developer
PTEN

Data Source: yet_iam_access

Every role given in the company's products: who may do what in Cloud, everywhere or by environment.

Note: Roles are given in Yet, in Settings → IAM, by someone signed in — never with an API key, so never here. A leaked key never hands out more than its person had.

Example Usage

data "yet_iam_access" "acme" {}

# Who may change things in production — everywhere, or there.
output "production_developers" {
  value = [
    for g in data.yet_iam_access.acme.grants : g.email
    if g.role != "viewer" && contains(["*", yet_cloud_environment.production.id], g.environment)
  ]
}

Schema

Read-Only

Nested Schema for grants

Read-Only:

  • email (String) Who has it.
  • environment (String) Where: an environment's id, or * for everywhere.
  • granted_at (String) When (RFC 3339).
  • granted_by (String) Who gave it.
  • role (String) viewer, developer or admin.