Add warning about IAM policy.

This commit is contained in:
Paddy Carver 2018-05-02 11:08:08 -07:00
parent 87a7af9c2b
commit bc74070785

View File

@ -11,6 +11,9 @@ description: |-
Three different resources help you manage your IAM policy for a Spanner instance. Each of these resources serves a different use case:
* `google_spanner_instance_iam_policy`: Authoritative. Sets the IAM policy for the instance and replaces any existing policy already attached.
~> **Warning:** It's entirely possibly to lock yourself out of your instance using `google_spanner_instance_iam_policy`. Any permissions granted by default will be removed unless you include them in your config.
* `google_spanner_instance_iam_binding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the instance are preserved.
* `google_spanner_instance_iam_member`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the instance are preserved.