ucloud.getIamPolicyDocument

import * as pulumi from "@pulumi/pulumi";
import * as ucloud from "@pulumi/ucloud";

const fooIamPolicyDocument = ucloud.getIamPolicyDocument({
    version: "1",
    statements: [
        {
            effect: "Allow",
            actions: [
                "uhost:TerminateUHostInstance",
                "uhost:DeleteIsolationGroup",
            ],
            resources: ["ucs:uhost:*:<company-id>:instance/uhost-xxx"],
        },
        {
            effect: "Allow",
            actions: ["uhost:DescribeUHostInstance"],
            resources: ["*"],
        },
    ],
});
const fooIamPolicy = new ucloud.IamPolicy("fooIamPolicy", {
    comment: "comment",
    policy: fooIamPolicyDocument.then(fooIamPolicyDocument => fooIamPolicyDocument.json),
    scope: "Project",
});

import pulumi
import pulumi_ucloud as ucloud

foo_iam_policy_document = ucloud.get_iam_policy_document(version="1",
    statements=[
        {
            "effect": "Allow",
            "actions": [
                "uhost:TerminateUHostInstance",
                "uhost:DeleteIsolationGroup",
            ],
            "resources": ["ucs:uhost:*:<company-id>:instance/uhost-xxx"],
        },
        {
            "effect": "Allow",
            "actions": ["uhost:DescribeUHostInstance"],
            "resources": ["*"],
        },
    ])
foo_iam_policy = ucloud.IamPolicy("fooIamPolicy",
    comment="comment",
    policy=foo_iam_policy_document.json,
    scope="Project")

package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/ucloud/ucloud"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		fooIamPolicyDocument, err := ucloud.GetIamPolicyDocument(ctx, &ucloud.GetIamPolicyDocumentArgs{
			Version: pulumi.StringRef("1"),
			Statements: []ucloud.GetIamPolicyDocumentStatement{
				{
					Effect: pulumi.StringRef("Allow"),
					Actions: []string{
						"uhost:TerminateUHostInstance",
						"uhost:DeleteIsolationGroup",
					},
					Resources: []string{
						"ucs:uhost:*:<company-id>:instance/uhost-xxx",
					},
				},
				{
					Effect: pulumi.StringRef("Allow"),
					Actions: []string{
						"uhost:DescribeUHostInstance",
					},
					Resources: []string{
						"*",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = ucloud.NewIamPolicy(ctx, "fooIamPolicy", &ucloud.IamPolicyArgs{
			Comment: pulumi.String("comment"),
			Policy:  pulumi.String(fooIamPolicyDocument.Json),
			Scope:   pulumi.String("Project"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Ucloud = Pulumi.Ucloud;

return await Deployment.RunAsync(() => 
{
    var fooIamPolicyDocument = Ucloud.GetIamPolicyDocument.Invoke(new()
    {
        Version = "1",
        Statements = new[]
        {
            new Ucloud.Inputs.GetIamPolicyDocumentStatementInputArgs
            {
                Effect = "Allow",
                Actions = new[]
                {
                    "uhost:TerminateUHostInstance",
                    "uhost:DeleteIsolationGroup",
                },
                Resources = new[]
                {
                    "ucs:uhost:*:<company-id>:instance/uhost-xxx",
                },
            },
            new Ucloud.Inputs.GetIamPolicyDocumentStatementInputArgs
            {
                Effect = "Allow",
                Actions = new[]
                {
                    "uhost:DescribeUHostInstance",
                },
                Resources = new[]
                {
                    "*",
                },
            },
        },
    });

    var fooIamPolicy = new Ucloud.IamPolicy("fooIamPolicy", new()
    {
        Comment = "comment",
        Policy = fooIamPolicyDocument.Apply(getIamPolicyDocumentResult => getIamPolicyDocumentResult.Json),
        Scope = "Project",
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.ucloud.UcloudFunctions;
import com.pulumi.ucloud.inputs.GetIamPolicyDocumentArgs;
import com.pulumi.ucloud.IamPolicy;
import com.pulumi.ucloud.IamPolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var fooIamPolicyDocument = UcloudFunctions.getIamPolicyDocument(GetIamPolicyDocumentArgs.builder()
            .version("1")
            .statements(            
                GetIamPolicyDocumentStatementArgs.builder()
                    .effect("Allow")
                    .actions(                    
                        "uhost:TerminateUHostInstance",
                        "uhost:DeleteIsolationGroup")
                    .resources("ucs:uhost:*:<company-id>:instance/uhost-xxx")
                    .build(),
                GetIamPolicyDocumentStatementArgs.builder()
                    .effect("Allow")
                    .actions("uhost:DescribeUHostInstance")
                    .resources("*")
                    .build())
            .build());

        var fooIamPolicy = new IamPolicy("fooIamPolicy", IamPolicyArgs.builder()
            .comment("comment")
            .policy(fooIamPolicyDocument.applyValue(getIamPolicyDocumentResult -> getIamPolicyDocumentResult.json()))
            .scope("Project")
            .build());

    }
}

resources:
  fooIamPolicy:
    type: ucloud:IamPolicy
    properties:
      comment: comment
      policy: ${fooIamPolicyDocument.json}
      scope: Project
variables:
  fooIamPolicyDocument:
    fn::invoke:
      function: ucloud:getIamPolicyDocument
      arguments:
        version: '1'
        statements:
          - effect: Allow
            actions:
              - uhost:TerminateUHostInstance
              - uhost:DeleteIsolationGroup
            resources:
              - ucs:uhost:*:<company-id>:instance/uhost-xxx
          - effect: Allow
            actions:
              - uhost:DescribeUHostInstance
            resources:
              - '*'

function getIamPolicyDocument(args: GetIamPolicyDocumentArgs, opts?: InvokeOptions): Promise<GetIamPolicyDocumentResult>
function getIamPolicyDocumentOutput(args: GetIamPolicyDocumentOutputArgs, opts?: InvokeOptions): Output<GetIamPolicyDocumentResult>

def get_iam_policy_document(id: Optional[str] = None,
                            output_file: Optional[str] = None,
                            statements: Optional[Sequence[GetIamPolicyDocumentStatement]] = None,
                            version: Optional[str] = None,
                            opts: Optional[InvokeOptions] = None) -> GetIamPolicyDocumentResult
def get_iam_policy_document_output(id: Optional[pulumi.Input[str]] = None,
                            output_file: Optional[pulumi.Input[str]] = None,
                            statements: Optional[pulumi.Input[Sequence[pulumi.Input[GetIamPolicyDocumentStatementArgs]]]] = None,
                            version: Optional[pulumi.Input[str]] = None,
                            opts: Optional[InvokeOptions] = None) -> Output[GetIamPolicyDocumentResult]

func GetIamPolicyDocument(ctx *Context, args *GetIamPolicyDocumentArgs, opts ...InvokeOption) (*GetIamPolicyDocumentResult, error)
func GetIamPolicyDocumentOutput(ctx *Context, args *GetIamPolicyDocumentOutputArgs, opts ...InvokeOption) GetIamPolicyDocumentResultOutput

public static class GetIamPolicyDocument 
{
    public static Task<GetIamPolicyDocumentResult> InvokeAsync(GetIamPolicyDocumentArgs args, InvokeOptions? opts = null)
    public static Output<GetIamPolicyDocumentResult> Invoke(GetIamPolicyDocumentInvokeArgs args, InvokeOptions? opts = null)
}

public static CompletableFuture<GetIamPolicyDocumentResult> getIamPolicyDocument(GetIamPolicyDocumentArgs args, InvokeOptions options)
public static Output<GetIamPolicyDocumentResult> getIamPolicyDocument(GetIamPolicyDocumentArgs args, InvokeOptions options)

fn::invoke:
  function: ucloud:index/getIamPolicyDocument:getIamPolicyDocument
  arguments:
    # arguments dictionary