yandex_serverless_workflow_iam_binding (Resource)
Manages the members of a single IAM role on an existing workflow.
On creation, the specified members are added to the role without removing existing members. On update, the resource replaces the members of the previously managed role with the configured bindings. On deletion, it removes the managed role from all of its members, including those not listed in this resource. Other roles on the target resource are preserved.
Warning
Warning: Updating or deleting yandex_serverless_workflow_iam_binding can revoke access granted outside this resource, including access granted through *_iam_member, the management console, CLI or API. Those subjects are not tracked in this resource's Terraform state and are not shown in its normal plan diff. The provider attempts to list affected subjects in a separate warning during planning when it can read the current access bindings. An absent warning does not guarantee that no other subjects will lose access.
Warning
Only one yandex_serverless_workflow_iam_binding resource may manage a given role on a given workflow. Do not use *_iam_binding and *_iam_member for the same role on the same target resource: they will conflict over the role's members. They can be used together for different roles. Use *_iam_member to manage an individual member while preserving other members of the role.
Arguments & Attributes Reference
id(String). The ID of this resource.members(Required)(Set Of String). An array of identities that will be granted the privilege in therole. Each entry can have one of the following values:
- userAccount:{user_id}: A unique user ID that represents a specific Yandex account.
- serviceAccount:{service_account_id}: A unique service account ID.
- federatedUser:{federated_user_id}: A unique federated user ID.
- federatedUser:{federated_user_id}:: A unique SAML federation user account ID.
- group:{group_id}: A unique group ID.
- system:group:federation:{federation_id}:users: All users in federation.
- system:group:organization:{organization_id}:users: All users in organization.
- system:allAuthenticatedUsers: All authenticated users.
- system:allUsers: All users, including unauthenticated ones.
Warning
for more information about system groups, see Cloud Documentation.
role(Required)(String). The role that should be assigned. Only one yandex_serverless_workflow_iam_binding can be used per role.sleep_after(Number). For test purposes, to compensate IAM operations delayworkflow_id(Required)(String). The ID of theworkflowto attach the policy to.