPolicyPtrInput` via: 

        EKSExternalDNSPolicyArgs{...}

or:

        nil

func EKSExternalDNSPolicyPtr 

func EKSExternalDNSPolicyPtr(v *EKSExternalDNSPolicyArgs) EKSExternalDNSPolicyPtrInput

type EKSExternalDNSPolicyPtrOutput 

type EKSExternalDNSPolicyPtrOutput struct{ *pulumi.OutputState }

func (EKSExternalDNSPolicyPtrOutput) Attach 

func (o EKSExternalDNSPolicyPtrOutput) Attach() pulumi.BoolPtrOutput

Determines whether to attach the External DNS IAM policy to the role.

func (EKSExternalDNSPolicyPtrOutput) Elem 

func (o EKSExternalDNSPolicyPtrOutput) Elem() EKSExternalDNSPolicyOutput

func (EKSExternalDNSPolicyPtrOutput) ElementType 

func (EKSExternalDNSPolicyPtrOutput) ElementType() reflect.Type

func (EKSExternalDNSPolicyPtrOutput) HostedZoneArns 

func (o EKSExternalDNSPolicyPtrOutput) HostedZoneArns() pulumi.StringArrayOutput

Route53 hosted zone ARNs to allow External DNS to manage records. If not provided, the default ARN "arn:aws:route53:::hostedzone/*" will be applied.

func (EKSExternalDNSPolicyPtrOutput) ToEKSExternalDNSPolicyPtrOutput 

func (o EKSExternalDNSPolicyPtrOutput) ToEKSExternalDNSPolicyPtrOutput() EKSExternalDNSPolicyPtrOutput

func (EKSExternalDNSPolicyPtrOutput) ToEKSExternalDNSPolicyPtrOutputWithContext 

func (o EKSExternalDNSPolicyPtrOutput) ToEKSExternalDNSPolicyPtrOutputWithContext(ctx context.Context) EKSExternalDNSPolicyPtrOutput

type EKSExternalSecretsPolicy 

type EKSExternalSecretsPolicy struct {
	// Determines whether to attach the External Secrets policy to the role.
	Attach bool `pulumi:"attach"`
	// List of Secrets Manager ARNs that contain secrets to mount using External Secrets. If not provided, the default ARN "arn:aws:secretsmanager:*:*:secret:*" will be applied.
	SecretsManagerArns []string `pulumi:"secretsManagerArns"`
	// List of Systems Manager Parameter ARNs that contain secrets to mount using External Secrets. If not provided,
	// the default ARN "arn:aws:ssm:*:*:parameter/*" will be applied.
	SsmParameterArns []string `pulumi:"ssmParameterArns"`
}

The External Secrets policy to the role.

type EKSExternalSecretsPolicyArgs 

type EKSExternalSecretsPolicyArgs struct {
	// Determines whether to attach the External Secrets policy to the role.
	Attach pulumi.BoolInput `pulumi:"attach"`
	// List of Secrets Manager ARNs that contain secrets to mount using External Secrets. If not provided, the default ARN "arn:aws:secretsmanager:*:*:secret:*" will be applied.
	SecretsManagerArns pulumi.StringArrayInput `pulumi:"secretsManagerArns"`
	// List of Systems Manager Parameter ARNs that contain secrets to mount using External Secrets. If not provided,
	// the default ARN "arn:aws:ssm:*:*:parameter/*" will be applied.
	SsmParameterArns pulumi.StringArrayInput `pulumi:"ssmParameterArns"`
}

The External Secrets policy to the role.

func (EKSExternalSecretsPolicyArgs) ElementType 

func (EKSExternalSecretsPolicyArgs) ElementType() reflect.Type

func (EKSExternalSecretsPolicyArgs) ToEKSExternalSecretsPolicyOutput 

func (i EKSExternalSecretsPolicyArgs) ToEKSExternalSecretsPolicyOutput() EKSExternalSecretsPolicyOutput

func (EKSExternalSecretsPolicyArgs) ToEKSExternalSecretsPolicyOutputWithContext 

func (i EKSExternalSecretsPolicyArgs) ToEKSExternalSecretsPolicyOutputWithContext(ctx context.Context) EKSExternalSecretsPolicyOutput

func (EKSExternalSecretsPolicyArgs) ToEKSExternalSecretsPolicyPtrOutput 

func (i EKSExternalSecretsPolicyArgs) ToEKSExternalSecretsPolicyPtrOutput() EKSExternalSecretsPolicyPtrOutput

func (EKSExternalSecretsPolicyArgs) ToEKSExternalSecretsPolicyPtrOutputWithContext 

func (i EKSExternalSecretsPolicyArgs) ToEKSExternalSecretsPolicyPtrOutputWithContext(ctx context.Context) EKSExternalSecretsPolicyPtrOutput

type EKSExternalSecretsPolicyInput 

type EKSExternalSecretsPolicyInput interface {
	pulumi.Input

	ToEKSExternalSecretsPolicyOutput() EKSExternalSecretsPolicyOutput
	ToEKSExternalSecretsPolicyOutputWithContext(context.Context) EKSExternalSecretsPolicyOutput
}

EKSExternalSecretsPolicyInput is an input type that accepts EKSExternalSecretsPolicyArgs and EKSExternalSecretsPolicyOutput values. You can construct a concrete instance of `EKSExternalSecretsPolicyInput` via: 

EKSExternalSecretsPolicyArgs{...}

type EKSExternalSecretsPolicyOutput 

type EKSExternalSecretsPolicyOutput struct{ *pulumi.OutputState }

The External Secrets policy to the role.

func (EKSExternalSecretsPolicyOutput) Attach 

func (o EKSExternalSecretsPolicyOutput) Attach() pulumi.BoolOutput

Determines whether to attach the External Secrets policy to the role.

func (EKSExternalSecretsPolicyOutput) ElementType 

func (EKSExternalSecretsPolicyOutput) ElementType() reflect.Type

func (EKSExternalSecretsPolicyOutput) SecretsManagerArns 

func (o EKSExternalSecretsPolicyOutput) SecretsManagerArns() pulumi.StringArrayOutput

List of Secrets Manager ARNs that contain secrets to mount using External Secrets. If not provided, the default ARN "arn:aws:secretsmanager:*:*:secret:*" will be applied.

func (EKSExternalSecretsPolicyOutput) SsmParameterArns 

func (o EKSExternalSecretsPolicyOutput) SsmParameterArns() pulumi.StringArrayOutput

List of Systems Manager Parameter ARNs that contain secrets to mount using External Secrets. If not provided, the default ARN "arn:aws:ssm:*:*:parameter/*" will be applied.

func (EKSExternalSecretsPolicyOutput) ToEKSExternalSecretsPolicyOutput 

func (o EKSExternalSecretsPolicyOutput) ToEKSExternalSecretsPolicyOutput() EKSExternalSecretsPolicyOutput

func (EKSExternalSecretsPolicyOutput) ToEKSExternalSecretsPolicyOutputWithContext 

func (o EKSExternalSecretsPolicyOutput) ToEKSExternalSecretsPolicyOutputWithContext(ctx context.Context) EKSExternalSecretsPolicyOutput

func (EKSExternalSecretsPolicyOutput) ToEKSExternalSecretsPolicyPtrOutput 

func (o EKSExternalSecretsPolicyOutput) ToEKSExternalSecretsPolicyPtrOutput() EKSExternalSecretsPolicyPtrOutput

func (EKSExternalSecretsPolicyOutput) ToEKSExternalSecretsPolicyPtrOutputWithContext 

func (o EKSExternalSecretsPolicyOutput) ToEKSExternalSecretsPolicyPtrOutputWithContext(ctx context.Context) EKSExternalSecretsPolicyPtrOutput

type EKSExternalSecretsPolicyPtrInput 

type EKSExternalSecretsPolicyPtrInput interface {
	pulumi.Input

	ToEKSExternalSecretsPolicyPtrOutput() EKSExternalSecretsPolicyPtrOutput
	ToEKSExternalSecretsPolicyPtrOutputWithContext(context.Context) EKSExternalSecretsPolicyPtrOutput
}

EKSExternalSecretsPolicyPtrInput is an input type that accepts EKSExternalSecretsPolicyArgs, EKSExternalSecretsPolicyPtr and EKSExternalSecretsPolicyPtrOutput values. You can construct a concrete instance of `EKSExternalSecretsPolicyPtrInput` via: 

        EKSExternalSecretsPolicyArgs{...}

or:

        nil

func EKSExternalSecretsPolicyPtr 

func EKSExternalSecretsPolicyPtr(v *EKSExternalSecretsPolicyArgs) EKSExternalSecretsPolicyPtrInput

type EKSExternalSecretsPolicyPtrOutput 

type EKSExternalSecretsPolicyPtrOutput struct{ *pulumi.OutputState }

func (EKSExternalSecretsPolicyPtrOutput) Attach 

func (o EKSExternalSecretsPolicyPtrOutput) Attach() pulumi.BoolPtrOutput

Determines whether to attach the External Secrets policy to the role.

func (EKSExternalSecretsPolicyPtrOutput) Elem 

func (o EKSExternalSecretsPolicyPtrOutput) Elem() EKSExternalSecretsPolicyOutput

func (EKSExternalSecretsPolicyPtrOutput) ElementType 

func (EKSExternalSecretsPolicyPtrOutput) ElementType() reflect.Type

func (EKSExternalSecretsPolicyPtrOutput) SecretsManagerArns 

func (o EKSExternalSecretsPolicyPtrOutput) SecretsManagerArns() pulumi.StringArrayOutput

List of Secrets Manager ARNs that contain secrets to mount using External Secrets. If not provided, the default ARN "arn:aws:secretsmanager:*:*:secret:*" will be applied.

func (EKSExternalSecretsPolicyPtrOutput) SsmParameterArns 

func (o EKSExternalSecretsPolicyPtrOutput) SsmParameterArns() pulumi.StringArrayOutput

List of Systems Manager Parameter ARNs that contain secrets to mount using External Secrets. If not provided, the default ARN "arn:aws:ssm:*:*:parameter/*" will be applied.

func (EKSExternalSecretsPolicyPtrOutput) ToEKSExternalSecretsPolicyPtrOutput 

func (o EKSExternalSecretsPolicyPtrOutput) ToEKSExternalSecretsPolicyPtrOutput() EKSExternalSecretsPolicyPtrOutput

func (EKSExternalSecretsPolicyPtrOutput) ToEKSExternalSecretsPolicyPtrOutputWithContext 

func (o EKSExternalSecretsPolicyPtrOutput) ToEKSExternalSecretsPolicyPtrOutputWithContext(ctx context.Context) EKSExternalSecretsPolicyPtrOutput

type EKSKarpenterControllerPolicy 

type EKSKarpenterControllerPolicy struct {
	// Determines whether to attach the Karpenter Controller policy to the role.
	Attach bool `pulumi:"attach"`
	// Cluster ID where the Karpenter controller is provisioned/managing.
	ClusterId *string `pulumi:"clusterId"`
	// List of node IAM role ARNs Karpenter can use to launch nodes. If not provided,
	// the default ARN "*" will be applied.
	NodeIamRoleArns []string `pulumi:"nodeIamRoleArns"`
	// List of SSM Parameter ARNs that contain AMI IDs launched by Karpenter. If not provided,
	// the default ARN "arn:aws:ssm:*:*:parameter/aws/service/*" will be applied.
	SsmParameterArns []string `pulumi:"ssmParameterArns"`
	// Account ID of where the subnets Karpenter will utilize resides. Used when subnets are shared from another account.
	SubnetAccountId *string `pulumi:"subnetAccountId"`
	// Tag key (`{key = value}`) applied to resources launched by Karpenter through the Karpenter provisioner.
	TagKey *string `pulumi:"tagKey"`
}

The Karpenter Controller policy to the role.

func (*EKSKarpenterControllerPolicy) Defaults 

func (val *EKSKarpenterControllerPolicy) Defaults() *EKSKarpenterControllerPolicy

Defaults sets the appropriate defaults for EKSKarpenterControllerPolicy

type EKSKarpenterControllerPolicyArgs 

type EKSKarpenterControllerPolicyArgs struct {
	// Determines whether to attach the Karpenter Controller policy to the role.
	Attach pulumi.BoolInput `pulumi:"attach"`
	// Cluster ID where the Karpenter controller is provisioned/managing.
	ClusterId pulumi.StringPtrInput `pulumi:"clusterId"`
	// List of node IAM role ARNs Karpenter can use to launch nodes. If not provided,
	// the default ARN "*" will be applied.
	NodeIamRoleArns pulumi.StringArrayInput `pulumi:"nodeIamRoleArns"`
	// List of SSM Parameter ARNs that contain AMI IDs launched by Karpenter. If not provided,
	// the default ARN "arn:aws:ssm:*:*:parameter/aws/service/*" will be applied.
	SsmParameterArns pulumi.StringArrayInput `pulumi:"ssmParameterArns"`
	// Account ID of where the subnets Karpenter will utilize resides. Used when subnets are shared from another account.
	SubnetAccountId pulumi.StringPtrInput `pulumi:"subnetAccountId"`
	// Tag key (`{key = value}`) applied to resources launched by Karpenter through the Karpenter provisioner.
	TagKey pulumi.StringPtrInput `pulumi:"tagKey"`
}

The Karpenter Controller policy to the role.

func (*EKSKarpenterControllerPolicyArgs) Defaults 

func (val *EKSKarpenterControllerPolicyArgs) Defaults() *EKSKarpenterControllerPolicyArgs

Defaults sets the appropriate defaults for EKSKarpenterControllerPolicyArgs

func (EKSKarpenterControllerPolicyArgs) ElementType 

func (EKSKarpenterControllerPolicyArgs) ElementType() reflect.Type

func (EKSKarpenterControllerPolicyArgs) ToEKSKarpenterControllerPolicyOutput 

func (i EKSKarpenterControllerPolicyArgs) ToEKSKarpenterControllerPolicyOutput() EKSKarpenterControllerPolicyOutput

func (EKSKarpenterControllerPolicyArgs) ToEKSKarpenterControllerPolicyOutputWithContext 

func (i EKSKarpenterControllerPolicyArgs) ToEKSKarpenterControllerPolicyOutputWithContext(ctx context.Context) EKSKarpenterControllerPolicyOutput

func (EKSKarpenterControllerPolicyArgs) ToEKSKarpenterControllerPolicyPtrOutput 

func (i EKSKarpenterControllerPolicyArgs) ToEKSKarpenterControllerPolicyPtrOutput() EKSKarpenterControllerPolicyPtrOutput

func (EKSKarpenterControllerPolicyArgs) ToEKSKarpenterControllerPolicyPtrOutputWithContext 

func (i EKSKarpenterControllerPolicyArgs) ToEKSKarpenterControllerPolicyPtrOutputWithContext(ctx context.Context) EKSKarpenterControllerPolicyPtrOutput

type EKSKarpenterControllerPolicyInput 

type EKSKarpenterControllerPolicyInput interface {
	pulumi.Input

	ToEKSKarpenterControllerPolicyOutput() EKSKarpenterControllerPolicyOutput
	ToEKSKarpenterControllerPolicyOutputWithContext(context.Context) EKSKarpenterControllerPolicyOutput
}

EKSKarpenterControllerPolicyInput is an input type that accepts EKSKarpenterControllerPolicyArgs and EKSKarpenterControllerPolicyOutput values. You can construct a concrete instance of `EKSKarpenterControllerPolicyInput` via: 

EKSKarpenterControllerPolicyArgs{...}

type EKSKarpenterControllerPolicyOutput 

type EKSKarpenterControllerPolicyOutput struct{ *pulumi.OutputState }

The Karpenter Controller policy to the role.

func (EKSKarpenterControllerPolicyOutput) Attach 

func (o EKSKarpenterControllerPolicyOutput) Attach() pulumi.BoolOutput

Determines whether to attach the Karpenter Controller policy to the role.

func (EKSKarpenterControllerPolicyOutput) ClusterId 

func (o EKSKarpenterControllerPolicyOutput) ClusterId() pulumi.StringPtrOutput

Cluster ID where the Karpenter controller is provisioned/managing.

func (EKSKarpenterControllerPolicyOutput) ElementType 

func (EKSKarpenterControllerPolicyOutput) ElementType() reflect.Type

func (EKSKarpenterControllerPolicyOutput) NodeIamRoleArns 

func (o EKSKarpenterControllerPolicyOutput) NodeIamRoleArns() pulumi.StringArrayOutput

List of node IAM role ARNs Karpenter can use to launch nodes. If not provided, the default ARN "*" will be applied.

func (EKSKarpenterControllerPolicyOutput) SsmParameterArns 

func (o EKSKarpenterControllerPolicyOutput) SsmParameterArns() pulumi.StringArrayOutput

List of SSM Parameter ARNs that contain AMI IDs launched by Karpenter. If not provided, the default ARN "arn:aws:ssm:*:*:parameter/aws/service/*" will be applied.

func (EKSKarpenterControllerPolicyOutput) SubnetAccountId 

func (o EKSKarpenterControllerPolicyOutput) SubnetAccountId() pulumi.StringPtrOutput

Account ID of where the subnets Karpenter will utilize resides. Used when subnets are shared from another account.

func (EKSKarpenterControllerPolicyOutput) TagKey 

func (o EKSKarpenterControllerPolicyOutput) TagKey() pulumi.StringPtrOutput

Tag key (`{key = value}`) applied to resources launched by Karpenter through the Karpenter provisioner.

func (EKSKarpenterControllerPolicyOutput) ToEKSKarpenterControllerPolicyOutput 

func (o EKSKarpenterControllerPolicyOutput) ToEKSKarpenterControllerPolicyOutput() EKSKarpenterControllerPolicyOutput

func (EKSKarpenterControllerPolicyOutput) ToEKSKarpenterControllerPolicyOutputWithContext 

func (o EKSKarpenterControllerPolicyOutput) ToEKSKarpenterControllerPolicyOutputWithContext(ctx context.Context) EKSKarpenterControllerPolicyOutput

func (EKSKarpenterControllerPolicyOutput) ToEKSKarpenterControllerPolicyPtrOutput 

func (o EKSKarpenterControllerPolicyOutput) ToEKSKarpenterControllerPolicyPtrOutput() EKSKarpenterControllerPolicyPtrOutput

func (EKSKarpenterControllerPolicyOutput) ToEKSKarpenterControllerPolicyPtrOutputWithContext 

func (o EKSKarpenterControllerPolicyOutput) ToEKSKarpenterControllerPolicyPtrOutputWithContext(ctx context.Context) EKSKarpenterControllerPolicyPtrOutput

type EKSKarpenterControllerPolicyPtrInput 

type EKSKarpenterControllerPolicyPtrInput interface {
	pulumi.Input

	ToEKSKarpenterControllerPolicyPtrOutput() EKSKarpenterControllerPolicyPtrOutput
	ToEKSKarpenterControllerPolicyPtrOutputWithContext(context.Context) EKSKarpenterControllerPolicyPtrOutput
}

EKSKarpenterControllerPolicyPtrInput is an input type that accepts EKSKarpenterControllerPolicyArgs, EKSKarpenterControllerPolicyPtr and EKSKarpenterControllerPolicyPtrOutput values. You can construct a concrete instance of `EKSKarpenterControllerPolicyPtrInput` via: 

        EKSKarpenterControllerPolicyArgs{...}

or:

        nil

func EKSKarpenterControllerPolicyPtr 

func EKSKarpenterControllerPolicyPtr(v *EKSKarpenterControllerPolicyArgs) EKSKarpenterControllerPolicyPtrInput

type EKSKarpenterControllerPolicyPtrOutput 

type EKSKarpenterControllerPolicyPtrOutput struct{ *pulumi.OutputState }

func (EKSKarpenterControllerPolicyPtrOutput) Attach 

func (o EKSKarpenterControllerPolicyPtrOutput) Attach() pulumi.BoolPtrOutput

Determines whether to attach the Karpenter Controller policy to the role.

func (EKSKarpenterControllerPolicyPtrOutput) ClusterId 

func (o EKSKarpenterControllerPolicyPtrOutput) ClusterId() pulumi.StringPtrOutput

Cluster ID where the Karpenter controller is provisioned/managing.

func (EKSKarpenterControllerPolicyPtrOutput) Elem 

func (o EKSKarpenterControllerPolicyPtrOutput) Elem() EKSKarpenterControllerPolicyOutput

func (EKSKarpenterControllerPolicyPtrOutput) ElementType 

func (EKSKarpenterControllerPolicyPtrOutput) ElementType() reflect.Type

func (EKSKarpenterControllerPolicyPtrOutput) NodeIamRoleArns 

func (o EKSKarpenterControllerPolicyPtrOutput) NodeIamRoleArns() pulumi.StringArrayOutput

List of node IAM role ARNs Karpenter can use to launch nodes. If not provided, the default ARN "*" will be applied.

func (EKSKarpenterControllerPolicyPtrOutput) SsmParameterArns 

func (o EKSKarpenterControllerPolicyPtrOutput) SsmParameterArns() pulumi.StringArrayOutput

List of SSM Parameter ARNs that contain AMI IDs launched by Karpenter. If not provided, the default ARN "arn:aws:ssm:*:*:parameter/aws/service/*" will be applied.

func (EKSKarpenterControllerPolicyPtrOutput) SubnetAccountId 

func (o EKSKarpenterControllerPolicyPtrOutput) SubnetAccountId() pulumi.StringPtrOutput

Account ID of where the subnets Karpenter will utilize resides. Used when subnets are shared from another account.

func (EKSKarpenterControllerPolicyPtrOutput) TagKey 

func (o EKSKarpenterControllerPolicyPtrOutput) TagKey() pulumi.StringPtrOutput

Tag key (`{key = value}`) applied to resources launched by Karpenter through the Karpenter provisioner.

func (EKSKarpenterControllerPolicyPtrOutput) ToEKSKarpenterControllerPolicyPtrOutput 

func (o EKSKarpenterControllerPolicyPtrOutput) ToEKSKarpenterControllerPolicyPtrOutput() EKSKarpenterControllerPolicyPtrOutput

func (EKSKarpenterControllerPolicyPtrOutput) ToEKSKarpenterControllerPolicyPtrOutputWithContext 

func (o EKSKarpenterControllerPolicyPtrOutput) ToEKSKarpenterControllerPolicyPtrOutputWithContext(ctx context.Context) EKSKarpenterControllerPolicyPtrOutput

type EKSLoadBalancerPolicy 

type EKSLoadBalancerPolicy struct {
	// Determines whether to attach the Load Balancer Controller policy to the role.
	Controller *bool `pulumi:"controller"`
	// Determines whether to attach the Load Balancer Controller policy for the TargetGroupBinding only.
	TargetGroupBindingOnly *bool `pulumi:"targetGroupBindingOnly"`
}

The Load Balancer policy.

type EKSLoadBalancerPolicyArgs 

type EKSLoadBalancerPolicyArgs struct {
	// Determines whether to attach the Load Balancer Controller policy to the role.
	Controller pulumi.BoolPtrInput `pulumi:"controller"`
	// Determines whether to attach the Load Balancer Controller policy for the TargetGroupBinding only.
	TargetGroupBindingOnly pulumi.BoolPtrInput `pulumi:"targetGroupBindingOnly"`
}

The Load Balancer policy.

func (EKSLoadBalancerPolicyArgs) ElementType 

func (EKSLoadBalancerPolicyArgs) ElementType() reflect.Type

func (EKSLoadBalancerPolicyArgs) ToEKSLoadBalancerPolicyOutput 

func (i EKSLoadBalancerPolicyArgs) ToEKSLoadBalancerPolicyOutput() EKSLoadBalancerPolicyOutput

func (EKSLoadBalancerPolicyArgs) ToEKSLoadBalancerPolicyOutputWithContext 

func (i EKSLoadBalancerPolicyArgs) ToEKSLoadBalancerPolicyOutputWithContext(ctx context.Context) EKSLoadBalancerPolicyOutput

func (EKSLoadBalancerPolicyArgs) ToEKSLoadBalancerPolicyPtrOutput 

func (i EKSLoadBalancerPolicyArgs) ToEKSLoadBalancerPolicyPtrOutput() EKSLoadBalancerPolicyPtrOutput

func (EKSLoadBalancerPolicyArgs) ToEKSLoadBalancerPolicyPtrOutputWithContext 

func (i EKSLoadBalancerPolicyArgs) ToEKSLoadBalancerPolicyPtrOutputWithContext(ctx context.Context) EKSLoadBalancerPolicyPtrOutput

type EKSLoadBalancerPolicyInput 

type EKSLoadBalancerPolicyInput interface {
	pulumi.Input

	ToEKSLoadBalancerPolicyOutput() EKSLoadBalancerPolicyOutput
	ToEKSLoadBalancerPolicyOutputWithContext(context.Context) EKSLoadBalancerPolicyOutput
}

EKSLoadBalancerPolicyInput is an input type that accepts EKSLoadBalancerPolicyArgs and EKSLoadBalancerPolicyOutput values. You can construct a concrete instance of `EKSLoadBalancerPolicyInput` via: 

EKSLoadBalancerPolicyArgs{...}

type EKSLoadBalancerPolicyOutput 

type EKSLoadBalancerPolicyOutput struct{ *pulumi.OutputState }

The Load Balancer policy.

func (EKSLoadBalancerPolicyOutput) Controller 

func (o EKSLoadBalancerPolicyOutput) Controller() pulumi.BoolPtrOutput

Determines whether to attach the Load Balancer Controller policy to the role.

func (EKSLoadBalancerPolicyOutput) ElementType 

func (EKSLoadBalancerPolicyOutput) ElementType() reflect.Type

func (EKSLoadBalancerPolicyOutput) TargetGroupBindingOnly 

func (o EKSLoadBalancerPolicyOutput) TargetGroupBindingOnly() pulumi.BoolPtrOutput

Determines whether to attach the Load Balancer Controller policy for the TargetGroupBinding only.

func (EKSLoadBalancerPolicyOutput) ToEKSLoadBalancerPolicyOutput 

func (o EKSLoadBalancerPolicyOutput) ToEKSLoadBalancerPolicyOutput() EKSLoadBalancerPolicyOutput

func (EKSLoadBalancerPolicyOutput) ToEKSLoadBalancerPolicyOutputWithContext 

func (o EKSLoadBalancerPolicyOutput) ToEKSLoadBalancerPolicyOutputWithContext(ctx context.Context) EKSLoadBalancerPolicyOutput

func (EKSLoadBalancerPolicyOutput) ToEKSLoadBalancerPolicyPtrOutput 

func (o EKSLoadBalancerPolicyOutput) ToEKSLoadBalancerPolicyPtrOutput() EKSLoadBalancerPolicyPtrOutput

func (EKSLoadBalancerPolicyOutput) ToEKSLoadBalancerPolicyPtrOutputWithContext 

func (o EKSLoadBalancerPolicyOutput) ToEKSLoadBalancerPolicyPtrOutputWithContext(ctx context.Context) EKSLoadBalancerPolicyPtrOutput

type EKSLoadBalancerPolicyPtrInput 

type EKSLoadBalancerPolicyPtrInput interface {
	pulumi.Input

	ToEKSLoadBalancerPolicyPtrOutput() EKSLoadBalancerPolicyPtrOutput
	ToEKSLoadBalancerPolicyPtrOutputWithContext(context.Context) EKSLoadBalancerPolicyPtrOutput
}

EKSLoadBalancerPolicyPtrInput is an input type that accepts EKSLoadBalancerPolicyArgs, EKSLoadBalancerPolicyPtr and EKSLoadBalancerPolicyPtrOutput values. You can construct a concrete instance of `EKSLoadBalancerPolicyPtrInput` via: 

        EKSLoadBalancerPolicyArgs{...}

or:

        nil

func EKSLoadBalancerPolicyPtr 

func EKSLoadBalancerPolicyPtr(v *EKSLoadBalancerPolicyArgs) EKSLoadBalancerPolicyPtrInput

type EKSLoadBalancerPolicyPtrOutput 

type EKSLoadBalancerPolicyPtrOutput struct{ *pulumi.OutputState }

func (EKSLoadBalancerPolicyPtrOutput) Controller 

func (o EKSLoadBalancerPolicyPtrOutput) Controller() pulumi.BoolPtrOutput

Determines whether to attach the Load Balancer Controller policy to the role.

func (EKSLoadBalancerPolicyPtrOutput) Elem 

func (o EKSLoadBalancerPolicyPtrOutput) Elem() EKSLoadBalancerPolicyOutput

func (EKSLoadBalancerPolicyPtrOutput) ElementType 

func (EKSLoadBalancerPolicyPtrOutput) ElementType() reflect.Type

func (EKSLoadBalancerPolicyPtrOutput) TargetGroupBindingOnly 

func (o EKSLoadBalancerPolicyPtrOutput) TargetGroupBindingOnly() pulumi.BoolPtrOutput

Determines whether to attach the Load Balancer Controller policy for the TargetGroupBinding only.

func (EKSLoadBalancerPolicyPtrOutput) ToEKSLoadBalancerPolicyPtrOutput 

func (o EKSLoadBalancerPolicyPtrOutput) ToEKSLoadBalancerPolicyPtrOutput() EKSLoadBalancerPolicyPtrOutput

func (EKSLoadBalancerPolicyPtrOutput) ToEKSLoadBalancerPolicyPtrOutputWithContext 

func (o EKSLoadBalancerPolicyPtrOutput) ToEKSLoadBalancerPolicyPtrOutputWithContext(ctx context.Context) EKSLoadBalancerPolicyPtrOutput

type EKSNodeTerminationHandlerPolicy 

type EKSNodeTerminationHandlerPolicy struct {
	// Determines whether to attach the Node Termination Handler policy to the role.
	Attach bool `pulumi:"attach"`
	// List of SQS ARNs that contain node termination events. If not provided, then a default
	// ARN of "*" will be provided.
	SqsQueueArns []string `pulumi:"sqsQueueArns"`
}

The Node Termination Handler policy to the role.

type EKSNodeTerminationHandlerPolicyArgs 

type EKSNodeTerminationHandlerPolicyArgs struct {
	// Determines whether to attach the Node Termination Handler policy to the role.
	Attach pulumi.BoolInput `pulumi:"attach"`
	// List of SQS ARNs that contain node termination events. If not provided, then a default
	// ARN of "*" will be provided.
	SqsQueueArns pulumi.StringArrayInput `pulumi:"sqsQueueArns"`
}

The Node Termination Handler policy to the role.

func (EKSNodeTerminationHandlerPolicyArgs) ElementType 

func (EKSNodeTerminationHandlerPolicyArgs) ElementType() reflect.Type

func (EKSNodeTerminationHandlerPolicyArgs) ToEKSNodeTerminationHandlerPolicyOutput 

func (i EKSNodeTerminationHandlerPolicyArgs) ToEKSNodeTerminationHandlerPolicyOutput() EKSNodeTerminationHandlerPolicyOutput

func (EKSNodeTerminationHandlerPolicyArgs) ToEKSNodeTerminationHandlerPolicyOutputWithContext 

func (i EKSNodeTerminationHandlerPolicyArgs) ToEKSNodeTerminationHandlerPolicyOutputWithContext(ctx context.Context) EKSNodeTerminationHandlerPolicyOutput

func (EKSNodeTerminationHandlerPolicyArgs) ToEKSNodeTerminationHandlerPolicyPtrOutput 

func (i EKSNodeTerminationHandlerPolicyArgs) ToEKSNodeTerminationHandlerPolicyPtrOutput() EKSNodeTerminationHandlerPolicyPtrOutput

func (EKSNodeTerminationHandlerPolicyArgs) ToEKSNodeTerminationHandlerPolicyPtrOutputWithContext 

func (i EKSNodeTerminationHandlerPolicyArgs) ToEKSNodeTerminationHandlerPolicyPtrOutputWithContext(ctx context.Context) EKSNodeTerminationHandlerPolicyPtrOutput

type EKSNodeTerminationHandlerPolicyInput 

type EKSNodeTerminationHandlerPolicyInput interface {
	pulumi.Input

	ToEKSNodeTerminationHandlerPolicyOutput() EKSNodeTerminationHandlerPolicyOutput
	ToEKSNodeTerminationHandlerPolicyOutputWithContext(context.Context) EKSNodeTerminationHandlerPolicyOutput
}

EKSNodeTerminationHandlerPolicyInput is an input type that accepts EKSNodeTerminationHandlerPolicyArgs and EKSNodeTerminationHandlerPolicyOutput values. You can construct a concrete instance of `EKSNodeTerminationHandlerPolicyInput` via: 

EKSNodeTerminationHandlerPolicyArgs{...}

type EKSNodeTerminationHandlerPolicyOutput 

type EKSNodeTerminationHandlerPolicyOutput struct{ *pulumi.OutputState }

The Node Termination Handler policy to the role.

func (EKSNodeTerminationHandlerPolicyOutput) Attach 

func (o EKSNodeTerminationHandlerPolicyOutput) Attach() pulumi.BoolOutput

Determines whether to attach the Node Termination Handler policy to the role.

func (EKSNodeTerminationHandlerPolicyOutput) ElementType 

func (EKSNodeTerminationHandlerPolicyOutput) ElementType() reflect.Type

func (EKSNodeTerminationHandlerPolicyOutput) SqsQueueArns 

func (o EKSNodeTerminationHandlerPolicyOutput) SqsQueueArns() pulumi.StringArrayOutput

List of SQS ARNs that contain node termination events. If not provided, then a default ARN of "*" will be provided.

func (EKSNodeTerminationHandlerPolicyOutput) ToEKSNodeTerminationHandlerPolicyOutput 

func (o EKSNodeTerminationHandlerPolicyOutput) ToEKSNodeTerminationHandlerPolicyOutput() EKSNodeTerminationHandlerPolicyOutput

func (EKSNodeTerminationHandlerPolicyOutput) ToEKSNodeTerminationHandlerPolicyOutputWithContext 

func (o EKSNodeTerminationHandlerPolicyOutput) ToEKSNodeTerminationHandlerPolicyOutputWithContext(ctx context.Context) EKSNodeTerminationHandlerPolicyOutput

func (EKSNodeTerminationHandlerPolicyOutput) ToEKSNodeTerminationHandlerPolicyPtrOutput 

func (o EKSNodeTerminationHandlerPolicyOutput) ToEKSNodeTerminationHandlerPolicyPtrOutput() EKSNodeTerminationHandlerPolicyPtrOutput

func (EKSNodeTerminationHandlerPolicyOutput) ToEKSNodeTerminationHandlerPolicyPtrOutputWithContext 

func (o EKSNodeTerminationHandlerPolicyOutput) ToEKSNodeTerminationHandlerPolicyPtrOutputWithContext(ctx context.Context) EKSNodeTerminationHandlerPolicyPtrOutput

type EKSNodeTerminationHandlerPolicyPtrInput 

type EKSNodeTerminationHandlerPolicyPtrInput interface {
	pulumi.Input

	ToEKSNodeTerminationHandlerPolicyPtrOutput() EKSNodeTerminationHandlerPolicyPtrOutput
	ToEKSNodeTerminationHandlerPolicyPtrOutputWithContext(context.Context) EKSNodeTerminationHandlerPolicyPtrOutput
}

EKSNodeTerminationHandlerPolicyPtrInput is an input type that accepts EKSNodeTerminationHandlerPolicyArgs, EKSNodeTerminationHandlerPolicyPtr and EKSNodeTerminationHandlerPolicyPtrOutput values. You can construct a concrete instance of `EKSNodeTerminationHandlerPolicyPtrInput` via: 

        EKSNodeTerminationHandlerPolicyArgs{...}

or:

        nil

func EKSNodeTerminationHandlerPolicyPtr 

func EKSNodeTerminationHandlerPolicyPtr(v *EKSNodeTerminationHandlerPolicyArgs) EKSNodeTerminationHandlerPolicyPtrInput

type EKSNodeTerminationHandlerPolicyPtrOutput 

type EKSNodeTerminationHandlerPolicyPtrOutput struct{ *pulumi.OutputState }

func (EKSNodeTerminationHandlerPolicyPtrOutput) Attach 

func (o EKSNodeTerminationHandlerPolicyPtrOutput) Attach() pulumi.BoolPtrOutput

Determines whether to attach the Node Termination Handler policy to the role.

func (EKSNodeTerminationHandlerPolicyPtrOutput) Elem 

func (o EKSNodeTerminationHandlerPolicyPtrOutput) Elem() EKSNodeTerminationHandlerPolicyOutput

func (EKSNodeTerminationHandlerPolicyPtrOutput) ElementType 

func (EKSNodeTerminationHandlerPolicyPtrOutput) ElementType() reflect.Type

func (EKSNodeTerminationHandlerPolicyPtrOutput) SqsQueueArns 

func (o EKSNodeTerminationHandlerPolicyPtrOutput) SqsQueueArns() pulumi.StringArrayOutput

List of SQS ARNs that contain node termination events. If not provided, then a default ARN of "*" will be provided.

func (EKSNodeTerminationHandlerPolicyPtrOutput) ToEKSNodeTerminationHandlerPolicyPtrOutput 

func (o EKSNodeTerminationHandlerPolicyPtrOutput) ToEKSNodeTerminationHandlerPolicyPtrOutput() EKSNodeTerminationHandlerPolicyPtrOutput

func (EKSNodeTerminationHandlerPolicyPtrOutput) ToEKSNodeTerminationHandlerPolicyPtrOutputWithContext 

func (o EKSNodeTerminationHandlerPolicyPtrOutput) ToEKSNodeTerminationHandlerPolicyPtrOutputWithContext(ctx context.Context) EKSNodeTerminationHandlerPolicyPtrOutput

type EKSRole 

type EKSRole struct {
	pulumi.ResourceState

	// ARN of IAM role.
	Arn pulumi.StringOutput `pulumi:"arn"`
	// Name of IAM role.
	Name pulumi.StringOutput `pulumi:"name"`
	// Path of IAM role.
	Path pulumi.StringOutput `pulumi:"path"`
	// Unique ID of IAM role.
	UniqueId pulumi.StringOutput `pulumi:"uniqueId"`
}

This resource helps you create an IAM role that can be assumed by one or more EKS ServiceAccounts, in one or more EKS Clusters. With this resource:

- You do not need any knowledge of cluster OIDC information. - You can assume the role from multiple EKS clusters, for example used in DR or when a workload is spread across clusters. - You can support multiple ServiceAccount in the same cluster, for example when a workload runs in multiple namespaces.

Notes:

- The EKS cluster needs to exist first, in the current AWS account and region - The key in the `Cluster Service Accounts` is the exact name of the EKS cluster.

## Example Usage ## Multi Cluster

With this resource you can provision an IAM Role named `my-app` that can be assumed from:

- EKS cluster `staging-main-1`, namespace `default`, ServiceAccount called `my-app-staging`. - EKS cluster `staging-backup-1`, namespace `default`, ServiceAccount called `my-app-staging`.

```go package main

import ( 

iam "github.com/pulumi/pulumi-aws-iam/sdk/go/aws-iam"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
    pulumi.Run(func(ctx *pulumi.Context) error {
        eksRole, err := iam.NewEKSRole(ctx, "eks-role", &iam.EKSRoleArgs{
            Role: iam.RoleArgs{
                Name:       pulumi.String("eks-role"),
                PolicyArns: pulumi.ToStringArray([]string{"arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy"}),
            },
            Tags: pulumi.ToStringMap(map[string]string{
                "Role": "eks-role",
            }),
            Uncomment the below and replace actual cluster values.
            ClusterServiceAccounts: pulumi.ToStringArrayMap(map[string][]string{
                "staging-main-1": {"default:my-app-staging"},
                "staging-backup-1": {"default:my-app-staging"},
            }),
        })
        if err != nil {
            return err
        }

        ctx.Export("eksRole", eksRole)

        return nil
    })
}

``` {{ /example }}

func NewEKSRole 

func NewEKSRole(ctx *pulumi.Context,
	name string, args *EKSRoleArgs, opts ...pulumi.ResourceOption) (*EKSRole, error)

NewEKSRole registers a new resource with the given unique name, arguments, and options.

func (*EKSRole) ElementType 

func (*EKSRole) ElementType() reflect.Type

func (*EKSRole) ToEKSRoleOutput 

func (i *EKSRole) ToEKSRoleOutput() EKSRoleOutput

func (*EKSRole) ToEKSRoleOutputWithContext 

func (i *EKSRole) ToEKSRoleOutputWithContext(ctx context.Context) EKSRoleOutput

type EKSRoleArgs 

type EKSRoleArgs struct {
	// EKS cluster and k8s ServiceAccount pairs. Each EKS cluster can have multiple k8s ServiceAccount. See README for details
	ClusterServiceAccounts EKSServiceAccountArrayInput
	// Whether policies should be detached from this role when destroying.
	ForceDetachPolicies pulumi.BoolPtrInput
	// Maximum CLI/API session duration in seconds between 3600 and 43200.
	MaxSessionDuration pulumi.IntPtrInput
	// OIDC provider URL and k8s ServiceAccount pairs. If the assume role policy requires a mix of EKS clusters and other OIDC providers then this can be used
	ProviderUrlSaPairs pulumi.StringArrayMapInput
	Role               RolePtrInput
	// ARNs of any policies to attach to the IAM role.
	RolePolicyArns pulumi.StringArrayInput
	// A map of tags to add.
	Tags pulumi.StringMapInput
}

The set of arguments for constructing a EKSRole resource.

func (EKSRoleArgs) ElementType 

func (EKSRoleArgs) ElementType() reflect.Type

type EKSRoleArray 

type EKSRoleArray []EKSRoleInput

func (EKSRoleArray) ElementType 

func (EKSRoleArray) ElementType() reflect.Type

func (EKSRoleArray) ToEKSRoleArrayOutput 

func (i EKSRoleArray) ToEKSRoleArrayOutput() EKSRoleArrayOutput

func (EKSRoleArray) ToEKSRoleArrayOutputWithContext 

func (i EKSRoleArray) ToEKSRoleArrayOutputWithContext(ctx context.Context) EKSRoleArrayOutput

type EKSRoleArrayInput 

type EKSRoleArrayInput interface {
	pulumi.Input

	ToEKSRoleArrayOutput() EKSRoleArrayOutput
	ToEKSRoleArrayOutputWithContext(context.Context) EKSRoleArrayOutput
}

EKSRoleArrayInput is an input type that accepts EKSRoleArray and EKSRoleArrayOutput values. You can construct a concrete instance of `EKSRoleArrayInput` via: 

EKSRoleArray{ EKSRoleArgs{...} }

type EKSRoleArrayOutput 

type EKSRoleArrayOutput struct{ *pulumi.OutputState }

func (EKSRoleArrayOutput) ElementType 

func (EKSRoleArrayOutput) ElementType() reflect.Type

func (EKSRoleArrayOutput) Index 

func (o EKSRoleArrayOutput) Index(i pulumi.IntInput) EKSRoleOutput

func (EKSRoleArrayOutput) ToEKSRoleArrayOutput 

func (o EKSRoleArrayOutput) ToEKSRoleArrayOutput() EKSRoleArrayOutput

func (EKSRoleArrayOutput) ToEKSRoleArrayOutputWithContext 

func (o EKSRoleArrayOutput) ToEKSRoleArrayOutputWithContext(ctx context.Context) EKSRoleArrayOutput

type EKSRoleInput 

type EKSRoleInput interface {
	pulumi.Input

	ToEKSRoleOutput() EKSRoleOutput
	ToEKSRoleOutputWithContext(ctx context.Context) EKSRoleOutput
}

type EKSRoleMap 

type EKSRoleMap map[string]EKSRoleInput

func (EKSRoleMap) ElementType 

func (EKSRoleMap) ElementType() reflect.Type

func (EKSRoleMap) ToEKSRoleMapOutput 

func (i EKSRoleMap) ToEKSRoleMapOutput() EKSRoleMapOutput

func (EKSRoleMap) ToEKSRoleMapOutputWithContext 

func (i EKSRoleMap) ToEKSRoleMapOutputWithContext(ctx context.Context) EKSRoleMapOutput

type EKSRoleMapInput 

type EKSRoleMapInput interface {
	pulumi.Input

	ToEKSRoleMapOutput() EKSRoleMapOutput
	ToEKSRoleMapOutputWithContext(context.Context) EKSRoleMapOutput
}

EKSRoleMapInput is an input type that accepts EKSRoleMap and EKSRoleMapOutput values. You can construct a concrete instance of `EKSRoleMapInput` via: 

EKSRoleMap{ "key": EKSRoleArgs{...} }

type EKSRoleMapOutput 

type EKSRoleMapOutput struct{ *pulumi.OutputState }

func (EKSRoleMapOutput) ElementType 

func (EKSRoleMapOutput) ElementType() reflect.Type

func (EKSRoleMapOutput) MapIndex 

func (o EKSRoleMapOutput) MapIndex(k pulumi.StringInput) EKSRoleOutput

func (EKSRoleMapOutput) ToEKSRoleMapOutput 

func (o EKSRoleMapOutput) ToEKSRoleMapOutput() EKSRoleMapOutput

func (EKSRoleMapOutput) ToEKSRoleMapOutputWithContext 

func (o EKSRoleMapOutput) ToEKSRoleMapOutputWithContext(ctx context.Context) EKSRoleMapOutput

type EKSRoleOutput 

type EKSRoleOutput struct{ *pulumi.OutputState }

func (EKSRoleOutput) Arn 

func (o EKSRoleOutput) Arn() pulumi.StringOutput

ARN of IAM role.

func (EKSRoleOutput) ElementType 

func (EKSRoleOutput) ElementType() reflect.Type

func (EKSRoleOutput) Name 

func (o EKSRoleOutput) Name() pulumi.StringOutput

Name of IAM role.

func (EKSRoleOutput) Path 

func (o EKSRoleOutput) Path() pulumi.StringOutput

Path of IAM role.

func (EKSRoleOutput) ToEKSRoleOutput 

func (o EKSRoleOutput) ToEKSRoleOutput() EKSRoleOutput

func (EKSRoleOutput) ToEKSRoleOutputWithContext 

func (o EKSRoleOutput) ToEKSRoleOutputWithContext(ctx context.Context) EKSRoleOutput

func (EKSRoleOutput) UniqueId 

func (o EKSRoleOutput) UniqueId() pulumi.StringOutput

Unique ID of IAM role.

type EKSRolePolicies 

type EKSRolePolicies struct {
	// The Amazon Managed Service for Prometheus IAM policy.
	AmazonManagedServicePrometheus *EKSAmazonManagedServicePrometheusPolicy `pulumi:"amazonManagedServicePrometheus"`
	// The Appmesh policies.
	Appmesh *EKSAppmeshPolicy `pulumi:"appmesh"`
	// The Cert Manager IAM policy.
	CertManager *EKSCertManagerPolicy `pulumi:"certManager"`
	// The Cluster Autoscaler IAM policy.
	ClusterAutoScaling *EKSClusterAutoscalerPolicy `pulumi:"clusterAutoScaling"`
	// The EBS CSI IAM policy.
	EbsCsi *EKSEBSCSIPolicy `pulumi:"ebsCsi"`
	// The EFS CSI IAM policy.
	EfsCsi *EKSEFSCSIPolicy `pulumi:"efsCsi"`
	// The External DNS IAM policy.
	ExternalDns *EKSExternalDNSPolicy `pulumi:"externalDns"`
	// The External Secrets policy.
	ExternalSecrets *EKSExternalSecretsPolicy `pulumi:"externalSecrets"`
	// The FSx for Lustre CSI Driver IAM policy.
	FsxLustreCsi *FSxLustreCSIPolicy `pulumi:"fsxLustreCsi"`
	// The Karpenter Controller policy.
	KarpenterController *EKSKarpenterControllerPolicy `pulumi:"karpenterController"`
	// The Load Balancer policy.
	LoadBalancer *EKSLoadBalancerPolicy `pulumi:"loadBalancer"`
	// The Node Termination Handler policy to the role.
	NodeTerminationHandler *EKSNodeTerminationHandlerPolicy `pulumi:"nodeTerminationHandler"`
	// The Velero IAM policy.
	Velero *EKSVeleroPolicy `pulumi:"velero"`
	// The VPC CNI IAM policy to the role.
	VpnCni *EKSVPNCNIPolicy `pulumi:"vpnCni"`
}

The different policies to attach to the role.

func (*EKSRolePolicies) Defaults 

func (val *EKSRolePolicies) Defaults() *EKSRolePolicies

Defaults sets the appropriate defaults for EKSRolePolicies

type EKSRolePoliciesArgs 

type EKSRolePoliciesArgs struct {
	// The Amazon Managed Service for Prometheus IAM policy.
	AmazonManagedServicePrometheus EKSAmazonManagedServicePrometheusPolicyPtrInput `pulumi:"amazonManagedServicePrometheus"`
	// The Appmesh policies.
	Appmesh EKSAppmeshPolicyPtrInput `pulumi:"appmesh"`
	// The Cert Manager IAM policy.
	CertManager EKSCertManagerPolicyPtrInput `pulumi:"certManager"`
	// The Cluster Autoscaler IAM policy.
	ClusterAutoScaling EKSClusterAutoscalerPolicyPtrInput `pulumi:"clusterAutoScaling"`
	// The EBS CSI IAM policy.
	EbsCsi EKSEBSCSIPolicyPtrInput `pulumi:"ebsCsi"`
	// The EFS CSI IAM policy.
	EfsCsi EKSEFSCSIPolicyPtrInput `pulumi:"efsCsi"`
	// The External DNS IAM policy.
	ExternalDns EKSExternalDNSPolicyPtrInput `pulumi:"externalDns"`
	// The External Secrets policy.
	ExternalSecrets EKSExternalSecretsPolicyPtrInput `pulumi:"externalSecrets"`
	// The FSx for Lustre CSI Driver IAM policy.
	FsxLustreCsi FSxLustreCSIPolicyPtrInput `pulumi:"fsxLustreCsi"`
	// The Karpenter Controller policy.
	KarpenterController EKSKarpenterControllerPolicyPtrInput `pulumi:"karpenterController"`
	// The Load Balancer policy.
	LoadBalancer EKSLoadBalancerPolicyPtrInput `pulumi:"loadBalancer"`
	// The Node Termination Handler policy to the role.
	NodeTerminationHandler EKSNodeTerminationHandlerPolicyPtrInput `pulumi:"nodeTerminationHandler"`
	// The Velero IAM policy.
	Velero EKSVeleroPolicyPtrInput `pulumi:"velero"`
	// The VPC CNI IAM policy to the role.
	VpnCni EKSVPNCNIPolicyPtrInput `pulumi:"vpnCni"`
}

The different policies to attach to the role.

func (*EKSRolePoliciesArgs) Defaults 

func (val *EKSRolePoliciesArgs) Defaults() *EKSRolePoliciesArgs

Defaults sets the appropriate defaults for EKSRolePoliciesArgs

func (EKSRolePoliciesArgs) ElementType 

func (EKSRolePoliciesArgs) ElementType() reflect.Type

func (EKSRolePoliciesArgs) ToEKSRolePoliciesOutput 

func (i EKSRolePoliciesArgs) ToEKSRolePoliciesOutput() EKSRolePoliciesOutput

func (EKSRolePoliciesArgs) ToEKSRolePoliciesOutputWithContext 

func (i EKSRolePoliciesArgs) ToEKSRolePoliciesOutputWithContext(ctx context.Context) EKSRolePoliciesOutput

func (EKSRolePoliciesArgs) ToEKSRolePoliciesPtrOutput 

func (i EKSRolePoliciesArgs) ToEKSRolePoliciesPtrOutput() EKSRolePoliciesPtrOutput

func (EKSRolePoliciesArgs) ToEKSRolePoliciesPtrOutputWithContext 

func (i EKSRolePoliciesArgs) ToEKSRolePoliciesPtrOutputWithContext(ctx context.Context) EKSRolePoliciesPtrOutput

type EKSRolePoliciesInput 

type EKSRolePoliciesInput interface {
	pulumi.Input

	ToEKSRolePoliciesOutput() EKSRolePoliciesOutput
	ToEKSRolePoliciesOutputWithContext(context.Context) EKSRolePoliciesOutput
}

EKSRolePoliciesInput is an input type that accepts EKSRolePoliciesArgs and EKSRolePoliciesOutput values. You can construct a concrete instance of `EKSRolePoliciesInput` via: 

EKSRolePoliciesArgs{...}

type EKSRolePoliciesOutput 

type EKSRolePoliciesOutput struct{ *pulumi.OutputState }

The different policies to attach to the role.

func (EKSRolePoliciesOutput) AmazonManagedServicePrometheus 

func (o EKSRolePoliciesOutput) AmazonManagedServicePrometheus() EKSAmazonManagedServicePrometheusPolicyPtrOutput

The Amazon Managed Service for Prometheus IAM policy.

func (EKSRolePoliciesOutput) Appmesh 

func (o EKSRolePoliciesOutput) Appmesh() EKSAppmeshPolicyPtrOutput

The Appmesh policies.

func (EKSRolePoliciesOutput) CertManager 

func (o EKSRolePoliciesOutput) CertManager() EKSCertManagerPolicyPtrOutput

The Cert Manager IAM policy.

func (EKSRolePoliciesOutput) ClusterAutoScaling 

func (o EKSRolePoliciesOutput) ClusterAutoScaling() EKSClusterAutoscalerPolicyPtrOutput

The Cluster Autoscaler IAM policy.

func (EKSRolePoliciesOutput) EbsCsi 

func (o EKSRolePoliciesOutput) EbsCsi() EKSEBSCSIPolicyPtrOutput

The EBS CSI IAM policy.

func (EKSRolePoliciesOutput) EfsCsi 

func (o EKSRolePoliciesOutput) EfsCsi() EKSEFSCSIPolicyPtrOutput

The EFS CSI IAM policy.

func (EKSRolePoliciesOutput) ElementType 

func (EKSRolePoliciesOutput) ElementType() reflect.Type

func (EKSRolePoliciesOutput) ExternalDns 

func (o EKSRolePoliciesOutput) ExternalDns() EKSExternalDNSPolicyPtrOutput

The External DNS IAM policy.

func (EKSRolePoliciesOutput) ExternalSecrets 

func (o EKSRolePoliciesOutput) ExternalSecrets() EKSExternalSecretsPolicyPtrOutput

The External Secrets policy.

func (EKSRolePoliciesOutput) FsxLustreCsi 

func (o EKSRolePoliciesOutput) FsxLustreCsi() FSxLustreCSIPolicyPtrOutput

The FSx for Lustre CSI Driver IAM policy.

func (EKSRolePoliciesOutput) KarpenterController 

func (o EKSRolePoliciesOutput) KarpenterController() EKSKarpenterControllerPolicyPtrOutput

The Karpenter Controller policy.

func (EKSRolePoliciesOutput) LoadBalancer 

func (o EKSRolePoliciesOutput) LoadBalancer() EKSLoadBalancerPolicyPtrOutput

The Load Balancer policy.

func (EKSRolePoliciesOutput) NodeTerminationHandler 

func (o EKSRolePoliciesOutput) NodeTerminationHandler() EKSNodeTerminationHandlerPolicyPtrOutput

The Node Termination Handler policy to the role.

func (EKSRolePoliciesOutput) ToEKSRolePoliciesOutput 

func (o EKSRolePoliciesOutput) ToEKSRolePoliciesOutput() EKSRolePoliciesOutput

func (EKSRolePoliciesOutput) ToEKSRolePoliciesOutputWithContext 

func (o EKSRolePoliciesOutput) ToEKSRolePoliciesOutputWithContext(ctx context.Context) EKSRolePoliciesOutput

func (EKSRolePoliciesOutput) ToEKSRolePoliciesPtrOutput 

func (o EKSRolePoliciesOutput) ToEKSRolePoliciesPtrOutput() EKSRolePoliciesPtrOutput

func (EKSRolePoliciesOutput) ToEKSRolePoliciesPtrOutputWithContext 

func (o EKSRolePoliciesOutput) ToEKSRolePoliciesPtrOutputWithContext(ctx context.Context) EKSRolePoliciesPtrOutput

func (EKSRolePoliciesOutput) Velero 

func (o EKSRolePoliciesOutput) Velero() EKSVeleroPolicyPtrOutput

The Velero IAM policy.

func (EKSRolePoliciesOutput) VpnCni 

func (o EKSRolePoliciesOutput) VpnCni() EKSVPNCNIPolicyPtrOutput

The VPC CNI IAM policy to the role.

type EKSRolePoliciesPtrInput 

type EKSRolePoliciesPtrInput interface {
	pulumi.Input

	ToEKSRolePoliciesPtrOutput() EKSRolePoliciesPtrOutput
	ToEKSRolePoliciesPtrOutputWithContext(context.Context) EKSRolePoliciesPtrOutput
}

EKSRolePoliciesPtrInput is an input type that accepts EKSRolePoliciesArgs, EKSRolePoliciesPtr and EKSRolePoliciesPtrOutput values. You can construct a concrete instance of `EKSRolePoliciesPtrInput` via: 

        EKSRolePoliciesArgs{...}

or:

        nil

func EKSRolePoliciesPtr 

func EKSRolePoliciesPtr(v *EKSRolePoliciesArgs) EKSRolePoliciesPtrInput

type EKSRolePoliciesPtrOutput 

type EKSRolePoliciesPtrOutput struct{ *pulumi.OutputState }

func (EKSRolePoliciesPtrOutput) AmazonManagedServicePrometheus 

func (o EKSRolePoliciesPtrOutput) AmazonManagedServicePrometheus() EKSAmazonManagedServicePrometheusPolicyPtrOutput

The Amazon Managed Service for Prometheus IAM policy.

func (EKSRolePoliciesPtrOutput) Appmesh 

func (o EKSRolePoliciesPtrOutput) Appmesh() EKSAppmeshPolicyPtrOutput

The Appmesh policies.

func (EKSRolePoliciesPtrOutput) CertManager 

func (o EKSRolePoliciesPtrOutput) CertManager() EKSCertManagerPolicyPtrOutput

The Cert Manager IAM policy.

func (EKSRolePoliciesPtrOutput) ClusterAutoScaling 

func (o EKSRolePoliciesPtrOutput) ClusterAutoScaling() EKSClusterAutoscalerPolicyPtrOutput

The Cluster Autoscaler IAM policy.

func (EKSRolePoliciesPtrOutput) EbsCsi 

func (o EKSRolePoliciesPtrOutput) EbsCsi() EKSEBSCSIPolicyPtrOutput

The EBS CSI IAM policy.

func (EKSRolePoliciesPtrOutput) EfsCsi 

func (o EKSRolePoliciesPtrOutput) EfsCsi() EKSEFSCSIPolicyPtrOutput

The EFS CSI IAM policy.

func (EKSRolePoliciesPtrOutput) Elem 

func (o EKSRolePoliciesPtrOutput) Elem() EKSRolePoliciesOutput

func (EKSRolePoliciesPtrOutput) ElementType 

func (EKSRolePoliciesPtrOutput) ElementType() reflect.Type

func (EKSRolePoliciesPtrOutput) ExternalDns 

func (o EKSRolePoliciesPtrOutput) ExternalDns() EKSExternalDNSPolicyPtrOutput

The External DNS IAM policy.

func (EKSRolePoliciesPtrOutput) ExternalSecrets 

func (o EKSRolePoliciesPtrOutput) ExternalSecrets() EKSExternalSecretsPolicyPtrOutput

The External Secrets policy.

func (EKSRolePoliciesPtrOutput) FsxLustreCsi 

func (o EKSRolePoliciesPtrOutput) FsxLustreCsi() FSxLustreCSIPolicyPtrOutput

The FSx for Lustre CSI Driver IAM policy.

func (EKSRolePoliciesPtrOutput) KarpenterController 

func (o EKSRolePoliciesPtrOutput) KarpenterController() EKSKarpenterControllerPolicyPtrOutput

The Karpenter Controller policy.

func (EKSRolePoliciesPtrOutput) LoadBalancer 

func (o EKSRolePoliciesPtrOutput) LoadBalancer() EKSLoadBalancerPolicyPtrOutput

The Load Balancer policy.

func (EKSRolePoliciesPtrOutput) NodeTerminationHandler 

func (o EKSRolePoliciesPtrOutput) NodeTerminationHandler() EKSNodeTerminationHandlerPolicyPtrOutput

The Node Termination Handler policy to the role.

func (EKSRolePoliciesPtrOutput) ToEKSRolePoliciesPtrOutput 

func (o EKSRolePoliciesPtrOutput) ToEKSRolePoliciesPtrOutput() EKSRolePoliciesPtrOutput

func (EKSRolePoliciesPtrOutput) ToEKSRolePoliciesPtrOutputWithContext 

func (o EKSRolePoliciesPtrOutput) ToEKSRolePoliciesPtrOutputWithContext(ctx context.Context) EKSRolePoliciesPtrOutput

func (EKSRolePoliciesPtrOutput) Velero 

func (o EKSRolePoliciesPtrOutput) Velero() EKSVeleroPolicyPtrOutput

The Velero IAM policy.

func (EKSRolePoliciesPtrOutput) VpnCni 

func (o EKSRolePoliciesPtrOutput) VpnCni() EKSVPNCNIPolicyPtrOutput

The VPC CNI IAM policy to the role.

type EKSServiceAccount added in v0.0.6 

type EKSServiceAccount struct {
	// Name of the EKS cluster.
	Name *string `pulumi:"name"`
	// Service accounts to pair with the cluster.
	ServiceAccounts []string `pulumi:"serviceAccounts"`
}

EKS cluster and k8s ServiceAccount pairs. Each EKS cluster can have multiple k8s ServiceAccount.

type EKSServiceAccountArgs added in v0.0.6 

type EKSServiceAccountArgs struct {
	// Name of the EKS cluster.
	Name pulumi.StringPtrInput `pulumi:"name"`
	// Service accounts to pair with the cluster.
	ServiceAccounts pulumi.StringArrayInput `pulumi:"serviceAccounts"`
}

EKS cluster and k8s ServiceAccount pairs. Each EKS cluster can have multiple k8s ServiceAccount.

func (EKSServiceAccountArgs) ElementType added in v0.0.6 

func (EKSServiceAccountArgs) ElementType() reflect.Type

func (EKSServiceAccountArgs) ToEKSServiceAccountOutput added in v0.0.6 

func (i EKSServiceAccountArgs) ToEKSServiceAccountOutput() EKSServiceAccountOutput

func (EKSServiceAccountArgs) ToEKSServiceAccountOutputWithContext added in v0.0.6 

func (i EKSServiceAccountArgs) ToEKSServiceAccountOutputWithContext(ctx context.Context) EKSServiceAccountOutput

type EKSServiceAccountArray added in v0.0.6 

type EKSServiceAccountArray []EKSServiceAccountInput

func (EKSServiceAccountArray) ElementType added in v0.0.6 

func (EKSServiceAccountArray) ElementType() reflect.Type

func (EKSServiceAccountArray) ToEKSServiceAccountArrayOutput added in v0.0.6 

func (i EKSServiceAccountArray) ToEKSServiceAccountArrayOutput() EKSServiceAccountArrayOutput

func (EKSServiceAccountArray) ToEKSServiceAccountArrayOutputWithContext added in v0.0.6 

func (i EKSServiceAccountArray) ToEKSServiceAccountArrayOutputWithContext(ctx context.Context) EKSServiceAccountArrayOutput

type EKSServiceAccountArrayInput added in v0.0.6 

type EKSServiceAccountArrayInput interface {
	pulumi.Input

	ToEKSServiceAccountArrayOutput() EKSServiceAccountArrayOutput
	ToEKSServiceAccountArrayOutputWithContext(context.Context) EKSServiceAccountArrayOutput
}

EKSServiceAccountArrayInput is an input type that accepts EKSServiceAccountArray and EKSServiceAccountArrayOutput values. You can construct a concrete instance of `EKSServiceAccountArrayInput` via: 

EKSServiceAccountArray{ EKSServiceAccountArgs{...} }

type EKSServiceAccountArrayOutput added in v0.0.6 

type EKSServiceAccountArrayOutput struct{ *pulumi.OutputState }

func (EKSServiceAccountArrayOutput) ElementType added in v0.0.6 

func (EKSServiceAccountArrayOutput) ElementType() reflect.Type

func (EKSServiceAccountArrayOutput) Index added in v0.0.6 

func (o EKSServiceAccountArrayOutput) Index(i pulumi.IntInput) EKSServiceAccountOutput

func (EKSServiceAccountArrayOutput) ToEKSServiceAccountArrayOutput added in v0.0.6 

func (o EKSServiceAccountArrayOutput) ToEKSServiceAccountArrayOutput() EKSServiceAccountArrayOutput

func (EKSServiceAccountArrayOutput) ToEKSServiceAccountArrayOutputWithContext added in v0.0.6 

func (o EKSServiceAccountArrayOutput) ToEKSServiceAccountArrayOutputWithContext(ctx context.Context) EKSServiceAccountArrayOutput

type EKSServiceAccountInput added in v0.0.6 

type EKSServiceAccountInput interface {
	pulumi.Input

	ToEKSServiceAccountOutput() EKSServiceAccountOutput
	ToEKSServiceAccountOutputWithContext(context.Context) EKSServiceAccountOutput
}

EKSServiceAccountInput is an input type that accepts EKSServiceAccountArgs and EKSServiceAccountOutput values. You can construct a concrete instance of `EKSServiceAccountInput` via: 

EKSServiceAccountArgs{...}

type EKSServiceAccountOutput added in v0.0.6 

type EKSServiceAccountOutput struct{ *pulumi.OutputState }

EKS cluster and k8s ServiceAccount pairs. Each EKS cluster can have multiple k8s ServiceAccount.

func (EKSServiceAccountOutput) ElementType added in v0.0.6 

func (EKSServiceAccountOutput) ElementType() reflect.Type

func (EKSServiceAccountOutput) Name added in v0.0.6 

func (o EKSServiceAccountOutput) Name() pulumi.StringPtrOutput

Name of the EKS cluster.

func (EKSServiceAccountOutput) ServiceAccounts added in v0.0.6 

func (o EKSServiceAccountOutput) ServiceAccounts() pulumi.StringArrayOutput

Service accounts to pair with the cluster.

func (EKSServiceAccountOutput) ToEKSServiceAccountOutput added in v0.0.6 

func (o EKSServiceAccountOutput) ToEKSServiceAccountOutput() EKSServiceAccountOutput

func (EKSServiceAccountOutput) ToEKSServiceAccountOutputWithContext added in v0.0.6 

func (o EKSServiceAccountOutput) ToEKSServiceAccountOutputWithContext(ctx context.Context) EKSServiceAccountOutput

type EKSServiceAccountRole 

type EKSServiceAccountRole struct {
	// IAM Role description.
	Description *string `pulumi:"description"`
	// IAM role name.
	Name *string `pulumi:"name"`
	// IAM role name prefix.
	NamePrefix *string `pulumi:"namePrefix"`
	// Path of admin IAM role.
	Path *string `pulumi:"path"`
	// Permissions boundary ARN to use for the role.
	PermissionsBoundaryArn *string `pulumi:"permissionsBoundaryArn"`
	// List of policy ARNs to use for the role.
	PolicyArns []string `pulumi:"policyArns"`
}

type EKSServiceAccountRoleArgs 

type EKSServiceAccountRoleArgs struct {
	// IAM Role description.
	Description pulumi.StringPtrInput `pulumi:"description"`
	// IAM role name.
	Name pulumi.StringPtrInput `pulumi:"name"`
	// IAM role name prefix.
	NamePrefix pulumi.StringPtrInput `pulumi:"namePrefix"`
	// Path of admin IAM role.
	Path pulumi.StringPtrInput `pulumi:"path"`
	// Permissions boundary ARN to use for the role.
	PermissionsBoundaryArn pulumi.StringPtrInput `pulumi:"permissionsBoundaryArn"`
	// List of policy ARNs to use for the role.
	PolicyArns pulumi.StringArrayInput `pulumi:"policyArns"`
}

func (EKSServiceAccountRoleArgs) ElementType 

func (EKSServiceAccountRoleArgs) ElementType() reflect.Type

func (EKSServiceAccountRoleArgs) ToEKSServiceAccountRoleOutput 

func (i EKSServiceAccountRoleArgs) ToEKSServiceAccountRoleOutput() EKSServiceAccountRoleOutput

func (EKSServiceAccountRoleArgs) ToEKSServiceAccountRoleOutputWithContext 

func (i EKSServiceAccountRoleArgs) ToEKSServiceAccountRoleOutputWithContext(ctx context.Context) EKSServiceAccountRoleOutput

func (EKSServiceAccountRoleArgs) ToEKSServiceAccountRolePtrOutput 

func (i EKSServiceAccountRoleArgs) ToEKSServiceAccountRolePtrOutput() EKSServiceAccountRolePtrOutput

func (EKSServiceAccountRoleArgs) ToEKSServiceAccountRolePtrOutputWithContext 

func (i EKSServiceAccountRoleArgs) ToEKSServiceAccountRolePtrOutputWithContext(ctx context.Context) EKSServiceAccountRolePtrOutput

type EKSServiceAccountRoleInput 

type EKSServiceAccountRoleInput interface {
	pulumi.Input

	ToEKSServiceAccountRoleOutput() EKSServiceAccountRoleOutput
	ToEKSServiceAccountRoleOutputWithContext(context.Context) EKSServiceAccountRoleOutput
}

EKSServiceAccountRoleInput is an input type that accepts EKSServiceAccountRoleArgs and EKSServiceAccountRoleOutput values. You can construct a concrete instance of `EKSServiceAccountRoleInput` via: 

EKSServiceAccountRoleArgs{...}

type EKSServiceAccountRoleOutput 

type EKSServiceAccountRoleOutput struct{ *pulumi.OutputState }

func (EKSServiceAccountRoleOutput) Description 

func (o EKSServiceAccountRoleOutput) Description() pulumi.StringPtrOutput

IAM Role description.

func (EKSServiceAccountRoleOutput) ElementType 

func (EKSServiceAccountRoleOutput) ElementType() reflect.Type

func (EKSServiceAccountRoleOutput) Name 

func (o EKSServiceAccountRoleOutput) Name() pulumi.StringPtrOutput

IAM role name.

func (EKSServiceAccountRoleOutput) NamePrefix 

func (o EKSServiceAccountRoleOutput) NamePrefix() pulumi.StringPtrOutput

IAM role name prefix.

func (EKSServiceAccountRoleOutput) Path 

func (o EKSServiceAccountRoleOutput) Path() pulumi.StringPtrOutput

Path of admin IAM role.

func (EKSServiceAccountRoleOutput) PermissionsBoundaryArn 

func (o EKSServiceAccountRoleOutput) PermissionsBoundaryArn() pulumi.StringPtrOutput

Permissions boundary ARN to use for the role.

func (EKSServiceAccountRoleOutput) PolicyArns 

func (o EKSServiceAccountRoleOutput) PolicyArns() pulumi.StringArrayOutput

List of policy ARNs to use for the role.

func (EKSServiceAccountRoleOutput) ToEKSServiceAccountRoleOutput 

func (o EKSServiceAccountRoleOutput) ToEKSServiceAccountRoleOutput() EKSServiceAccountRoleOutput

func (EKSServiceAccountRoleOutput) ToEKSServiceAccountRoleOutputWithContext 

func (o EKSServiceAccountRoleOutput) ToEKSServiceAccountRoleOutputWithContext(ctx context.Context) EKSServiceAccountRoleOutput

func (EKSServiceAccountRoleOutput) ToEKSServiceAccountRolePtrOutput 

func (o EKSServiceAccountRoleOutput) ToEKSServiceAccountRolePtrOutput() EKSServiceAccountRolePtrOutput

func (EKSServiceAccountRoleOutput) ToEKSServiceAccountRolePtrOutputWithContext 

func (o EKSServiceAccountRoleOutput) ToEKSServiceAccountRolePtrOutputWithContext(ctx context.Context) EKSServiceAccountRolePtrOutput

type EKSServiceAccountRolePtrInput 

type EKSServiceAccountRolePtrInput interface {
	pulumi.Input

	ToEKSServiceAccountRolePtrOutput() EKSServiceAccountRolePtrOutput
	ToEKSServiceAccountRolePtrOutputWithContext(context.Context) EKSServiceAccountRolePtrOutput
}

EKSServiceAccountRolePtrInput is an input type that accepts EKSServiceAccountRoleArgs, EKSServiceAccountRolePtr and EKSServiceAccountRolePtrOutput values. You can construct a concrete instance of `EKSServiceAccountRolePtrInput` via: 

        EKSServiceAccountRoleArgs{...}

or:

        nil

func EKSServiceAccountRolePtr 

func EKSServiceAccountRolePtr(v *EKSServiceAccountRoleArgs) EKSServiceAccountRolePtrInput

type EKSServiceAccountRolePtrOutput 

type EKSServiceAccountRolePtrOutput struct{ *pulumi.OutputState }

func (EKSServiceAccountRolePtrOutput) Description 

func (o EKSServiceAccountRolePtrOutput) Description() pulumi.StringPtrOutput

IAM Role description.

func (EKSServiceAccountRolePtrOutput) Elem 

func (o EKSServiceAccountRolePtrOutput) Elem() EKSServiceAccountRoleOutput

func (EKSServiceAccountRolePtrOutput) ElementType 

func (EKSServiceAccountRolePtrOutput) ElementType() reflect.Type

func (EKSServiceAccountRolePtrOutput) Name 

func (o EKSServiceAccountRolePtrOutput) Name() pulumi.StringPtrOutput

IAM role name.

func (EKSServiceAccountRolePtrOutput) NamePrefix 

func (o EKSServiceAccountRolePtrOutput) NamePrefix() pulumi.StringPtrOutput

IAM role name prefix.

func (EKSServiceAccountRolePtrOutput) Path 

func (o EKSServiceAccountRolePtrOutput) Path() pulumi.StringPtrOutput

Path of admin IAM role.

func (EKSServiceAccountRolePtrOutput) PermissionsBoundaryArn 

func (o EKSServiceAccountRolePtrOutput) PermissionsBoundaryArn() pulumi.StringPtrOutput

Permissions boundary ARN to use for the role.

func (EKSServiceAccountRolePtrOutput) PolicyArns 

func (o EKSServiceAccountRolePtrOutput) PolicyArns() pulumi.StringArrayOutput

List of policy ARNs to use for the role.

func (EKSServiceAccountRolePtrOutput) ToEKSServiceAccountRolePtrOutput 

func (o EKSServiceAccountRolePtrOutput) ToEKSServiceAccountRolePtrOutput() EKSServiceAccountRolePtrOutput

func (EKSServiceAccountRolePtrOutput) ToEKSServiceAccountRolePtrOutputWithContext 

func (o EKSServiceAccountRolePtrOutput) ToEKSServiceAccountRolePtrOutputWithContext(ctx context.Context) EKSServiceAccountRolePtrOutput

type EKSVPNCNIPolicy 

type EKSVPNCNIPolicy struct {
	// Determines whether to attach the VPC CNI IAM policy to the role.
	Attach bool `pulumi:"attach"`
	// Determines whether to enable IPv4 permissions for VPC CNI policy.
	EnableIpv4 *bool `pulumi:"enableIpv4"`
	// Determines whether to enable IPv6 permissions for VPC CNI policy.
	EnableIpv6 *bool `pulumi:"enableIpv6"`
}

The VPC CNI IAM policy to the role.

type EKSVPNCNIPolicyArgs 

type EKSVPNCNIPolicyArgs struct {
	// Determines whether to attach the VPC CNI IAM policy to the role.
	Attach pulumi.BoolInput `pulumi:"attach"`
	// Determines whether to enable IPv4 permissions for VPC CNI policy.
	EnableIpv4 pulumi.BoolPtrInput `pulumi:"enableIpv4"`
	// Determines whether to enable IPv6 permissions for VPC CNI policy.
	EnableIpv6 pulumi.BoolPtrInput `pulumi:"enableIpv6"`
}

The VPC CNI IAM policy to the role.

func (EKSVPNCNIPolicyArgs) ElementType 

func (EKSVPNCNIPolicyArgs) ElementType() reflect.Type

func (EKSVPNCNIPolicyArgs) ToEKSVPNCNIPolicyOutput 

func (i EKSVPNCNIPolicyArgs) ToEKSVPNCNIPolicyOutput() EKSVPNCNIPolicyOutput

func (EKSVPNCNIPolicyArgs) ToEKSVPNCNIPolicyOutputWithContext 

func (i EKSVPNCNIPolicyArgs) ToEKSVPNCNIPolicyOutputWithContext(ctx context.Context) EKSVPNCNIPolicyOutput

func (EKSVPNCNIPolicyArgs) ToEKSVPNCNIPolicyPtrOutput 

func (i EKSVPNCNIPolicyArgs) ToEKSVPNCNIPolicyPtrOutput() EKSVPNCNIPolicyPtrOutput

func (EKSVPNCNIPolicyArgs) ToEKSVPNCNIPolicyPtrOutputWithContext 

func (i EKSVPNCNIPolicyArgs) ToEKSVPNCNIPolicyPtrOutputWithContext(ctx context.Context) EKSVPNCNIPolicyPtrOutput

type EKSVPNCNIPolicyInput 

type EKSVPNCNIPolicyInput interface {
	pulumi.Input

	ToEKSVPNCNIPolicyOutput() EKSVPNCNIPolicyOutput
	ToEKSVPNCNIPolicyOutputWithContext(context.Context) EKSVPNCNIPolicyOutput
}

EKSVPNCNIPolicyInput is an input type that accepts EKSVPNCNIPolicyArgs and EKSVPNCNIPolicyOutput values. You can construct a concrete instance of `EKSVPNCNIPolicyInput` via: 

EKSVPNCNIPolicyArgs{...}

type EKSVPNCNIPolicyOutput 

type EKSVPNCNIPolicyOutput struct{ *pulumi.OutputState }

The VPC CNI IAM policy to the role.

func (EKSVPNCNIPolicyOutput) Attach 

func (o EKSVPNCNIPolicyOutput) Attach() pulumi.BoolOutput

Determines whether to attach the VPC CNI IAM policy to the role.

func (EKSVPNCNIPolicyOutput) ElementType 

func (EKSVPNCNIPolicyOutput) ElementType() reflect.Type

func (EKSVPNCNIPolicyOutput) EnableIpv4 

func (o EKSVPNCNIPolicyOutput) EnableIpv4() pulumi.BoolPtrOutput

Determines whether to enable IPv4 permissions for VPC CNI policy.

func (EKSVPNCNIPolicyOutput) EnableIpv6 

func (o EKSVPNCNIPolicyOutput) EnableIpv6() pulumi.BoolPtrOutput

Determines whether to enable IPv6 permissions for VPC CNI policy.

func (EKSVPNCNIPolicyOutput) ToEKSVPNCNIPolicyOutput 

func (o EKSVPNCNIPolicyOutput) ToEKSVPNCNIPolicyOutput() EKSVPNCNIPolicyOutput

func (EKSVPNCNIPolicyOutput) ToEKSVPNCNIPolicyOutputWithContext 

func (o EKSVPNCNIPolicyOutput) ToEKSVPNCNIPolicyOutputWithContext(ctx context.Context) EKSVPNCNIPolicyOutput

func (EKSVPNCNIPolicyOutput) ToEKSVPNCNIPolicyPtrOutput 

func (o EKSVPNCNIPolicyOutput) ToEKSVPNCNIPolicyPtrOutput() EKSVPNCNIPolicyPtrOutput

func (EKSVPNCNIPolicyOutput) ToEKSVPNCNIPolicyPtrOutputWithContext 

func (o EKSVPNCNIPolicyOutput) ToEKSVPNCNIPolicyPtrOutputWithContext(ctx context.Context) EKSVPNCNIPolicyPtrOutput

type EKSVPNCNIPolicyPtrInput 

type EKSVPNCNIPolicyPtrInput interface {
	pulumi.Input

	ToEKSVPNCNIPolicyPtrOutput() EKSVPNCNIPolicyPtrOutput
	ToEKSVPNCNIPolicyPtrOutputWithContext(context.Context) EKSVPNCNIPolicyPtrOutput
}

EKSVPNCNIPolicyPtrInput is an input type that accepts EKSVPNCNIPolicyArgs, EKSVPNCNIPolicyPtr and EKSVPNCNIPolicyPtrOutput values. You can construct a concrete instance of `EKSVPNCNIPolicyPtrInput` via: 

        EKSVPNCNIPolicyArgs{...}

or:

        nil

func EKSVPNCNIPolicyPtr 

func EKSVPNCNIPolicyPtr(v *EKSVPNCNIPolicyArgs) EKSVPNCNIPolicyPtrInput

type EKSVPNCNIPolicyPtrOutput 

type EKSVPNCNIPolicyPtrOutput struct{ *pulumi.OutputState }

func (EKSVPNCNIPolicyPtrOutput) Attach 

func (o EKSVPNCNIPolicyPtrOutput) Attach() pulumi.BoolPtrOutput

Determines whether to attach the VPC CNI IAM policy to the role.

func (EKSVPNCNIPolicyPtrOutput) Elem 

func (o EKSVPNCNIPolicyPtrOutput) Elem() EKSVPNCNIPolicyOutput

func (EKSVPNCNIPolicyPtrOutput) ElementType 

func (EKSVPNCNIPolicyPtrOutput) ElementType() reflect.Type

func (EKSVPNCNIPolicyPtrOutput) EnableIpv4 

func (o EKSVPNCNIPolicyPtrOutput) EnableIpv4() pulumi.BoolPtrOutput

Determines whether to enable IPv4 permissions for VPC CNI policy.

func (EKSVPNCNIPolicyPtrOutput) EnableIpv6 

func (o EKSVPNCNIPolicyPtrOutput) EnableIpv6() pulumi.BoolPtrOutput

Determines whether to enable IPv6 permissions for VPC CNI policy.

func (EKSVPNCNIPolicyPtrOutput) ToEKSVPNCNIPolicyPtrOutput 

func (o EKSVPNCNIPolicyPtrOutput) ToEKSVPNCNIPolicyPtrOutput() EKSVPNCNIPolicyPtrOutput

func (EKSVPNCNIPolicyPtrOutput) ToEKSVPNCNIPolicyPtrOutputWithContext 

func (o EKSVPNCNIPolicyPtrOutput) ToEKSVPNCNIPolicyPtrOutputWithContext(ctx context.Context) EKSVPNCNIPolicyPtrOutput

type EKSVeleroPolicy 

type EKSVeleroPolicy struct {
	// Determines whether to attach the Velero IAM policy to the role.
	Attach bool `pulumi:"attach"`
	// List of S3 Bucket ARNs that Velero needs access to in order to backup and restore cluster resources.
	// If not provided, a default ARN of "*" will be provided.
	S3BucketArns []string `pulumi:"s3BucketArns"`
}

The Velero IAM policy to the role.

type EKSVeleroPolicyArgs 

type EKSVeleroPolicyArgs struct {
	// Determines whether to attach the Velero IAM policy to the role.
	Attach pulumi.BoolInput `pulumi:"attach"`
	// List of S3 Bucket ARNs that Velero needs access to in order to backup and restore cluster resources.
	// If not provided, a default ARN of "*" will be provided.
	S3BucketArns pulumi.StringArrayInput `pulumi:"s3BucketArns"`
}

The Velero IAM policy to the role.

func (EKSVeleroPolicyArgs) ElementType 

func (EKSVeleroPolicyArgs) ElementType() reflect.Type

func (EKSVeleroPolicyArgs) ToEKSVeleroPolicyOutput 

func (i EKSVeleroPolicyArgs) ToEKSVeleroPolicyOutput() EKSVeleroPolicyOutput

func (EKSVeleroPolicyArgs) ToEKSVeleroPolicyOutputWithContext 

func (i EKSVeleroPolicyArgs) ToEKSVeleroPolicyOutputWithContext(ctx context.Context) EKSVeleroPolicyOutput

func (EKSVeleroPolicyArgs) ToEKSVeleroPolicyPtrOutput 

func (i EKSVeleroPolicyArgs) ToEKSVeleroPolicyPtrOutput() EKSVeleroPolicyPtrOutput

func (EKSVeleroPolicyArgs) ToEKSVeleroPolicyPtrOutputWithContext 

func (i EKSVeleroPolicyArgs) ToEKSVeleroPolicyPtrOutputWithContext(ctx context.Context) EKSVeleroPolicyPtrOutput

type EKSVeleroPolicyInput 

type EKSVeleroPolicyInput interface {
	pulumi.Input

	ToEKSVeleroPolicyOutput() EKSVeleroPolicyOutput
	ToEKSVeleroPolicyOutputWithContext(context.Context) EKSVeleroPolicyOutput
}

EKSVeleroPolicyInput is an input type that accepts EKSVeleroPolicyArgs and EKSVeleroPolicyOutput values. You can construct a concrete instance of `EKSVeleroPolicyInput` via: 

EKSVeleroPolicyArgs{...}

type EKSVeleroPolicyOutput 

type EKSVeleroPolicyOutput struct{ *pulumi.OutputState }

The Velero IAM policy to the role.

func (EKSVeleroPolicyOutput) Attach 

func (o EKSVeleroPolicyOutput) Attach() pulumi.BoolOutput

Determines whether to attach the Velero IAM policy to the role.

func (EKSVeleroPolicyOutput) ElementType 

func (EKSVeleroPolicyOutput) ElementType() reflect.Type

func (EKSVeleroPolicyOutput) S3BucketArns 

func (o EKSVeleroPolicyOutput) S3BucketArns() pulumi.StringArrayOutput

List of S3 Bucket ARNs that Velero needs access to in order to backup and restore cluster resources. If not provided, a default ARN of "*" will be provided.

func (EKSVeleroPolicyOutput) ToEKSVeleroPolicyOutput 

func (o EKSVeleroPolicyOutput) ToEKSVeleroPolicyOutput() EKSVeleroPolicyOutput

func (EKSVeleroPolicyOutput) ToEKSVeleroPolicyOutputWithContext 

func (o EKSVeleroPolicyOutput) ToEKSVeleroPolicyOutputWithContext(ctx context.Context) EKSVeleroPolicyOutput

func (EKSVeleroPolicyOutput) ToEKSVeleroPolicyPtrOutput 

func (o EKSVeleroPolicyOutput) ToEKSVeleroPolicyPtrOutput() EKSVeleroPolicyPtrOutput

func (EKSVeleroPolicyOutput) ToEKSVeleroPolicyPtrOutputWithContext 

func (o EKSVeleroPolicyOutput) ToEKSVeleroPolicyPtrOutputWithContext(ctx context.Context) EKSVeleroPolicyPtrOutput

type EKSVeleroPolicyPtrInput 

type EKSVeleroPolicyPtrInput interface {
	pulumi.Input

	ToEKSVeleroPolicyPtrOutput() EKSVeleroPolicyPtrOutput
	ToEKSVeleroPolicyPtrOutputWithContext(context.Context) EKSVeleroPolicyPtrOutput
}

EKSVeleroPolicyPtrInput is an input type that accepts EKSVeleroPolicyArgs, EKSVeleroPolicyPtr and EKSVeleroPolicyPtrOutput values. You can construct a concrete instance of `EKSVeleroPolicyPtrInput` via: 

        EKSVeleroPolicyArgs{...}

or:

        nil

func EKSVeleroPolicyPtr 

func EKSVeleroPolicyPtr(v *EKSVeleroPolicyArgs) EKSVeleroPolicyPtrInput

type EKSVeleroPolicyPtrOutput 

type EKSVeleroPolicyPtrOutput struct{ *pulumi.OutputState }

func (EKSVeleroPolicyPtrOutput) Attach 

func (o EKSVeleroPolicyPtrOutput) Attach() pulumi.BoolPtrOutput

Determines whether to attach the Velero IAM policy to the role.

func (EKSVeleroPolicyPtrOutput) Elem 

func (o EKSVeleroPolicyPtrOutput) Elem() EKSVeleroPolicyOutput

func (EKSVeleroPolicyPtrOutput) ElementType 

func (EKSVeleroPolicyPtrOutput) ElementType() reflect.Type

func (EKSVeleroPolicyPtrOutput) S3BucketArns 

func (o EKSVeleroPolicyPtrOutput) S3BucketArns() pulumi.StringArrayOutput

List of S3 Bucket ARNs that Velero needs access to in order to backup and restore cluster resources. If not provided, a default ARN of "*" will be provided.

func (EKSVeleroPolicyPtrOutput) ToEKSVeleroPolicyPtrOutput 

func (o EKSVeleroPolicyPtrOutput) ToEKSVeleroPolicyPtrOutput() EKSVeleroPolicyPtrOutput

func (EKSVeleroPolicyPtrOutput) ToEKSVeleroPolicyPtrOutputWithContext 

func (o EKSVeleroPolicyPtrOutput) ToEKSVeleroPolicyPtrOutputWithContext(ctx context.Context) EKSVeleroPolicyPtrOutput

type FSxLustreCSIPolicy 

type FSxLustreCSIPolicy struct {
	// Determines whether to attach the FSx for Lustre CSI Driver IAM policy to the role.
	Attach bool `pulumi:"attach"`
	// Service role ARNs to allow FSx for Lustre CSI create and manage FSX for Lustre service linked roles. If not provided,
	// the default ARN "arn:aws:iam::*:role/aws-service-role/s3.data-source.lustre.fsx.amazonaws.com/*" will be applied.
	ServiceRoleArns []string `pulumi:"serviceRoleArns"`
}

The FSx for Lustre CSI Driver IAM policy to the role.

type FSxLustreCSIPolicyArgs 

type FSxLustreCSIPolicyArgs struct {
	// Determines whether to attach the FSx for Lustre CSI Driver IAM policy to the role.
	Attach pulumi.BoolInput `pulumi:"attach"`
	// Service role ARNs to allow FSx for Lustre CSI create and manage FSX for Lustre service linked roles. If not provided,
	// the default ARN "arn:aws:iam::*:role/aws-service-role/s3.data-source.lustre.fsx.amazonaws.com/*" will be applied.
	ServiceRoleArns pulumi.StringArrayInput `pulumi:"serviceRoleArns"`
}

The FSx for Lustre CSI Driver IAM policy to the role.

func (FSxLustreCSIPolicyArgs) ElementType 

func (FSxLustreCSIPolicyArgs) ElementType() reflect.Type

func (FSxLustreCSIPolicyArgs) ToFSxLustreCSIPolicyOutput 

func (i FSxLustreCSIPolicyArgs) ToFSxLustreCSIPolicyOutput() FSxLustreCSIPolicyOutput

func (FSxLustreCSIPolicyArgs) ToFSxLustreCSIPolicyOutputWithContext 

func (i FSxLustreCSIPolicyArgs) ToFSxLustreCSIPolicyOutputWithContext(ctx context.Context) FSxLustreCSIPolicyOutput

func (FSxLustreCSIPolicyArgs) ToFSxLustreCSIPolicyPtrOutput 

func (i FSxLustreCSIPolicyArgs) ToFSxLustreCSIPolicyPtrOutput() FSxLustreCSIPolicyPtrOutput

func (FSxLustreCSIPolicyArgs) ToFSxLustreCSIPolicyPtrOutputWithContext 

func (i FSxLustreCSIPolicyArgs) ToFSxLustreCSIPolicyPtrOutputWithContext(ctx context.Context) FSxLustreCSIPolicyPtrOutput

type FSxLustreCSIPolicyInput 

type FSxLustreCSIPolicyInput interface {
	pulumi.Input

	ToFSxLustreCSIPolicyOutput() FSxLustreCSIPolicyOutput
	ToFSxLustreCSIPolicyOutputWithContext(context.Context) FSxLustreCSIPolicyOutput
}

FSxLustreCSIPolicyInput is an input type that accepts FSxLustreCSIPolicyArgs and FSxLustreCSIPolicyOutput values. You can construct a concrete instance of `FSxLustreCSIPolicyInput` via: 

FSxLustreCSIPolicyArgs{...}

type FSxLustreCSIPolicyOutput 

type FSxLustreCSIPolicyOutput struct{ *pulumi.OutputState }

The FSx for Lustre CSI Driver IAM policy to the role.

func (FSxLustreCSIPolicyOutput) Attach 

func (o FSxLustreCSIPolicyOutput) Attach() pulumi.BoolOutput

Determines whether to attach the FSx for Lustre CSI Driver IAM policy to the role.

func (FSxLustreCSIPolicyOutput) ElementType 

func (FSxLustreCSIPolicyOutput) ElementType() reflect.Type

func (FSxLustreCSIPolicyOutput) ServiceRoleArns 

func (o FSxLustreCSIPolicyOutput) ServiceRoleArns() pulumi.StringArrayOutput

Service role ARNs to allow FSx for Lustre CSI create and manage FSX for Lustre service linked roles. If not provided, the default ARN "arn:aws:iam::*:role/aws-service-role/s3.data-source.lustre.fsx.amazonaws.com/*" will be applied.

func (FSxLustreCSIPolicyOutput) ToFSxLustreCSIPolicyOutput 

func (o FSxLustreCSIPolicyOutput) ToFSxLustreCSIPolicyOutput() FSxLustreCSIPolicyOutput

func (FSxLustreCSIPolicyOutput) ToFSxLustreCSIPolicyOutputWithContext 

func (o FSxLustreCSIPolicyOutput) ToFSxLustreCSIPolicyOutputWithContext(ctx context.Context) FSxLustreCSIPolicyOutput

func (FSxLustreCSIPolicyOutput) ToFSxLustreCSIPolicyPtrOutput 

func (o FSxLustreCSIPolicyOutput) ToFSxLustreCSIPolicyPtrOutput() FSxLustreCSIPolicyPtrOutput

func (FSxLustreCSIPolicyOutput) ToFSxLustreCSIPolicyPtrOutputWithContext 

func (o FSxLustreCSIPolicyOutput) ToFSxLustreCSIPolicyPtrOutputWithContext(ctx context.Context) FSxLustreCSIPolicyPtrOutput

type FSxLustreCSIPolicyPtrInput 

type FSxLustreCSIPolicyPtrInput interface {
	pulumi.Input

	ToFSxLustreCSIPolicyPtrOutput() FSxLustreCSIPolicyPtrOutput
	ToFSxLustreCSIPolicyPtrOutputWithContext(context.Context) FSxLustreCSIPolicyPtrOutput
}

FSxLustreCSIPolicyPtrInput is an input type that accepts FSxLustreCSIPolicyArgs, FSxLustreCSIPolicyPtr and FSxLustreCSIPolicyPtrOutput values. You can construct a concrete instance of `FSxLustreCSIPolicyPtrInput` via: 

        FSxLustreCSIPolicyArgs{...}

or:

        nil

func FSxLustreCSIPolicyPtr 

func FSxLustreCSIPolicyPtr(v *FSxLustreCSIPolicyArgs) FSxLustreCSIPolicyPtrInput

type FSxLustreCSIPolicyPtrOutput 

type FSxLustreCSIPolicyPtrOutput struct{ *pulumi.OutputState }

func (FSxLustreCSIPolicyPtrOutput) Attach 

func (o FSxLustreCSIPolicyPtrOutput) Attach() pulumi.BoolPtrOutput

Determines whether to attach the FSx for Lustre CSI Driver IAM policy to the role.

func (FSxLustreCSIPolicyPtrOutput) Elem 

func (o FSxLustreCSIPolicyPtrOutput) Elem() FSxLustreCSIPolicyOutput

func (FSxLustreCSIPolicyPtrOutput) ElementType 

func (FSxLustreCSIPolicyPtrOutput) ElementType() reflect.Type

func (FSxLustreCSIPolicyPtrOutput) ServiceRoleArns 

func (o FSxLustreCSIPolicyPtrOutput) ServiceRoleArns() pulumi.StringArrayOutput

Service role ARNs to allow FSx for Lustre CSI create and manage FSX for Lustre service linked roles. If not provided, the default ARN "arn:aws:iam::*:role/aws-service-role/s3.data-source.lustre.fsx.amazonaws.com/*" will be applied.

func (FSxLustreCSIPolicyPtrOutput) ToFSxLustreCSIPolicyPtrOutput 

func (o FSxLustreCSIPolicyPtrOutput) ToFSxLustreCSIPolicyPtrOutput() FSxLustreCSIPolicyPtrOutput

func (FSxLustreCSIPolicyPtrOutput) ToFSxLustreCSIPolicyPtrOutputWithContext 

func (o FSxLustreCSIPolicyPtrOutput) ToFSxLustreCSIPolicyPtrOutputWithContext(ctx context.Context) FSxLustreCSIPolicyPtrOutput

type GroupWithAssumableRolesPolicy 

type GroupWithAssumableRolesPolicy struct {
	pulumi.ResourceState

	// List of IAM roles ARNs which can be assumed by the group
	AssumableRoles pulumi.StringArrayOutput `pulumi:"assumableRoles"`
	// IAM group arn.
	GroupArn pulumi.StringOutput `pulumi:"groupArn"`
	// IAM group name.
	GroupName pulumi.StringOutput `pulumi:"groupName"`
	// List of IAM users in IAM group
	GroupUsers pulumi.StringArrayOutput `pulumi:"groupUsers"`
	// Assume role policy ARN of IAM group
	PolicyArn pulumi.StringOutput `pulumi:"policyArn"`
}

This resource helps you create an IAM Group with Users who are allowed to assume specified IAM roles.

## Example Usage ## Group With Assumable Roles Policy

```go package main

import ( 

iam "github.com/pulumi/pulumi-aws-iam/sdk/go/aws-iam"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
    pulumi.Run(func(ctx *pulumi.Context) error {
        groupWithAssumableRolesPolicy, err := iam.NewGroupWithAssumableRolesPolicy(ctx, "group-with-assumable-roles-policy", &iam.GroupWithAssumableRolesPolicyArgs{
            Name:           pulumi.String("production-readonly"),
            AssumableRoles: pulumi.ToStringArray([]string{"arn:aws:iam::835367859855:role/readonly"}),
            GroupUsers:     pulumi.ToStringArray([]string{"user1", "user2"}),
        })
        if err != nil {
            return err
        }

        ctx.Export("groupWithAssumableRolesPolicy", groupWithAssumableRolesPolicy)

        return nil
    })
}

``` {{ /example }}

func NewGroupWithAssumableRolesPolicy 

func NewGroupWithAssumableRolesPolicy(ctx *pulumi.Context,
	name string, args *GroupWithAssumableRolesPolicyArgs, opts ...pulumi.ResourceOption) (*GroupWithAssumableRolesPolicy, error)

NewGroupWithAssumableRolesPolicy registers a new resource with the given unique name, arguments, and options.

func (*GroupWithAssumableRolesPolicy) ElementType 

func (*GroupWithAssumableRolesPolicy) ElementType() reflect.Type

func (*GroupWithAssumableRolesPolicy) ToGroupWithAssumableRolesPolicyOutput 

func (i *GroupWithAssumableRolesPolicy) ToGroupWithAssumableRolesPolicyOutput() GroupWithAssumableRolesPolicyOutput

func (*GroupWithAssumableRolesPolicy) ToGroupWithAssumableRolesPolicyOutputWithContext 

func (i *GroupWithAssumableRolesPolicy) ToGroupWithAssumableRolesPolicyOutputWithContext(ctx context.Context) GroupWithAssumableRolesPolicyOutput

type GroupWithAssumableRolesPolicyArgs 

type GroupWithAssumableRolesPolicyArgs struct {
	// List of IAM roles ARNs which can be assumed by the group
	AssumableRoles pulumi.StringArrayInput
	// List of IAM users to have in an IAM group which can assume the role
	GroupUsers pulumi.StringArrayInput
	// Name of IAM policy and IAM group.
	Name pulumi.StringInput
	// A map of tags to add.
	Tags pulumi.StringMapInput
}

The set of arguments for constructing a GroupWithAssumableRolesPolicy resource.

func (GroupWithAssumableRolesPolicyArgs) ElementType 

func (GroupWithAssumableRolesPolicyArgs) ElementType() reflect.Type

type GroupWithAssumableRolesPolicyArray 

type GroupWithAssumableRolesPolicyArray []GroupWithAssumableRolesPolicyInput

func (GroupWithAssumableRolesPolicyArray) ElementType 

func (GroupWithAssumableRolesPolicyArray) ElementType() reflect.Type

func (GroupWithAssumableRolesPolicyArray) ToGroupWithAssumableRolesPolicyArrayOutput 

func (i GroupWithAssumableRolesPolicyArray) ToGroupWithAssumableRolesPolicyArrayOutput() GroupWithAssumableRolesPolicyArrayOutput

func (GroupWithAssumableRolesPolicyArray) ToGroupWithAssumableRolesPolicyArrayOutputWithContext 

func (i GroupWithAssumableRolesPolicyArray) ToGroupWithAssumableRolesPolicyArrayOutputWithContext(ctx context.Context) GroupWithAssumableRolesPolicyArrayOutput

type GroupWithAssumableRolesPolicyArrayInput 

type GroupWithAssumableRolesPolicyArrayInput interface {
	pulumi.Input

	ToGroupWithAssumableRolesPolicyArrayOutput() GroupWithAssumableRolesPolicyArrayOutput
	ToGroupWithAssumableRolesPolicyArrayOutputWithContext(context.Context) GroupWithAssumableRolesPolicyArrayOutput
}

GroupWithAssumableRolesPolicyArrayInput is an input type that accepts GroupWithAssumableRolesPolicyArray and GroupWithAssumableRolesPolicyArrayOutput values. You can construct a concrete instance of `GroupWithAssumableRolesPolicyArrayInput` via: 

GroupWithAssumableRolesPolicyArray{ GroupWithAssumableRolesPolicyArgs{...} }

type GroupWithAssumableRolesPolicyArrayOutput 

type GroupWithAssumableRolesPolicyArrayOutput struct{ *pulumi.OutputState }

func (GroupWithAssumableRolesPolicyArrayOutput) ElementType 

func (GroupWithAssumableRolesPolicyArrayOutput) ElementType() reflect.Type

func (GroupWithAssumableRolesPolicyArrayOutput) Index 

func (o GroupWithAssumableRolesPolicyArrayOutput) Index(i pulumi.IntInput) GroupWithAssumableRolesPolicyOutput

func (GroupWithAssumableRolesPolicyArrayOutput) ToGroupWithAssumableRolesPolicyArrayOutput 

func (o GroupWithAssumableRolesPolicyArrayOutput) ToGroupWithAssumableRolesPolicyArrayOutput() GroupWithAssumableRolesPolicyArrayOutput

func (GroupWithAssumableRolesPolicyArrayOutput) ToGroupWithAssumableRolesPolicyArrayOutputWithContext 

func (o GroupWithAssumableRolesPolicyArrayOutput) ToGroupWithAssumableRolesPolicyArrayOutputWithContext(ctx context.Context) GroupWithAssumableRolesPolicyArrayOutput

type GroupWithAssumableRolesPolicyInput 

type GroupWithAssumableRolesPolicyInput interface {
	pulumi.Input

	ToGroupWithAssumableRolesPolicyOutput() GroupWithAssumableRolesPolicyOutput
	ToGroupWithAssumableRolesPolicyOutputWithContext(ctx context.Context) GroupWithAssumableRolesPolicyOutput
}

type GroupWithAssumableRolesPolicyMap 

type GroupWithAssumableRolesPolicyMap map[string]GroupWithAssumableRolesPolicyInput

func (GroupWithAssumableRolesPolicyMap) ElementType 

func (GroupWithAssumableRolesPolicyMap) ElementType() reflect.Type

func (GroupWithAssumableRolesPolicyMap) ToGroupWithAssumableRolesPolicyMapOutput 

func (i GroupWithAssumableRolesPolicyMap) ToGroupWithAssumableRolesPolicyMapOutput() GroupWithAssumableRolesPolicyMapOutput

func (GroupWithAssumableRolesPolicyMap) ToGroupWithAssumableRolesPolicyMapOutputWithContext 

func (i GroupWithAssumableRolesPolicyMap) ToGroupWithAssumableRolesPolicyMapOutputWithContext(ctx context.Context) GroupWithAssumableRolesPolicyMapOutput

type GroupWithAssumableRolesPolicyMapInput 

type GroupWithAssumableRolesPolicyMapInput interface {
	pulumi.Input

	ToGroupWithAssumableRolesPolicyMapOutput() GroupWithAssumableRolesPolicyMapOutput
	ToGroupWithAssumableRolesPolicyMapOutputWithContext(context.Context) GroupWithAssumableRolesPolicyMapOutput
}

GroupWithAssumableRolesPolicyMapInput is an input type that accepts GroupWithAssumableRolesPolicyMap and GroupWithAssumableRolesPolicyMapOutput values. You can construct a concrete instance of `GroupWithAssumableRolesPolicyMapInput` via: 

GroupWithAssumableRolesPolicyMap{ "key": GroupWithAssumableRolesPolicyArgs{...} }

type GroupWithAssumableRolesPolicyMapOutput 

type GroupWithAssumableRolesPolicyMapOutput struct{ *pulumi.OutputState }

func (GroupWithAssumableRolesPolicyMapOutput) ElementType 

func (GroupWithAssumableRolesPolicyMapOutput) ElementType() reflect.Type

func (GroupWithAssumableRolesPolicyMapOutput) MapIndex 

func (o GroupWithAssumableRolesPolicyMapOutput) MapIndex(k pulumi.StringInput) GroupWithAssumableRolesPolicyOutput

func (GroupWithAssumableRolesPolicyMapOutput) ToGroupWithAssumableRolesPolicyMapOutput 

func (o GroupWithAssumableRolesPolicyMapOutput) ToGroupWithAssumableRolesPolicyMapOutput() GroupWithAssumableRolesPolicyMapOutput

func (GroupWithAssumableRolesPolicyMapOutput) ToGroupWithAssumableRolesPolicyMapOutputWithContext 

func (o GroupWithAssumableRolesPolicyMapOutput) ToGroupWithAssumableRolesPolicyMapOutputWithContext(ctx context.Context) GroupWithAssumableRolesPolicyMapOutput

type GroupWithAssumableRolesPolicyOutput 

type GroupWithAssumableRolesPolicyOutput struct{ *pulumi.OutputState }

func (GroupWithAssumableRolesPolicyOutput) AssumableRoles 

func (o GroupWithAssumableRolesPolicyOutput) AssumableRoles() pulumi.StringArrayOutput

List of IAM roles ARNs which can be assumed by the group

func (GroupWithAssumableRolesPolicyOutput) ElementType 

func (GroupWithAssumableRolesPolicyOutput) ElementType() reflect.Type

func (GroupWithAssumableRolesPolicyOutput) GroupArn 

func (o GroupWithAssumableRolesPolicyOutput) GroupArn() pulumi.StringOutput

IAM group arn.

func (GroupWithAssumableRolesPolicyOutput) GroupName 

func (o GroupWithAssumableRolesPolicyOutput) GroupName() pulumi.StringOutput

IAM group name.

func (GroupWithAssumableRolesPolicyOutput) GroupUsers 

func (o GroupWithAssumableRolesPolicyOutput) GroupUsers() pulumi.StringArrayOutput

List of IAM users in IAM group

func (GroupWithAssumableRolesPolicyOutput) PolicyArn 

func (o GroupWithAssumableRolesPolicyOutput) PolicyArn() pulumi.StringOutput

Assume role policy ARN of IAM group

func (GroupWithAssumableRolesPolicyOutput) ToGroupWithAssumableRolesPolicyOutput 

func (o GroupWithAssumableRolesPolicyOutput) ToGroupWithAssumableRolesPolicyOutput() GroupWithAssumableRolesPolicyOutput

func (GroupWithAssumableRolesPolicyOutput) ToGroupWithAssumableRolesPolicyOutputWithContext 

func (o GroupWithAssumableRolesPolicyOutput) ToGroupWithAssumableRolesPolicyOutputWithContext(ctx context.Context) GroupWithAssumableRolesPolicyOutput

type GroupWithPolicies 

type GroupWithPolicies struct {
	pulumi.ResourceState

	// IAM AWS account id.
	AwsAccountId pulumi.StringOutput `pulumi:"awsAccountId"`
	// IAM group arn.
	GroupArn pulumi.StringOutput `pulumi:"groupArn"`
	// IAM group name.
	GroupName pulumi.StringOutput `pulumi:"groupName"`
	// List of IAM users in IAM group
	GroupUsers pulumi.StringArrayOutput `pulumi:"groupUsers"`
}

This resources allows you to create an IAM group with specified IAM policies, and then add specified users into your created group.

## Example Usage ## Group With Policies

```go package main

import ( 

iam "github.com/pulumi/pulumi-aws-iam/sdk/go/aws-iam"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
    pulumi.Run(func(ctx *pulumi.Context) error {
        groupWithPolicies, err := iam.NewGroupWithPolicies(ctx, "group-with-policies", &iam.GroupWithPoliciesArgs{
            Name:                          pulumi.String("superadmins"),
            GroupUsers:                    pulumi.ToStringArray([]string{"user1", "user2"}),
            AttachIamSelfManagementPolicy: pulumi.BoolPtr(true),
            CustomGroupPolicyArns:         pulumi.ToStringArray([]string{"arn:aws:iam::aws:policy/AdministratorAccess"}),
            CustomGroupPolicies: pulumi.ToStringMapArray([]map[string]string{
                {
                    "name":   "AllowS3Listing",
                    "policy": "{}",
                },
            }),
        })
        if err != nil {
            return err
        }

        ctx.Export("groupWithPolicies", groupWithPolicies)

        return nil
    })
}

``` {{ /example }}

func NewGroupWithPolicies 

func NewGroupWithPolicies(ctx *pulumi.Context,
	name string, args *GroupWithPoliciesArgs, opts ...pulumi.ResourceOption) (*GroupWithPolicies, error)

NewGroupWithPolicies registers a new resource with the given unique name, arguments, and options.

func (*GroupWithPolicies) ElementType 

func (*GroupWithPolicies) ElementType() reflect.Type

func (*GroupWithPolicies) ToGroupWithPoliciesOutput 

func (i *GroupWithPolicies) ToGroupWithPoliciesOutput() GroupWithPoliciesOutput

func (*GroupWithPolicies) ToGroupWithPoliciesOutputWithContext 

func (i *GroupWithPolicies) ToGroupWithPoliciesOutputWithContext(ctx context.Context) GroupWithPoliciesOutput

type GroupWithPoliciesArgs 

type GroupWithPoliciesArgs struct {
	// Whether to attach IAM policy which allows IAM users to manage their credentials and MFA.
	AttachIamSelfManagementPolicy pulumi.BoolPtrInput
	// AWS account id to use inside IAM policies. If empty, current AWS account ID will be used.
	AwsAccountId pulumi.StringPtrInput
	// List of maps of inline IAM policies to attach to IAM group. Should have `name` and `policy` keys in each element.
	CustomGroupPolicies pulumi.StringMapArrayInput
	// List of IAM policies ARNs to attach to IAM group.
	CustomGroupPolicyArns pulumi.StringArrayInput
	// List of IAM users to have in an IAM group which can assume the role.
	GroupUsers pulumi.StringArrayInput
	// Name prefix for IAM policy to create with IAM self-management permissions.
	IamSelfManagementPolicyNamePrefix pulumi.StringPtrInput
	// Name of IAM group.
	Name pulumi.StringInput
	// A map of tags to add.
	Tags pulumi.StringMapInput
}

The set of arguments for constructing a GroupWithPolicies resource.

func (GroupWithPoliciesArgs) ElementType 

func (GroupWithPoliciesArgs) ElementType() reflect.Type

type GroupWithPoliciesArray 

type GroupWithPoliciesArray []GroupWithPoliciesInput

func (GroupWithPoliciesArray) ElementType 

func (GroupWithPoliciesArray) ElementType() reflect.Type

func (GroupWithPoliciesArray) ToGroupWithPoliciesArrayOutput 

func (i GroupWithPoliciesArray) ToGroupWithPoliciesArrayOutput() GroupWithPoliciesArrayOutput

func (GroupWithPoliciesArray) ToGroupWithPoliciesArrayOutputWithContext 

func (i GroupWithPoliciesArray) ToGroupWithPoliciesArrayOutputWithContext(ctx context.Context) GroupWithPoliciesArrayOutput

type GroupWithPoliciesArrayInput 

type GroupWithPoliciesArrayInput interface {
	pulumi.Input

	ToGroupWithPoliciesArrayOutput() GroupWithPoliciesArrayOutput
	ToGroupWithPoliciesArrayOutputWithContext(context.Context) GroupWithPoliciesArrayOutput
}

GroupWithPoliciesArrayInput is an input type that accepts GroupWithPoliciesArray and GroupWithPoliciesArrayOutput values. You can construct a concrete instance of `GroupWithPoliciesArrayInput` via: 

GroupWithPoliciesArray{ GroupWithPoliciesArgs{...} }

type GroupWithPoliciesArrayOutput 

type GroupWithPoliciesArrayOutput struct{ *pulumi.OutputState }

func (GroupWithPoliciesArrayOutput) ElementType 

func (GroupWithPoliciesArrayOutput) ElementType() reflect.Type

func (GroupWithPoliciesArrayOutput) Index 

func (o GroupWithPoliciesArrayOutput) Index(i pulumi.IntInput) GroupWithPoliciesOutput

func (GroupWithPoliciesArrayOutput) ToGroupWithPoliciesArrayOutput 

func (o GroupWithPoliciesArrayOutput) ToGroupWithPoliciesArrayOutput() GroupWithPoliciesArrayOutput

func (GroupWithPoliciesArrayOutput) ToGroupWithPoliciesArrayOutputWithContext 

func (o GroupWithPoliciesArrayOutput) ToGroupWithPoliciesArrayOutputWithContext(ctx context.Context) GroupWithPoliciesArrayOutput

type GroupWithPoliciesInput 

type GroupWithPoliciesInput interface {
	pulumi.Input

	ToGroupWithPoliciesOutput() GroupWithPoliciesOutput
	ToGroupWithPoliciesOutputWithContext(ctx context.Context) GroupWithPoliciesOutput
}

type GroupWithPoliciesMap 

type GroupWithPoliciesMap map[string]GroupWithPoliciesInput

func (GroupWithPoliciesMap) ElementType 

func (GroupWithPoliciesMap) ElementType() reflect.Type

func (GroupWithPoliciesMap) ToGroupWithPoliciesMapOutput 

func (i GroupWithPoliciesMap) ToGroupWithPoliciesMapOutput() GroupWithPoliciesMapOutput

func (GroupWithPoliciesMap) ToGroupWithPoliciesMapOutputWithContext 

func (i GroupWithPoliciesMap) ToGroupWithPoliciesMapOutputWithContext(ctx context.Context) GroupWithPoliciesMapOutput

type GroupWithPoliciesMapInput 

type GroupWithPoliciesMapInput interface {
	pulumi.Input

	ToGroupWithPoliciesMapOutput() GroupWithPoliciesMapOutput
	ToGroupWithPoliciesMapOutputWithContext(context.Context) GroupWithPoliciesMapOutput
}

GroupWithPoliciesMapInput is an input type that accepts GroupWithPoliciesMap and GroupWithPoliciesMapOutput values. You can construct a concrete instance of `GroupWithPoliciesMapInput` via: 

GroupWithPoliciesMap{ "key": GroupWithPoliciesArgs{...} }

type GroupWithPoliciesMapOutput 

type GroupWithPoliciesMapOutput struct{ *pulumi.OutputState }

func (GroupWithPoliciesMapOutput) ElementType 

func (GroupWithPoliciesMapOutput) ElementType() reflect.Type

func (GroupWithPoliciesMapOutput) MapIndex 

func (o GroupWithPoliciesMapOutput) MapIndex(k pulumi.StringInput) GroupWithPoliciesOutput

func (GroupWithPoliciesMapOutput) ToGroupWithPoliciesMapOutput 

func (o GroupWithPoliciesMapOutput) ToGroupWithPoliciesMapOutput() GroupWithPoliciesMapOutput

func (GroupWithPoliciesMapOutput) ToGroupWithPoliciesMapOutputWithContext 

func (o GroupWithPoliciesMapOutput) ToGroupWithPoliciesMapOutputWithContext(ctx context.Context) GroupWithPoliciesMapOutput

type GroupWithPoliciesOutput 

type GroupWithPoliciesOutput struct{ *pulumi.OutputState }

func (GroupWithPoliciesOutput) AwsAccountId 

func (o GroupWithPoliciesOutput) AwsAccountId() pulumi.StringOutput

IAM AWS account id.

func (GroupWithPoliciesOutput) ElementType 

func (GroupWithPoliciesOutput) ElementType() reflect.Type

func (GroupWithPoliciesOutput) GroupArn 

func (o GroupWithPoliciesOutput) GroupArn() pulumi.StringOutput

IAM group arn.

func (GroupWithPoliciesOutput) GroupName 

func (o GroupWithPoliciesOutput) GroupName() pulumi.StringOutput

IAM group name.

func (GroupWithPoliciesOutput) GroupUsers 

func (o GroupWithPoliciesOutput) GroupUsers() pulumi.StringArrayOutput

List of IAM users in IAM group

func (GroupWithPoliciesOutput) ToGroupWithPoliciesOutput 

func (o GroupWithPoliciesOutput) ToGroupWithPoliciesOutput() GroupWithPoliciesOutput

func (GroupWithPoliciesOutput) ToGroupWithPoliciesOutputWithContext 

func (o GroupWithPoliciesOutput) ToGroupWithPoliciesOutputWithContext(ctx context.Context) GroupWithPoliciesOutput

type KeybaseOutput 

type KeybaseOutput struct {
	// Decrypt user password command.
	PasswordDecryptCommand *string `pulumi:"passwordDecryptCommand"`
	// Encrypted password
	PasswordPgpMessage *string `pulumi:"passwordPgpMessage"`
	// Decrypt access secret key command.
	SecretKeyDecryptCommand *string `pulumi:"secretKeyDecryptCommand"`
	// Encrypted access secret key.
	SecretKeyPgpMessage *string `pulumi:"secretKeyPgpMessage"`
}

type KeybaseOutputOutput 

type KeybaseOutputOutput struct{ *pulumi.OutputState }

func (KeybaseOutputOutput) ElementType 

func (KeybaseOutputOutput) ElementType() reflect.Type

func (KeybaseOutputOutput) PasswordDecryptCommand 

func (o KeybaseOutputOutput) PasswordDecryptCommand() pulumi.StringPtrOutput

Decrypt user password command.

func (KeybaseOutputOutput) PasswordPgpMessage 

func (o KeybaseOutputOutput) PasswordPgpMessage() pulumi.StringPtrOutput

Encrypted password

func (KeybaseOutputOutput) SecretKeyDecryptCommand 

func (o KeybaseOutputOutput) SecretKeyDecryptCommand() pulumi.StringPtrOutput

Decrypt access secret key command.

func (KeybaseOutputOutput) SecretKeyPgpMessage 

func (o KeybaseOutputOutput) SecretKeyPgpMessage() pulumi.StringPtrOutput

Encrypted access secret key.

func (KeybaseOutputOutput) ToKeybaseOutputOutput 

func (o KeybaseOutputOutput) ToKeybaseOutputOutput() KeybaseOutputOutput

func (KeybaseOutputOutput) ToKeybaseOutputOutputWithContext 

func (o KeybaseOutputOutput) ToKeybaseOutputOutputWithContext(ctx context.Context) KeybaseOutputOutput

type OIDCProvider 

type OIDCProvider struct {
	NamespaceServiceAccounts []string `pulumi:"namespaceServiceAccounts"`
	ProviderArn              *string  `pulumi:"providerArn"`
}

type OIDCProviderArgs 

type OIDCProviderArgs struct {
	NamespaceServiceAccounts pulumi.StringArrayInput `pulumi:"namespaceServiceAccounts"`
	ProviderArn              pulumi.StringPtrInput   `pulumi:"providerArn"`
}

func (OIDCProviderArgs) ElementType 

func (OIDCProviderArgs) ElementType() reflect.Type

func (OIDCProviderArgs) ToOIDCProviderOutput 

func (i OIDCProviderArgs) ToOIDCProviderOutput() OIDCProviderOutput

func (OIDCProviderArgs) ToOIDCProviderOutputWithContext 

func (i OIDCProviderArgs) ToOIDCProviderOutputWithContext(ctx context.Context) OIDCProviderOutput

type OIDCProviderInput 

type OIDCProviderInput interface {
	pulumi.Input

	ToOIDCProviderOutput() OIDCProviderOutput
	ToOIDCProviderOutputWithContext(context.Context) OIDCProviderOutput
}

OIDCProviderInput is an input type that accepts OIDCProviderArgs and OIDCProviderOutput values. You can construct a concrete instance of `OIDCProviderInput` via: 

OIDCProviderArgs{...}

type OIDCProviderMap 

type OIDCProviderMap map[string]OIDCProviderInput

func (OIDCProviderMap) ElementType 

func (OIDCProviderMap) ElementType() reflect.Type

func (OIDCProviderMap) ToOIDCProviderMapOutput 

func (i OIDCProviderMap) ToOIDCProviderMapOutput() OIDCProviderMapOutput

func (OIDCProviderMap) ToOIDCProviderMapOutputWithContext 

func (i OIDCProviderMap) ToOIDCProviderMapOutputWithContext(ctx context.Context) OIDCProviderMapOutput

type OIDCProviderMapInput 

type OIDCProviderMapInput interface {
	pulumi.Input

	ToOIDCProviderMapOutput() OIDCProviderMapOutput
	ToOIDCProviderMapOutputWithContext(context.Context) OIDCProviderMapOutput
}

OIDCProviderMapInput is an input type that accepts OIDCProviderMap and OIDCProviderMapOutput values. You can construct a concrete instance of `OIDCProviderMapInput` via: 

OIDCProviderMap{ "key": OIDCProviderArgs{...} }

type OIDCProviderMapOutput 

type OIDCProviderMapOutput struct{ *pulumi.OutputState }

func (OIDCProviderMapOutput) ElementType 

func (OIDCProviderMapOutput) ElementType() reflect.Type

func (OIDCProviderMapOutput) MapIndex 

func (o OIDCProviderMapOutput) MapIndex(k pulumi.StringInput) OIDCProviderOutput

func (OIDCProviderMapOutput) ToOIDCProviderMapOutput 

func (o OIDCProviderMapOutput) ToOIDCProviderMapOutput() OIDCProviderMapOutput

func (OIDCProviderMapOutput) ToOIDCProviderMapOutputWithContext 

func (o OIDCProviderMapOutput) ToOIDCProviderMapOutputWithContext(ctx context.Context) OIDCProviderMapOutput

type OIDCProviderOutput 

type OIDCProviderOutput struct{ *pulumi.OutputState }

func (OIDCProviderOutput) ElementType 

func (OIDCProviderOutput) ElementType() reflect.Type

func (OIDCProviderOutput) NamespaceServiceAccounts 

func (o OIDCProviderOutput) NamespaceServiceAccounts() pulumi.StringArrayOutput

func (OIDCProviderOutput) ProviderArn 

func (o OIDCProviderOutput) ProviderArn() pulumi.StringPtrOutput

func (OIDCProviderOutput) ToOIDCProviderOutput 

func (o OIDCProviderOutput) ToOIDCProviderOutput() OIDCProviderOutput

func (OIDCProviderOutput) ToOIDCProviderOutputWithContext 

func (o OIDCProviderOutput) ToOIDCProviderOutputWithContext(ctx context.Context) OIDCProviderOutput

type Policy 

type Policy struct {
	pulumi.ResourceState

	// The ARN assigned by AWS to this policy.
	Arn pulumi.StringOutput `pulumi:"arn"`
	// The description of the policy.
	Description pulumi.StringOutput `pulumi:"description"`
	// The policy's ID.
	Id pulumi.StringOutput `pulumi:"id"`
	// The name of the policy.
	Name pulumi.StringOutput `pulumi:"name"`
	// The path of the policy in IAM.
	Path pulumi.StringOutput `pulumi:"path"`
	// The policy document.
	PolicyDocument pulumi.StringOutput `pulumi:"policyDocument"`
}

This resource helps you create an IAM policy.

## Example Usage ## Policy

```go package main

import ( 

"encoding/json"

iam "github.com/pulumi/pulumi-aws-iam/sdk/go/aws-iam"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
    pulumi.Run(func(ctx *pulumi.Context) error {
        policyJSON, err := json.Marshal(map[string]interface{}{
            "Version": "2012-10-17",
            "Statement": []interface{}{
                map[string]interface{}{
                    "Effect":   "Allow",
                    "Action":   []string{"ec2:Describe"},
                    "Resource": []string{"*"},
                },
            },
        })
        if err != nil {
            return err
        }

        policy, err := iam.NewPolicy(ctx, "policy", &iam.PolicyArgs{
            Name:           pulumi.String("example"),
            Path:           pulumi.String("/"),
            Description:    pulumi.String("My example policy"),
            PolicyDocument: pulumi.String(string(policyJSON)),
        })
        if err != nil {
            return err
        }

        ctx.Export("policy", policy)

        return nil
    })
}

``` {{ /example }}

func NewPolicy 

func NewPolicy(ctx *pulumi.Context,
	name string, args *PolicyArgs, opts ...pulumi.ResourceOption) (*Policy, error)

NewPolicy registers a new resource with the given unique name, arguments, and options.

func (*Policy) ElementType 

func (*Policy) ElementType() reflect.Type

func (*Policy) ToPolicyOutput 

func (i *Policy) ToPolicyOutput() PolicyOutput

func (*Policy) ToPolicyOutputWithContext 

func (i *Policy) ToPolicyOutputWithContext(ctx context.Context) PolicyOutput

type PolicyArgs 

type PolicyArgs struct {
	// The description of the policy.
	Description pulumi.StringPtrInput
	// The name of the policy.
	Name pulumi.StringInput
	// The path of the policy in IAM.
	Path pulumi.StringPtrInput
	// The policy document.
	PolicyDocument pulumi.StringInput
	// A map of tags to add.
	Tags pulumi.StringMapInput
}

The set of arguments for constructing a Policy resource.

func (PolicyArgs) ElementType 

func (PolicyArgs) ElementType() reflect.Type

type PolicyArray 

type PolicyArray []PolicyInput

func (PolicyArray) ElementType 

func (PolicyArray) ElementType() reflect.Type

func (PolicyArray) ToPolicyArrayOutput 

func (i PolicyArray) ToPolicyArrayOutput() PolicyArrayOutput

func (PolicyArray) ToPolicyArrayOutputWithContext 

func (i PolicyArray) ToPolicyArrayOutputWithContext(ctx context.Context) PolicyArrayOutput

type PolicyArrayInput 

type PolicyArrayInput interface {
	pulumi.Input

	ToPolicyArrayOutput() PolicyArrayOutput
	ToPolicyArrayOutputWithContext(context.Context) PolicyArrayOutput
}

PolicyArrayInput is an input type that accepts PolicyArray and PolicyArrayOutput values. You can construct a concrete instance of `PolicyArrayInput` via: 

PolicyArray{ PolicyArgs{...} }

type PolicyArrayOutput 

type PolicyArrayOutput struct{ *pulumi.OutputState }

func (PolicyArrayOutput) ElementType 

func (PolicyArrayOutput) ElementType() reflect.Type

func (PolicyArrayOutput) Index 

func (o PolicyArrayOutput) Index(i pulumi.IntInput) PolicyOutput

func (PolicyArrayOutput) ToPolicyArrayOutput 

func (o PolicyArrayOutput) ToPolicyArrayOutput() PolicyArrayOutput

func (PolicyArrayOutput) ToPolicyArrayOutputWithContext 

func (o PolicyArrayOutput) ToPolicyArrayOutputWithContext(ctx context.Context) PolicyArrayOutput

type PolicyInput 

type PolicyInput interface {
	pulumi.Input

	ToPolicyOutput() PolicyOutput
	ToPolicyOutputWithContext(ctx context.Context) PolicyOutput
}

type PolicyMap 

type PolicyMap map[string]PolicyInput

func (PolicyMap) ElementType 

func (PolicyMap) ElementType() reflect.Type

func (PolicyMap) ToPolicyMapOutput 

func (i PolicyMap) ToPolicyMapOutput() PolicyMapOutput

func (PolicyMap) ToPolicyMapOutputWithContext 

func (i PolicyMap) ToPolicyMapOutputWithContext(ctx context.Context) PolicyMapOutput

type PolicyMapInput 

type PolicyMapInput interface {
	pulumi.Input

	ToPolicyMapOutput() PolicyMapOutput
	ToPolicyMapOutputWithContext(context.Context) PolicyMapOutput
}

PolicyMapInput is an input type that accepts PolicyMap and PolicyMapOutput values. You can construct a concrete instance of `PolicyMapInput` via: 

PolicyMap{ "key": PolicyArgs{...} }

type PolicyMapOutput 

type PolicyMapOutput struct{ *pulumi.OutputState }

func (PolicyMapOutput) ElementType 

func (PolicyMapOutput) ElementType() reflect.Type

func (PolicyMapOutput) MapIndex 

func (o PolicyMapOutput) MapIndex(k pulumi.StringInput) PolicyOutput

func (PolicyMapOutput) ToPolicyMapOutput 

func (o PolicyMapOutput) ToPolicyMapOutput() PolicyMapOutput

func (PolicyMapOutput) ToPolicyMapOutputWithContext 

func (o PolicyMapOutput) ToPolicyMapOutputWithContext(ctx context.Context) PolicyMapOutput

type PolicyOutput 

type PolicyOutput struct{ *pulumi.OutputState }

func (PolicyOutput) Arn 

func (o PolicyOutput) Arn() pulumi.StringOutput

The ARN assigned by AWS to this policy.

func (PolicyOutput) Description 

func (o PolicyOutput) Description() pulumi.StringOutput

The description of the policy.

func (PolicyOutput) ElementType 

func (PolicyOutput) ElementType() reflect.Type

func (PolicyOutput) Id 

func (o PolicyOutput) Id() pulumi.StringOutput

The policy's ID.

func (PolicyOutput) Name 

func (o PolicyOutput) Name() pulumi.StringOutput

The name of the policy.

func (PolicyOutput) Path 

func (o PolicyOutput) Path() pulumi.StringOutput

The path of the policy in IAM.

func (PolicyOutput) PolicyDocument 

func (o PolicyOutput) PolicyDocument() pulumi.StringOutput

The policy document.

func (PolicyOutput) ToPolicyOutput 

func (o PolicyOutput) ToPolicyOutput() PolicyOutput

func (PolicyOutput) ToPolicyOutputWithContext 

func (o PolicyOutput) ToPolicyOutputWithContext(ctx context.Context) PolicyOutput

type PoweruserRole 

type PoweruserRole struct {
	// IAM role with poweruser access.
	Name *string `pulumi:"name"`
	// Path of poweruser IAM role.
	Path *string `pulumi:"path"`
	// Permissions boundary ARN to use for poweruser role.
	PermissionsBoundaryArn *string `pulumi:"permissionsBoundaryArn"`
	// List of policy ARNs to use for poweruser role.
	PolicyArns []string `pulumi:"policyArns"`
	// A map of tags to add.
	Tags map[string]string `pulumi:"tags"`
}

The poweruser role.

type PoweruserRoleArgs 

type PoweruserRoleArgs struct {
	// IAM role with poweruser access.
	Name pulumi.StringPtrInput `pulumi:"name"`
	// Path of poweruser IAM role.
	Path pulumi.StringPtrInput `pulumi:"path"`
	// Permissions boundary ARN to use for poweruser role.
	PermissionsBoundaryArn pulumi.StringPtrInput `pulumi:"permissionsBoundaryArn"`
	// List of policy ARNs to use for poweruser role.
	PolicyArns pulumi.StringArrayInput `pulumi:"policyArns"`
	// A map of tags to add.
	Tags pulumi.StringMapInput `pulumi:"tags"`
}

The poweruser role.

func (PoweruserRoleArgs) ElementType 

func (PoweruserRoleArgs) ElementType() reflect.Type

func (PoweruserRoleArgs) ToPoweruserRoleOutput 

func (i PoweruserRoleArgs) ToPoweruserRoleOutput() PoweruserRoleOutput

func (PoweruserRoleArgs) ToPoweruserRoleOutputWithContext 

func (i PoweruserRoleArgs) ToPoweruserRoleOutputWithContext(ctx context.Context) PoweruserRoleOutput

func (PoweruserRoleArgs) ToPoweruserRolePtrOutput 

func (i PoweruserRoleArgs) ToPoweruserRolePtrOutput() PoweruserRolePtrOutput

func (PoweruserRoleArgs) ToPoweruserRolePtrOutputWithContext 

func (i PoweruserRoleArgs) ToPoweruserRolePtrOutputWithContext(ctx context.Context) PoweruserRolePtrOutput

type PoweruserRoleInput 

type PoweruserRoleInput interface {
	pulumi.Input

	ToPoweruserRoleOutput() PoweruserRoleOutput
	ToPoweruserRoleOutputWithContext(context.Context) PoweruserRoleOutput
}

PoweruserRoleInput is an input type that accepts PoweruserRoleArgs and PoweruserRoleOutput values. You can construct a concrete instance of `PoweruserRoleInput` via: 

PoweruserRoleArgs{...}

type PoweruserRoleOutput 

type PoweruserRoleOutput struct{ *pulumi.OutputState }

The poweruser role.

func (PoweruserRoleOutput) ElementType 

func (PoweruserRoleOutput) ElementType() reflect.Type

func (PoweruserRoleOutput) Name 

func (o PoweruserRoleOutput) Name() pulumi.StringPtrOutput

IAM role with poweruser access.

func (PoweruserRoleOutput) Path 

func (o PoweruserRoleOutput) Path() pulumi.StringPtrOutput

Path of poweruser IAM role.

func (PoweruserRoleOutput) PermissionsBoundaryArn 

func (o PoweruserRoleOutput) PermissionsBoundaryArn() pulumi.StringPtrOutput

Permissions boundary ARN to use for poweruser role.

func (PoweruserRoleOutput) PolicyArns 

func (o PoweruserRoleOutput) PolicyArns() pulumi.StringArrayOutput

List of policy ARNs to use for poweruser role.

func (PoweruserRoleOutput) Tags 

func (o PoweruserRoleOutput) Tags() pulumi.StringMapOutput

A map of tags to add.

func (PoweruserRoleOutput) ToPoweruserRoleOutput 

func (o PoweruserRoleOutput) ToPoweruserRoleOutput() PoweruserRoleOutput

func (PoweruserRoleOutput) ToPoweruserRoleOutputWithContext 

func (o PoweruserRoleOutput) ToPoweruserRoleOutputWithContext(ctx context.Context) PoweruserRoleOutput

func (PoweruserRoleOutput) ToPoweruserRolePtrOutput 

func (o PoweruserRoleOutput) ToPoweruserRolePtrOutput() PoweruserRolePtrOutput

func (PoweruserRoleOutput) ToPoweruserRolePtrOutputWithContext 

func (o PoweruserRoleOutput) ToPoweruserRolePtrOutputWithContext(ctx context.Context) PoweruserRolePtrOutput

type PoweruserRolePtrInput 

type PoweruserRolePtrInput interface {
	pulumi.Input

	ToPoweruserRolePtrOutput() PoweruserRolePtrOutput
	ToPoweruserRolePtrOutputWithContext(context.Context) PoweruserRolePtrOutput
}

PoweruserRolePtrInput is an input type that accepts PoweruserRoleArgs, PoweruserRolePtr and PoweruserRolePtrOutput values. You can construct a concrete instance of `PoweruserRolePtrInput` via: 

        PoweruserRoleArgs{...}

or:

        nil

func PoweruserRolePtr 

func PoweruserRolePtr(v *PoweruserRoleArgs) PoweruserRolePtrInput

type PoweruserRolePtrOutput 

type PoweruserRolePtrOutput struct{ *pulumi.OutputState }

func (PoweruserRolePtrOutput) Elem 

func (o PoweruserRolePtrOutput) Elem() PoweruserRoleOutput

func (PoweruserRolePtrOutput) ElementType 

func (PoweruserRolePtrOutput) ElementType() reflect.Type

func (PoweruserRolePtrOutput) Name 

func (o PoweruserRolePtrOutput) Name() pulumi.StringPtrOutput

IAM role with poweruser access.

func (PoweruserRolePtrOutput) Path 

func (o PoweruserRolePtrOutput) Path() pulumi.StringPtrOutput

Path of poweruser IAM role.

func (PoweruserRolePtrOutput) PermissionsBoundaryArn 

func (o PoweruserRolePtrOutput) PermissionsBoundaryArn() pulumi.StringPtrOutput

Permissions boundary ARN to use for poweruser role.

func (PoweruserRolePtrOutput) PolicyArns 

func (o PoweruserRolePtrOutput) PolicyArns() pulumi.StringArrayOutput

List of policy ARNs to use for poweruser role.

func (PoweruserRolePtrOutput) Tags 

func (o PoweruserRolePtrOutput) Tags() pulumi.StringMapOutput

A map of tags to add.

func (PoweruserRolePtrOutput) ToPoweruserRolePtrOutput 

func (o PoweruserRolePtrOutput) ToPoweruserRolePtrOutput() PoweruserRolePtrOutput

func (PoweruserRolePtrOutput) ToPoweruserRolePtrOutputWithContext 

func (o PoweruserRolePtrOutput) ToPoweruserRolePtrOutputWithContext(ctx context.Context) PoweruserRolePtrOutput

type PoweruserRoleWithMFA 

type PoweruserRoleWithMFA struct {
	// IAM role with poweruser access.
	Name *string `pulumi:"name"`
	// Path of poweruser IAM role.
	Path *string `pulumi:"path"`
	// Permissions boundary ARN to use for poweruser role.
	PermissionsBoundaryArn *string `pulumi:"permissionsBoundaryArn"`
	// List of policy ARNs to use for poweruser role.
	PolicyArns []string `pulumi:"policyArns"`
	// Whether admin role requires MFA.
	RequiresMfa *bool `pulumi:"requiresMfa"`
	// A map of tags to add.
	Tags map[string]string `pulumi:"tags"`
}

The poweruser role.

type PoweruserRoleWithMFAArgs 

type PoweruserRoleWithMFAArgs struct {
	// IAM role with poweruser access.
	Name pulumi.StringPtrInput `pulumi:"name"`
	// Path of poweruser IAM role.
	Path pulumi.StringPtrInput `pulumi:"path"`
	// Permissions boundary ARN to use for poweruser role.
	PermissionsBoundaryArn pulumi.StringPtrInput `pulumi:"permissionsBoundaryArn"`
	// List of policy ARNs to use for poweruser role.
	PolicyArns pulumi.StringArrayInput `pulumi:"policyArns"`
	// Whether admin role requires MFA.
	RequiresMfa pulumi.BoolPtrInput `pulumi:"requiresMfa"`
	// A map of tags to add.
	Tags pulumi.StringMapInput `pulumi:"tags"`
}

The poweruser role.

func (PoweruserRoleWithMFAArgs) ElementType 

func (PoweruserRoleWithMFAArgs) ElementType() reflect.Type

func (PoweruserRoleWithMFAArgs) ToPoweruserRoleWithMFAOutput 

func (i PoweruserRoleWithMFAArgs) ToPoweruserRoleWithMFAOutput() PoweruserRoleWithMFAOutput

func (PoweruserRoleWithMFAArgs) ToPoweruserRoleWithMFAOutputWithContext 

func (i PoweruserRoleWithMFAArgs) ToPoweruserRoleWithMFAOutputWithContext(ctx context.Context) PoweruserRoleWithMFAOutput

func (PoweruserRoleWithMFAArgs) ToPoweruserRoleWithMFAPtrOutput 

func (i PoweruserRoleWithMFAArgs) ToPoweruserRoleWithMFAPtrOutput() PoweruserRoleWithMFAPtrOutput

func (PoweruserRoleWithMFAArgs) ToPoweruserRoleWithMFAPtrOutputWithContext 

func (i PoweruserRoleWithMFAArgs) ToPoweruserRoleWithMFAPtrOutputWithContext(ctx context.Context) PoweruserRoleWithMFAPtrOutput

type PoweruserRoleWithMFAInput 

type PoweruserRoleWithMFAInput interface {
	pulumi.Input

	ToPoweruserRoleWithMFAOutput() PoweruserRoleWithMFAOutput
	ToPoweruserRoleWithMFAOutputWithContext(context.Context) PoweruserRoleWithMFAOutput
}

PoweruserRoleWithMFAInput is an input type that accepts PoweruserRoleWithMFAArgs and PoweruserRoleWithMFAOutput values. You can construct a concrete instance of `PoweruserRoleWithMFAInput` via: 

PoweruserRoleWithMFAArgs{...}

type PoweruserRoleWithMFAOutput 

type PoweruserRoleWithMFAOutput struct{ *pulumi.OutputState }

The poweruser role.

func (PoweruserRoleWithMFAOutput) ElementType 

func (PoweruserRoleWithMFAOutput) ElementType() reflect.Type

func (PoweruserRoleWithMFAOutput) Name 

func (o PoweruserRoleWithMFAOutput) Name() pulumi.StringPtrOutput

IAM role with poweruser access.

func (PoweruserRoleWithMFAOutput) Path 

func (o PoweruserRoleWithMFAOutput) Path() pulumi.StringPtrOutput

Path of poweruser IAM role.

func (PoweruserRoleWithMFAOutput) PermissionsBoundaryArn 

func (o PoweruserRoleWithMFAOutput) PermissionsBoundaryArn() pulumi.StringPtrOutput

Permissions boundary ARN to use for poweruser role.

func (PoweruserRoleWithMFAOutput) PolicyArns 

func (o PoweruserRoleWithMFAOutput) PolicyArns() pulumi.StringArrayOutput

List of policy ARNs to use for poweruser role.

func (PoweruserRoleWithMFAOutput) RequiresMfa 

func (o PoweruserRoleWithMFAOutput) RequiresMfa() pulumi.BoolPtrOutput

Whether admin role requires MFA.

func (PoweruserRoleWithMFAOutput) Tags 

func (o PoweruserRoleWithMFAOutput) Tags() pulumi.StringMapOutput

A map of tags to add.

func (PoweruserRoleWithMFAOutput) ToPoweruserRoleWithMFAOutput 

func (o PoweruserRoleWithMFAOutput) ToPoweruserRoleWithMFAOutput() PoweruserRoleWithMFAOutput

func (PoweruserRoleWithMFAOutput) ToPoweruserRoleWithMFAOutputWithContext 

func (o PoweruserRoleWithMFAOutput) ToPoweruserRoleWithMFAOutputWithContext(ctx context.Context) PoweruserRoleWithMFAOutput

func (PoweruserRoleWithMFAOutput) ToPoweruserRoleWithMFAPtrOutput 

func (o PoweruserRoleWithMFAOutput) ToPoweruserRoleWithMFAPtrOutput() PoweruserRoleWithMFAPtrOutput

func (PoweruserRoleWithMFAOutput) ToPoweruserRoleWithMFAPtrOutputWithContext 

func (o PoweruserRoleWithMFAOutput) ToPoweruserRoleWithMFAPtrOutputWithContext(ctx context.Context) PoweruserRoleWithMFAPtrOutput

type PoweruserRoleWithMFAPtrInput 

type PoweruserRoleWithMFAPtrInput interface {
	pulumi.Input

	ToPoweruserRoleWithMFAPtrOutput() PoweruserRoleWithMFAPtrOutput
	ToPoweruserRoleWithMFAPtrOutputWithContext(context.Context) PoweruserRoleWithMFAPtrOutput
}

PoweruserRoleWithMFAPtrInput is an input type that accepts PoweruserRoleWithMFAArgs, PoweruserRoleWithMFAPtr and PoweruserRoleWithMFAPtrOutput values. You can construct a concrete instance of `PoweruserRoleWithMFAPtrInput` via: 

        PoweruserRoleWithMFAArgs{...}

or:

        nil

func PoweruserRoleWithMFAPtr 

func PoweruserRoleWithMFAPtr(v *PoweruserRoleWithMFAArgs) PoweruserRoleWithMFAPtrInput

type PoweruserRoleWithMFAPtrOutput 

type PoweruserRoleWithMFAPtrOutput struct{ *pulumi.OutputState }

func (PoweruserRoleWithMFAPtrOutput) Elem 

func (o PoweruserRoleWithMFAPtrOutput) Elem() PoweruserRoleWithMFAOutput

func (PoweruserRoleWithMFAPtrOutput) ElementType 

func (PoweruserRoleWithMFAPtrOutput) ElementType() reflect.Type

func (PoweruserRoleWithMFAPtrOutput) Name 

func (o PoweruserRoleWithMFAPtrOutput) Name() pulumi.StringPtrOutput

IAM role with poweruser access.

func (PoweruserRoleWithMFAPtrOutput) Path 

func (o PoweruserRoleWithMFAPtrOutput) Path() pulumi.StringPtrOutput

Path of poweruser IAM role.

func (PoweruserRoleWithMFAPtrOutput) PermissionsBoundaryArn 

func (o PoweruserRoleWithMFAPtrOutput) PermissionsBoundaryArn() pulumi.StringPtrOutput

Permissions boundary ARN to use for poweruser role.

func (PoweruserRoleWithMFAPtrOutput) PolicyArns 

func (o PoweruserRoleWithMFAPtrOutput) PolicyArns() pulumi.StringArrayOutput

List of policy ARNs to use for poweruser role.

func (PoweruserRoleWithMFAPtrOutput) RequiresMfa 

func (o PoweruserRoleWithMFAPtrOutput) RequiresMfa() pulumi.BoolPtrOutput

Whether admin role requires MFA.

func (PoweruserRoleWithMFAPtrOutput) Tags 

func (o PoweruserRoleWithMFAPtrOutput) Tags() pulumi.StringMapOutput

A map of tags to add.

func (PoweruserRoleWithMFAPtrOutput) ToPoweruserRoleWithMFAPtrOutput 

func (o PoweruserRoleWithMFAPtrOutput) ToPoweruserRoleWithMFAPtrOutput() PoweruserRoleWithMFAPtrOutput

func (PoweruserRoleWithMFAPtrOutput) ToPoweruserRoleWithMFAPtrOutputWithContext 

func (o PoweruserRoleWithMFAPtrOutput) ToPoweruserRoleWithMFAPtrOutputWithContext(ctx context.Context) PoweruserRoleWithMFAPtrOutput

type Provider 

type Provider struct {
	pulumi.ProviderResourceState
}

func NewProvider 

func NewProvider(ctx *pulumi.Context,
	name string, args *ProviderArgs, opts ...pulumi.ResourceOption) (*Provider, error)

NewProvider registers a new resource with the given unique name, arguments, and options.

func (*Provider) ElementType 

func (*Provider) ElementType() reflect.Type

func (*Provider) ToProviderOutput 

func (i *Provider) ToProviderOutput() ProviderOutput

func (*Provider) ToProviderOutputWithContext 

func (i *Provider) ToProviderOutputWithContext(ctx context.Context) ProviderOutput

type ProviderArgs 

type ProviderArgs struct {
}

The set of arguments for constructing a Provider resource.

func (ProviderArgs) ElementType 

func (ProviderArgs) ElementType() reflect.Type

type ProviderInput 

type ProviderInput interface {
	pulumi.Input

	ToProviderOutput() ProviderOutput
	ToProviderOutputWithContext(ctx context.Context) ProviderOutput
}

type ProviderOutput 

type ProviderOutput struct{ *pulumi.OutputState }

func (ProviderOutput) ElementType 

func (ProviderOutput) ElementType() reflect.Type

func (ProviderOutput) ToProviderOutput 

func (o ProviderOutput) ToProviderOutput() ProviderOutput

func (ProviderOutput) ToProviderOutputWithContext 

func (o ProviderOutput) ToProviderOutputWithContext(ctx context.Context) ProviderOutput

type ReadOnlyPolicy 

type ReadOnlyPolicy struct {
	pulumi.ResourceState

	// The ARN assigned by AWS to this policy.
	Arn pulumi.StringOutput `pulumi:"arn"`
	// The description of the policy.
	Description pulumi.StringOutput `pulumi:"description"`
	// The policy's ID.
	Id pulumi.StringOutput `pulumi:"id"`
	// The name of the policy.
	Name pulumi.StringOutput `pulumi:"name"`
	// The path of the policy in IAM.
	Path pulumi.StringOutput `pulumi:"path"`
	// The policy document.
	Policy pulumi.StringOutput `pulumi:"policy"`
	// Policy document as json. Useful if you need document but do not want to create IAM policy itself. For example for SSO Permission Set inline policies.
	PolicyJson pulumi.StringOutput `pulumi:"policyJson"`
}

This resource helps you create an IAM read-only policy for the services you specify. The default AWS read-only policies may not include services you need or may contain services you do not need access to. This resource helps ensure your read-only policy has permissions to exactly what you specify.

## Example Usage ## RDS and Dynamo Read Only Policy

```go package main

import ( 

iam "github.com/pulumi/pulumi-aws-iam/sdk/go/aws-iam"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
    pulumi.Run(func(ctx *pulumi.Context) error {
        readOnlyPolicy, err := iam.NewReadOnlyPolicy(ctx, "read-only-policy", &iam.ReadOnlyPolicyArgs{
            Name:            pulumi.String("example"),
            Path:            pulumi.String("/"),
            Description:     pulumi.String("My example policy"),
            AllowedServices: pulumi.ToStringArray([]string{"rds", "dynamodb"}),
        })
        if err != nil {
            return err
        }

        ctx.Export("readOnlyPolicy", readOnlyPolicy)

        return nil
    })
}

``` {{ /example }}

func NewReadOnlyPolicy 

func NewReadOnlyPolicy(ctx *pulumi.Context,
	name string, args *ReadOnlyPolicyArgs, opts ...pulumi.ResourceOption) (*ReadOnlyPolicy, error)

NewReadOnlyPolicy registers a new resource with the given unique name, arguments, and options.

func (*ReadOnlyPolicy) ElementType 

func (*ReadOnlyPolicy) ElementType() reflect.Type

func (*ReadOnlyPolicy) ToReadOnlyPolicyOutput 

func (i *ReadOnlyPolicy) ToReadOnlyPolicyOutput() ReadOnlyPolicyOutput

func (*ReadOnlyPolicy) ToReadOnlyPolicyOutputWithContext 

func (i *ReadOnlyPolicy) ToReadOnlyPolicyOutputWithContext(ctx context.Context) ReadOnlyPolicyOutput

type ReadOnlyPolicyArgs 

type ReadOnlyPolicyArgs struct {
	// JSON policy document if you want to add custom actions.
	AdditionalPolicyJson pulumi.StringPtrInput
	// Allows StartQuery/StopQuery/FilterLogEvents CloudWatch actions.
	AllowCloudwatchLogsQuery pulumi.BoolPtrInput
	// Allows GetCallerIdentity/GetSessionToken/GetAccessKeyInfo sts actions.
	AllowPredefinedStsActions pulumi.BoolPtrInput
	// Allows List/Get/Describe/View actions for services used when browsing AWS console (e.g. resource-groups, tag, health services).
	AllowWebConsoleServices pulumi.BoolPtrInput
	// List of services to allow Get/List/Describe/View options. Service name should be the same as corresponding service IAM prefix. See what it is for each service here https://docs.aws.amazon.com/service-authorization/latest/reference/reference_policies_actions-resources-contextkeys.html.
	AllowedServices pulumi.StringArrayInput
	// The description of the policy.
	Description pulumi.StringPtrInput
	// The name of the policy.
	Name pulumi.StringInput
	// The path of the policy in IAM.
	Path pulumi.StringPtrInput
	// A map of tags to add.
	Tags pulumi.StringMapInput
	// List of web console services to allow.
	WebConsoleServices pulumi.StringArrayInput
}

The set of arguments for constructing a ReadOnlyPolicy resource.

func (ReadOnlyPolicyArgs) ElementType 

func (ReadOnlyPolicyArgs) ElementType() reflect.Type

type ReadOnlyPolicyArray 

type ReadOnlyPolicyArray []ReadOnlyPolicyInput

func (ReadOnlyPolicyArray) ElementType 

func (ReadOnlyPolicyArray) ElementType() reflect.Type

func (ReadOnlyPolicyArray) ToReadOnlyPolicyArrayOutput 

func (i ReadOnlyPolicyArray) ToReadOnlyPolicyArrayOutput() ReadOnlyPolicyArrayOutput

func (ReadOnlyPolicyArray) ToReadOnlyPolicyArrayOutputWithContext 

func (i ReadOnlyPolicyArray) ToReadOnlyPolicyArrayOutputWithContext(ctx context.Context) ReadOnlyPolicyArrayOutput

type ReadOnlyPolicyArrayInput 

type ReadOnlyPolicyArrayInput interface {
	pulumi.Input

	ToReadOnlyPolicyArrayOutput() ReadOnlyPolicyArrayOutput
	ToReadOnlyPolicyArrayOutputWithContext(context.Context) ReadOnlyPolicyArrayOutput
}

ReadOnlyPolicyArrayInput is an input type that accepts ReadOnlyPolicyArray and ReadOnlyPolicyArrayOutput values. You can construct a concrete instance of `ReadOnlyPolicyArrayInput` via: 

ReadOnlyPolicyArray{ ReadOnlyPolicyArgs{...} }

type ReadOnlyPolicyArrayOutput 

type ReadOnlyPolicyArrayOutput struct{ *pulumi.OutputState }

func (ReadOnlyPolicyArrayOutput) ElementType 

func (ReadOnlyPolicyArrayOutput) ElementType() reflect.Type

func (ReadOnlyPolicyArrayOutput) Index 

func (o ReadOnlyPolicyArrayOutput) Index(i pulumi.IntInput) ReadOnlyPolicyOutput

func (ReadOnlyPolicyArrayOutput) ToReadOnlyPolicyArrayOutput 

func (o ReadOnlyPolicyArrayOutput) ToReadOnlyPolicyArrayOutput() ReadOnlyPolicyArrayOutput

func (ReadOnlyPolicyArrayOutput) ToReadOnlyPolicyArrayOutputWithContext 

func (o ReadOnlyPolicyArrayOutput) ToReadOnlyPolicyArrayOutputWithContext(ctx context.Context) ReadOnlyPolicyArrayOutput

type ReadOnlyPolicyInput 

type ReadOnlyPolicyInput interface {
	pulumi.Input

	ToReadOnlyPolicyOutput() ReadOnlyPolicyOutput
	ToReadOnlyPolicyOutputWithContext(ctx context.Context) ReadOnlyPolicyOutput
}

type ReadOnlyPolicyMap 

type ReadOnlyPolicyMap map[string]ReadOnlyPolicyInput

func (ReadOnlyPolicyMap) ElementType 

func (ReadOnlyPolicyMap) ElementType() reflect.Type

func (ReadOnlyPolicyMap) ToReadOnlyPolicyMapOutput 

func (i ReadOnlyPolicyMap) ToReadOnlyPolicyMapOutput() ReadOnlyPolicyMapOutput

func (ReadOnlyPolicyMap) ToReadOnlyPolicyMapOutputWithContext 

func (i ReadOnlyPolicyMap) ToReadOnlyPolicyMapOutputWithContext(ctx context.Context) ReadOnlyPolicyMapOutput

type ReadOnlyPolicyMapInput 

type ReadOnlyPolicyMapInput interface {
	pulumi.Input

	ToReadOnlyPolicyMapOutput() ReadOnlyPolicyMapOutput
	ToReadOnlyPolicyMapOutputWithContext(context.Context) ReadOnlyPolicyMapOutput
}

ReadOnlyPolicyMapInput is an input type that accepts ReadOnlyPolicyMap and ReadOnlyPolicyMapOutput values. You can construct a concrete instance of `ReadOnlyPolicyMapInput` via: 

ReadOnlyPolicyMap{ "key": ReadOnlyPolicyArgs{...} }

type ReadOnlyPolicyMapOutput 

type ReadOnlyPolicyMapOutput struct{ *pulumi.OutputState }

func (ReadOnlyPolicyMapOutput) ElementType 

func (ReadOnlyPolicyMapOutput) ElementType() reflect.Type

func (ReadOnlyPolicyMapOutput) MapIndex 

func (o ReadOnlyPolicyMapOutput) MapIndex(k pulumi.StringInput) ReadOnlyPolicyOutput

func (ReadOnlyPolicyMapOutput) ToReadOnlyPolicyMapOutput 

func (o ReadOnlyPolicyMapOutput) ToReadOnlyPolicyMapOutput() ReadOnlyPolicyMapOutput

func (ReadOnlyPolicyMapOutput) ToReadOnlyPolicyMapOutputWithContext 

func (o ReadOnlyPolicyMapOutput) ToReadOnlyPolicyMapOutputWithContext(ctx context.Context) ReadOnlyPolicyMapOutput

type ReadOnlyPolicyOutput 

type ReadOnlyPolicyOutput struct{ *pulumi.OutputState }

func (ReadOnlyPolicyOutput) Arn 

func (o ReadOnlyPolicyOutput) Arn() pulumi.StringOutput

The ARN assigned by AWS to this policy.

func (ReadOnlyPolicyOutput) Description 

func (o ReadOnlyPolicyOutput) Description() pulumi.StringOutput

The description of the policy.

func (ReadOnlyPolicyOutput) ElementType 

func (ReadOnlyPolicyOutput) ElementType() reflect.Type

func (ReadOnlyPolicyOutput) Id 

func (o ReadOnlyPolicyOutput) Id() pulumi.StringOutput

The policy's ID.

func (ReadOnlyPolicyOutput) Name 

func (o ReadOnlyPolicyOutput) Name() pulumi.StringOutput

The name of the policy.

func (ReadOnlyPolicyOutput) Path 

func (o ReadOnlyPolicyOutput) Path() pulumi.StringOutput

The path of the policy in IAM.

func (ReadOnlyPolicyOutput) Policy 

func (o ReadOnlyPolicyOutput) Policy() pulumi.StringOutput

The policy document.

func (ReadOnlyPolicyOutput) PolicyJson 

func (o ReadOnlyPolicyOutput) PolicyJson() pulumi.StringOutput

Policy document as json. Useful if you need document but do not want to create IAM policy itself. For example for SSO Permission Set inline policies.

func (ReadOnlyPolicyOutput) ToReadOnlyPolicyOutput 

func (o ReadOnlyPolicyOutput) ToReadOnlyPolicyOutput() ReadOnlyPolicyOutput

func (ReadOnlyPolicyOutput) ToReadOnlyPolicyOutputWithContext 

func (o ReadOnlyPolicyOutput) ToReadOnlyPolicyOutputWithContext(ctx context.Context) ReadOnlyPolicyOutput

type ReadonlyRole 

type ReadonlyRole struct {
	// IAM role with readonly access.
	Name *string `pulumi:"name"`
	// Path of readonly IAM role. Defaults to '/'.
	Path *string `pulumi:"path"`
	// Permissions boundary ARN to use for readonly role.
	PermissionsBoundaryArn *string `pulumi:"permissionsBoundaryArn"`
	// List of policy ARNs to use for readonly role.
	PolicyArns []string `pulumi:"policyArns"`
	// A map of tags to add.
	Tags map[string]string `pulumi:"tags"`
}

The readonly role.

type ReadonlyRoleArgs 

type ReadonlyRoleArgs struct {
	// IAM role with readonly access.
	Name pulumi.StringPtrInput `pulumi:"name"`
	// Path of readonly IAM role. Defaults to '/'.
	Path pulumi.StringPtrInput `pulumi:"path"`
	// Permissions boundary ARN to use for readonly role.
	PermissionsBoundaryArn pulumi.StringPtrInput `pulumi:"permissionsBoundaryArn"`
	// List of policy ARNs to use for readonly role.
	PolicyArns pulumi.StringArrayInput `pulumi:"policyArns"`
	// A map of tags to add.
	Tags pulumi.StringMapInput `pulumi:"tags"`
}

The readonly role.

func (ReadonlyRoleArgs) ElementType 

func (ReadonlyRoleArgs) ElementType() reflect.Type

func (ReadonlyRoleArgs) ToReadonlyRoleOutput 

func (i ReadonlyRoleArgs) ToReadonlyRoleOutput() ReadonlyRoleOutput

func (ReadonlyRoleArgs) ToReadonlyRoleOutputWithContext 

func (i ReadonlyRoleArgs) ToReadonlyRoleOutputWithContext(ctx context.Context) ReadonlyRoleOutput

func (ReadonlyRoleArgs) ToReadonlyRolePtrOutput 

func (i ReadonlyRoleArgs) ToReadonlyRolePtrOutput() ReadonlyRolePtrOutput

func (ReadonlyRoleArgs) ToReadonlyRolePtrOutputWithContext 

func (i ReadonlyRoleArgs) ToReadonlyRolePtrOutputWithContext(ctx context.Context) ReadonlyRolePtrOutput

type ReadonlyRoleInput 

type ReadonlyRoleInput interface {
	pulumi.Input

	ToReadonlyRoleOutput() ReadonlyRoleOutput
	ToReadonlyRoleOutputWithContext(context.Context) ReadonlyRoleOutput
}

ReadonlyRoleInput is an input type that accepts ReadonlyRoleArgs and ReadonlyRoleOutput values. You can construct a concrete instance of `ReadonlyRoleInput` via: 

ReadonlyRoleArgs{...}

type ReadonlyRoleOutput 

type ReadonlyRoleOutput struct{ *pulumi.OutputState }

The readonly role.

func (ReadonlyRoleOutput) ElementType 

func (ReadonlyRoleOutput) ElementType() reflect.Type

func (ReadonlyRoleOutput) Name 

func (o ReadonlyRoleOutput) Name() pulumi.StringPtrOutput

IAM role with readonly access.

func (ReadonlyRoleOutput) Path 

func (o ReadonlyRoleOutput) Path() pulumi.StringPtrOutput

Path of readonly IAM role. Defaults to '/'.

func (ReadonlyRoleOutput) PermissionsBoundaryArn 

func (o ReadonlyRoleOutput) PermissionsBoundaryArn() pulumi.StringPtrOutput

Permissions boundary ARN to use for readonly role.

func (ReadonlyRoleOutput) PolicyArns 

func (o ReadonlyRoleOutput) PolicyArns() pulumi.StringArrayOutput

List of policy ARNs to use for readonly role.

func (ReadonlyRoleOutput) Tags 

func (o ReadonlyRoleOutput) Tags() pulumi.StringMapOutput

A map of tags to add.

func (ReadonlyRoleOutput) ToReadonlyRoleOutput 

func (o ReadonlyRoleOutput) ToReadonlyRoleOutput() ReadonlyRoleOutput

func (ReadonlyRoleOutput) ToReadonlyRoleOutputWithContext 

func (o ReadonlyRoleOutput) ToReadonlyRoleOutputWithContext(ctx context.Context) ReadonlyRoleOutput

func (ReadonlyRoleOutput) ToReadonlyRolePtrOutput 

func (o ReadonlyRoleOutput) ToReadonlyRolePtrOutput() ReadonlyRolePtrOutput

func (ReadonlyRoleOutput) ToReadonlyRolePtrOutputWithContext 

func (o ReadonlyRoleOutput) ToReadonlyRolePtrOutputWithContext(ctx context.Context) ReadonlyRolePtrOutput

type ReadonlyRolePtrInput 

type ReadonlyRolePtrInput interface {
	pulumi.Input

	ToReadonlyRolePtrOutput() ReadonlyRolePtrOutput
	ToReadonlyRolePtrOutputWithContext(context.Context) ReadonlyRolePtrOutput
}

ReadonlyRolePtrInput is an input type that accepts ReadonlyRoleArgs, ReadonlyRolePtr and ReadonlyRolePtrOutput values. You can construct a concrete instance of `ReadonlyRolePtrInput` via: 

        ReadonlyRoleArgs{...}

or:

        nil

func ReadonlyRolePtr 

func ReadonlyRolePtr(v *ReadonlyRoleArgs) ReadonlyRolePtrInput

type ReadonlyRolePtrOutput 

type ReadonlyRolePtrOutput struct{ *pulumi.OutputState }

func (ReadonlyRolePtrOutput) Elem 

func (o ReadonlyRolePtrOutput) Elem() ReadonlyRoleOutput

func (ReadonlyRolePtrOutput) ElementType 

func (ReadonlyRolePtrOutput) ElementType() reflect.Type

func (ReadonlyRolePtrOutput) Name 

func (o ReadonlyRolePtrOutput) Name() pulumi.StringPtrOutput

IAM role with readonly access.

func (ReadonlyRolePtrOutput) Path 

func (o ReadonlyRolePtrOutput) Path() pulumi.StringPtrOutput

Path of readonly IAM role. Defaults to '/'.

func (ReadonlyRolePtrOutput) PermissionsBoundaryArn 

func (o ReadonlyRolePtrOutput) PermissionsBoundaryArn() pulumi.StringPtrOutput

Permissions boundary ARN to use for readonly role.

func (ReadonlyRolePtrOutput) PolicyArns 

func (o ReadonlyRolePtrOutput) PolicyArns() pulumi.StringArrayOutput

List of policy ARNs to use for readonly role.

func (ReadonlyRolePtrOutput) Tags 

func (o ReadonlyRolePtrOutput) Tags() pulumi.StringMapOutput

A map of tags to add.

func (ReadonlyRolePtrOutput) ToReadonlyRolePtrOutput 

func (o ReadonlyRolePtrOutput) ToReadonlyRolePtrOutput() ReadonlyRolePtrOutput

func (ReadonlyRolePtrOutput) ToReadonlyRolePtrOutputWithContext 

func (o ReadonlyRolePtrOutput) ToReadonlyRolePtrOutputWithContext(ctx context.Context) ReadonlyRolePtrOutput

type ReadonlyRoleWithMFA 

type ReadonlyRoleWithMFA struct {
	// IAM role with readonly access.
	Name *string `pulumi:"name"`
	// Path of readonly IAM role. Defaults to '/'.
	Path *string `pulumi:"path"`
	// Permissions boundary ARN to use for readonly role.
	PermissionsBoundaryArn *string `pulumi:"permissionsBoundaryArn"`
	// List of policy ARNs to use for readonly role.
	PolicyArns []string `pulumi:"policyArns"`
	// Whether admin role requires MFA.
	RequiresMfa *bool `pulumi:"requiresMfa"`
	// A map of tags to add.
	Tags map[string]string `pulumi:"tags"`
}

The readonly role.

type ReadonlyRoleWithMFAArgs 

type ReadonlyRoleWithMFAArgs struct {
	// IAM role with readonly access.
	Name pulumi.StringPtrInput `pulumi:"name"`
	// Path of readonly IAM role. Defaults to '/'.
	Path pulumi.StringPtrInput `pulumi:"path"`
	// Permissions boundary ARN to use for readonly role.
	PermissionsBoundaryArn pulumi.StringPtrInput `pulumi:"permissionsBoundaryArn"`
	// List of policy ARNs to use for readonly role.
	PolicyArns pulumi.StringArrayInput `pulumi:"policyArns"`
	// Whether admin role requires MFA.
	RequiresMfa pulumi.BoolPtrInput `pulumi:"requiresMfa"`
	// A map of tags to add.
	Tags pulumi.StringMapInput `pulumi:"tags"`
}

The readonly role.

func (ReadonlyRoleWithMFAArgs) ElementType 

func (ReadonlyRoleWithMFAArgs) ElementType() reflect.Type

func (ReadonlyRoleWithMFAArgs) ToReadonlyRoleWithMFAOutput 

func (i ReadonlyRoleWithMFAArgs) ToReadonlyRoleWithMFAOutput() ReadonlyRoleWithMFAOutput

func (ReadonlyRoleWithMFAArgs) ToReadonlyRoleWithMFAOutputWithContext 

func (i ReadonlyRoleWithMFAArgs) ToReadonlyRoleWithMFAOutputWithContext(ctx context.Context) ReadonlyRoleWithMFAOutput

func (ReadonlyRoleWithMFAArgs) ToReadonlyRoleWithMFAPtrOutput 

func (i ReadonlyRoleWithMFAArgs) ToReadonlyRoleWithMFAPtrOutput() ReadonlyRoleWithMFAPtrOutput

func (ReadonlyRoleWithMFAArgs) ToReadonlyRoleWithMFAPtrOutputWithContext 

func (i ReadonlyRoleWithMFAArgs) ToReadonlyRoleWithMFAPtrOutputWithContext(ctx context.Context) ReadonlyRoleWithMFAPtrOutput

type ReadonlyRoleWithMFAInput 

type ReadonlyRoleWithMFAInput interface {
	pulumi.Input

	ToReadonlyRoleWithMFAOutput() ReadonlyRoleWithMFAOutput
	ToReadonlyRoleWithMFAOutputWithContext(context.Context) ReadonlyRoleWithMFAOutput
}

ReadonlyRoleWithMFAInput is an input type that accepts ReadonlyRoleWithMFAArgs and ReadonlyRoleWithMFAOutput values. You can construct a concrete instance of `ReadonlyRoleWithMFAInput` via: 

ReadonlyRoleWithMFAArgs{...}

type ReadonlyRoleWithMFAOutput 

type ReadonlyRoleWithMFAOutput struct{ *pulumi.OutputState }

The readonly role.

func (ReadonlyRoleWithMFAOutput) ElementType 

func (ReadonlyRoleWithMFAOutput) ElementType() reflect.Type

func (ReadonlyRoleWithMFAOutput) Name 

func (o ReadonlyRoleWithMFAOutput) Name() pulumi.StringPtrOutput

IAM role with readonly access.

func (ReadonlyRoleWithMFAOutput) Path 

func (o ReadonlyRoleWithMFAOutput) Path() pulumi.StringPtrOutput

Path of readonly IAM role. Defaults to '/'.

func (ReadonlyRoleWithMFAOutput) PermissionsBoundaryArn 

func (o ReadonlyRoleWithMFAOutput) PermissionsBoundaryArn() pulumi.StringPtrOutput

Permissions boundary ARN to use for readonly role.

func (ReadonlyRoleWithMFAOutput) PolicyArns 

func (o ReadonlyRoleWithMFAOutput) PolicyArns() pulumi.StringArrayOutput

List of policy ARNs to use for readonly role.

func (ReadonlyRoleWithMFAOutput) RequiresMfa 

func (o ReadonlyRoleWithMFAOutput) RequiresMfa() pulumi.BoolPtrOutput

Whether admin role requires MFA.

func (ReadonlyRoleWithMFAOutput) Tags 

func (o ReadonlyRoleWithMFAOutput) Tags() pulumi.StringMapOutput

A map of tags to add.

func (ReadonlyRoleWithMFAOutput) ToReadonlyRoleWithMFAOutput 

func (o ReadonlyRoleWithMFAOutput) ToReadonlyRoleWithMFAOutput() ReadonlyRoleWithMFAOutput

func (ReadonlyRoleWithMFAOutput) ToReadonlyRoleWithMFAOutputWithContext 

func (o ReadonlyRoleWithMFAOutput) ToReadonlyRoleWithMFAOutputWithContext(ctx context.Context) ReadonlyRoleWithMFAOutput

func (ReadonlyRoleWithMFAOutput) ToReadonlyRoleWithMFAPtrOutput 

func (o ReadonlyRoleWithMFAOutput) ToReadonlyRoleWithMFAPtrOutput() ReadonlyRoleWithMFAPtrOutput

func (ReadonlyRoleWithMFAOutput) ToReadonlyRoleWithMFAPtrOutputWithContext 

func (o ReadonlyRoleWithMFAOutput) ToReadonlyRoleWithMFAPtrOutputWithContext(ctx context.Context) ReadonlyRoleWithMFAPtrOutput

type ReadonlyRoleWithMFAPtrInput 

type ReadonlyRoleWithMFAPtrInput interface {
	pulumi.Input

	ToReadonlyRoleWithMFAPtrOutput() ReadonlyRoleWithMFAPtrOutput
	ToReadonlyRoleWithMFAPtrOutputWithContext(context.Context) ReadonlyRoleWithMFAPtrOutput
}

ReadonlyRoleWithMFAPtrInput is an input type that accepts ReadonlyRoleWithMFAArgs, ReadonlyRoleWithMFAPtr and ReadonlyRoleWithMFAPtrOutput values. You can construct a concrete instance of `ReadonlyRoleWithMFAPtrInput` via: 

        ReadonlyRoleWithMFAArgs{...}

or:

        nil

func ReadonlyRoleWithMFAPtr 

func ReadonlyRoleWithMFAPtr(v *ReadonlyRoleWithMFAArgs) ReadonlyRoleWithMFAPtrInput

type ReadonlyRoleWithMFAPtrOutput 

type ReadonlyRoleWithMFAPtrOutput struct{ *pulumi.OutputState }

func (ReadonlyRoleWithMFAPtrOutput) Elem 

func (o ReadonlyRoleWithMFAPtrOutput) Elem() ReadonlyRoleWithMFAOutput

func (ReadonlyRoleWithMFAPtrOutput) ElementType 

func (ReadonlyRoleWithMFAPtrOutput) ElementType() reflect.Type

func (ReadonlyRoleWithMFAPtrOutput) Name 

func (o ReadonlyRoleWithMFAPtrOutput) Name() pulumi.StringPtrOutput

IAM role with readonly access.

func (ReadonlyRoleWithMFAPtrOutput) Path 

func (o ReadonlyRoleWithMFAPtrOutput) Path() pulumi.StringPtrOutput

Path of readonly IAM role. Defaults to '/'.

func (ReadonlyRoleWithMFAPtrOutput) PermissionsBoundaryArn 

func (o ReadonlyRoleWithMFAPtrOutput) PermissionsBoundaryArn() pulumi.StringPtrOutput

Permissions boundary ARN to use for readonly role.

func (ReadonlyRoleWithMFAPtrOutput) PolicyArns 

func (o ReadonlyRoleWithMFAPtrOutput) PolicyArns() pulumi.StringArrayOutput

List of policy ARNs to use for readonly role.

func (ReadonlyRoleWithMFAPtrOutput) RequiresMfa 

func (o ReadonlyRoleWithMFAPtrOutput) RequiresMfa() pulumi.BoolPtrOutput

Whether admin role requires MFA.

func (ReadonlyRoleWithMFAPtrOutput) Tags 

func (o ReadonlyRoleWithMFAPtrOutput) Tags() pulumi.StringMapOutput

A map of tags to add.

func (ReadonlyRoleWithMFAPtrOutput) ToReadonlyRoleWithMFAPtrOutput 

func (o ReadonlyRoleWithMFAPtrOutput) ToReadonlyRoleWithMFAPtrOutput() ReadonlyRoleWithMFAPtrOutput

func (ReadonlyRoleWithMFAPtrOutput) ToReadonlyRoleWithMFAPtrOutputWithContext 

func (o ReadonlyRoleWithMFAPtrOutput) ToReadonlyRoleWithMFAPtrOutputWithContext(ctx context.Context) ReadonlyRoleWithMFAPtrOutput

type Role 

type Role struct {
	// IAM role name.
	Name *string `pulumi:"name"`
	// IAM role name prefix.
	NamePrefix *string `pulumi:"namePrefix"`
	// Path of admin IAM role. Defaults to '/'.
	Path *string `pulumi:"path"`
	// Permissions boundary ARN to use for the role.
	PermissionsBoundaryArn *string `pulumi:"permissionsBoundaryArn"`
	// List of policy ARNs to use for the role.
	PolicyArns []string `pulumi:"policyArns"`
}

An IAM role.

type RoleArgs 

type RoleArgs struct {
	// IAM role name.
	Name pulumi.StringPtrInput `pulumi:"name"`
	// IAM role name prefix.
	NamePrefix pulumi.StringPtrInput `pulumi:"namePrefix"`
	// Path of admin IAM role. Defaults to '/'.
	Path pulumi.StringPtrInput `pulumi:"path"`
	// Permissions boundary ARN to use for the role.
	PermissionsBoundaryArn pulumi.StringPtrInput `pulumi:"permissionsBoundaryArn"`
	// List of policy ARNs to use for the role.
	PolicyArns pulumi.StringArrayInput `pulumi:"policyArns"`
}

An IAM role.

func (RoleArgs) ElementType 

func (RoleArgs) ElementType() reflect.Type

func (RoleArgs) ToRoleOutput 

func (i RoleArgs) ToRoleOutput() RoleOutput

func (RoleArgs) ToRoleOutputWithContext 

func (i RoleArgs) ToRoleOutputWithContext(ctx context.Context) RoleOutput

func (RoleArgs) ToRolePtrOutput 

func (i RoleArgs) ToRolePtrOutput() RolePtrOutput

func (RoleArgs) ToRolePtrOutputWithContext 

func (i RoleArgs) ToRolePtrOutputWithContext(ctx context.Context) RolePtrOutput

type RoleForServiceAccountsEks 

type RoleForServiceAccountsEks struct {
	pulumi.ResourceState

	Role pulumi.StringMapOutput `pulumi:"role"`
}

This resources helps you create an IAM role which can be assumed by AWS EKS ServiceAccounts with optional policies for commonly used controllers/custom resources within EKS. The optional policies you can specify are:

- Cert-Manager - Cluster Autoscaler - EBS CSI Driver - EFS CSI Driver - External DNS - External Secrets - FSx for Lustre CSI Driver - Karpenter - Load Balancer Controller - Load Balancer Controller Target Group Binding Only - App Mesh Controller - App Mesh Envoy Proxy - Managed Service for Prometheus - Node Termination Handler - Velero - VPC CNI

## Example Usage ## VPC CNI

```go package main

import ( 

iam "github.com/pulumi/pulumi-aws-iam/sdk/go/aws-iam"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
    pulumi.Run(func(ctx *pulumi.Context) error {
        roleForServiceAccountsEKS, err := iam.NewRoleForServiceAccountsEks(ctx, "role-for-service-accounts-eks", &iam.RoleForServiceAccountsEksArgs{
            Role: iam.EKSServiceAccountRolePtr(&iam.EKSServiceAccountRoleArgs{
                Name: pulumi.String("vpc-cni"),
            }),
            Tags: pulumi.ToStringMap(map[string]string{
                "Name": "vpc-cni-irsa",
            }),
            OidcProviders: iam.OIDCProviderMap{
                "main": iam.OIDCProviderArgs{
                    ProviderArn:              pulumi.String("arn:aws:iam::012345678901:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/5C54DDF35ER19312844C7333374CC09D"),
                    NamespaceServiceAccounts: pulumi.ToStringArray([]string{"default:my-app", "canary:my-app"}),
                },
            },
            Policies: iam.EKSRolePoliciesPtr(&iam.EKSRolePoliciesArgs{
                VpnCni: iam.EKSVPNCNIPolicyPtr(&iam.EKSVPNCNIPolicyArgs{
                    Attach:     pulumi.Bool(true),
                    EnableIpv4: pulumi.BoolPtr(true),
                }),
            }),
        })
        if err != nil {
            return err
        }

        ctx.Export("roleForServiceAccountsEKS", roleForServiceAccountsEKS)

        return nil
    })
}

``` {{ /example }}

func NewRoleForServiceAccountsEks 

func NewRoleForServiceAccountsEks(ctx *pulumi.Context,
	name string, args *RoleForServiceAccountsEksArgs, opts ...pulumi.ResourceOption) (*RoleForServiceAccountsEks, error)

NewRoleForServiceAccountsEks registers a new resource with the given unique name, arguments, and options.

func (*RoleForServiceAccountsEks) ElementType 

func (*RoleForServiceAccountsEks) ElementType() reflect.Type

func (*RoleForServiceAccountsEks) ToRoleForServiceAccountsEksOutput 

func (i *RoleForServiceAccountsEks) ToRoleForServiceAccountsEksOutput() RoleForServiceAccountsEksOutput

func (*RoleForServiceAccountsEks) ToRoleForServiceAccountsEksOutputWithContext 

func (i *RoleForServiceAccountsEks) ToRoleForServiceAccountsEksOutputWithContext(ctx context.Context) RoleForServiceAccountsEksOutput

type RoleForServiceAccountsEksArgs 

type RoleForServiceAccountsEksArgs struct {
	// Name of the IAM condition operator to evaluate when assuming the role.
	AssumeRoleConditionTest pulumi.StringPtrInput
	// Whether policies should be detached from this role when destroying.
	ForceDetachPolicies pulumi.BoolPtrInput
	// Maximum CLI/API session duration in seconds between 3600 and 43200.
	MaxSessionDuration pulumi.IntPtrInput
	// Map of OIDC providers.
	OidcProviders OIDCProviderMapInput
	Policies      EKSRolePoliciesPtrInput
	// IAM policy name prefix.
	PolicyNamePrefix pulumi.StringPtrInput
	Role             EKSServiceAccountRolePtrInput
	// A map of tags to add.
	Tags pulumi.StringMapInput
}

The set of arguments for constructing a RoleForServiceAccountsEks resource.

func (RoleForServiceAccountsEksArgs) ElementType 

func (RoleForServiceAccountsEksArgs) ElementType() reflect.Type

type RoleForServiceAccountsEksArray 

type RoleForServiceAccountsEksArray []RoleForServiceAccountsEksInput

func (RoleForServiceAccountsEksArray) ElementType 

func (RoleForServiceAccountsEksArray) ElementType() reflect.Type

func (RoleForServiceAccountsEksArray) ToRoleForServiceAccountsEksArrayOutput 

func (i RoleForServiceAccountsEksArray) ToRoleForServiceAccountsEksArrayOutput() RoleForServiceAccountsEksArrayOutput

func (RoleForServiceAccountsEksArray) ToRoleForServiceAccountsEksArrayOutputWithContext 

func (i RoleForServiceAccountsEksArray) ToRoleForServiceAccountsEksArrayOutputWithContext(ctx context.Context) RoleForServiceAccountsEksArrayOutput

type RoleForServiceAccountsEksArrayInput 

type RoleForServiceAccountsEksArrayInput interface {
	pulumi.Input

	ToRoleForServiceAccountsEksArrayOutput() RoleForServiceAccountsEksArrayOutput
	ToRoleForServiceAccountsEksArrayOutputWithContext(context.Context) RoleForServiceAccountsEksArrayOutput
}

RoleForServiceAccountsEksArrayInput is an input type that accepts RoleForServiceAccountsEksArray and RoleForServiceAccountsEksArrayOutput values. You can construct a concrete instance of `RoleForServiceAccountsEksArrayInput` via: 

RoleForServiceAccountsEksArray{ RoleForServiceAccountsEksArgs{...} }

type RoleForServiceAccountsEksArrayOutput 

type RoleForServiceAccountsEksArrayOutput struct{ *pulumi.OutputState }

func (RoleForServiceAccountsEksArrayOutput) ElementType 

func (RoleForServiceAccountsEksArrayOutput) ElementType() reflect.Type

func (RoleForServiceAccountsEksArrayOutput) Index 

func (o RoleForServiceAccountsEksArrayOutput) Index(i pulumi.IntInput) RoleForServiceAccountsEksOutput

func (RoleForServiceAccountsEksArrayOutput) ToRoleForServiceAccountsEksArrayOutput 

func (o RoleForServiceAccountsEksArrayOutput) ToRoleForServiceAccountsEksArrayOutput() RoleForServiceAccountsEksArrayOutput

func (RoleForServiceAccountsEksArrayOutput) ToRoleForServiceAccountsEksArrayOutputWithContext 

func (o RoleForServiceAccountsEksArrayOutput) ToRoleForServiceAccountsEksArrayOutputWithContext(ctx context.Context) RoleForServiceAccountsEksArrayOutput

type RoleForServiceAccountsEksInput 

type RoleForServiceAccountsEksInput interface {
	pulumi.Input

	ToRoleForServiceAccountsEksOutput() RoleForServiceAccountsEksOutput
	ToRoleForServiceAccountsEksOutputWithContext(ctx context.Context) RoleForServiceAccountsEksOutput
}

type RoleForServiceAccountsEksMap 

type RoleForServiceAccountsEksMap map[string]RoleForServiceAccountsEksInput

func (RoleForServiceAccountsEksMap) ElementType 

func (RoleForServiceAccountsEksMap) ElementType() reflect.Type

func (RoleForServiceAccountsEksMap) ToRoleForServiceAccountsEksMapOutput 

func (i RoleForServiceAccountsEksMap) ToRoleForServiceAccountsEksMapOutput() RoleForServiceAccountsEksMapOutput

func (RoleForServiceAccountsEksMap) ToRoleForServiceAccountsEksMapOutputWithContext 

func (i RoleForServiceAccountsEksMap) ToRoleForServiceAccountsEksMapOutputWithContext(ctx context.Context) RoleForServiceAccountsEksMapOutput

type RoleForServiceAccountsEksMapInput 

type RoleForServiceAccountsEksMapInput interface {
	pulumi.Input

	ToRoleForServiceAccountsEksMapOutput() RoleForServiceAccountsEksMapOutput
	ToRoleForServiceAccountsEksMapOutputWithContext(context.Context) RoleForServiceAccountsEksMapOutput
}

RoleForServiceAccountsEksMapInput is an input type that accepts RoleForServiceAccountsEksMap and RoleForServiceAccountsEksMapOutput values. You can construct a concrete instance of `RoleForServiceAccountsEksMapInput` via: 

RoleForServiceAccountsEksMap{ "key": RoleForServiceAccountsEksArgs{...} }

type RoleForServiceAccountsEksMapOutput 

type RoleForServiceAccountsEksMapOutput struct{ *pulumi.OutputState }

func (RoleForServiceAccountsEksMapOutput) ElementType 

func (RoleForServiceAccountsEksMapOutput) ElementType() reflect.Type

func (RoleForServiceAccountsEksMapOutput) MapIndex 

func (o RoleForServiceAccountsEksMapOutput) MapIndex(k pulumi.StringInput) RoleForServiceAccountsEksOutput

func (RoleForServiceAccountsEksMapOutput) ToRoleForServiceAccountsEksMapOutput 

func (o RoleForServiceAccountsEksMapOutput) ToRoleForServiceAccountsEksMapOutput() RoleForServiceAccountsEksMapOutput

func (RoleForServiceAccountsEksMapOutput) ToRoleForServiceAccountsEksMapOutputWithContext 

func (o RoleForServiceAccountsEksMapOutput) ToRoleForServiceAccountsEksMapOutputWithContext(ctx context.Context) RoleForServiceAccountsEksMapOutput

type RoleForServiceAccountsEksOutput 

type RoleForServiceAccountsEksOutput struct{ *pulumi.OutputState }

func (RoleForServiceAccountsEksOutput) ElementType 

func (RoleForServiceAccountsEksOutput) ElementType() reflect.Type

func (RoleForServiceAccountsEksOutput) Role 

func (o RoleForServiceAccountsEksOutput) Role() pulumi.StringMapOutput

func (RoleForServiceAccountsEksOutput) ToRoleForServiceAccountsEksOutput 

func (o RoleForServiceAccountsEksOutput) ToRoleForServiceAccountsEksOutput() RoleForServiceAccountsEksOutput

func (RoleForServiceAccountsEksOutput) ToRoleForServiceAccountsEksOutputWithContext 

func (o RoleForServiceAccountsEksOutput) ToRoleForServiceAccountsEksOutputWithContext(ctx context.Context) RoleForServiceAccountsEksOutput

type RoleInput 

type RoleInput interface {
	pulumi.Input

	ToRoleOutput() RoleOutput
	ToRoleOutputWithContext(context.Context) RoleOutput
}

RoleInput is an input type that accepts RoleArgs and RoleOutput values. You can construct a concrete instance of `RoleInput` via: 

RoleArgs{...}

type RoleOutput 

type RoleOutput struct{ *pulumi.OutputState }

An IAM role.

func (RoleOutput) ElementType 

func (RoleOutput) ElementType() reflect.Type

func (RoleOutput) Name 

func (o RoleOutput) Name() pulumi.StringPtrOutput

IAM role name.

func (RoleOutput) NamePrefix 

func (o RoleOutput) NamePrefix() pulumi.StringPtrOutput

IAM role name prefix.

func (RoleOutput) Path 

func (o RoleOutput) Path() pulumi.StringPtrOutput

Path of admin IAM role. Defaults to '/'.

func (RoleOutput) PermissionsBoundaryArn 

func (o RoleOutput) PermissionsBoundaryArn() pulumi.StringPtrOutput

Permissions boundary ARN to use for the role.

func (RoleOutput) PolicyArns 

func (o RoleOutput) PolicyArns() pulumi.StringArrayOutput

List of policy ARNs to use for the role.

func (RoleOutput) ToRoleOutput 

func (o RoleOutput) ToRoleOutput() RoleOutput

func (RoleOutput) ToRoleOutputWithContext 

func (o RoleOutput) ToRoleOutputWithContext(ctx context.Context) RoleOutput

func (RoleOutput) ToRolePtrOutput 

func (o RoleOutput) ToRolePtrOutput() RolePtrOutput

func (RoleOutput) ToRolePtrOutputWithContext 

func (o RoleOutput) ToRolePtrOutputWithContext(ctx context.Context) RolePtrOutput

type RolePtrInput 

type RolePtrInput interface {
	pulumi.Input

	ToRolePtrOutput() RolePtrOutput
	ToRolePtrOutputWithContext(context.Context) RolePtrOutput
}

RolePtrInput is an input type that accepts RoleArgs, RolePtr and RolePtrOutput values. You can construct a concrete instance of `RolePtrInput` via: 

        RoleArgs{...}

or:

        nil

func RolePtr 

func RolePtr(v *RoleArgs) RolePtrInput

type RolePtrOutput 

type RolePtrOutput struct{ *pulumi.OutputState }

func (RolePtrOutput) Elem 

func (o RolePtrOutput) Elem() RoleOutput

func (RolePtrOutput) ElementType 

func (RolePtrOutput) ElementType() reflect.Type

func (RolePtrOutput) Name 

func (o RolePtrOutput) Name() pulumi.StringPtrOutput

IAM role name.

func (RolePtrOutput) NamePrefix 

func (o RolePtrOutput) NamePrefix() pulumi.StringPtrOutput

IAM role name prefix.

func (RolePtrOutput) Path 

func (o RolePtrOutput) Path() pulumi.StringPtrOutput

Path of admin IAM role. Defaults to '/'.

func (RolePtrOutput) PermissionsBoundaryArn 

func (o RolePtrOutput) PermissionsBoundaryArn() pulumi.StringPtrOutput

Permissions boundary ARN to use for the role.

func (RolePtrOutput) PolicyArns 

func (o RolePtrOutput) PolicyArns() pulumi.StringArrayOutput

List of policy ARNs to use for the role.

func (RolePtrOutput) ToRolePtrOutput 

func (o RolePtrOutput) ToRolePtrOutput() RolePtrOutput

func (RolePtrOutput) ToRolePtrOutputWithContext 

func (o RolePtrOutput) ToRolePtrOutputWithContext(ctx context.Context) RolePtrOutput

type RoleWithMFA 

type RoleWithMFA struct {
	// IAM role with the access. Defaults to 'admin'.
	Name *string `pulumi:"name"`
	// Path of the IAM role. Defaults to '/'.
	Path *string `pulumi:"path"`
	// Permissions boundary ARN to use for the role.
	PermissionsBoundaryArn *string `pulumi:"permissionsBoundaryArn"`
	// List of policy ARNs to use for the role.
	PolicyArns []string `pulumi:"policyArns"`
	// Whether the role requires MFA.
	RequiresMfa *bool `pulumi:"requiresMfa"`
	// A map of tags to add.
	Tags map[string]string `pulumi:"tags"`
}

An IAM role that requires MFA.

type RoleWithMFAArgs 

type RoleWithMFAArgs struct {
	// IAM role with the access. Defaults to 'admin'.
	Name pulumi.StringPtrInput `pulumi:"name"`
	// Path of the IAM role. Defaults to '/'.
	Path pulumi.StringPtrInput `pulumi:"path"`
	// Permissions boundary ARN to use for the role.
	PermissionsBoundaryArn pulumi.StringPtrInput `pulumi:"permissionsBoundaryArn"`
	// List of policy ARNs to use for the role.
	PolicyArns pulumi.StringArrayInput `pulumi:"policyArns"`
	// Whether the role requires MFA.
	RequiresMfa pulumi.BoolPtrInput `pulumi:"requiresMfa"`
	// A map of tags to add.
	Tags pulumi.StringMapInput `pulumi:"tags"`
}

An IAM role that requires MFA.

func (RoleWithMFAArgs) ElementType 

func (RoleWithMFAArgs) ElementType() reflect.Type

func (RoleWithMFAArgs) ToRoleWithMFAOutput 

func (i RoleWithMFAArgs) ToRoleWithMFAOutput() RoleWithMFAOutput

func (RoleWithMFAArgs) ToRoleWithMFAOutputWithContext 

func (i RoleWithMFAArgs) ToRoleWithMFAOutputWithContext(ctx context.Context) RoleWithMFAOutput

func (RoleWithMFAArgs) ToRoleWithMFAPtrOutput 

func (i RoleWithMFAArgs) ToRoleWithMFAPtrOutput() RoleWithMFAPtrOutput

func (RoleWithMFAArgs) ToRoleWithMFAPtrOutputWithContext 

func (i RoleWithMFAArgs) ToRoleWithMFAPtrOutputWithContext(ctx context.Context) RoleWithMFAPtrOutput

type RoleWithMFAInput 

type RoleWithMFAInput interface {
	pulumi.Input

	ToRoleWithMFAOutput() RoleWithMFAOutput
	ToRoleWithMFAOutputWithContext(context.Context) RoleWithMFAOutput
}

RoleWithMFAInput is an input type that accepts RoleWithMFAArgs and RoleWithMFAOutput values. You can construct a concrete instance of `RoleWithMFAInput` via: 

RoleWithMFAArgs{...}

type RoleWithMFAOutput 

type RoleWithMFAOutput struct{ *pulumi.OutputState }

An IAM role that requires MFA.

func (RoleWithMFAOutput) ElementType 

func (RoleWithMFAOutput) ElementType() reflect.Type

func (RoleWithMFAOutput) Name 

func (o RoleWithMFAOutput) Name() pulumi.StringPtrOutput

IAM role with the access. Defaults to 'admin'.

func (RoleWithMFAOutput) Path 

func (o RoleWithMFAOutput) Path() pulumi.StringPtrOutput

Path of the IAM role. Defaults to '/'.

func (RoleWithMFAOutput) PermissionsBoundaryArn 

func (o RoleWithMFAOutput) PermissionsBoundaryArn() pulumi.StringPtrOutput

Permissions boundary ARN to use for the role.

func (RoleWithMFAOutput) PolicyArns 

func (o RoleWithMFAOutput) PolicyArns() pulumi.StringArrayOutput

List of policy ARNs to use for the role.

func (RoleWithMFAOutput) RequiresMfa 

func (o RoleWithMFAOutput) RequiresMfa() pulumi.BoolPtrOutput

Whether the role requires MFA.

func (RoleWithMFAOutput) Tags 

func (o RoleWithMFAOutput) Tags() pulumi.StringMapOutput

A map of tags to add.

func (RoleWithMFAOutput) ToRoleWithMFAOutput 

func (o RoleWithMFAOutput) ToRoleWithMFAOutput() RoleWithMFAOutput

func (RoleWithMFAOutput) ToRoleWithMFAOutputWithContext 

func (o RoleWithMFAOutput) ToRoleWithMFAOutputWithContext(ctx context.Context) RoleWithMFAOutput

func (RoleWithMFAOutput) ToRoleWithMFAPtrOutput 

func (o RoleWithMFAOutput) ToRoleWithMFAPtrOutput() RoleWithMFAPtrOutput

func (RoleWithMFAOutput) ToRoleWithMFAPtrOutputWithContext 

func (o RoleWithMFAOutput) ToRoleWithMFAPtrOutputWithContext(ctx context.Context) RoleWithMFAPtrOutput

type RoleWithMFAPtrInput 

type RoleWithMFAPtrInput interface {
	pulumi.Input

	ToRoleWithMFAPtrOutput() RoleWithMFAPtrOutput
	ToRoleWithMFAPtrOutputWithContext(context.Context) RoleWithMFAPtrOutput
}

RoleWithMFAPtrInput is an input type that accepts RoleWithMFAArgs, RoleWithMFAPtr and RoleWithMFAPtrOutput values. You can construct a concrete instance of `RoleWithMFAPtrInput` via: 

        RoleWithMFAArgs{...}

or:

        nil

func RoleWithMFAPtr 

func RoleWithMFAPtr(v *RoleWithMFAArgs) RoleWithMFAPtrInput

type RoleWithMFAPtrOutput 

type RoleWithMFAPtrOutput struct{ *pulumi.OutputState }

func (RoleWithMFAPtrOutput) Elem 

func (o RoleWithMFAPtrOutput) Elem() RoleWithMFAOutput

func (RoleWithMFAPtrOutput) ElementType 

func (RoleWithMFAPtrOutput) ElementType() reflect.Type

func (RoleWithMFAPtrOutput) Name 

func (o RoleWithMFAPtrOutput) Name() pulumi.StringPtrOutput

IAM role with the access. Defaults to 'admin'.

func (RoleWithMFAPtrOutput) Path 

func (o RoleWithMFAPtrOutput) Path() pulumi.StringPtrOutput

Path of the IAM role. Defaults to '/'.

func (RoleWithMFAPtrOutput) PermissionsBoundaryArn 

func (o RoleWithMFAPtrOutput) PermissionsBoundaryArn() pulumi.StringPtrOutput

Permissions boundary ARN to use for the role.

func (RoleWithMFAPtrOutput) PolicyArns 

func (o RoleWithMFAPtrOutput) PolicyArns() pulumi.StringArrayOutput

List of policy ARNs to use for the role.

func (RoleWithMFAPtrOutput) RequiresMfa 

func (o RoleWithMFAPtrOutput) RequiresMfa() pulumi.BoolPtrOutput

Whether the role requires MFA.

func (RoleWithMFAPtrOutput) Tags 

func (o RoleWithMFAPtrOutput) Tags() pulumi.StringMapOutput

A map of tags to add.

func (RoleWithMFAPtrOutput) ToRoleWithMFAPtrOutput 

func (o RoleWithMFAPtrOutput) ToRoleWithMFAPtrOutput() RoleWithMFAPtrOutput

func (RoleWithMFAPtrOutput) ToRoleWithMFAPtrOutputWithContext 

func (o RoleWithMFAPtrOutput) ToRoleWithMFAPtrOutputWithContext(ctx context.Context) RoleWithMFAPtrOutput

type User 

type User struct {
	pulumi.ResourceState

	// The IAM access key.
	AccessKey AccessKeyOutputOutput `pulumi:"accessKey"`
	Keybase   KeybaseOutputOutput   `pulumi:"keybase"`
	// PGP key used to encrypt sensitive data for this user (if empty - secrets are not encrypted).
	PgpKey pulumi.StringOutput `pulumi:"pgpKey"`
	// The IAM user.
	UserInfo UserOutputTypeOutput `pulumi:"userInfo"`
}

This resources helps you create an IAM User, Login Profile, and Access Key. Additionally you can optionally upload an IAM SSH User Public Key.

## Example Usage ### User

```go package main

import ( 

iam "github.com/pulumi/pulumi-aws-iam/sdk/go/aws-iam"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
    pulumi.Run(func(ctx *pulumi.Context) error {
        user, err := iam.NewUser(ctx, "user", &iam.UserArgs{
            Name:                  pulumi.String("pulumipus"),
            ForceDestroy:          pulumi.BoolPtr(true),
            PgpKey:                pulumi.String("keybase:test"),
            PasswordResetRequired: pulumi.BoolPtr(false),
        })
        if err != nil {
            return err
        }

        ctx.Export("user", user)

        return nil
    })
}

``` {{ /example }}

func NewUser 

func NewUser(ctx *pulumi.Context,
	name string, args *UserArgs, opts ...pulumi.ResourceOption) (*User, error)

NewUser registers a new resource with the given unique name, arguments, and options.

func (*User) ElementType 

func (*User) ElementType() reflect.Type

func (*User) ToUserOutput 

func (i *User) ToUserOutput() UserOutput

func (*User) ToUserOutputWithContext 

func (i *User) ToUserOutputWithContext(ctx context.Context) UserOutput

type UserArgs 

type UserArgs struct {
	// When destroying this user, destroy even if it has non-Pulumi-managed IAM access keys, login profile or MFA devices. Without forceDestroy a user with non-Pulumi-managed access keys and login profile will fail to be destroyed.
	ForceDestroy pulumi.BoolPtrInput
	// Desired name for the IAM user.
	Name pulumi.StringInput
	// The length of the generated password
	PasswordLength pulumi.IntPtrInput
	// Whether the user should be forced to reset the generated password on first login.
	PasswordResetRequired pulumi.BoolPtrInput
	// Desired path for the IAM user.
	Path pulumi.StringPtrInput
	// The ARN of the policy that is used to set the permissions boundary for the user.
	PermissionsBoundary pulumi.StringPtrInput
	// Either a base-64 encoded PGP public key, or a keybase username in the form `keybase:username`. Used to encrypt password and access key.
	PgpKey pulumi.StringPtrInput
	// Specifies the public key encoding format to use in the response. To retrieve the public key in ssh-rsa format, use SSH. To retrieve the public key in PEM format, use PEM.
	SshKeyEncoding pulumi.StringPtrInput
	// The SSH public key. The public key must be encoded in ssh-rsa format or PEM format.
	SshPublicKey pulumi.StringPtrInput
	// A map of tags to add.
	Tags pulumi.StringMapInput
	// Whether to upload a public ssh key to the IAM user.
	UploadIamUserSshKey pulumi.BoolPtrInput
}

The set of arguments for constructing a User resource.

func (UserArgs) ElementType 

func (UserArgs) ElementType() reflect.Type

type UserArray 

type UserArray []UserInput

func (UserArray) ElementType 

func (UserArray) ElementType() reflect.Type

func (UserArray) ToUserArrayOutput 

func (i UserArray) ToUserArrayOutput() UserArrayOutput

func (UserArray) ToUserArrayOutputWithContext 

func (i UserArray) ToUserArrayOutputWithContext(ctx context.Context) UserArrayOutput

type UserArrayInput 

type UserArrayInput interface {
	pulumi.Input

	ToUserArrayOutput() UserArrayOutput
	ToUserArrayOutputWithContext(context.Context) UserArrayOutput
}

UserArrayInput is an input type that accepts UserArray and UserArrayOutput values. You can construct a concrete instance of `UserArrayInput` via: 

UserArray{ UserArgs{...} }

type UserArrayOutput 

type UserArrayOutput struct{ *pulumi.OutputState }

func (UserArrayOutput) ElementType 

func (UserArrayOutput) ElementType() reflect.Type

func (UserArrayOutput) Index 

func (o UserArrayOutput) Index(i pulumi.IntInput) UserOutput

func (UserArrayOutput) ToUserArrayOutput 

func (o UserArrayOutput) ToUserArrayOutput() UserArrayOutput

func (UserArrayOutput) ToUserArrayOutputWithContext 

func (o UserArrayOutput) ToUserArrayOutputWithContext(ctx context.Context) UserArrayOutput

type UserInput 

type UserInput interface {
	pulumi.Input

	ToUserOutput() UserOutput
	ToUserOutputWithContext(ctx context.Context) UserOutput
}

type UserMap 

type UserMap map[string]UserInput

func (UserMap) ElementType 

func (UserMap) ElementType() reflect.Type

func (UserMap) ToUserMapOutput 

func (i UserMap) ToUserMapOutput() UserMapOutput

func (UserMap) ToUserMapOutputWithContext 

func (i UserMap) ToUserMapOutputWithContext(ctx context.Context) UserMapOutput

type UserMapInput 

type UserMapInput interface {
	pulumi.Input

	ToUserMapOutput() UserMapOutput
	ToUserMapOutputWithContext(context.Context) UserMapOutput
}

UserMapInput is an input type that accepts UserMap and UserMapOutput values. You can construct a concrete instance of `UserMapInput` via: 

UserMap{ "key": UserArgs{...} }

type UserMapOutput 

type UserMapOutput struct{ *pulumi.OutputState }

func (UserMapOutput) ElementType 

func (UserMapOutput) ElementType() reflect.Type

func (UserMapOutput) MapIndex 

func (o UserMapOutput) MapIndex(k pulumi.StringInput) UserOutput

func (UserMapOutput) ToUserMapOutput 

func (o UserMapOutput) ToUserMapOutput() UserMapOutput

func (UserMapOutput) ToUserMapOutputWithContext 

func (o UserMapOutput) ToUserMapOutputWithContext(ctx context.Context) UserMapOutput

type UserOutput 

type UserOutput struct{ *pulumi.OutputState }

func (UserOutput) AccessKey 

func (o UserOutput) AccessKey() AccessKeyOutputOutput

The IAM access key.

func (UserOutput) ElementType 

func (UserOutput) ElementType() reflect.Type

func (UserOutput) Keybase 

func (o UserOutput) Keybase() KeybaseOutputOutput

func (UserOutput) PgpKey 

func (o UserOutput) PgpKey() pulumi.StringOutput

PGP key used to encrypt sensitive data for this user (if empty - secrets are not encrypted).

func (UserOutput) ToUserOutput 

func (o UserOutput) ToUserOutput() UserOutput

func (UserOutput) ToUserOutputWithContext 

func (o UserOutput) ToUserOutputWithContext(ctx context.Context) UserOutput

func (UserOutput) UserInfo 

func (o UserOutput) UserInfo() UserOutputTypeOutput

The IAM user.

type UserOutputType 

type UserOutputType struct {
	// The ARN assigned by AWS for this user.
	Arn string `pulumi:"arn"`
	// The encrypted password, base64 encoded.
	LoginProfileEncryptedPassword *string `pulumi:"loginProfileEncryptedPassword"`
	// The fingerprint of the PGP key used to encrypt the password.
	LoginProfileKeyFingerprint *string `pulumi:"loginProfileKeyFingerprint"`
	// The user password.
	LoginProfilePassword *string `pulumi:"loginProfilePassword"`
	// The user's name.
	Name string `pulumi:"name"`
	// The unique identifier for the SSH public key.
	SshKeyFingerprint *string `pulumi:"sshKeyFingerprint"`
	// The unique identifier for the SSH public key
	SshKeySshPublicKeyId *string `pulumi:"sshKeySshPublicKeyId"`
	// The unique ID assigned by AWS.
	UniqueId string `pulumi:"uniqueId"`
}

The IAM user.

type UserOutputTypeOutput 

type UserOutputTypeOutput struct{ *pulumi.OutputState }

The IAM user.

func (UserOutputTypeOutput) Arn 

func (o UserOutputTypeOutput) Arn() pulumi.StringOutput

The ARN assigned by AWS for this user.

func (UserOutputTypeOutput) ElementType 

func (UserOutputTypeOutput) ElementType() reflect.Type

func (UserOutputTypeOutput) LoginProfileEncryptedPassword 

func (o UserOutputTypeOutput) LoginProfileEncryptedPassword() pulumi.StringPtrOutput

The encrypted password, base64 encoded.

func (UserOutputTypeOutput) LoginProfileKeyFingerprint 

func (o UserOutputTypeOutput) LoginProfileKeyFingerprint() pulumi.StringPtrOutput

The fingerprint of the PGP key used to encrypt the password.

func (UserOutputTypeOutput) LoginProfilePassword 

func (o UserOutputTypeOutput) LoginProfilePassword() pulumi.StringPtrOutput

The user password.

func (UserOutputTypeOutput) Name 

func (o UserOutputTypeOutput) Name() pulumi.StringOutput

The user's name.

func (UserOutputTypeOutput) SshKeyFingerprint 

func (o UserOutputTypeOutput) SshKeyFingerprint() pulumi.StringPtrOutput

The unique identifier for the SSH public key.

func (UserOutputTypeOutput) SshKeySshPublicKeyId 

func (o UserOutputTypeOutput) SshKeySshPublicKeyId() pulumi.StringPtrOutput

The unique identifier for the SSH public key

func (UserOutputTypeOutput) ToUserOutputTypeOutput 

func (o UserOutputTypeOutput) ToUserOutputTypeOutput() UserOutputTypeOutput

func (UserOutputTypeOutput) ToUserOutputTypeOutputWithContext 

func (o UserOutputTypeOutput) ToUserOutputTypeOutputWithContext(ctx context.Context) UserOutputTypeOutput

func (UserOutputTypeOutput) UniqueId 

func (o UserOutputTypeOutput) UniqueId() pulumi.StringOutput

The unique ID assigned by AWS.

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.