github.com/myhau/pulumi/pkg/v3@v3.70.2-0.20221116134521-f2775972e587/codegen/testing/test/testdata/aws-iam-policy-pp/python/aws-iam-policy.py (about)

     1  import pulumi
     2  import json
     3  import pulumi_aws as aws
     4  
     5  # Create a policy with multiple Condition keys
     6  policy = aws.iam.Policy("policy",
     7      path="/",
     8      description="My test policy",
     9      policy=json.dumps({
    10          "Version": "2012-10-17",
    11          "Statement": [{
    12              "Effect": "Allow",
    13              "Action": "lambda:*",
    14              "Resource": "arn:aws:lambda:*:*:function:*",
    15              "Condition": {
    16                  "StringEquals": {
    17                      "aws:RequestTag/Team": [
    18                          "iamuser-admin",
    19                          "iamuser2-admin",
    20                      ],
    21                  },
    22                  "ForAllValues:StringEquals": {
    23                      "aws:TagKeys": ["Team"],
    24                  },
    25              },
    26          }],
    27      }))
    28  pulumi.export("policyName", policy.name)