Google Cloud v8.34.0 published on Wednesday, Jun 11, 2025 by Pulumi
gcp.gkehub.getScopeIamPolicy
Explore with Pulumi AI
Retrieves the current IAM policy data for scope
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const policy = gcp.gkehub.getScopeIamPolicy({
project: scope.project,
scopeId: scope.scopeId,
});
import pulumi
import pulumi_gcp as gcp
policy = gcp.gkehub.get_scope_iam_policy(project=scope["project"],
scope_id=scope["scopeId"])
package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/gkehub"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := gkehub.LookupScopeIamPolicy(ctx, &gkehub.LookupScopeIamPolicyArgs{
Project: pulumi.StringRef(scope.Project),
ScopeId: scope.ScopeId,
}, nil)
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() =>
{
var policy = Gcp.GkeHub.GetScopeIamPolicy.Invoke(new()
{
Project = scope.Project,
ScopeId = scope.ScopeId,
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.gkehub.GkehubFunctions;
import com.pulumi.gcp.gkehub.inputs.GetScopeIamPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var policy = GkehubFunctions.getScopeIamPolicy(GetScopeIamPolicyArgs.builder()
.project(scope.project())
.scopeId(scope.scopeId())
.build());
}
}
variables:
policy:
fn::invoke:
function: gcp:gkehub:getScopeIamPolicy
arguments:
project: ${scope.project}
scopeId: ${scope.scopeId}
Using getScopeIamPolicy
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getScopeIamPolicy(args: GetScopeIamPolicyArgs, opts?: InvokeOptions): Promise<GetScopeIamPolicyResult>
function getScopeIamPolicyOutput(args: GetScopeIamPolicyOutputArgs, opts?: InvokeOptions): Output<GetScopeIamPolicyResult>
def get_scope_iam_policy(project: Optional[str] = None,
scope_id: Optional[str] = None,
opts: Optional[InvokeOptions] = None) -> GetScopeIamPolicyResult
def get_scope_iam_policy_output(project: Optional[pulumi.Input[str]] = None,
scope_id: Optional[pulumi.Input[str]] = None,
opts: Optional[InvokeOptions] = None) -> Output[GetScopeIamPolicyResult]
func LookupScopeIamPolicy(ctx *Context, args *LookupScopeIamPolicyArgs, opts ...InvokeOption) (*LookupScopeIamPolicyResult, error)
func LookupScopeIamPolicyOutput(ctx *Context, args *LookupScopeIamPolicyOutputArgs, opts ...InvokeOption) LookupScopeIamPolicyResultOutput
> Note: This function is named LookupScopeIamPolicy
in the Go SDK.
public static class GetScopeIamPolicy
{
public static Task<GetScopeIamPolicyResult> InvokeAsync(GetScopeIamPolicyArgs args, InvokeOptions? opts = null)
public static Output<GetScopeIamPolicyResult> Invoke(GetScopeIamPolicyInvokeArgs args, InvokeOptions? opts = null)
}
public static CompletableFuture<GetScopeIamPolicyResult> getScopeIamPolicy(GetScopeIamPolicyArgs args, InvokeOptions options)
public static Output<GetScopeIamPolicyResult> getScopeIamPolicy(GetScopeIamPolicyArgs args, InvokeOptions options)
fn::invoke:
function: gcp:gkehub/getScopeIamPolicy:getScopeIamPolicy
arguments:
# arguments dictionary
The following arguments are supported:
- Scope
Id string - Used to find the parent resource to bind the IAM policy to
- Project string
- The ID of the project in which the resource belongs. If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
- Scope
Id string - Used to find the parent resource to bind the IAM policy to
- Project string
- The ID of the project in which the resource belongs. If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
- scope
Id String - Used to find the parent resource to bind the IAM policy to
- project String
- The ID of the project in which the resource belongs. If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
- scope
Id string - Used to find the parent resource to bind the IAM policy to
- project string
- The ID of the project in which the resource belongs. If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
- scope_
id str - Used to find the parent resource to bind the IAM policy to
- project str
- The ID of the project in which the resource belongs. If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
- scope
Id String - Used to find the parent resource to bind the IAM policy to
- project String
- The ID of the project in which the resource belongs. If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
getScopeIamPolicy Result
The following output properties are available:
- Etag string
- (Computed) The etag of the IAM policy.
- Id string
- The provider-assigned unique ID for this managed resource.
- Policy
Data string - (Required only by
gcp.gkehub.ScopeIamPolicy
) The policy data generated by agcp.organizations.getIAMPolicy
data source. - Project string
- Scope
Id string
- Etag string
- (Computed) The etag of the IAM policy.
- Id string
- The provider-assigned unique ID for this managed resource.
- Policy
Data string - (Required only by
gcp.gkehub.ScopeIamPolicy
) The policy data generated by agcp.organizations.getIAMPolicy
data source. - Project string
- Scope
Id string
- etag String
- (Computed) The etag of the IAM policy.
- id String
- The provider-assigned unique ID for this managed resource.
- policy
Data String - (Required only by
gcp.gkehub.ScopeIamPolicy
) The policy data generated by agcp.organizations.getIAMPolicy
data source. - project String
- scope
Id String
- etag string
- (Computed) The etag of the IAM policy.
- id string
- The provider-assigned unique ID for this managed resource.
- policy
Data string - (Required only by
gcp.gkehub.ScopeIamPolicy
) The policy data generated by agcp.organizations.getIAMPolicy
data source. - project string
- scope
Id string
- etag str
- (Computed) The etag of the IAM policy.
- id str
- The provider-assigned unique ID for this managed resource.
- policy_
data str - (Required only by
gcp.gkehub.ScopeIamPolicy
) The policy data generated by agcp.organizations.getIAMPolicy
data source. - project str
- scope_
id str
- etag String
- (Computed) The etag of the IAM policy.
- id String
- The provider-assigned unique ID for this managed resource.
- policy
Data String - (Required only by
gcp.gkehub.ScopeIamPolicy
) The policy data generated by agcp.organizations.getIAMPolicy
data source. - project String
- scope
Id String
Package Details
- Repository
- Google Cloud (GCP) Classic pulumi/pulumi-gcp
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
google-beta
Terraform Provider.