yandex_cm_certificate_iam_member (Resource)

Allows creation and management of a single binding within IAM policy for an existing certificate.

Example usageExample usage

//
// Create a new CM Certificate IAM Member.
//
resource "yandex_cm_certificate" "your-certificate" {
  name    = "certificate-name"
  domains = ["example.com"]
  managed {
    challenge_type = "DNS_CNAME"
  }
}

resource "yandex_cm_certificate_iam_member" "viewer_member" {
  certificate_id = yandex_cm_certificate.your-certificate.id
  role           = "viewer"

  member = "userAccount:foo_user_id"
}

Arguments & Attributes ReferenceArguments & Attributes Reference

• certificate_id (Required)(String). The ID of the certificate to attach the policy to.
• id (String). The ID of this resource.
• member (Required)(String). An identity that will be granted the privilege in the role. It can have one of the following values:

• userAccount:{user_id}: A unique user ID that represents a specific Yandex account.
• serviceAccount:{service_account_id}: A unique service account ID.
• federatedUser:{federated_user_id}: A unique federated user ID.
• group:{group_id}: A unique group ID.
• system:group:federation:{federation_id}:users: All users in federation.
• system:group:organization:{organization_id}:users: All users in organization.
• system:allAuthenticatedUsers: All authenticated users.
• system:allUsers: All users, including unauthenticated ones.

• role (Required)(String). The role that should be assigned to the member.
• sleep_after (Number). For test purposes, to compensate IAM operations delay

ImportImport

The resource can be imported by using their resource ID. For getting it you can use Yandex Cloud Web Console or Yandex Cloud CLI.

# terraform import yandex_cm_certificate_iam_member.<resource Name> "<resource Id>,<role Id>,<subject id>"
terraform import yandex_cm_certificate_iam_member.viewer_member "...,viewer,foo@example.com"