iamServiceAccountStaticAccessKey.go

// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
// *** Do not edit by hand unless you're certain you know what you are doing! ***

package yandex

import (
	"context"
	"reflect"

	"github.com/pkg/errors"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

// Allows management of [Yandex.Cloud IAM service account static access keys](https://cloud.yandex.com/docs/iam/operations/sa/create-access-key).
// Generated pair of keys is used to access [Yandex Object Storage](https://cloud.yandex.com/docs/storage) on behalf of service account.
//
// Before using keys do not forget to [assign a proper role](https://cloud.yandex.com/docs/iam/operations/sa/assign-role-for-sa) to the service account.
//
// ## Example Usage
//
// This snippet creates a service account static access key.
//
// ```go
// package main
//
// import (
// 	"github.com/pulumi/pulumi-yandex/sdk/go/yandex"
// 	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
// )
//
// func main() {
// 	pulumi.Run(func(ctx *pulumi.Context) error {
// 		_, err := yandex.NewIamServiceAccountStaticAccessKey(ctx, "sa-static-key", &yandex.IamServiceAccountStaticAccessKeyArgs{
// 			Description:      pulumi.String("static access key for object storage"),
// 			PgpKey:           pulumi.String("keybase:keybaseusername"),
// 			ServiceAccountId: pulumi.String("some_sa_id"),
// 		})
// 		if err != nil {
// 			return err
// 		}
// 		return nil
// 	})
// }
// ```
type IamServiceAccountStaticAccessKey struct {
	pulumi.CustomResourceState

	// ID of the static access key.
	AccessKey pulumi.StringOutput `pulumi:"accessKey"`
	// Creation timestamp of the static access key.
	CreatedAt pulumi.StringOutput `pulumi:"createdAt"`
	// The description of the service account static key.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// The encrypted secret, base64 encoded. This is only populated when `pgpKey` is supplied.
	EncryptedSecretKey pulumi.StringOutput `pulumi:"encryptedSecretKey"`
	// The fingerprint of the PGP key used to encrypt the secret key. This is only populated when `pgpKey` is supplied.
	KeyFingerprint pulumi.StringOutput `pulumi:"keyFingerprint"`
	// An optional PGP key to encrypt the resulting secret key material. May either be a base64-encoded public key or a keybase username in the form `keybase:keybaseusername`.
	PgpKey pulumi.StringPtrOutput `pulumi:"pgpKey"`
	// Private part of generated static access key. This is only populated when no `pgpKey` is provided.
	SecretKey pulumi.StringOutput `pulumi:"secretKey"`
	// ID of the service account which is used to get a static key.
	ServiceAccountId pulumi.StringOutput `pulumi:"serviceAccountId"`
}

// NewIamServiceAccountStaticAccessKey registers a new resource with the given unique name, arguments, and options.
func NewIamServiceAccountStaticAccessKey(ctx *pulumi.Context,
	name string, args *IamServiceAccountStaticAccessKeyArgs, opts ...pulumi.ResourceOption) (*IamServiceAccountStaticAccessKey, error) {
	if args == nil {
		return nil, errors.New("missing one or more required arguments")
	}

	if args.ServiceAccountId == nil {
		return nil, errors.New("invalid value for required argument 'ServiceAccountId'")
	}
	var resource IamServiceAccountStaticAccessKey
	err := ctx.RegisterResource("yandex:index/iamServiceAccountStaticAccessKey:IamServiceAccountStaticAccessKey", name, args, &resource, opts...)
	if err != nil {
		return nil, err
	}
	return &resource, nil
}

// GetIamServiceAccountStaticAccessKey gets an existing IamServiceAccountStaticAccessKey resource's state with the given name, ID, and optional
// state properties that are used to uniquely qualify the lookup (nil if not required).
func GetIamServiceAccountStaticAccessKey(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *IamServiceAccountStaticAccessKeyState, opts ...pulumi.ResourceOption) (*IamServiceAccountStaticAccessKey, error) {
	var resource IamServiceAccountStaticAccessKey
	err := ctx.ReadResource("yandex:index/iamServiceAccountStaticAccessKey:IamServiceAccountStaticAccessKey", name, id, state, &resource, opts...)
	if err != nil {
		return nil, err
	}
	return &resource, nil
}

// Input properties used for looking up and filtering IamServiceAccountStaticAccessKey resources.
type iamServiceAccountStaticAccessKeyState struct {
	// ID of the static access key.
	AccessKey *string `pulumi:"accessKey"`
	// Creation timestamp of the static access key.
	CreatedAt *string `pulumi:"createdAt"`
	// The description of the service account static key.
	Description *string `pulumi:"description"`
	// The encrypted secret, base64 encoded. This is only populated when `pgpKey` is supplied.
	EncryptedSecretKey *string `pulumi:"encryptedSecretKey"`
	// The fingerprint of the PGP key used to encrypt the secret key. This is only populated when `pgpKey` is supplied.
	KeyFingerprint *string `pulumi:"keyFingerprint"`
	// An optional PGP key to encrypt the resulting secret key material. May either be a base64-encoded public key or a keybase username in the form `keybase:keybaseusername`.
	PgpKey *string `pulumi:"pgpKey"`
	// Private part of generated static access key. This is only populated when no `pgpKey` is provided.
	SecretKey *string `pulumi:"secretKey"`
	// ID of the service account which is used to get a static key.
	ServiceAccountId *string `pulumi:"serviceAccountId"`
}

type IamServiceAccountStaticAccessKeyState struct {
	// ID of the static access key.
	AccessKey pulumi.StringPtrInput
	// Creation timestamp of the static access key.
	CreatedAt pulumi.StringPtrInput
	// The description of the service account static key.
	Description pulumi.StringPtrInput
	// The encrypted secret, base64 encoded. This is only populated when `pgpKey` is supplied.
	EncryptedSecretKey pulumi.StringPtrInput
	// The fingerprint of the PGP key used to encrypt the secret key. This is only populated when `pgpKey` is supplied.
	KeyFingerprint pulumi.StringPtrInput
	// An optional PGP key to encrypt the resulting secret key material. May either be a base64-encoded public key or a keybase username in the form `keybase:keybaseusername`.
	PgpKey pulumi.StringPtrInput
	// Private part of generated static access key. This is only populated when no `pgpKey` is provided.
	SecretKey pulumi.StringPtrInput
	// ID of the service account which is used to get a static key.
	ServiceAccountId pulumi.StringPtrInput
}

func (IamServiceAccountStaticAccessKeyState) ElementType() reflect.Type {
	return reflect.TypeOf((*iamServiceAccountStaticAccessKeyState)(nil)).Elem()
}

type iamServiceAccountStaticAccessKeyArgs struct {
	// The description of the service account static key.
	Description *string `pulumi:"description"`
	// An optional PGP key to encrypt the resulting secret key material. May either be a base64-encoded public key or a keybase username in the form `keybase:keybaseusername`.
	PgpKey *string `pulumi:"pgpKey"`
	// ID of the service account which is used to get a static key.
	ServiceAccountId string `pulumi:"serviceAccountId"`
}

// The set of arguments for constructing a IamServiceAccountStaticAccessKey resource.
type IamServiceAccountStaticAccessKeyArgs struct {
	// The description of the service account static key.
	Description pulumi.StringPtrInput
	// An optional PGP key to encrypt the resulting secret key material. May either be a base64-encoded public key or a keybase username in the form `keybase:keybaseusername`.
	PgpKey pulumi.StringPtrInput
	// ID of the service account which is used to get a static key.
	ServiceAccountId pulumi.StringInput
}

func (IamServiceAccountStaticAccessKeyArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*iamServiceAccountStaticAccessKeyArgs)(nil)).Elem()
}

type IamServiceAccountStaticAccessKeyInput interface {
	pulumi.Input

	ToIamServiceAccountStaticAccessKeyOutput() IamServiceAccountStaticAccessKeyOutput
	ToIamServiceAccountStaticAccessKeyOutputWithContext(ctx context.Context) IamServiceAccountStaticAccessKeyOutput
}

func (*IamServiceAccountStaticAccessKey) ElementType() reflect.Type {
	return reflect.TypeOf((**IamServiceAccountStaticAccessKey)(nil)).Elem()
}

func (i *IamServiceAccountStaticAccessKey) ToIamServiceAccountStaticAccessKeyOutput() IamServiceAccountStaticAccessKeyOutput {
	return i.ToIamServiceAccountStaticAccessKeyOutputWithContext(context.Background())
}

func (i *IamServiceAccountStaticAccessKey) ToIamServiceAccountStaticAccessKeyOutputWithContext(ctx context.Context) IamServiceAccountStaticAccessKeyOutput {
	return pulumi.ToOutputWithContext(ctx, i).(IamServiceAccountStaticAccessKeyOutput)
}

// IamServiceAccountStaticAccessKeyArrayInput is an input type that accepts IamServiceAccountStaticAccessKeyArray and IamServiceAccountStaticAccessKeyArrayOutput values.
// You can construct a concrete instance of `IamServiceAccountStaticAccessKeyArrayInput` via:
//
//          IamServiceAccountStaticAccessKeyArray{ IamServiceAccountStaticAccessKeyArgs{...} }
type IamServiceAccountStaticAccessKeyArrayInput interface {
	pulumi.Input

	ToIamServiceAccountStaticAccessKeyArrayOutput() IamServiceAccountStaticAccessKeyArrayOutput
	ToIamServiceAccountStaticAccessKeyArrayOutputWithContext(context.Context) IamServiceAccountStaticAccessKeyArrayOutput
}

type IamServiceAccountStaticAccessKeyArray []IamServiceAccountStaticAccessKeyInput

func (IamServiceAccountStaticAccessKeyArray) ElementType() reflect.Type {
	return reflect.TypeOf((*[]*IamServiceAccountStaticAccessKey)(nil)).Elem()
}

func (i IamServiceAccountStaticAccessKeyArray) ToIamServiceAccountStaticAccessKeyArrayOutput() IamServiceAccountStaticAccessKeyArrayOutput {
	return i.ToIamServiceAccountStaticAccessKeyArrayOutputWithContext(context.Background())
}

func (i IamServiceAccountStaticAccessKeyArray) ToIamServiceAccountStaticAccessKeyArrayOutputWithContext(ctx context.Context) IamServiceAccountStaticAccessKeyArrayOutput {
	return pulumi.ToOutputWithContext(ctx, i).(IamServiceAccountStaticAccessKeyArrayOutput)
}

// IamServiceAccountStaticAccessKeyMapInput is an input type that accepts IamServiceAccountStaticAccessKeyMap and IamServiceAccountStaticAccessKeyMapOutput values.
// You can construct a concrete instance of `IamServiceAccountStaticAccessKeyMapInput` via:
//
//          IamServiceAccountStaticAccessKeyMap{ "key": IamServiceAccountStaticAccessKeyArgs{...} }
type IamServiceAccountStaticAccessKeyMapInput interface {
	pulumi.Input

	ToIamServiceAccountStaticAccessKeyMapOutput() IamServiceAccountStaticAccessKeyMapOutput
	ToIamServiceAccountStaticAccessKeyMapOutputWithContext(context.Context) IamServiceAccountStaticAccessKeyMapOutput
}

type IamServiceAccountStaticAccessKeyMap map[string]IamServiceAccountStaticAccessKeyInput

func (IamServiceAccountStaticAccessKeyMap) ElementType() reflect.Type {
	return reflect.TypeOf((*map[string]*IamServiceAccountStaticAccessKey)(nil)).Elem()
}

func (i IamServiceAccountStaticAccessKeyMap) ToIamServiceAccountStaticAccessKeyMapOutput() IamServiceAccountStaticAccessKeyMapOutput {
	return i.ToIamServiceAccountStaticAccessKeyMapOutputWithContext(context.Background())
}

func (i IamServiceAccountStaticAccessKeyMap) ToIamServiceAccountStaticAccessKeyMapOutputWithContext(ctx context.Context) IamServiceAccountStaticAccessKeyMapOutput {
	return pulumi.ToOutputWithContext(ctx, i).(IamServiceAccountStaticAccessKeyMapOutput)
}

type IamServiceAccountStaticAccessKeyOutput struct{ *pulumi.OutputState }

func (IamServiceAccountStaticAccessKeyOutput) ElementType() reflect.Type {
	return reflect.TypeOf((**IamServiceAccountStaticAccessKey)(nil)).Elem()
}

func (o IamServiceAccountStaticAccessKeyOutput) ToIamServiceAccountStaticAccessKeyOutput() IamServiceAccountStaticAccessKeyOutput {
	return o
}

func (o IamServiceAccountStaticAccessKeyOutput) ToIamServiceAccountStaticAccessKeyOutputWithContext(ctx context.Context) IamServiceAccountStaticAccessKeyOutput {
	return o
}

type IamServiceAccountStaticAccessKeyArrayOutput struct{ *pulumi.OutputState }

func (IamServiceAccountStaticAccessKeyArrayOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*[]*IamServiceAccountStaticAccessKey)(nil)).Elem()
}

func (o IamServiceAccountStaticAccessKeyArrayOutput) ToIamServiceAccountStaticAccessKeyArrayOutput() IamServiceAccountStaticAccessKeyArrayOutput {
	return o
}

func (o IamServiceAccountStaticAccessKeyArrayOutput) ToIamServiceAccountStaticAccessKeyArrayOutputWithContext(ctx context.Context) IamServiceAccountStaticAccessKeyArrayOutput {
	return o
}

func (o IamServiceAccountStaticAccessKeyArrayOutput) Index(i pulumi.IntInput) IamServiceAccountStaticAccessKeyOutput {
	return pulumi.All(o, i).ApplyT(func(vs []interface{}) *IamServiceAccountStaticAccessKey {
		return vs[0].([]*IamServiceAccountStaticAccessKey)[vs[1].(int)]
	}).(IamServiceAccountStaticAccessKeyOutput)
}

type IamServiceAccountStaticAccessKeyMapOutput struct{ *pulumi.OutputState }

func (IamServiceAccountStaticAccessKeyMapOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*map[string]*IamServiceAccountStaticAccessKey)(nil)).Elem()
}

func (o IamServiceAccountStaticAccessKeyMapOutput) ToIamServiceAccountStaticAccessKeyMapOutput() IamServiceAccountStaticAccessKeyMapOutput {
	return o
}

func (o IamServiceAccountStaticAccessKeyMapOutput) ToIamServiceAccountStaticAccessKeyMapOutputWithContext(ctx context.Context) IamServiceAccountStaticAccessKeyMapOutput {
	return o
}

func (o IamServiceAccountStaticAccessKeyMapOutput) MapIndex(k pulumi.StringInput) IamServiceAccountStaticAccessKeyOutput {
	return pulumi.All(o, k).ApplyT(func(vs []interface{}) *IamServiceAccountStaticAccessKey {
		return vs[0].(map[string]*IamServiceAccountStaticAccessKey)[vs[1].(string)]
	}).(IamServiceAccountStaticAccessKeyOutput)
}

func init() {
	pulumi.RegisterInputType(reflect.TypeOf((*IamServiceAccountStaticAccessKeyInput)(nil)).Elem(), &IamServiceAccountStaticAccessKey{})
	pulumi.RegisterInputType(reflect.TypeOf((*IamServiceAccountStaticAccessKeyArrayInput)(nil)).Elem(), IamServiceAccountStaticAccessKeyArray{})
	pulumi.RegisterInputType(reflect.TypeOf((*IamServiceAccountStaticAccessKeyMapInput)(nil)).Elem(), IamServiceAccountStaticAccessKeyMap{})
	pulumi.RegisterOutputType(IamServiceAccountStaticAccessKeyOutput{})
	pulumi.RegisterOutputType(IamServiceAccountStaticAccessKeyArrayOutput{})
	pulumi.RegisterOutputType(IamServiceAccountStaticAccessKeyMapOutput{})
}