organizationEnvironmentIamMember.go

// Code generated by the Pulumi SDK Generator DO NOT EDIT.
// *** WARNING: Do not edit by hand unless you're certain you know what you are doing! ***

package v1

import (
	"context"
	"reflect"

	"errors"
	iam "github.com/pulumi/pulumi-google-native/sdk/go/google/iam/v1"
	"github.com/pulumi/pulumi-google-native/sdk/go/google/internal"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

// Sets the IAM policy on an environment, if the policy already exists it will be replaced. For more information, see [Manage users, roles, and permissions using the API](https://cloud.google.com/apigee/docs/api-platform/system-administration/manage-users-roles). You must have the `apigee.environments.setIamPolicy` permission to call this API.
type OrganizationEnvironmentIamMember struct {
	pulumi.CustomResourceState

	// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
	Condition iam.ConditionPtrOutput `pulumi:"condition"`
	// The etag of the resource's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringOutput `pulumi:"member"`
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project in which the resource belongs. If it is not provided, a default will be supplied.
	Project pulumi.StringOutput `pulumi:"project"`
	// The role that should be applied.
	Role pulumi.StringOutput `pulumi:"role"`
}

// NewOrganizationEnvironmentIamMember registers a new resource with the given unique name, arguments, and options.
func NewOrganizationEnvironmentIamMember(ctx *pulumi.Context,
	name string, args *OrganizationEnvironmentIamMemberArgs, opts ...pulumi.ResourceOption) (*OrganizationEnvironmentIamMember, error) {
	if args == nil {
		return nil, errors.New("missing one or more required arguments")
	}

	if args.Member == nil {
		return nil, errors.New("invalid value for required argument 'Member'")
	}
	if args.Name == nil {
		return nil, errors.New("invalid value for required argument 'Name'")
	}
	if args.Role == nil {
		return nil, errors.New("invalid value for required argument 'Role'")
	}
	opts = internal.PkgResourceDefaultOpts(opts)
	var resource OrganizationEnvironmentIamMember
	err := ctx.RegisterResource("google-native:apigee/v1:OrganizationEnvironmentIamMember", name, args, &resource, opts...)
	if err != nil {
		return nil, err
	}
	return &resource, nil
}

// GetOrganizationEnvironmentIamMember gets an existing OrganizationEnvironmentIamMember resource's state with the given name, ID, and optional
// state properties that are used to uniquely qualify the lookup (nil if not required).
func GetOrganizationEnvironmentIamMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *OrganizationEnvironmentIamMemberState, opts ...pulumi.ResourceOption) (*OrganizationEnvironmentIamMember, error) {
	var resource OrganizationEnvironmentIamMember
	err := ctx.ReadResource("google-native:apigee/v1:OrganizationEnvironmentIamMember", name, id, state, &resource, opts...)
	if err != nil {
		return nil, err
	}
	return &resource, nil
}

// Input properties used for looking up and filtering OrganizationEnvironmentIamMember resources.
type organizationEnvironmentIamMemberState struct {
}

type OrganizationEnvironmentIamMemberState struct {
}

func (OrganizationEnvironmentIamMemberState) ElementType() reflect.Type {
	return reflect.TypeOf((*organizationEnvironmentIamMemberState)(nil)).Elem()
}

type organizationEnvironmentIamMemberArgs struct {
	// An IAM Condition for a given binding.
	Condition *iam.Condition `pulumi:"condition"`
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member string `pulumi:"member"`
	// The name of the resource to manage IAM policies for.
	Name string `pulumi:"name"`
	// The role that should be applied.
	Role string `pulumi:"role"`
}

// The set of arguments for constructing a OrganizationEnvironmentIamMember resource.
type OrganizationEnvironmentIamMemberArgs struct {
	// An IAM Condition for a given binding.
	Condition iam.ConditionPtrInput
	// Identity that will be granted the privilege in role. The entry can have one of the following values:
	//
	//  * user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	//  * serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	//  * group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
	//  * domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringInput
	// The name of the resource to manage IAM policies for.
	Name pulumi.StringInput
	// The role that should be applied.
	Role pulumi.StringInput
}

func (OrganizationEnvironmentIamMemberArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*organizationEnvironmentIamMemberArgs)(nil)).Elem()
}

type OrganizationEnvironmentIamMemberInput interface {
	pulumi.Input

	ToOrganizationEnvironmentIamMemberOutput() OrganizationEnvironmentIamMemberOutput
	ToOrganizationEnvironmentIamMemberOutputWithContext(ctx context.Context) OrganizationEnvironmentIamMemberOutput
}

func (*OrganizationEnvironmentIamMember) ElementType() reflect.Type {
	return reflect.TypeOf((**OrganizationEnvironmentIamMember)(nil)).Elem()
}

func (i *OrganizationEnvironmentIamMember) ToOrganizationEnvironmentIamMemberOutput() OrganizationEnvironmentIamMemberOutput {
	return i.ToOrganizationEnvironmentIamMemberOutputWithContext(context.Background())
}

func (i *OrganizationEnvironmentIamMember) ToOrganizationEnvironmentIamMemberOutputWithContext(ctx context.Context) OrganizationEnvironmentIamMemberOutput {
	return pulumi.ToOutputWithContext(ctx, i).(OrganizationEnvironmentIamMemberOutput)
}

type OrganizationEnvironmentIamMemberOutput struct{ *pulumi.OutputState }

func (OrganizationEnvironmentIamMemberOutput) ElementType() reflect.Type {
	return reflect.TypeOf((**OrganizationEnvironmentIamMember)(nil)).Elem()
}

func (o OrganizationEnvironmentIamMemberOutput) ToOrganizationEnvironmentIamMemberOutput() OrganizationEnvironmentIamMemberOutput {
	return o
}

func (o OrganizationEnvironmentIamMemberOutput) ToOrganizationEnvironmentIamMemberOutputWithContext(ctx context.Context) OrganizationEnvironmentIamMemberOutput {
	return o
}

// An IAM Condition for a given binding. See https://cloud.google.com/iam/docs/conditions-overview for additional details.
func (o OrganizationEnvironmentIamMemberOutput) Condition() iam.ConditionPtrOutput {
	return o.ApplyT(func(v *OrganizationEnvironmentIamMember) iam.ConditionPtrOutput { return v.Condition }).(iam.ConditionPtrOutput)
}

// The etag of the resource's IAM policy.
func (o OrganizationEnvironmentIamMemberOutput) Etag() pulumi.StringOutput {
	return o.ApplyT(func(v *OrganizationEnvironmentIamMember) pulumi.StringOutput { return v.Etag }).(pulumi.StringOutput)
}

// Identity that will be granted the privilege in role. The entry can have one of the following values:
//
//   - user:{emailid}: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
//   - serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
//   - group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
//   - domain:{domain}: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
func (o OrganizationEnvironmentIamMemberOutput) Member() pulumi.StringOutput {
	return o.ApplyT(func(v *OrganizationEnvironmentIamMember) pulumi.StringOutput { return v.Member }).(pulumi.StringOutput)
}

// The name of the resource to manage IAM policies for.
func (o OrganizationEnvironmentIamMemberOutput) Name() pulumi.StringOutput {
	return o.ApplyT(func(v *OrganizationEnvironmentIamMember) pulumi.StringOutput { return v.Name }).(pulumi.StringOutput)
}

// The project in which the resource belongs. If it is not provided, a default will be supplied.
func (o OrganizationEnvironmentIamMemberOutput) Project() pulumi.StringOutput {
	return o.ApplyT(func(v *OrganizationEnvironmentIamMember) pulumi.StringOutput { return v.Project }).(pulumi.StringOutput)
}

// The role that should be applied.
func (o OrganizationEnvironmentIamMemberOutput) Role() pulumi.StringOutput {
	return o.ApplyT(func(v *OrganizationEnvironmentIamMember) pulumi.StringOutput { return v.Role }).(pulumi.StringOutput)
}

func init() {
	pulumi.RegisterInputType(reflect.TypeOf((*OrganizationEnvironmentIamMemberInput)(nil)).Elem(), &OrganizationEnvironmentIamMember{})
	pulumi.RegisterOutputType(OrganizationEnvironmentIamMemberOutput{})
}