import * as pulumi from "@pulumi/pulumi"; /** * Resource for maintaining exclusive management of inline policies assigned to an AWS IAM (Identity & Access Management) user. * * > This resource takes exclusive ownership over inline policies assigned to a user. This includes removal of inline policies which are not explicitly configured. To prevent persistent drift, ensure any `aws.iam.UserPolicy` resources managed alongside this resource are included in the `policyNames` argument. * * > Destruction of this resource means Terraform will no longer manage reconciliation of the configured inline policy assignments. It __will not__ delete the configured policies from the user. * * ## Example Usage * * ### Basic Usage * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as aws from "@pulumi/aws"; * * const example = new aws.iam.UserPoliciesExclusive("example", { * userName: exampleAwsIamUser.name, * policyNames: [exampleAwsIamUserPolicy.name], * }); * ``` * * ### Disallow Inline Policies * * To automatically remove any configured inline policies, set the `policyNames` argument to an empty list. * * > This will not __prevent__ inline policies from being assigned to a user via Terraform (or any other interface). This resource enables bringing inline policy assignments into a configured state, however, this reconciliation happens only when `apply` is proactively run. * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as aws from "@pulumi/aws"; * * const example = new aws.iam.UserPoliciesExclusive("example", { * userName: exampleAwsIamUser.name, * policyNames: [], * }); * ``` * * ## Import * * Using `pulumi import`, import exclusive management of inline policy assignments using the `userName`. For example: * * ```sh * $ pulumi import aws:iam/userPoliciesExclusive:UserPoliciesExclusive example MyUser * ``` */ export declare class UserPoliciesExclusive extends pulumi.CustomResource { /** * Get an existing UserPoliciesExclusive resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: UserPoliciesExclusiveState, opts?: pulumi.CustomResourceOptions): UserPoliciesExclusive; /** * Returns true if the given object is an instance of UserPoliciesExclusive. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is UserPoliciesExclusive; /** * A list of inline policy names to be assigned to the user. Policies attached to this user but not configured in this argument will be removed. */ readonly policyNames: pulumi.Output; /** * IAM user name. */ readonly userName: pulumi.Output; /** * Create a UserPoliciesExclusive resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: UserPoliciesExclusiveArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering UserPoliciesExclusive resources. */ export interface UserPoliciesExclusiveState { /** * A list of inline policy names to be assigned to the user. Policies attached to this user but not configured in this argument will be removed. */ policyNames?: pulumi.Input[] | undefined>; /** * IAM user name. */ userName?: pulumi.Input; } /** * The set of arguments for constructing a UserPoliciesExclusive resource. */ export interface UserPoliciesExclusiveArgs { /** * A list of inline policy names to be assigned to the user. Policies attached to this user but not configured in this argument will be removed. */ policyNames: pulumi.Input[]>; /** * IAM user name. */ userName: pulumi.Input; } //# sourceMappingURL=userPoliciesExclusive.d.ts.map