import * as pulumi from "@pulumi/pulumi"; /** * Resource for maintaining exclusive management of inline policies assigned to an AWS IAM (Identity & Access Management) group. * * > This resource takes exclusive ownership over inline policies assigned to a group. This includes removal of inline policies which are not explicitly configured. To prevent persistent drift, ensure any `aws.iam.GroupPolicy` resources managed alongside this resource are included in the `policyNames` argument. * * > Destruction of this resource means Terraform will no longer manage reconciliation of the configured inline policy assignments. It __will not__ delete the configured policies from the group. * * ## Example Usage * * ### Basic Usage * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as aws from "@pulumi/aws"; * * const example = new aws.iam.GroupPoliciesExclusive("example", { * groupName: exampleAwsIamGroup.name, * policyNames: [exampleAwsIamGroupPolicy.name], * }); * ``` * * ### Disallow Inline Policies * * To automatically remove any configured inline policies, set the `policyNames` argument to an empty list. * * > This will not __prevent__ inline policies from being assigned to a group via Terraform (or any other interface). This resource enables bringing inline policy assignments into a configured state, however, this reconciliation happens only when `apply` is proactively run. * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as aws from "@pulumi/aws"; * * const example = new aws.iam.GroupPoliciesExclusive("example", { * groupName: exampleAwsIamGroup.name, * policyNames: [], * }); * ``` * * ## Import * * Using `pulumi import`, import exclusive management of inline policy assignments using the `groupName`. For example: * * ```sh * $ pulumi import aws:iam/groupPoliciesExclusive:GroupPoliciesExclusive example MyGroup * ``` */ export declare class GroupPoliciesExclusive extends pulumi.CustomResource { /** * Get an existing GroupPoliciesExclusive resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: GroupPoliciesExclusiveState, opts?: pulumi.CustomResourceOptions): GroupPoliciesExclusive; /** * Returns true if the given object is an instance of GroupPoliciesExclusive. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is GroupPoliciesExclusive; /** * IAM group name. */ readonly groupName: pulumi.Output; /** * A list of inline policy names to be assigned to the group. Policies attached to this group but not configured in this argument will be removed. */ readonly policyNames: pulumi.Output; /** * Create a GroupPoliciesExclusive resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: GroupPoliciesExclusiveArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering GroupPoliciesExclusive resources. */ export interface GroupPoliciesExclusiveState { /** * IAM group name. */ groupName?: pulumi.Input; /** * A list of inline policy names to be assigned to the group. Policies attached to this group but not configured in this argument will be removed. */ policyNames?: pulumi.Input[] | undefined>; } /** * The set of arguments for constructing a GroupPoliciesExclusive resource. */ export interface GroupPoliciesExclusiveArgs { /** * IAM group name. */ groupName: pulumi.Input; /** * A list of inline policy names to be assigned to the group. Policies attached to this group but not configured in this argument will be removed. */ policyNames: pulumi.Input[]>; } //# sourceMappingURL=groupPoliciesExclusive.d.ts.map