aws-native.verifiedpermissions.Policy

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AwsNative = Pulumi.AwsNative;

return await Deployment.RunAsync(() => 
{
    var config = new Config();
    var policyStoreId = config.Require("policyStoreId");
    var policyTemplateId = config.Require("policyTemplateId");
    var principalType = config.Require("principalType");
    var principalId = config.Require("principalId");
    var resourceType = config.Require("resourceType");
    var resourceId = config.Require("resourceId");
    var templateLinkedPolicy = new AwsNative.VerifiedPermissions.Policy("templateLinkedPolicy", new()
    {
        PolicyStoreId = policyStoreId,
        Definition = new AwsNative.VerifiedPermissions.Inputs.PolicyDefinition0PropertiesArgs
        {
            TemplateLinked = new AwsNative.VerifiedPermissions.Inputs.PolicyTemplateLinkedPolicyDefinitionArgs
            {
                PolicyTemplateId = policyTemplateId,
                Principal = new AwsNative.VerifiedPermissions.Inputs.PolicyEntityIdentifierArgs
                {
                    EntityType = principalType,
                    EntityId = principalId,
                },
                Resource = new AwsNative.VerifiedPermissions.Inputs.PolicyEntityIdentifierArgs
                {
                    EntityType = resourceType,
                    EntityId = resourceId,
                },
            },
        },
    });

    return new Dictionary<string, object?>
    {
        ["policyId"] = templateLinkedPolicy.PolicyId,
    };
});

package main

import (
	"github.com/pulumi/pulumi-aws-native/sdk/go/aws/verifiedpermissions"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		cfg := config.New(ctx, "")
		policyStoreId := cfg.Require("policyStoreId")
		policyTemplateId := cfg.Require("policyTemplateId")
		principalType := cfg.Require("principalType")
		principalId := cfg.Require("principalId")
		resourceType := cfg.Require("resourceType")
		resourceId := cfg.Require("resourceId")
		templateLinkedPolicy, err := verifiedpermissions.NewPolicy(ctx, "templateLinkedPolicy", &verifiedpermissions.PolicyArgs{
			PolicyStoreId: pulumi.String(policyStoreId),
			Definition: &verifiedpermissions.PolicyDefinition0PropertiesArgs{
				TemplateLinked: &verifiedpermissions.PolicyTemplateLinkedPolicyDefinitionArgs{
					PolicyTemplateId: pulumi.String(policyTemplateId),
					Principal: &verifiedpermissions.PolicyEntityIdentifierArgs{
						EntityType: pulumi.String(principalType),
						EntityId:   pulumi.String(principalId),
					},
					Resource: &verifiedpermissions.PolicyEntityIdentifierArgs{
						EntityType: pulumi.String(resourceType),
						EntityId:   pulumi.String(resourceId),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		ctx.Export("policyId", templateLinkedPolicy.PolicyId)
		return nil
	})
}

import pulumi
import pulumi_aws_native as aws_native

config = pulumi.Config()
policy_store_id = config.require("policyStoreId")
policy_template_id = config.require("policyTemplateId")
principal_type = config.require("principalType")
principal_id = config.require("principalId")
resource_type = config.require("resourceType")
resource_id = config.require("resourceId")
template_linked_policy = aws_native.verifiedpermissions.Policy("templateLinkedPolicy",
    policy_store_id=policy_store_id,
    definition={
        "template_linked": {
            "policy_template_id": policy_template_id,
            "principal": {
                "entity_type": principal_type,
                "entity_id": principal_id,
            },
            "resource": {
                "entity_type": resource_type,
                "entity_id": resource_id,
            },
        },
    })
pulumi.export("policyId", template_linked_policy.policy_id)