import * as pulumi from "@pulumi/pulumi"; import * as inputs from "../types/input"; import * as outputs from "../types/output"; import * as enums from "../types/enums"; /** * Policy Grant in AWS DataZone is an explicit authorization assignment that allows a specific principal (user, group, or project) to perform particular actions (such as creating glossary terms, managing projects, or accessing resources) on governed resources within a certain scope (like a Domain Unit or Project). Policy Grants are essentially the mechanism by which DataZone enforces fine-grained, role-based access control beyond what is possible through AWS IAM alone. */ export declare class PolicyGrant extends pulumi.CustomResource { /** * Get an existing PolicyGrant resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, opts?: pulumi.CustomResourceOptions): PolicyGrant; /** * Returns true if the given object is an instance of PolicyGrant. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is PolicyGrant; /** * Specifies the timestamp at which policy grant member was created. */ readonly createdAt: pulumi.Output; /** * Specifies the user who created the policy grant member. */ readonly createdBy: pulumi.Output; /** * The details of the policy grant member. */ readonly detail: pulumi.Output; /** * The ID of the domain where you want to add a policy grant. */ readonly domainIdentifier: pulumi.Output; /** * The ID of the entity (resource) to which you want to add a policy grant. */ readonly entityIdentifier: pulumi.Output; /** * The type of entity (resource) to which the grant is added. */ readonly entityType: pulumi.Output; /** * The unique identifier of the policy grant returned by the AddPolicyGrant API */ readonly grantId: pulumi.Output; /** * The type of policy that you want to grant. */ readonly policyType: pulumi.Output; /** * The principal of the policy grant member. */ readonly principal: pulumi.Output; /** * Create a PolicyGrant resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: PolicyGrantArgs, opts?: pulumi.CustomResourceOptions); } /** * The set of arguments for constructing a PolicyGrant resource. */ export interface PolicyGrantArgs { /** * The details of the policy grant member. */ detail?: pulumi.Input; /** * The ID of the domain where you want to add a policy grant. */ domainIdentifier: pulumi.Input; /** * The ID of the entity (resource) to which you want to add a policy grant. */ entityIdentifier: pulumi.Input; /** * The type of entity (resource) to which the grant is added. */ entityType: pulumi.Input; /** * The type of policy that you want to grant. */ policyType: pulumi.Input; /** * The principal of the policy grant member. */ principal?: pulumi.Input; }