» yandex_resourcemanager_cloud_iam_binding

Allows creation and management of a single binding within IAM policy for an existing Yandex Resource Manager cloud.

» Example Usage 

data "yandex_resourcemanager_cloud" "project1" {
  name = "Project 1"
}

resource "yandex_resourcemanager_cloud_iam_binding" "admin" {
  cloud_id = "${data.yandex_resourcemanager_cloud.project1.id}"

  role = "editor"

  members = [
    "userAccount:some_user_id",
  ]
}

» Argument Reference

The following arguments are supported:

  • cloud_id - (Required) ID of the cloud to attach the policy to.

  • role - (Required) The role that should be assigned. Only one yandex_resourcemanager_cloud_iam_binding can be used per role.

  • members - (Required) An array of identities that will be granted the privilege in the role. Each entry can have one of the following values:

    • userAccount:{user_id}: A unique user ID that represents a specific Yandex account.
    • serviceAccount:{service_account_id}: A unique service account ID.

» Import

IAM binding imports use space-delimited identifiers; first the resource in question and then the role. These bindings can be imported using the cloud_id and role, e.g.

$ terraform import yandex_resourcemanager_cloud_iam_binding.viewer "cloud_id viewer"