alicloud.cloudsso.AccessConfiguration
Explore with Pulumi AI
Provides a Cloud SSO Access Configuration resource.
For information about Cloud SSO Access Configuration and how to use it, see What is Access Configuration.
NOTE: Available since v1.145.0.
NOTE: Cloud SSO Only Support
cn-shanghai
Andus-west-1
Region
Create AccessConfiguration Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new AccessConfiguration(name: string, args: AccessConfigurationArgs, opts?: CustomResourceOptions);
@overload
def AccessConfiguration(resource_name: str,
args: AccessConfigurationArgs,
opts: Optional[ResourceOptions] = None)
@overload
def AccessConfiguration(resource_name: str,
opts: Optional[ResourceOptions] = None,
access_configuration_name: Optional[str] = None,
directory_id: Optional[str] = None,
description: Optional[str] = None,
force_remove_permission_policies: Optional[bool] = None,
permission_policies: Optional[Sequence[AccessConfigurationPermissionPolicyArgs]] = None,
relay_state: Optional[str] = None,
session_duration: Optional[int] = None)
func NewAccessConfiguration(ctx *Context, name string, args AccessConfigurationArgs, opts ...ResourceOption) (*AccessConfiguration, error)
public AccessConfiguration(string name, AccessConfigurationArgs args, CustomResourceOptions? opts = null)
public AccessConfiguration(String name, AccessConfigurationArgs args)
public AccessConfiguration(String name, AccessConfigurationArgs args, CustomResourceOptions options)
type: alicloud:cloudsso:AccessConfiguration
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args AccessConfigurationArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args AccessConfigurationArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args AccessConfigurationArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args AccessConfigurationArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args AccessConfigurationArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var accessConfigurationResource = new AliCloud.CloudSso.AccessConfiguration("accessConfigurationResource", new()
{
AccessConfigurationName = "string",
DirectoryId = "string",
Description = "string",
ForceRemovePermissionPolicies = false,
PermissionPolicies = new[]
{
new AliCloud.CloudSso.Inputs.AccessConfigurationPermissionPolicyArgs
{
PermissionPolicyName = "string",
PermissionPolicyType = "string",
PermissionPolicyDocument = "string",
},
},
RelayState = "string",
SessionDuration = 0,
});
example, err := cloudsso.NewAccessConfiguration(ctx, "accessConfigurationResource", &cloudsso.AccessConfigurationArgs{
AccessConfigurationName: pulumi.String("string"),
DirectoryId: pulumi.String("string"),
Description: pulumi.String("string"),
ForceRemovePermissionPolicies: pulumi.Bool(false),
PermissionPolicies: cloudsso.AccessConfigurationPermissionPolicyArray{
&cloudsso.AccessConfigurationPermissionPolicyArgs{
PermissionPolicyName: pulumi.String("string"),
PermissionPolicyType: pulumi.String("string"),
PermissionPolicyDocument: pulumi.String("string"),
},
},
RelayState: pulumi.String("string"),
SessionDuration: pulumi.Int(0),
})
var accessConfigurationResource = new AccessConfiguration("accessConfigurationResource", AccessConfigurationArgs.builder()
.accessConfigurationName("string")
.directoryId("string")
.description("string")
.forceRemovePermissionPolicies(false)
.permissionPolicies(AccessConfigurationPermissionPolicyArgs.builder()
.permissionPolicyName("string")
.permissionPolicyType("string")
.permissionPolicyDocument("string")
.build())
.relayState("string")
.sessionDuration(0)
.build());
access_configuration_resource = alicloud.cloudsso.AccessConfiguration("accessConfigurationResource",
access_configuration_name="string",
directory_id="string",
description="string",
force_remove_permission_policies=False,
permission_policies=[alicloud.cloudsso.AccessConfigurationPermissionPolicyArgs(
permission_policy_name="string",
permission_policy_type="string",
permission_policy_document="string",
)],
relay_state="string",
session_duration=0)
const accessConfigurationResource = new alicloud.cloudsso.AccessConfiguration("accessConfigurationResource", {
accessConfigurationName: "string",
directoryId: "string",
description: "string",
forceRemovePermissionPolicies: false,
permissionPolicies: [{
permissionPolicyName: "string",
permissionPolicyType: "string",
permissionPolicyDocument: "string",
}],
relayState: "string",
sessionDuration: 0,
});
type: alicloud:cloudsso:AccessConfiguration
properties:
accessConfigurationName: string
description: string
directoryId: string
forceRemovePermissionPolicies: false
permissionPolicies:
- permissionPolicyDocument: string
permissionPolicyName: string
permissionPolicyType: string
relayState: string
sessionDuration: 0
AccessConfiguration Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The AccessConfiguration resource accepts the following input properties:
- Access
Configuration stringName - The AccessConfigurationName of the Access Configuration. The name of the resource. The name can be up to
32
characters long and can contain letters, digits, and hyphens (-). - Directory
Id string - The ID of the Directory.
- Description string
- The Description of the Access Configuration. The description can be up to
1024
characters long. - Force
Remove boolPermission Policies - This parameter is used to force deletion
permission_policies
. Valid Value:true
andfalse
.- NOTE: The
permission_policies
will be removed automatically when the resource is deleted, please operate with caution. If there are left more permission policies in the access configuration, please remove them before deleting the access configuration.
- NOTE: The
- Permission
Policies List<Pulumi.Ali Cloud. Cloud Sso. Inputs. Access Configuration Permission Policy> - The Policy List. See
permission_policies
below. - Relay
State string - The RelayState of the Access Configuration, Cloud SSO users use this access configuration to access the RD account, the initial access page address. Must be the Alibaba Cloud console page, the default is the console home page.
- Session
Duration int - The SessionDuration of the Access Configuration. Valid Value:
900
to43200
. Unit: Seconds.
- Access
Configuration stringName - The AccessConfigurationName of the Access Configuration. The name of the resource. The name can be up to
32
characters long and can contain letters, digits, and hyphens (-). - Directory
Id string - The ID of the Directory.
- Description string
- The Description of the Access Configuration. The description can be up to
1024
characters long. - Force
Remove boolPermission Policies - This parameter is used to force deletion
permission_policies
. Valid Value:true
andfalse
.- NOTE: The
permission_policies
will be removed automatically when the resource is deleted, please operate with caution. If there are left more permission policies in the access configuration, please remove them before deleting the access configuration.
- NOTE: The
- Permission
Policies []AccessConfiguration Permission Policy Args - The Policy List. See
permission_policies
below. - Relay
State string - The RelayState of the Access Configuration, Cloud SSO users use this access configuration to access the RD account, the initial access page address. Must be the Alibaba Cloud console page, the default is the console home page.
- Session
Duration int - The SessionDuration of the Access Configuration. Valid Value:
900
to43200
. Unit: Seconds.
- access
Configuration StringName - The AccessConfigurationName of the Access Configuration. The name of the resource. The name can be up to
32
characters long and can contain letters, digits, and hyphens (-). - directory
Id String - The ID of the Directory.
- description String
- The Description of the Access Configuration. The description can be up to
1024
characters long. - force
Remove BooleanPermission Policies - This parameter is used to force deletion
permission_policies
. Valid Value:true
andfalse
.- NOTE: The
permission_policies
will be removed automatically when the resource is deleted, please operate with caution. If there are left more permission policies in the access configuration, please remove them before deleting the access configuration.
- NOTE: The
- permission
Policies List<AccessConfiguration Permission Policy> - The Policy List. See
permission_policies
below. - relay
State String - The RelayState of the Access Configuration, Cloud SSO users use this access configuration to access the RD account, the initial access page address. Must be the Alibaba Cloud console page, the default is the console home page.
- session
Duration Integer - The SessionDuration of the Access Configuration. Valid Value:
900
to43200
. Unit: Seconds.
- access
Configuration stringName - The AccessConfigurationName of the Access Configuration. The name of the resource. The name can be up to
32
characters long and can contain letters, digits, and hyphens (-). - directory
Id string - The ID of the Directory.
- description string
- The Description of the Access Configuration. The description can be up to
1024
characters long. - force
Remove booleanPermission Policies - This parameter is used to force deletion
permission_policies
. Valid Value:true
andfalse
.- NOTE: The
permission_policies
will be removed automatically when the resource is deleted, please operate with caution. If there are left more permission policies in the access configuration, please remove them before deleting the access configuration.
- NOTE: The
- permission
Policies AccessConfiguration Permission Policy[] - The Policy List. See
permission_policies
below. - relay
State string - The RelayState of the Access Configuration, Cloud SSO users use this access configuration to access the RD account, the initial access page address. Must be the Alibaba Cloud console page, the default is the console home page.
- session
Duration number - The SessionDuration of the Access Configuration. Valid Value:
900
to43200
. Unit: Seconds.
- access_
configuration_ strname - The AccessConfigurationName of the Access Configuration. The name of the resource. The name can be up to
32
characters long and can contain letters, digits, and hyphens (-). - directory_
id str - The ID of the Directory.
- description str
- The Description of the Access Configuration. The description can be up to
1024
characters long. - force_
remove_ boolpermission_ policies - This parameter is used to force deletion
permission_policies
. Valid Value:true
andfalse
.- NOTE: The
permission_policies
will be removed automatically when the resource is deleted, please operate with caution. If there are left more permission policies in the access configuration, please remove them before deleting the access configuration.
- NOTE: The
- permission_
policies Sequence[AccessConfiguration Permission Policy Args] - The Policy List. See
permission_policies
below. - relay_
state str - The RelayState of the Access Configuration, Cloud SSO users use this access configuration to access the RD account, the initial access page address. Must be the Alibaba Cloud console page, the default is the console home page.
- session_
duration int - The SessionDuration of the Access Configuration. Valid Value:
900
to43200
. Unit: Seconds.
- access
Configuration StringName - The AccessConfigurationName of the Access Configuration. The name of the resource. The name can be up to
32
characters long and can contain letters, digits, and hyphens (-). - directory
Id String - The ID of the Directory.
- description String
- The Description of the Access Configuration. The description can be up to
1024
characters long. - force
Remove BooleanPermission Policies - This parameter is used to force deletion
permission_policies
. Valid Value:true
andfalse
.- NOTE: The
permission_policies
will be removed automatically when the resource is deleted, please operate with caution. If there are left more permission policies in the access configuration, please remove them before deleting the access configuration.
- NOTE: The
- permission
Policies List<Property Map> - The Policy List. See
permission_policies
below. - relay
State String - The RelayState of the Access Configuration, Cloud SSO users use this access configuration to access the RD account, the initial access page address. Must be the Alibaba Cloud console page, the default is the console home page.
- session
Duration Number - The SessionDuration of the Access Configuration. Valid Value:
900
to43200
. Unit: Seconds.
Outputs
All input properties are implicitly available as output properties. Additionally, the AccessConfiguration resource produces the following output properties:
- Access
Configuration stringId - The AccessConfigurationId of the Access Configuration.
- Id string
- The provider-assigned unique ID for this managed resource.
- Access
Configuration stringId - The AccessConfigurationId of the Access Configuration.
- Id string
- The provider-assigned unique ID for this managed resource.
- access
Configuration StringId - The AccessConfigurationId of the Access Configuration.
- id String
- The provider-assigned unique ID for this managed resource.
- access
Configuration stringId - The AccessConfigurationId of the Access Configuration.
- id string
- The provider-assigned unique ID for this managed resource.
- access_
configuration_ strid - The AccessConfigurationId of the Access Configuration.
- id str
- The provider-assigned unique ID for this managed resource.
- access
Configuration StringId - The AccessConfigurationId of the Access Configuration.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing AccessConfiguration Resource
Get an existing AccessConfiguration resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: AccessConfigurationState, opts?: CustomResourceOptions): AccessConfiguration
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
access_configuration_id: Optional[str] = None,
access_configuration_name: Optional[str] = None,
description: Optional[str] = None,
directory_id: Optional[str] = None,
force_remove_permission_policies: Optional[bool] = None,
permission_policies: Optional[Sequence[AccessConfigurationPermissionPolicyArgs]] = None,
relay_state: Optional[str] = None,
session_duration: Optional[int] = None) -> AccessConfiguration
func GetAccessConfiguration(ctx *Context, name string, id IDInput, state *AccessConfigurationState, opts ...ResourceOption) (*AccessConfiguration, error)
public static AccessConfiguration Get(string name, Input<string> id, AccessConfigurationState? state, CustomResourceOptions? opts = null)
public static AccessConfiguration get(String name, Output<String> id, AccessConfigurationState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Access
Configuration stringId - The AccessConfigurationId of the Access Configuration.
- Access
Configuration stringName - The AccessConfigurationName of the Access Configuration. The name of the resource. The name can be up to
32
characters long and can contain letters, digits, and hyphens (-). - Description string
- The Description of the Access Configuration. The description can be up to
1024
characters long. - Directory
Id string - The ID of the Directory.
- Force
Remove boolPermission Policies - This parameter is used to force deletion
permission_policies
. Valid Value:true
andfalse
.- NOTE: The
permission_policies
will be removed automatically when the resource is deleted, please operate with caution. If there are left more permission policies in the access configuration, please remove them before deleting the access configuration.
- NOTE: The
- Permission
Policies List<Pulumi.Ali Cloud. Cloud Sso. Inputs. Access Configuration Permission Policy> - The Policy List. See
permission_policies
below. - Relay
State string - The RelayState of the Access Configuration, Cloud SSO users use this access configuration to access the RD account, the initial access page address. Must be the Alibaba Cloud console page, the default is the console home page.
- Session
Duration int - The SessionDuration of the Access Configuration. Valid Value:
900
to43200
. Unit: Seconds.
- Access
Configuration stringId - The AccessConfigurationId of the Access Configuration.
- Access
Configuration stringName - The AccessConfigurationName of the Access Configuration. The name of the resource. The name can be up to
32
characters long and can contain letters, digits, and hyphens (-). - Description string
- The Description of the Access Configuration. The description can be up to
1024
characters long. - Directory
Id string - The ID of the Directory.
- Force
Remove boolPermission Policies - This parameter is used to force deletion
permission_policies
. Valid Value:true
andfalse
.- NOTE: The
permission_policies
will be removed automatically when the resource is deleted, please operate with caution. If there are left more permission policies in the access configuration, please remove them before deleting the access configuration.
- NOTE: The
- Permission
Policies []AccessConfiguration Permission Policy Args - The Policy List. See
permission_policies
below. - Relay
State string - The RelayState of the Access Configuration, Cloud SSO users use this access configuration to access the RD account, the initial access page address. Must be the Alibaba Cloud console page, the default is the console home page.
- Session
Duration int - The SessionDuration of the Access Configuration. Valid Value:
900
to43200
. Unit: Seconds.
- access
Configuration StringId - The AccessConfigurationId of the Access Configuration.
- access
Configuration StringName - The AccessConfigurationName of the Access Configuration. The name of the resource. The name can be up to
32
characters long and can contain letters, digits, and hyphens (-). - description String
- The Description of the Access Configuration. The description can be up to
1024
characters long. - directory
Id String - The ID of the Directory.
- force
Remove BooleanPermission Policies - This parameter is used to force deletion
permission_policies
. Valid Value:true
andfalse
.- NOTE: The
permission_policies
will be removed automatically when the resource is deleted, please operate with caution. If there are left more permission policies in the access configuration, please remove them before deleting the access configuration.
- NOTE: The
- permission
Policies List<AccessConfiguration Permission Policy> - The Policy List. See
permission_policies
below. - relay
State String - The RelayState of the Access Configuration, Cloud SSO users use this access configuration to access the RD account, the initial access page address. Must be the Alibaba Cloud console page, the default is the console home page.
- session
Duration Integer - The SessionDuration of the Access Configuration. Valid Value:
900
to43200
. Unit: Seconds.
- access
Configuration stringId - The AccessConfigurationId of the Access Configuration.
- access
Configuration stringName - The AccessConfigurationName of the Access Configuration. The name of the resource. The name can be up to
32
characters long and can contain letters, digits, and hyphens (-). - description string
- The Description of the Access Configuration. The description can be up to
1024
characters long. - directory
Id string - The ID of the Directory.
- force
Remove booleanPermission Policies - This parameter is used to force deletion
permission_policies
. Valid Value:true
andfalse
.- NOTE: The
permission_policies
will be removed automatically when the resource is deleted, please operate with caution. If there are left more permission policies in the access configuration, please remove them before deleting the access configuration.
- NOTE: The
- permission
Policies AccessConfiguration Permission Policy[] - The Policy List. See
permission_policies
below. - relay
State string - The RelayState of the Access Configuration, Cloud SSO users use this access configuration to access the RD account, the initial access page address. Must be the Alibaba Cloud console page, the default is the console home page.
- session
Duration number - The SessionDuration of the Access Configuration. Valid Value:
900
to43200
. Unit: Seconds.
- access_
configuration_ strid - The AccessConfigurationId of the Access Configuration.
- access_
configuration_ strname - The AccessConfigurationName of the Access Configuration. The name of the resource. The name can be up to
32
characters long and can contain letters, digits, and hyphens (-). - description str
- The Description of the Access Configuration. The description can be up to
1024
characters long. - directory_
id str - The ID of the Directory.
- force_
remove_ boolpermission_ policies - This parameter is used to force deletion
permission_policies
. Valid Value:true
andfalse
.- NOTE: The
permission_policies
will be removed automatically when the resource is deleted, please operate with caution. If there are left more permission policies in the access configuration, please remove them before deleting the access configuration.
- NOTE: The
- permission_
policies Sequence[AccessConfiguration Permission Policy Args] - The Policy List. See
permission_policies
below. - relay_
state str - The RelayState of the Access Configuration, Cloud SSO users use this access configuration to access the RD account, the initial access page address. Must be the Alibaba Cloud console page, the default is the console home page.
- session_
duration int - The SessionDuration of the Access Configuration. Valid Value:
900
to43200
. Unit: Seconds.
- access
Configuration StringId - The AccessConfigurationId of the Access Configuration.
- access
Configuration StringName - The AccessConfigurationName of the Access Configuration. The name of the resource. The name can be up to
32
characters long and can contain letters, digits, and hyphens (-). - description String
- The Description of the Access Configuration. The description can be up to
1024
characters long. - directory
Id String - The ID of the Directory.
- force
Remove BooleanPermission Policies - This parameter is used to force deletion
permission_policies
. Valid Value:true
andfalse
.- NOTE: The
permission_policies
will be removed automatically when the resource is deleted, please operate with caution. If there are left more permission policies in the access configuration, please remove them before deleting the access configuration.
- NOTE: The
- permission
Policies List<Property Map> - The Policy List. See
permission_policies
below. - relay
State String - The RelayState of the Access Configuration, Cloud SSO users use this access configuration to access the RD account, the initial access page address. Must be the Alibaba Cloud console page, the default is the console home page.
- session
Duration Number - The SessionDuration of the Access Configuration. Valid Value:
900
to43200
. Unit: Seconds.
Supporting Types
AccessConfigurationPermissionPolicy, AccessConfigurationPermissionPolicyArgs
- Permission
Policy stringName - The Policy Name of policy. The name of the resource.
- Permission
Policy stringType - The Policy Type of policy. Valid values:
System
,Inline
. - Permission
Policy stringDocument - The Content of Policy.
- Permission
Policy stringName - The Policy Name of policy. The name of the resource.
- Permission
Policy stringType - The Policy Type of policy. Valid values:
System
,Inline
. - Permission
Policy stringDocument - The Content of Policy.
- permission
Policy StringName - The Policy Name of policy. The name of the resource.
- permission
Policy StringType - The Policy Type of policy. Valid values:
System
,Inline
. - permission
Policy StringDocument - The Content of Policy.
- permission
Policy stringName - The Policy Name of policy. The name of the resource.
- permission
Policy stringType - The Policy Type of policy. Valid values:
System
,Inline
. - permission
Policy stringDocument - The Content of Policy.
- permission_
policy_ strname - The Policy Name of policy. The name of the resource.
- permission_
policy_ strtype - The Policy Type of policy. Valid values:
System
,Inline
. - permission_
policy_ strdocument - The Content of Policy.
- permission
Policy StringName - The Policy Name of policy. The name of the resource.
- permission
Policy StringType - The Policy Type of policy. Valid values:
System
,Inline
. - permission
Policy StringDocument - The Content of Policy.
Import
Cloud SSO Access Configuration can be imported using the id, e.g.
$ pulumi import alicloud:cloudsso/accessConfiguration:AccessConfiguration example <directory_id>:<access_configuration_id>
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Alibaba Cloud pulumi/pulumi-alicloud
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
alicloud
Terraform Provider.