Represents a {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy google_iam_deny_policy}.
from cdktf_cdktf_provider_google import iam_deny_policy
iamDenyPolicy.IamDenyPolicy(
scope: Construct,
id: str,
connection: typing.Union[SSHProvisionerConnection, WinrmProvisionerConnection] = None,
count: typing.Union[typing.Union[int, float], TerraformCount] = None,
depends_on: typing.List[ITerraformDependable] = None,
for_each: ITerraformIterator = None,
lifecycle: TerraformResourceLifecycle = None,
provider: TerraformProvider = None,
provisioners: typing.List[typing.Union[FileProvisioner, LocalExecProvisioner, RemoteExecProvisioner]] = None,
name: str,
parent: str,
rules: typing.Union[IResolvable, typing.List[IamDenyPolicyRules]],
display_name: str = None,
id: str = None,
timeouts: IamDenyPolicyTimeouts = None
)
Name | Type | Description |
---|---|---|
scope |
constructs.Construct |
The scope in which to define this construct. |
id |
str |
The scoped construct ID. |
connection |
typing.Union[cdktf.SSHProvisionerConnection, cdktf.WinrmProvisionerConnection] |
No description. |
count |
typing.Union[typing.Union[int, float], cdktf.TerraformCount] |
No description. |
depends_on |
typing.List[cdktf.ITerraformDependable] |
No description. |
for_each |
cdktf.ITerraformIterator |
No description. |
lifecycle |
cdktf.TerraformResourceLifecycle |
No description. |
provider |
cdktf.TerraformProvider |
No description. |
provisioners |
typing.List[typing.Union[cdktf.FileProvisioner, cdktf.LocalExecProvisioner, cdktf.RemoteExecProvisioner]] |
No description. |
name |
str |
The name of the policy. |
parent |
str |
The attachment point is identified by its URL-encoded full resource name. |
rules |
typing.Union[cdktf.IResolvable, typing.List[IamDenyPolicyRules]] |
rules block. |
display_name |
str |
The display name of the rule. |
id |
str |
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#id IamDenyPolicy#id}. |
timeouts |
IamDenyPolicyTimeouts |
timeouts block. |
- Type: constructs.Construct
The scope in which to define this construct.
- Type: str
The scoped construct ID.
Must be unique amongst siblings in the same scope
- Type: typing.Union[cdktf.SSHProvisionerConnection, cdktf.WinrmProvisionerConnection]
- Type: typing.Union[typing.Union[int, float], cdktf.TerraformCount]
- Type: typing.List[cdktf.ITerraformDependable]
- Type: cdktf.ITerraformIterator
- Type: cdktf.TerraformResourceLifecycle
- Type: cdktf.TerraformProvider
- Type: typing.List[typing.Union[cdktf.FileProvisioner, cdktf.LocalExecProvisioner, cdktf.RemoteExecProvisioner]]
- Type: str
The name of the policy.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#name IamDenyPolicy#name}
- Type: str
The attachment point is identified by its URL-encoded full resource name.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#parent IamDenyPolicy#parent}
- Type: typing.Union[cdktf.IResolvable, typing.List[IamDenyPolicyRules]]
rules block.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#rules IamDenyPolicy#rules}
- Type: str
The display name of the rule.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#display_name IamDenyPolicy#display_name}
- Type: str
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#id IamDenyPolicy#id}.
Please be aware that the id field is automatically added to all resources in Terraform providers using a Terraform provider SDK version below 2. If you experience problems setting this value it might not be settable. Please take a look at the provider documentation to ensure it should be settable.
- Type: IamDenyPolicyTimeouts
timeouts block.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#timeouts IamDenyPolicy#timeouts}
Name | Description |
---|---|
to_string |
Returns a string representation of this construct. |
add_override |
No description. |
override_logical_id |
Overrides the auto-generated logical ID with a specific ID. |
reset_override_logical_id |
Resets a previously passed logical Id to use the auto-generated logical id again. |
to_hcl_terraform |
No description. |
to_metadata |
No description. |
to_terraform |
Adds this resource to the terraform JSON output. |
add_move_target |
Adds a user defined moveTarget string to this resource to be later used in .moveTo(moveTarget) to resolve the location of the move. |
get_any_map_attribute |
No description. |
get_boolean_attribute |
No description. |
get_boolean_map_attribute |
No description. |
get_list_attribute |
No description. |
get_number_attribute |
No description. |
get_number_list_attribute |
No description. |
get_number_map_attribute |
No description. |
get_string_attribute |
No description. |
get_string_map_attribute |
No description. |
has_resource_move |
No description. |
import_from |
No description. |
interpolation_for_attribute |
No description. |
move_from_id |
Move the resource corresponding to "id" to this resource. |
move_to |
Moves this resource to the target resource given by moveTarget. |
move_to_id |
Moves this resource to the resource corresponding to "id". |
put_rules |
No description. |
put_timeouts |
No description. |
reset_display_name |
No description. |
reset_id |
No description. |
reset_timeouts |
No description. |
def to_string() -> str
Returns a string representation of this construct.
def add_override(
path: str,
value: typing.Any
) -> None
- Type: str
- Type: typing.Any
def override_logical_id(
new_logical_id: str
) -> None
Overrides the auto-generated logical ID with a specific ID.
- Type: str
The new logical ID to use for this stack element.
def reset_override_logical_id() -> None
Resets a previously passed logical Id to use the auto-generated logical id again.
def to_hcl_terraform() -> typing.Any
def to_metadata() -> typing.Any
def to_terraform() -> typing.Any
Adds this resource to the terraform JSON output.
def add_move_target(
move_target: str
) -> None
Adds a user defined moveTarget string to this resource to be later used in .moveTo(moveTarget) to resolve the location of the move.
- Type: str
The string move target that will correspond to this resource.
def get_any_map_attribute(
terraform_attribute: str
) -> typing.Mapping[typing.Any]
- Type: str
def get_boolean_attribute(
terraform_attribute: str
) -> IResolvable
- Type: str
def get_boolean_map_attribute(
terraform_attribute: str
) -> typing.Mapping[bool]
- Type: str
def get_list_attribute(
terraform_attribute: str
) -> typing.List[str]
- Type: str
def get_number_attribute(
terraform_attribute: str
) -> typing.Union[int, float]
- Type: str
def get_number_list_attribute(
terraform_attribute: str
) -> typing.List[typing.Union[int, float]]
- Type: str
def get_number_map_attribute(
terraform_attribute: str
) -> typing.Mapping[typing.Union[int, float]]
- Type: str
def get_string_attribute(
terraform_attribute: str
) -> str
- Type: str
def get_string_map_attribute(
terraform_attribute: str
) -> typing.Mapping[str]
- Type: str
def has_resource_move() -> typing.Union[TerraformResourceMoveByTarget, TerraformResourceMoveById]
def import_from(
id: str,
provider: TerraformProvider = None
) -> None
- Type: str
- Type: cdktf.TerraformProvider
def interpolation_for_attribute(
terraform_attribute: str
) -> IResolvable
- Type: str
def move_from_id(
id: str
) -> None
Move the resource corresponding to "id" to this resource.
Note that the resource being moved from must be marked as moved using it's instance function.
- Type: str
Full id of resource being moved from, e.g. "aws_s3_bucket.example".
def move_to(
move_target: str,
index: typing.Union[str, typing.Union[int, float]] = None
) -> None
Moves this resource to the target resource given by moveTarget.
- Type: str
The previously set user defined string set by .addMoveTarget() corresponding to the resource to move to.
- Type: typing.Union[str, typing.Union[int, float]]
Optional The index corresponding to the key the resource is to appear in the foreach of a resource to move to.
def move_to_id(
id: str
) -> None
Moves this resource to the resource corresponding to "id".
- Type: str
Full id of resource to move to, e.g. "aws_s3_bucket.example".
def put_rules(
value: typing.Union[IResolvable, typing.List[IamDenyPolicyRules]]
) -> None
- Type: typing.Union[cdktf.IResolvable, typing.List[IamDenyPolicyRules]]
def put_timeouts(
create: str = None,
delete: str = None,
update: str = None
) -> None
- Type: str
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#create IamDenyPolicy#create}.
- Type: str
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#delete IamDenyPolicy#delete}.
- Type: str
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#update IamDenyPolicy#update}.
def reset_display_name() -> None
def reset_id() -> None
def reset_timeouts() -> None
Name | Description |
---|---|
is_construct |
Checks if x is a construct. |
is_terraform_element |
No description. |
is_terraform_resource |
No description. |
generate_config_for_import |
Generates CDKTF code for importing a IamDenyPolicy resource upon running "cdktf plan ". |
from cdktf_cdktf_provider_google import iam_deny_policy
iamDenyPolicy.IamDenyPolicy.is_construct(
x: typing.Any
)
Checks if x
is a construct.
Use this method instead of instanceof
to properly detect Construct
instances, even when the construct library is symlinked.
Explanation: in JavaScript, multiple copies of the constructs
library on
disk are seen as independent, completely different libraries. As a
consequence, the class Construct
in each copy of the constructs
library
is seen as a different class, and an instance of one class will not test as
instanceof
the other class. npm install
will not create installations
like this, but users may manually symlink construct libraries together or
use a monorepo tool: in those cases, multiple copies of the constructs
library can be accidentally installed, and instanceof
will behave
unpredictably. It is safest to avoid using instanceof
, and using
this type-testing method instead.
- Type: typing.Any
Any object.
from cdktf_cdktf_provider_google import iam_deny_policy
iamDenyPolicy.IamDenyPolicy.is_terraform_element(
x: typing.Any
)
- Type: typing.Any
from cdktf_cdktf_provider_google import iam_deny_policy
iamDenyPolicy.IamDenyPolicy.is_terraform_resource(
x: typing.Any
)
- Type: typing.Any
from cdktf_cdktf_provider_google import iam_deny_policy
iamDenyPolicy.IamDenyPolicy.generate_config_for_import(
scope: Construct,
import_to_id: str,
import_from_id: str,
provider: TerraformProvider = None
)
Generates CDKTF code for importing a IamDenyPolicy resource upon running "cdktf plan ".
- Type: constructs.Construct
The scope in which to define this construct.
- Type: str
The construct id used in the generated config for the IamDenyPolicy to import.
- Type: str
The id of the existing IamDenyPolicy that should be imported.
Refer to the {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#import import section} in the documentation of this resource for the id to use
- Type: cdktf.TerraformProvider
? Optional instance of the provider where the IamDenyPolicy to import is found.
Name | Type | Description |
---|---|---|
node |
constructs.Node |
The tree node. |
cdktf_stack |
cdktf.TerraformStack |
No description. |
fqn |
str |
No description. |
friendly_unique_id |
str |
No description. |
terraform_meta_arguments |
typing.Mapping[typing.Any] |
No description. |
terraform_resource_type |
str |
No description. |
terraform_generator_metadata |
cdktf.TerraformProviderGeneratorMetadata |
No description. |
connection |
typing.Union[cdktf.SSHProvisionerConnection, cdktf.WinrmProvisionerConnection] |
No description. |
count |
typing.Union[typing.Union[int, float], cdktf.TerraformCount] |
No description. |
depends_on |
typing.List[str] |
No description. |
for_each |
cdktf.ITerraformIterator |
No description. |
lifecycle |
cdktf.TerraformResourceLifecycle |
No description. |
provider |
cdktf.TerraformProvider |
No description. |
provisioners |
typing.List[typing.Union[cdktf.FileProvisioner, cdktf.LocalExecProvisioner, cdktf.RemoteExecProvisioner]] |
No description. |
etag |
str |
No description. |
rules |
IamDenyPolicyRulesList |
No description. |
timeouts |
IamDenyPolicyTimeoutsOutputReference |
No description. |
display_name_input |
str |
No description. |
id_input |
str |
No description. |
name_input |
str |
No description. |
parent_input |
str |
No description. |
rules_input |
typing.Union[cdktf.IResolvable, typing.List[IamDenyPolicyRules]] |
No description. |
timeouts_input |
typing.Union[cdktf.IResolvable, IamDenyPolicyTimeouts] |
No description. |
display_name |
str |
No description. |
id |
str |
No description. |
name |
str |
No description. |
parent |
str |
No description. |
node: Node
- Type: constructs.Node
The tree node.
cdktf_stack: TerraformStack
- Type: cdktf.TerraformStack
fqn: str
- Type: str
friendly_unique_id: str
- Type: str
terraform_meta_arguments: typing.Mapping[typing.Any]
- Type: typing.Mapping[typing.Any]
terraform_resource_type: str
- Type: str
terraform_generator_metadata: TerraformProviderGeneratorMetadata
- Type: cdktf.TerraformProviderGeneratorMetadata
connection: typing.Union[SSHProvisionerConnection, WinrmProvisionerConnection]
- Type: typing.Union[cdktf.SSHProvisionerConnection, cdktf.WinrmProvisionerConnection]
count: typing.Union[typing.Union[int, float], TerraformCount]
- Type: typing.Union[typing.Union[int, float], cdktf.TerraformCount]
depends_on: typing.List[str]
- Type: typing.List[str]
for_each: ITerraformIterator
- Type: cdktf.ITerraformIterator
lifecycle: TerraformResourceLifecycle
- Type: cdktf.TerraformResourceLifecycle
provider: TerraformProvider
- Type: cdktf.TerraformProvider
provisioners: typing.List[typing.Union[FileProvisioner, LocalExecProvisioner, RemoteExecProvisioner]]
- Type: typing.List[typing.Union[cdktf.FileProvisioner, cdktf.LocalExecProvisioner, cdktf.RemoteExecProvisioner]]
etag: str
- Type: str
rules: IamDenyPolicyRulesList
- Type: IamDenyPolicyRulesList
timeouts: IamDenyPolicyTimeoutsOutputReference
display_name_input: str
- Type: str
id_input: str
- Type: str
name_input: str
- Type: str
parent_input: str
- Type: str
rules_input: typing.Union[IResolvable, typing.List[IamDenyPolicyRules]]
- Type: typing.Union[cdktf.IResolvable, typing.List[IamDenyPolicyRules]]
timeouts_input: typing.Union[IResolvable, IamDenyPolicyTimeouts]
- Type: typing.Union[cdktf.IResolvable, IamDenyPolicyTimeouts]
display_name: str
- Type: str
id: str
- Type: str
name: str
- Type: str
parent: str
- Type: str
Name | Type | Description |
---|---|---|
tfResourceType |
str |
No description. |
tfResourceType: str
- Type: str
from cdktf_cdktf_provider_google import iam_deny_policy
iamDenyPolicy.IamDenyPolicyConfig(
connection: typing.Union[SSHProvisionerConnection, WinrmProvisionerConnection] = None,
count: typing.Union[typing.Union[int, float], TerraformCount] = None,
depends_on: typing.List[ITerraformDependable] = None,
for_each: ITerraformIterator = None,
lifecycle: TerraformResourceLifecycle = None,
provider: TerraformProvider = None,
provisioners: typing.List[typing.Union[FileProvisioner, LocalExecProvisioner, RemoteExecProvisioner]] = None,
name: str,
parent: str,
rules: typing.Union[IResolvable, typing.List[IamDenyPolicyRules]],
display_name: str = None,
id: str = None,
timeouts: IamDenyPolicyTimeouts = None
)
Name | Type | Description |
---|---|---|
connection |
typing.Union[cdktf.SSHProvisionerConnection, cdktf.WinrmProvisionerConnection] |
No description. |
count |
typing.Union[typing.Union[int, float], cdktf.TerraformCount] |
No description. |
depends_on |
typing.List[cdktf.ITerraformDependable] |
No description. |
for_each |
cdktf.ITerraformIterator |
No description. |
lifecycle |
cdktf.TerraformResourceLifecycle |
No description. |
provider |
cdktf.TerraformProvider |
No description. |
provisioners |
typing.List[typing.Union[cdktf.FileProvisioner, cdktf.LocalExecProvisioner, cdktf.RemoteExecProvisioner]] |
No description. |
name |
str |
The name of the policy. |
parent |
str |
The attachment point is identified by its URL-encoded full resource name. |
rules |
typing.Union[cdktf.IResolvable, typing.List[IamDenyPolicyRules]] |
rules block. |
display_name |
str |
The display name of the rule. |
id |
str |
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#id IamDenyPolicy#id}. |
timeouts |
IamDenyPolicyTimeouts |
timeouts block. |
connection: typing.Union[SSHProvisionerConnection, WinrmProvisionerConnection]
- Type: typing.Union[cdktf.SSHProvisionerConnection, cdktf.WinrmProvisionerConnection]
count: typing.Union[typing.Union[int, float], TerraformCount]
- Type: typing.Union[typing.Union[int, float], cdktf.TerraformCount]
depends_on: typing.List[ITerraformDependable]
- Type: typing.List[cdktf.ITerraformDependable]
for_each: ITerraformIterator
- Type: cdktf.ITerraformIterator
lifecycle: TerraformResourceLifecycle
- Type: cdktf.TerraformResourceLifecycle
provider: TerraformProvider
- Type: cdktf.TerraformProvider
provisioners: typing.List[typing.Union[FileProvisioner, LocalExecProvisioner, RemoteExecProvisioner]]
- Type: typing.List[typing.Union[cdktf.FileProvisioner, cdktf.LocalExecProvisioner, cdktf.RemoteExecProvisioner]]
name: str
- Type: str
The name of the policy.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#name IamDenyPolicy#name}
parent: str
- Type: str
The attachment point is identified by its URL-encoded full resource name.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#parent IamDenyPolicy#parent}
rules: typing.Union[IResolvable, typing.List[IamDenyPolicyRules]]
- Type: typing.Union[cdktf.IResolvable, typing.List[IamDenyPolicyRules]]
rules block.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#rules IamDenyPolicy#rules}
display_name: str
- Type: str
The display name of the rule.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#display_name IamDenyPolicy#display_name}
id: str
- Type: str
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#id IamDenyPolicy#id}.
Please be aware that the id field is automatically added to all resources in Terraform providers using a Terraform provider SDK version below 2. If you experience problems setting this value it might not be settable. Please take a look at the provider documentation to ensure it should be settable.
timeouts: IamDenyPolicyTimeouts
- Type: IamDenyPolicyTimeouts
timeouts block.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#timeouts IamDenyPolicy#timeouts}
from cdktf_cdktf_provider_google import iam_deny_policy
iamDenyPolicy.IamDenyPolicyRules(
deny_rule: IamDenyPolicyRulesDenyRule = None,
description: str = None
)
Name | Type | Description |
---|---|---|
deny_rule |
IamDenyPolicyRulesDenyRule |
deny_rule block. |
description |
str |
The description of the rule. |
deny_rule: IamDenyPolicyRulesDenyRule
deny_rule block.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#deny_rule IamDenyPolicy#deny_rule}
description: str
- Type: str
The description of the rule.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#description IamDenyPolicy#description}
from cdktf_cdktf_provider_google import iam_deny_policy
iamDenyPolicy.IamDenyPolicyRulesDenyRule(
denial_condition: IamDenyPolicyRulesDenyRuleDenialCondition = None,
denied_permissions: typing.List[str] = None,
denied_principals: typing.List[str] = None,
exception_permissions: typing.List[str] = None,
exception_principals: typing.List[str] = None
)
Name | Type | Description |
---|---|---|
denial_condition |
IamDenyPolicyRulesDenyRuleDenialCondition |
denial_condition block. |
denied_permissions |
typing.List[str] |
The permissions that are explicitly denied by this rule. |
denied_principals |
typing.List[str] |
The identities that are prevented from using one or more permissions on Google Cloud resources. |
exception_permissions |
typing.List[str] |
Specifies the permissions that this rule excludes from the set of denied permissions given by deniedPermissions. |
exception_principals |
typing.List[str] |
The identities that are excluded from the deny rule, even if they are listed in the deniedPrincipals. |
denial_condition: IamDenyPolicyRulesDenyRuleDenialCondition
denial_condition block.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#denial_condition IamDenyPolicy#denial_condition}
denied_permissions: typing.List[str]
- Type: typing.List[str]
The permissions that are explicitly denied by this rule.
Each permission uses the format '{service-fqdn}/{resource}.{verb}', where '{service-fqdn}' is the fully qualified domain name for the service. For example, 'iam.googleapis.com/roles.list'.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#denied_permissions IamDenyPolicy#denied_permissions}
denied_principals: typing.List[str]
- Type: typing.List[str]
The identities that are prevented from using one or more permissions on Google Cloud resources.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#denied_principals IamDenyPolicy#denied_principals}
exception_permissions: typing.List[str]
- Type: typing.List[str]
Specifies the permissions that this rule excludes from the set of denied permissions given by deniedPermissions.
If a permission appears in deniedPermissions and in exceptionPermissions then it will not be denied. The excluded permissions can be specified using the same syntax as deniedPermissions.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#exception_permissions IamDenyPolicy#exception_permissions}
exception_principals: typing.List[str]
- Type: typing.List[str]
The identities that are excluded from the deny rule, even if they are listed in the deniedPrincipals.
For example, you could add a Google group to the deniedPrincipals, then exclude specific users who belong to that group.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#exception_principals IamDenyPolicy#exception_principals}
from cdktf_cdktf_provider_google import iam_deny_policy
iamDenyPolicy.IamDenyPolicyRulesDenyRuleDenialCondition(
expression: str,
description: str = None,
location: str = None,
title: str = None
)
Name | Type | Description |
---|---|---|
expression |
str |
Textual representation of an expression in Common Expression Language syntax. |
description |
str |
Description of the expression. |
location |
str |
String indicating the location of the expression for error reporting, e.g. a file name and a position in the file. |
title |
str |
Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression. |
expression: str
- Type: str
Textual representation of an expression in Common Expression Language syntax.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#expression IamDenyPolicy#expression}
description: str
- Type: str
Description of the expression.
This is a longer text which describes the expression, e.g. when hovered over it in a UI.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#description IamDenyPolicy#description}
location: str
- Type: str
String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#location IamDenyPolicy#location}
title: str
- Type: str
Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#title IamDenyPolicy#title}
from cdktf_cdktf_provider_google import iam_deny_policy
iamDenyPolicy.IamDenyPolicyTimeouts(
create: str = None,
delete: str = None,
update: str = None
)
Name | Type | Description |
---|---|---|
create |
str |
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#create IamDenyPolicy#create}. |
delete |
str |
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#delete IamDenyPolicy#delete}. |
update |
str |
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#update IamDenyPolicy#update}. |
create: str
- Type: str
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#create IamDenyPolicy#create}.
delete: str
- Type: str
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#delete IamDenyPolicy#delete}.
update: str
- Type: str
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#update IamDenyPolicy#update}.
from cdktf_cdktf_provider_google import iam_deny_policy
iamDenyPolicy.IamDenyPolicyRulesDenyRuleDenialConditionOutputReference(
terraform_resource: IInterpolatingParent,
terraform_attribute: str
)
Name | Type | Description |
---|---|---|
terraform_resource |
cdktf.IInterpolatingParent |
The parent resource. |
terraform_attribute |
str |
The attribute on the parent resource this class is referencing. |
- Type: cdktf.IInterpolatingParent
The parent resource.
- Type: str
The attribute on the parent resource this class is referencing.
Name | Description |
---|---|
compute_fqn |
No description. |
get_any_map_attribute |
No description. |
get_boolean_attribute |
No description. |
get_boolean_map_attribute |
No description. |
get_list_attribute |
No description. |
get_number_attribute |
No description. |
get_number_list_attribute |
No description. |
get_number_map_attribute |
No description. |
get_string_attribute |
No description. |
get_string_map_attribute |
No description. |
interpolation_for_attribute |
No description. |
resolve |
Produce the Token's value at resolution time. |
to_string |
Return a string representation of this resolvable object. |
reset_description |
No description. |
reset_location |
No description. |
reset_title |
No description. |
def compute_fqn() -> str
def get_any_map_attribute(
terraform_attribute: str
) -> typing.Mapping[typing.Any]
- Type: str
def get_boolean_attribute(
terraform_attribute: str
) -> IResolvable
- Type: str
def get_boolean_map_attribute(
terraform_attribute: str
) -> typing.Mapping[bool]
- Type: str
def get_list_attribute(
terraform_attribute: str
) -> typing.List[str]
- Type: str
def get_number_attribute(
terraform_attribute: str
) -> typing.Union[int, float]
- Type: str
def get_number_list_attribute(
terraform_attribute: str
) -> typing.List[typing.Union[int, float]]
- Type: str
def get_number_map_attribute(
terraform_attribute: str
) -> typing.Mapping[typing.Union[int, float]]
- Type: str
def get_string_attribute(
terraform_attribute: str
) -> str
- Type: str
def get_string_map_attribute(
terraform_attribute: str
) -> typing.Mapping[str]
- Type: str
def interpolation_for_attribute(
property: str
) -> IResolvable
- Type: str
def resolve(
_context: IResolveContext
) -> typing.Any
Produce the Token's value at resolution time.
- Type: cdktf.IResolveContext
def to_string() -> str
Return a string representation of this resolvable object.
Returns a reversible string representation.
def reset_description() -> None
def reset_location() -> None
def reset_title() -> None
Name | Type | Description |
---|---|---|
creation_stack |
typing.List[str] |
The creation stack of this resolvable which will be appended to errors thrown during resolution. |
fqn |
str |
No description. |
description_input |
str |
No description. |
expression_input |
str |
No description. |
location_input |
str |
No description. |
title_input |
str |
No description. |
description |
str |
No description. |
expression |
str |
No description. |
location |
str |
No description. |
title |
str |
No description. |
internal_value |
IamDenyPolicyRulesDenyRuleDenialCondition |
No description. |
creation_stack: typing.List[str]
- Type: typing.List[str]
The creation stack of this resolvable which will be appended to errors thrown during resolution.
If this returns an empty array the stack will not be attached.
fqn: str
- Type: str
description_input: str
- Type: str
expression_input: str
- Type: str
location_input: str
- Type: str
title_input: str
- Type: str
description: str
- Type: str
expression: str
- Type: str
location: str
- Type: str
title: str
- Type: str
internal_value: IamDenyPolicyRulesDenyRuleDenialCondition
from cdktf_cdktf_provider_google import iam_deny_policy
iamDenyPolicy.IamDenyPolicyRulesDenyRuleOutputReference(
terraform_resource: IInterpolatingParent,
terraform_attribute: str
)
Name | Type | Description |
---|---|---|
terraform_resource |
cdktf.IInterpolatingParent |
The parent resource. |
terraform_attribute |
str |
The attribute on the parent resource this class is referencing. |
- Type: cdktf.IInterpolatingParent
The parent resource.
- Type: str
The attribute on the parent resource this class is referencing.
Name | Description |
---|---|
compute_fqn |
No description. |
get_any_map_attribute |
No description. |
get_boolean_attribute |
No description. |
get_boolean_map_attribute |
No description. |
get_list_attribute |
No description. |
get_number_attribute |
No description. |
get_number_list_attribute |
No description. |
get_number_map_attribute |
No description. |
get_string_attribute |
No description. |
get_string_map_attribute |
No description. |
interpolation_for_attribute |
No description. |
resolve |
Produce the Token's value at resolution time. |
to_string |
Return a string representation of this resolvable object. |
put_denial_condition |
No description. |
reset_denial_condition |
No description. |
reset_denied_permissions |
No description. |
reset_denied_principals |
No description. |
reset_exception_permissions |
No description. |
reset_exception_principals |
No description. |
def compute_fqn() -> str
def get_any_map_attribute(
terraform_attribute: str
) -> typing.Mapping[typing.Any]
- Type: str
def get_boolean_attribute(
terraform_attribute: str
) -> IResolvable
- Type: str
def get_boolean_map_attribute(
terraform_attribute: str
) -> typing.Mapping[bool]
- Type: str
def get_list_attribute(
terraform_attribute: str
) -> typing.List[str]
- Type: str
def get_number_attribute(
terraform_attribute: str
) -> typing.Union[int, float]
- Type: str
def get_number_list_attribute(
terraform_attribute: str
) -> typing.List[typing.Union[int, float]]
- Type: str
def get_number_map_attribute(
terraform_attribute: str
) -> typing.Mapping[typing.Union[int, float]]
- Type: str
def get_string_attribute(
terraform_attribute: str
) -> str
- Type: str
def get_string_map_attribute(
terraform_attribute: str
) -> typing.Mapping[str]
- Type: str
def interpolation_for_attribute(
property: str
) -> IResolvable
- Type: str
def resolve(
_context: IResolveContext
) -> typing.Any
Produce the Token's value at resolution time.
- Type: cdktf.IResolveContext
def to_string() -> str
Return a string representation of this resolvable object.
Returns a reversible string representation.
def put_denial_condition(
expression: str,
description: str = None,
location: str = None,
title: str = None
) -> None
- Type: str
Textual representation of an expression in Common Expression Language syntax.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#expression IamDenyPolicy#expression}
- Type: str
Description of the expression.
This is a longer text which describes the expression, e.g. when hovered over it in a UI.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#description IamDenyPolicy#description}
- Type: str
String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#location IamDenyPolicy#location}
- Type: str
Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#title IamDenyPolicy#title}
def reset_denial_condition() -> None
def reset_denied_permissions() -> None
def reset_denied_principals() -> None
def reset_exception_permissions() -> None
def reset_exception_principals() -> None
Name | Type | Description |
---|---|---|
creation_stack |
typing.List[str] |
The creation stack of this resolvable which will be appended to errors thrown during resolution. |
fqn |
str |
No description. |
denial_condition |
IamDenyPolicyRulesDenyRuleDenialConditionOutputReference |
No description. |
denial_condition_input |
IamDenyPolicyRulesDenyRuleDenialCondition |
No description. |
denied_permissions_input |
typing.List[str] |
No description. |
denied_principals_input |
typing.List[str] |
No description. |
exception_permissions_input |
typing.List[str] |
No description. |
exception_principals_input |
typing.List[str] |
No description. |
denied_permissions |
typing.List[str] |
No description. |
denied_principals |
typing.List[str] |
No description. |
exception_permissions |
typing.List[str] |
No description. |
exception_principals |
typing.List[str] |
No description. |
internal_value |
IamDenyPolicyRulesDenyRule |
No description. |
creation_stack: typing.List[str]
- Type: typing.List[str]
The creation stack of this resolvable which will be appended to errors thrown during resolution.
If this returns an empty array the stack will not be attached.
fqn: str
- Type: str
denial_condition: IamDenyPolicyRulesDenyRuleDenialConditionOutputReference
denial_condition_input: IamDenyPolicyRulesDenyRuleDenialCondition
denied_permissions_input: typing.List[str]
- Type: typing.List[str]
denied_principals_input: typing.List[str]
- Type: typing.List[str]
exception_permissions_input: typing.List[str]
- Type: typing.List[str]
exception_principals_input: typing.List[str]
- Type: typing.List[str]
denied_permissions: typing.List[str]
- Type: typing.List[str]
denied_principals: typing.List[str]
- Type: typing.List[str]
exception_permissions: typing.List[str]
- Type: typing.List[str]
exception_principals: typing.List[str]
- Type: typing.List[str]
internal_value: IamDenyPolicyRulesDenyRule
from cdktf_cdktf_provider_google import iam_deny_policy
iamDenyPolicy.IamDenyPolicyRulesList(
terraform_resource: IInterpolatingParent,
terraform_attribute: str,
wraps_set: bool
)
Name | Type | Description |
---|---|---|
terraform_resource |
cdktf.IInterpolatingParent |
The parent resource. |
terraform_attribute |
str |
The attribute on the parent resource this class is referencing. |
wraps_set |
bool |
whether the list is wrapping a set (will add tolist() to be able to access an item via an index). |
- Type: cdktf.IInterpolatingParent
The parent resource.
- Type: str
The attribute on the parent resource this class is referencing.
- Type: bool
whether the list is wrapping a set (will add tolist() to be able to access an item via an index).
Name | Description |
---|---|
all_with_map_key |
Creating an iterator for this complex list. |
compute_fqn |
No description. |
resolve |
Produce the Token's value at resolution time. |
to_string |
Return a string representation of this resolvable object. |
get |
No description. |
def all_with_map_key(
map_key_attribute_name: str
) -> DynamicListTerraformIterator
Creating an iterator for this complex list.
The list will be converted into a map with the mapKeyAttributeName as the key.
- Type: str
def compute_fqn() -> str
def resolve(
_context: IResolveContext
) -> typing.Any
Produce the Token's value at resolution time.
- Type: cdktf.IResolveContext
def to_string() -> str
Return a string representation of this resolvable object.
Returns a reversible string representation.
def get(
index: typing.Union[int, float]
) -> IamDenyPolicyRulesOutputReference
- Type: typing.Union[int, float]
the index of the item to return.
Name | Type | Description |
---|---|---|
creation_stack |
typing.List[str] |
The creation stack of this resolvable which will be appended to errors thrown during resolution. |
fqn |
str |
No description. |
internal_value |
typing.Union[cdktf.IResolvable, typing.List[IamDenyPolicyRules]] |
No description. |
creation_stack: typing.List[str]
- Type: typing.List[str]
The creation stack of this resolvable which will be appended to errors thrown during resolution.
If this returns an empty array the stack will not be attached.
fqn: str
- Type: str
internal_value: typing.Union[IResolvable, typing.List[IamDenyPolicyRules]]
- Type: typing.Union[cdktf.IResolvable, typing.List[IamDenyPolicyRules]]
from cdktf_cdktf_provider_google import iam_deny_policy
iamDenyPolicy.IamDenyPolicyRulesOutputReference(
terraform_resource: IInterpolatingParent,
terraform_attribute: str,
complex_object_index: typing.Union[int, float],
complex_object_is_from_set: bool
)
Name | Type | Description |
---|---|---|
terraform_resource |
cdktf.IInterpolatingParent |
The parent resource. |
terraform_attribute |
str |
The attribute on the parent resource this class is referencing. |
complex_object_index |
typing.Union[int, float] |
the index of this item in the list. |
complex_object_is_from_set |
bool |
whether the list is wrapping a set (will add tolist() to be able to access an item via an index). |
- Type: cdktf.IInterpolatingParent
The parent resource.
- Type: str
The attribute on the parent resource this class is referencing.
- Type: typing.Union[int, float]
the index of this item in the list.
- Type: bool
whether the list is wrapping a set (will add tolist() to be able to access an item via an index).
Name | Description |
---|---|
compute_fqn |
No description. |
get_any_map_attribute |
No description. |
get_boolean_attribute |
No description. |
get_boolean_map_attribute |
No description. |
get_list_attribute |
No description. |
get_number_attribute |
No description. |
get_number_list_attribute |
No description. |
get_number_map_attribute |
No description. |
get_string_attribute |
No description. |
get_string_map_attribute |
No description. |
interpolation_for_attribute |
No description. |
resolve |
Produce the Token's value at resolution time. |
to_string |
Return a string representation of this resolvable object. |
put_deny_rule |
No description. |
reset_deny_rule |
No description. |
reset_description |
No description. |
def compute_fqn() -> str
def get_any_map_attribute(
terraform_attribute: str
) -> typing.Mapping[typing.Any]
- Type: str
def get_boolean_attribute(
terraform_attribute: str
) -> IResolvable
- Type: str
def get_boolean_map_attribute(
terraform_attribute: str
) -> typing.Mapping[bool]
- Type: str
def get_list_attribute(
terraform_attribute: str
) -> typing.List[str]
- Type: str
def get_number_attribute(
terraform_attribute: str
) -> typing.Union[int, float]
- Type: str
def get_number_list_attribute(
terraform_attribute: str
) -> typing.List[typing.Union[int, float]]
- Type: str
def get_number_map_attribute(
terraform_attribute: str
) -> typing.Mapping[typing.Union[int, float]]
- Type: str
def get_string_attribute(
terraform_attribute: str
) -> str
- Type: str
def get_string_map_attribute(
terraform_attribute: str
) -> typing.Mapping[str]
- Type: str
def interpolation_for_attribute(
property: str
) -> IResolvable
- Type: str
def resolve(
_context: IResolveContext
) -> typing.Any
Produce the Token's value at resolution time.
- Type: cdktf.IResolveContext
def to_string() -> str
Return a string representation of this resolvable object.
Returns a reversible string representation.
def put_deny_rule(
denial_condition: IamDenyPolicyRulesDenyRuleDenialCondition = None,
denied_permissions: typing.List[str] = None,
denied_principals: typing.List[str] = None,
exception_permissions: typing.List[str] = None,
exception_principals: typing.List[str] = None
) -> None
denial_condition block.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#denial_condition IamDenyPolicy#denial_condition}
- Type: typing.List[str]
The permissions that are explicitly denied by this rule.
Each permission uses the format '{service-fqdn}/{resource}.{verb}', where '{service-fqdn}' is the fully qualified domain name for the service. For example, 'iam.googleapis.com/roles.list'.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#denied_permissions IamDenyPolicy#denied_permissions}
- Type: typing.List[str]
The identities that are prevented from using one or more permissions on Google Cloud resources.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#denied_principals IamDenyPolicy#denied_principals}
- Type: typing.List[str]
Specifies the permissions that this rule excludes from the set of denied permissions given by deniedPermissions.
If a permission appears in deniedPermissions and in exceptionPermissions then it will not be denied. The excluded permissions can be specified using the same syntax as deniedPermissions.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#exception_permissions IamDenyPolicy#exception_permissions}
- Type: typing.List[str]
The identities that are excluded from the deny rule, even if they are listed in the deniedPrincipals.
For example, you could add a Google group to the deniedPrincipals, then exclude specific users who belong to that group.
Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/6.14.1/docs/resources/iam_deny_policy#exception_principals IamDenyPolicy#exception_principals}
def reset_deny_rule() -> None
def reset_description() -> None
Name | Type | Description |
---|---|---|
creation_stack |
typing.List[str] |
The creation stack of this resolvable which will be appended to errors thrown during resolution. |
fqn |
str |
No description. |
deny_rule |
IamDenyPolicyRulesDenyRuleOutputReference |
No description. |
deny_rule_input |
IamDenyPolicyRulesDenyRule |
No description. |
description_input |
str |
No description. |
description |
str |
No description. |
internal_value |
typing.Union[cdktf.IResolvable, IamDenyPolicyRules] |
No description. |
creation_stack: typing.List[str]
- Type: typing.List[str]
The creation stack of this resolvable which will be appended to errors thrown during resolution.
If this returns an empty array the stack will not be attached.
fqn: str
- Type: str
deny_rule: IamDenyPolicyRulesDenyRuleOutputReference
deny_rule_input: IamDenyPolicyRulesDenyRule
description_input: str
- Type: str
description: str
- Type: str
internal_value: typing.Union[IResolvable, IamDenyPolicyRules]
- Type: typing.Union[cdktf.IResolvable, IamDenyPolicyRules]
from cdktf_cdktf_provider_google import iam_deny_policy
iamDenyPolicy.IamDenyPolicyTimeoutsOutputReference(
terraform_resource: IInterpolatingParent,
terraform_attribute: str
)
Name | Type | Description |
---|---|---|
terraform_resource |
cdktf.IInterpolatingParent |
The parent resource. |
terraform_attribute |
str |
The attribute on the parent resource this class is referencing. |
- Type: cdktf.IInterpolatingParent
The parent resource.
- Type: str
The attribute on the parent resource this class is referencing.
Name | Description |
---|---|
compute_fqn |
No description. |
get_any_map_attribute |
No description. |
get_boolean_attribute |
No description. |
get_boolean_map_attribute |
No description. |
get_list_attribute |
No description. |
get_number_attribute |
No description. |
get_number_list_attribute |
No description. |
get_number_map_attribute |
No description. |
get_string_attribute |
No description. |
get_string_map_attribute |
No description. |
interpolation_for_attribute |
No description. |
resolve |
Produce the Token's value at resolution time. |
to_string |
Return a string representation of this resolvable object. |
reset_create |
No description. |
reset_delete |
No description. |
reset_update |
No description. |
def compute_fqn() -> str
def get_any_map_attribute(
terraform_attribute: str
) -> typing.Mapping[typing.Any]
- Type: str
def get_boolean_attribute(
terraform_attribute: str
) -> IResolvable
- Type: str
def get_boolean_map_attribute(
terraform_attribute: str
) -> typing.Mapping[bool]
- Type: str
def get_list_attribute(
terraform_attribute: str
) -> typing.List[str]
- Type: str
def get_number_attribute(
terraform_attribute: str
) -> typing.Union[int, float]
- Type: str
def get_number_list_attribute(
terraform_attribute: str
) -> typing.List[typing.Union[int, float]]
- Type: str
def get_number_map_attribute(
terraform_attribute: str
) -> typing.Mapping[typing.Union[int, float]]
- Type: str
def get_string_attribute(
terraform_attribute: str
) -> str
- Type: str
def get_string_map_attribute(
terraform_attribute: str
) -> typing.Mapping[str]
- Type: str
def interpolation_for_attribute(
property: str
) -> IResolvable
- Type: str
def resolve(
_context: IResolveContext
) -> typing.Any
Produce the Token's value at resolution time.
- Type: cdktf.IResolveContext
def to_string() -> str
Return a string representation of this resolvable object.
Returns a reversible string representation.
def reset_create() -> None
def reset_delete() -> None
def reset_update() -> None
Name | Type | Description |
---|---|---|
creation_stack |
typing.List[str] |
The creation stack of this resolvable which will be appended to errors thrown during resolution. |
fqn |
str |
No description. |
create_input |
str |
No description. |
delete_input |
str |
No description. |
update_input |
str |
No description. |
create |
str |
No description. |
delete |
str |
No description. |
update |
str |
No description. |
internal_value |
typing.Union[cdktf.IResolvable, IamDenyPolicyTimeouts] |
No description. |
creation_stack: typing.List[str]
- Type: typing.List[str]
The creation stack of this resolvable which will be appended to errors thrown during resolution.
If this returns an empty array the stack will not be attached.
fqn: str
- Type: str
create_input: str
- Type: str
delete_input: str
- Type: str
update_input: str
- Type: str
create: str
- Type: str
delete: str
- Type: str
update: str
- Type: str
internal_value: typing.Union[IResolvable, IamDenyPolicyTimeouts]
- Type: typing.Union[cdktf.IResolvable, IamDenyPolicyTimeouts]