yandex_function_iam_bindingyandex_function_iam_binding

resource "yandex_function_iam_binding" "function-iam" {
  function_id = "your-function-id"
  role        = "serverless.functions.invoker"

  members = [
    "system:allUsers",
  ]
}

Argument ReferenceArgument Reference

The following arguments are supported:

• function_id - (Required) The Yandex Cloud Function ID to apply a binding to.

• role - (Required) The role that should be applied. See roles

• members - (Required) Identities that will be granted the privilege in role.
  Each entry can have one of the following values:

  • userAccount:{user_id}: A unique user ID that represents a specific Yandex account.
  • serviceAccount:{service_account_id}: A unique service account ID.
  • federatedUser:{federated_user_id}:: A unique saml federation user account ID.
  • group:{group_id}: A unique group ID.
  • system:group:federation:{federation_id}:users: All users in federation.
  • system:group:organization:{organization_id}:users: All users in organization.
  • system:allAuthenticatedUsers: All authenticated users.
  • system:allUsers: All users, including unauthenticated ones.

  Note: for more information about system groups, see the documentation.