Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Dynatrace
  3. API Docs
  4. getIamPolicies
Dynatrace v0.27.0 published on Friday, Mar 21, 2025 by Pulumiverse
lbrlabs/pulumi-dynatrace

dynatrace.getIamPolicies

Explore with Pulumi AI

Dynatrace v0.27.0 published on Friday, Mar 21, 2025 by Pulumiverse
lbrlabs/pulumi-dynatrace

Dynatrace SaaS only

To utilize this resource, please define the environment variables DT_CLIENT_ID, DT_CLIENT_SECRET, DT_ACCOUNT_ID with an OAuth client including the following permissions: Allow IAM policy configuration for environments (iam-policies-management) and View environments (account-env-read).

You can use the attributes environments, accounts and globals to refine which policies you want to query for.

  • The attribute global indicates whether the results should also contain global (Dynatrace defined) policies
  • The attribute environment is an array of environment IDs.
  • The results won’t contain any environment specific policies if the attribute environments has been omitted
  • The results will contain policies for all environments reachable via the given credentials if environments is set to ["*"]
  • The attribute accounts is an array of accounts UUIDs. Set this to ["*"] if you want to receive account specific policies.
  • The results won’t contain any account specific policies if the attribute accounts has been omitted

Example Usage

The following example queries for polices of all environments reachable via the given credentials, all accounts and all global policies.

import * as pulumi from "@pulumi/pulumi";
import * as dynatrace from "@pulumi/dynatrace";

const all = dynatrace.getIamPolicies({
    accounts: ["*"],
    environments: ["*"],
    global: true,
});
Copy
import pulumi
import pulumi_dynatrace as dynatrace

all = dynatrace.get_iam_policies(accounts=["*"],
    environments=["*"],
    global_=True)
Copy
package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumiverse/pulumi-dynatrace/sdk/go/dynatrace"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := dynatrace.GetIamPolicies(ctx, &dynatrace.GetIamPoliciesArgs{
			Accounts: []string{
				"*",
			},
			Environments: []string{
				"*",
			},
			Global: pulumi.BoolRef(true),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Dynatrace = Pulumi.Dynatrace;

return await Deployment.RunAsync(() => 
{
    var all = Dynatrace.GetIamPolicies.Invoke(new()
    {
        Accounts = new[]
        {
            "*",
        },
        Environments = new[]
        {
            "*",
        },
        Global = true,
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.dynatrace.DynatraceFunctions;
import com.pulumi.dynatrace.inputs.GetIamPoliciesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var all = DynatraceFunctions.getIamPolicies(GetIamPoliciesArgs.builder()
            .accounts("*")
            .environments("*")
            .global(true)
            .build());

    }
}
Copy
variables:
  all:
    fn::invoke:
      function: dynatrace:getIamPolicies
      arguments:
        accounts:
          - '*'
        environments:
          - '*'
        global: true
Copy

The following example queries for policies that are defined for the environment with the id abce234. No account specific or global policies will be included.

import * as pulumi from "@pulumi/pulumi";
import * as dynatrace from "@pulumi/dynatrace";

const all = dynatrace.getIamPolicies({
    environments: ["abce234"],
    global: false,
});
Copy
import pulumi
import pulumi_dynatrace as dynatrace

all = dynatrace.get_iam_policies(environments=["abce234"],
    global_=False)
Copy
package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumiverse/pulumi-dynatrace/sdk/go/dynatrace"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := dynatrace.GetIamPolicies(ctx, &dynatrace.GetIamPoliciesArgs{
			Environments: []string{
				"abce234",
			},
			Global: pulumi.BoolRef(false),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Dynatrace = Pulumi.Dynatrace;

return await Deployment.RunAsync(() => 
{
    var all = Dynatrace.GetIamPolicies.Invoke(new()
    {
        Environments = new[]
        {
            "abce234",
        },
        Global = false,
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.dynatrace.DynatraceFunctions;
import com.pulumi.dynatrace.inputs.GetIamPoliciesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var all = DynatraceFunctions.getIamPolicies(GetIamPoliciesArgs.builder()
            .environments("abce234")
            .global(false)
            .build());

    }
}
Copy
variables:
  all:
    fn::invoke:
      function: dynatrace:getIamPolicies
      arguments:
        environments:
          - abce234
        global: false
Copy

Example Output

import * as pulumi from "@pulumi/pulumi";
import * as dynatrace from "@pulumi/dynatrace";

const all = dynatrace.getIamPolicies({
    environments: ["*"],
    accounts: ["*"],
    global: true,
});
export const policies = all.then(all => all.policies);
Copy
import pulumi
import pulumi_dynatrace as dynatrace

all = dynatrace.get_iam_policies(environments=["*"],
    accounts=["*"],
    global_=True)
pulumi.export("policies", all.policies)
Copy
package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumiverse/pulumi-dynatrace/sdk/go/dynatrace"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		all, err := dynatrace.GetIamPolicies(ctx, &dynatrace.GetIamPoliciesArgs{
			Environments: []string{
				"*",
			},
			Accounts: []string{
				"*",
			},
			Global: pulumi.BoolRef(true),
		}, nil)
		if err != nil {
			return err
		}
		ctx.Export("policies", all.Policies)
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Dynatrace = Pulumi.Dynatrace;

return await Deployment.RunAsync(() => 
{
    var all = Dynatrace.GetIamPolicies.Invoke(new()
    {
        Environments = new[]
        {
            "*",
        },
        Accounts = new[]
        {
            "*",
        },
        Global = true,
    });

    return new Dictionary<string, object?>
    {
        ["policies"] = all.Apply(getIamPoliciesResult => getIamPoliciesResult.Policies),
    };
});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.dynatrace.DynatraceFunctions;
import com.pulumi.dynatrace.inputs.GetIamPoliciesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var all = DynatraceFunctions.getIamPolicies(GetIamPoliciesArgs.builder()
            .environments("*")
            .accounts("*")
            .global(true)
            .build());

        ctx.export("policies", all.applyValue(getIamPoliciesResult -> getIamPoliciesResult.policies()));
    }
}
Copy
variables:
  all:
    fn::invoke:
      function: dynatrace:getIamPolicies
      arguments:
        environments:
          - '*'
        accounts:
          - '*'
        global: true
outputs:
  policies: ${all.policies}
Copy
Changes to Outputs:
  + policies = [
      + {
          + account     = "########-86d8-####-88bd-############"
          + environment = ""
          + global      = false
          + id          = "########-7a6a-####-a43e-#############-#account#-#########-86d8-####-88bd-############"      
          + name        = "storage:bucket-definitions:delete"
          + uuid        = "########-7a6a-####-a43e-############"
        },
        ...
      + {
          + account     = ""
          + environment = "#######"
          + global      = false
          + id          = "########-c7d6-####-878c-#############-#environment#-########"
          + name        = "some-policy"
          + uuid        = "########-c7d6-####-878c-############"
        }, 
        ...
      + {
          + account     = ""
          + environment = ""
          + global      = true
          + id          = "########-6852-####-9d1b-#############-#global#-#global"
          + name        = "Storage Events Read"
          + uuid        = "########-6852-####-9d1b-############"
        },               
    ]

Using getIamPolicies

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getIamPolicies(args: GetIamPoliciesArgs, opts?: InvokeOptions): Promise<GetIamPoliciesResult>
function getIamPoliciesOutput(args: GetIamPoliciesOutputArgs, opts?: InvokeOptions): Output<GetIamPoliciesResult>
Copy
def get_iam_policies(accounts: Optional[Sequence[str]] = None,
                     environments: Optional[Sequence[str]] = None,
                     global_: Optional[bool] = None,
                     groups: Optional[Sequence[str]] = None,
                     opts: Optional[InvokeOptions] = None) -> GetIamPoliciesResult
def get_iam_policies_output(accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                     environments: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                     global_: Optional[pulumi.Input[bool]] = None,
                     groups: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                     opts: Optional[InvokeOptions] = None) -> Output[GetIamPoliciesResult]
Copy
func GetIamPolicies(ctx *Context, args *GetIamPoliciesArgs, opts ...InvokeOption) (*GetIamPoliciesResult, error)
func GetIamPoliciesOutput(ctx *Context, args *GetIamPoliciesOutputArgs, opts ...InvokeOption) GetIamPoliciesResultOutput
Copy

> Note: This function is named GetIamPolicies in the Go SDK.

public static class GetIamPolicies 
{
    public static Task<GetIamPoliciesResult> InvokeAsync(GetIamPoliciesArgs args, InvokeOptions? opts = null)
    public static Output<GetIamPoliciesResult> Invoke(GetIamPoliciesInvokeArgs args, InvokeOptions? opts = null)
}
Copy
public static CompletableFuture<GetIamPoliciesResult> getIamPolicies(GetIamPoliciesArgs args, InvokeOptions options)
public static Output<GetIamPoliciesResult> getIamPolicies(GetIamPoliciesArgs args, InvokeOptions options)
Copy
fn::invoke:
  function: dynatrace:index/getIamPolicies:getIamPolicies
  arguments:
    # arguments dictionary
Copy

The following arguments are supported:

Accounts List<string>
The results will contain policies defined for the given accountID. If one of the entries contains * the results will contain policies for all accounts
Environments List<string>
The results will contain policies defined for the given environments. If one of the entries contains * the results will contain policies for all environments
Global bool
If true the results will contain global policies
Groups List<string>
The results will only contain policies that are bound to the specified groups. Omit this attribute if you want to retrieve all policies
Accounts []string
The results will contain policies defined for the given accountID. If one of the entries contains * the results will contain policies for all accounts
Environments []string
The results will contain policies defined for the given environments. If one of the entries contains * the results will contain policies for all environments
Global bool
If true the results will contain global policies
Groups []string
The results will only contain policies that are bound to the specified groups. Omit this attribute if you want to retrieve all policies
accounts List<String>
The results will contain policies defined for the given accountID. If one of the entries contains * the results will contain policies for all accounts
environments List<String>
The results will contain policies defined for the given environments. If one of the entries contains * the results will contain policies for all environments
global Boolean
If true the results will contain global policies
groups List<String>
The results will only contain policies that are bound to the specified groups. Omit this attribute if you want to retrieve all policies
accounts string[]
The results will contain policies defined for the given accountID. If one of the entries contains * the results will contain policies for all accounts
environments string[]
The results will contain policies defined for the given environments. If one of the entries contains * the results will contain policies for all environments
global boolean
If true the results will contain global policies
groups string[]
The results will only contain policies that are bound to the specified groups. Omit this attribute if you want to retrieve all policies
accounts Sequence[str]
The results will contain policies defined for the given accountID. If one of the entries contains * the results will contain policies for all accounts
environments Sequence[str]
The results will contain policies defined for the given environments. If one of the entries contains * the results will contain policies for all environments
global_ bool
If true the results will contain global policies
groups Sequence[str]
The results will only contain policies that are bound to the specified groups. Omit this attribute if you want to retrieve all policies
accounts List<String>
The results will contain policies defined for the given accountID. If one of the entries contains * the results will contain policies for all accounts
environments List<String>
The results will contain policies defined for the given environments. If one of the entries contains * the results will contain policies for all environments
global Boolean
If true the results will contain global policies
groups List<String>
The results will only contain policies that are bound to the specified groups. Omit this attribute if you want to retrieve all policies

getIamPolicies Result

The following output properties are available:

Id string
The provider-assigned unique ID for this managed resource.
Policies List<Pulumiverse.Dynatrace.Outputs.GetIamPoliciesPolicy>
Accounts List<string>
The results will contain policies defined for the given accountID. If one of the entries contains * the results will contain policies for all accounts
Environments List<string>
The results will contain policies defined for the given environments. If one of the entries contains * the results will contain policies for all environments
Global bool
If true the results will contain global policies
Groups List<string>
The results will only contain policies that are bound to the specified groups. Omit this attribute if you want to retrieve all policies
Id string
The provider-assigned unique ID for this managed resource.
Policies []GetIamPoliciesPolicy
Accounts []string
The results will contain policies defined for the given accountID. If one of the entries contains * the results will contain policies for all accounts
Environments []string
The results will contain policies defined for the given environments. If one of the entries contains * the results will contain policies for all environments
Global bool
If true the results will contain global policies
Groups []string
The results will only contain policies that are bound to the specified groups. Omit this attribute if you want to retrieve all policies
id String
The provider-assigned unique ID for this managed resource.
policies List<GetIamPoliciesPolicy>
accounts List<String>
The results will contain policies defined for the given accountID. If one of the entries contains * the results will contain policies for all accounts
environments List<String>
The results will contain policies defined for the given environments. If one of the entries contains * the results will contain policies for all environments
global Boolean
If true the results will contain global policies
groups List<String>
The results will only contain policies that are bound to the specified groups. Omit this attribute if you want to retrieve all policies
id string
The provider-assigned unique ID for this managed resource.
policies GetIamPoliciesPolicy[]
accounts string[]
The results will contain policies defined for the given accountID. If one of the entries contains * the results will contain policies for all accounts
environments string[]
The results will contain policies defined for the given environments. If one of the entries contains * the results will contain policies for all environments
global boolean
If true the results will contain global policies
groups string[]
The results will only contain policies that are bound to the specified groups. Omit this attribute if you want to retrieve all policies
id str
The provider-assigned unique ID for this managed resource.
policies Sequence[GetIamPoliciesPolicy]
accounts Sequence[str]
The results will contain policies defined for the given accountID. If one of the entries contains * the results will contain policies for all accounts
environments Sequence[str]
The results will contain policies defined for the given environments. If one of the entries contains * the results will contain policies for all environments
global_ bool
If true the results will contain global policies
groups Sequence[str]
The results will only contain policies that are bound to the specified groups. Omit this attribute if you want to retrieve all policies
id String
The provider-assigned unique ID for this managed resource.
policies List<Property Map>
accounts List<String>
The results will contain policies defined for the given accountID. If one of the entries contains * the results will contain policies for all accounts
environments List<String>
The results will contain policies defined for the given environments. If one of the entries contains * the results will contain policies for all environments
global Boolean
If true the results will contain global policies
groups List<String>
The results will only contain policies that are bound to the specified groups. Omit this attribute if you want to retrieve all policies

Supporting Types

GetIamPoliciesPolicy

Id This property is required. string
Name This property is required. string
The name of the policy
Uuid This property is required. string
The UUID of the policy
Account string
The account UUID the policy is defined for
Environment string
The environment ID the policy is defined for
Global bool
true if this is a global policy`
Id This property is required. string
Name This property is required. string
The name of the policy
Uuid This property is required. string
The UUID of the policy
Account string
The account UUID the policy is defined for
Environment string
The environment ID the policy is defined for
Global bool
true if this is a global policy`
id This property is required. String
name This property is required. String
The name of the policy
uuid This property is required. String
The UUID of the policy
account String
The account UUID the policy is defined for
environment String
The environment ID the policy is defined for
global Boolean
true if this is a global policy`
id This property is required. string
name This property is required. string
The name of the policy
uuid This property is required. string
The UUID of the policy
account string
The account UUID the policy is defined for
environment string
The environment ID the policy is defined for
global boolean
true if this is a global policy`
id This property is required. str
name This property is required. str
The name of the policy
uuid This property is required. str
The UUID of the policy
account str
The account UUID the policy is defined for
environment str
The environment ID the policy is defined for
global_ bool
true if this is a global policy`
id This property is required. String
name This property is required. String
The name of the policy
uuid This property is required. String
The UUID of the policy
account String
The account UUID the policy is defined for
environment String
The environment ID the policy is defined for
global Boolean
true if this is a global policy`

Package Details

Repository
dynatrace pulumiverse/pulumi-dynatrace
License
Apache-2.0
Notes
This Pulumi package is based on the dynatrace Terraform Provider.
Dynatrace v0.27.0 published on Friday, Mar 21, 2025 by Pulumiverse
lbrlabs/pulumi-dynatrace