# juju_jaas_access_cloud (Resource)

A resource that represents access to a cloud when using JAAS.

## Example Usage

```terraform
resource "juju_jaas_access_cloud" "development" {
  cloud_name       = "aws"
  access           = "can_addmodel"
  users            = ["foo@domain.com"]
  groups           = [juju_jaas_group.development.uuid]
  idp_groups       = ["engineering"]
  service_accounts = ["Client-ID-1", "Client-ID-2"]
}
```

<!-- schema generated by tfplugindocs -->

## Schema

### Required

- `access` (String) Level of access to grant. Changing this value will replace the Terraform resource. Valid access levels are described at [https://canonical-jaas-documentation.readthedocs-hosted.com/latest/howto/manage-permissions/#add-a-permission](https://canonical-jaas-documentation.readthedocs-hosted.com/latest/howto/manage-permissions/#add-a-permission)
- `cloud_name` (String) The name of the cloud for access management. If this is changed the resource will be deleted and a new resource will be created.

### Optional

- `groups` (Set of String) List of groups to grant access. A valid group ID is the group’s UUID.
- `idp_groups` (Set of String) List of identity provider groups to grant access. IdP groups have no provider-side format restriction.
- `roles` (Set of String) List of roles UUIDs to grant access.
- `service_accounts` (Set of String) List of service accounts to grant access. A valid service account is the service account’s name.
- `users` (Set of String) List of users to grant access. A valid user is the user’s name or email.

### Read-Only

- `id` (String) The ID of this resource.

## Import

Import is supported using the following syntax:

The [`terraform import` command](https://developer.hashicorp.com/terraform/cli/commands/import) can be used, for example:

```shell
# JAAS cloud access can be imported using the cloud name and access level
$ terraform import juju_jaas_access_cloud.development aws:can_addmodel
```