Resource: awsGrafanaRoleAssociation

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as aws from "./.gen/providers/aws";
const awsIamRoleAssume = new aws.iamRole.IamRole(this, "assume", {
  assumeRolePolicy:
    '${jsonencode({\n    Version = "2012-10-17"\n    Statement = [\n      {\n        Action = "sts:AssumeRole"\n        Effect = "Allow"\n        Sid    = ""\n        Principal = {\n          Service = "grafana.amazonaws.com"\n        }\n      },\n    ]\n  })}',
  name: "grafana-assume",
});
const awsGrafanaWorkspaceExample = new aws.grafanaWorkspace.GrafanaWorkspace(
  this,
  "example",
  {
    accountAccessType: "CURRENT_ACCOUNT",
    authenticationProviders: ["SAML"],
    permissionType: "SERVICE_MANAGED",
    roleArn: awsIamRoleAssume.arn,
  }
);
const awsGrafanaRoleAssociationExample =
  new aws.grafanaRoleAssociation.GrafanaRoleAssociation(this, "example_2", {
    role: "ADMIN",
    userIds: ["USER_ID_1", "USER_ID_2"],
    workspaceId: awsGrafanaWorkspaceExample.id,
  });
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsGrafanaRoleAssociationExample.overrideLogicalId("example");