IAMPolicyAttachment

"""Policy attachment owned independently of its user and policy"""
type IAMPolicyAttachment @iac_resource(name: "iam_policy_attachment") @iac_ops(create: "createIAMPolicyAttachment", read: "getIAMPolicyAttachment", delete: "deleteIAMPolicyAttachment") @iac_replace(strategy: DESTROY_BEFORE_CREATE) {
  """Unique policy attachment identifier"""
  id: UserPolicyAttachmentID! @iac_identity(assignedBy: SERVER) @iac_computed
  """User receiving the policy, including a queried existing user"""
  userId: UserID! @iac_ref(resource: "service_account") @iac_forcesReplace
  """Policy attached to the user"""
  policyId: IAMPolicyID! @iac_ref(resource: "iam_policy") @iac_forcesReplace
}