Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Bytepluscc Provider
  4. API Docs
  5. iam
  6. Policy
Viewing docs for bytepluscc v0.0.43
published on Monday, Jul 27, 2026 by Byteplus
Schema (JSON)
byteplus-sdk/pulumi-bytepluscc

bytepluscc.iam.Policy

bytepluscc logo
Viewing docs for bytepluscc v0.0.43
published on Monday, Jul 27, 2026 by Byteplus
Schema (JSON)
byteplus-sdk/pulumi-bytepluscc

    A policy describes permissions. IAM users, user groups, or roles must be granted permissions by associating policies. If system preset policies do not meet your requirements, you can create custom policies for fine-grained permission definition.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as bytepluscc from "@byteplus/pulumi-bytepluscc";

const policyDemo = new bytepluscc.iam.Policy("PolicyDemo", {
    policyName: "PolicyDemo",
    policyType: "Custom",
    description: "PolicyDemo description",
    policyDocument: "{\"Statement\":[{\"Action\":[\"clb:DescribeAclAttributes\",\"clb:DescribeHealthCheckLogProjectAttributes\",\"clb:DescribeListenerAttributes\",\"clb:DescribeListenerHealth\",\"clb:DescribeLoadBalancerAttributes\",\"clb:DescribeLoadBalancerHealth\",\"clb:DescribeLoadBalancersBilling\",\"clb:DescribeNLBListenerAttributes\",\"clb:DescribeNLBListenerCertificates\",\"clb:DescribeNLBListenerHealth\",\"clb:DescribeNLBListeners\",\"clb:DescribeNLBServerGroupAttributes\",\"clb:DescribeNLBServerGroups\",\"clb:DescribeNLBZones\",\"clb:DescribeNetworkLoadBalancerAttributes\",\"clb:DescribeNetworkLoadBalancers\",\"clb:DescribeServerGroupAttributes\",\"clb:DescribeZones\",\"clb:ListTagsForNLBResources\",\"clb:DescribeAcls\",\"clb:DescribeCertificates\",\"clb:DescribeHealthCheckLogTopicAttributes\",\"clb:DescribeListeners\",\"clb:DescribeLoadBalancerSpecs\",\"clb:DescribeLoadBalancers\",\"clb:DescribeRules\",\"clb:DescribeServerGroups\",\"clb:ListTagsForResources\",\"clb:TagNLBResources\",\"clb:TagResources\",\"clb:UntagNLBResources\",\"clb:UntagResources\"],\"Effect\":\"Allow\",\"Resource\":[\"*\"]}]}",
    policyUsers: [{
        name: "test",
        policy_scope: [{
            project_name: "default",
            policy_scope_type: "test",
            project_display_name: "test",
        }],
    }],
    policyRoles: [{
        name: "roles",
        policy_scope: [{
            project_name: "default",
        }],
    }],
    policyUserGroups: [{
        name: "test",
        policy_scope: [{
            project_name: "default",
        }],
    }],
});

    import pulumi
import pulumi_bytepluscc as bytepluscc

policy_demo = bytepluscc.iam.Policy("PolicyDemo",
    policy_name="PolicyDemo",
    policy_type="Custom",
    description="PolicyDemo description",
    policy_document="{\"Statement\":[{\"Action\":[\"clb:DescribeAclAttributes\",\"clb:DescribeHealthCheckLogProjectAttributes\",\"clb:DescribeListenerAttributes\",\"clb:DescribeListenerHealth\",\"clb:DescribeLoadBalancerAttributes\",\"clb:DescribeLoadBalancerHealth\",\"clb:DescribeLoadBalancersBilling\",\"clb:DescribeNLBListenerAttributes\",\"clb:DescribeNLBListenerCertificates\",\"clb:DescribeNLBListenerHealth\",\"clb:DescribeNLBListeners\",\"clb:DescribeNLBServerGroupAttributes\",\"clb:DescribeNLBServerGroups\",\"clb:DescribeNLBZones\",\"clb:DescribeNetworkLoadBalancerAttributes\",\"clb:DescribeNetworkLoadBalancers\",\"clb:DescribeServerGroupAttributes\",\"clb:DescribeZones\",\"clb:ListTagsForNLBResources\",\"clb:DescribeAcls\",\"clb:DescribeCertificates\",\"clb:DescribeHealthCheckLogTopicAttributes\",\"clb:DescribeListeners\",\"clb:DescribeLoadBalancerSpecs\",\"clb:DescribeLoadBalancers\",\"clb:DescribeRules\",\"clb:DescribeServerGroups\",\"clb:ListTagsForResources\",\"clb:TagNLBResources\",\"clb:TagResources\",\"clb:UntagNLBResources\",\"clb:UntagResources\"],\"Effect\":\"Allow\",\"Resource\":[\"*\"]}]}",
    policy_users=[{
        "name": "test",
        "policy_scope": [{
            "project_name": "default",
            "policy_scope_type": "test",
            "project_display_name": "test",
        }],
    }],
    policy_roles=[{
        "name": "roles",
        "policy_scope": [{
            "project_name": "default",
        }],
    }],
    policy_user_groups=[{
        "name": "test",
        "policy_scope": [{
            "project_name": "default",
        }],
    }])

    package main

import (
	"github.com/byteplus-sdk/pulumi-bytepluscc/sdk/go/bytepluscc/iam"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := iam.NewPolicy(ctx, "PolicyDemo", &iam.PolicyArgs{
			PolicyName:     pulumi.String("PolicyDemo"),
			PolicyType:     pulumi.String("Custom"),
			Description:    pulumi.String("PolicyDemo description"),
			PolicyDocument: pulumi.String("{\"Statement\":[{\"Action\":[\"clb:DescribeAclAttributes\",\"clb:DescribeHealthCheckLogProjectAttributes\",\"clb:DescribeListenerAttributes\",\"clb:DescribeListenerHealth\",\"clb:DescribeLoadBalancerAttributes\",\"clb:DescribeLoadBalancerHealth\",\"clb:DescribeLoadBalancersBilling\",\"clb:DescribeNLBListenerAttributes\",\"clb:DescribeNLBListenerCertificates\",\"clb:DescribeNLBListenerHealth\",\"clb:DescribeNLBListeners\",\"clb:DescribeNLBServerGroupAttributes\",\"clb:DescribeNLBServerGroups\",\"clb:DescribeNLBZones\",\"clb:DescribeNetworkLoadBalancerAttributes\",\"clb:DescribeNetworkLoadBalancers\",\"clb:DescribeServerGroupAttributes\",\"clb:DescribeZones\",\"clb:ListTagsForNLBResources\",\"clb:DescribeAcls\",\"clb:DescribeCertificates\",\"clb:DescribeHealthCheckLogTopicAttributes\",\"clb:DescribeListeners\",\"clb:DescribeLoadBalancerSpecs\",\"clb:DescribeLoadBalancers\",\"clb:DescribeRules\",\"clb:DescribeServerGroups\",\"clb:ListTagsForResources\",\"clb:TagNLBResources\",\"clb:TagResources\",\"clb:UntagNLBResources\",\"clb:UntagResources\"],\"Effect\":\"Allow\",\"Resource\":[\"*\"]}]}"),
			PolicyUsers: iam.PolicyPolicyUserArray{
				&iam.PolicyPolicyUserArgs{
					Name: pulumi.String("test"),
					Policy_scope: []map[string]interface{}{
						map[string]interface{}{
							"project_name":         "default",
							"policy_scope_type":    "test",
							"project_display_name": "test",
						},
					},
				},
			},
			PolicyRoles: iam.PolicyPolicyRoleArray{
				&iam.PolicyPolicyRoleArgs{
					Name: pulumi.String("roles"),
					Policy_scope: []map[string]interface{}{
						map[string]interface{}{
							"project_name": "default",
						},
					},
				},
			},
			PolicyUserGroups: iam.PolicyPolicyUserGroupArray{
				&iam.PolicyPolicyUserGroupArgs{
					Name: pulumi.String("test"),
					Policy_scope: []map[string]interface{}{
						map[string]interface{}{
							"project_name": "default",
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Bytepluscc = Byteplus.Pulumi.Bytepluscc;

return await Deployment.RunAsync(() => 
{
    var policyDemo = new Bytepluscc.Iam.Policy("PolicyDemo", new()
    {
        PolicyName = "PolicyDemo",
        PolicyType = "Custom",
        Description = "PolicyDemo description",
        PolicyDocument = "{\"Statement\":[{\"Action\":[\"clb:DescribeAclAttributes\",\"clb:DescribeHealthCheckLogProjectAttributes\",\"clb:DescribeListenerAttributes\",\"clb:DescribeListenerHealth\",\"clb:DescribeLoadBalancerAttributes\",\"clb:DescribeLoadBalancerHealth\",\"clb:DescribeLoadBalancersBilling\",\"clb:DescribeNLBListenerAttributes\",\"clb:DescribeNLBListenerCertificates\",\"clb:DescribeNLBListenerHealth\",\"clb:DescribeNLBListeners\",\"clb:DescribeNLBServerGroupAttributes\",\"clb:DescribeNLBServerGroups\",\"clb:DescribeNLBZones\",\"clb:DescribeNetworkLoadBalancerAttributes\",\"clb:DescribeNetworkLoadBalancers\",\"clb:DescribeServerGroupAttributes\",\"clb:DescribeZones\",\"clb:ListTagsForNLBResources\",\"clb:DescribeAcls\",\"clb:DescribeCertificates\",\"clb:DescribeHealthCheckLogTopicAttributes\",\"clb:DescribeListeners\",\"clb:DescribeLoadBalancerSpecs\",\"clb:DescribeLoadBalancers\",\"clb:DescribeRules\",\"clb:DescribeServerGroups\",\"clb:ListTagsForResources\",\"clb:TagNLBResources\",\"clb:TagResources\",\"clb:UntagNLBResources\",\"clb:UntagResources\"],\"Effect\":\"Allow\",\"Resource\":[\"*\"]}]}",
        PolicyUsers = new[]
        {
            new Bytepluscc.Iam.Inputs.PolicyPolicyUserArgs
            {
                Name = "test",
                Policy_scope = new[]
                {
                    
                    {
                        { "project_name", "default" },
                        { "policy_scope_type", "test" },
                        { "project_display_name", "test" },
                    },
                },
            },
        },
        PolicyRoles = new[]
        {
            new Bytepluscc.Iam.Inputs.PolicyPolicyRoleArgs
            {
                Name = "roles",
                Policy_scope = new[]
                {
                    
                    {
                        { "project_name", "default" },
                    },
                },
            },
        },
        PolicyUserGroups = new[]
        {
            new Bytepluscc.Iam.Inputs.PolicyPolicyUserGroupArgs
            {
                Name = "test",
                Policy_scope = new[]
                {
                    
                    {
                        { "project_name", "default" },
                    },
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.byteplus.bytepluscc.iam.Policy;
import com.byteplus.bytepluscc.iam.PolicyArgs;
import com.pulumi.bytepluscc.iam.inputs.PolicyPolicyUserArgs;
import com.pulumi.bytepluscc.iam.inputs.PolicyPolicyRoleArgs;
import com.pulumi.bytepluscc.iam.inputs.PolicyPolicyUserGroupArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var policyDemo = new Policy("policyDemo", PolicyArgs.builder()
            .policyName("PolicyDemo")
            .policyType("Custom")
            .description("PolicyDemo description")
            .policyDocument("{\"Statement\":[{\"Action\":[\"clb:DescribeAclAttributes\",\"clb:DescribeHealthCheckLogProjectAttributes\",\"clb:DescribeListenerAttributes\",\"clb:DescribeListenerHealth\",\"clb:DescribeLoadBalancerAttributes\",\"clb:DescribeLoadBalancerHealth\",\"clb:DescribeLoadBalancersBilling\",\"clb:DescribeNLBListenerAttributes\",\"clb:DescribeNLBListenerCertificates\",\"clb:DescribeNLBListenerHealth\",\"clb:DescribeNLBListeners\",\"clb:DescribeNLBServerGroupAttributes\",\"clb:DescribeNLBServerGroups\",\"clb:DescribeNLBZones\",\"clb:DescribeNetworkLoadBalancerAttributes\",\"clb:DescribeNetworkLoadBalancers\",\"clb:DescribeServerGroupAttributes\",\"clb:DescribeZones\",\"clb:ListTagsForNLBResources\",\"clb:DescribeAcls\",\"clb:DescribeCertificates\",\"clb:DescribeHealthCheckLogTopicAttributes\",\"clb:DescribeListeners\",\"clb:DescribeLoadBalancerSpecs\",\"clb:DescribeLoadBalancers\",\"clb:DescribeRules\",\"clb:DescribeServerGroups\",\"clb:ListTagsForResources\",\"clb:TagNLBResources\",\"clb:TagResources\",\"clb:UntagNLBResources\",\"clb:UntagResources\"],\"Effect\":\"Allow\",\"Resource\":[\"*\"]}]}")
            .policyUsers(PolicyPolicyUserArgs.builder()
%!v(PANIC=Format method: interface conversion: model.Expression is *model.TemplateExpression, not *model.LiteralValueExpression))
                .policyRoles(PolicyPolicyRoleArgs.builder()
%!v(PANIC=Format method: interface conversion: model.Expression is *model.TemplateExpression, not *model.LiteralValueExpression))
                    .policyUserGroups(PolicyPolicyUserGroupArgs.builder()
%!v(PANIC=Format method: interface conversion: model.Expression is *model.TemplateExpression, not *model.LiteralValueExpression))
                        .build());

                }
}

    resources:
  policyDemo:
    type: bytepluscc:iam:Policy
    name: PolicyDemo
    properties:
      policyName: PolicyDemo
      policyType: Custom
      description: PolicyDemo description
      policyDocument: '{"Statement":[{"Action":["clb:DescribeAclAttributes","clb:DescribeHealthCheckLogProjectAttributes","clb:DescribeListenerAttributes","clb:DescribeListenerHealth","clb:DescribeLoadBalancerAttributes","clb:DescribeLoadBalancerHealth","clb:DescribeLoadBalancersBilling","clb:DescribeNLBListenerAttributes","clb:DescribeNLBListenerCertificates","clb:DescribeNLBListenerHealth","clb:DescribeNLBListeners","clb:DescribeNLBServerGroupAttributes","clb:DescribeNLBServerGroups","clb:DescribeNLBZones","clb:DescribeNetworkLoadBalancerAttributes","clb:DescribeNetworkLoadBalancers","clb:DescribeServerGroupAttributes","clb:DescribeZones","clb:ListTagsForNLBResources","clb:DescribeAcls","clb:DescribeCertificates","clb:DescribeHealthCheckLogTopicAttributes","clb:DescribeListeners","clb:DescribeLoadBalancerSpecs","clb:DescribeLoadBalancers","clb:DescribeRules","clb:DescribeServerGroups","clb:ListTagsForResources","clb:TagNLBResources","clb:TagResources","clb:UntagNLBResources","clb:UntagResources"],"Effect":"Allow","Resource":["*"]}]}'
      policyUsers:
        - name: test
          policy_scope:
            - project_name: default
              policy_scope_type: test
              project_display_name: test
      policyRoles:
        - name: roles
          policy_scope:
            - project_name: default
      policyUserGroups:
        - name: test
          policy_scope:
            - project_name: default

    pulumi {
  required_providers {
    bytepluscc = {
      source = "pulumi/bytepluscc"
    }
  }
}

resource "bytepluscc_iam_policy" "PolicyDemo" {
  policy_name     = "PolicyDemo"
  policy_type     = "Custom"
  description     = "PolicyDemo description"
  policy_document = "{\"Statement\":[{\"Action\":[\"clb:DescribeAclAttributes\",\"clb:DescribeHealthCheckLogProjectAttributes\",\"clb:DescribeListenerAttributes\",\"clb:DescribeListenerHealth\",\"clb:DescribeLoadBalancerAttributes\",\"clb:DescribeLoadBalancerHealth\",\"clb:DescribeLoadBalancersBilling\",\"clb:DescribeNLBListenerAttributes\",\"clb:DescribeNLBListenerCertificates\",\"clb:DescribeNLBListenerHealth\",\"clb:DescribeNLBListeners\",\"clb:DescribeNLBServerGroupAttributes\",\"clb:DescribeNLBServerGroups\",\"clb:DescribeNLBZones\",\"clb:DescribeNetworkLoadBalancerAttributes\",\"clb:DescribeNetworkLoadBalancers\",\"clb:DescribeServerGroupAttributes\",\"clb:DescribeZones\",\"clb:ListTagsForNLBResources\",\"clb:DescribeAcls\",\"clb:DescribeCertificates\",\"clb:DescribeHealthCheckLogTopicAttributes\",\"clb:DescribeListeners\",\"clb:DescribeLoadBalancerSpecs\",\"clb:DescribeLoadBalancers\",\"clb:DescribeRules\",\"clb:DescribeServerGroups\",\"clb:ListTagsForResources\",\"clb:TagNLBResources\",\"clb:TagResources\",\"clb:UntagNLBResources\",\"clb:UntagResources\"],\"Effect\":\"Allow\",\"Resource\":[\"*\"]}]}"
  policy_users {
    name = "test"
    policy_scope = [{
      "project_name"         = "default"
      "policy_scope_type"    = "test"
      "project_display_name" = "test"
    }]
  }
  policy_roles {
    name = "roles"
    policy_scope = [{
      "project_name" = "default"
    }]
  }
  policy_user_groups {
    name = "test"
    policy_scope = [{
      "project_name" = "default"
    }]
  }
}

    Create Policy Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Policy(name: string, args: PolicyArgs, opts?: CustomResourceOptions);
    @overload
def Policy(resource_name: str,
           args: PolicyArgs,
           opts: Optional[ResourceOptions] = None)

@overload
def Policy(resource_name: str,
           opts: Optional[ResourceOptions] = None,
           policy_document: Optional[str] = None,
           policy_name: Optional[str] = None,
           policy_type: Optional[str] = None,
           description: Optional[str] = None,
           policy_roles: Optional[Sequence[PolicyPolicyRoleArgs]] = None,
           policy_user_groups: Optional[Sequence[PolicyPolicyUserGroupArgs]] = None,
           policy_users: Optional[Sequence[PolicyPolicyUserArgs]] = None)
    func NewPolicy(ctx *Context, name string, args PolicyArgs, opts ...ResourceOption) (*Policy, error)
    public Policy(string name, PolicyArgs args, CustomResourceOptions? opts = null)
    public Policy(String name, PolicyArgs args)
public Policy(String name, PolicyArgs args, CustomResourceOptions options)

    type: bytepluscc:iam:Policy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "bytepluscc_iam_policy" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args PolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args PolicyArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args PolicyArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args PolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args PolicyArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var byteplusccPolicyResource = new Bytepluscc.Iam.Policy("byteplusccPolicyResource", new()
{
    PolicyDocument = "string",
    PolicyName = "string",
    PolicyType = "string",
    Description = "string",
    PolicyRoles = new[]
    {
        new Bytepluscc.Iam.Inputs.PolicyPolicyRoleArgs
        {
            Name = "string",
            PolicyScopes = new[]
            {
                new Bytepluscc.Iam.Inputs.PolicyPolicyRolePolicyScopeArgs
                {
                    ProjectName = "string",
                },
            },
        },
    },
    PolicyUserGroups = new[]
    {
        new Bytepluscc.Iam.Inputs.PolicyPolicyUserGroupArgs
        {
            Name = "string",
            PolicyScopes = new[]
            {
                new Bytepluscc.Iam.Inputs.PolicyPolicyUserGroupPolicyScopeArgs
                {
                    ProjectName = "string",
                },
            },
        },
    },
    PolicyUsers = new[]
    {
        new Bytepluscc.Iam.Inputs.PolicyPolicyUserArgs
        {
            Name = "string",
            PolicyScopes = new[]
            {
                new Bytepluscc.Iam.Inputs.PolicyPolicyUserPolicyScopeArgs
                {
                    ProjectName = "string",
                },
            },
        },
    },
});

    example, err := iam.NewPolicy(ctx, "byteplusccPolicyResource", &iam.PolicyArgs{
	PolicyDocument: pulumi.String("string"),
	PolicyName:     pulumi.String("string"),
	PolicyType:     pulumi.String("string"),
	Description:    pulumi.String("string"),
	PolicyRoles: iam.PolicyPolicyRoleArray{
		&iam.PolicyPolicyRoleArgs{
			Name: pulumi.String("string"),
			PolicyScopes: iam.PolicyPolicyRolePolicyScopeArray{
				&iam.PolicyPolicyRolePolicyScopeArgs{
					ProjectName: pulumi.String("string"),
				},
			},
		},
	},
	PolicyUserGroups: iam.PolicyPolicyUserGroupArray{
		&iam.PolicyPolicyUserGroupArgs{
			Name: pulumi.String("string"),
			PolicyScopes: iam.PolicyPolicyUserGroupPolicyScopeArray{
				&iam.PolicyPolicyUserGroupPolicyScopeArgs{
					ProjectName: pulumi.String("string"),
				},
			},
		},
	},
	PolicyUsers: iam.PolicyPolicyUserArray{
		&iam.PolicyPolicyUserArgs{
			Name: pulumi.String("string"),
			PolicyScopes: iam.PolicyPolicyUserPolicyScopeArray{
				&iam.PolicyPolicyUserPolicyScopeArgs{
					ProjectName: pulumi.String("string"),
				},
			},
		},
	},
})

    resource "bytepluscc_iam_policy" "byteplusccPolicyResource" {
  lifecycle {
    create_before_destroy = true
  }
  policy_document = "string"
  policy_name     = "string"
  policy_type     = "string"
  description     = "string"
  policy_roles {
    name = "string"
    policy_scopes {
      project_name = "string"
    }
  }
  policy_user_groups {
    name = "string"
    policy_scopes {
      project_name = "string"
    }
  }
  policy_users {
    name = "string"
    policy_scopes {
      project_name = "string"
    }
  }
}

    var byteplusccPolicyResource = new com.byteplus.bytepluscc.iam.Policy("byteplusccPolicyResource", com.byteplus.bytepluscc.iam.PolicyArgs.builder()
    .policyDocument("string")
    .policyName("string")
    .policyType("string")
    .description("string")
    .policyRoles(PolicyPolicyRoleArgs.builder()
        .name("string")
        .policyScopes(PolicyPolicyRolePolicyScopeArgs.builder()
            .projectName("string")
            .build())
        .build())
    .policyUserGroups(PolicyPolicyUserGroupArgs.builder()
        .name("string")
        .policyScopes(PolicyPolicyUserGroupPolicyScopeArgs.builder()
            .projectName("string")
            .build())
        .build())
    .policyUsers(PolicyPolicyUserArgs.builder()
        .name("string")
        .policyScopes(PolicyPolicyUserPolicyScopeArgs.builder()
            .projectName("string")
            .build())
        .build())
    .build());

    bytepluscc_policy_resource = bytepluscc.iam.Policy("byteplusccPolicyResource",
    policy_document="string",
    policy_name="string",
    policy_type="string",
    description="string",
    policy_roles=[{
        "name": "string",
        "policy_scopes": [{
            "project_name": "string",
        }],
    }],
    policy_user_groups=[{
        "name": "string",
        "policy_scopes": [{
            "project_name": "string",
        }],
    }],
    policy_users=[{
        "name": "string",
        "policy_scopes": [{
            "project_name": "string",
        }],
    }])

    const byteplusccPolicyResource = new bytepluscc.iam.Policy("byteplusccPolicyResource", {
    policyDocument: "string",
    policyName: "string",
    policyType: "string",
    description: "string",
    policyRoles: [{
        name: "string",
        policyScopes: [{
            projectName: "string",
        }],
    }],
    policyUserGroups: [{
        name: "string",
        policyScopes: [{
            projectName: "string",
        }],
    }],
    policyUsers: [{
        name: "string",
        policyScopes: [{
            projectName: "string",
        }],
    }],
});

    type: bytepluscc:iam:Policy
properties:
    description: string
    policyDocument: string
    policyName: string
    policyRoles:
        - name: string
          policyScopes:
            - projectName: string
    policyType: string
    policyUserGroups:
        - name: string
          policyScopes:
            - projectName: string
    policyUsers:
        - name: string
          policyScopes:
            - projectName: string

    Policy Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Policy resource accepts the following input properties:

    PolicyDocument string
    Policy syntax content, for example: {"Statement":[{"Effect":"Allow","Action":["iam:","tag:"],"Resource":["*"]}]}
    PolicyName string
    Policy name, 1–64 characters. Supports English letters, numbers, and +=,.@-_ symbols.
    PolicyType string
    Policy type. System indicates a system preset policy; Custom indicates a custom policy.
    Description string
    Policy description, no more than 128 characters.
    PolicyRoles List<Byteplus.PolicyPolicyRole>
    List of roles bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    PolicyUserGroups List<Byteplus.PolicyPolicyUserGroup>
    List of user groups bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    PolicyUsers List<Byteplus.PolicyPolicyUser>
    List of users bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    PolicyDocument string
    Policy syntax content, for example: {"Statement":[{"Effect":"Allow","Action":["iam:","tag:"],"Resource":["*"]}]}
    PolicyName string
    Policy name, 1–64 characters. Supports English letters, numbers, and +=,.@-_ symbols.
    PolicyType string
    Policy type. System indicates a system preset policy; Custom indicates a custom policy.
    Description string
    Policy description, no more than 128 characters.
    PolicyRoles []PolicyPolicyRoleArgs
    List of roles bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    PolicyUserGroups []PolicyPolicyUserGroupArgs
    List of user groups bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    PolicyUsers []PolicyPolicyUserArgs
    List of users bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    policy_document string
    Policy syntax content, for example: {"Statement":[{"Effect":"Allow","Action":["iam:","tag:"],"Resource":["*"]}]}
    policy_name string
    Policy name, 1–64 characters. Supports English letters, numbers, and +=,.@-_ symbols.
    policy_type string
    Policy type. System indicates a system preset policy; Custom indicates a custom policy.
    description string
    Policy description, no more than 128 characters.
    policy_roles list(object)
    List of roles bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    policy_user_groups list(object)
    List of user groups bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    policy_users list(object)
    List of users bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    policyDocument String
    Policy syntax content, for example: {"Statement":[{"Effect":"Allow","Action":["iam:","tag:"],"Resource":["*"]}]}
    policyName String
    Policy name, 1–64 characters. Supports English letters, numbers, and +=,.@-_ symbols.
    policyType String
    Policy type. System indicates a system preset policy; Custom indicates a custom policy.
    description String
    Policy description, no more than 128 characters.
    policyRoles List<PolicyPolicyRole>
    List of roles bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    policyUserGroups List<PolicyPolicyUserGroup>
    List of user groups bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    policyUsers List<PolicyPolicyUser>
    List of users bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    policyDocument string
    Policy syntax content, for example: {"Statement":[{"Effect":"Allow","Action":["iam:","tag:"],"Resource":["*"]}]}
    policyName string
    Policy name, 1–64 characters. Supports English letters, numbers, and +=,.@-_ symbols.
    policyType string
    Policy type. System indicates a system preset policy; Custom indicates a custom policy.
    description string
    Policy description, no more than 128 characters.
    policyRoles PolicyPolicyRole[]
    List of roles bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    policyUserGroups PolicyPolicyUserGroup[]
    List of user groups bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    policyUsers PolicyPolicyUser[]
    List of users bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    policy_document str
    Policy syntax content, for example: {"Statement":[{"Effect":"Allow","Action":["iam:","tag:"],"Resource":["*"]}]}
    policy_name str
    Policy name, 1–64 characters. Supports English letters, numbers, and +=,.@-_ symbols.
    policy_type str
    Policy type. System indicates a system preset policy; Custom indicates a custom policy.
    description str
    Policy description, no more than 128 characters.
    policy_roles Sequence[PolicyPolicyRoleArgs]
    List of roles bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    policy_user_groups Sequence[PolicyPolicyUserGroupArgs]
    List of user groups bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    policy_users Sequence[PolicyPolicyUserArgs]
    List of users bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    policyDocument String
    Policy syntax content, for example: {"Statement":[{"Effect":"Allow","Action":["iam:","tag:"],"Resource":["*"]}]}
    policyName String
    Policy name, 1–64 characters. Supports English letters, numbers, and +=,.@-_ symbols.
    policyType String
    Policy type. System indicates a system preset policy; Custom indicates a custom policy.
    description String
    Policy description, no more than 128 characters.
    policyRoles List<Property Map>
    List of roles bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    policyUserGroups List<Property Map>
    List of user groups bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    policyUsers List<Property Map>
    List of users bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Policy resource produces the following output properties:

    AttachmentCount int
    Number of identities bound to the policy.
    Category string
    Category of the system preset policy, usually the service code. This field is not returned for custom policies.
    CreatedTime string
    Policy creation time.
    Id string
    The provider-assigned unique ID for this managed resource.
    IsServiceRolePolicy int
    Indicates whether the policy is for a service-linked role. 0 means no; 1 means yes.
    PolicyTrn string
    Policy TRN.
    UpdatedTime string
    Policy update time.
    AttachmentCount int
    Number of identities bound to the policy.
    Category string
    Category of the system preset policy, usually the service code. This field is not returned for custom policies.
    CreatedTime string
    Policy creation time.
    Id string
    The provider-assigned unique ID for this managed resource.
    IsServiceRolePolicy int
    Indicates whether the policy is for a service-linked role. 0 means no; 1 means yes.
    PolicyTrn string
    Policy TRN.
    UpdatedTime string
    Policy update time.
    attachment_count number
    Number of identities bound to the policy.
    category string
    Category of the system preset policy, usually the service code. This field is not returned for custom policies.
    created_time string
    Policy creation time.
    id string
    The provider-assigned unique ID for this managed resource.
    is_service_role_policy number
    Indicates whether the policy is for a service-linked role. 0 means no; 1 means yes.
    policy_trn string
    Policy TRN.
    updated_time string
    Policy update time.
    attachmentCount Integer
    Number of identities bound to the policy.
    category String
    Category of the system preset policy, usually the service code. This field is not returned for custom policies.
    createdTime String
    Policy creation time.
    id String
    The provider-assigned unique ID for this managed resource.
    isServiceRolePolicy Integer
    Indicates whether the policy is for a service-linked role. 0 means no; 1 means yes.
    policyTrn String
    Policy TRN.
    updatedTime String
    Policy update time.
    attachmentCount number
    Number of identities bound to the policy.
    category string
    Category of the system preset policy, usually the service code. This field is not returned for custom policies.
    createdTime string
    Policy creation time.
    id string
    The provider-assigned unique ID for this managed resource.
    isServiceRolePolicy number
    Indicates whether the policy is for a service-linked role. 0 means no; 1 means yes.
    policyTrn string
    Policy TRN.
    updatedTime string
    Policy update time.
    attachment_count int
    Number of identities bound to the policy.
    category str
    Category of the system preset policy, usually the service code. This field is not returned for custom policies.
    created_time str
    Policy creation time.
    id str
    The provider-assigned unique ID for this managed resource.
    is_service_role_policy int
    Indicates whether the policy is for a service-linked role. 0 means no; 1 means yes.
    policy_trn str
    Policy TRN.
    updated_time str
    Policy update time.
    attachmentCount Number
    Number of identities bound to the policy.
    category String
    Category of the system preset policy, usually the service code. This field is not returned for custom policies.
    createdTime String
    Policy creation time.
    id String
    The provider-assigned unique ID for this managed resource.
    isServiceRolePolicy Number
    Indicates whether the policy is for a service-linked role. 0 means no; 1 means yes.
    policyTrn String
    Policy TRN.
    updatedTime String
    Policy update time.

    Look up Existing Policy Resource

    Get an existing Policy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: PolicyState, opts?: CustomResourceOptions): Policy
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        attachment_count: Optional[int] = None,
        category: Optional[str] = None,
        created_time: Optional[str] = None,
        description: Optional[str] = None,
        is_service_role_policy: Optional[int] = None,
        policy_document: Optional[str] = None,
        policy_name: Optional[str] = None,
        policy_roles: Optional[Sequence[PolicyPolicyRoleArgs]] = None,
        policy_trn: Optional[str] = None,
        policy_type: Optional[str] = None,
        policy_user_groups: Optional[Sequence[PolicyPolicyUserGroupArgs]] = None,
        policy_users: Optional[Sequence[PolicyPolicyUserArgs]] = None,
        updated_time: Optional[str] = None) -> Policy
    func GetPolicy(ctx *Context, name string, id IDInput, state *PolicyState, opts ...ResourceOption) (*Policy, error)
    public static Policy Get(string name, Input<string> id, PolicyState? state, CustomResourceOptions? opts = null)
    public static Policy get(String name, Output<String> id, PolicyState state, CustomResourceOptions options)
    resources:  _:    type: bytepluscc:iam:Policy    get:      id: ${id}
    import {
  to = bytepluscc_iam_policy.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AttachmentCount int
    Number of identities bound to the policy.
    Category string
    Category of the system preset policy, usually the service code. This field is not returned for custom policies.
    CreatedTime string
    Policy creation time.
    Description string
    Policy description, no more than 128 characters.
    IsServiceRolePolicy int
    Indicates whether the policy is for a service-linked role. 0 means no; 1 means yes.
    PolicyDocument string
    Policy syntax content, for example: {"Statement":[{"Effect":"Allow","Action":["iam:","tag:"],"Resource":["*"]}]}
    PolicyName string
    Policy name, 1–64 characters. Supports English letters, numbers, and +=,.@-_ symbols.
    PolicyRoles List<Byteplus.PolicyPolicyRole>
    List of roles bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    PolicyTrn string
    Policy TRN.
    PolicyType string
    Policy type. System indicates a system preset policy; Custom indicates a custom policy.
    PolicyUserGroups List<Byteplus.PolicyPolicyUserGroup>
    List of user groups bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    PolicyUsers List<Byteplus.PolicyPolicyUser>
    List of users bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    UpdatedTime string
    Policy update time.
    AttachmentCount int
    Number of identities bound to the policy.
    Category string
    Category of the system preset policy, usually the service code. This field is not returned for custom policies.
    CreatedTime string
    Policy creation time.
    Description string
    Policy description, no more than 128 characters.
    IsServiceRolePolicy int
    Indicates whether the policy is for a service-linked role. 0 means no; 1 means yes.
    PolicyDocument string
    Policy syntax content, for example: {"Statement":[{"Effect":"Allow","Action":["iam:","tag:"],"Resource":["*"]}]}
    PolicyName string
    Policy name, 1–64 characters. Supports English letters, numbers, and +=,.@-_ symbols.
    PolicyRoles []PolicyPolicyRoleArgs
    List of roles bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    PolicyTrn string
    Policy TRN.
    PolicyType string
    Policy type. System indicates a system preset policy; Custom indicates a custom policy.
    PolicyUserGroups []PolicyPolicyUserGroupArgs
    List of user groups bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    PolicyUsers []PolicyPolicyUserArgs
    List of users bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    UpdatedTime string
    Policy update time.
    attachment_count number
    Number of identities bound to the policy.
    category string
    Category of the system preset policy, usually the service code. This field is not returned for custom policies.
    created_time string
    Policy creation time.
    description string
    Policy description, no more than 128 characters.
    is_service_role_policy number
    Indicates whether the policy is for a service-linked role. 0 means no; 1 means yes.
    policy_document string
    Policy syntax content, for example: {"Statement":[{"Effect":"Allow","Action":["iam:","tag:"],"Resource":["*"]}]}
    policy_name string
    Policy name, 1–64 characters. Supports English letters, numbers, and +=,.@-_ symbols.
    policy_roles list(object)
    List of roles bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    policy_trn string
    Policy TRN.
    policy_type string
    Policy type. System indicates a system preset policy; Custom indicates a custom policy.
    policy_user_groups list(object)
    List of user groups bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    policy_users list(object)
    List of users bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    updated_time string
    Policy update time.
    attachmentCount Integer
    Number of identities bound to the policy.
    category String
    Category of the system preset policy, usually the service code. This field is not returned for custom policies.
    createdTime String
    Policy creation time.
    description String
    Policy description, no more than 128 characters.
    isServiceRolePolicy Integer
    Indicates whether the policy is for a service-linked role. 0 means no; 1 means yes.
    policyDocument String
    Policy syntax content, for example: {"Statement":[{"Effect":"Allow","Action":["iam:","tag:"],"Resource":["*"]}]}
    policyName String
    Policy name, 1–64 characters. Supports English letters, numbers, and +=,.@-_ symbols.
    policyRoles List<PolicyPolicyRole>
    List of roles bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    policyTrn String
    Policy TRN.
    policyType String
    Policy type. System indicates a system preset policy; Custom indicates a custom policy.
    policyUserGroups List<PolicyPolicyUserGroup>
    List of user groups bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    policyUsers List<PolicyPolicyUser>
    List of users bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    updatedTime String
    Policy update time.
    attachmentCount number
    Number of identities bound to the policy.
    category string
    Category of the system preset policy, usually the service code. This field is not returned for custom policies.
    createdTime string
    Policy creation time.
    description string
    Policy description, no more than 128 characters.
    isServiceRolePolicy number
    Indicates whether the policy is for a service-linked role. 0 means no; 1 means yes.
    policyDocument string
    Policy syntax content, for example: {"Statement":[{"Effect":"Allow","Action":["iam:","tag:"],"Resource":["*"]}]}
    policyName string
    Policy name, 1–64 characters. Supports English letters, numbers, and +=,.@-_ symbols.
    policyRoles PolicyPolicyRole[]
    List of roles bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    policyTrn string
    Policy TRN.
    policyType string
    Policy type. System indicates a system preset policy; Custom indicates a custom policy.
    policyUserGroups PolicyPolicyUserGroup[]
    List of user groups bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    policyUsers PolicyPolicyUser[]
    List of users bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    updatedTime string
    Policy update time.
    attachment_count int
    Number of identities bound to the policy.
    category str
    Category of the system preset policy, usually the service code. This field is not returned for custom policies.
    created_time str
    Policy creation time.
    description str
    Policy description, no more than 128 characters.
    is_service_role_policy int
    Indicates whether the policy is for a service-linked role. 0 means no; 1 means yes.
    policy_document str
    Policy syntax content, for example: {"Statement":[{"Effect":"Allow","Action":["iam:","tag:"],"Resource":["*"]}]}
    policy_name str
    Policy name, 1–64 characters. Supports English letters, numbers, and +=,.@-_ symbols.
    policy_roles Sequence[PolicyPolicyRoleArgs]
    List of roles bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    policy_trn str
    Policy TRN.
    policy_type str
    Policy type. System indicates a system preset policy; Custom indicates a custom policy.
    policy_user_groups Sequence[PolicyPolicyUserGroupArgs]
    List of user groups bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    policy_users Sequence[PolicyPolicyUserArgs]
    List of users bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    updated_time str
    Policy update time.
    attachmentCount Number
    Number of identities bound to the policy.
    category String
    Category of the system preset policy, usually the service code. This field is not returned for custom policies.
    createdTime String
    Policy creation time.
    description String
    Policy description, no more than 128 characters.
    isServiceRolePolicy Number
    Indicates whether the policy is for a service-linked role. 0 means no; 1 means yes.
    policyDocument String
    Policy syntax content, for example: {"Statement":[{"Effect":"Allow","Action":["iam:","tag:"],"Resource":["*"]}]}
    policyName String
    Policy name, 1–64 characters. Supports English letters, numbers, and +=,.@-_ symbols.
    policyRoles List<Property Map>
    List of roles bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    policyTrn String
    Policy TRN.
    policyType String
    Policy type. System indicates a system preset policy; Custom indicates a custom policy.
    policyUserGroups List<Property Map>
    List of user groups bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    policyUsers List<Property Map>
    List of users bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    updatedTime String
    Policy update time.

    Supporting Types

    PolicyPolicyRole, PolicyPolicyRoleArgs

    Name string
    Name of the corresponding user, role, or user group.
    PolicyScopes List<Byteplus.PolicyPolicyRolePolicyScope>
    List of projects bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    Name string
    Name of the corresponding user, role, or user group.
    PolicyScopes []PolicyPolicyRolePolicyScope
    List of projects bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    name string
    Name of the corresponding user, role, or user group.
    policy_scopes list(object)
    List of projects bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    name String
    Name of the corresponding user, role, or user group.
    policyScopes List<PolicyPolicyRolePolicyScope>
    List of projects bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    name string
    Name of the corresponding user, role, or user group.
    policyScopes PolicyPolicyRolePolicyScope[]
    List of projects bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    name str
    Name of the corresponding user, role, or user group.
    policy_scopes Sequence[PolicyPolicyRolePolicyScope]
    List of projects bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    name String
    Name of the corresponding user, role, or user group.
    policyScopes List<Property Map>
    List of projects bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.

    PolicyPolicyRolePolicyScope, PolicyPolicyRolePolicyScopeArgs

    ProjectName string
    Project name.
    ProjectName string
    Project name.
    project_name string
    Project name.
    projectName String
    Project name.
    projectName string
    Project name.
    project_name str
    Project name.
    projectName String
    Project name.

    PolicyPolicyUser, PolicyPolicyUserArgs

    Name string
    Name of the corresponding user, role, or user group.
    PolicyScopes List<Byteplus.PolicyPolicyUserPolicyScope>
    List of projects bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    Name string
    Name of the corresponding user, role, or user group.
    PolicyScopes []PolicyPolicyUserPolicyScope
    List of projects bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    name string
    Name of the corresponding user, role, or user group.
    policy_scopes list(object)
    List of projects bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    name String
    Name of the corresponding user, role, or user group.
    policyScopes List<PolicyPolicyUserPolicyScope>
    List of projects bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    name string
    Name of the corresponding user, role, or user group.
    policyScopes PolicyPolicyUserPolicyScope[]
    List of projects bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    name str
    Name of the corresponding user, role, or user group.
    policy_scopes Sequence[PolicyPolicyUserPolicyScope]
    List of projects bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    name String
    Name of the corresponding user, role, or user group.
    policyScopes List<Property Map>
    List of projects bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.

    PolicyPolicyUserGroup, PolicyPolicyUserGroupArgs

    Name string
    Name of the corresponding user, role, or user group.
    PolicyScopes List<Byteplus.PolicyPolicyUserGroupPolicyScope>
    List of projects bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    Name string
    Name of the corresponding user, role, or user group.
    PolicyScopes []PolicyPolicyUserGroupPolicyScope
    List of projects bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    name string
    Name of the corresponding user, role, or user group.
    policy_scopes list(object)
    List of projects bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    name String
    Name of the corresponding user, role, or user group.
    policyScopes List<PolicyPolicyUserGroupPolicyScope>
    List of projects bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    name string
    Name of the corresponding user, role, or user group.
    policyScopes PolicyPolicyUserGroupPolicyScope[]
    List of projects bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    name str
    Name of the corresponding user, role, or user group.
    policy_scopes Sequence[PolicyPolicyUserGroupPolicyScope]
    List of projects bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.
    name String
    Name of the corresponding user, role, or user group.
    policyScopes List<Property Map>
    List of projects bound to the policy. Important Note: When using SetNestedAttribute, you must fully define all attributes of its nested structure. Incomplete definitions may cause Terraform to detect unexpected differences during plan comparison, triggering unnecessary resource updates and affecting resource stability and predictability.

    PolicyPolicyUserGroupPolicyScope, PolicyPolicyUserGroupPolicyScopeArgs

    ProjectName string
    Project name.
    ProjectName string
    Project name.
    project_name string
    Project name.
    projectName String
    Project name.
    projectName string
    Project name.
    project_name str
    Project name.
    projectName String
    Project name.

    PolicyPolicyUserPolicyScope, PolicyPolicyUserPolicyScopeArgs

    ProjectName string
    Project name.
    ProjectName string
    Project name.
    project_name string
    Project name.
    projectName String
    Project name.
    projectName string
    Project name.
    project_name str
    Project name.
    projectName String
    Project name.

    Import

    $ pulumi import bytepluscc:iam/policy:Policy example "policy_name|policy_type"

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    bytepluscc byteplus-sdk/pulumi-bytepluscc
    License
    MPL-2.0
    Notes
    This Pulumi package is based on the bytepluscc Terraform Provider.
    bytepluscc logo
    Viewing docs for bytepluscc v0.0.43
    published on Monday, Jul 27, 2026 by Byteplus
    Schema (JSON)
    byteplus-sdk/pulumi-bytepluscc

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial