privilegedaccessmanager

package
v8.3.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Sep 25, 2024 License: Apache-2.0 Imports: 7 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type Entitlement

type Entitlement struct {
	pulumi.CustomResourceState

	// AdditionalNotificationTargets includes email addresses to be notified.
	AdditionalNotificationTargets EntitlementAdditionalNotificationTargetsPtrOutput `pulumi:"additionalNotificationTargets"`
	// The approvals needed before access will be granted to a requester. No approvals will be needed if this field is null.
	// Different types of approval workflows that can be used to gate privileged access granting.
	ApprovalWorkflow EntitlementApprovalWorkflowPtrOutput `pulumi:"approvalWorkflow"`
	// Output only. Create time stamp. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits.
	// Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z"
	CreateTime pulumi.StringOutput `pulumi:"createTime"`
	// Who can create Grants using Entitlement. This list should contain at most one entry
	// Structure is documented below.
	EligibleUsers EntitlementEligibleUserArrayOutput `pulumi:"eligibleUsers"`
	// The ID to use for this Entitlement. This will become the last part of the resource name.
	// This value should be 4-63 characters, and valid characters are "[a-z]", "[0-9]", and "-". The first character should be from [a-z].
	// This value should be unique among all other Entitlements under the specified `parent`.
	EntitlementId pulumi.StringOutput `pulumi:"entitlementId"`
	// For Resource freshness validation (https://google.aip.dev/154)
	Etag pulumi.StringOutput `pulumi:"etag"`
	// The region of the Entitlement resource.
	Location pulumi.StringOutput `pulumi:"location"`
	// The maximum amount of time for which access would be granted for a request.
	// A requester can choose to ask for access for less than this duration but never more.
	// Format: calculate the time in seconds and concatenate it with 's' i.e. 2 hours = "7200s", 45 minutes = "2700s"
	MaxRequestDuration pulumi.StringOutput `pulumi:"maxRequestDuration"`
	// Output Only. The entitlement's name follows a hierarchical structure, comprising the organization, folder, or project, alongside the region and a unique entitlement ID.
	// Formats: organizations/{organization-number}/locations/{region}/entitlements/{entitlement-id}, folders/{folder-number}/locations/{region}/entitlements/{entitlement-id}, and projects/{project-id|project-number}/locations/{region}/entitlements/{entitlement-id}.
	Name pulumi.StringOutput `pulumi:"name"`
	// Format: projects/{project-id|project-number} or organizations/{organization-number} or folders/{folder-number}
	Parent pulumi.StringOutput `pulumi:"parent"`
	// Privileged access that this service can be used to gate.
	// Structure is documented below.
	PrivilegedAccess EntitlementPrivilegedAccessOutput `pulumi:"privilegedAccess"`
	// Defines the ways in which a requester should provide the justification while requesting for access.
	// Structure is documented below.
	RequesterJustificationConfig EntitlementRequesterJustificationConfigOutput `pulumi:"requesterJustificationConfig"`
	// Output only. The current state of the Entitlement.
	State pulumi.StringOutput `pulumi:"state"`
	// Output only. Update time stamp. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits.
	// Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
}

An Entitlement defines the eligibility of a set of users to obtain a predefined access for some time possibly after going through an approval workflow.

## Example Usage

### Privileged Access Manager Entitlement Basic

```go package main

import (

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/privilegedaccessmanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := privilegedaccessmanager.Newentitlement(ctx, "tfentitlement", &privilegedaccessmanager.entitlementArgs{
			EntitlementId:      pulumi.String("example-entitlement"),
			Location:           pulumi.String("global"),
			MaxRequestDuration: pulumi.String("43200s"),
			Parent:             pulumi.String("projects/my-project-name"),
			RequesterJustificationConfig: &privilegedaccessmanager.EntitlementRequesterJustificationConfigArgs{
				Unstructured: nil,
			},
			EligibleUsers: privilegedaccessmanager.EntitlementEligibleUserArray{
				&privilegedaccessmanager.EntitlementEligibleUserArgs{
					Principals: pulumi.StringArray{
						pulumi.String("group:test@google.com"),
					},
				},
			},
			PrivilegedAccess: &privilegedaccessmanager.EntitlementPrivilegedAccessArgs{
				GcpIamAccess: &privilegedaccessmanager.EntitlementPrivilegedAccessGcpIamAccessArgs{
					RoleBindings: privilegedaccessmanager.EntitlementPrivilegedAccessGcpIamAccessRoleBindingArray{
						&privilegedaccessmanager.EntitlementPrivilegedAccessGcpIamAccessRoleBindingArgs{
							Role:                pulumi.String("roles/storage.admin"),
							ConditionExpression: pulumi.String("request.time < timestamp(\"2024-04-23T18:30:00.000Z\")"),
						},
					},
					Resource:     pulumi.String("//cloudresourcemanager.googleapis.com/projects/my-project-name"),
					ResourceType: pulumi.String("cloudresourcemanager.googleapis.com/Project"),
				},
			},
			AdditionalNotificationTargets: &privilegedaccessmanager.EntitlementAdditionalNotificationTargetsArgs{
				AdminEmailRecipients: pulumi.StringArray{
					pulumi.String("user@example.com"),
				},
				RequesterEmailRecipients: pulumi.StringArray{
					pulumi.String("user@example.com"),
				},
			},
			ApprovalWorkflow: &privilegedaccessmanager.EntitlementApprovalWorkflowArgs{
				ManualApprovals: &privilegedaccessmanager.EntitlementApprovalWorkflowManualApprovalsArgs{
					RequireApproverJustification: pulumi.Bool(true),
					Steps: privilegedaccessmanager.EntitlementApprovalWorkflowManualApprovalsStepArray{
						&privilegedaccessmanager.EntitlementApprovalWorkflowManualApprovalsStepArgs{
							ApprovalsNeeded: pulumi.Int(1),
							ApproverEmailRecipients: pulumi.StringArray{
								pulumi.String("user@example.com"),
							},
							Approvers: &privilegedaccessmanager.EntitlementApprovalWorkflowManualApprovalsStepApproversArgs{
								Principals: pulumi.StringArray{
									pulumi.String("group:test@google.com"),
								},
							},
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Entitlement can be imported using any of these accepted formats:

* `{{parent}}/locations/{{location}}/entitlements/{{entitlement_id}}`

When using the `pulumi import` command, Entitlement can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:privilegedaccessmanager/entitlement:entitlement default {{parent}}/locations/{{location}}/entitlements/{{entitlement_id}} ```

func GetEntitlement

func GetEntitlement(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *EntitlementState, opts ...pulumi.ResourceOption) (*Entitlement, error)

GetEntitlement gets an existing Entitlement resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewEntitlement

func NewEntitlement(ctx *pulumi.Context,
	name string, args *EntitlementArgs, opts ...pulumi.ResourceOption) (*Entitlement, error)

NewEntitlement registers a new resource with the given unique name, arguments, and options.

func (*Entitlement) ElementType

func (*Entitlement) ElementType() reflect.Type

func (*Entitlement) ToEntitlementOutput

func (i *Entitlement) ToEntitlementOutput() EntitlementOutput

func (*Entitlement) ToEntitlementOutputWithContext

func (i *Entitlement) ToEntitlementOutputWithContext(ctx context.Context) EntitlementOutput

type EntitlementAdditionalNotificationTargets

type EntitlementAdditionalNotificationTargets struct {
	// Optional. Additional email addresses to be notified when a principal(requester) is granted access.
	AdminEmailRecipients []string `pulumi:"adminEmailRecipients"`
	// Optional. Additional email address to be notified about an eligible entitlement.
	RequesterEmailRecipients []string `pulumi:"requesterEmailRecipients"`
}

type EntitlementAdditionalNotificationTargetsArgs

type EntitlementAdditionalNotificationTargetsArgs struct {
	// Optional. Additional email addresses to be notified when a principal(requester) is granted access.
	AdminEmailRecipients pulumi.StringArrayInput `pulumi:"adminEmailRecipients"`
	// Optional. Additional email address to be notified about an eligible entitlement.
	RequesterEmailRecipients pulumi.StringArrayInput `pulumi:"requesterEmailRecipients"`
}

func (EntitlementAdditionalNotificationTargetsArgs) ElementType

func (EntitlementAdditionalNotificationTargetsArgs) ToEntitlementAdditionalNotificationTargetsOutput

func (i EntitlementAdditionalNotificationTargetsArgs) ToEntitlementAdditionalNotificationTargetsOutput() EntitlementAdditionalNotificationTargetsOutput

func (EntitlementAdditionalNotificationTargetsArgs) ToEntitlementAdditionalNotificationTargetsOutputWithContext

func (i EntitlementAdditionalNotificationTargetsArgs) ToEntitlementAdditionalNotificationTargetsOutputWithContext(ctx context.Context) EntitlementAdditionalNotificationTargetsOutput

func (EntitlementAdditionalNotificationTargetsArgs) ToEntitlementAdditionalNotificationTargetsPtrOutput

func (i EntitlementAdditionalNotificationTargetsArgs) ToEntitlementAdditionalNotificationTargetsPtrOutput() EntitlementAdditionalNotificationTargetsPtrOutput

func (EntitlementAdditionalNotificationTargetsArgs) ToEntitlementAdditionalNotificationTargetsPtrOutputWithContext

func (i EntitlementAdditionalNotificationTargetsArgs) ToEntitlementAdditionalNotificationTargetsPtrOutputWithContext(ctx context.Context) EntitlementAdditionalNotificationTargetsPtrOutput

type EntitlementAdditionalNotificationTargetsInput

type EntitlementAdditionalNotificationTargetsInput interface {
	pulumi.Input

	ToEntitlementAdditionalNotificationTargetsOutput() EntitlementAdditionalNotificationTargetsOutput
	ToEntitlementAdditionalNotificationTargetsOutputWithContext(context.Context) EntitlementAdditionalNotificationTargetsOutput
}

EntitlementAdditionalNotificationTargetsInput is an input type that accepts EntitlementAdditionalNotificationTargetsArgs and EntitlementAdditionalNotificationTargetsOutput values. You can construct a concrete instance of `EntitlementAdditionalNotificationTargetsInput` via:

EntitlementAdditionalNotificationTargetsArgs{...}

type EntitlementAdditionalNotificationTargetsOutput

type EntitlementAdditionalNotificationTargetsOutput struct{ *pulumi.OutputState }

func (EntitlementAdditionalNotificationTargetsOutput) AdminEmailRecipients

Optional. Additional email addresses to be notified when a principal(requester) is granted access.

func (EntitlementAdditionalNotificationTargetsOutput) ElementType

func (EntitlementAdditionalNotificationTargetsOutput) RequesterEmailRecipients

Optional. Additional email address to be notified about an eligible entitlement.

func (EntitlementAdditionalNotificationTargetsOutput) ToEntitlementAdditionalNotificationTargetsOutput

func (o EntitlementAdditionalNotificationTargetsOutput) ToEntitlementAdditionalNotificationTargetsOutput() EntitlementAdditionalNotificationTargetsOutput

func (EntitlementAdditionalNotificationTargetsOutput) ToEntitlementAdditionalNotificationTargetsOutputWithContext

func (o EntitlementAdditionalNotificationTargetsOutput) ToEntitlementAdditionalNotificationTargetsOutputWithContext(ctx context.Context) EntitlementAdditionalNotificationTargetsOutput

func (EntitlementAdditionalNotificationTargetsOutput) ToEntitlementAdditionalNotificationTargetsPtrOutput

func (o EntitlementAdditionalNotificationTargetsOutput) ToEntitlementAdditionalNotificationTargetsPtrOutput() EntitlementAdditionalNotificationTargetsPtrOutput

func (EntitlementAdditionalNotificationTargetsOutput) ToEntitlementAdditionalNotificationTargetsPtrOutputWithContext

func (o EntitlementAdditionalNotificationTargetsOutput) ToEntitlementAdditionalNotificationTargetsPtrOutputWithContext(ctx context.Context) EntitlementAdditionalNotificationTargetsPtrOutput

type EntitlementAdditionalNotificationTargetsPtrInput

type EntitlementAdditionalNotificationTargetsPtrInput interface {
	pulumi.Input

	ToEntitlementAdditionalNotificationTargetsPtrOutput() EntitlementAdditionalNotificationTargetsPtrOutput
	ToEntitlementAdditionalNotificationTargetsPtrOutputWithContext(context.Context) EntitlementAdditionalNotificationTargetsPtrOutput
}

EntitlementAdditionalNotificationTargetsPtrInput is an input type that accepts EntitlementAdditionalNotificationTargetsArgs, EntitlementAdditionalNotificationTargetsPtr and EntitlementAdditionalNotificationTargetsPtrOutput values. You can construct a concrete instance of `EntitlementAdditionalNotificationTargetsPtrInput` via:

        EntitlementAdditionalNotificationTargetsArgs{...}

or:

        nil

type EntitlementAdditionalNotificationTargetsPtrOutput

type EntitlementAdditionalNotificationTargetsPtrOutput struct{ *pulumi.OutputState }

func (EntitlementAdditionalNotificationTargetsPtrOutput) AdminEmailRecipients

Optional. Additional email addresses to be notified when a principal(requester) is granted access.

func (EntitlementAdditionalNotificationTargetsPtrOutput) Elem

func (EntitlementAdditionalNotificationTargetsPtrOutput) ElementType

func (EntitlementAdditionalNotificationTargetsPtrOutput) RequesterEmailRecipients

Optional. Additional email address to be notified about an eligible entitlement.

func (EntitlementAdditionalNotificationTargetsPtrOutput) ToEntitlementAdditionalNotificationTargetsPtrOutput

func (o EntitlementAdditionalNotificationTargetsPtrOutput) ToEntitlementAdditionalNotificationTargetsPtrOutput() EntitlementAdditionalNotificationTargetsPtrOutput

func (EntitlementAdditionalNotificationTargetsPtrOutput) ToEntitlementAdditionalNotificationTargetsPtrOutputWithContext

func (o EntitlementAdditionalNotificationTargetsPtrOutput) ToEntitlementAdditionalNotificationTargetsPtrOutputWithContext(ctx context.Context) EntitlementAdditionalNotificationTargetsPtrOutput

type EntitlementApprovalWorkflow

type EntitlementApprovalWorkflow struct {
	// A manual approval workflow where users who are designated as approvers need to call the ApproveGrant/DenyGrant APIs for an Grant.
	// The workflow can consist of multiple serial steps where each step defines who can act as Approver in that step and how many of those users should approve before the workflow moves to the next step.
	// This can be used to create approval workflows such as
	// * Require an approval from any user in a group G.
	// * Require an approval from any k number of users from a Group G.
	// * Require an approval from any user in a group G and then from a user U. etc.
	//   A single user might be part of `approvers` ACL for multiple steps in this workflow but they can only approve once and that approval will only be considered to satisfy the approval step at which it was granted.
	//   Structure is documented below.
	ManualApprovals EntitlementApprovalWorkflowManualApprovals `pulumi:"manualApprovals"`
}

type EntitlementApprovalWorkflowArgs

type EntitlementApprovalWorkflowArgs struct {
	// A manual approval workflow where users who are designated as approvers need to call the ApproveGrant/DenyGrant APIs for an Grant.
	// The workflow can consist of multiple serial steps where each step defines who can act as Approver in that step and how many of those users should approve before the workflow moves to the next step.
	// This can be used to create approval workflows such as
	// * Require an approval from any user in a group G.
	// * Require an approval from any k number of users from a Group G.
	// * Require an approval from any user in a group G and then from a user U. etc.
	//   A single user might be part of `approvers` ACL for multiple steps in this workflow but they can only approve once and that approval will only be considered to satisfy the approval step at which it was granted.
	//   Structure is documented below.
	ManualApprovals EntitlementApprovalWorkflowManualApprovalsInput `pulumi:"manualApprovals"`
}

func (EntitlementApprovalWorkflowArgs) ElementType

func (EntitlementApprovalWorkflowArgs) ToEntitlementApprovalWorkflowOutput

func (i EntitlementApprovalWorkflowArgs) ToEntitlementApprovalWorkflowOutput() EntitlementApprovalWorkflowOutput

func (EntitlementApprovalWorkflowArgs) ToEntitlementApprovalWorkflowOutputWithContext

func (i EntitlementApprovalWorkflowArgs) ToEntitlementApprovalWorkflowOutputWithContext(ctx context.Context) EntitlementApprovalWorkflowOutput

func (EntitlementApprovalWorkflowArgs) ToEntitlementApprovalWorkflowPtrOutput

func (i EntitlementApprovalWorkflowArgs) ToEntitlementApprovalWorkflowPtrOutput() EntitlementApprovalWorkflowPtrOutput

func (EntitlementApprovalWorkflowArgs) ToEntitlementApprovalWorkflowPtrOutputWithContext

func (i EntitlementApprovalWorkflowArgs) ToEntitlementApprovalWorkflowPtrOutputWithContext(ctx context.Context) EntitlementApprovalWorkflowPtrOutput

type EntitlementApprovalWorkflowInput

type EntitlementApprovalWorkflowInput interface {
	pulumi.Input

	ToEntitlementApprovalWorkflowOutput() EntitlementApprovalWorkflowOutput
	ToEntitlementApprovalWorkflowOutputWithContext(context.Context) EntitlementApprovalWorkflowOutput
}

EntitlementApprovalWorkflowInput is an input type that accepts EntitlementApprovalWorkflowArgs and EntitlementApprovalWorkflowOutput values. You can construct a concrete instance of `EntitlementApprovalWorkflowInput` via:

EntitlementApprovalWorkflowArgs{...}

type EntitlementApprovalWorkflowManualApprovals

type EntitlementApprovalWorkflowManualApprovals struct {
	// Optional. Do the approvers need to provide a justification for their actions?
	RequireApproverJustification *bool `pulumi:"requireApproverJustification"`
	// List of approval steps in this workflow. These steps would be followed in the specified order sequentially.  1 step is supported for now.
	// Structure is documented below.
	Steps []EntitlementApprovalWorkflowManualApprovalsStep `pulumi:"steps"`
}

type EntitlementApprovalWorkflowManualApprovalsArgs

type EntitlementApprovalWorkflowManualApprovalsArgs struct {
	// Optional. Do the approvers need to provide a justification for their actions?
	RequireApproverJustification pulumi.BoolPtrInput `pulumi:"requireApproverJustification"`
	// List of approval steps in this workflow. These steps would be followed in the specified order sequentially.  1 step is supported for now.
	// Structure is documented below.
	Steps EntitlementApprovalWorkflowManualApprovalsStepArrayInput `pulumi:"steps"`
}

func (EntitlementApprovalWorkflowManualApprovalsArgs) ElementType

func (EntitlementApprovalWorkflowManualApprovalsArgs) ToEntitlementApprovalWorkflowManualApprovalsOutput

func (i EntitlementApprovalWorkflowManualApprovalsArgs) ToEntitlementApprovalWorkflowManualApprovalsOutput() EntitlementApprovalWorkflowManualApprovalsOutput

func (EntitlementApprovalWorkflowManualApprovalsArgs) ToEntitlementApprovalWorkflowManualApprovalsOutputWithContext

func (i EntitlementApprovalWorkflowManualApprovalsArgs) ToEntitlementApprovalWorkflowManualApprovalsOutputWithContext(ctx context.Context) EntitlementApprovalWorkflowManualApprovalsOutput

func (EntitlementApprovalWorkflowManualApprovalsArgs) ToEntitlementApprovalWorkflowManualApprovalsPtrOutput

func (i EntitlementApprovalWorkflowManualApprovalsArgs) ToEntitlementApprovalWorkflowManualApprovalsPtrOutput() EntitlementApprovalWorkflowManualApprovalsPtrOutput

func (EntitlementApprovalWorkflowManualApprovalsArgs) ToEntitlementApprovalWorkflowManualApprovalsPtrOutputWithContext

func (i EntitlementApprovalWorkflowManualApprovalsArgs) ToEntitlementApprovalWorkflowManualApprovalsPtrOutputWithContext(ctx context.Context) EntitlementApprovalWorkflowManualApprovalsPtrOutput

type EntitlementApprovalWorkflowManualApprovalsInput

type EntitlementApprovalWorkflowManualApprovalsInput interface {
	pulumi.Input

	ToEntitlementApprovalWorkflowManualApprovalsOutput() EntitlementApprovalWorkflowManualApprovalsOutput
	ToEntitlementApprovalWorkflowManualApprovalsOutputWithContext(context.Context) EntitlementApprovalWorkflowManualApprovalsOutput
}

EntitlementApprovalWorkflowManualApprovalsInput is an input type that accepts EntitlementApprovalWorkflowManualApprovalsArgs and EntitlementApprovalWorkflowManualApprovalsOutput values. You can construct a concrete instance of `EntitlementApprovalWorkflowManualApprovalsInput` via:

EntitlementApprovalWorkflowManualApprovalsArgs{...}

type EntitlementApprovalWorkflowManualApprovalsOutput

type EntitlementApprovalWorkflowManualApprovalsOutput struct{ *pulumi.OutputState }

func (EntitlementApprovalWorkflowManualApprovalsOutput) ElementType

func (EntitlementApprovalWorkflowManualApprovalsOutput) RequireApproverJustification

Optional. Do the approvers need to provide a justification for their actions?

func (EntitlementApprovalWorkflowManualApprovalsOutput) Steps

List of approval steps in this workflow. These steps would be followed in the specified order sequentially. 1 step is supported for now. Structure is documented below.

func (EntitlementApprovalWorkflowManualApprovalsOutput) ToEntitlementApprovalWorkflowManualApprovalsOutput

func (o EntitlementApprovalWorkflowManualApprovalsOutput) ToEntitlementApprovalWorkflowManualApprovalsOutput() EntitlementApprovalWorkflowManualApprovalsOutput

func (EntitlementApprovalWorkflowManualApprovalsOutput) ToEntitlementApprovalWorkflowManualApprovalsOutputWithContext

func (o EntitlementApprovalWorkflowManualApprovalsOutput) ToEntitlementApprovalWorkflowManualApprovalsOutputWithContext(ctx context.Context) EntitlementApprovalWorkflowManualApprovalsOutput

func (EntitlementApprovalWorkflowManualApprovalsOutput) ToEntitlementApprovalWorkflowManualApprovalsPtrOutput

func (o EntitlementApprovalWorkflowManualApprovalsOutput) ToEntitlementApprovalWorkflowManualApprovalsPtrOutput() EntitlementApprovalWorkflowManualApprovalsPtrOutput

func (EntitlementApprovalWorkflowManualApprovalsOutput) ToEntitlementApprovalWorkflowManualApprovalsPtrOutputWithContext

func (o EntitlementApprovalWorkflowManualApprovalsOutput) ToEntitlementApprovalWorkflowManualApprovalsPtrOutputWithContext(ctx context.Context) EntitlementApprovalWorkflowManualApprovalsPtrOutput

type EntitlementApprovalWorkflowManualApprovalsPtrInput

type EntitlementApprovalWorkflowManualApprovalsPtrInput interface {
	pulumi.Input

	ToEntitlementApprovalWorkflowManualApprovalsPtrOutput() EntitlementApprovalWorkflowManualApprovalsPtrOutput
	ToEntitlementApprovalWorkflowManualApprovalsPtrOutputWithContext(context.Context) EntitlementApprovalWorkflowManualApprovalsPtrOutput
}

EntitlementApprovalWorkflowManualApprovalsPtrInput is an input type that accepts EntitlementApprovalWorkflowManualApprovalsArgs, EntitlementApprovalWorkflowManualApprovalsPtr and EntitlementApprovalWorkflowManualApprovalsPtrOutput values. You can construct a concrete instance of `EntitlementApprovalWorkflowManualApprovalsPtrInput` via:

        EntitlementApprovalWorkflowManualApprovalsArgs{...}

or:

        nil

type EntitlementApprovalWorkflowManualApprovalsPtrOutput

type EntitlementApprovalWorkflowManualApprovalsPtrOutput struct{ *pulumi.OutputState }

func (EntitlementApprovalWorkflowManualApprovalsPtrOutput) Elem

func (EntitlementApprovalWorkflowManualApprovalsPtrOutput) ElementType

func (EntitlementApprovalWorkflowManualApprovalsPtrOutput) RequireApproverJustification

Optional. Do the approvers need to provide a justification for their actions?

func (EntitlementApprovalWorkflowManualApprovalsPtrOutput) Steps

List of approval steps in this workflow. These steps would be followed in the specified order sequentially. 1 step is supported for now. Structure is documented below.

func (EntitlementApprovalWorkflowManualApprovalsPtrOutput) ToEntitlementApprovalWorkflowManualApprovalsPtrOutput

func (o EntitlementApprovalWorkflowManualApprovalsPtrOutput) ToEntitlementApprovalWorkflowManualApprovalsPtrOutput() EntitlementApprovalWorkflowManualApprovalsPtrOutput

func (EntitlementApprovalWorkflowManualApprovalsPtrOutput) ToEntitlementApprovalWorkflowManualApprovalsPtrOutputWithContext

func (o EntitlementApprovalWorkflowManualApprovalsPtrOutput) ToEntitlementApprovalWorkflowManualApprovalsPtrOutputWithContext(ctx context.Context) EntitlementApprovalWorkflowManualApprovalsPtrOutput

type EntitlementApprovalWorkflowManualApprovalsStep

type EntitlementApprovalWorkflowManualApprovalsStep struct {
	// How many users from the above list need to approve.
	// If there are not enough distinct users in the list above then the workflow
	// will indefinitely block. Should always be greater than 0. Currently 1 is the only
	// supported value.
	ApprovalsNeeded *int `pulumi:"approvalsNeeded"`
	// Optional. Additional email addresses to be notified when a grant is pending approval.
	ApproverEmailRecipients []string `pulumi:"approverEmailRecipients"`
	// The potential set of approvers in this step. This list should contain at only one entry.
	// Structure is documented below.
	Approvers EntitlementApprovalWorkflowManualApprovalsStepApprovers `pulumi:"approvers"`
}

type EntitlementApprovalWorkflowManualApprovalsStepApprovers

type EntitlementApprovalWorkflowManualApprovalsStepApprovers struct {
	// Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at: https://cloud.google.com/iam/docs/principal-identifiers#v1
	Principals []string `pulumi:"principals"`
}

type EntitlementApprovalWorkflowManualApprovalsStepApproversArgs

type EntitlementApprovalWorkflowManualApprovalsStepApproversArgs struct {
	// Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at: https://cloud.google.com/iam/docs/principal-identifiers#v1
	Principals pulumi.StringArrayInput `pulumi:"principals"`
}

func (EntitlementApprovalWorkflowManualApprovalsStepApproversArgs) ElementType

func (EntitlementApprovalWorkflowManualApprovalsStepApproversArgs) ToEntitlementApprovalWorkflowManualApprovalsStepApproversOutput

func (EntitlementApprovalWorkflowManualApprovalsStepApproversArgs) ToEntitlementApprovalWorkflowManualApprovalsStepApproversOutputWithContext

func (i EntitlementApprovalWorkflowManualApprovalsStepApproversArgs) ToEntitlementApprovalWorkflowManualApprovalsStepApproversOutputWithContext(ctx context.Context) EntitlementApprovalWorkflowManualApprovalsStepApproversOutput

type EntitlementApprovalWorkflowManualApprovalsStepApproversInput

type EntitlementApprovalWorkflowManualApprovalsStepApproversInput interface {
	pulumi.Input

	ToEntitlementApprovalWorkflowManualApprovalsStepApproversOutput() EntitlementApprovalWorkflowManualApprovalsStepApproversOutput
	ToEntitlementApprovalWorkflowManualApprovalsStepApproversOutputWithContext(context.Context) EntitlementApprovalWorkflowManualApprovalsStepApproversOutput
}

EntitlementApprovalWorkflowManualApprovalsStepApproversInput is an input type that accepts EntitlementApprovalWorkflowManualApprovalsStepApproversArgs and EntitlementApprovalWorkflowManualApprovalsStepApproversOutput values. You can construct a concrete instance of `EntitlementApprovalWorkflowManualApprovalsStepApproversInput` via:

EntitlementApprovalWorkflowManualApprovalsStepApproversArgs{...}

type EntitlementApprovalWorkflowManualApprovalsStepApproversOutput

type EntitlementApprovalWorkflowManualApprovalsStepApproversOutput struct{ *pulumi.OutputState }

func (EntitlementApprovalWorkflowManualApprovalsStepApproversOutput) ElementType

func (EntitlementApprovalWorkflowManualApprovalsStepApproversOutput) Principals

Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at: https://cloud.google.com/iam/docs/principal-identifiers#v1

func (EntitlementApprovalWorkflowManualApprovalsStepApproversOutput) ToEntitlementApprovalWorkflowManualApprovalsStepApproversOutput

func (EntitlementApprovalWorkflowManualApprovalsStepApproversOutput) ToEntitlementApprovalWorkflowManualApprovalsStepApproversOutputWithContext

func (o EntitlementApprovalWorkflowManualApprovalsStepApproversOutput) ToEntitlementApprovalWorkflowManualApprovalsStepApproversOutputWithContext(ctx context.Context) EntitlementApprovalWorkflowManualApprovalsStepApproversOutput

type EntitlementApprovalWorkflowManualApprovalsStepArgs

type EntitlementApprovalWorkflowManualApprovalsStepArgs struct {
	// How many users from the above list need to approve.
	// If there are not enough distinct users in the list above then the workflow
	// will indefinitely block. Should always be greater than 0. Currently 1 is the only
	// supported value.
	ApprovalsNeeded pulumi.IntPtrInput `pulumi:"approvalsNeeded"`
	// Optional. Additional email addresses to be notified when a grant is pending approval.
	ApproverEmailRecipients pulumi.StringArrayInput `pulumi:"approverEmailRecipients"`
	// The potential set of approvers in this step. This list should contain at only one entry.
	// Structure is documented below.
	Approvers EntitlementApprovalWorkflowManualApprovalsStepApproversInput `pulumi:"approvers"`
}

func (EntitlementApprovalWorkflowManualApprovalsStepArgs) ElementType

func (EntitlementApprovalWorkflowManualApprovalsStepArgs) ToEntitlementApprovalWorkflowManualApprovalsStepOutput

func (i EntitlementApprovalWorkflowManualApprovalsStepArgs) ToEntitlementApprovalWorkflowManualApprovalsStepOutput() EntitlementApprovalWorkflowManualApprovalsStepOutput

func (EntitlementApprovalWorkflowManualApprovalsStepArgs) ToEntitlementApprovalWorkflowManualApprovalsStepOutputWithContext

func (i EntitlementApprovalWorkflowManualApprovalsStepArgs) ToEntitlementApprovalWorkflowManualApprovalsStepOutputWithContext(ctx context.Context) EntitlementApprovalWorkflowManualApprovalsStepOutput

type EntitlementApprovalWorkflowManualApprovalsStepArray

type EntitlementApprovalWorkflowManualApprovalsStepArray []EntitlementApprovalWorkflowManualApprovalsStepInput

func (EntitlementApprovalWorkflowManualApprovalsStepArray) ElementType

func (EntitlementApprovalWorkflowManualApprovalsStepArray) ToEntitlementApprovalWorkflowManualApprovalsStepArrayOutput

func (i EntitlementApprovalWorkflowManualApprovalsStepArray) ToEntitlementApprovalWorkflowManualApprovalsStepArrayOutput() EntitlementApprovalWorkflowManualApprovalsStepArrayOutput

func (EntitlementApprovalWorkflowManualApprovalsStepArray) ToEntitlementApprovalWorkflowManualApprovalsStepArrayOutputWithContext

func (i EntitlementApprovalWorkflowManualApprovalsStepArray) ToEntitlementApprovalWorkflowManualApprovalsStepArrayOutputWithContext(ctx context.Context) EntitlementApprovalWorkflowManualApprovalsStepArrayOutput

type EntitlementApprovalWorkflowManualApprovalsStepArrayInput

type EntitlementApprovalWorkflowManualApprovalsStepArrayInput interface {
	pulumi.Input

	ToEntitlementApprovalWorkflowManualApprovalsStepArrayOutput() EntitlementApprovalWorkflowManualApprovalsStepArrayOutput
	ToEntitlementApprovalWorkflowManualApprovalsStepArrayOutputWithContext(context.Context) EntitlementApprovalWorkflowManualApprovalsStepArrayOutput
}

EntitlementApprovalWorkflowManualApprovalsStepArrayInput is an input type that accepts EntitlementApprovalWorkflowManualApprovalsStepArray and EntitlementApprovalWorkflowManualApprovalsStepArrayOutput values. You can construct a concrete instance of `EntitlementApprovalWorkflowManualApprovalsStepArrayInput` via:

EntitlementApprovalWorkflowManualApprovalsStepArray{ EntitlementApprovalWorkflowManualApprovalsStepArgs{...} }

type EntitlementApprovalWorkflowManualApprovalsStepArrayOutput

type EntitlementApprovalWorkflowManualApprovalsStepArrayOutput struct{ *pulumi.OutputState }

func (EntitlementApprovalWorkflowManualApprovalsStepArrayOutput) ElementType

func (EntitlementApprovalWorkflowManualApprovalsStepArrayOutput) Index

func (EntitlementApprovalWorkflowManualApprovalsStepArrayOutput) ToEntitlementApprovalWorkflowManualApprovalsStepArrayOutput

func (EntitlementApprovalWorkflowManualApprovalsStepArrayOutput) ToEntitlementApprovalWorkflowManualApprovalsStepArrayOutputWithContext

func (o EntitlementApprovalWorkflowManualApprovalsStepArrayOutput) ToEntitlementApprovalWorkflowManualApprovalsStepArrayOutputWithContext(ctx context.Context) EntitlementApprovalWorkflowManualApprovalsStepArrayOutput

type EntitlementApprovalWorkflowManualApprovalsStepInput

type EntitlementApprovalWorkflowManualApprovalsStepInput interface {
	pulumi.Input

	ToEntitlementApprovalWorkflowManualApprovalsStepOutput() EntitlementApprovalWorkflowManualApprovalsStepOutput
	ToEntitlementApprovalWorkflowManualApprovalsStepOutputWithContext(context.Context) EntitlementApprovalWorkflowManualApprovalsStepOutput
}

EntitlementApprovalWorkflowManualApprovalsStepInput is an input type that accepts EntitlementApprovalWorkflowManualApprovalsStepArgs and EntitlementApprovalWorkflowManualApprovalsStepOutput values. You can construct a concrete instance of `EntitlementApprovalWorkflowManualApprovalsStepInput` via:

EntitlementApprovalWorkflowManualApprovalsStepArgs{...}

type EntitlementApprovalWorkflowManualApprovalsStepOutput

type EntitlementApprovalWorkflowManualApprovalsStepOutput struct{ *pulumi.OutputState }

func (EntitlementApprovalWorkflowManualApprovalsStepOutput) ApprovalsNeeded

How many users from the above list need to approve. If there are not enough distinct users in the list above then the workflow will indefinitely block. Should always be greater than 0. Currently 1 is the only supported value.

func (EntitlementApprovalWorkflowManualApprovalsStepOutput) ApproverEmailRecipients

Optional. Additional email addresses to be notified when a grant is pending approval.

func (EntitlementApprovalWorkflowManualApprovalsStepOutput) Approvers

The potential set of approvers in this step. This list should contain at only one entry. Structure is documented below.

func (EntitlementApprovalWorkflowManualApprovalsStepOutput) ElementType

func (EntitlementApprovalWorkflowManualApprovalsStepOutput) ToEntitlementApprovalWorkflowManualApprovalsStepOutput

func (EntitlementApprovalWorkflowManualApprovalsStepOutput) ToEntitlementApprovalWorkflowManualApprovalsStepOutputWithContext

func (o EntitlementApprovalWorkflowManualApprovalsStepOutput) ToEntitlementApprovalWorkflowManualApprovalsStepOutputWithContext(ctx context.Context) EntitlementApprovalWorkflowManualApprovalsStepOutput

type EntitlementApprovalWorkflowOutput

type EntitlementApprovalWorkflowOutput struct{ *pulumi.OutputState }

func (EntitlementApprovalWorkflowOutput) ElementType

func (EntitlementApprovalWorkflowOutput) ManualApprovals

A manual approval workflow where users who are designated as approvers need to call the ApproveGrant/DenyGrant APIs for an Grant. The workflow can consist of multiple serial steps where each step defines who can act as Approver in that step and how many of those users should approve before the workflow moves to the next step. This can be used to create approval workflows such as

  • Require an approval from any user in a group G.
  • Require an approval from any k number of users from a Group G.
  • Require an approval from any user in a group G and then from a user U. etc. A single user might be part of `approvers` ACL for multiple steps in this workflow but they can only approve once and that approval will only be considered to satisfy the approval step at which it was granted. Structure is documented below.

func (EntitlementApprovalWorkflowOutput) ToEntitlementApprovalWorkflowOutput

func (o EntitlementApprovalWorkflowOutput) ToEntitlementApprovalWorkflowOutput() EntitlementApprovalWorkflowOutput

func (EntitlementApprovalWorkflowOutput) ToEntitlementApprovalWorkflowOutputWithContext

func (o EntitlementApprovalWorkflowOutput) ToEntitlementApprovalWorkflowOutputWithContext(ctx context.Context) EntitlementApprovalWorkflowOutput

func (EntitlementApprovalWorkflowOutput) ToEntitlementApprovalWorkflowPtrOutput

func (o EntitlementApprovalWorkflowOutput) ToEntitlementApprovalWorkflowPtrOutput() EntitlementApprovalWorkflowPtrOutput

func (EntitlementApprovalWorkflowOutput) ToEntitlementApprovalWorkflowPtrOutputWithContext

func (o EntitlementApprovalWorkflowOutput) ToEntitlementApprovalWorkflowPtrOutputWithContext(ctx context.Context) EntitlementApprovalWorkflowPtrOutput

type EntitlementApprovalWorkflowPtrInput

type EntitlementApprovalWorkflowPtrInput interface {
	pulumi.Input

	ToEntitlementApprovalWorkflowPtrOutput() EntitlementApprovalWorkflowPtrOutput
	ToEntitlementApprovalWorkflowPtrOutputWithContext(context.Context) EntitlementApprovalWorkflowPtrOutput
}

EntitlementApprovalWorkflowPtrInput is an input type that accepts EntitlementApprovalWorkflowArgs, EntitlementApprovalWorkflowPtr and EntitlementApprovalWorkflowPtrOutput values. You can construct a concrete instance of `EntitlementApprovalWorkflowPtrInput` via:

        EntitlementApprovalWorkflowArgs{...}

or:

        nil

type EntitlementApprovalWorkflowPtrOutput

type EntitlementApprovalWorkflowPtrOutput struct{ *pulumi.OutputState }

func (EntitlementApprovalWorkflowPtrOutput) Elem

func (EntitlementApprovalWorkflowPtrOutput) ElementType

func (EntitlementApprovalWorkflowPtrOutput) ManualApprovals

A manual approval workflow where users who are designated as approvers need to call the ApproveGrant/DenyGrant APIs for an Grant. The workflow can consist of multiple serial steps where each step defines who can act as Approver in that step and how many of those users should approve before the workflow moves to the next step. This can be used to create approval workflows such as

  • Require an approval from any user in a group G.
  • Require an approval from any k number of users from a Group G.
  • Require an approval from any user in a group G and then from a user U. etc. A single user might be part of `approvers` ACL for multiple steps in this workflow but they can only approve once and that approval will only be considered to satisfy the approval step at which it was granted. Structure is documented below.

func (EntitlementApprovalWorkflowPtrOutput) ToEntitlementApprovalWorkflowPtrOutput

func (o EntitlementApprovalWorkflowPtrOutput) ToEntitlementApprovalWorkflowPtrOutput() EntitlementApprovalWorkflowPtrOutput

func (EntitlementApprovalWorkflowPtrOutput) ToEntitlementApprovalWorkflowPtrOutputWithContext

func (o EntitlementApprovalWorkflowPtrOutput) ToEntitlementApprovalWorkflowPtrOutputWithContext(ctx context.Context) EntitlementApprovalWorkflowPtrOutput

type EntitlementArgs

type EntitlementArgs struct {
	// AdditionalNotificationTargets includes email addresses to be notified.
	AdditionalNotificationTargets EntitlementAdditionalNotificationTargetsPtrInput
	// The approvals needed before access will be granted to a requester. No approvals will be needed if this field is null.
	// Different types of approval workflows that can be used to gate privileged access granting.
	ApprovalWorkflow EntitlementApprovalWorkflowPtrInput
	// Who can create Grants using Entitlement. This list should contain at most one entry
	// Structure is documented below.
	EligibleUsers EntitlementEligibleUserArrayInput
	// The ID to use for this Entitlement. This will become the last part of the resource name.
	// This value should be 4-63 characters, and valid characters are "[a-z]", "[0-9]", and "-". The first character should be from [a-z].
	// This value should be unique among all other Entitlements under the specified `parent`.
	EntitlementId pulumi.StringInput
	// The region of the Entitlement resource.
	Location pulumi.StringInput
	// The maximum amount of time for which access would be granted for a request.
	// A requester can choose to ask for access for less than this duration but never more.
	// Format: calculate the time in seconds and concatenate it with 's' i.e. 2 hours = "7200s", 45 minutes = "2700s"
	MaxRequestDuration pulumi.StringInput
	// Format: projects/{project-id|project-number} or organizations/{organization-number} or folders/{folder-number}
	Parent pulumi.StringInput
	// Privileged access that this service can be used to gate.
	// Structure is documented below.
	PrivilegedAccess EntitlementPrivilegedAccessInput
	// Defines the ways in which a requester should provide the justification while requesting for access.
	// Structure is documented below.
	RequesterJustificationConfig EntitlementRequesterJustificationConfigInput
}

The set of arguments for constructing a Entitlement resource.

func (EntitlementArgs) ElementType

func (EntitlementArgs) ElementType() reflect.Type

type EntitlementArray

type EntitlementArray []EntitlementInput

func (EntitlementArray) ElementType

func (EntitlementArray) ElementType() reflect.Type

func (EntitlementArray) ToEntitlementArrayOutput

func (i EntitlementArray) ToEntitlementArrayOutput() EntitlementArrayOutput

func (EntitlementArray) ToEntitlementArrayOutputWithContext

func (i EntitlementArray) ToEntitlementArrayOutputWithContext(ctx context.Context) EntitlementArrayOutput

type EntitlementArrayInput

type EntitlementArrayInput interface {
	pulumi.Input

	ToEntitlementArrayOutput() EntitlementArrayOutput
	ToEntitlementArrayOutputWithContext(context.Context) EntitlementArrayOutput
}

EntitlementArrayInput is an input type that accepts EntitlementArray and EntitlementArrayOutput values. You can construct a concrete instance of `EntitlementArrayInput` via:

EntitlementArray{ EntitlementArgs{...} }

type EntitlementArrayOutput

type EntitlementArrayOutput struct{ *pulumi.OutputState }

func (EntitlementArrayOutput) ElementType

func (EntitlementArrayOutput) ElementType() reflect.Type

func (EntitlementArrayOutput) Index

func (EntitlementArrayOutput) ToEntitlementArrayOutput

func (o EntitlementArrayOutput) ToEntitlementArrayOutput() EntitlementArrayOutput

func (EntitlementArrayOutput) ToEntitlementArrayOutputWithContext

func (o EntitlementArrayOutput) ToEntitlementArrayOutputWithContext(ctx context.Context) EntitlementArrayOutput

type EntitlementEligibleUser

type EntitlementEligibleUser struct {
	// Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at "https://cloud.google.com/iam/docs/principal-identifiers#v1"
	Principals []string `pulumi:"principals"`
}

type EntitlementEligibleUserArgs

type EntitlementEligibleUserArgs struct {
	// Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at "https://cloud.google.com/iam/docs/principal-identifiers#v1"
	Principals pulumi.StringArrayInput `pulumi:"principals"`
}

func (EntitlementEligibleUserArgs) ElementType

func (EntitlementEligibleUserArgs) ToEntitlementEligibleUserOutput

func (i EntitlementEligibleUserArgs) ToEntitlementEligibleUserOutput() EntitlementEligibleUserOutput

func (EntitlementEligibleUserArgs) ToEntitlementEligibleUserOutputWithContext

func (i EntitlementEligibleUserArgs) ToEntitlementEligibleUserOutputWithContext(ctx context.Context) EntitlementEligibleUserOutput

type EntitlementEligibleUserArray

type EntitlementEligibleUserArray []EntitlementEligibleUserInput

func (EntitlementEligibleUserArray) ElementType

func (EntitlementEligibleUserArray) ToEntitlementEligibleUserArrayOutput

func (i EntitlementEligibleUserArray) ToEntitlementEligibleUserArrayOutput() EntitlementEligibleUserArrayOutput

func (EntitlementEligibleUserArray) ToEntitlementEligibleUserArrayOutputWithContext

func (i EntitlementEligibleUserArray) ToEntitlementEligibleUserArrayOutputWithContext(ctx context.Context) EntitlementEligibleUserArrayOutput

type EntitlementEligibleUserArrayInput

type EntitlementEligibleUserArrayInput interface {
	pulumi.Input

	ToEntitlementEligibleUserArrayOutput() EntitlementEligibleUserArrayOutput
	ToEntitlementEligibleUserArrayOutputWithContext(context.Context) EntitlementEligibleUserArrayOutput
}

EntitlementEligibleUserArrayInput is an input type that accepts EntitlementEligibleUserArray and EntitlementEligibleUserArrayOutput values. You can construct a concrete instance of `EntitlementEligibleUserArrayInput` via:

EntitlementEligibleUserArray{ EntitlementEligibleUserArgs{...} }

type EntitlementEligibleUserArrayOutput

type EntitlementEligibleUserArrayOutput struct{ *pulumi.OutputState }

func (EntitlementEligibleUserArrayOutput) ElementType

func (EntitlementEligibleUserArrayOutput) Index

func (EntitlementEligibleUserArrayOutput) ToEntitlementEligibleUserArrayOutput

func (o EntitlementEligibleUserArrayOutput) ToEntitlementEligibleUserArrayOutput() EntitlementEligibleUserArrayOutput

func (EntitlementEligibleUserArrayOutput) ToEntitlementEligibleUserArrayOutputWithContext

func (o EntitlementEligibleUserArrayOutput) ToEntitlementEligibleUserArrayOutputWithContext(ctx context.Context) EntitlementEligibleUserArrayOutput

type EntitlementEligibleUserInput

type EntitlementEligibleUserInput interface {
	pulumi.Input

	ToEntitlementEligibleUserOutput() EntitlementEligibleUserOutput
	ToEntitlementEligibleUserOutputWithContext(context.Context) EntitlementEligibleUserOutput
}

EntitlementEligibleUserInput is an input type that accepts EntitlementEligibleUserArgs and EntitlementEligibleUserOutput values. You can construct a concrete instance of `EntitlementEligibleUserInput` via:

EntitlementEligibleUserArgs{...}

type EntitlementEligibleUserOutput

type EntitlementEligibleUserOutput struct{ *pulumi.OutputState }

func (EntitlementEligibleUserOutput) ElementType

func (EntitlementEligibleUserOutput) Principals

Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at "https://cloud.google.com/iam/docs/principal-identifiers#v1"

func (EntitlementEligibleUserOutput) ToEntitlementEligibleUserOutput

func (o EntitlementEligibleUserOutput) ToEntitlementEligibleUserOutput() EntitlementEligibleUserOutput

func (EntitlementEligibleUserOutput) ToEntitlementEligibleUserOutputWithContext

func (o EntitlementEligibleUserOutput) ToEntitlementEligibleUserOutputWithContext(ctx context.Context) EntitlementEligibleUserOutput

type EntitlementInput

type EntitlementInput interface {
	pulumi.Input

	ToEntitlementOutput() EntitlementOutput
	ToEntitlementOutputWithContext(ctx context.Context) EntitlementOutput
}

type EntitlementMap

type EntitlementMap map[string]EntitlementInput

func (EntitlementMap) ElementType

func (EntitlementMap) ElementType() reflect.Type

func (EntitlementMap) ToEntitlementMapOutput

func (i EntitlementMap) ToEntitlementMapOutput() EntitlementMapOutput

func (EntitlementMap) ToEntitlementMapOutputWithContext

func (i EntitlementMap) ToEntitlementMapOutputWithContext(ctx context.Context) EntitlementMapOutput

type EntitlementMapInput

type EntitlementMapInput interface {
	pulumi.Input

	ToEntitlementMapOutput() EntitlementMapOutput
	ToEntitlementMapOutputWithContext(context.Context) EntitlementMapOutput
}

EntitlementMapInput is an input type that accepts EntitlementMap and EntitlementMapOutput values. You can construct a concrete instance of `EntitlementMapInput` via:

EntitlementMap{ "key": EntitlementArgs{...} }

type EntitlementMapOutput

type EntitlementMapOutput struct{ *pulumi.OutputState }

func (EntitlementMapOutput) ElementType

func (EntitlementMapOutput) ElementType() reflect.Type

func (EntitlementMapOutput) MapIndex

func (EntitlementMapOutput) ToEntitlementMapOutput

func (o EntitlementMapOutput) ToEntitlementMapOutput() EntitlementMapOutput

func (EntitlementMapOutput) ToEntitlementMapOutputWithContext

func (o EntitlementMapOutput) ToEntitlementMapOutputWithContext(ctx context.Context) EntitlementMapOutput

type EntitlementOutput

type EntitlementOutput struct{ *pulumi.OutputState }

func (EntitlementOutput) AdditionalNotificationTargets

func (o EntitlementOutput) AdditionalNotificationTargets() EntitlementAdditionalNotificationTargetsPtrOutput

AdditionalNotificationTargets includes email addresses to be notified.

func (EntitlementOutput) ApprovalWorkflow

The approvals needed before access will be granted to a requester. No approvals will be needed if this field is null. Different types of approval workflows that can be used to gate privileged access granting.

func (EntitlementOutput) CreateTime

func (o EntitlementOutput) CreateTime() pulumi.StringOutput

Output only. Create time stamp. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z"

func (EntitlementOutput) ElementType

func (EntitlementOutput) ElementType() reflect.Type

func (EntitlementOutput) EligibleUsers

Who can create Grants using Entitlement. This list should contain at most one entry Structure is documented below.

func (EntitlementOutput) EntitlementId

func (o EntitlementOutput) EntitlementId() pulumi.StringOutput

The ID to use for this Entitlement. This will become the last part of the resource name. This value should be 4-63 characters, and valid characters are "[a-z]", "[0-9]", and "-". The first character should be from [a-z]. This value should be unique among all other Entitlements under the specified `parent`.

func (EntitlementOutput) Etag

For Resource freshness validation (https://google.aip.dev/154)

func (EntitlementOutput) Location

func (o EntitlementOutput) Location() pulumi.StringOutput

The region of the Entitlement resource.

func (EntitlementOutput) MaxRequestDuration

func (o EntitlementOutput) MaxRequestDuration() pulumi.StringOutput

The maximum amount of time for which access would be granted for a request. A requester can choose to ask for access for less than this duration but never more. Format: calculate the time in seconds and concatenate it with 's' i.e. 2 hours = "7200s", 45 minutes = "2700s"

func (EntitlementOutput) Name

Output Only. The entitlement's name follows a hierarchical structure, comprising the organization, folder, or project, alongside the region and a unique entitlement ID. Formats: organizations/{organization-number}/locations/{region}/entitlements/{entitlement-id}, folders/{folder-number}/locations/{region}/entitlements/{entitlement-id}, and projects/{project-id|project-number}/locations/{region}/entitlements/{entitlement-id}.

func (EntitlementOutput) Parent

Format: projects/{project-id|project-number} or organizations/{organization-number} or folders/{folder-number}

func (EntitlementOutput) PrivilegedAccess

Privileged access that this service can be used to gate. Structure is documented below.

func (EntitlementOutput) RequesterJustificationConfig

func (o EntitlementOutput) RequesterJustificationConfig() EntitlementRequesterJustificationConfigOutput

Defines the ways in which a requester should provide the justification while requesting for access. Structure is documented below.

func (EntitlementOutput) State

Output only. The current state of the Entitlement.

func (EntitlementOutput) ToEntitlementOutput

func (o EntitlementOutput) ToEntitlementOutput() EntitlementOutput

func (EntitlementOutput) ToEntitlementOutputWithContext

func (o EntitlementOutput) ToEntitlementOutputWithContext(ctx context.Context) EntitlementOutput

func (EntitlementOutput) UpdateTime

func (o EntitlementOutput) UpdateTime() pulumi.StringOutput

Output only. Update time stamp. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".

type EntitlementPrivilegedAccess

type EntitlementPrivilegedAccess struct {
	// GcpIamAccess represents IAM based access control on a GCP resource. Refer to https://cloud.google.com/iam/docs to understand more about IAM.
	// Structure is documented below.
	GcpIamAccess EntitlementPrivilegedAccessGcpIamAccess `pulumi:"gcpIamAccess"`
}

type EntitlementPrivilegedAccessArgs

type EntitlementPrivilegedAccessArgs struct {
	// GcpIamAccess represents IAM based access control on a GCP resource. Refer to https://cloud.google.com/iam/docs to understand more about IAM.
	// Structure is documented below.
	GcpIamAccess EntitlementPrivilegedAccessGcpIamAccessInput `pulumi:"gcpIamAccess"`
}

func (EntitlementPrivilegedAccessArgs) ElementType

func (EntitlementPrivilegedAccessArgs) ToEntitlementPrivilegedAccessOutput

func (i EntitlementPrivilegedAccessArgs) ToEntitlementPrivilegedAccessOutput() EntitlementPrivilegedAccessOutput

func (EntitlementPrivilegedAccessArgs) ToEntitlementPrivilegedAccessOutputWithContext

func (i EntitlementPrivilegedAccessArgs) ToEntitlementPrivilegedAccessOutputWithContext(ctx context.Context) EntitlementPrivilegedAccessOutput

func (EntitlementPrivilegedAccessArgs) ToEntitlementPrivilegedAccessPtrOutput

func (i EntitlementPrivilegedAccessArgs) ToEntitlementPrivilegedAccessPtrOutput() EntitlementPrivilegedAccessPtrOutput

func (EntitlementPrivilegedAccessArgs) ToEntitlementPrivilegedAccessPtrOutputWithContext

func (i EntitlementPrivilegedAccessArgs) ToEntitlementPrivilegedAccessPtrOutputWithContext(ctx context.Context) EntitlementPrivilegedAccessPtrOutput

type EntitlementPrivilegedAccessGcpIamAccess

type EntitlementPrivilegedAccessGcpIamAccess struct {
	// Name of the resource.
	Resource string `pulumi:"resource"`
	// The type of this resource.
	ResourceType string `pulumi:"resourceType"`
	// Role bindings to be created on successful grant.
	// Structure is documented below.
	RoleBindings []EntitlementPrivilegedAccessGcpIamAccessRoleBinding `pulumi:"roleBindings"`
}

type EntitlementPrivilegedAccessGcpIamAccessArgs

type EntitlementPrivilegedAccessGcpIamAccessArgs struct {
	// Name of the resource.
	Resource pulumi.StringInput `pulumi:"resource"`
	// The type of this resource.
	ResourceType pulumi.StringInput `pulumi:"resourceType"`
	// Role bindings to be created on successful grant.
	// Structure is documented below.
	RoleBindings EntitlementPrivilegedAccessGcpIamAccessRoleBindingArrayInput `pulumi:"roleBindings"`
}

func (EntitlementPrivilegedAccessGcpIamAccessArgs) ElementType

func (EntitlementPrivilegedAccessGcpIamAccessArgs) ToEntitlementPrivilegedAccessGcpIamAccessOutput

func (i EntitlementPrivilegedAccessGcpIamAccessArgs) ToEntitlementPrivilegedAccessGcpIamAccessOutput() EntitlementPrivilegedAccessGcpIamAccessOutput

func (EntitlementPrivilegedAccessGcpIamAccessArgs) ToEntitlementPrivilegedAccessGcpIamAccessOutputWithContext

func (i EntitlementPrivilegedAccessGcpIamAccessArgs) ToEntitlementPrivilegedAccessGcpIamAccessOutputWithContext(ctx context.Context) EntitlementPrivilegedAccessGcpIamAccessOutput

func (EntitlementPrivilegedAccessGcpIamAccessArgs) ToEntitlementPrivilegedAccessGcpIamAccessPtrOutput

func (i EntitlementPrivilegedAccessGcpIamAccessArgs) ToEntitlementPrivilegedAccessGcpIamAccessPtrOutput() EntitlementPrivilegedAccessGcpIamAccessPtrOutput

func (EntitlementPrivilegedAccessGcpIamAccessArgs) ToEntitlementPrivilegedAccessGcpIamAccessPtrOutputWithContext

func (i EntitlementPrivilegedAccessGcpIamAccessArgs) ToEntitlementPrivilegedAccessGcpIamAccessPtrOutputWithContext(ctx context.Context) EntitlementPrivilegedAccessGcpIamAccessPtrOutput

type EntitlementPrivilegedAccessGcpIamAccessInput

type EntitlementPrivilegedAccessGcpIamAccessInput interface {
	pulumi.Input

	ToEntitlementPrivilegedAccessGcpIamAccessOutput() EntitlementPrivilegedAccessGcpIamAccessOutput
	ToEntitlementPrivilegedAccessGcpIamAccessOutputWithContext(context.Context) EntitlementPrivilegedAccessGcpIamAccessOutput
}

EntitlementPrivilegedAccessGcpIamAccessInput is an input type that accepts EntitlementPrivilegedAccessGcpIamAccessArgs and EntitlementPrivilegedAccessGcpIamAccessOutput values. You can construct a concrete instance of `EntitlementPrivilegedAccessGcpIamAccessInput` via:

EntitlementPrivilegedAccessGcpIamAccessArgs{...}

type EntitlementPrivilegedAccessGcpIamAccessOutput

type EntitlementPrivilegedAccessGcpIamAccessOutput struct{ *pulumi.OutputState }

func (EntitlementPrivilegedAccessGcpIamAccessOutput) ElementType

func (EntitlementPrivilegedAccessGcpIamAccessOutput) Resource

Name of the resource.

func (EntitlementPrivilegedAccessGcpIamAccessOutput) ResourceType

The type of this resource.

func (EntitlementPrivilegedAccessGcpIamAccessOutput) RoleBindings

Role bindings to be created on successful grant. Structure is documented below.

func (EntitlementPrivilegedAccessGcpIamAccessOutput) ToEntitlementPrivilegedAccessGcpIamAccessOutput

func (o EntitlementPrivilegedAccessGcpIamAccessOutput) ToEntitlementPrivilegedAccessGcpIamAccessOutput() EntitlementPrivilegedAccessGcpIamAccessOutput

func (EntitlementPrivilegedAccessGcpIamAccessOutput) ToEntitlementPrivilegedAccessGcpIamAccessOutputWithContext

func (o EntitlementPrivilegedAccessGcpIamAccessOutput) ToEntitlementPrivilegedAccessGcpIamAccessOutputWithContext(ctx context.Context) EntitlementPrivilegedAccessGcpIamAccessOutput

func (EntitlementPrivilegedAccessGcpIamAccessOutput) ToEntitlementPrivilegedAccessGcpIamAccessPtrOutput

func (o EntitlementPrivilegedAccessGcpIamAccessOutput) ToEntitlementPrivilegedAccessGcpIamAccessPtrOutput() EntitlementPrivilegedAccessGcpIamAccessPtrOutput

func (EntitlementPrivilegedAccessGcpIamAccessOutput) ToEntitlementPrivilegedAccessGcpIamAccessPtrOutputWithContext

func (o EntitlementPrivilegedAccessGcpIamAccessOutput) ToEntitlementPrivilegedAccessGcpIamAccessPtrOutputWithContext(ctx context.Context) EntitlementPrivilegedAccessGcpIamAccessPtrOutput

type EntitlementPrivilegedAccessGcpIamAccessPtrInput

type EntitlementPrivilegedAccessGcpIamAccessPtrInput interface {
	pulumi.Input

	ToEntitlementPrivilegedAccessGcpIamAccessPtrOutput() EntitlementPrivilegedAccessGcpIamAccessPtrOutput
	ToEntitlementPrivilegedAccessGcpIamAccessPtrOutputWithContext(context.Context) EntitlementPrivilegedAccessGcpIamAccessPtrOutput
}

EntitlementPrivilegedAccessGcpIamAccessPtrInput is an input type that accepts EntitlementPrivilegedAccessGcpIamAccessArgs, EntitlementPrivilegedAccessGcpIamAccessPtr and EntitlementPrivilegedAccessGcpIamAccessPtrOutput values. You can construct a concrete instance of `EntitlementPrivilegedAccessGcpIamAccessPtrInput` via:

        EntitlementPrivilegedAccessGcpIamAccessArgs{...}

or:

        nil

type EntitlementPrivilegedAccessGcpIamAccessPtrOutput

type EntitlementPrivilegedAccessGcpIamAccessPtrOutput struct{ *pulumi.OutputState }

func (EntitlementPrivilegedAccessGcpIamAccessPtrOutput) Elem

func (EntitlementPrivilegedAccessGcpIamAccessPtrOutput) ElementType

func (EntitlementPrivilegedAccessGcpIamAccessPtrOutput) Resource

Name of the resource.

func (EntitlementPrivilegedAccessGcpIamAccessPtrOutput) ResourceType

The type of this resource.

func (EntitlementPrivilegedAccessGcpIamAccessPtrOutput) RoleBindings

Role bindings to be created on successful grant. Structure is documented below.

func (EntitlementPrivilegedAccessGcpIamAccessPtrOutput) ToEntitlementPrivilegedAccessGcpIamAccessPtrOutput

func (o EntitlementPrivilegedAccessGcpIamAccessPtrOutput) ToEntitlementPrivilegedAccessGcpIamAccessPtrOutput() EntitlementPrivilegedAccessGcpIamAccessPtrOutput

func (EntitlementPrivilegedAccessGcpIamAccessPtrOutput) ToEntitlementPrivilegedAccessGcpIamAccessPtrOutputWithContext

func (o EntitlementPrivilegedAccessGcpIamAccessPtrOutput) ToEntitlementPrivilegedAccessGcpIamAccessPtrOutputWithContext(ctx context.Context) EntitlementPrivilegedAccessGcpIamAccessPtrOutput

type EntitlementPrivilegedAccessGcpIamAccessRoleBinding

type EntitlementPrivilegedAccessGcpIamAccessRoleBinding struct {
	// The expression field of the IAM condition to be associated with the role. If specified, a user with an active grant for this entitlement would be able to access the resource only if this condition evaluates to true for their request.
	// https://cloud.google.com/iam/docs/conditions-overview#attributes.
	ConditionExpression *string `pulumi:"conditionExpression"`
	// IAM role to be granted. https://cloud.google.com/iam/docs/roles-overview.
	Role string `pulumi:"role"`
}

type EntitlementPrivilegedAccessGcpIamAccessRoleBindingArgs

type EntitlementPrivilegedAccessGcpIamAccessRoleBindingArgs struct {
	// The expression field of the IAM condition to be associated with the role. If specified, a user with an active grant for this entitlement would be able to access the resource only if this condition evaluates to true for their request.
	// https://cloud.google.com/iam/docs/conditions-overview#attributes.
	ConditionExpression pulumi.StringPtrInput `pulumi:"conditionExpression"`
	// IAM role to be granted. https://cloud.google.com/iam/docs/roles-overview.
	Role pulumi.StringInput `pulumi:"role"`
}

func (EntitlementPrivilegedAccessGcpIamAccessRoleBindingArgs) ElementType

func (EntitlementPrivilegedAccessGcpIamAccessRoleBindingArgs) ToEntitlementPrivilegedAccessGcpIamAccessRoleBindingOutput

func (EntitlementPrivilegedAccessGcpIamAccessRoleBindingArgs) ToEntitlementPrivilegedAccessGcpIamAccessRoleBindingOutputWithContext

func (i EntitlementPrivilegedAccessGcpIamAccessRoleBindingArgs) ToEntitlementPrivilegedAccessGcpIamAccessRoleBindingOutputWithContext(ctx context.Context) EntitlementPrivilegedAccessGcpIamAccessRoleBindingOutput

type EntitlementPrivilegedAccessGcpIamAccessRoleBindingArray

type EntitlementPrivilegedAccessGcpIamAccessRoleBindingArray []EntitlementPrivilegedAccessGcpIamAccessRoleBindingInput

func (EntitlementPrivilegedAccessGcpIamAccessRoleBindingArray) ElementType

func (EntitlementPrivilegedAccessGcpIamAccessRoleBindingArray) ToEntitlementPrivilegedAccessGcpIamAccessRoleBindingArrayOutput

func (i EntitlementPrivilegedAccessGcpIamAccessRoleBindingArray) ToEntitlementPrivilegedAccessGcpIamAccessRoleBindingArrayOutput() EntitlementPrivilegedAccessGcpIamAccessRoleBindingArrayOutput

func (EntitlementPrivilegedAccessGcpIamAccessRoleBindingArray) ToEntitlementPrivilegedAccessGcpIamAccessRoleBindingArrayOutputWithContext

func (i EntitlementPrivilegedAccessGcpIamAccessRoleBindingArray) ToEntitlementPrivilegedAccessGcpIamAccessRoleBindingArrayOutputWithContext(ctx context.Context) EntitlementPrivilegedAccessGcpIamAccessRoleBindingArrayOutput

type EntitlementPrivilegedAccessGcpIamAccessRoleBindingArrayInput

type EntitlementPrivilegedAccessGcpIamAccessRoleBindingArrayInput interface {
	pulumi.Input

	ToEntitlementPrivilegedAccessGcpIamAccessRoleBindingArrayOutput() EntitlementPrivilegedAccessGcpIamAccessRoleBindingArrayOutput
	ToEntitlementPrivilegedAccessGcpIamAccessRoleBindingArrayOutputWithContext(context.Context) EntitlementPrivilegedAccessGcpIamAccessRoleBindingArrayOutput
}

EntitlementPrivilegedAccessGcpIamAccessRoleBindingArrayInput is an input type that accepts EntitlementPrivilegedAccessGcpIamAccessRoleBindingArray and EntitlementPrivilegedAccessGcpIamAccessRoleBindingArrayOutput values. You can construct a concrete instance of `EntitlementPrivilegedAccessGcpIamAccessRoleBindingArrayInput` via:

EntitlementPrivilegedAccessGcpIamAccessRoleBindingArray{ EntitlementPrivilegedAccessGcpIamAccessRoleBindingArgs{...} }

type EntitlementPrivilegedAccessGcpIamAccessRoleBindingArrayOutput

type EntitlementPrivilegedAccessGcpIamAccessRoleBindingArrayOutput struct{ *pulumi.OutputState }

func (EntitlementPrivilegedAccessGcpIamAccessRoleBindingArrayOutput) ElementType

func (EntitlementPrivilegedAccessGcpIamAccessRoleBindingArrayOutput) Index

func (EntitlementPrivilegedAccessGcpIamAccessRoleBindingArrayOutput) ToEntitlementPrivilegedAccessGcpIamAccessRoleBindingArrayOutput

func (EntitlementPrivilegedAccessGcpIamAccessRoleBindingArrayOutput) ToEntitlementPrivilegedAccessGcpIamAccessRoleBindingArrayOutputWithContext

func (o EntitlementPrivilegedAccessGcpIamAccessRoleBindingArrayOutput) ToEntitlementPrivilegedAccessGcpIamAccessRoleBindingArrayOutputWithContext(ctx context.Context) EntitlementPrivilegedAccessGcpIamAccessRoleBindingArrayOutput

type EntitlementPrivilegedAccessGcpIamAccessRoleBindingInput

type EntitlementPrivilegedAccessGcpIamAccessRoleBindingInput interface {
	pulumi.Input

	ToEntitlementPrivilegedAccessGcpIamAccessRoleBindingOutput() EntitlementPrivilegedAccessGcpIamAccessRoleBindingOutput
	ToEntitlementPrivilegedAccessGcpIamAccessRoleBindingOutputWithContext(context.Context) EntitlementPrivilegedAccessGcpIamAccessRoleBindingOutput
}

EntitlementPrivilegedAccessGcpIamAccessRoleBindingInput is an input type that accepts EntitlementPrivilegedAccessGcpIamAccessRoleBindingArgs and EntitlementPrivilegedAccessGcpIamAccessRoleBindingOutput values. You can construct a concrete instance of `EntitlementPrivilegedAccessGcpIamAccessRoleBindingInput` via:

EntitlementPrivilegedAccessGcpIamAccessRoleBindingArgs{...}

type EntitlementPrivilegedAccessGcpIamAccessRoleBindingOutput

type EntitlementPrivilegedAccessGcpIamAccessRoleBindingOutput struct{ *pulumi.OutputState }

func (EntitlementPrivilegedAccessGcpIamAccessRoleBindingOutput) ConditionExpression

The expression field of the IAM condition to be associated with the role. If specified, a user with an active grant for this entitlement would be able to access the resource only if this condition evaluates to true for their request. https://cloud.google.com/iam/docs/conditions-overview#attributes.

func (EntitlementPrivilegedAccessGcpIamAccessRoleBindingOutput) ElementType

func (EntitlementPrivilegedAccessGcpIamAccessRoleBindingOutput) Role

IAM role to be granted. https://cloud.google.com/iam/docs/roles-overview.

func (EntitlementPrivilegedAccessGcpIamAccessRoleBindingOutput) ToEntitlementPrivilegedAccessGcpIamAccessRoleBindingOutput

func (EntitlementPrivilegedAccessGcpIamAccessRoleBindingOutput) ToEntitlementPrivilegedAccessGcpIamAccessRoleBindingOutputWithContext

func (o EntitlementPrivilegedAccessGcpIamAccessRoleBindingOutput) ToEntitlementPrivilegedAccessGcpIamAccessRoleBindingOutputWithContext(ctx context.Context) EntitlementPrivilegedAccessGcpIamAccessRoleBindingOutput

type EntitlementPrivilegedAccessInput

type EntitlementPrivilegedAccessInput interface {
	pulumi.Input

	ToEntitlementPrivilegedAccessOutput() EntitlementPrivilegedAccessOutput
	ToEntitlementPrivilegedAccessOutputWithContext(context.Context) EntitlementPrivilegedAccessOutput
}

EntitlementPrivilegedAccessInput is an input type that accepts EntitlementPrivilegedAccessArgs and EntitlementPrivilegedAccessOutput values. You can construct a concrete instance of `EntitlementPrivilegedAccessInput` via:

EntitlementPrivilegedAccessArgs{...}

type EntitlementPrivilegedAccessOutput

type EntitlementPrivilegedAccessOutput struct{ *pulumi.OutputState }

func (EntitlementPrivilegedAccessOutput) ElementType

func (EntitlementPrivilegedAccessOutput) GcpIamAccess

GcpIamAccess represents IAM based access control on a GCP resource. Refer to https://cloud.google.com/iam/docs to understand more about IAM. Structure is documented below.

func (EntitlementPrivilegedAccessOutput) ToEntitlementPrivilegedAccessOutput

func (o EntitlementPrivilegedAccessOutput) ToEntitlementPrivilegedAccessOutput() EntitlementPrivilegedAccessOutput

func (EntitlementPrivilegedAccessOutput) ToEntitlementPrivilegedAccessOutputWithContext

func (o EntitlementPrivilegedAccessOutput) ToEntitlementPrivilegedAccessOutputWithContext(ctx context.Context) EntitlementPrivilegedAccessOutput

func (EntitlementPrivilegedAccessOutput) ToEntitlementPrivilegedAccessPtrOutput

func (o EntitlementPrivilegedAccessOutput) ToEntitlementPrivilegedAccessPtrOutput() EntitlementPrivilegedAccessPtrOutput

func (EntitlementPrivilegedAccessOutput) ToEntitlementPrivilegedAccessPtrOutputWithContext

func (o EntitlementPrivilegedAccessOutput) ToEntitlementPrivilegedAccessPtrOutputWithContext(ctx context.Context) EntitlementPrivilegedAccessPtrOutput

type EntitlementPrivilegedAccessPtrInput

type EntitlementPrivilegedAccessPtrInput interface {
	pulumi.Input

	ToEntitlementPrivilegedAccessPtrOutput() EntitlementPrivilegedAccessPtrOutput
	ToEntitlementPrivilegedAccessPtrOutputWithContext(context.Context) EntitlementPrivilegedAccessPtrOutput
}

EntitlementPrivilegedAccessPtrInput is an input type that accepts EntitlementPrivilegedAccessArgs, EntitlementPrivilegedAccessPtr and EntitlementPrivilegedAccessPtrOutput values. You can construct a concrete instance of `EntitlementPrivilegedAccessPtrInput` via:

        EntitlementPrivilegedAccessArgs{...}

or:

        nil

type EntitlementPrivilegedAccessPtrOutput

type EntitlementPrivilegedAccessPtrOutput struct{ *pulumi.OutputState }

func (EntitlementPrivilegedAccessPtrOutput) Elem

func (EntitlementPrivilegedAccessPtrOutput) ElementType

func (EntitlementPrivilegedAccessPtrOutput) GcpIamAccess

GcpIamAccess represents IAM based access control on a GCP resource. Refer to https://cloud.google.com/iam/docs to understand more about IAM. Structure is documented below.

func (EntitlementPrivilegedAccessPtrOutput) ToEntitlementPrivilegedAccessPtrOutput

func (o EntitlementPrivilegedAccessPtrOutput) ToEntitlementPrivilegedAccessPtrOutput() EntitlementPrivilegedAccessPtrOutput

func (EntitlementPrivilegedAccessPtrOutput) ToEntitlementPrivilegedAccessPtrOutputWithContext

func (o EntitlementPrivilegedAccessPtrOutput) ToEntitlementPrivilegedAccessPtrOutputWithContext(ctx context.Context) EntitlementPrivilegedAccessPtrOutput

type EntitlementRequesterJustificationConfig

type EntitlementRequesterJustificationConfig struct {
	// The justification is not mandatory but can be provided in any of the supported formats.
	NotMandatory *EntitlementRequesterJustificationConfigNotMandatory `pulumi:"notMandatory"`
	// The requester has to provide a justification in the form of free flowing text.
	//
	// ***
	Unstructured *EntitlementRequesterJustificationConfigUnstructured `pulumi:"unstructured"`
}

type EntitlementRequesterJustificationConfigArgs

type EntitlementRequesterJustificationConfigArgs struct {
	// The justification is not mandatory but can be provided in any of the supported formats.
	NotMandatory EntitlementRequesterJustificationConfigNotMandatoryPtrInput `pulumi:"notMandatory"`
	// The requester has to provide a justification in the form of free flowing text.
	//
	// ***
	Unstructured EntitlementRequesterJustificationConfigUnstructuredPtrInput `pulumi:"unstructured"`
}

func (EntitlementRequesterJustificationConfigArgs) ElementType

func (EntitlementRequesterJustificationConfigArgs) ToEntitlementRequesterJustificationConfigOutput

func (i EntitlementRequesterJustificationConfigArgs) ToEntitlementRequesterJustificationConfigOutput() EntitlementRequesterJustificationConfigOutput

func (EntitlementRequesterJustificationConfigArgs) ToEntitlementRequesterJustificationConfigOutputWithContext

func (i EntitlementRequesterJustificationConfigArgs) ToEntitlementRequesterJustificationConfigOutputWithContext(ctx context.Context) EntitlementRequesterJustificationConfigOutput

func (EntitlementRequesterJustificationConfigArgs) ToEntitlementRequesterJustificationConfigPtrOutput

func (i EntitlementRequesterJustificationConfigArgs) ToEntitlementRequesterJustificationConfigPtrOutput() EntitlementRequesterJustificationConfigPtrOutput

func (EntitlementRequesterJustificationConfigArgs) ToEntitlementRequesterJustificationConfigPtrOutputWithContext

func (i EntitlementRequesterJustificationConfigArgs) ToEntitlementRequesterJustificationConfigPtrOutputWithContext(ctx context.Context) EntitlementRequesterJustificationConfigPtrOutput

type EntitlementRequesterJustificationConfigInput

type EntitlementRequesterJustificationConfigInput interface {
	pulumi.Input

	ToEntitlementRequesterJustificationConfigOutput() EntitlementRequesterJustificationConfigOutput
	ToEntitlementRequesterJustificationConfigOutputWithContext(context.Context) EntitlementRequesterJustificationConfigOutput
}

EntitlementRequesterJustificationConfigInput is an input type that accepts EntitlementRequesterJustificationConfigArgs and EntitlementRequesterJustificationConfigOutput values. You can construct a concrete instance of `EntitlementRequesterJustificationConfigInput` via:

EntitlementRequesterJustificationConfigArgs{...}

type EntitlementRequesterJustificationConfigNotMandatory

type EntitlementRequesterJustificationConfigNotMandatory struct {
}

type EntitlementRequesterJustificationConfigNotMandatoryArgs

type EntitlementRequesterJustificationConfigNotMandatoryArgs struct {
}

func (EntitlementRequesterJustificationConfigNotMandatoryArgs) ElementType

func (EntitlementRequesterJustificationConfigNotMandatoryArgs) ToEntitlementRequesterJustificationConfigNotMandatoryOutput

func (EntitlementRequesterJustificationConfigNotMandatoryArgs) ToEntitlementRequesterJustificationConfigNotMandatoryOutputWithContext

func (i EntitlementRequesterJustificationConfigNotMandatoryArgs) ToEntitlementRequesterJustificationConfigNotMandatoryOutputWithContext(ctx context.Context) EntitlementRequesterJustificationConfigNotMandatoryOutput

func (EntitlementRequesterJustificationConfigNotMandatoryArgs) ToEntitlementRequesterJustificationConfigNotMandatoryPtrOutput

func (i EntitlementRequesterJustificationConfigNotMandatoryArgs) ToEntitlementRequesterJustificationConfigNotMandatoryPtrOutput() EntitlementRequesterJustificationConfigNotMandatoryPtrOutput

func (EntitlementRequesterJustificationConfigNotMandatoryArgs) ToEntitlementRequesterJustificationConfigNotMandatoryPtrOutputWithContext

func (i EntitlementRequesterJustificationConfigNotMandatoryArgs) ToEntitlementRequesterJustificationConfigNotMandatoryPtrOutputWithContext(ctx context.Context) EntitlementRequesterJustificationConfigNotMandatoryPtrOutput

type EntitlementRequesterJustificationConfigNotMandatoryInput

type EntitlementRequesterJustificationConfigNotMandatoryInput interface {
	pulumi.Input

	ToEntitlementRequesterJustificationConfigNotMandatoryOutput() EntitlementRequesterJustificationConfigNotMandatoryOutput
	ToEntitlementRequesterJustificationConfigNotMandatoryOutputWithContext(context.Context) EntitlementRequesterJustificationConfigNotMandatoryOutput
}

EntitlementRequesterJustificationConfigNotMandatoryInput is an input type that accepts EntitlementRequesterJustificationConfigNotMandatoryArgs and EntitlementRequesterJustificationConfigNotMandatoryOutput values. You can construct a concrete instance of `EntitlementRequesterJustificationConfigNotMandatoryInput` via:

EntitlementRequesterJustificationConfigNotMandatoryArgs{...}

type EntitlementRequesterJustificationConfigNotMandatoryOutput

type EntitlementRequesterJustificationConfigNotMandatoryOutput struct{ *pulumi.OutputState }

func (EntitlementRequesterJustificationConfigNotMandatoryOutput) ElementType

func (EntitlementRequesterJustificationConfigNotMandatoryOutput) ToEntitlementRequesterJustificationConfigNotMandatoryOutput

func (EntitlementRequesterJustificationConfigNotMandatoryOutput) ToEntitlementRequesterJustificationConfigNotMandatoryOutputWithContext

func (o EntitlementRequesterJustificationConfigNotMandatoryOutput) ToEntitlementRequesterJustificationConfigNotMandatoryOutputWithContext(ctx context.Context) EntitlementRequesterJustificationConfigNotMandatoryOutput

func (EntitlementRequesterJustificationConfigNotMandatoryOutput) ToEntitlementRequesterJustificationConfigNotMandatoryPtrOutput

func (EntitlementRequesterJustificationConfigNotMandatoryOutput) ToEntitlementRequesterJustificationConfigNotMandatoryPtrOutputWithContext

func (o EntitlementRequesterJustificationConfigNotMandatoryOutput) ToEntitlementRequesterJustificationConfigNotMandatoryPtrOutputWithContext(ctx context.Context) EntitlementRequesterJustificationConfigNotMandatoryPtrOutput

type EntitlementRequesterJustificationConfigNotMandatoryPtrInput

type EntitlementRequesterJustificationConfigNotMandatoryPtrInput interface {
	pulumi.Input

	ToEntitlementRequesterJustificationConfigNotMandatoryPtrOutput() EntitlementRequesterJustificationConfigNotMandatoryPtrOutput
	ToEntitlementRequesterJustificationConfigNotMandatoryPtrOutputWithContext(context.Context) EntitlementRequesterJustificationConfigNotMandatoryPtrOutput
}

EntitlementRequesterJustificationConfigNotMandatoryPtrInput is an input type that accepts EntitlementRequesterJustificationConfigNotMandatoryArgs, EntitlementRequesterJustificationConfigNotMandatoryPtr and EntitlementRequesterJustificationConfigNotMandatoryPtrOutput values. You can construct a concrete instance of `EntitlementRequesterJustificationConfigNotMandatoryPtrInput` via:

        EntitlementRequesterJustificationConfigNotMandatoryArgs{...}

or:

        nil

type EntitlementRequesterJustificationConfigNotMandatoryPtrOutput

type EntitlementRequesterJustificationConfigNotMandatoryPtrOutput struct{ *pulumi.OutputState }

func (EntitlementRequesterJustificationConfigNotMandatoryPtrOutput) Elem

func (EntitlementRequesterJustificationConfigNotMandatoryPtrOutput) ElementType

func (EntitlementRequesterJustificationConfigNotMandatoryPtrOutput) ToEntitlementRequesterJustificationConfigNotMandatoryPtrOutput

func (EntitlementRequesterJustificationConfigNotMandatoryPtrOutput) ToEntitlementRequesterJustificationConfigNotMandatoryPtrOutputWithContext

func (o EntitlementRequesterJustificationConfigNotMandatoryPtrOutput) ToEntitlementRequesterJustificationConfigNotMandatoryPtrOutputWithContext(ctx context.Context) EntitlementRequesterJustificationConfigNotMandatoryPtrOutput

type EntitlementRequesterJustificationConfigOutput

type EntitlementRequesterJustificationConfigOutput struct{ *pulumi.OutputState }

func (EntitlementRequesterJustificationConfigOutput) ElementType

func (EntitlementRequesterJustificationConfigOutput) NotMandatory

The justification is not mandatory but can be provided in any of the supported formats.

func (EntitlementRequesterJustificationConfigOutput) ToEntitlementRequesterJustificationConfigOutput

func (o EntitlementRequesterJustificationConfigOutput) ToEntitlementRequesterJustificationConfigOutput() EntitlementRequesterJustificationConfigOutput

func (EntitlementRequesterJustificationConfigOutput) ToEntitlementRequesterJustificationConfigOutputWithContext

func (o EntitlementRequesterJustificationConfigOutput) ToEntitlementRequesterJustificationConfigOutputWithContext(ctx context.Context) EntitlementRequesterJustificationConfigOutput

func (EntitlementRequesterJustificationConfigOutput) ToEntitlementRequesterJustificationConfigPtrOutput

func (o EntitlementRequesterJustificationConfigOutput) ToEntitlementRequesterJustificationConfigPtrOutput() EntitlementRequesterJustificationConfigPtrOutput

func (EntitlementRequesterJustificationConfigOutput) ToEntitlementRequesterJustificationConfigPtrOutputWithContext

func (o EntitlementRequesterJustificationConfigOutput) ToEntitlementRequesterJustificationConfigPtrOutputWithContext(ctx context.Context) EntitlementRequesterJustificationConfigPtrOutput

func (EntitlementRequesterJustificationConfigOutput) Unstructured

The requester has to provide a justification in the form of free flowing text.

***

type EntitlementRequesterJustificationConfigPtrInput

type EntitlementRequesterJustificationConfigPtrInput interface {
	pulumi.Input

	ToEntitlementRequesterJustificationConfigPtrOutput() EntitlementRequesterJustificationConfigPtrOutput
	ToEntitlementRequesterJustificationConfigPtrOutputWithContext(context.Context) EntitlementRequesterJustificationConfigPtrOutput
}

EntitlementRequesterJustificationConfigPtrInput is an input type that accepts EntitlementRequesterJustificationConfigArgs, EntitlementRequesterJustificationConfigPtr and EntitlementRequesterJustificationConfigPtrOutput values. You can construct a concrete instance of `EntitlementRequesterJustificationConfigPtrInput` via:

        EntitlementRequesterJustificationConfigArgs{...}

or:

        nil

type EntitlementRequesterJustificationConfigPtrOutput

type EntitlementRequesterJustificationConfigPtrOutput struct{ *pulumi.OutputState }

func (EntitlementRequesterJustificationConfigPtrOutput) Elem

func (EntitlementRequesterJustificationConfigPtrOutput) ElementType

func (EntitlementRequesterJustificationConfigPtrOutput) NotMandatory

The justification is not mandatory but can be provided in any of the supported formats.

func (EntitlementRequesterJustificationConfigPtrOutput) ToEntitlementRequesterJustificationConfigPtrOutput

func (o EntitlementRequesterJustificationConfigPtrOutput) ToEntitlementRequesterJustificationConfigPtrOutput() EntitlementRequesterJustificationConfigPtrOutput

func (EntitlementRequesterJustificationConfigPtrOutput) ToEntitlementRequesterJustificationConfigPtrOutputWithContext

func (o EntitlementRequesterJustificationConfigPtrOutput) ToEntitlementRequesterJustificationConfigPtrOutputWithContext(ctx context.Context) EntitlementRequesterJustificationConfigPtrOutput

func (EntitlementRequesterJustificationConfigPtrOutput) Unstructured

The requester has to provide a justification in the form of free flowing text.

***

type EntitlementRequesterJustificationConfigUnstructured

type EntitlementRequesterJustificationConfigUnstructured struct {
}

type EntitlementRequesterJustificationConfigUnstructuredArgs

type EntitlementRequesterJustificationConfigUnstructuredArgs struct {
}

func (EntitlementRequesterJustificationConfigUnstructuredArgs) ElementType

func (EntitlementRequesterJustificationConfigUnstructuredArgs) ToEntitlementRequesterJustificationConfigUnstructuredOutput

func (EntitlementRequesterJustificationConfigUnstructuredArgs) ToEntitlementRequesterJustificationConfigUnstructuredOutputWithContext

func (i EntitlementRequesterJustificationConfigUnstructuredArgs) ToEntitlementRequesterJustificationConfigUnstructuredOutputWithContext(ctx context.Context) EntitlementRequesterJustificationConfigUnstructuredOutput

func (EntitlementRequesterJustificationConfigUnstructuredArgs) ToEntitlementRequesterJustificationConfigUnstructuredPtrOutput

func (i EntitlementRequesterJustificationConfigUnstructuredArgs) ToEntitlementRequesterJustificationConfigUnstructuredPtrOutput() EntitlementRequesterJustificationConfigUnstructuredPtrOutput

func (EntitlementRequesterJustificationConfigUnstructuredArgs) ToEntitlementRequesterJustificationConfigUnstructuredPtrOutputWithContext

func (i EntitlementRequesterJustificationConfigUnstructuredArgs) ToEntitlementRequesterJustificationConfigUnstructuredPtrOutputWithContext(ctx context.Context) EntitlementRequesterJustificationConfigUnstructuredPtrOutput

type EntitlementRequesterJustificationConfigUnstructuredInput

type EntitlementRequesterJustificationConfigUnstructuredInput interface {
	pulumi.Input

	ToEntitlementRequesterJustificationConfigUnstructuredOutput() EntitlementRequesterJustificationConfigUnstructuredOutput
	ToEntitlementRequesterJustificationConfigUnstructuredOutputWithContext(context.Context) EntitlementRequesterJustificationConfigUnstructuredOutput
}

EntitlementRequesterJustificationConfigUnstructuredInput is an input type that accepts EntitlementRequesterJustificationConfigUnstructuredArgs and EntitlementRequesterJustificationConfigUnstructuredOutput values. You can construct a concrete instance of `EntitlementRequesterJustificationConfigUnstructuredInput` via:

EntitlementRequesterJustificationConfigUnstructuredArgs{...}

type EntitlementRequesterJustificationConfigUnstructuredOutput

type EntitlementRequesterJustificationConfigUnstructuredOutput struct{ *pulumi.OutputState }

func (EntitlementRequesterJustificationConfigUnstructuredOutput) ElementType

func (EntitlementRequesterJustificationConfigUnstructuredOutput) ToEntitlementRequesterJustificationConfigUnstructuredOutput

func (EntitlementRequesterJustificationConfigUnstructuredOutput) ToEntitlementRequesterJustificationConfigUnstructuredOutputWithContext

func (o EntitlementRequesterJustificationConfigUnstructuredOutput) ToEntitlementRequesterJustificationConfigUnstructuredOutputWithContext(ctx context.Context) EntitlementRequesterJustificationConfigUnstructuredOutput

func (EntitlementRequesterJustificationConfigUnstructuredOutput) ToEntitlementRequesterJustificationConfigUnstructuredPtrOutput

func (EntitlementRequesterJustificationConfigUnstructuredOutput) ToEntitlementRequesterJustificationConfigUnstructuredPtrOutputWithContext

func (o EntitlementRequesterJustificationConfigUnstructuredOutput) ToEntitlementRequesterJustificationConfigUnstructuredPtrOutputWithContext(ctx context.Context) EntitlementRequesterJustificationConfigUnstructuredPtrOutput

type EntitlementRequesterJustificationConfigUnstructuredPtrInput

type EntitlementRequesterJustificationConfigUnstructuredPtrInput interface {
	pulumi.Input

	ToEntitlementRequesterJustificationConfigUnstructuredPtrOutput() EntitlementRequesterJustificationConfigUnstructuredPtrOutput
	ToEntitlementRequesterJustificationConfigUnstructuredPtrOutputWithContext(context.Context) EntitlementRequesterJustificationConfigUnstructuredPtrOutput
}

EntitlementRequesterJustificationConfigUnstructuredPtrInput is an input type that accepts EntitlementRequesterJustificationConfigUnstructuredArgs, EntitlementRequesterJustificationConfigUnstructuredPtr and EntitlementRequesterJustificationConfigUnstructuredPtrOutput values. You can construct a concrete instance of `EntitlementRequesterJustificationConfigUnstructuredPtrInput` via:

        EntitlementRequesterJustificationConfigUnstructuredArgs{...}

or:

        nil

type EntitlementRequesterJustificationConfigUnstructuredPtrOutput

type EntitlementRequesterJustificationConfigUnstructuredPtrOutput struct{ *pulumi.OutputState }

func (EntitlementRequesterJustificationConfigUnstructuredPtrOutput) Elem

func (EntitlementRequesterJustificationConfigUnstructuredPtrOutput) ElementType

func (EntitlementRequesterJustificationConfigUnstructuredPtrOutput) ToEntitlementRequesterJustificationConfigUnstructuredPtrOutput

func (EntitlementRequesterJustificationConfigUnstructuredPtrOutput) ToEntitlementRequesterJustificationConfigUnstructuredPtrOutputWithContext

func (o EntitlementRequesterJustificationConfigUnstructuredPtrOutput) ToEntitlementRequesterJustificationConfigUnstructuredPtrOutputWithContext(ctx context.Context) EntitlementRequesterJustificationConfigUnstructuredPtrOutput

type EntitlementState

type EntitlementState struct {
	// AdditionalNotificationTargets includes email addresses to be notified.
	AdditionalNotificationTargets EntitlementAdditionalNotificationTargetsPtrInput
	// The approvals needed before access will be granted to a requester. No approvals will be needed if this field is null.
	// Different types of approval workflows that can be used to gate privileged access granting.
	ApprovalWorkflow EntitlementApprovalWorkflowPtrInput
	// Output only. Create time stamp. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits.
	// Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z"
	CreateTime pulumi.StringPtrInput
	// Who can create Grants using Entitlement. This list should contain at most one entry
	// Structure is documented below.
	EligibleUsers EntitlementEligibleUserArrayInput
	// The ID to use for this Entitlement. This will become the last part of the resource name.
	// This value should be 4-63 characters, and valid characters are "[a-z]", "[0-9]", and "-". The first character should be from [a-z].
	// This value should be unique among all other Entitlements under the specified `parent`.
	EntitlementId pulumi.StringPtrInput
	// For Resource freshness validation (https://google.aip.dev/154)
	Etag pulumi.StringPtrInput
	// The region of the Entitlement resource.
	Location pulumi.StringPtrInput
	// The maximum amount of time for which access would be granted for a request.
	// A requester can choose to ask for access for less than this duration but never more.
	// Format: calculate the time in seconds and concatenate it with 's' i.e. 2 hours = "7200s", 45 minutes = "2700s"
	MaxRequestDuration pulumi.StringPtrInput
	// Output Only. The entitlement's name follows a hierarchical structure, comprising the organization, folder, or project, alongside the region and a unique entitlement ID.
	// Formats: organizations/{organization-number}/locations/{region}/entitlements/{entitlement-id}, folders/{folder-number}/locations/{region}/entitlements/{entitlement-id}, and projects/{project-id|project-number}/locations/{region}/entitlements/{entitlement-id}.
	Name pulumi.StringPtrInput
	// Format: projects/{project-id|project-number} or organizations/{organization-number} or folders/{folder-number}
	Parent pulumi.StringPtrInput
	// Privileged access that this service can be used to gate.
	// Structure is documented below.
	PrivilegedAccess EntitlementPrivilegedAccessPtrInput
	// Defines the ways in which a requester should provide the justification while requesting for access.
	// Structure is documented below.
	RequesterJustificationConfig EntitlementRequesterJustificationConfigPtrInput
	// Output only. The current state of the Entitlement.
	State pulumi.StringPtrInput
	// Output only. Update time stamp. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits.
	// Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
	UpdateTime pulumi.StringPtrInput
}

func (EntitlementState) ElementType

func (EntitlementState) ElementType() reflect.Type

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL