VPC resource attributes

When you use Terraform or the IBM Cloud® Command Line Interface (CLI) to create, update, or delete IBM Cloud Identity and Access Management (IAM) access policies, you can specify the target VPC resource by using resource attributes.

Resource attributes are in the form of  name=value,name=value....

You can select a resource object by entering the ID of the object. Or, you can enter the wildcard * in value to denote all applicable objects. For example, the attribute vpcId:* set the access policy to be applicable to all the VPCs in the account. You can also specify which resource group the policy is applied to in the command.

The following example CLI command gives the user name@example.com Viewer role for all the VPCs in the current account:

ibmcloud iam user-policy-create name@example.com --roles Viewer --service-name is --attributes "vpcId=*"

For more information about using the CLI to create and modify IAM access policy, see ibmcloud iam user-policy-create.

For more information about using Terraform to create IAM access policies, see the resources attribute for the following IAM policies:

• ibm_iam-access_group_policy
• ibm_iam_service_policy
• ibm_iam_user_policy
• ibm_iam_user_invite
• (iam_policy.resource.attributes)

See Table 1 for the full list of VPC resource attributes.