Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. Google Cloud (GCP) Classic
  3. API Docs
  4. secretmanager
  5. getRegionalSecretIamPolicy
Google Cloud v8.14.0 published on Wednesday, Jan 15, 2025 by Pulumi
pulumi/pulumi-gcp

gcp.secretmanager.getRegionalSecretIamPolicy

Explore with Pulumi AI

Google Cloud v8.14.0 published on Wednesday, Jan 15, 2025 by Pulumi
pulumi/pulumi-gcp

Retrieves the current IAM policy data for regionalsecret

example

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const policy = gcp.secretmanager.getRegionalSecretIamPolicy({
    project: regional_secret_basic.project,
    location: regional_secret_basic.location,
    secretId: regional_secret_basic.secretId,
});
Copy
import pulumi
import pulumi_gcp as gcp

policy = gcp.secretmanager.get_regional_secret_iam_policy(project=regional_secret_basic["project"],
    location=regional_secret_basic["location"],
    secret_id=regional_secret_basic["secretId"])
Copy
package main

import (
	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/secretmanager"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := secretmanager.LookupRegionalSecretIamPolicy(ctx, &secretmanager.LookupRegionalSecretIamPolicyArgs{
			Project:  pulumi.StringRef(regional_secret_basic.Project),
			Location: pulumi.StringRef(regional_secret_basic.Location),
			SecretId: regional_secret_basic.SecretId,
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var policy = Gcp.SecretManager.GetRegionalSecretIamPolicy.Invoke(new()
    {
        Project = regional_secret_basic.Project,
        Location = regional_secret_basic.Location,
        SecretId = regional_secret_basic.SecretId,
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.secretmanager.SecretmanagerFunctions;
import com.pulumi.gcp.secretmanager.inputs.GetRegionalSecretIamPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var policy = SecretmanagerFunctions.getRegionalSecretIamPolicy(GetRegionalSecretIamPolicyArgs.builder()
            .project(regional_secret_basic.project())
            .location(regional_secret_basic.location())
            .secretId(regional_secret_basic.secretId())
            .build());

    }
}
Copy
variables:
  policy:
    fn::invoke:
      function: gcp:secretmanager:getRegionalSecretIamPolicy
      arguments:
        project: ${["regional-secret-basic"].project}
        location: ${["regional-secret-basic"].location}
        secretId: ${["regional-secret-basic"].secretId}
Copy

Using getRegionalSecretIamPolicy

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getRegionalSecretIamPolicy(args: GetRegionalSecretIamPolicyArgs, opts?: InvokeOptions): Promise<GetRegionalSecretIamPolicyResult>
function getRegionalSecretIamPolicyOutput(args: GetRegionalSecretIamPolicyOutputArgs, opts?: InvokeOptions): Output<GetRegionalSecretIamPolicyResult>
Copy
def get_regional_secret_iam_policy(location: Optional[str] = None,
                                   project: Optional[str] = None,
                                   secret_id: Optional[str] = None,
                                   opts: Optional[InvokeOptions] = None) -> GetRegionalSecretIamPolicyResult
def get_regional_secret_iam_policy_output(location: Optional[pulumi.Input[str]] = None,
                                   project: Optional[pulumi.Input[str]] = None,
                                   secret_id: Optional[pulumi.Input[str]] = None,
                                   opts: Optional[InvokeOptions] = None) -> Output[GetRegionalSecretIamPolicyResult]
Copy
func LookupRegionalSecretIamPolicy(ctx *Context, args *LookupRegionalSecretIamPolicyArgs, opts ...InvokeOption) (*LookupRegionalSecretIamPolicyResult, error)
func LookupRegionalSecretIamPolicyOutput(ctx *Context, args *LookupRegionalSecretIamPolicyOutputArgs, opts ...InvokeOption) LookupRegionalSecretIamPolicyResultOutput
Copy

> Note: This function is named LookupRegionalSecretIamPolicy in the Go SDK.

public static class GetRegionalSecretIamPolicy 
{
    public static Task<GetRegionalSecretIamPolicyResult> InvokeAsync(GetRegionalSecretIamPolicyArgs args, InvokeOptions? opts = null)
    public static Output<GetRegionalSecretIamPolicyResult> Invoke(GetRegionalSecretIamPolicyInvokeArgs args, InvokeOptions? opts = null)
}
Copy
public static CompletableFuture<GetRegionalSecretIamPolicyResult> getRegionalSecretIamPolicy(GetRegionalSecretIamPolicyArgs args, InvokeOptions options)
// Output-based functions aren't available in Java yet
Copy
fn::invoke:
  function: gcp:secretmanager/getRegionalSecretIamPolicy:getRegionalSecretIamPolicy
  arguments:
    # arguments dictionary
Copy

The following arguments are supported:

SecretId
This property is required.
Changes to this property will trigger replacement.
string
Location Changes to this property will trigger replacement. string
The location of the regional secret. eg us-central1 Used to find the parent resource to bind the IAM policy to. If not specified, the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no location is specified, it is taken from the provider configuration.
Project Changes to this property will trigger replacement. string
The ID of the project in which the resource belongs. If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
SecretId
This property is required.
Changes to this property will trigger replacement.
string
Location Changes to this property will trigger replacement. string
The location of the regional secret. eg us-central1 Used to find the parent resource to bind the IAM policy to. If not specified, the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no location is specified, it is taken from the provider configuration.
Project Changes to this property will trigger replacement. string
The ID of the project in which the resource belongs. If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
secretId
This property is required.
Changes to this property will trigger replacement.
String
location Changes to this property will trigger replacement. String
The location of the regional secret. eg us-central1 Used to find the parent resource to bind the IAM policy to. If not specified, the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no location is specified, it is taken from the provider configuration.
project Changes to this property will trigger replacement. String
The ID of the project in which the resource belongs. If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
secretId
This property is required.
Changes to this property will trigger replacement.
string
location Changes to this property will trigger replacement. string
The location of the regional secret. eg us-central1 Used to find the parent resource to bind the IAM policy to. If not specified, the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no location is specified, it is taken from the provider configuration.
project Changes to this property will trigger replacement. string
The ID of the project in which the resource belongs. If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
secret_id
This property is required.
Changes to this property will trigger replacement.
str
location Changes to this property will trigger replacement. str
The location of the regional secret. eg us-central1 Used to find the parent resource to bind the IAM policy to. If not specified, the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no location is specified, it is taken from the provider configuration.
project Changes to this property will trigger replacement. str
The ID of the project in which the resource belongs. If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
secretId
This property is required.
Changes to this property will trigger replacement.
String
location Changes to this property will trigger replacement. String
The location of the regional secret. eg us-central1 Used to find the parent resource to bind the IAM policy to. If not specified, the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no location is specified, it is taken from the provider configuration.
project Changes to this property will trigger replacement. String
The ID of the project in which the resource belongs. If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.

getRegionalSecretIamPolicy Result

The following output properties are available:

Etag string
(Computed) The etag of the IAM policy.
Id string
The provider-assigned unique ID for this managed resource.
Location string
PolicyData string
(Required only by gcp.secretmanager.RegionalSecretIamPolicy) The policy data generated by a gcp.organizations.getIAMPolicy data source.
Project string
SecretId string
Etag string
(Computed) The etag of the IAM policy.
Id string
The provider-assigned unique ID for this managed resource.
Location string
PolicyData string
(Required only by gcp.secretmanager.RegionalSecretIamPolicy) The policy data generated by a gcp.organizations.getIAMPolicy data source.
Project string
SecretId string
etag String
(Computed) The etag of the IAM policy.
id String
The provider-assigned unique ID for this managed resource.
location String
policyData String
(Required only by gcp.secretmanager.RegionalSecretIamPolicy) The policy data generated by a gcp.organizations.getIAMPolicy data source.
project String
secretId String
etag string
(Computed) The etag of the IAM policy.
id string
The provider-assigned unique ID for this managed resource.
location string
policyData string
(Required only by gcp.secretmanager.RegionalSecretIamPolicy) The policy data generated by a gcp.organizations.getIAMPolicy data source.
project string
secretId string
etag str
(Computed) The etag of the IAM policy.
id str
The provider-assigned unique ID for this managed resource.
location str
policy_data str
(Required only by gcp.secretmanager.RegionalSecretIamPolicy) The policy data generated by a gcp.organizations.getIAMPolicy data source.
project str
secret_id str
etag String
(Computed) The etag of the IAM policy.
id String
The provider-assigned unique ID for this managed resource.
location String
policyData String
(Required only by gcp.secretmanager.RegionalSecretIamPolicy) The policy data generated by a gcp.organizations.getIAMPolicy data source.
project String
secretId String

Package Details

Repository
Google Cloud (GCP) Classic pulumi/pulumi-gcp
License
Apache-2.0
Notes
This Pulumi package is based on the google-beta Terraform Provider.
Google Cloud v8.14.0 published on Wednesday, Jan 15, 2025 by Pulumi
pulumi/pulumi-gcp