import * as pulumi from "@pulumi/pulumi"; /** * Resource for maintaining exclusive management of managed IAM policies assigned to an AWS IAM (Identity & Access Management) user. * * > This resource takes exclusive ownership over managed IAM policies attached to a user. This includes removal of managed IAM policies which are not explicitly configured. To prevent persistent drift, ensure any `aws.iam.UserPolicyAttachment` resources managed alongside this resource are included in the `policyArns` argument. * * > Destruction of this resource means Terraform will no longer manage reconciliation of the configured policy attachments. It **will not** detach the configured policies from the user. * * ## Example Usage * * ### Basic Usage * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as aws from "@pulumi/aws"; * * const example = new aws.iam.UserPolicyAttachmentsExclusive("example", { * userName: exampleAwsIamUser.name, * policyArns: [exampleAwsIamPolicy.arn], * }); * ``` * * ### Disallow Managed IAM Policies * * To automatically remove any configured managed IAM policies, set the `policyArns` argument to an empty list. * * > This will not **prevent** managed IAM policies from being assigned to a user via Terraform (or any other interface). This resource enables bringing managed IAM policy assignments into a configured state, however, this reconciliation happens only when `apply` is proactively run. * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as aws from "@pulumi/aws"; * * const example = new aws.iam.UserPolicyAttachmentsExclusive("example", { * userName: exampleAwsIamUser.name, * policyArns: [], * }); * ``` * * ## Import * * Using `pulumi import`, import exclusive management of managed IAM policy assignments using the `userName`. For example: * * ```sh * $ pulumi import aws:iam/userPolicyAttachmentsExclusive:UserPolicyAttachmentsExclusive example MyUser * ``` */ export declare class UserPolicyAttachmentsExclusive extends pulumi.CustomResource { /** * Get an existing UserPolicyAttachmentsExclusive resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: UserPolicyAttachmentsExclusiveState, opts?: pulumi.CustomResourceOptions): UserPolicyAttachmentsExclusive; /** * Returns true if the given object is an instance of UserPolicyAttachmentsExclusive. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is UserPolicyAttachmentsExclusive; /** * A list of managed IAM policy ARNs to be attached to the user. Policies attached to this user but not configured in this argument will be removed. */ readonly policyArns: pulumi.Output; /** * IAM user name. */ readonly userName: pulumi.Output; /** * Create a UserPolicyAttachmentsExclusive resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: UserPolicyAttachmentsExclusiveArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering UserPolicyAttachmentsExclusive resources. */ export interface UserPolicyAttachmentsExclusiveState { /** * A list of managed IAM policy ARNs to be attached to the user. Policies attached to this user but not configured in this argument will be removed. */ policyArns?: pulumi.Input[] | undefined>; /** * IAM user name. */ userName?: pulumi.Input; } /** * The set of arguments for constructing a UserPolicyAttachmentsExclusive resource. */ export interface UserPolicyAttachmentsExclusiveArgs { /** * A list of managed IAM policy ARNs to be attached to the user. Policies attached to this user but not configured in this argument will be removed. */ policyArns: pulumi.Input[]>; /** * IAM user name. */ userName: pulumi.Input; } //# sourceMappingURL=userPolicyAttachmentsExclusive.d.ts.map