import * as pulumi from "@pulumi/pulumi"; /** * This resource provides the Policy resource in Oracle Cloud Infrastructure Identity service. * Api doc link for the resource: https://docs.oracle.com/iaas/api/#/en/identity/latest/Policy * * Example terraform configs related to the resource : https://github.com/oracle/terraform-provider-oci/tree/master/examples/identity * * Creates a new policy in the specified compartment (either the tenancy or another of your compartments). * If you're new to policies, see [Getting Started with Policies](https://docs.cloud.oracle.com/iaas/Content/Identity/Concepts/policygetstarted.htm). * * You must specify a *name* for the policy, which must be unique across all policies in your tenancy * and cannot be changed. * * You must also specify a *description* for the policy (although it can be an empty string). It does not * have to be unique, and you can change it anytime with [UpdatePolicy](https://docs.cloud.oracle.com/iaas/api/#/en/identity/20160918/Policy/UpdatePolicy). * * You must specify one or more policy statements in the statements array. For information about writing * policies, see [How Policies Work](https://docs.cloud.oracle.com/iaas/Content/Identity/Concepts/policies.htm) and * [Common Policies](https://docs.cloud.oracle.com/iaas/Content/Identity/Concepts/commonpolicies.htm). * New policies take effect typically within 10 seconds. * * ## Example Usage * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as oci from "@pulumi/oci"; * * const testPolicy = new oci.identity.Policy("test_policy", { * compartmentId: tenancyOcid, * description: policyDescription, * name: policyName, * statements: policyStatements, * definedTags: { * "Operations.CostCenter": "42", * }, * freeformTags: { * Department: "Finance", * }, * versionDate: policyVersionDate, * }); * ``` * * ## Import * * Policies can be imported using the `id`, e.g. * * ```sh * $ pulumi import oci:Identity/policy:Policy test_policy "id" * ``` */ export declare class Policy extends pulumi.CustomResource { /** * Get an existing Policy resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: PolicyState, opts?: pulumi.CustomResourceOptions): Policy; /** * Returns true if the given object is an instance of Policy. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is Policy; /** * @deprecated The 'ETag' field has been deprecated and may be removed in a future version. Do not use this field. */ readonly ETag: pulumi.Output; /** * The OCID of the compartment containing the policy (either the tenancy or another compartment). */ readonly compartmentId: pulumi.Output; /** * (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see [Resource Tags](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/resourcetags.htm). Example: `{"Operations.CostCenter": "42"}` */ readonly definedTags: pulumi.Output<{ [key: string]: string; }>; /** * (Updatable) The description you assign to the policy during creation. Does not have to be unique, and it's changeable. */ readonly description: pulumi.Output; /** * (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see [Resource Tags](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/resourcetags.htm). Example: `{"Department": "Finance"}` */ readonly freeformTags: pulumi.Output<{ [key: string]: string; }>; /** * The detailed status of INACTIVE lifecycleState. */ readonly inactiveState: pulumi.Output; /** * @deprecated The 'lastUpdateETag' field has been deprecated and may be removed in a future version. Do not use this field. */ readonly lastUpdateETag: pulumi.Output; /** * The name you assign to the policy during creation. The name must be unique across all policies in the tenancy and cannot be changed. */ readonly name: pulumi.Output; /** * @deprecated The 'policyHash' field has been deprecated and may be removed in a future version. Do not use this field. */ readonly policyHash: pulumi.Output; /** * The policy's current state. */ readonly state: pulumi.Output; /** * (Updatable) An array of policy statements written in the policy language. See [How Policies Work](https://docs.cloud.oracle.com/iaas/Content/Identity/Concepts/policies.htm) and [Common Policies](https://docs.cloud.oracle.com/iaas/Content/Identity/Concepts/commonpolicies.htm). */ readonly statements: pulumi.Output; /** * Date and time the policy was created, in the format defined by RFC3339. Example: `2016-08-25T21:10:29.600Z` */ readonly timeCreated: pulumi.Output; /** * (Updatable) The version of the policy. If null or set to an empty string, when a request comes in for authorization, the policy will be evaluated according to the current behavior of the services at that moment. If set to a particular date (YYYY-MM-DD), the policy will be evaluated according to the behavior of the services on that date. * * ** IMPORTANT ** * Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values */ readonly versionDate: pulumi.Output; /** * Create a Policy resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: PolicyArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering Policy resources. */ export interface PolicyState { /** * @deprecated The 'ETag' field has been deprecated and may be removed in a future version. Do not use this field. */ ETag?: pulumi.Input; /** * The OCID of the compartment containing the policy (either the tenancy or another compartment). */ compartmentId?: pulumi.Input; /** * (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see [Resource Tags](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/resourcetags.htm). Example: `{"Operations.CostCenter": "42"}` */ definedTags?: pulumi.Input<{ [key: string]: pulumi.Input; } | undefined>; /** * (Updatable) The description you assign to the policy during creation. Does not have to be unique, and it's changeable. */ description?: pulumi.Input; /** * (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see [Resource Tags](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/resourcetags.htm). Example: `{"Department": "Finance"}` */ freeformTags?: pulumi.Input<{ [key: string]: pulumi.Input; } | undefined>; /** * The detailed status of INACTIVE lifecycleState. */ inactiveState?: pulumi.Input; /** * @deprecated The 'lastUpdateETag' field has been deprecated and may be removed in a future version. Do not use this field. */ lastUpdateETag?: pulumi.Input; /** * The name you assign to the policy during creation. The name must be unique across all policies in the tenancy and cannot be changed. */ name?: pulumi.Input; /** * @deprecated The 'policyHash' field has been deprecated and may be removed in a future version. Do not use this field. */ policyHash?: pulumi.Input; /** * The policy's current state. */ state?: pulumi.Input; /** * (Updatable) An array of policy statements written in the policy language. See [How Policies Work](https://docs.cloud.oracle.com/iaas/Content/Identity/Concepts/policies.htm) and [Common Policies](https://docs.cloud.oracle.com/iaas/Content/Identity/Concepts/commonpolicies.htm). */ statements?: pulumi.Input[] | undefined>; /** * Date and time the policy was created, in the format defined by RFC3339. Example: `2016-08-25T21:10:29.600Z` */ timeCreated?: pulumi.Input; /** * (Updatable) The version of the policy. If null or set to an empty string, when a request comes in for authorization, the policy will be evaluated according to the current behavior of the services at that moment. If set to a particular date (YYYY-MM-DD), the policy will be evaluated according to the behavior of the services on that date. * * ** IMPORTANT ** * Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values */ versionDate?: pulumi.Input; } /** * The set of arguments for constructing a Policy resource. */ export interface PolicyArgs { /** * The OCID of the compartment containing the policy (either the tenancy or another compartment). */ compartmentId: pulumi.Input; /** * (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see [Resource Tags](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/resourcetags.htm). Example: `{"Operations.CostCenter": "42"}` */ definedTags?: pulumi.Input<{ [key: string]: pulumi.Input; } | undefined>; /** * (Updatable) The description you assign to the policy during creation. Does not have to be unique, and it's changeable. */ description: pulumi.Input; /** * (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see [Resource Tags](https://docs.cloud.oracle.com/iaas/Content/General/Concepts/resourcetags.htm). Example: `{"Department": "Finance"}` */ freeformTags?: pulumi.Input<{ [key: string]: pulumi.Input; } | undefined>; /** * The name you assign to the policy during creation. The name must be unique across all policies in the tenancy and cannot be changed. */ name?: pulumi.Input; /** * (Updatable) An array of policy statements written in the policy language. See [How Policies Work](https://docs.cloud.oracle.com/iaas/Content/Identity/Concepts/policies.htm) and [Common Policies](https://docs.cloud.oracle.com/iaas/Content/Identity/Concepts/commonpolicies.htm). */ statements: pulumi.Input[]>; /** * (Updatable) The version of the policy. If null or set to an empty string, when a request comes in for authorization, the policy will be evaluated according to the current behavior of the services at that moment. If set to a particular date (YYYY-MM-DD), the policy will be evaluated according to the behavior of the services on that date. * * ** IMPORTANT ** * Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values */ versionDate?: pulumi.Input; } //# sourceMappingURL=policy.d.ts.map