Docs Packages
  1. Packages
  2. Azure Classic
  3. API Docs
  4. keyvault
  5. getManagedHardwareSecurityModuleRoleDefinition

We recommend using Azure Native.

Azure Classic v5.81.0 published on Monday, Jun 24, 2024 by Pulumi
pulumi/pulumi-azure

azure.keyvault.getManagedHardwareSecurityModuleRoleDefinition

Explore with Pulumi AI

azure logo

We recommend using Azure Native.

Azure Classic v5.81.0 published on Monday, Jun 24, 2024 by Pulumi
pulumi/pulumi-azure

    Use this data source to access information about an existing KeyVault Role Definition.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";

const example = azure.keyvault.getManagedHardwareSecurityModuleRoleDefinition({
    vaultBaseUrl: test.hsmUri,
    name: "21dbd100-6940-42c2-9190-5d6cb909625b",
});
export const id = example.then(example => example.resourceManagerId);

    import pulumi
import pulumi_azure as azure

example = azure.keyvault.get_managed_hardware_security_module_role_definition(vault_base_url=test["hsmUri"],
    name="21dbd100-6940-42c2-9190-5d6cb909625b")
pulumi.export("id", example.resource_manager_id)

    package main

import (
	"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/keyvault"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := keyvault.LookupManagedHardwareSecurityModuleRoleDefinition(ctx, &keyvault.LookupManagedHardwareSecurityModuleRoleDefinitionArgs{
			VaultBaseUrl: pulumi.StringRef(test.HsmUri),
			Name:         "21dbd100-6940-42c2-9190-5d6cb909625b",
		}, nil)
		if err != nil {
			return err
		}
		ctx.Export("id", example.ResourceManagerId)
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;

return await Deployment.RunAsync(() => 
{
    var example = Azure.KeyVault.GetManagedHardwareSecurityModuleRoleDefinition.Invoke(new()
    {
        VaultBaseUrl = test.HsmUri,
        Name = "21dbd100-6940-42c2-9190-5d6cb909625b",
    });

    return new Dictionary<string, object?>
    {
        ["id"] = example.Apply(getManagedHardwareSecurityModuleRoleDefinitionResult => getManagedHardwareSecurityModuleRoleDefinitionResult.ResourceManagerId),
    };
});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.keyvault.KeyvaultFunctions;
import com.pulumi.azure.keyvault.inputs.GetManagedHardwareSecurityModuleRoleDefinitionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var example = KeyvaultFunctions.getManagedHardwareSecurityModuleRoleDefinition(GetManagedHardwareSecurityModuleRoleDefinitionArgs.builder()
            .vaultBaseUrl(test.hsmUri())
            .name("21dbd100-6940-42c2-9190-5d6cb909625b")
            .build());

        ctx.export("id", example.applyValue(getManagedHardwareSecurityModuleRoleDefinitionResult -> getManagedHardwareSecurityModuleRoleDefinitionResult.resourceManagerId()));
    }
}

    variables:
  example:
    fn::invoke:
      Function: azure:keyvault:getManagedHardwareSecurityModuleRoleDefinition
      Arguments:
        vaultBaseUrl: ${test.hsmUri}
        name: 21dbd100-6940-42c2-9190-5d6cb909625b
outputs:
  id: ${example.resourceManagerId}

    Using getManagedHardwareSecurityModuleRoleDefinition

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getManagedHardwareSecurityModuleRoleDefinition(args: GetManagedHardwareSecurityModuleRoleDefinitionArgs, opts?: InvokeOptions): Promise<GetManagedHardwareSecurityModuleRoleDefinitionResult>
function getManagedHardwareSecurityModuleRoleDefinitionOutput(args: GetManagedHardwareSecurityModuleRoleDefinitionOutputArgs, opts?: InvokeOptions): Output<GetManagedHardwareSecurityModuleRoleDefinitionResult>
    def get_managed_hardware_security_module_role_definition(managed_hsm_id: Optional[str] = None,
                                                         name: Optional[str] = None,
                                                         vault_base_url: Optional[str] = None,
                                                         opts: Optional[InvokeOptions] = None) -> GetManagedHardwareSecurityModuleRoleDefinitionResult
def get_managed_hardware_security_module_role_definition_output(managed_hsm_id: Optional[pulumi.Input[str]] = None,
                                                         name: Optional[pulumi.Input[str]] = None,
                                                         vault_base_url: Optional[pulumi.Input[str]] = None,
                                                         opts: Optional[InvokeOptions] = None) -> Output[GetManagedHardwareSecurityModuleRoleDefinitionResult]
    func LookupManagedHardwareSecurityModuleRoleDefinition(ctx *Context, args *LookupManagedHardwareSecurityModuleRoleDefinitionArgs, opts ...InvokeOption) (*LookupManagedHardwareSecurityModuleRoleDefinitionResult, error)
func LookupManagedHardwareSecurityModuleRoleDefinitionOutput(ctx *Context, args *LookupManagedHardwareSecurityModuleRoleDefinitionOutputArgs, opts ...InvokeOption) LookupManagedHardwareSecurityModuleRoleDefinitionResultOutput

    > Note: This function is named LookupManagedHardwareSecurityModuleRoleDefinition in the Go SDK.

    public static class GetManagedHardwareSecurityModuleRoleDefinition 
{
    public static Task<GetManagedHardwareSecurityModuleRoleDefinitionResult> InvokeAsync(GetManagedHardwareSecurityModuleRoleDefinitionArgs args, InvokeOptions? opts = null)
    public static Output<GetManagedHardwareSecurityModuleRoleDefinitionResult> Invoke(GetManagedHardwareSecurityModuleRoleDefinitionInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetManagedHardwareSecurityModuleRoleDefinitionResult> getManagedHardwareSecurityModuleRoleDefinition(GetManagedHardwareSecurityModuleRoleDefinitionArgs args, InvokeOptions options)
// Output-based functions aren't available in Java yet

    fn::invoke:
  function: azure:keyvault/getManagedHardwareSecurityModuleRoleDefinition:getManagedHardwareSecurityModuleRoleDefinition
  arguments:
    # arguments dictionary

    The following arguments are supported:

    Name string
    The name in UUID notation of this KeyVault Role Definition.
    ManagedHsmId string
    VaultBaseUrl string
    Specify the base URL of the Managed HSM resource.
    Name string
    The name in UUID notation of this KeyVault Role Definition.
    ManagedHsmId string
    VaultBaseUrl string
    Specify the base URL of the Managed HSM resource.
    name String
    The name in UUID notation of this KeyVault Role Definition.
    managedHsmId String
    vaultBaseUrl String
    Specify the base URL of the Managed HSM resource.
    name string
    The name in UUID notation of this KeyVault Role Definition.
    managedHsmId string
    vaultBaseUrl string
    Specify the base URL of the Managed HSM resource.
    name str
    The name in UUID notation of this KeyVault Role Definition.
    managed_hsm_id str
    vault_base_url str
    Specify the base URL of the Managed HSM resource.
    name String
    The name in UUID notation of this KeyVault Role Definition.
    managedHsmId String
    vaultBaseUrl String
    Specify the base URL of the Managed HSM resource.

    getManagedHardwareSecurityModuleRoleDefinition Result

    The following output properties are available:

    AssignableScopes List<string>
    A list of assignable role scope. Possible values are / and /keys.
    Description string
    A text description of this role definition.
    Id string
    The provider-assigned unique ID for this managed resource.
    ManagedHsmId string
    Name string
    Permissions List<GetManagedHardwareSecurityModuleRoleDefinitionPermission>
    A permission block as defined below.
    ResourceManagerId string
    The ID of the role definition resource without base url.
    RoleName string
    The role name of the role definition.
    RoleType string
    The type of the role definition. Possible values are AKVBuiltInRole and CustomRole.
    VaultBaseUrl string
    AssignableScopes []string
    A list of assignable role scope. Possible values are / and /keys.
    Description string
    A text description of this role definition.
    Id string
    The provider-assigned unique ID for this managed resource.
    ManagedHsmId string
    Name string
    Permissions []GetManagedHardwareSecurityModuleRoleDefinitionPermission
    A permission block as defined below.
    ResourceManagerId string
    The ID of the role definition resource without base url.
    RoleName string
    The role name of the role definition.
    RoleType string
    The type of the role definition. Possible values are AKVBuiltInRole and CustomRole.
    VaultBaseUrl string
    assignableScopes List<String>
    A list of assignable role scope. Possible values are / and /keys.
    description String
    A text description of this role definition.
    id String
    The provider-assigned unique ID for this managed resource.
    managedHsmId String
    name String
    permissions List<GetManagedHardwareSecurityModuleRoleDefinitionPermission>
    A permission block as defined below.
    resourceManagerId String
    The ID of the role definition resource without base url.
    roleName String
    The role name of the role definition.
    roleType String
    The type of the role definition. Possible values are AKVBuiltInRole and CustomRole.
    vaultBaseUrl String
    assignableScopes string[]
    A list of assignable role scope. Possible values are / and /keys.
    description string
    A text description of this role definition.
    id string
    The provider-assigned unique ID for this managed resource.
    managedHsmId string
    name string
    permissions GetManagedHardwareSecurityModuleRoleDefinitionPermission[]
    A permission block as defined below.
    resourceManagerId string
    The ID of the role definition resource without base url.
    roleName string
    The role name of the role definition.
    roleType string
    The type of the role definition. Possible values are AKVBuiltInRole and CustomRole.
    vaultBaseUrl string
    assignable_scopes Sequence[str]
    A list of assignable role scope. Possible values are / and /keys.
    description str
    A text description of this role definition.
    id str
    The provider-assigned unique ID for this managed resource.
    managed_hsm_id str
    name str
    permissions Sequence[GetManagedHardwareSecurityModuleRoleDefinitionPermission]
    A permission block as defined below.
    resource_manager_id str
    The ID of the role definition resource without base url.
    role_name str
    The role name of the role definition.
    role_type str
    The type of the role definition. Possible values are AKVBuiltInRole and CustomRole.
    vault_base_url str
    assignableScopes List<String>
    A list of assignable role scope. Possible values are / and /keys.
    description String
    A text description of this role definition.
    id String
    The provider-assigned unique ID for this managed resource.
    managedHsmId String
    name String
    permissions List<Property Map>
    A permission block as defined below.
    resourceManagerId String
    The ID of the role definition resource without base url.
    roleName String
    The role name of the role definition.
    roleType String
    The type of the role definition. Possible values are AKVBuiltInRole and CustomRole.
    vaultBaseUrl String

    Supporting Types

    GetManagedHardwareSecurityModuleRoleDefinitionPermission

    Actions List<string>
    A list of action permission granted.
    DataActions List<string>
    A list of data action permission granted.
    NotActions List<string>
    A list of action permission excluded (but not denied).
    NotDataActions List<string>
    (Optional) A list of data action permission granted.
    Actions []string
    A list of action permission granted.
    DataActions []string
    A list of data action permission granted.
    NotActions []string
    A list of action permission excluded (but not denied).
    NotDataActions []string
    (Optional) A list of data action permission granted.
    actions List<String>
    A list of action permission granted.
    dataActions List<String>
    A list of data action permission granted.
    notActions List<String>
    A list of action permission excluded (but not denied).
    notDataActions List<String>
    (Optional) A list of data action permission granted.
    actions string[]
    A list of action permission granted.
    dataActions string[]
    A list of data action permission granted.
    notActions string[]
    A list of action permission excluded (but not denied).
    notDataActions string[]
    (Optional) A list of data action permission granted.
    actions Sequence[str]
    A list of action permission granted.
    data_actions Sequence[str]
    A list of data action permission granted.
    not_actions Sequence[str]
    A list of action permission excluded (but not denied).
    not_data_actions Sequence[str]
    (Optional) A list of data action permission granted.
    actions List<String>
    A list of action permission granted.
    dataActions List<String>
    A list of data action permission granted.
    notActions List<String>
    A list of action permission excluded (but not denied).
    notDataActions List<String>
    (Optional) A list of data action permission granted.

    Package Details

    Repository
    Azure Classic pulumi/pulumi-azure
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the azurerm Terraform Provider.
    azure logo

    We recommend using Azure Native.

    Azure Classic v5.81.0 published on Monday, Jun 24, 2024 by Pulumi
    pulumi/pulumi-azure