1. Packages
  2. AWS Cloud Control
  3. API Docs
  4. datazone
  5. PolicyGrant

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.34.0 published on Friday, Sep 12, 2025 by Pulumi

aws-native.datazone.PolicyGrant

Explore with Pulumi AI

aws-native logo

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.34.0 published on Friday, Sep 12, 2025 by Pulumi

    Policy Grant in AWS DataZone is an explicit authorization assignment that allows a specific principal (user, group, or project) to perform particular actions (such as creating glossary terms, managing projects, or accessing resources) on governed resources within a certain scope (like a Domain Unit or Project). Policy Grants are essentially the mechanism by which DataZone enforces fine-grained, role-based access control beyond what is possible through AWS IAM alone.

    Create PolicyGrant Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new PolicyGrant(name: string, args: PolicyGrantArgs, opts?: CustomResourceOptions);
    @overload
    def PolicyGrant(resource_name: str,
                    args: PolicyGrantArgs,
                    opts: Optional[ResourceOptions] = None)
    
    @overload
    def PolicyGrant(resource_name: str,
                    opts: Optional[ResourceOptions] = None,
                    domain_identifier: Optional[str] = None,
                    entity_identifier: Optional[str] = None,
                    entity_type: Optional[PolicyGrantTargetEntityType] = None,
                    policy_type: Optional[str] = None,
                    detail: Optional[Union[PolicyGrantDetail0PropertiesArgs, PolicyGrantDetail1PropertiesArgs, PolicyGrantDetail2PropertiesArgs, PolicyGrantDetail3PropertiesArgs, PolicyGrantDetail4PropertiesArgs, PolicyGrantDetail5PropertiesArgs, PolicyGrantDetail6PropertiesArgs, PolicyGrantDetail7PropertiesArgs, PolicyGrantDetail8PropertiesArgs, PolicyGrantDetail9PropertiesArgs, PolicyGrantDetail10PropertiesArgs, PolicyGrantDetail11PropertiesArgs, PolicyGrantDetail12PropertiesArgs]] = None,
                    principal: Optional[Union[PolicyGrantPrincipal0PropertiesArgs, PolicyGrantPrincipal1PropertiesArgs, PolicyGrantPrincipal2PropertiesArgs, PolicyGrantPrincipal3PropertiesArgs]] = None)
    func NewPolicyGrant(ctx *Context, name string, args PolicyGrantArgs, opts ...ResourceOption) (*PolicyGrant, error)
    public PolicyGrant(string name, PolicyGrantArgs args, CustomResourceOptions? opts = null)
    public PolicyGrant(String name, PolicyGrantArgs args)
    public PolicyGrant(String name, PolicyGrantArgs args, CustomResourceOptions options)
    
    type: aws-native:datazone:PolicyGrant
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args PolicyGrantArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args PolicyGrantArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args PolicyGrantArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args PolicyGrantArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args PolicyGrantArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    PolicyGrant Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The PolicyGrant resource accepts the following input properties:

    DomainIdentifier string
    The ID of the domain where you want to add a policy grant.
    EntityIdentifier string
    The ID of the entity (resource) to which you want to add a policy grant.
    EntityType Pulumi.AwsNative.DataZone.PolicyGrantTargetEntityType
    The type of entity (resource) to which the grant is added.
    PolicyType string
    The type of policy that you want to grant.
    Detail Pulumi.AwsNative.DataZone.Inputs.PolicyGrantDetail0Properties | Pulumi.AwsNative.DataZone.Inputs.PolicyGrantDetail1Properties | Pulumi.AwsNative.DataZone.Inputs.PolicyGrantDetail2Properties | Pulumi.AwsNative.DataZone.Inputs.PolicyGrantDetail3Properties | Pulumi.AwsNative.DataZone.Inputs.PolicyGrantDetail4Properties | Pulumi.AwsNative.DataZone.Inputs.PolicyGrantDetail5Properties | Pulumi.AwsNative.DataZone.Inputs.PolicyGrantDetail6Properties | Pulumi.AwsNative.DataZone.Inputs.PolicyGrantDetail7Properties | Pulumi.AwsNative.DataZone.Inputs.PolicyGrantDetail8Properties | Pulumi.AwsNative.DataZone.Inputs.PolicyGrantDetail9Properties | Pulumi.AwsNative.DataZone.Inputs.PolicyGrantDetail10Properties | Pulumi.AwsNative.DataZone.Inputs.PolicyGrantDetail11Properties | Pulumi.AwsNative.DataZone.Inputs.PolicyGrantDetail12Properties
    The details of the policy grant member.
    Principal Pulumi.AwsNative.DataZone.Inputs.PolicyGrantPrincipal0Properties | Pulumi.AwsNative.DataZone.Inputs.PolicyGrantPrincipal1Properties | Pulumi.AwsNative.DataZone.Inputs.PolicyGrantPrincipal2Properties | Pulumi.AwsNative.DataZone.Inputs.PolicyGrantPrincipal3Properties
    The principal of the policy grant member.
    DomainIdentifier string
    The ID of the domain where you want to add a policy grant.
    EntityIdentifier string
    The ID of the entity (resource) to which you want to add a policy grant.
    EntityType PolicyGrantTargetEntityType
    The type of entity (resource) to which the grant is added.
    PolicyType string
    The type of policy that you want to grant.
    Detail PolicyGrantDetail0PropertiesArgs | PolicyGrantDetail1PropertiesArgs | PolicyGrantDetail2PropertiesArgs | PolicyGrantDetail3PropertiesArgs | PolicyGrantDetail4PropertiesArgs | PolicyGrantDetail5PropertiesArgs | PolicyGrantDetail6PropertiesArgs | PolicyGrantDetail7PropertiesArgs | PolicyGrantDetail8PropertiesArgs | PolicyGrantDetail9PropertiesArgs | PolicyGrantDetail10PropertiesArgs | PolicyGrantDetail11PropertiesArgs | PolicyGrantDetail12PropertiesArgs
    The details of the policy grant member.
    Principal PolicyGrantPrincipal0PropertiesArgs | PolicyGrantPrincipal1PropertiesArgs | PolicyGrantPrincipal2PropertiesArgs | PolicyGrantPrincipal3PropertiesArgs
    The principal of the policy grant member.
    domainIdentifier String
    The ID of the domain where you want to add a policy grant.
    entityIdentifier String
    The ID of the entity (resource) to which you want to add a policy grant.
    entityType PolicyGrantTargetEntityType
    The type of entity (resource) to which the grant is added.
    policyType String
    The type of policy that you want to grant.
    detail PolicyGrantDetail0Properties | PolicyGrantDetail1Properties | PolicyGrantDetail2Properties | PolicyGrantDetail3Properties | PolicyGrantDetail4Properties | PolicyGrantDetail5Properties | PolicyGrantDetail6Properties | PolicyGrantDetail7Properties | PolicyGrantDetail8Properties | PolicyGrantDetail9Properties | PolicyGrantDetail10Properties | PolicyGrantDetail11Properties | PolicyGrantDetail12Properties
    The details of the policy grant member.
    principal PolicyGrantPrincipal0Properties | PolicyGrantPrincipal1Properties | PolicyGrantPrincipal2Properties | PolicyGrantPrincipal3Properties
    The principal of the policy grant member.
    domainIdentifier string
    The ID of the domain where you want to add a policy grant.
    entityIdentifier string
    The ID of the entity (resource) to which you want to add a policy grant.
    entityType PolicyGrantTargetEntityType
    The type of entity (resource) to which the grant is added.
    policyType string
    The type of policy that you want to grant.
    detail PolicyGrantDetail0Properties | PolicyGrantDetail1Properties | PolicyGrantDetail2Properties | PolicyGrantDetail3Properties | PolicyGrantDetail4Properties | PolicyGrantDetail5Properties | PolicyGrantDetail6Properties | PolicyGrantDetail7Properties | PolicyGrantDetail8Properties | PolicyGrantDetail9Properties | PolicyGrantDetail10Properties | PolicyGrantDetail11Properties | PolicyGrantDetail12Properties
    The details of the policy grant member.
    principal PolicyGrantPrincipal0Properties | PolicyGrantPrincipal1Properties | PolicyGrantPrincipal2Properties | PolicyGrantPrincipal3Properties
    The principal of the policy grant member.
    domain_identifier str
    The ID of the domain where you want to add a policy grant.
    entity_identifier str
    The ID of the entity (resource) to which you want to add a policy grant.
    entity_type PolicyGrantTargetEntityType
    The type of entity (resource) to which the grant is added.
    policy_type str
    The type of policy that you want to grant.
    detail PolicyGrantDetail0PropertiesArgs | PolicyGrantDetail1PropertiesArgs | PolicyGrantDetail2PropertiesArgs | PolicyGrantDetail3PropertiesArgs | PolicyGrantDetail4PropertiesArgs | PolicyGrantDetail5PropertiesArgs | PolicyGrantDetail6PropertiesArgs | PolicyGrantDetail7PropertiesArgs | PolicyGrantDetail8PropertiesArgs | PolicyGrantDetail9PropertiesArgs | PolicyGrantDetail10PropertiesArgs | PolicyGrantDetail11PropertiesArgs | PolicyGrantDetail12PropertiesArgs
    The details of the policy grant member.
    principal PolicyGrantPrincipal0PropertiesArgs | PolicyGrantPrincipal1PropertiesArgs | PolicyGrantPrincipal2PropertiesArgs | PolicyGrantPrincipal3PropertiesArgs
    The principal of the policy grant member.
    domainIdentifier String
    The ID of the domain where you want to add a policy grant.
    entityIdentifier String
    The ID of the entity (resource) to which you want to add a policy grant.
    entityType "DomainUnit" | "EnvironmentBlueprintConfiguration" | "EnvironmentProfile" | "ASSET_TYPE"
    The type of entity (resource) to which the grant is added.
    policyType String
    The type of policy that you want to grant.
    detail Property Map | Property Map | Property Map | Property Map | Property Map | Property Map | Property Map | Property Map | Property Map | Property Map | Property Map | Property Map | Property Map
    The details of the policy grant member.
    principal Property Map | Property Map | Property Map | Property Map
    The principal of the policy grant member.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the PolicyGrant resource produces the following output properties:

    CreatedAt string
    Specifies the timestamp at which policy grant member was created.
    CreatedBy string
    Specifies the user who created the policy grant member.
    GrantId string
    The unique identifier of the policy grant returned by the AddPolicyGrant API
    Id string
    The provider-assigned unique ID for this managed resource.
    CreatedAt string
    Specifies the timestamp at which policy grant member was created.
    CreatedBy string
    Specifies the user who created the policy grant member.
    GrantId string
    The unique identifier of the policy grant returned by the AddPolicyGrant API
    Id string
    The provider-assigned unique ID for this managed resource.
    createdAt String
    Specifies the timestamp at which policy grant member was created.
    createdBy String
    Specifies the user who created the policy grant member.
    grantId String
    The unique identifier of the policy grant returned by the AddPolicyGrant API
    id String
    The provider-assigned unique ID for this managed resource.
    createdAt string
    Specifies the timestamp at which policy grant member was created.
    createdBy string
    Specifies the user who created the policy grant member.
    grantId string
    The unique identifier of the policy grant returned by the AddPolicyGrant API
    id string
    The provider-assigned unique ID for this managed resource.
    created_at str
    Specifies the timestamp at which policy grant member was created.
    created_by str
    Specifies the user who created the policy grant member.
    grant_id str
    The unique identifier of the policy grant returned by the AddPolicyGrant API
    id str
    The provider-assigned unique ID for this managed resource.
    createdAt String
    Specifies the timestamp at which policy grant member was created.
    createdBy String
    Specifies the user who created the policy grant member.
    grantId String
    The unique identifier of the policy grant returned by the AddPolicyGrant API
    id String
    The provider-assigned unique ID for this managed resource.

    Supporting Types

    PolicyGrantAddToProjectMemberPoolPolicyGrantDetail, PolicyGrantAddToProjectMemberPoolPolicyGrantDetailArgs

    PolicyGrantCreateAssetTypePolicyGrantDetail, PolicyGrantCreateAssetTypePolicyGrantDetailArgs

    PolicyGrantCreateDomainUnitPolicyGrantDetail, PolicyGrantCreateDomainUnitPolicyGrantDetailArgs

    PolicyGrantCreateEnvironmentProfilePolicyGrantDetail, PolicyGrantCreateEnvironmentProfilePolicyGrantDetailArgs

    PolicyGrantCreateFormTypePolicyGrantDetail, PolicyGrantCreateFormTypePolicyGrantDetailArgs

    PolicyGrantCreateGlossaryPolicyGrantDetail, PolicyGrantCreateGlossaryPolicyGrantDetailArgs

    PolicyGrantCreateProjectFromProjectProfilePolicyGrantDetail, PolicyGrantCreateProjectFromProjectProfilePolicyGrantDetailArgs

    PolicyGrantCreateProjectPolicyGrantDetail, PolicyGrantCreateProjectPolicyGrantDetailArgs

    PolicyGrantDetail0Properties, PolicyGrantDetail0PropertiesArgs

    PolicyGrantDetail10Properties, PolicyGrantDetail10PropertiesArgs

    PolicyGrantDetail11Properties, PolicyGrantDetail11PropertiesArgs

    PolicyGrantDetail12Properties, PolicyGrantDetail12PropertiesArgs

    PolicyGrantDetail1Properties, PolicyGrantDetail1PropertiesArgs

    PolicyGrantDetail2Properties, PolicyGrantDetail2PropertiesArgs

    PolicyGrantDetail3Properties, PolicyGrantDetail3PropertiesArgs

    PolicyGrantDetail4Properties, PolicyGrantDetail4PropertiesArgs

    PolicyGrantDetail5Properties, PolicyGrantDetail5PropertiesArgs

    PolicyGrantDetail6Properties, PolicyGrantDetail6PropertiesArgs

    PolicyGrantDetail7Properties, PolicyGrantDetail7PropertiesArgs

    PolicyGrantDetail8Properties, PolicyGrantDetail8PropertiesArgs

    PolicyGrantDetail9Properties, PolicyGrantDetail9PropertiesArgs

    PolicyGrantDomainUnitDesignation, PolicyGrantDomainUnitDesignationArgs

    Owner
    OWNER
    PolicyGrantDomainUnitDesignationOwner
    OWNER
    Owner
    OWNER
    Owner
    OWNER
    OWNER
    OWNER
    "OWNER"
    OWNER

    PolicyGrantDomainUnitFilterForProject, PolicyGrantDomainUnitFilterForProjectArgs

    PolicyGrantDomainUnitGrantFilterProperties, PolicyGrantDomainUnitGrantFilterPropertiesArgs

    PolicyGrantDomainUnitPolicyGrantPrincipal, PolicyGrantDomainUnitPolicyGrantPrincipalArgs

    PolicyGrantGroupPolicyGrantPrincipalProperties, PolicyGrantGroupPolicyGrantPrincipalPropertiesArgs

    PolicyGrantOverrideDomainUnitOwnersPolicyGrantDetail, PolicyGrantOverrideDomainUnitOwnersPolicyGrantDetailArgs

    PolicyGrantOverrideProjectOwnersPolicyGrantDetail, PolicyGrantOverrideProjectOwnersPolicyGrantDetailArgs

    PolicyGrantPrincipal0Properties, PolicyGrantPrincipal0PropertiesArgs

    PolicyGrantPrincipal1Properties, PolicyGrantPrincipal1PropertiesArgs

    PolicyGrantPrincipal2Properties, PolicyGrantPrincipal2PropertiesArgs

    PolicyGrantPrincipal3Properties, PolicyGrantPrincipal3PropertiesArgs

    PolicyGrantProjectDesignation, PolicyGrantProjectDesignationArgs

    Owner
    OWNER
    Contributor
    CONTRIBUTOR
    ProjectCatalogSteward
    PROJECT_CATALOG_STEWARD
    PolicyGrantProjectDesignationOwner
    OWNER
    PolicyGrantProjectDesignationContributor
    CONTRIBUTOR
    PolicyGrantProjectDesignationProjectCatalogSteward
    PROJECT_CATALOG_STEWARD
    Owner
    OWNER
    Contributor
    CONTRIBUTOR
    ProjectCatalogSteward
    PROJECT_CATALOG_STEWARD
    Owner
    OWNER
    Contributor
    CONTRIBUTOR
    ProjectCatalogSteward
    PROJECT_CATALOG_STEWARD
    OWNER
    OWNER
    CONTRIBUTOR
    CONTRIBUTOR
    PROJECT_CATALOG_STEWARD
    PROJECT_CATALOG_STEWARD
    "OWNER"
    OWNER
    "CONTRIBUTOR"
    CONTRIBUTOR
    "PROJECT_CATALOG_STEWARD"
    PROJECT_CATALOG_STEWARD

    PolicyGrantProjectGrantFilterProperties, PolicyGrantProjectGrantFilterPropertiesArgs

    PolicyGrantProjectPolicyGrantPrincipal, PolicyGrantProjectPolicyGrantPrincipalArgs

    PolicyGrantTargetEntityType, PolicyGrantTargetEntityTypeArgs

    DomainUnit
    DomainUnit
    EnvironmentBlueprintConfiguration
    EnvironmentBlueprintConfiguration
    EnvironmentProfile
    EnvironmentProfile
    AssetType
    ASSET_TYPE
    PolicyGrantTargetEntityTypeDomainUnit
    DomainUnit
    PolicyGrantTargetEntityTypeEnvironmentBlueprintConfiguration
    EnvironmentBlueprintConfiguration
    PolicyGrantTargetEntityTypeEnvironmentProfile
    EnvironmentProfile
    PolicyGrantTargetEntityTypeAssetType
    ASSET_TYPE
    DomainUnit
    DomainUnit
    EnvironmentBlueprintConfiguration
    EnvironmentBlueprintConfiguration
    EnvironmentProfile
    EnvironmentProfile
    AssetType
    ASSET_TYPE
    DomainUnit
    DomainUnit
    EnvironmentBlueprintConfiguration
    EnvironmentBlueprintConfiguration
    EnvironmentProfile
    EnvironmentProfile
    AssetType
    ASSET_TYPE
    DOMAIN_UNIT
    DomainUnit
    ENVIRONMENT_BLUEPRINT_CONFIGURATION
    EnvironmentBlueprintConfiguration
    ENVIRONMENT_PROFILE
    EnvironmentProfile
    ASSET_TYPE
    ASSET_TYPE
    "DomainUnit"
    DomainUnit
    "EnvironmentBlueprintConfiguration"
    EnvironmentBlueprintConfiguration
    "EnvironmentProfile"
    EnvironmentProfile
    "ASSET_TYPE"
    ASSET_TYPE

    PolicyGrantUserPolicyGrantPrincipal0Properties, PolicyGrantUserPolicyGrantPrincipal0PropertiesArgs

    PolicyGrantUserPolicyGrantPrincipal1Properties, PolicyGrantUserPolicyGrantPrincipal1PropertiesArgs

    Package Details

    Repository
    AWS Native pulumi/pulumi-aws-native
    License
    Apache-2.0
    aws-native logo

    We recommend new projects start with resources from the AWS provider.

    AWS Cloud Control v1.34.0 published on Friday, Sep 12, 2025 by Pulumi