We recommend new projects start with resources from the AWS provider.
aws-native.datazone.PolicyGrant
Explore with Pulumi AI
We recommend new projects start with resources from the AWS provider.
Policy Grant in AWS DataZone is an explicit authorization assignment that allows a specific principal (user, group, or project) to perform particular actions (such as creating glossary terms, managing projects, or accessing resources) on governed resources within a certain scope (like a Domain Unit or Project). Policy Grants are essentially the mechanism by which DataZone enforces fine-grained, role-based access control beyond what is possible through AWS IAM alone.
Create PolicyGrant Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new PolicyGrant(name: string, args: PolicyGrantArgs, opts?: CustomResourceOptions);
@overload
def PolicyGrant(resource_name: str,
args: PolicyGrantArgs,
opts: Optional[ResourceOptions] = None)
@overload
def PolicyGrant(resource_name: str,
opts: Optional[ResourceOptions] = None,
domain_identifier: Optional[str] = None,
entity_identifier: Optional[str] = None,
entity_type: Optional[PolicyGrantTargetEntityType] = None,
policy_type: Optional[str] = None,
detail: Optional[Union[PolicyGrantDetail0PropertiesArgs, PolicyGrantDetail1PropertiesArgs, PolicyGrantDetail2PropertiesArgs, PolicyGrantDetail3PropertiesArgs, PolicyGrantDetail4PropertiesArgs, PolicyGrantDetail5PropertiesArgs, PolicyGrantDetail6PropertiesArgs, PolicyGrantDetail7PropertiesArgs, PolicyGrantDetail8PropertiesArgs, PolicyGrantDetail9PropertiesArgs, PolicyGrantDetail10PropertiesArgs, PolicyGrantDetail11PropertiesArgs, PolicyGrantDetail12PropertiesArgs]] = None,
principal: Optional[Union[PolicyGrantPrincipal0PropertiesArgs, PolicyGrantPrincipal1PropertiesArgs, PolicyGrantPrincipal2PropertiesArgs, PolicyGrantPrincipal3PropertiesArgs]] = None)
func NewPolicyGrant(ctx *Context, name string, args PolicyGrantArgs, opts ...ResourceOption) (*PolicyGrant, error)
public PolicyGrant(string name, PolicyGrantArgs args, CustomResourceOptions? opts = null)
public PolicyGrant(String name, PolicyGrantArgs args)
public PolicyGrant(String name, PolicyGrantArgs args, CustomResourceOptions options)
type: aws-native:datazone:PolicyGrant
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args PolicyGrantArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args PolicyGrantArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args PolicyGrantArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args PolicyGrantArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args PolicyGrantArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
PolicyGrant Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The PolicyGrant resource accepts the following input properties:
- Domain
Identifier string - The ID of the domain where you want to add a policy grant.
- Entity
Identifier string - The ID of the entity (resource) to which you want to add a policy grant.
- Entity
Type Pulumi.Aws Native. Data Zone. Policy Grant Target Entity Type - The type of entity (resource) to which the grant is added.
- Policy
Type string - The type of policy that you want to grant.
- Detail
Pulumi.
Aws | Pulumi.Native. Data Zone. Inputs. Policy Grant Detail0Properties Aws | Pulumi.Native. Data Zone. Inputs. Policy Grant Detail1Properties Aws | Pulumi.Native. Data Zone. Inputs. Policy Grant Detail2Properties Aws | Pulumi.Native. Data Zone. Inputs. Policy Grant Detail3Properties Aws | Pulumi.Native. Data Zone. Inputs. Policy Grant Detail4Properties Aws | Pulumi.Native. Data Zone. Inputs. Policy Grant Detail5Properties Aws | Pulumi.Native. Data Zone. Inputs. Policy Grant Detail6Properties Aws | Pulumi.Native. Data Zone. Inputs. Policy Grant Detail7Properties Aws | Pulumi.Native. Data Zone. Inputs. Policy Grant Detail8Properties Aws | Pulumi.Native. Data Zone. Inputs. Policy Grant Detail9Properties Aws | Pulumi.Native. Data Zone. Inputs. Policy Grant Detail10Properties Aws | Pulumi.Native. Data Zone. Inputs. Policy Grant Detail11Properties Aws Native. Data Zone. Inputs. Policy Grant Detail12Properties - The details of the policy grant member.
- Principal
Pulumi.
Aws | Pulumi.Native. Data Zone. Inputs. Policy Grant Principal0Properties Aws | Pulumi.Native. Data Zone. Inputs. Policy Grant Principal1Properties Aws | Pulumi.Native. Data Zone. Inputs. Policy Grant Principal2Properties Aws Native. Data Zone. Inputs. Policy Grant Principal3Properties - The principal of the policy grant member.
- Domain
Identifier string - The ID of the domain where you want to add a policy grant.
- Entity
Identifier string - The ID of the entity (resource) to which you want to add a policy grant.
- Entity
Type PolicyGrant Target Entity Type - The type of entity (resource) to which the grant is added.
- Policy
Type string - The type of policy that you want to grant.
- Detail
Policy
Grant | PolicyDetail0Properties Args Grant | PolicyDetail1Properties Args Grant | PolicyDetail2Properties Args Grant | PolicyDetail3Properties Args Grant | PolicyDetail4Properties Args Grant | PolicyDetail5Properties Args Grant | PolicyDetail6Properties Args Grant | PolicyDetail7Properties Args Grant | PolicyDetail8Properties Args Grant | PolicyDetail9Properties Args Grant | PolicyDetail10Properties Args Grant | PolicyDetail11Properties Args Grant Detail12Properties Args - The details of the policy grant member.
- Principal
Policy
Grant | PolicyPrincipal0Properties Args Grant | PolicyPrincipal1Properties Args Grant | PolicyPrincipal2Properties Args Grant Principal3Properties Args - The principal of the policy grant member.
- domain
Identifier String - The ID of the domain where you want to add a policy grant.
- entity
Identifier String - The ID of the entity (resource) to which you want to add a policy grant.
- entity
Type PolicyGrant Target Entity Type - The type of entity (resource) to which the grant is added.
- policy
Type String - The type of policy that you want to grant.
- detail
Policy
Grant | PolicyDetail0Properties Grant | PolicyDetail1Properties Grant | PolicyDetail2Properties Grant | PolicyDetail3Properties Grant | PolicyDetail4Properties Grant | PolicyDetail5Properties Grant | PolicyDetail6Properties Grant | PolicyDetail7Properties Grant | PolicyDetail8Properties Grant | PolicyDetail9Properties Grant | PolicyDetail10Properties Grant | PolicyDetail11Properties Grant Detail12Properties - The details of the policy grant member.
- principal
Policy
Grant | PolicyPrincipal0Properties Grant | PolicyPrincipal1Properties Grant | PolicyPrincipal2Properties Grant Principal3Properties - The principal of the policy grant member.
- domain
Identifier string - The ID of the domain where you want to add a policy grant.
- entity
Identifier string - The ID of the entity (resource) to which you want to add a policy grant.
- entity
Type PolicyGrant Target Entity Type - The type of entity (resource) to which the grant is added.
- policy
Type string - The type of policy that you want to grant.
- detail
Policy
Grant | PolicyDetail0Properties Grant | PolicyDetail1Properties Grant | PolicyDetail2Properties Grant | PolicyDetail3Properties Grant | PolicyDetail4Properties Grant | PolicyDetail5Properties Grant | PolicyDetail6Properties Grant | PolicyDetail7Properties Grant | PolicyDetail8Properties Grant | PolicyDetail9Properties Grant | PolicyDetail10Properties Grant | PolicyDetail11Properties Grant Detail12Properties - The details of the policy grant member.
- principal
Policy
Grant | PolicyPrincipal0Properties Grant | PolicyPrincipal1Properties Grant | PolicyPrincipal2Properties Grant Principal3Properties - The principal of the policy grant member.
- domain_
identifier str - The ID of the domain where you want to add a policy grant.
- entity_
identifier str - The ID of the entity (resource) to which you want to add a policy grant.
- entity_
type PolicyGrant Target Entity Type - The type of entity (resource) to which the grant is added.
- policy_
type str - The type of policy that you want to grant.
- detail
Policy
Grant | PolicyDetail0Properties Args Grant | PolicyDetail1Properties Args Grant | PolicyDetail2Properties Args Grant | PolicyDetail3Properties Args Grant | PolicyDetail4Properties Args Grant | PolicyDetail5Properties Args Grant | PolicyDetail6Properties Args Grant | PolicyDetail7Properties Args Grant | PolicyDetail8Properties Args Grant | PolicyDetail9Properties Args Grant | PolicyDetail10Properties Args Grant | PolicyDetail11Properties Args Grant Detail12Properties Args - The details of the policy grant member.
- principal
Policy
Grant | PolicyPrincipal0Properties Args Grant | PolicyPrincipal1Properties Args Grant | PolicyPrincipal2Properties Args Grant Principal3Properties Args - The principal of the policy grant member.
- domain
Identifier String - The ID of the domain where you want to add a policy grant.
- entity
Identifier String - The ID of the entity (resource) to which you want to add a policy grant.
- entity
Type "DomainUnit" | "Environment Blueprint Configuration" | "Environment Profile" | "ASSET_TYPE" - The type of entity (resource) to which the grant is added.
- policy
Type String - The type of policy that you want to grant.
- detail Property Map | Property Map | Property Map | Property Map | Property Map | Property Map | Property Map | Property Map | Property Map | Property Map | Property Map | Property Map | Property Map
- The details of the policy grant member.
- principal Property Map | Property Map | Property Map | Property Map
- The principal of the policy grant member.
Outputs
All input properties are implicitly available as output properties. Additionally, the PolicyGrant resource produces the following output properties:
- Created
At string - Specifies the timestamp at which policy grant member was created.
- Created
By string - Specifies the user who created the policy grant member.
- Grant
Id string - The unique identifier of the policy grant returned by the AddPolicyGrant API
- Id string
- The provider-assigned unique ID for this managed resource.
- Created
At string - Specifies the timestamp at which policy grant member was created.
- Created
By string - Specifies the user who created the policy grant member.
- Grant
Id string - The unique identifier of the policy grant returned by the AddPolicyGrant API
- Id string
- The provider-assigned unique ID for this managed resource.
- created
At String - Specifies the timestamp at which policy grant member was created.
- created
By String - Specifies the user who created the policy grant member.
- grant
Id String - The unique identifier of the policy grant returned by the AddPolicyGrant API
- id String
- The provider-assigned unique ID for this managed resource.
- created
At string - Specifies the timestamp at which policy grant member was created.
- created
By string - Specifies the user who created the policy grant member.
- grant
Id string - The unique identifier of the policy grant returned by the AddPolicyGrant API
- id string
- The provider-assigned unique ID for this managed resource.
- created_
at str - Specifies the timestamp at which policy grant member was created.
- created_
by str - Specifies the user who created the policy grant member.
- grant_
id str - The unique identifier of the policy grant returned by the AddPolicyGrant API
- id str
- The provider-assigned unique ID for this managed resource.
- created
At String - Specifies the timestamp at which policy grant member was created.
- created
By String - Specifies the user who created the policy grant member.
- grant
Id String - The unique identifier of the policy grant returned by the AddPolicyGrant API
- id String
- The provider-assigned unique ID for this managed resource.
Supporting Types
PolicyGrantAddToProjectMemberPoolPolicyGrantDetail, PolicyGrantAddToProjectMemberPoolPolicyGrantDetailArgs
- include
Child BooleanDomain Units
- include
Child booleanDomain Units
- include
Child BooleanDomain Units
PolicyGrantCreateAssetTypePolicyGrantDetail, PolicyGrantCreateAssetTypePolicyGrantDetailArgs
- include
Child BooleanDomain Units
- include
Child booleanDomain Units
- include
Child BooleanDomain Units
PolicyGrantCreateDomainUnitPolicyGrantDetail, PolicyGrantCreateDomainUnitPolicyGrantDetailArgs
- include
Child BooleanDomain Units
- include
Child booleanDomain Units
- include
Child BooleanDomain Units
PolicyGrantCreateEnvironmentProfilePolicyGrantDetail, PolicyGrantCreateEnvironmentProfilePolicyGrantDetailArgs
- Domain
Unit stringId
- Domain
Unit stringId
- domain
Unit StringId
- domain
Unit stringId
- domain_
unit_ strid
- domain
Unit StringId
PolicyGrantCreateFormTypePolicyGrantDetail, PolicyGrantCreateFormTypePolicyGrantDetailArgs
- include
Child BooleanDomain Units
- include
Child booleanDomain Units
- include
Child BooleanDomain Units
PolicyGrantCreateGlossaryPolicyGrantDetail, PolicyGrantCreateGlossaryPolicyGrantDetailArgs
- include
Child BooleanDomain Units
- include
Child booleanDomain Units
- include
Child BooleanDomain Units
PolicyGrantCreateProjectFromProjectProfilePolicyGrantDetail, PolicyGrantCreateProjectFromProjectProfilePolicyGrantDetailArgs
- Include
Child boolDomain Units - Project
Profiles List<string>
- Include
Child boolDomain Units - Project
Profiles []string
- include
Child BooleanDomain Units - project
Profiles List<String>
- include
Child booleanDomain Units - project
Profiles string[]
- include_
child_ booldomain_ units - project_
profiles Sequence[str]
- include
Child BooleanDomain Units - project
Profiles List<String>
PolicyGrantCreateProjectPolicyGrantDetail, PolicyGrantCreateProjectPolicyGrantDetailArgs
- include
Child BooleanDomain Units
- include
Child booleanDomain Units
- include
Child BooleanDomain Units
PolicyGrantDetail0Properties, PolicyGrantDetail0PropertiesArgs
PolicyGrantDetail10Properties, PolicyGrantDetail10PropertiesArgs
PolicyGrantDetail11Properties, PolicyGrantDetail11PropertiesArgs
PolicyGrantDetail12Properties, PolicyGrantDetail12PropertiesArgs
PolicyGrantDetail1Properties, PolicyGrantDetail1PropertiesArgs
PolicyGrantDetail2Properties, PolicyGrantDetail2PropertiesArgs
PolicyGrantDetail3Properties, PolicyGrantDetail3PropertiesArgs
PolicyGrantDetail4Properties, PolicyGrantDetail4PropertiesArgs
PolicyGrantDetail5Properties, PolicyGrantDetail5PropertiesArgs
PolicyGrantDetail6Properties, PolicyGrantDetail6PropertiesArgs
PolicyGrantDetail7Properties, PolicyGrantDetail7PropertiesArgs
PolicyGrantDetail8Properties, PolicyGrantDetail8PropertiesArgs
PolicyGrantDetail9Properties, PolicyGrantDetail9PropertiesArgs
PolicyGrantDomainUnitDesignation, PolicyGrantDomainUnitDesignationArgs
- Owner
- OWNER
- Policy
Grant Domain Unit Designation Owner - OWNER
- Owner
- OWNER
- Owner
- OWNER
- OWNER
- OWNER
- "OWNER"
- OWNER
PolicyGrantDomainUnitFilterForProject, PolicyGrantDomainUnitFilterForProjectArgs
- Domain
Unit string - Include
Child boolDomain Units
- Domain
Unit string - Include
Child boolDomain Units
- domain
Unit String - include
Child BooleanDomain Units
- domain
Unit string - include
Child booleanDomain Units
- domain
Unit String - include
Child BooleanDomain Units
PolicyGrantDomainUnitGrantFilterProperties, PolicyGrantDomainUnitGrantFilterPropertiesArgs
PolicyGrantDomainUnitPolicyGrantPrincipal, PolicyGrantDomainUnitPolicyGrantPrincipalArgs
PolicyGrantGroupPolicyGrantPrincipalProperties, PolicyGrantGroupPolicyGrantPrincipalPropertiesArgs
- Group
Identifier string
- Group
Identifier string
- group
Identifier String
- group
Identifier string
- group_
identifier str
- group
Identifier String
PolicyGrantOverrideDomainUnitOwnersPolicyGrantDetail, PolicyGrantOverrideDomainUnitOwnersPolicyGrantDetailArgs
- include
Child BooleanDomain Units
- include
Child booleanDomain Units
- include
Child BooleanDomain Units
PolicyGrantOverrideProjectOwnersPolicyGrantDetail, PolicyGrantOverrideProjectOwnersPolicyGrantDetailArgs
- include
Child BooleanDomain Units
- include
Child booleanDomain Units
- include
Child BooleanDomain Units
PolicyGrantPrincipal0Properties, PolicyGrantPrincipal0PropertiesArgs
PolicyGrantPrincipal1Properties, PolicyGrantPrincipal1PropertiesArgs
PolicyGrantPrincipal2Properties, PolicyGrantPrincipal2PropertiesArgs
PolicyGrantPrincipal3Properties, PolicyGrantPrincipal3PropertiesArgs
PolicyGrantProjectDesignation, PolicyGrantProjectDesignationArgs
- Owner
- OWNER
- Contributor
- CONTRIBUTOR
- Project
Catalog Steward - PROJECT_CATALOG_STEWARD
- Policy
Grant Project Designation Owner - OWNER
- Policy
Grant Project Designation Contributor - CONTRIBUTOR
- Policy
Grant Project Designation Project Catalog Steward - PROJECT_CATALOG_STEWARD
- Owner
- OWNER
- Contributor
- CONTRIBUTOR
- Project
Catalog Steward - PROJECT_CATALOG_STEWARD
- Owner
- OWNER
- Contributor
- CONTRIBUTOR
- Project
Catalog Steward - PROJECT_CATALOG_STEWARD
- OWNER
- OWNER
- CONTRIBUTOR
- CONTRIBUTOR
- PROJECT_CATALOG_STEWARD
- PROJECT_CATALOG_STEWARD
- "OWNER"
- OWNER
- "CONTRIBUTOR"
- CONTRIBUTOR
- "PROJECT_CATALOG_STEWARD"
- PROJECT_CATALOG_STEWARD
PolicyGrantProjectGrantFilterProperties, PolicyGrantProjectGrantFilterPropertiesArgs
PolicyGrantProjectPolicyGrantPrincipal, PolicyGrantProjectPolicyGrantPrincipalArgs
PolicyGrantTargetEntityType, PolicyGrantTargetEntityTypeArgs
- Domain
Unit - DomainUnit
- Environment
Blueprint Configuration - EnvironmentBlueprintConfiguration
- Environment
Profile - EnvironmentProfile
- Asset
Type - ASSET_TYPE
- Policy
Grant Target Entity Type Domain Unit - DomainUnit
- Policy
Grant Target Entity Type Environment Blueprint Configuration - EnvironmentBlueprintConfiguration
- Policy
Grant Target Entity Type Environment Profile - EnvironmentProfile
- Policy
Grant Target Entity Type Asset Type - ASSET_TYPE
- Domain
Unit - DomainUnit
- Environment
Blueprint Configuration - EnvironmentBlueprintConfiguration
- Environment
Profile - EnvironmentProfile
- Asset
Type - ASSET_TYPE
- Domain
Unit - DomainUnit
- Environment
Blueprint Configuration - EnvironmentBlueprintConfiguration
- Environment
Profile - EnvironmentProfile
- Asset
Type - ASSET_TYPE
- DOMAIN_UNIT
- DomainUnit
- ENVIRONMENT_BLUEPRINT_CONFIGURATION
- EnvironmentBlueprintConfiguration
- ENVIRONMENT_PROFILE
- EnvironmentProfile
- ASSET_TYPE
- ASSET_TYPE
- "Domain
Unit" - DomainUnit
- "Environment
Blueprint Configuration" - EnvironmentBlueprintConfiguration
- "Environment
Profile" - EnvironmentProfile
- "ASSET_TYPE"
- ASSET_TYPE
PolicyGrantUserPolicyGrantPrincipal0Properties, PolicyGrantUserPolicyGrantPrincipal0PropertiesArgs
- User
Identifier string
- User
Identifier string
- user
Identifier String
- user
Identifier string
- user_
identifier str
- user
Identifier String
PolicyGrantUserPolicyGrantPrincipal1Properties, PolicyGrantUserPolicyGrantPrincipal1PropertiesArgs
Package Details
- Repository
- AWS Native pulumi/pulumi-aws-native
- License
- Apache-2.0
We recommend new projects start with resources from the AWS provider.