Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. AWS
  4. API Docs
  5. datazone
  6. PolicyGrant
Viewing docs for AWS v7.47.0
published on Thursday, Sep 17, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws

aws.datazone.PolicyGrant

aws logo aws logo
Viewing docs for AWS v7.47.0
published on Thursday, Sep 17, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws

    Manages an AWS DataZone Policy Grant.

    Example Usage

    Basic Usage

    import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = new aws.datazone.PolicyGrant("example", {
    detail: {
        createDomainUnit: {},
    },
    principal: {
        user: {
            allUsersGrantFilter: {},
        },
    },
    domainIdentifier: exampleAwsDatazoneDomain.id,
    entityIdentifier: exampleAwsDatazoneDomain.rootDomainUnitId,
    entityType: "DOMAIN_UNIT",
    policyType: "CREATE_DOMAIN_UNIT",
});

    import pulumi
import pulumi_aws as aws

example = aws.datazone.PolicyGrant("example",
    detail={
        "create_domain_unit": {},
    },
    principal={
        "user": {
            "all_users_grant_filter": {},
        },
    },
    domain_identifier=example_aws_datazone_domain["id"],
    entity_identifier=example_aws_datazone_domain["rootDomainUnitId"],
    entity_type="DOMAIN_UNIT",
    policy_type="CREATE_DOMAIN_UNIT")

    package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/datazone"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := datazone.NewPolicyGrant(ctx, "example", &datazone.PolicyGrantArgs{
			Detail: &datazone.PolicyGrantDetailArgs{
				CreateDomainUnit: &datazone.PolicyGrantDetailCreateDomainUnitArgs{},
			},
			Principal: &datazone.PolicyGrantPrincipalArgs{
				User: &datazone.PolicyGrantPrincipalUserArgs{
					AllUsersGrantFilter: &datazone.PolicyGrantPrincipalUserAllUsersGrantFilterArgs{},
				},
			},
			DomainIdentifier: pulumi.Any(exampleAwsDatazoneDomain.Id),
			EntityIdentifier: pulumi.Any(exampleAwsDatazoneDomain.RootDomainUnitId),
			EntityType:       pulumi.String("DOMAIN_UNIT"),
			PolicyType:       pulumi.String("CREATE_DOMAIN_UNIT"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var example = new Aws.DataZone.PolicyGrant("example", new()
    {
        Detail = new Aws.DataZone.Inputs.PolicyGrantDetailArgs
        {
            CreateDomainUnit = null,
        },
        Principal = new Aws.DataZone.Inputs.PolicyGrantPrincipalArgs
        {
            User = new Aws.DataZone.Inputs.PolicyGrantPrincipalUserArgs
            {
                AllUsersGrantFilter = null,
            },
        },
        DomainIdentifier = exampleAwsDatazoneDomain.Id,
        EntityIdentifier = exampleAwsDatazoneDomain.RootDomainUnitId,
        EntityType = "DOMAIN_UNIT",
        PolicyType = "CREATE_DOMAIN_UNIT",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.datazone.PolicyGrant;
import com.pulumi.aws.datazone.PolicyGrantArgs;
import com.pulumi.aws.datazone.inputs.PolicyGrantDetailArgs;
import com.pulumi.aws.datazone.inputs.PolicyGrantDetailCreateDomainUnitArgs;
import com.pulumi.aws.datazone.inputs.PolicyGrantPrincipalArgs;
import com.pulumi.aws.datazone.inputs.PolicyGrantPrincipalUserArgs;
import com.pulumi.aws.datazone.inputs.PolicyGrantPrincipalUserAllUsersGrantFilterArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new PolicyGrant("example", PolicyGrantArgs.builder()
            .detail(PolicyGrantDetailArgs.builder()
                .createDomainUnit(PolicyGrantDetailCreateDomainUnitArgs.builder()
                    .build())
                .build())
            .principal(PolicyGrantPrincipalArgs.builder()
                .user(PolicyGrantPrincipalUserArgs.builder()
                    .allUsersGrantFilter(PolicyGrantPrincipalUserAllUsersGrantFilterArgs.builder()
                        .build())
                    .build())
                .build())
            .domainIdentifier(exampleAwsDatazoneDomain.id())
            .entityIdentifier(exampleAwsDatazoneDomain.rootDomainUnitId())
            .entityType("DOMAIN_UNIT")
            .policyType("CREATE_DOMAIN_UNIT")
            .build());

    }
}

    resources:
  example:
    type: aws:datazone:PolicyGrant
    properties:
      detail:
        createDomainUnit: {}
      principal:
        user:
          allUsersGrantFilter: {}
      domainIdentifier: ${exampleAwsDatazoneDomain.id}
      entityIdentifier: ${exampleAwsDatazoneDomain.rootDomainUnitId}
      entityType: DOMAIN_UNIT
      policyType: CREATE_DOMAIN_UNIT

    pulumi {
  required_providers {
    aws = {
      source = "pulumi/aws"
    }
  }
}

resource "aws_datazone_policygrant" "example" {
  detail = {
    create_domain_unit = {}
  }
  principal = {
    user = {
      all_users_grant_filter = {}
    }
  }
  domain_identifier = exampleAwsDatazoneDomain.id
  entity_identifier = exampleAwsDatazoneDomain.rootDomainUnitId
  entity_type       = "DOMAIN_UNIT"
  policy_type       = "CREATE_DOMAIN_UNIT"
}

    With Include Child Domain Units

    import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = new aws.datazone.PolicyGrant("example", {
    detail: {
        createDomainUnit: {
            includeChildDomainUnits: true,
        },
    },
    principal: {
        user: {
            allUsersGrantFilter: {},
        },
    },
    domainIdentifier: exampleAwsDatazoneDomain.id,
    entityIdentifier: exampleAwsDatazoneDomain.rootDomainUnitId,
    entityType: "DOMAIN_UNIT",
    policyType: "CREATE_DOMAIN_UNIT",
});

    import pulumi
import pulumi_aws as aws

example = aws.datazone.PolicyGrant("example",
    detail={
        "create_domain_unit": {
            "include_child_domain_units": True,
        },
    },
    principal={
        "user": {
            "all_users_grant_filter": {},
        },
    },
    domain_identifier=example_aws_datazone_domain["id"],
    entity_identifier=example_aws_datazone_domain["rootDomainUnitId"],
    entity_type="DOMAIN_UNIT",
    policy_type="CREATE_DOMAIN_UNIT")

    package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/datazone"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := datazone.NewPolicyGrant(ctx, "example", &datazone.PolicyGrantArgs{
			Detail: &datazone.PolicyGrantDetailArgs{
				CreateDomainUnit: &datazone.PolicyGrantDetailCreateDomainUnitArgs{
					IncludeChildDomainUnits: pulumi.Bool(true),
				},
			},
			Principal: &datazone.PolicyGrantPrincipalArgs{
				User: &datazone.PolicyGrantPrincipalUserArgs{
					AllUsersGrantFilter: &datazone.PolicyGrantPrincipalUserAllUsersGrantFilterArgs{},
				},
			},
			DomainIdentifier: pulumi.Any(exampleAwsDatazoneDomain.Id),
			EntityIdentifier: pulumi.Any(exampleAwsDatazoneDomain.RootDomainUnitId),
			EntityType:       pulumi.String("DOMAIN_UNIT"),
			PolicyType:       pulumi.String("CREATE_DOMAIN_UNIT"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var example = new Aws.DataZone.PolicyGrant("example", new()
    {
        Detail = new Aws.DataZone.Inputs.PolicyGrantDetailArgs
        {
            CreateDomainUnit = new Aws.DataZone.Inputs.PolicyGrantDetailCreateDomainUnitArgs
            {
                IncludeChildDomainUnits = true,
            },
        },
        Principal = new Aws.DataZone.Inputs.PolicyGrantPrincipalArgs
        {
            User = new Aws.DataZone.Inputs.PolicyGrantPrincipalUserArgs
            {
                AllUsersGrantFilter = null,
            },
        },
        DomainIdentifier = exampleAwsDatazoneDomain.Id,
        EntityIdentifier = exampleAwsDatazoneDomain.RootDomainUnitId,
        EntityType = "DOMAIN_UNIT",
        PolicyType = "CREATE_DOMAIN_UNIT",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.datazone.PolicyGrant;
import com.pulumi.aws.datazone.PolicyGrantArgs;
import com.pulumi.aws.datazone.inputs.PolicyGrantDetailArgs;
import com.pulumi.aws.datazone.inputs.PolicyGrantDetailCreateDomainUnitArgs;
import com.pulumi.aws.datazone.inputs.PolicyGrantPrincipalArgs;
import com.pulumi.aws.datazone.inputs.PolicyGrantPrincipalUserArgs;
import com.pulumi.aws.datazone.inputs.PolicyGrantPrincipalUserAllUsersGrantFilterArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new PolicyGrant("example", PolicyGrantArgs.builder()
            .detail(PolicyGrantDetailArgs.builder()
                .createDomainUnit(PolicyGrantDetailCreateDomainUnitArgs.builder()
                    .includeChildDomainUnits(true)
                    .build())
                .build())
            .principal(PolicyGrantPrincipalArgs.builder()
                .user(PolicyGrantPrincipalUserArgs.builder()
                    .allUsersGrantFilter(PolicyGrantPrincipalUserAllUsersGrantFilterArgs.builder()
                        .build())
                    .build())
                .build())
            .domainIdentifier(exampleAwsDatazoneDomain.id())
            .entityIdentifier(exampleAwsDatazoneDomain.rootDomainUnitId())
            .entityType("DOMAIN_UNIT")
            .policyType("CREATE_DOMAIN_UNIT")
            .build());

    }
}

    resources:
  example:
    type: aws:datazone:PolicyGrant
    properties:
      detail:
        createDomainUnit:
          includeChildDomainUnits: true
      principal:
        user:
          allUsersGrantFilter: {}
      domainIdentifier: ${exampleAwsDatazoneDomain.id}
      entityIdentifier: ${exampleAwsDatazoneDomain.rootDomainUnitId}
      entityType: DOMAIN_UNIT
      policyType: CREATE_DOMAIN_UNIT

    pulumi {
  required_providers {
    aws = {
      source = "pulumi/aws"
    }
  }
}

resource "aws_datazone_policygrant" "example" {
  detail = {
    create_domain_unit = {
      include_child_domain_units = true
    }
  }
  principal = {
    user = {
      all_users_grant_filter = {}
    }
  }
  domain_identifier = exampleAwsDatazoneDomain.id
  entity_identifier = exampleAwsDatazoneDomain.rootDomainUnitId
  entity_type       = "DOMAIN_UNIT"
  policy_type       = "CREATE_DOMAIN_UNIT"
}

    With Project Principal

    import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = new aws.datazone.PolicyGrant("example", {
    detail: {
        createGlossary: {},
    },
    principal: {
        project: {
            projectDesignation: "OWNER",
            projectIdentifier: exampleAwsDatazoneProject.id,
        },
    },
    domainIdentifier: exampleAwsDatazoneDomain.id,
    entityIdentifier: exampleAwsDatazoneDomain.rootDomainUnitId,
    entityType: "DOMAIN_UNIT",
    policyType: "CREATE_GLOSSARY",
});

    import pulumi
import pulumi_aws as aws

example = aws.datazone.PolicyGrant("example",
    detail={
        "create_glossary": {},
    },
    principal={
        "project": {
            "project_designation": "OWNER",
            "project_identifier": example_aws_datazone_project["id"],
        },
    },
    domain_identifier=example_aws_datazone_domain["id"],
    entity_identifier=example_aws_datazone_domain["rootDomainUnitId"],
    entity_type="DOMAIN_UNIT",
    policy_type="CREATE_GLOSSARY")

    package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/datazone"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := datazone.NewPolicyGrant(ctx, "example", &datazone.PolicyGrantArgs{
			Detail: &datazone.PolicyGrantDetailArgs{
				CreateGlossary: &datazone.PolicyGrantDetailCreateGlossaryArgs{},
			},
			Principal: &datazone.PolicyGrantPrincipalArgs{
				Project: &datazone.PolicyGrantPrincipalProjectArgs{
					ProjectDesignation: pulumi.String("OWNER"),
					ProjectIdentifier:  pulumi.Any(exampleAwsDatazoneProject.Id),
				},
			},
			DomainIdentifier: pulumi.Any(exampleAwsDatazoneDomain.Id),
			EntityIdentifier: pulumi.Any(exampleAwsDatazoneDomain.RootDomainUnitId),
			EntityType:       pulumi.String("DOMAIN_UNIT"),
			PolicyType:       pulumi.String("CREATE_GLOSSARY"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var example = new Aws.DataZone.PolicyGrant("example", new()
    {
        Detail = new Aws.DataZone.Inputs.PolicyGrantDetailArgs
        {
            CreateGlossary = null,
        },
        Principal = new Aws.DataZone.Inputs.PolicyGrantPrincipalArgs
        {
            Project = new Aws.DataZone.Inputs.PolicyGrantPrincipalProjectArgs
            {
                ProjectDesignation = "OWNER",
                ProjectIdentifier = exampleAwsDatazoneProject.Id,
            },
        },
        DomainIdentifier = exampleAwsDatazoneDomain.Id,
        EntityIdentifier = exampleAwsDatazoneDomain.RootDomainUnitId,
        EntityType = "DOMAIN_UNIT",
        PolicyType = "CREATE_GLOSSARY",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.datazone.PolicyGrant;
import com.pulumi.aws.datazone.PolicyGrantArgs;
import com.pulumi.aws.datazone.inputs.PolicyGrantDetailArgs;
import com.pulumi.aws.datazone.inputs.PolicyGrantDetailCreateGlossaryArgs;
import com.pulumi.aws.datazone.inputs.PolicyGrantPrincipalArgs;
import com.pulumi.aws.datazone.inputs.PolicyGrantPrincipalProjectArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new PolicyGrant("example", PolicyGrantArgs.builder()
            .detail(PolicyGrantDetailArgs.builder()
                .createGlossary(PolicyGrantDetailCreateGlossaryArgs.builder()
                    .build())
                .build())
            .principal(PolicyGrantPrincipalArgs.builder()
                .project(PolicyGrantPrincipalProjectArgs.builder()
                    .projectDesignation("OWNER")
                    .projectIdentifier(exampleAwsDatazoneProject.id())
                    .build())
                .build())
            .domainIdentifier(exampleAwsDatazoneDomain.id())
            .entityIdentifier(exampleAwsDatazoneDomain.rootDomainUnitId())
            .entityType("DOMAIN_UNIT")
            .policyType("CREATE_GLOSSARY")
            .build());

    }
}

    resources:
  example:
    type: aws:datazone:PolicyGrant
    properties:
      detail:
        createGlossary: {}
      principal:
        project:
          projectDesignation: OWNER
          projectIdentifier: ${exampleAwsDatazoneProject.id}
      domainIdentifier: ${exampleAwsDatazoneDomain.id}
      entityIdentifier: ${exampleAwsDatazoneDomain.rootDomainUnitId}
      entityType: DOMAIN_UNIT
      policyType: CREATE_GLOSSARY

    pulumi {
  required_providers {
    aws = {
      source = "pulumi/aws"
    }
  }
}

resource "aws_datazone_policygrant" "example" {
  detail = {
    create_glossary = {}
  }
  principal = {
    project = {
      project_designation = "OWNER"
      project_identifier  = exampleAwsDatazoneProject.id
    }
  }
  domain_identifier = exampleAwsDatazoneDomain.id
  entity_identifier = exampleAwsDatazoneDomain.rootDomainUnitId
  entity_type       = "DOMAIN_UNIT"
  policy_type       = "CREATE_GLOSSARY"
}

    Create PolicyGrant Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new PolicyGrant(name: string, args: PolicyGrantArgs, opts?: CustomResourceOptions);
    @overload
def PolicyGrant(resource_name: str,
                args: PolicyGrantArgs,
                opts: Optional[ResourceOptions] = None)

@overload
def PolicyGrant(resource_name: str,
                opts: Optional[ResourceOptions] = None,
                detail: Optional[PolicyGrantDetailArgs] = None,
                domain_identifier: Optional[str] = None,
                entity_identifier: Optional[str] = None,
                entity_type: Optional[str] = None,
                policy_type: Optional[str] = None,
                principal: Optional[PolicyGrantPrincipalArgs] = None,
                region: Optional[str] = None)
    func NewPolicyGrant(ctx *Context, name string, args PolicyGrantArgs, opts ...ResourceOption) (*PolicyGrant, error)
    public PolicyGrant(string name, PolicyGrantArgs args, CustomResourceOptions? opts = null)
    public PolicyGrant(String name, PolicyGrantArgs args)
public PolicyGrant(String name, PolicyGrantArgs args, CustomResourceOptions options)

    type: aws:datazone:PolicyGrant
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "aws_datazone_policy_grant" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args PolicyGrantArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args PolicyGrantArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args PolicyGrantArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args PolicyGrantArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args PolicyGrantArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var policyGrantResource = new Aws.DataZone.PolicyGrant("policyGrantResource", new()
{
    Detail = new Aws.DataZone.Inputs.PolicyGrantDetailArgs
    {
        AddToProjectMemberPool = new Aws.DataZone.Inputs.PolicyGrantDetailAddToProjectMemberPoolArgs
        {
            IncludeChildDomainUnits = false,
        },
        CreateAssetType = new Aws.DataZone.Inputs.PolicyGrantDetailCreateAssetTypeArgs
        {
            IncludeChildDomainUnits = false,
        },
        CreateDomainUnit = new Aws.DataZone.Inputs.PolicyGrantDetailCreateDomainUnitArgs
        {
            IncludeChildDomainUnits = false,
        },
        CreateEnvironment = null,
        CreateEnvironmentFromBlueprint = null,
        CreateEnvironmentProfile = new Aws.DataZone.Inputs.PolicyGrantDetailCreateEnvironmentProfileArgs
        {
            DomainUnitId = "string",
        },
        CreateFormType = new Aws.DataZone.Inputs.PolicyGrantDetailCreateFormTypeArgs
        {
            IncludeChildDomainUnits = false,
        },
        CreateGlossary = new Aws.DataZone.Inputs.PolicyGrantDetailCreateGlossaryArgs
        {
            IncludeChildDomainUnits = false,
        },
        CreateProject = new Aws.DataZone.Inputs.PolicyGrantDetailCreateProjectArgs
        {
            IncludeChildDomainUnits = false,
        },
        CreateProjectFromProjectProfile = new Aws.DataZone.Inputs.PolicyGrantDetailCreateProjectFromProjectProfileArgs
        {
            IncludeChildDomainUnits = false,
            ProjectProfiles = new[]
            {
                "string",
            },
        },
        DelegateCreateEnvironmentProfile = null,
        OverrideDomainUnitOwners = new Aws.DataZone.Inputs.PolicyGrantDetailOverrideDomainUnitOwnersArgs
        {
            IncludeChildDomainUnits = false,
        },
        OverrideProjectOwners = new Aws.DataZone.Inputs.PolicyGrantDetailOverrideProjectOwnersArgs
        {
            IncludeChildDomainUnits = false,
        },
        UseAssetType = new Aws.DataZone.Inputs.PolicyGrantDetailUseAssetTypeArgs
        {
            DomainUnitId = "string",
        },
    },
    DomainIdentifier = "string",
    EntityIdentifier = "string",
    EntityType = "string",
    PolicyType = "string",
    Principal = new Aws.DataZone.Inputs.PolicyGrantPrincipalArgs
    {
        DomainUnit = new Aws.DataZone.Inputs.PolicyGrantPrincipalDomainUnitArgs
        {
            DomainUnitDesignation = "string",
            AllDomainUnitsGrantFilter = null,
            DomainUnitIdentifier = "string",
        },
        Group = new Aws.DataZone.Inputs.PolicyGrantPrincipalGroupArgs
        {
            GroupIdentifier = "string",
        },
        Project = new Aws.DataZone.Inputs.PolicyGrantPrincipalProjectArgs
        {
            ProjectDesignation = "string",
            DomainUnitFilter = new Aws.DataZone.Inputs.PolicyGrantPrincipalProjectDomainUnitFilterArgs
            {
                DomainUnit = "string",
                IncludeChildDomainUnits = false,
            },
            ProjectIdentifier = "string",
        },
        User = new Aws.DataZone.Inputs.PolicyGrantPrincipalUserArgs
        {
            AllUsersGrantFilter = null,
            UserIdentifier = "string",
        },
    },
    Region = "string",
});

    example, err := datazone.NewPolicyGrant(ctx, "policyGrantResource", &datazone.PolicyGrantArgs{
	Detail: &datazone.PolicyGrantDetailArgs{
		AddToProjectMemberPool: &datazone.PolicyGrantDetailAddToProjectMemberPoolArgs{
			IncludeChildDomainUnits: pulumi.Bool(false),
		},
		CreateAssetType: &datazone.PolicyGrantDetailCreateAssetTypeArgs{
			IncludeChildDomainUnits: pulumi.Bool(false),
		},
		CreateDomainUnit: &datazone.PolicyGrantDetailCreateDomainUnitArgs{
			IncludeChildDomainUnits: pulumi.Bool(false),
		},
		CreateEnvironment:              &datazone.PolicyGrantDetailCreateEnvironmentArgs{},
		CreateEnvironmentFromBlueprint: &datazone.PolicyGrantDetailCreateEnvironmentFromBlueprintArgs{},
		CreateEnvironmentProfile: &datazone.PolicyGrantDetailCreateEnvironmentProfileArgs{
			DomainUnitId: pulumi.String("string"),
		},
		CreateFormType: &datazone.PolicyGrantDetailCreateFormTypeArgs{
			IncludeChildDomainUnits: pulumi.Bool(false),
		},
		CreateGlossary: &datazone.PolicyGrantDetailCreateGlossaryArgs{
			IncludeChildDomainUnits: pulumi.Bool(false),
		},
		CreateProject: &datazone.PolicyGrantDetailCreateProjectArgs{
			IncludeChildDomainUnits: pulumi.Bool(false),
		},
		CreateProjectFromProjectProfile: &datazone.PolicyGrantDetailCreateProjectFromProjectProfileArgs{
			IncludeChildDomainUnits: pulumi.Bool(false),
			ProjectProfiles: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
		DelegateCreateEnvironmentProfile: &datazone.PolicyGrantDetailDelegateCreateEnvironmentProfileArgs{},
		OverrideDomainUnitOwners: &datazone.PolicyGrantDetailOverrideDomainUnitOwnersArgs{
			IncludeChildDomainUnits: pulumi.Bool(false),
		},
		OverrideProjectOwners: &datazone.PolicyGrantDetailOverrideProjectOwnersArgs{
			IncludeChildDomainUnits: pulumi.Bool(false),
		},
		UseAssetType: &datazone.PolicyGrantDetailUseAssetTypeArgs{
			DomainUnitId: pulumi.String("string"),
		},
	},
	DomainIdentifier: pulumi.String("string"),
	EntityIdentifier: pulumi.String("string"),
	EntityType:       pulumi.String("string"),
	PolicyType:       pulumi.String("string"),
	Principal: &datazone.PolicyGrantPrincipalArgs{
		DomainUnit: &datazone.PolicyGrantPrincipalDomainUnitArgs{
			DomainUnitDesignation:     pulumi.String("string"),
			AllDomainUnitsGrantFilter: &datazone.PolicyGrantPrincipalDomainUnitAllDomainUnitsGrantFilterArgs{},
			DomainUnitIdentifier:      pulumi.String("string"),
		},
		Group: &datazone.PolicyGrantPrincipalGroupArgs{
			GroupIdentifier: pulumi.String("string"),
		},
		Project: &datazone.PolicyGrantPrincipalProjectArgs{
			ProjectDesignation: pulumi.String("string"),
			DomainUnitFilter: &datazone.PolicyGrantPrincipalProjectDomainUnitFilterArgs{
				DomainUnit:              pulumi.String("string"),
				IncludeChildDomainUnits: pulumi.Bool(false),
			},
			ProjectIdentifier: pulumi.String("string"),
		},
		User: &datazone.PolicyGrantPrincipalUserArgs{
			AllUsersGrantFilter: &datazone.PolicyGrantPrincipalUserAllUsersGrantFilterArgs{},
			UserIdentifier:      pulumi.String("string"),
		},
	},
	Region: pulumi.String("string"),
})

    resource "aws_datazone_policy_grant" "policyGrantResource" {
  lifecycle {
    create_before_destroy = true
  }
  detail = {
    add_to_project_member_pool = {
      include_child_domain_units = false
    }
    create_asset_type = {
      include_child_domain_units = false
    }
    create_domain_unit = {
      include_child_domain_units = false
    }
    create_environment                = {}
    create_environment_from_blueprint = {}
    create_environment_profile = {
      domain_unit_id = "string"
    }
    create_form_type = {
      include_child_domain_units = false
    }
    create_glossary = {
      include_child_domain_units = false
    }
    create_project = {
      include_child_domain_units = false
    }
    create_project_from_project_profile = {
      include_child_domain_units = false
      project_profiles           = ["string"]
    }
    delegate_create_environment_profile = {}
    override_domain_unit_owners = {
      include_child_domain_units = false
    }
    override_project_owners = {
      include_child_domain_units = false
    }
    use_asset_type = {
      domain_unit_id = "string"
    }
  }
  domain_identifier = "string"
  entity_identifier = "string"
  entity_type       = "string"
  policy_type       = "string"
  principal = {
    domain_unit = {
      domain_unit_designation       = "string"
      all_domain_units_grant_filter = {}
      domain_unit_identifier        = "string"
    }
    group = {
      group_identifier = "string"
    }
    project = {
      project_designation = "string"
      domain_unit_filter = {
        domain_unit                = "string"
        include_child_domain_units = false
      }
      project_identifier = "string"
    }
    user = {
      all_users_grant_filter = {}
      user_identifier        = "string"
    }
  }
  region = "string"
}

    var policyGrantResource = new PolicyGrant("policyGrantResource", PolicyGrantArgs.builder()
    .detail(PolicyGrantDetailArgs.builder()
        .addToProjectMemberPool(PolicyGrantDetailAddToProjectMemberPoolArgs.builder()
            .includeChildDomainUnits(false)
            .build())
        .createAssetType(PolicyGrantDetailCreateAssetTypeArgs.builder()
            .includeChildDomainUnits(false)
            .build())
        .createDomainUnit(PolicyGrantDetailCreateDomainUnitArgs.builder()
            .includeChildDomainUnits(false)
            .build())
        .createEnvironment(PolicyGrantDetailCreateEnvironmentArgs.builder()
            .build())
        .createEnvironmentFromBlueprint(PolicyGrantDetailCreateEnvironmentFromBlueprintArgs.builder()
            .build())
        .createEnvironmentProfile(PolicyGrantDetailCreateEnvironmentProfileArgs.builder()
            .domainUnitId("string")
            .build())
        .createFormType(PolicyGrantDetailCreateFormTypeArgs.builder()
            .includeChildDomainUnits(false)
            .build())
        .createGlossary(PolicyGrantDetailCreateGlossaryArgs.builder()
            .includeChildDomainUnits(false)
            .build())
        .createProject(PolicyGrantDetailCreateProjectArgs.builder()
            .includeChildDomainUnits(false)
            .build())
        .createProjectFromProjectProfile(PolicyGrantDetailCreateProjectFromProjectProfileArgs.builder()
            .includeChildDomainUnits(false)
            .projectProfiles("string")
            .build())
        .delegateCreateEnvironmentProfile(PolicyGrantDetailDelegateCreateEnvironmentProfileArgs.builder()
            .build())
        .overrideDomainUnitOwners(PolicyGrantDetailOverrideDomainUnitOwnersArgs.builder()
            .includeChildDomainUnits(false)
            .build())
        .overrideProjectOwners(PolicyGrantDetailOverrideProjectOwnersArgs.builder()
            .includeChildDomainUnits(false)
            .build())
        .useAssetType(PolicyGrantDetailUseAssetTypeArgs.builder()
            .domainUnitId("string")
            .build())
        .build())
    .domainIdentifier("string")
    .entityIdentifier("string")
    .entityType("string")
    .policyType("string")
    .principal(PolicyGrantPrincipalArgs.builder()
        .domainUnit(PolicyGrantPrincipalDomainUnitArgs.builder()
            .domainUnitDesignation("string")
            .allDomainUnitsGrantFilter(PolicyGrantPrincipalDomainUnitAllDomainUnitsGrantFilterArgs.builder()
                .build())
            .domainUnitIdentifier("string")
            .build())
        .group(PolicyGrantPrincipalGroupArgs.builder()
            .groupIdentifier("string")
            .build())
        .project(PolicyGrantPrincipalProjectArgs.builder()
            .projectDesignation("string")
            .domainUnitFilter(PolicyGrantPrincipalProjectDomainUnitFilterArgs.builder()
                .domainUnit("string")
                .includeChildDomainUnits(false)
                .build())
            .projectIdentifier("string")
            .build())
        .user(PolicyGrantPrincipalUserArgs.builder()
            .allUsersGrantFilter(PolicyGrantPrincipalUserAllUsersGrantFilterArgs.builder()
                .build())
            .userIdentifier("string")
            .build())
        .build())
    .region("string")
    .build());

    policy_grant_resource = aws.datazone.PolicyGrant("policyGrantResource",
    detail={
        "add_to_project_member_pool": {
            "include_child_domain_units": False,
        },
        "create_asset_type": {
            "include_child_domain_units": False,
        },
        "create_domain_unit": {
            "include_child_domain_units": False,
        },
        "create_environment": {},
        "create_environment_from_blueprint": {},
        "create_environment_profile": {
            "domain_unit_id": "string",
        },
        "create_form_type": {
            "include_child_domain_units": False,
        },
        "create_glossary": {
            "include_child_domain_units": False,
        },
        "create_project": {
            "include_child_domain_units": False,
        },
        "create_project_from_project_profile": {
            "include_child_domain_units": False,
            "project_profiles": ["string"],
        },
        "delegate_create_environment_profile": {},
        "override_domain_unit_owners": {
            "include_child_domain_units": False,
        },
        "override_project_owners": {
            "include_child_domain_units": False,
        },
        "use_asset_type": {
            "domain_unit_id": "string",
        },
    },
    domain_identifier="string",
    entity_identifier="string",
    entity_type="string",
    policy_type="string",
    principal={
        "domain_unit": {
            "domain_unit_designation": "string",
            "all_domain_units_grant_filter": {},
            "domain_unit_identifier": "string",
        },
        "group": {
            "group_identifier": "string",
        },
        "project": {
            "project_designation": "string",
            "domain_unit_filter": {
                "domain_unit": "string",
                "include_child_domain_units": False,
            },
            "project_identifier": "string",
        },
        "user": {
            "all_users_grant_filter": {},
            "user_identifier": "string",
        },
    },
    region="string")

    const policyGrantResource = new aws.datazone.PolicyGrant("policyGrantResource", {
    detail: {
        addToProjectMemberPool: {
            includeChildDomainUnits: false,
        },
        createAssetType: {
            includeChildDomainUnits: false,
        },
        createDomainUnit: {
            includeChildDomainUnits: false,
        },
        createEnvironment: {},
        createEnvironmentFromBlueprint: {},
        createEnvironmentProfile: {
            domainUnitId: "string",
        },
        createFormType: {
            includeChildDomainUnits: false,
        },
        createGlossary: {
            includeChildDomainUnits: false,
        },
        createProject: {
            includeChildDomainUnits: false,
        },
        createProjectFromProjectProfile: {
            includeChildDomainUnits: false,
            projectProfiles: ["string"],
        },
        delegateCreateEnvironmentProfile: {},
        overrideDomainUnitOwners: {
            includeChildDomainUnits: false,
        },
        overrideProjectOwners: {
            includeChildDomainUnits: false,
        },
        useAssetType: {
            domainUnitId: "string",
        },
    },
    domainIdentifier: "string",
    entityIdentifier: "string",
    entityType: "string",
    policyType: "string",
    principal: {
        domainUnit: {
            domainUnitDesignation: "string",
            allDomainUnitsGrantFilter: {},
            domainUnitIdentifier: "string",
        },
        group: {
            groupIdentifier: "string",
        },
        project: {
            projectDesignation: "string",
            domainUnitFilter: {
                domainUnit: "string",
                includeChildDomainUnits: false,
            },
            projectIdentifier: "string",
        },
        user: {
            allUsersGrantFilter: {},
            userIdentifier: "string",
        },
    },
    region: "string",
});

    type: aws:datazone:PolicyGrant
properties:
    detail:
        addToProjectMemberPool:
            includeChildDomainUnits: false
        createAssetType:
            includeChildDomainUnits: false
        createDomainUnit:
            includeChildDomainUnits: false
        createEnvironment: {}
        createEnvironmentFromBlueprint: {}
        createEnvironmentProfile:
            domainUnitId: string
        createFormType:
            includeChildDomainUnits: false
        createGlossary:
            includeChildDomainUnits: false
        createProject:
            includeChildDomainUnits: false
        createProjectFromProjectProfile:
            includeChildDomainUnits: false
            projectProfiles:
                - string
        delegateCreateEnvironmentProfile: {}
        overrideDomainUnitOwners:
            includeChildDomainUnits: false
        overrideProjectOwners:
            includeChildDomainUnits: false
        useAssetType:
            domainUnitId: string
    domainIdentifier: string
    entityIdentifier: string
    entityType: string
    policyType: string
    principal:
        domainUnit:
            allDomainUnitsGrantFilter: {}
            domainUnitDesignation: string
            domainUnitIdentifier: string
        group:
            groupIdentifier: string
        project:
            domainUnitFilter:
                domainUnit: string
                includeChildDomainUnits: false
            projectDesignation: string
            projectIdentifier: string
        user:
            allUsersGrantFilter: {}
            userIdentifier: string
    region: string

    PolicyGrant Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The PolicyGrant resource accepts the following input properties:

    Detail PolicyGrantDetail
    Policy grant detail. Exactly one sub-block must be specified. See detail Block below.
    DomainIdentifier string
    Identifier of the domain where the policy grant is created.
    EntityIdentifier string
    Identifier of the entity to which the policy grant applies.
    EntityType string
    Type of entity to which the policy grant applies. Valid values: ASSET_TYPE, DOMAIN_UNIT, ENVIRONMENT_BLUEPRINT_CONFIGURATION, ENVIRONMENT_PROFILE.
    PolicyType string
    Type of the managed policy. Valid values: ADD_TO_PROJECT_MEMBER_POOL, CREATE_ASSET_TYPE, CREATE_DOMAIN_UNIT, CREATE_ENVIRONMENT, CREATE_ENVIRONMENT_FROM_BLUEPRINT, CREATE_ENVIRONMENT_PROFILE, CREATE_FORM_TYPE, CREATE_GLOSSARY, CREATE_PROJECT, CREATE_PROJECT_FROM_PROJECT_PROFILE, DELEGATE_CREATE_ENVIRONMENT_PROFILE, OVERRIDE_DOMAIN_UNIT_OWNERS, OVERRIDE_PROJECT_OWNERS, USE_ASSET_TYPE.
    Principal PolicyGrantPrincipal

    Principal to which the policy grant applies. Exactly one sub-block must be specified. See principal Block below.

    The following arguments are optional:

    Region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    Detail PolicyGrantDetailArgs
    Policy grant detail. Exactly one sub-block must be specified. See detail Block below.
    DomainIdentifier string
    Identifier of the domain where the policy grant is created.
    EntityIdentifier string
    Identifier of the entity to which the policy grant applies.
    EntityType string
    Type of entity to which the policy grant applies. Valid values: ASSET_TYPE, DOMAIN_UNIT, ENVIRONMENT_BLUEPRINT_CONFIGURATION, ENVIRONMENT_PROFILE.
    PolicyType string
    Type of the managed policy. Valid values: ADD_TO_PROJECT_MEMBER_POOL, CREATE_ASSET_TYPE, CREATE_DOMAIN_UNIT, CREATE_ENVIRONMENT, CREATE_ENVIRONMENT_FROM_BLUEPRINT, CREATE_ENVIRONMENT_PROFILE, CREATE_FORM_TYPE, CREATE_GLOSSARY, CREATE_PROJECT, CREATE_PROJECT_FROM_PROJECT_PROFILE, DELEGATE_CREATE_ENVIRONMENT_PROFILE, OVERRIDE_DOMAIN_UNIT_OWNERS, OVERRIDE_PROJECT_OWNERS, USE_ASSET_TYPE.
    Principal PolicyGrantPrincipalArgs

    Principal to which the policy grant applies. Exactly one sub-block must be specified. See principal Block below.

    The following arguments are optional:

    Region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    detail object
    Policy grant detail. Exactly one sub-block must be specified. See detail Block below.
    domain_identifier string
    Identifier of the domain where the policy grant is created.
    entity_identifier string
    Identifier of the entity to which the policy grant applies.
    entity_type string
    Type of entity to which the policy grant applies. Valid values: ASSET_TYPE, DOMAIN_UNIT, ENVIRONMENT_BLUEPRINT_CONFIGURATION, ENVIRONMENT_PROFILE.
    policy_type string
    Type of the managed policy. Valid values: ADD_TO_PROJECT_MEMBER_POOL, CREATE_ASSET_TYPE, CREATE_DOMAIN_UNIT, CREATE_ENVIRONMENT, CREATE_ENVIRONMENT_FROM_BLUEPRINT, CREATE_ENVIRONMENT_PROFILE, CREATE_FORM_TYPE, CREATE_GLOSSARY, CREATE_PROJECT, CREATE_PROJECT_FROM_PROJECT_PROFILE, DELEGATE_CREATE_ENVIRONMENT_PROFILE, OVERRIDE_DOMAIN_UNIT_OWNERS, OVERRIDE_PROJECT_OWNERS, USE_ASSET_TYPE.
    principal object

    Principal to which the policy grant applies. Exactly one sub-block must be specified. See principal Block below.

    The following arguments are optional:

    region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    detail PolicyGrantDetail
    Policy grant detail. Exactly one sub-block must be specified. See detail Block below.
    domainIdentifier String
    Identifier of the domain where the policy grant is created.
    entityIdentifier String
    Identifier of the entity to which the policy grant applies.
    entityType String
    Type of entity to which the policy grant applies. Valid values: ASSET_TYPE, DOMAIN_UNIT, ENVIRONMENT_BLUEPRINT_CONFIGURATION, ENVIRONMENT_PROFILE.
    policyType String
    Type of the managed policy. Valid values: ADD_TO_PROJECT_MEMBER_POOL, CREATE_ASSET_TYPE, CREATE_DOMAIN_UNIT, CREATE_ENVIRONMENT, CREATE_ENVIRONMENT_FROM_BLUEPRINT, CREATE_ENVIRONMENT_PROFILE, CREATE_FORM_TYPE, CREATE_GLOSSARY, CREATE_PROJECT, CREATE_PROJECT_FROM_PROJECT_PROFILE, DELEGATE_CREATE_ENVIRONMENT_PROFILE, OVERRIDE_DOMAIN_UNIT_OWNERS, OVERRIDE_PROJECT_OWNERS, USE_ASSET_TYPE.
    principal PolicyGrantPrincipal

    Principal to which the policy grant applies. Exactly one sub-block must be specified. See principal Block below.

    The following arguments are optional:

    region String
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    detail PolicyGrantDetail
    Policy grant detail. Exactly one sub-block must be specified. See detail Block below.
    domainIdentifier string
    Identifier of the domain where the policy grant is created.
    entityIdentifier string
    Identifier of the entity to which the policy grant applies.
    entityType string
    Type of entity to which the policy grant applies. Valid values: ASSET_TYPE, DOMAIN_UNIT, ENVIRONMENT_BLUEPRINT_CONFIGURATION, ENVIRONMENT_PROFILE.
    policyType string
    Type of the managed policy. Valid values: ADD_TO_PROJECT_MEMBER_POOL, CREATE_ASSET_TYPE, CREATE_DOMAIN_UNIT, CREATE_ENVIRONMENT, CREATE_ENVIRONMENT_FROM_BLUEPRINT, CREATE_ENVIRONMENT_PROFILE, CREATE_FORM_TYPE, CREATE_GLOSSARY, CREATE_PROJECT, CREATE_PROJECT_FROM_PROJECT_PROFILE, DELEGATE_CREATE_ENVIRONMENT_PROFILE, OVERRIDE_DOMAIN_UNIT_OWNERS, OVERRIDE_PROJECT_OWNERS, USE_ASSET_TYPE.
    principal PolicyGrantPrincipal

    Principal to which the policy grant applies. Exactly one sub-block must be specified. See principal Block below.

    The following arguments are optional:

    region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    detail PolicyGrantDetailArgs
    Policy grant detail. Exactly one sub-block must be specified. See detail Block below.
    domain_identifier str
    Identifier of the domain where the policy grant is created.
    entity_identifier str
    Identifier of the entity to which the policy grant applies.
    entity_type str
    Type of entity to which the policy grant applies. Valid values: ASSET_TYPE, DOMAIN_UNIT, ENVIRONMENT_BLUEPRINT_CONFIGURATION, ENVIRONMENT_PROFILE.
    policy_type str
    Type of the managed policy. Valid values: ADD_TO_PROJECT_MEMBER_POOL, CREATE_ASSET_TYPE, CREATE_DOMAIN_UNIT, CREATE_ENVIRONMENT, CREATE_ENVIRONMENT_FROM_BLUEPRINT, CREATE_ENVIRONMENT_PROFILE, CREATE_FORM_TYPE, CREATE_GLOSSARY, CREATE_PROJECT, CREATE_PROJECT_FROM_PROJECT_PROFILE, DELEGATE_CREATE_ENVIRONMENT_PROFILE, OVERRIDE_DOMAIN_UNIT_OWNERS, OVERRIDE_PROJECT_OWNERS, USE_ASSET_TYPE.
    principal PolicyGrantPrincipalArgs

    Principal to which the policy grant applies. Exactly one sub-block must be specified. See principal Block below.

    The following arguments are optional:

    region str
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    detail Property Map
    Policy grant detail. Exactly one sub-block must be specified. See detail Block below.
    domainIdentifier String
    Identifier of the domain where the policy grant is created.
    entityIdentifier String
    Identifier of the entity to which the policy grant applies.
    entityType String
    Type of entity to which the policy grant applies. Valid values: ASSET_TYPE, DOMAIN_UNIT, ENVIRONMENT_BLUEPRINT_CONFIGURATION, ENVIRONMENT_PROFILE.
    policyType String
    Type of the managed policy. Valid values: ADD_TO_PROJECT_MEMBER_POOL, CREATE_ASSET_TYPE, CREATE_DOMAIN_UNIT, CREATE_ENVIRONMENT, CREATE_ENVIRONMENT_FROM_BLUEPRINT, CREATE_ENVIRONMENT_PROFILE, CREATE_FORM_TYPE, CREATE_GLOSSARY, CREATE_PROJECT, CREATE_PROJECT_FROM_PROJECT_PROFILE, DELEGATE_CREATE_ENVIRONMENT_PROFILE, OVERRIDE_DOMAIN_UNIT_OWNERS, OVERRIDE_PROJECT_OWNERS, USE_ASSET_TYPE.
    principal Property Map

    Principal to which the policy grant applies. Exactly one sub-block must be specified. See principal Block below.

    The following arguments are optional:

    region String
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the PolicyGrant resource produces the following output properties:

    CreatedAt string
    Timestamp when the policy grant was created (RFC3339 format).
    CreatedBy string
    User who created the policy grant.
    GrantId string
    Identifier of the policy grant.
    Id string
    The provider-assigned unique ID for this managed resource.
    CreatedAt string
    Timestamp when the policy grant was created (RFC3339 format).
    CreatedBy string
    User who created the policy grant.
    GrantId string
    Identifier of the policy grant.
    Id string
    The provider-assigned unique ID for this managed resource.
    created_at string
    Timestamp when the policy grant was created (RFC3339 format).
    created_by string
    User who created the policy grant.
    grant_id string
    Identifier of the policy grant.
    id string
    The provider-assigned unique ID for this managed resource.
    createdAt String
    Timestamp when the policy grant was created (RFC3339 format).
    createdBy String
    User who created the policy grant.
    grantId String
    Identifier of the policy grant.
    id String
    The provider-assigned unique ID for this managed resource.
    createdAt string
    Timestamp when the policy grant was created (RFC3339 format).
    createdBy string
    User who created the policy grant.
    grantId string
    Identifier of the policy grant.
    id string
    The provider-assigned unique ID for this managed resource.
    created_at str
    Timestamp when the policy grant was created (RFC3339 format).
    created_by str
    User who created the policy grant.
    grant_id str
    Identifier of the policy grant.
    id str
    The provider-assigned unique ID for this managed resource.
    createdAt String
    Timestamp when the policy grant was created (RFC3339 format).
    createdBy String
    User who created the policy grant.
    grantId String
    Identifier of the policy grant.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing PolicyGrant Resource

    Get an existing PolicyGrant resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: PolicyGrantState, opts?: CustomResourceOptions): PolicyGrant
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        created_at: Optional[str] = None,
        created_by: Optional[str] = None,
        detail: Optional[PolicyGrantDetailArgs] = None,
        domain_identifier: Optional[str] = None,
        entity_identifier: Optional[str] = None,
        entity_type: Optional[str] = None,
        grant_id: Optional[str] = None,
        policy_type: Optional[str] = None,
        principal: Optional[PolicyGrantPrincipalArgs] = None,
        region: Optional[str] = None) -> PolicyGrant
    func GetPolicyGrant(ctx *Context, name string, id IDInput, state *PolicyGrantState, opts ...ResourceOption) (*PolicyGrant, error)
    public static PolicyGrant Get(string name, Input<string> id, PolicyGrantState? state, CustomResourceOptions? opts = null)
    public static PolicyGrant get(String name, Output<String> id, PolicyGrantState state, CustomResourceOptions options)
    resources:  _:    type: aws:datazone:PolicyGrant    get:      id: ${id}
    import {
  to = aws_datazone_policy_grant.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    CreatedAt string
    Timestamp when the policy grant was created (RFC3339 format).
    CreatedBy string
    User who created the policy grant.
    Detail PolicyGrantDetail
    Policy grant detail. Exactly one sub-block must be specified. See detail Block below.
    DomainIdentifier string
    Identifier of the domain where the policy grant is created.
    EntityIdentifier string
    Identifier of the entity to which the policy grant applies.
    EntityType string
    Type of entity to which the policy grant applies. Valid values: ASSET_TYPE, DOMAIN_UNIT, ENVIRONMENT_BLUEPRINT_CONFIGURATION, ENVIRONMENT_PROFILE.
    GrantId string
    Identifier of the policy grant.
    PolicyType string
    Type of the managed policy. Valid values: ADD_TO_PROJECT_MEMBER_POOL, CREATE_ASSET_TYPE, CREATE_DOMAIN_UNIT, CREATE_ENVIRONMENT, CREATE_ENVIRONMENT_FROM_BLUEPRINT, CREATE_ENVIRONMENT_PROFILE, CREATE_FORM_TYPE, CREATE_GLOSSARY, CREATE_PROJECT, CREATE_PROJECT_FROM_PROJECT_PROFILE, DELEGATE_CREATE_ENVIRONMENT_PROFILE, OVERRIDE_DOMAIN_UNIT_OWNERS, OVERRIDE_PROJECT_OWNERS, USE_ASSET_TYPE.
    Principal PolicyGrantPrincipal

    Principal to which the policy grant applies. Exactly one sub-block must be specified. See principal Block below.

    The following arguments are optional:

    Region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    CreatedAt string
    Timestamp when the policy grant was created (RFC3339 format).
    CreatedBy string
    User who created the policy grant.
    Detail PolicyGrantDetailArgs
    Policy grant detail. Exactly one sub-block must be specified. See detail Block below.
    DomainIdentifier string
    Identifier of the domain where the policy grant is created.
    EntityIdentifier string
    Identifier of the entity to which the policy grant applies.
    EntityType string
    Type of entity to which the policy grant applies. Valid values: ASSET_TYPE, DOMAIN_UNIT, ENVIRONMENT_BLUEPRINT_CONFIGURATION, ENVIRONMENT_PROFILE.
    GrantId string
    Identifier of the policy grant.
    PolicyType string
    Type of the managed policy. Valid values: ADD_TO_PROJECT_MEMBER_POOL, CREATE_ASSET_TYPE, CREATE_DOMAIN_UNIT, CREATE_ENVIRONMENT, CREATE_ENVIRONMENT_FROM_BLUEPRINT, CREATE_ENVIRONMENT_PROFILE, CREATE_FORM_TYPE, CREATE_GLOSSARY, CREATE_PROJECT, CREATE_PROJECT_FROM_PROJECT_PROFILE, DELEGATE_CREATE_ENVIRONMENT_PROFILE, OVERRIDE_DOMAIN_UNIT_OWNERS, OVERRIDE_PROJECT_OWNERS, USE_ASSET_TYPE.
    Principal PolicyGrantPrincipalArgs

    Principal to which the policy grant applies. Exactly one sub-block must be specified. See principal Block below.

    The following arguments are optional:

    Region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    created_at string
    Timestamp when the policy grant was created (RFC3339 format).
    created_by string
    User who created the policy grant.
    detail object
    Policy grant detail. Exactly one sub-block must be specified. See detail Block below.
    domain_identifier string
    Identifier of the domain where the policy grant is created.
    entity_identifier string
    Identifier of the entity to which the policy grant applies.
    entity_type string
    Type of entity to which the policy grant applies. Valid values: ASSET_TYPE, DOMAIN_UNIT, ENVIRONMENT_BLUEPRINT_CONFIGURATION, ENVIRONMENT_PROFILE.
    grant_id string
    Identifier of the policy grant.
    policy_type string
    Type of the managed policy. Valid values: ADD_TO_PROJECT_MEMBER_POOL, CREATE_ASSET_TYPE, CREATE_DOMAIN_UNIT, CREATE_ENVIRONMENT, CREATE_ENVIRONMENT_FROM_BLUEPRINT, CREATE_ENVIRONMENT_PROFILE, CREATE_FORM_TYPE, CREATE_GLOSSARY, CREATE_PROJECT, CREATE_PROJECT_FROM_PROJECT_PROFILE, DELEGATE_CREATE_ENVIRONMENT_PROFILE, OVERRIDE_DOMAIN_UNIT_OWNERS, OVERRIDE_PROJECT_OWNERS, USE_ASSET_TYPE.
    principal object

    Principal to which the policy grant applies. Exactly one sub-block must be specified. See principal Block below.

    The following arguments are optional:

    region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    createdAt String
    Timestamp when the policy grant was created (RFC3339 format).
    createdBy String
    User who created the policy grant.
    detail PolicyGrantDetail
    Policy grant detail. Exactly one sub-block must be specified. See detail Block below.
    domainIdentifier String
    Identifier of the domain where the policy grant is created.
    entityIdentifier String
    Identifier of the entity to which the policy grant applies.
    entityType String
    Type of entity to which the policy grant applies. Valid values: ASSET_TYPE, DOMAIN_UNIT, ENVIRONMENT_BLUEPRINT_CONFIGURATION, ENVIRONMENT_PROFILE.
    grantId String
    Identifier of the policy grant.
    policyType String
    Type of the managed policy. Valid values: ADD_TO_PROJECT_MEMBER_POOL, CREATE_ASSET_TYPE, CREATE_DOMAIN_UNIT, CREATE_ENVIRONMENT, CREATE_ENVIRONMENT_FROM_BLUEPRINT, CREATE_ENVIRONMENT_PROFILE, CREATE_FORM_TYPE, CREATE_GLOSSARY, CREATE_PROJECT, CREATE_PROJECT_FROM_PROJECT_PROFILE, DELEGATE_CREATE_ENVIRONMENT_PROFILE, OVERRIDE_DOMAIN_UNIT_OWNERS, OVERRIDE_PROJECT_OWNERS, USE_ASSET_TYPE.
    principal PolicyGrantPrincipal

    Principal to which the policy grant applies. Exactly one sub-block must be specified. See principal Block below.

    The following arguments are optional:

    region String
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    createdAt string
    Timestamp when the policy grant was created (RFC3339 format).
    createdBy string
    User who created the policy grant.
    detail PolicyGrantDetail
    Policy grant detail. Exactly one sub-block must be specified. See detail Block below.
    domainIdentifier string
    Identifier of the domain where the policy grant is created.
    entityIdentifier string
    Identifier of the entity to which the policy grant applies.
    entityType string
    Type of entity to which the policy grant applies. Valid values: ASSET_TYPE, DOMAIN_UNIT, ENVIRONMENT_BLUEPRINT_CONFIGURATION, ENVIRONMENT_PROFILE.
    grantId string
    Identifier of the policy grant.
    policyType string
    Type of the managed policy. Valid values: ADD_TO_PROJECT_MEMBER_POOL, CREATE_ASSET_TYPE, CREATE_DOMAIN_UNIT, CREATE_ENVIRONMENT, CREATE_ENVIRONMENT_FROM_BLUEPRINT, CREATE_ENVIRONMENT_PROFILE, CREATE_FORM_TYPE, CREATE_GLOSSARY, CREATE_PROJECT, CREATE_PROJECT_FROM_PROJECT_PROFILE, DELEGATE_CREATE_ENVIRONMENT_PROFILE, OVERRIDE_DOMAIN_UNIT_OWNERS, OVERRIDE_PROJECT_OWNERS, USE_ASSET_TYPE.
    principal PolicyGrantPrincipal

    Principal to which the policy grant applies. Exactly one sub-block must be specified. See principal Block below.

    The following arguments are optional:

    region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    created_at str
    Timestamp when the policy grant was created (RFC3339 format).
    created_by str
    User who created the policy grant.
    detail PolicyGrantDetailArgs
    Policy grant detail. Exactly one sub-block must be specified. See detail Block below.
    domain_identifier str
    Identifier of the domain where the policy grant is created.
    entity_identifier str
    Identifier of the entity to which the policy grant applies.
    entity_type str
    Type of entity to which the policy grant applies. Valid values: ASSET_TYPE, DOMAIN_UNIT, ENVIRONMENT_BLUEPRINT_CONFIGURATION, ENVIRONMENT_PROFILE.
    grant_id str
    Identifier of the policy grant.
    policy_type str
    Type of the managed policy. Valid values: ADD_TO_PROJECT_MEMBER_POOL, CREATE_ASSET_TYPE, CREATE_DOMAIN_UNIT, CREATE_ENVIRONMENT, CREATE_ENVIRONMENT_FROM_BLUEPRINT, CREATE_ENVIRONMENT_PROFILE, CREATE_FORM_TYPE, CREATE_GLOSSARY, CREATE_PROJECT, CREATE_PROJECT_FROM_PROJECT_PROFILE, DELEGATE_CREATE_ENVIRONMENT_PROFILE, OVERRIDE_DOMAIN_UNIT_OWNERS, OVERRIDE_PROJECT_OWNERS, USE_ASSET_TYPE.
    principal PolicyGrantPrincipalArgs

    Principal to which the policy grant applies. Exactly one sub-block must be specified. See principal Block below.

    The following arguments are optional:

    region str
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    createdAt String
    Timestamp when the policy grant was created (RFC3339 format).
    createdBy String
    User who created the policy grant.
    detail Property Map
    Policy grant detail. Exactly one sub-block must be specified. See detail Block below.
    domainIdentifier String
    Identifier of the domain where the policy grant is created.
    entityIdentifier String
    Identifier of the entity to which the policy grant applies.
    entityType String
    Type of entity to which the policy grant applies. Valid values: ASSET_TYPE, DOMAIN_UNIT, ENVIRONMENT_BLUEPRINT_CONFIGURATION, ENVIRONMENT_PROFILE.
    grantId String
    Identifier of the policy grant.
    policyType String
    Type of the managed policy. Valid values: ADD_TO_PROJECT_MEMBER_POOL, CREATE_ASSET_TYPE, CREATE_DOMAIN_UNIT, CREATE_ENVIRONMENT, CREATE_ENVIRONMENT_FROM_BLUEPRINT, CREATE_ENVIRONMENT_PROFILE, CREATE_FORM_TYPE, CREATE_GLOSSARY, CREATE_PROJECT, CREATE_PROJECT_FROM_PROJECT_PROFILE, DELEGATE_CREATE_ENVIRONMENT_PROFILE, OVERRIDE_DOMAIN_UNIT_OWNERS, OVERRIDE_PROJECT_OWNERS, USE_ASSET_TYPE.
    principal Property Map

    Principal to which the policy grant applies. Exactly one sub-block must be specified. See principal Block below.

    The following arguments are optional:

    region String
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.

    Supporting Types

    PolicyGrantDetail, PolicyGrantDetailArgs

    AddToProjectMemberPool PolicyGrantDetailAddToProjectMemberPool
    Configuration for the ADD_TO_PROJECT_MEMBER_POOL policy type. See addToProjectMemberPool Block below.
    CreateAssetType PolicyGrantDetailCreateAssetType
    Configuration for the CREATE_ASSET_TYPE policy type. See createAssetType Block below.
    CreateDomainUnit PolicyGrantDetailCreateDomainUnit
    Configuration for the CREATE_DOMAIN_UNIT policy type. See createDomainUnit Block below.
    CreateEnvironment PolicyGrantDetailCreateEnvironment
    Configuration for the CREATE_ENVIRONMENT policy type. Empty block.
    CreateEnvironmentFromBlueprint PolicyGrantDetailCreateEnvironmentFromBlueprint
    Configuration for the CREATE_ENVIRONMENT_FROM_BLUEPRINT policy type. Empty block.
    CreateEnvironmentProfile PolicyGrantDetailCreateEnvironmentProfile
    Configuration for the CREATE_ENVIRONMENT_PROFILE policy type. See createEnvironmentProfile Block below.
    CreateFormType PolicyGrantDetailCreateFormType
    Configuration for the CREATE_FORM_TYPE policy type. See createFormType Block below.
    CreateGlossary PolicyGrantDetailCreateGlossary
    Configuration for the CREATE_GLOSSARY policy type. See createGlossary Block below.
    CreateProject PolicyGrantDetailCreateProject
    Configuration for the CREATE_PROJECT policy type. See createProject Block below.
    CreateProjectFromProjectProfile PolicyGrantDetailCreateProjectFromProjectProfile
    Configuration for the CREATE_PROJECT_FROM_PROJECT_PROFILE policy type. See createProjectFromProjectProfile Block below.
    DelegateCreateEnvironmentProfile PolicyGrantDetailDelegateCreateEnvironmentProfile
    Configuration for the DELEGATE_CREATE_ENVIRONMENT_PROFILE policy type. Empty block.
    OverrideDomainUnitOwners PolicyGrantDetailOverrideDomainUnitOwners
    Configuration for the OVERRIDE_DOMAIN_UNIT_OWNERS policy type. See overrideDomainUnitOwners Block below.
    OverrideProjectOwners PolicyGrantDetailOverrideProjectOwners
    Configuration for the OVERRIDE_PROJECT_OWNERS policy type. See overrideProjectOwners Block below.
    UseAssetType PolicyGrantDetailUseAssetType
    Configuration for the USE_ASSET_TYPE policy type. See useAssetType Block below.
    AddToProjectMemberPool PolicyGrantDetailAddToProjectMemberPool
    Configuration for the ADD_TO_PROJECT_MEMBER_POOL policy type. See addToProjectMemberPool Block below.
    CreateAssetType PolicyGrantDetailCreateAssetType
    Configuration for the CREATE_ASSET_TYPE policy type. See createAssetType Block below.
    CreateDomainUnit PolicyGrantDetailCreateDomainUnit
    Configuration for the CREATE_DOMAIN_UNIT policy type. See createDomainUnit Block below.
    CreateEnvironment PolicyGrantDetailCreateEnvironment
    Configuration for the CREATE_ENVIRONMENT policy type. Empty block.
    CreateEnvironmentFromBlueprint PolicyGrantDetailCreateEnvironmentFromBlueprint
    Configuration for the CREATE_ENVIRONMENT_FROM_BLUEPRINT policy type. Empty block.
    CreateEnvironmentProfile PolicyGrantDetailCreateEnvironmentProfile
    Configuration for the CREATE_ENVIRONMENT_PROFILE policy type. See createEnvironmentProfile Block below.
    CreateFormType PolicyGrantDetailCreateFormType
    Configuration for the CREATE_FORM_TYPE policy type. See createFormType Block below.
    CreateGlossary PolicyGrantDetailCreateGlossary
    Configuration for the CREATE_GLOSSARY policy type. See createGlossary Block below.
    CreateProject PolicyGrantDetailCreateProject
    Configuration for the CREATE_PROJECT policy type. See createProject Block below.
    CreateProjectFromProjectProfile PolicyGrantDetailCreateProjectFromProjectProfile
    Configuration for the CREATE_PROJECT_FROM_PROJECT_PROFILE policy type. See createProjectFromProjectProfile Block below.
    DelegateCreateEnvironmentProfile PolicyGrantDetailDelegateCreateEnvironmentProfile
    Configuration for the DELEGATE_CREATE_ENVIRONMENT_PROFILE policy type. Empty block.
    OverrideDomainUnitOwners PolicyGrantDetailOverrideDomainUnitOwners
    Configuration for the OVERRIDE_DOMAIN_UNIT_OWNERS policy type. See overrideDomainUnitOwners Block below.
    OverrideProjectOwners PolicyGrantDetailOverrideProjectOwners
    Configuration for the OVERRIDE_PROJECT_OWNERS policy type. See overrideProjectOwners Block below.
    UseAssetType PolicyGrantDetailUseAssetType
    Configuration for the USE_ASSET_TYPE policy type. See useAssetType Block below.
    add_to_project_member_pool object
    Configuration for the ADD_TO_PROJECT_MEMBER_POOL policy type. See addToProjectMemberPool Block below.
    create_asset_type object
    Configuration for the CREATE_ASSET_TYPE policy type. See createAssetType Block below.
    create_domain_unit object
    Configuration for the CREATE_DOMAIN_UNIT policy type. See createDomainUnit Block below.
    create_environment object
    Configuration for the CREATE_ENVIRONMENT policy type. Empty block.
    create_environment_from_blueprint object
    Configuration for the CREATE_ENVIRONMENT_FROM_BLUEPRINT policy type. Empty block.
    create_environment_profile object
    Configuration for the CREATE_ENVIRONMENT_PROFILE policy type. See createEnvironmentProfile Block below.
    create_form_type object
    Configuration for the CREATE_FORM_TYPE policy type. See createFormType Block below.
    create_glossary object
    Configuration for the CREATE_GLOSSARY policy type. See createGlossary Block below.
    create_project object
    Configuration for the CREATE_PROJECT policy type. See createProject Block below.
    create_project_from_project_profile object
    Configuration for the CREATE_PROJECT_FROM_PROJECT_PROFILE policy type. See createProjectFromProjectProfile Block below.
    delegate_create_environment_profile object
    Configuration for the DELEGATE_CREATE_ENVIRONMENT_PROFILE policy type. Empty block.
    override_domain_unit_owners object
    Configuration for the OVERRIDE_DOMAIN_UNIT_OWNERS policy type. See overrideDomainUnitOwners Block below.
    override_project_owners object
    Configuration for the OVERRIDE_PROJECT_OWNERS policy type. See overrideProjectOwners Block below.
    use_asset_type object
    Configuration for the USE_ASSET_TYPE policy type. See useAssetType Block below.
    addToProjectMemberPool PolicyGrantDetailAddToProjectMemberPool
    Configuration for the ADD_TO_PROJECT_MEMBER_POOL policy type. See addToProjectMemberPool Block below.
    createAssetType PolicyGrantDetailCreateAssetType
    Configuration for the CREATE_ASSET_TYPE policy type. See createAssetType Block below.
    createDomainUnit PolicyGrantDetailCreateDomainUnit
    Configuration for the CREATE_DOMAIN_UNIT policy type. See createDomainUnit Block below.
    createEnvironment PolicyGrantDetailCreateEnvironment
    Configuration for the CREATE_ENVIRONMENT policy type. Empty block.
    createEnvironmentFromBlueprint PolicyGrantDetailCreateEnvironmentFromBlueprint
    Configuration for the CREATE_ENVIRONMENT_FROM_BLUEPRINT policy type. Empty block.
    createEnvironmentProfile PolicyGrantDetailCreateEnvironmentProfile
    Configuration for the CREATE_ENVIRONMENT_PROFILE policy type. See createEnvironmentProfile Block below.
    createFormType PolicyGrantDetailCreateFormType
    Configuration for the CREATE_FORM_TYPE policy type. See createFormType Block below.
    createGlossary PolicyGrantDetailCreateGlossary
    Configuration for the CREATE_GLOSSARY policy type. See createGlossary Block below.
    createProject PolicyGrantDetailCreateProject
    Configuration for the CREATE_PROJECT policy type. See createProject Block below.
    createProjectFromProjectProfile PolicyGrantDetailCreateProjectFromProjectProfile
    Configuration for the CREATE_PROJECT_FROM_PROJECT_PROFILE policy type. See createProjectFromProjectProfile Block below.
    delegateCreateEnvironmentProfile PolicyGrantDetailDelegateCreateEnvironmentProfile
    Configuration for the DELEGATE_CREATE_ENVIRONMENT_PROFILE policy type. Empty block.
    overrideDomainUnitOwners PolicyGrantDetailOverrideDomainUnitOwners
    Configuration for the OVERRIDE_DOMAIN_UNIT_OWNERS policy type. See overrideDomainUnitOwners Block below.
    overrideProjectOwners PolicyGrantDetailOverrideProjectOwners
    Configuration for the OVERRIDE_PROJECT_OWNERS policy type. See overrideProjectOwners Block below.
    useAssetType PolicyGrantDetailUseAssetType
    Configuration for the USE_ASSET_TYPE policy type. See useAssetType Block below.
    addToProjectMemberPool PolicyGrantDetailAddToProjectMemberPool
    Configuration for the ADD_TO_PROJECT_MEMBER_POOL policy type. See addToProjectMemberPool Block below.
    createAssetType PolicyGrantDetailCreateAssetType
    Configuration for the CREATE_ASSET_TYPE policy type. See createAssetType Block below.
    createDomainUnit PolicyGrantDetailCreateDomainUnit
    Configuration for the CREATE_DOMAIN_UNIT policy type. See createDomainUnit Block below.
    createEnvironment PolicyGrantDetailCreateEnvironment
    Configuration for the CREATE_ENVIRONMENT policy type. Empty block.
    createEnvironmentFromBlueprint PolicyGrantDetailCreateEnvironmentFromBlueprint
    Configuration for the CREATE_ENVIRONMENT_FROM_BLUEPRINT policy type. Empty block.
    createEnvironmentProfile PolicyGrantDetailCreateEnvironmentProfile
    Configuration for the CREATE_ENVIRONMENT_PROFILE policy type. See createEnvironmentProfile Block below.
    createFormType PolicyGrantDetailCreateFormType
    Configuration for the CREATE_FORM_TYPE policy type. See createFormType Block below.
    createGlossary PolicyGrantDetailCreateGlossary
    Configuration for the CREATE_GLOSSARY policy type. See createGlossary Block below.
    createProject PolicyGrantDetailCreateProject
    Configuration for the CREATE_PROJECT policy type. See createProject Block below.
    createProjectFromProjectProfile PolicyGrantDetailCreateProjectFromProjectProfile
    Configuration for the CREATE_PROJECT_FROM_PROJECT_PROFILE policy type. See createProjectFromProjectProfile Block below.
    delegateCreateEnvironmentProfile PolicyGrantDetailDelegateCreateEnvironmentProfile
    Configuration for the DELEGATE_CREATE_ENVIRONMENT_PROFILE policy type. Empty block.
    overrideDomainUnitOwners PolicyGrantDetailOverrideDomainUnitOwners
    Configuration for the OVERRIDE_DOMAIN_UNIT_OWNERS policy type. See overrideDomainUnitOwners Block below.
    overrideProjectOwners PolicyGrantDetailOverrideProjectOwners
    Configuration for the OVERRIDE_PROJECT_OWNERS policy type. See overrideProjectOwners Block below.
    useAssetType PolicyGrantDetailUseAssetType
    Configuration for the USE_ASSET_TYPE policy type. See useAssetType Block below.
    add_to_project_member_pool PolicyGrantDetailAddToProjectMemberPool
    Configuration for the ADD_TO_PROJECT_MEMBER_POOL policy type. See addToProjectMemberPool Block below.
    create_asset_type PolicyGrantDetailCreateAssetType
    Configuration for the CREATE_ASSET_TYPE policy type. See createAssetType Block below.
    create_domain_unit PolicyGrantDetailCreateDomainUnit
    Configuration for the CREATE_DOMAIN_UNIT policy type. See createDomainUnit Block below.
    create_environment PolicyGrantDetailCreateEnvironment
    Configuration for the CREATE_ENVIRONMENT policy type. Empty block.
    create_environment_from_blueprint PolicyGrantDetailCreateEnvironmentFromBlueprint
    Configuration for the CREATE_ENVIRONMENT_FROM_BLUEPRINT policy type. Empty block.
    create_environment_profile PolicyGrantDetailCreateEnvironmentProfile
    Configuration for the CREATE_ENVIRONMENT_PROFILE policy type. See createEnvironmentProfile Block below.
    create_form_type PolicyGrantDetailCreateFormType
    Configuration for the CREATE_FORM_TYPE policy type. See createFormType Block below.
    create_glossary PolicyGrantDetailCreateGlossary
    Configuration for the CREATE_GLOSSARY policy type. See createGlossary Block below.
    create_project PolicyGrantDetailCreateProject
    Configuration for the CREATE_PROJECT policy type. See createProject Block below.
    create_project_from_project_profile PolicyGrantDetailCreateProjectFromProjectProfile
    Configuration for the CREATE_PROJECT_FROM_PROJECT_PROFILE policy type. See createProjectFromProjectProfile Block below.
    delegate_create_environment_profile PolicyGrantDetailDelegateCreateEnvironmentProfile
    Configuration for the DELEGATE_CREATE_ENVIRONMENT_PROFILE policy type. Empty block.
    override_domain_unit_owners PolicyGrantDetailOverrideDomainUnitOwners
    Configuration for the OVERRIDE_DOMAIN_UNIT_OWNERS policy type. See overrideDomainUnitOwners Block below.
    override_project_owners PolicyGrantDetailOverrideProjectOwners
    Configuration for the OVERRIDE_PROJECT_OWNERS policy type. See overrideProjectOwners Block below.
    use_asset_type PolicyGrantDetailUseAssetType
    Configuration for the USE_ASSET_TYPE policy type. See useAssetType Block below.
    addToProjectMemberPool Property Map
    Configuration for the ADD_TO_PROJECT_MEMBER_POOL policy type. See addToProjectMemberPool Block below.
    createAssetType Property Map
    Configuration for the CREATE_ASSET_TYPE policy type. See createAssetType Block below.
    createDomainUnit Property Map
    Configuration for the CREATE_DOMAIN_UNIT policy type. See createDomainUnit Block below.
    createEnvironment Property Map
    Configuration for the CREATE_ENVIRONMENT policy type. Empty block.
    createEnvironmentFromBlueprint Property Map
    Configuration for the CREATE_ENVIRONMENT_FROM_BLUEPRINT policy type. Empty block.
    createEnvironmentProfile Property Map
    Configuration for the CREATE_ENVIRONMENT_PROFILE policy type. See createEnvironmentProfile Block below.
    createFormType Property Map
    Configuration for the CREATE_FORM_TYPE policy type. See createFormType Block below.
    createGlossary Property Map
    Configuration for the CREATE_GLOSSARY policy type. See createGlossary Block below.
    createProject Property Map
    Configuration for the CREATE_PROJECT policy type. See createProject Block below.
    createProjectFromProjectProfile Property Map
    Configuration for the CREATE_PROJECT_FROM_PROJECT_PROFILE policy type. See createProjectFromProjectProfile Block below.
    delegateCreateEnvironmentProfile Property Map
    Configuration for the DELEGATE_CREATE_ENVIRONMENT_PROFILE policy type. Empty block.
    overrideDomainUnitOwners Property Map
    Configuration for the OVERRIDE_DOMAIN_UNIT_OWNERS policy type. See overrideDomainUnitOwners Block below.
    overrideProjectOwners Property Map
    Configuration for the OVERRIDE_PROJECT_OWNERS policy type. See overrideProjectOwners Block below.
    useAssetType Property Map
    Configuration for the USE_ASSET_TYPE policy type. See useAssetType Block below.

    PolicyGrantDetailAddToProjectMemberPool, PolicyGrantDetailAddToProjectMemberPoolArgs

    IncludeChildDomainUnits bool
    Whether to include child domain units.
    IncludeChildDomainUnits bool
    Whether to include child domain units.
    include_child_domain_units bool
    Whether to include child domain units.
    includeChildDomainUnits Boolean
    Whether to include child domain units.
    includeChildDomainUnits boolean
    Whether to include child domain units.
    include_child_domain_units bool
    Whether to include child domain units.
    includeChildDomainUnits Boolean
    Whether to include child domain units.

    PolicyGrantDetailCreateAssetType, PolicyGrantDetailCreateAssetTypeArgs

    IncludeChildDomainUnits bool
    Whether to include child domain units.
    IncludeChildDomainUnits bool
    Whether to include child domain units.
    include_child_domain_units bool
    Whether to include child domain units.
    includeChildDomainUnits Boolean
    Whether to include child domain units.
    includeChildDomainUnits boolean
    Whether to include child domain units.
    include_child_domain_units bool
    Whether to include child domain units.
    includeChildDomainUnits Boolean
    Whether to include child domain units.

    PolicyGrantDetailCreateDomainUnit, PolicyGrantDetailCreateDomainUnitArgs

    IncludeChildDomainUnits bool
    Whether to include child domain units.
    IncludeChildDomainUnits bool
    Whether to include child domain units.
    include_child_domain_units bool
    Whether to include child domain units.
    includeChildDomainUnits Boolean
    Whether to include child domain units.
    includeChildDomainUnits boolean
    Whether to include child domain units.
    include_child_domain_units bool
    Whether to include child domain units.
    includeChildDomainUnits Boolean
    Whether to include child domain units.

    PolicyGrantDetailCreateEnvironmentProfile, PolicyGrantDetailCreateEnvironmentProfileArgs

    DomainUnitId string
    Identifier of the domain unit.
    DomainUnitId string
    Identifier of the domain unit.
    domain_unit_id string
    Identifier of the domain unit.
    domainUnitId String
    Identifier of the domain unit.
    domainUnitId string
    Identifier of the domain unit.
    domain_unit_id str
    Identifier of the domain unit.
    domainUnitId String
    Identifier of the domain unit.

    PolicyGrantDetailCreateFormType, PolicyGrantDetailCreateFormTypeArgs

    IncludeChildDomainUnits bool
    Whether to include child domain units.
    IncludeChildDomainUnits bool
    Whether to include child domain units.
    include_child_domain_units bool
    Whether to include child domain units.
    includeChildDomainUnits Boolean
    Whether to include child domain units.
    includeChildDomainUnits boolean
    Whether to include child domain units.
    include_child_domain_units bool
    Whether to include child domain units.
    includeChildDomainUnits Boolean
    Whether to include child domain units.

    PolicyGrantDetailCreateGlossary, PolicyGrantDetailCreateGlossaryArgs

    IncludeChildDomainUnits bool
    Whether to include child domain units.
    IncludeChildDomainUnits bool
    Whether to include child domain units.
    include_child_domain_units bool
    Whether to include child domain units.
    includeChildDomainUnits Boolean
    Whether to include child domain units.
    includeChildDomainUnits boolean
    Whether to include child domain units.
    include_child_domain_units bool
    Whether to include child domain units.
    includeChildDomainUnits Boolean
    Whether to include child domain units.

    PolicyGrantDetailCreateProject, PolicyGrantDetailCreateProjectArgs

    IncludeChildDomainUnits bool
    Whether to include child domain units.
    IncludeChildDomainUnits bool
    Whether to include child domain units.
    include_child_domain_units bool
    Whether to include child domain units.
    includeChildDomainUnits Boolean
    Whether to include child domain units.
    includeChildDomainUnits boolean
    Whether to include child domain units.
    include_child_domain_units bool
    Whether to include child domain units.
    includeChildDomainUnits Boolean
    Whether to include child domain units.

    PolicyGrantDetailCreateProjectFromProjectProfile, PolicyGrantDetailCreateProjectFromProjectProfileArgs

    IncludeChildDomainUnits bool
    Whether to include child domain units.
    ProjectProfiles List<string>
    List of project profile identifiers.
    IncludeChildDomainUnits bool
    Whether to include child domain units.
    ProjectProfiles []string
    List of project profile identifiers.
    include_child_domain_units bool
    Whether to include child domain units.
    project_profiles list(string)
    List of project profile identifiers.
    includeChildDomainUnits Boolean
    Whether to include child domain units.
    projectProfiles List<String>
    List of project profile identifiers.
    includeChildDomainUnits boolean
    Whether to include child domain units.
    projectProfiles string[]
    List of project profile identifiers.
    include_child_domain_units bool
    Whether to include child domain units.
    project_profiles Sequence[str]
    List of project profile identifiers.
    includeChildDomainUnits Boolean
    Whether to include child domain units.
    projectProfiles List<String>
    List of project profile identifiers.

    PolicyGrantDetailOverrideDomainUnitOwners, PolicyGrantDetailOverrideDomainUnitOwnersArgs

    IncludeChildDomainUnits bool
    Whether to include child domain units.
    IncludeChildDomainUnits bool
    Whether to include child domain units.
    include_child_domain_units bool
    Whether to include child domain units.
    includeChildDomainUnits Boolean
    Whether to include child domain units.
    includeChildDomainUnits boolean
    Whether to include child domain units.
    include_child_domain_units bool
    Whether to include child domain units.
    includeChildDomainUnits Boolean
    Whether to include child domain units.

    PolicyGrantDetailOverrideProjectOwners, PolicyGrantDetailOverrideProjectOwnersArgs

    IncludeChildDomainUnits bool
    Whether to include child domain units.
    IncludeChildDomainUnits bool
    Whether to include child domain units.
    include_child_domain_units bool
    Whether to include child domain units.
    includeChildDomainUnits Boolean
    Whether to include child domain units.
    includeChildDomainUnits boolean
    Whether to include child domain units.
    include_child_domain_units bool
    Whether to include child domain units.
    includeChildDomainUnits Boolean
    Whether to include child domain units.

    PolicyGrantDetailUseAssetType, PolicyGrantDetailUseAssetTypeArgs

    DomainUnitId string
    Identifier of the domain unit.
    DomainUnitId string
    Identifier of the domain unit.
    domain_unit_id string
    Identifier of the domain unit.
    domainUnitId String
    Identifier of the domain unit.
    domainUnitId string
    Identifier of the domain unit.
    domain_unit_id str
    Identifier of the domain unit.
    domainUnitId String
    Identifier of the domain unit.

    PolicyGrantPrincipal, PolicyGrantPrincipalArgs

    DomainUnit PolicyGrantPrincipalDomainUnit
    Domain unit principal. See domainUnit Block below.
    Group PolicyGrantPrincipalGroup
    Group principal. See group Block below.
    Project PolicyGrantPrincipalProject
    Project principal. See project Block below.
    User PolicyGrantPrincipalUser
    User principal. See user Block below.
    DomainUnit PolicyGrantPrincipalDomainUnit
    Domain unit principal. See domainUnit Block below.
    Group PolicyGrantPrincipalGroup
    Group principal. See group Block below.
    Project PolicyGrantPrincipalProject
    Project principal. See project Block below.
    User PolicyGrantPrincipalUser
    User principal. See user Block below.
    domain_unit object
    Domain unit principal. See domainUnit Block below.
    group object
    Group principal. See group Block below.
    project object
    Project principal. See project Block below.
    user object
    User principal. See user Block below.
    domainUnit PolicyGrantPrincipalDomainUnit
    Domain unit principal. See domainUnit Block below.
    group PolicyGrantPrincipalGroup
    Group principal. See group Block below.
    project PolicyGrantPrincipalProject
    Project principal. See project Block below.
    user PolicyGrantPrincipalUser
    User principal. See user Block below.
    domainUnit PolicyGrantPrincipalDomainUnit
    Domain unit principal. See domainUnit Block below.
    group PolicyGrantPrincipalGroup
    Group principal. See group Block below.
    project PolicyGrantPrincipalProject
    Project principal. See project Block below.
    user PolicyGrantPrincipalUser
    User principal. See user Block below.
    domain_unit PolicyGrantPrincipalDomainUnit
    Domain unit principal. See domainUnit Block below.
    group PolicyGrantPrincipalGroup
    Group principal. See group Block below.
    project PolicyGrantPrincipalProject
    Project principal. See project Block below.
    user PolicyGrantPrincipalUser
    User principal. See user Block below.
    domainUnit Property Map
    Domain unit principal. See domainUnit Block below.
    group Property Map
    Group principal. See group Block below.
    project Property Map
    Project principal. See project Block below.
    user Property Map
    User principal. See user Block below.

    PolicyGrantPrincipalDomainUnit, PolicyGrantPrincipalDomainUnitArgs

    DomainUnitDesignation string
    Designation of the domain unit principal. Valid values: OWNER.
    AllDomainUnitsGrantFilter PolicyGrantPrincipalDomainUnitAllDomainUnitsGrantFilter
    Filter to grant access to all domain units. Empty block.
    DomainUnitIdentifier string
    Identifier of the domain unit.
    DomainUnitDesignation string
    Designation of the domain unit principal. Valid values: OWNER.
    AllDomainUnitsGrantFilter PolicyGrantPrincipalDomainUnitAllDomainUnitsGrantFilter
    Filter to grant access to all domain units. Empty block.
    DomainUnitIdentifier string
    Identifier of the domain unit.
    domain_unit_designation string
    Designation of the domain unit principal. Valid values: OWNER.
    all_domain_units_grant_filter object
    Filter to grant access to all domain units. Empty block.
    domain_unit_identifier string
    Identifier of the domain unit.
    domainUnitDesignation String
    Designation of the domain unit principal. Valid values: OWNER.
    allDomainUnitsGrantFilter PolicyGrantPrincipalDomainUnitAllDomainUnitsGrantFilter
    Filter to grant access to all domain units. Empty block.
    domainUnitIdentifier String
    Identifier of the domain unit.
    domainUnitDesignation string
    Designation of the domain unit principal. Valid values: OWNER.
    allDomainUnitsGrantFilter PolicyGrantPrincipalDomainUnitAllDomainUnitsGrantFilter
    Filter to grant access to all domain units. Empty block.
    domainUnitIdentifier string
    Identifier of the domain unit.
    domain_unit_designation str
    Designation of the domain unit principal. Valid values: OWNER.
    all_domain_units_grant_filter PolicyGrantPrincipalDomainUnitAllDomainUnitsGrantFilter
    Filter to grant access to all domain units. Empty block.
    domain_unit_identifier str
    Identifier of the domain unit.
    domainUnitDesignation String
    Designation of the domain unit principal. Valid values: OWNER.
    allDomainUnitsGrantFilter Property Map
    Filter to grant access to all domain units. Empty block.
    domainUnitIdentifier String
    Identifier of the domain unit.

    PolicyGrantPrincipalGroup, PolicyGrantPrincipalGroupArgs

    GroupIdentifier string
    Identifier of the group principal.
    GroupIdentifier string
    Identifier of the group principal.
    group_identifier string
    Identifier of the group principal.
    groupIdentifier String
    Identifier of the group principal.
    groupIdentifier string
    Identifier of the group principal.
    group_identifier str
    Identifier of the group principal.
    groupIdentifier String
    Identifier of the group principal.

    PolicyGrantPrincipalProject, PolicyGrantPrincipalProjectArgs

    ProjectDesignation string
    Designation of the project principal. Valid values: CONTRIBUTOR, OWNER, PROJECT_CATALOG_STEWARD.
    DomainUnitFilter PolicyGrantPrincipalProjectDomainUnitFilter
    Filter for domain unit scoping. See domainUnitFilter Block below.
    ProjectIdentifier string
    Identifier of the project.
    ProjectDesignation string
    Designation of the project principal. Valid values: CONTRIBUTOR, OWNER, PROJECT_CATALOG_STEWARD.
    DomainUnitFilter PolicyGrantPrincipalProjectDomainUnitFilter
    Filter for domain unit scoping. See domainUnitFilter Block below.
    ProjectIdentifier string
    Identifier of the project.
    project_designation string
    Designation of the project principal. Valid values: CONTRIBUTOR, OWNER, PROJECT_CATALOG_STEWARD.
    domain_unit_filter object
    Filter for domain unit scoping. See domainUnitFilter Block below.
    project_identifier string
    Identifier of the project.
    projectDesignation String
    Designation of the project principal. Valid values: CONTRIBUTOR, OWNER, PROJECT_CATALOG_STEWARD.
    domainUnitFilter PolicyGrantPrincipalProjectDomainUnitFilter
    Filter for domain unit scoping. See domainUnitFilter Block below.
    projectIdentifier String
    Identifier of the project.
    projectDesignation string
    Designation of the project principal. Valid values: CONTRIBUTOR, OWNER, PROJECT_CATALOG_STEWARD.
    domainUnitFilter PolicyGrantPrincipalProjectDomainUnitFilter
    Filter for domain unit scoping. See domainUnitFilter Block below.
    projectIdentifier string
    Identifier of the project.
    project_designation str
    Designation of the project principal. Valid values: CONTRIBUTOR, OWNER, PROJECT_CATALOG_STEWARD.
    domain_unit_filter PolicyGrantPrincipalProjectDomainUnitFilter
    Filter for domain unit scoping. See domainUnitFilter Block below.
    project_identifier str
    Identifier of the project.
    projectDesignation String
    Designation of the project principal. Valid values: CONTRIBUTOR, OWNER, PROJECT_CATALOG_STEWARD.
    domainUnitFilter Property Map
    Filter for domain unit scoping. See domainUnitFilter Block below.
    projectIdentifier String
    Identifier of the project.

    PolicyGrantPrincipalProjectDomainUnitFilter, PolicyGrantPrincipalProjectDomainUnitFilterArgs

    DomainUnit string
    Identifier of the domain unit for filtering.
    IncludeChildDomainUnits bool
    Whether to include child domain units in the filter.
    DomainUnit string
    Identifier of the domain unit for filtering.
    IncludeChildDomainUnits bool
    Whether to include child domain units in the filter.
    domain_unit string
    Identifier of the domain unit for filtering.
    include_child_domain_units bool
    Whether to include child domain units in the filter.
    domainUnit String
    Identifier of the domain unit for filtering.
    includeChildDomainUnits Boolean
    Whether to include child domain units in the filter.
    domainUnit string
    Identifier of the domain unit for filtering.
    includeChildDomainUnits boolean
    Whether to include child domain units in the filter.
    domain_unit str
    Identifier of the domain unit for filtering.
    include_child_domain_units bool
    Whether to include child domain units in the filter.
    domainUnit String
    Identifier of the domain unit for filtering.
    includeChildDomainUnits Boolean
    Whether to include child domain units in the filter.

    PolicyGrantPrincipalUser, PolicyGrantPrincipalUserArgs

    AllUsersGrantFilter PolicyGrantPrincipalUserAllUsersGrantFilter
    Filter to grant access to all users. Empty block.
    UserIdentifier string
    Identifier of the user principal.
    AllUsersGrantFilter PolicyGrantPrincipalUserAllUsersGrantFilter
    Filter to grant access to all users. Empty block.
    UserIdentifier string
    Identifier of the user principal.
    all_users_grant_filter object
    Filter to grant access to all users. Empty block.
    user_identifier string
    Identifier of the user principal.
    allUsersGrantFilter PolicyGrantPrincipalUserAllUsersGrantFilter
    Filter to grant access to all users. Empty block.
    userIdentifier String
    Identifier of the user principal.
    allUsersGrantFilter PolicyGrantPrincipalUserAllUsersGrantFilter
    Filter to grant access to all users. Empty block.
    userIdentifier string
    Identifier of the user principal.
    all_users_grant_filter PolicyGrantPrincipalUserAllUsersGrantFilter
    Filter to grant access to all users. Empty block.
    user_identifier str
    Identifier of the user principal.
    allUsersGrantFilter Property Map
    Filter to grant access to all users. Empty block.
    userIdentifier String
    Identifier of the user principal.

    Import

    Identity Schema

    Required

    • domainIdentifier (String) Identifier of the domain.
    • entityType (String) Type of entity.
    • entityIdentifier (String) Identifier of the entity.
    • policyType (String) Type of the managed policy.
    • grantId (String) Identifier of the policy grant.

    Optional

    • accountId (String) AWS Account where this resource is managed.
    • region (String) Region where this resource is managed.

    Using pulumi import, import DataZone Policy Grant using the domain_identifier,entity_type,entity_identifier,policy_type,grant_id. For example:

    $ pulumi import aws:datazone/policyGrant:PolicyGrant example dzd_54nakfrg9k6sri,DOMAIN_UNIT,9v3oj4n26k4yrq,CREATE_DOMAIN_UNIT,3v8lox42tj5zic

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    AWS Classic pulumi/pulumi-aws
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the aws Terraform Provider.
    aws logo aws logo
    Viewing docs for AWS v7.47.0
    published on Thursday, Sep 17, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-aws

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial