import * as pulumi from "@pulumi/pulumi";
/**
 * Returns an access policy based on the name.
 */
export declare function getAccessPolicy(args: GetAccessPolicyArgs, opts?: pulumi.InvokeOptions): Promise<GetAccessPolicyResult>;
export interface GetAccessPolicyArgs {
    accessPolicyId: string;
}
export interface GetAccessPolicyResult {
    /**
     * An opaque identifier for the current version of the `AccessPolicy`. This will always be a strongly validated etag, meaning that two Access Polices will be identical if and only if their etags are identical. Clients should not expect this to be in any specific format.
     */
    readonly etag: string;
    /**
     * Resource name of the `AccessPolicy`. Format: `accessPolicies/{access_policy}`
     */
    readonly name: string;
    /**
     * The parent of this `AccessPolicy` in the Cloud Resource Hierarchy. Currently immutable once created. Format: `organizations/{organization_id}`
     */
    readonly parent: string;
    /**
     * The scopes of the AccessPolicy. Scopes define which resources a policy can restrict and where its resources can be referenced. For example, policy A with `scopes=["folders/123"]` has the following behavior: - ServicePerimeter can only restrict projects within `folders/123`. - ServicePerimeter within policy A can only reference access levels defined within policy A. - Only one policy can include a given scope; thus, attempting to create a second policy which includes `folders/123` will result in an error. If no scopes are provided, then any resource within the organization can be restricted. Scopes cannot be modified after a policy is created. Policies can only have a single scope. Format: list of `folders/{folder_number}` or `projects/{project_number}`
     */
    readonly scopes: string[];
    /**
     * Human readable title. Does not affect behavior.
     */
    readonly title: string;
}
/**
 * Returns an access policy based on the name.
 */
export declare function getAccessPolicyOutput(args: GetAccessPolicyOutputArgs, opts?: pulumi.InvokeOptions): pulumi.Output<GetAccessPolicyResult>;
export interface GetAccessPolicyOutputArgs {
    accessPolicyId: pulumi.Input<string>;
}