@descope/pulumi-descope 0.0.2 → 0.0.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/types/input.d.ts CHANGED
@@ -1,85 +1,208 @@
1
1
  import * as pulumi from "@pulumi/pulumi";
2
2
  import * as inputs from "../types/input";
3
3
  export interface ProjectApplications {
4
- oidcs?: pulumi.Input<pulumi.Input<inputs.ProjectApplicationsOidc>[]>;
5
- samls?: pulumi.Input<pulumi.Input<inputs.ProjectApplicationsSaml>[]>;
6
- }
7
- export interface ProjectApplicationsOidc {
4
+ /**
5
+ * Applications using OpenID Connect (OIDC) for authentication.
6
+ */
7
+ oidcApplications?: pulumi.Input<pulumi.Input<inputs.ProjectApplicationsOidcApplication>[]>;
8
+ /**
9
+ * Applications using SAML for authentication.
10
+ */
11
+ samlApplications?: pulumi.Input<pulumi.Input<inputs.ProjectApplicationsSamlApplication>[]>;
12
+ }
13
+ export interface ProjectApplicationsOidcApplication {
14
+ /**
15
+ * Claims associated with JWT tokens, typically used for user information.
16
+ */
8
17
  claims?: pulumi.Input<pulumi.Input<string>[]>;
18
+ /**
19
+ * A brief description of the application.
20
+ */
9
21
  description?: pulumi.Input<string>;
22
+ /**
23
+ * Indicates whether the resource or functionality is disabled.
24
+ */
10
25
  disabled?: pulumi.Input<boolean>;
26
+ /**
27
+ * An optional identifier for the application.
28
+ */
11
29
  id?: pulumi.Input<string>;
30
+ /**
31
+ * The URL of the custom login page for the application.
32
+ */
12
33
  loginPageUrl?: pulumi.Input<string>;
34
+ /**
35
+ * The URL of the logo associated with the application.
36
+ */
13
37
  logo?: pulumi.Input<string>;
38
+ /**
39
+ * The name of the application.
40
+ */
14
41
  name: pulumi.Input<string>;
15
42
  }
16
- export interface ProjectApplicationsSaml {
43
+ export interface ProjectApplicationsSamlApplication {
17
44
  acsAllowedCallbackUrls?: pulumi.Input<pulumi.Input<string>[]>;
18
- attributeMappings?: pulumi.Input<pulumi.Input<inputs.ProjectApplicationsSamlAttributeMapping>[]>;
45
+ /**
46
+ * Map user attributes from the third party identity provider to custom attributes in Descope.
47
+ */
48
+ attributeMappings?: pulumi.Input<pulumi.Input<inputs.ProjectApplicationsSamlApplicationAttributeMapping>[]>;
19
49
  defaultRelayState?: pulumi.Input<string>;
50
+ /**
51
+ * A brief description of the application.
52
+ */
20
53
  description?: pulumi.Input<string>;
54
+ /**
55
+ * Indicates whether the application is disabled.
56
+ */
21
57
  disabled?: pulumi.Input<boolean>;
22
- dynamicConfiguration?: pulumi.Input<inputs.ProjectApplicationsSamlDynamicConfiguration>;
58
+ dynamicConfiguration?: pulumi.Input<inputs.ProjectApplicationsSamlApplicationDynamicConfiguration>;
59
+ /**
60
+ * An optional identifier for the application.
61
+ */
23
62
  id?: pulumi.Input<string>;
63
+ /**
64
+ * The URL of the custom login page for the application.
65
+ */
24
66
  loginPageUrl?: pulumi.Input<string>;
67
+ /**
68
+ * The URL of the logo associated with the application.
69
+ */
25
70
  logo?: pulumi.Input<string>;
26
- manualConfiguration?: pulumi.Input<inputs.ProjectApplicationsSamlManualConfiguration>;
71
+ manualConfiguration?: pulumi.Input<inputs.ProjectApplicationsSamlApplicationManualConfiguration>;
72
+ /**
73
+ * The name of the application.
74
+ */
27
75
  name: pulumi.Input<string>;
28
76
  subjectNameIdFormat?: pulumi.Input<string>;
29
77
  subjectNameIdType?: pulumi.Input<string>;
30
78
  }
31
- export interface ProjectApplicationsSamlAttributeMapping {
79
+ export interface ProjectApplicationsSamlApplicationAttributeMapping {
80
+ /**
81
+ * The name of the user attribute in the third party identity provider.
82
+ */
32
83
  name: pulumi.Input<string>;
84
+ /**
85
+ * The name of the user custom attribute in Descope.
86
+ */
33
87
  value: pulumi.Input<string>;
34
88
  }
35
- export interface ProjectApplicationsSamlDynamicConfiguration {
89
+ export interface ProjectApplicationsSamlApplicationDynamicConfiguration {
36
90
  metadataUrl: pulumi.Input<string>;
37
91
  }
38
- export interface ProjectApplicationsSamlManualConfiguration {
92
+ export interface ProjectApplicationsSamlApplicationManualConfiguration {
39
93
  acsUrl: pulumi.Input<string>;
40
94
  certificate: pulumi.Input<string>;
41
95
  entityId: pulumi.Input<string>;
42
96
  }
43
97
  export interface ProjectAttributes {
98
+ /**
99
+ * Custom attributes to store additional details about your tenants.
100
+ */
44
101
  tenants?: pulumi.Input<pulumi.Input<inputs.ProjectAttributesTenant>[]>;
102
+ /**
103
+ * Custom attributes to store additional details about your users.
104
+ */
45
105
  users?: pulumi.Input<pulumi.Input<inputs.ProjectAttributesUser>[]>;
46
106
  }
47
107
  export interface ProjectAttributesTenant {
108
+ /**
109
+ * The name of the tenant attribute.
110
+ */
48
111
  name: pulumi.Input<string>;
112
+ /**
113
+ * A list of strings to define the set of options for select attributes.
114
+ */
49
115
  selectOptions?: pulumi.Input<pulumi.Input<string>[]>;
116
+ /**
117
+ * The type of the tenant attribute. Valid valus are `string`, `number`, `boolean`, `date`, `singleselect`, and `multiselect`.
118
+ */
50
119
  type: pulumi.Input<string>;
51
120
  }
52
121
  export interface ProjectAttributesUser {
122
+ /**
123
+ * The name of the user attribute.
124
+ */
53
125
  name: pulumi.Input<string>;
126
+ /**
127
+ * A list of strings to define the set of options for select attributes.
128
+ */
54
129
  selectOptions?: pulumi.Input<pulumi.Input<string>[]>;
130
+ /**
131
+ * The type of the user attribute. Valid valus are `string`, `number`, `boolean`, `date`, `singleselect`, and `multiselect`.
132
+ */
55
133
  type: pulumi.Input<string>;
134
+ /**
135
+ * When provided, viewing and editing the attribute values in widgets will be restricted to users with the specified permissions.
136
+ */
56
137
  widgetAuthorization?: pulumi.Input<inputs.ProjectAttributesUserWidgetAuthorization>;
57
138
  }
58
139
  export interface ProjectAttributesUserWidgetAuthorization {
140
+ /**
141
+ * Editing the attribute value in widgets will be restricted to users with the specified permissions.
142
+ */
59
143
  editPermissions?: pulumi.Input<pulumi.Input<string>[]>;
144
+ /**
145
+ * Viewing the attribute value in widgets will be restricted to users with the specified permissions.
146
+ */
60
147
  viewPermissions?: pulumi.Input<pulumi.Input<string>[]>;
61
148
  }
62
149
  export interface ProjectAuthentication {
150
+ /**
151
+ * Make the authentication experience smoother for the user by generating their initial token in a way that does not require the end user to initiate the process, requiring only verification.
152
+ */
63
153
  embeddedLink?: pulumi.Input<inputs.ProjectAuthenticationEmbeddedLink>;
154
+ /**
155
+ * An enhanced and more secure version of Magic Link, enabling users to start the authentication process on one device and execute the verification on another.
156
+ */
64
157
  enchantedLink?: pulumi.Input<inputs.ProjectAuthenticationEnchantedLink>;
158
+ /**
159
+ * An authentication method where a user receives a unique link via email to log in.
160
+ */
65
161
  magicLink?: pulumi.Input<inputs.ProjectAuthenticationMagicLink>;
162
+ /**
163
+ * Authentication using Open Authorization, which allows users to authenticate with various external services.
164
+ */
66
165
  oauth?: pulumi.Input<inputs.ProjectAuthenticationOauth>;
166
+ /**
167
+ * A dynamically generated set of numbers, granting the user one-time access.
168
+ */
67
169
  otp?: pulumi.Input<inputs.ProjectAuthenticationOtp>;
170
+ /**
171
+ * Device-based passwordless authentication, using fingerprint, face scan, and more.
172
+ */
173
+ passkeys?: pulumi.Input<inputs.ProjectAuthenticationPasskeys>;
174
+ /**
175
+ * The classic username and password combination used for authentication.
176
+ */
68
177
  password?: pulumi.Input<inputs.ProjectAuthenticationPassword>;
178
+ /**
179
+ * Single Sign-On (SSO) authentication method that enables users to access multiple applications with a single set of credentials.
180
+ */
69
181
  sso?: pulumi.Input<inputs.ProjectAuthenticationSso>;
182
+ /**
183
+ * A one-time code generated for the user using a shared secret and time.
184
+ */
70
185
  totp?: pulumi.Input<inputs.ProjectAuthenticationTotp>;
71
- webauthn?: pulumi.Input<inputs.ProjectAuthenticationWebauthn>;
72
186
  }
73
187
  export interface ProjectAuthenticationEmbeddedLink {
74
188
  enabled?: pulumi.Input<boolean>;
189
+ /**
190
+ * The amount of time that the embedded link will be valid for.
191
+ */
75
192
  expirationTime?: pulumi.Input<number>;
76
193
  expirationTimeUnit?: pulumi.Input<string>;
77
194
  }
78
195
  export interface ProjectAuthenticationEnchantedLink {
196
+ /**
197
+ * Settings related to sending emails as part of the enchanted link authentication.
198
+ */
79
199
  emailService?: pulumi.Input<inputs.ProjectAuthenticationEnchantedLinkEmailService>;
80
200
  enabled?: pulumi.Input<boolean>;
81
201
  expirationTime?: pulumi.Input<number>;
82
202
  expirationTimeUnit?: pulumi.Input<string>;
203
+ /**
204
+ * The URL to redirect users to after they log in using the enchanted link.
205
+ */
83
206
  redirectUrl?: pulumi.Input<string>;
84
207
  }
85
208
  export interface ProjectAuthenticationEnchantedLinkEmailService {
@@ -96,11 +219,20 @@ export interface ProjectAuthenticationEnchantedLinkEmailServiceTemplate {
96
219
  usePlainTextBody?: pulumi.Input<boolean>;
97
220
  }
98
221
  export interface ProjectAuthenticationMagicLink {
222
+ /**
223
+ * Settings related to sending emails as part of the magic link authentication.
224
+ */
99
225
  emailService?: pulumi.Input<inputs.ProjectAuthenticationMagicLinkEmailService>;
100
226
  enabled?: pulumi.Input<boolean>;
101
227
  expirationTime?: pulumi.Input<number>;
102
228
  expirationTimeUnit?: pulumi.Input<string>;
229
+ /**
230
+ * The URL to redirect users to after they log in using the magic link.
231
+ */
103
232
  redirectUrl?: pulumi.Input<string>;
233
+ /**
234
+ * Settings related to sending SMS messages as part of the magic link authentication.
235
+ */
104
236
  textService?: pulumi.Input<inputs.ProjectAuthenticationMagicLinkTextService>;
105
237
  }
106
238
  export interface ProjectAuthenticationMagicLinkEmailService {
@@ -127,30 +259,75 @@ export interface ProjectAuthenticationMagicLinkTextServiceTemplate {
127
259
  name: pulumi.Input<string>;
128
260
  }
129
261
  export interface ProjectAuthenticationOauth {
262
+ /**
263
+ * Custom OAuth providers configured for this project.
264
+ */
130
265
  custom?: pulumi.Input<{
131
266
  [key: string]: pulumi.Input<inputs.ProjectAuthenticationOauthCustom>;
132
267
  }>;
133
268
  disabled?: pulumi.Input<boolean>;
269
+ /**
270
+ * Custom configurations for builtin OAuth providers such as Apple, Google, GitHub, Facebook, etc.
271
+ */
134
272
  system?: pulumi.Input<inputs.ProjectAuthenticationOauthSystem>;
135
273
  }
136
274
  export interface ProjectAuthenticationOauthCustom {
275
+ /**
276
+ * The URL that users are redirected to for authorization with the OAuth provider.
277
+ */
137
278
  authorizationEndpoint?: pulumi.Input<string>;
138
279
  claimMapping?: pulumi.Input<{
139
280
  [key: string]: pulumi.Input<string>;
140
281
  }>;
282
+ /**
283
+ * The client ID for the OAuth provider, used to identify the application to the provider.
284
+ */
141
285
  clientId?: pulumi.Input<string>;
286
+ /**
287
+ * The client secret for the OAuth provider, used to authenticate the application with the provider.
288
+ */
142
289
  clientSecret?: pulumi.Input<string>;
290
+ /**
291
+ * A brief description of the OAuth provider.
292
+ */
143
293
  description?: pulumi.Input<string>;
144
294
  disabled?: pulumi.Input<boolean>;
295
+ /**
296
+ * The type of grant (`authorizationCode` or `implicit`) to use when requesting access tokens from the OAuth provider.
297
+ */
145
298
  grantType?: pulumi.Input<string>;
146
299
  issuer?: pulumi.Input<string>;
300
+ /**
301
+ * The URL where the application can retrieve JSON Web Key Sets (JWKS) for the OAuth provider.
302
+ */
147
303
  jwksEndpoint?: pulumi.Input<string>;
304
+ /**
305
+ * The URL of the logo associated with the OAuth provider.
306
+ */
148
307
  logo?: pulumi.Input<string>;
308
+ /**
309
+ * Whether to merge existing user accounts with new ones created through OAuth authentication.
310
+ */
149
311
  mergeUserAccounts?: pulumi.Input<boolean>;
312
+ /**
313
+ * Custom prompts or consent screens that users may see during OAuth authentication.
314
+ */
150
315
  prompts?: pulumi.Input<pulumi.Input<string>[]>;
316
+ /**
317
+ * Settings related to token management for the OAuth provider.
318
+ */
151
319
  providerTokenManagement?: pulumi.Input<inputs.ProjectAuthenticationOauthCustomProviderTokenManagement>;
320
+ /**
321
+ * Scopes of access that the application requests from the user's account on the OAuth provider.
322
+ */
152
323
  scopes?: pulumi.Input<pulumi.Input<string>[]>;
324
+ /**
325
+ * The URL where the application requests an access token from the OAuth provider.
326
+ */
153
327
  tokenEndpoint?: pulumi.Input<string>;
328
+ /**
329
+ * The URL where the application retrieves user information from the OAuth provider.
330
+ */
154
331
  userInfoEndpoint?: pulumi.Input<string>;
155
332
  }
156
333
  export interface ProjectAuthenticationOauthCustomProviderTokenManagement {
@@ -158,34 +335,100 @@ export interface ProjectAuthenticationOauthCustomProviderTokenManagement {
158
335
  redirectUrl?: pulumi.Input<string>;
159
336
  }
160
337
  export interface ProjectAuthenticationOauthSystem {
338
+ /**
339
+ * Apple's OAuth provider, allowing users to authenticate with their Apple Account.
340
+ */
161
341
  apple?: pulumi.Input<inputs.ProjectAuthenticationOauthSystemApple>;
342
+ /**
343
+ * Discord's OAuth provider, allowing users to authenticate with their Discord account.
344
+ */
162
345
  discord?: pulumi.Input<inputs.ProjectAuthenticationOauthSystemDiscord>;
346
+ /**
347
+ * Facebook's OAuth provider, allowing users to authenticate with their Facebook account.
348
+ */
163
349
  facebook?: pulumi.Input<inputs.ProjectAuthenticationOauthSystemFacebook>;
350
+ /**
351
+ * GitHub's OAuth provider, allowing users to authenticate with their GitHub account.
352
+ */
164
353
  github?: pulumi.Input<inputs.ProjectAuthenticationOauthSystemGithub>;
354
+ /**
355
+ * GitLab's OAuth provider, allowing users to authenticate with their GitLab account.
356
+ */
165
357
  gitlab?: pulumi.Input<inputs.ProjectAuthenticationOauthSystemGitlab>;
358
+ /**
359
+ * Google's OAuth provider, allowing users to authenticate with their Google account.
360
+ */
166
361
  google?: pulumi.Input<inputs.ProjectAuthenticationOauthSystemGoogle>;
362
+ /**
363
+ * LinkedIn's OAuth provider, allowing users to authenticate with their LinkedIn account.
364
+ */
167
365
  linkedin?: pulumi.Input<inputs.ProjectAuthenticationOauthSystemLinkedin>;
366
+ /**
367
+ * Microsoft's OAuth provider, allowing users to authenticate with their Microsoft account.
368
+ */
168
369
  microsoft?: pulumi.Input<inputs.ProjectAuthenticationOauthSystemMicrosoft>;
370
+ /**
371
+ * Slack's OAuth provider, allowing users to authenticate with their Slack account.
372
+ */
169
373
  slack?: pulumi.Input<inputs.ProjectAuthenticationOauthSystemSlack>;
170
374
  }
171
375
  export interface ProjectAuthenticationOauthSystemApple {
376
+ /**
377
+ * The URL that users are redirected to for authorization with the OAuth provider.
378
+ */
172
379
  authorizationEndpoint?: pulumi.Input<string>;
173
380
  claimMapping?: pulumi.Input<{
174
381
  [key: string]: pulumi.Input<string>;
175
382
  }>;
383
+ /**
384
+ * The client ID for the OAuth provider, used to identify the application to the provider.
385
+ */
176
386
  clientId?: pulumi.Input<string>;
387
+ /**
388
+ * The client secret for the OAuth provider, used to authenticate the application with the provider.
389
+ */
177
390
  clientSecret?: pulumi.Input<string>;
391
+ /**
392
+ * A brief description of the OAuth provider.
393
+ */
178
394
  description?: pulumi.Input<string>;
179
395
  disabled?: pulumi.Input<boolean>;
396
+ /**
397
+ * The type of grant (`authorizationCode` or `implicit`) to use when requesting access tokens from the OAuth provider.
398
+ */
180
399
  grantType?: pulumi.Input<string>;
181
400
  issuer?: pulumi.Input<string>;
401
+ /**
402
+ * The URL where the application can retrieve JSON Web Key Sets (JWKS) for the OAuth provider.
403
+ */
182
404
  jwksEndpoint?: pulumi.Input<string>;
405
+ /**
406
+ * The URL of the logo associated with the OAuth provider.
407
+ */
183
408
  logo?: pulumi.Input<string>;
409
+ /**
410
+ * Whether to merge existing user accounts with new ones created through OAuth authentication.
411
+ */
184
412
  mergeUserAccounts?: pulumi.Input<boolean>;
413
+ /**
414
+ * Custom prompts or consent screens that users may see during OAuth authentication.
415
+ */
185
416
  prompts?: pulumi.Input<pulumi.Input<string>[]>;
417
+ /**
418
+ * Settings related to token management for the OAuth provider.
419
+ */
186
420
  providerTokenManagement?: pulumi.Input<inputs.ProjectAuthenticationOauthSystemAppleProviderTokenManagement>;
421
+ /**
422
+ * Scopes of access that the application requests from the user's account on the OAuth provider.
423
+ */
187
424
  scopes?: pulumi.Input<pulumi.Input<string>[]>;
425
+ /**
426
+ * The URL where the application requests an access token from the OAuth provider.
427
+ */
188
428
  tokenEndpoint?: pulumi.Input<string>;
429
+ /**
430
+ * The URL where the application retrieves user information from the OAuth provider.
431
+ */
189
432
  userInfoEndpoint?: pulumi.Input<string>;
190
433
  }
191
434
  export interface ProjectAuthenticationOauthSystemAppleProviderTokenManagement {
@@ -193,23 +436,62 @@ export interface ProjectAuthenticationOauthSystemAppleProviderTokenManagement {
193
436
  redirectUrl?: pulumi.Input<string>;
194
437
  }
195
438
  export interface ProjectAuthenticationOauthSystemDiscord {
439
+ /**
440
+ * The URL that users are redirected to for authorization with the OAuth provider.
441
+ */
196
442
  authorizationEndpoint?: pulumi.Input<string>;
197
443
  claimMapping?: pulumi.Input<{
198
444
  [key: string]: pulumi.Input<string>;
199
445
  }>;
446
+ /**
447
+ * The client ID for the OAuth provider, used to identify the application to the provider.
448
+ */
200
449
  clientId?: pulumi.Input<string>;
450
+ /**
451
+ * The client secret for the OAuth provider, used to authenticate the application with the provider.
452
+ */
201
453
  clientSecret?: pulumi.Input<string>;
454
+ /**
455
+ * A brief description of the OAuth provider.
456
+ */
202
457
  description?: pulumi.Input<string>;
203
458
  disabled?: pulumi.Input<boolean>;
459
+ /**
460
+ * The type of grant (`authorizationCode` or `implicit`) to use when requesting access tokens from the OAuth provider.
461
+ */
204
462
  grantType?: pulumi.Input<string>;
205
463
  issuer?: pulumi.Input<string>;
464
+ /**
465
+ * The URL where the application can retrieve JSON Web Key Sets (JWKS) for the OAuth provider.
466
+ */
206
467
  jwksEndpoint?: pulumi.Input<string>;
468
+ /**
469
+ * The URL of the logo associated with the OAuth provider.
470
+ */
207
471
  logo?: pulumi.Input<string>;
472
+ /**
473
+ * Whether to merge existing user accounts with new ones created through OAuth authentication.
474
+ */
208
475
  mergeUserAccounts?: pulumi.Input<boolean>;
476
+ /**
477
+ * Custom prompts or consent screens that users may see during OAuth authentication.
478
+ */
209
479
  prompts?: pulumi.Input<pulumi.Input<string>[]>;
480
+ /**
481
+ * Settings related to token management for the OAuth provider.
482
+ */
210
483
  providerTokenManagement?: pulumi.Input<inputs.ProjectAuthenticationOauthSystemDiscordProviderTokenManagement>;
484
+ /**
485
+ * Scopes of access that the application requests from the user's account on the OAuth provider.
486
+ */
211
487
  scopes?: pulumi.Input<pulumi.Input<string>[]>;
488
+ /**
489
+ * The URL where the application requests an access token from the OAuth provider.
490
+ */
212
491
  tokenEndpoint?: pulumi.Input<string>;
492
+ /**
493
+ * The URL where the application retrieves user information from the OAuth provider.
494
+ */
213
495
  userInfoEndpoint?: pulumi.Input<string>;
214
496
  }
215
497
  export interface ProjectAuthenticationOauthSystemDiscordProviderTokenManagement {
@@ -217,23 +499,62 @@ export interface ProjectAuthenticationOauthSystemDiscordProviderTokenManagement
217
499
  redirectUrl?: pulumi.Input<string>;
218
500
  }
219
501
  export interface ProjectAuthenticationOauthSystemFacebook {
502
+ /**
503
+ * The URL that users are redirected to for authorization with the OAuth provider.
504
+ */
220
505
  authorizationEndpoint?: pulumi.Input<string>;
221
506
  claimMapping?: pulumi.Input<{
222
507
  [key: string]: pulumi.Input<string>;
223
508
  }>;
509
+ /**
510
+ * The client ID for the OAuth provider, used to identify the application to the provider.
511
+ */
224
512
  clientId?: pulumi.Input<string>;
513
+ /**
514
+ * The client secret for the OAuth provider, used to authenticate the application with the provider.
515
+ */
225
516
  clientSecret?: pulumi.Input<string>;
517
+ /**
518
+ * A brief description of the OAuth provider.
519
+ */
226
520
  description?: pulumi.Input<string>;
227
521
  disabled?: pulumi.Input<boolean>;
522
+ /**
523
+ * The type of grant (`authorizationCode` or `implicit`) to use when requesting access tokens from the OAuth provider.
524
+ */
228
525
  grantType?: pulumi.Input<string>;
229
526
  issuer?: pulumi.Input<string>;
527
+ /**
528
+ * The URL where the application can retrieve JSON Web Key Sets (JWKS) for the OAuth provider.
529
+ */
230
530
  jwksEndpoint?: pulumi.Input<string>;
531
+ /**
532
+ * The URL of the logo associated with the OAuth provider.
533
+ */
231
534
  logo?: pulumi.Input<string>;
535
+ /**
536
+ * Whether to merge existing user accounts with new ones created through OAuth authentication.
537
+ */
232
538
  mergeUserAccounts?: pulumi.Input<boolean>;
539
+ /**
540
+ * Custom prompts or consent screens that users may see during OAuth authentication.
541
+ */
233
542
  prompts?: pulumi.Input<pulumi.Input<string>[]>;
543
+ /**
544
+ * Settings related to token management for the OAuth provider.
545
+ */
234
546
  providerTokenManagement?: pulumi.Input<inputs.ProjectAuthenticationOauthSystemFacebookProviderTokenManagement>;
547
+ /**
548
+ * Scopes of access that the application requests from the user's account on the OAuth provider.
549
+ */
235
550
  scopes?: pulumi.Input<pulumi.Input<string>[]>;
551
+ /**
552
+ * The URL where the application requests an access token from the OAuth provider.
553
+ */
236
554
  tokenEndpoint?: pulumi.Input<string>;
555
+ /**
556
+ * The URL where the application retrieves user information from the OAuth provider.
557
+ */
237
558
  userInfoEndpoint?: pulumi.Input<string>;
238
559
  }
239
560
  export interface ProjectAuthenticationOauthSystemFacebookProviderTokenManagement {
@@ -241,23 +562,62 @@ export interface ProjectAuthenticationOauthSystemFacebookProviderTokenManagement
241
562
  redirectUrl?: pulumi.Input<string>;
242
563
  }
243
564
  export interface ProjectAuthenticationOauthSystemGithub {
565
+ /**
566
+ * The URL that users are redirected to for authorization with the OAuth provider.
567
+ */
244
568
  authorizationEndpoint?: pulumi.Input<string>;
245
569
  claimMapping?: pulumi.Input<{
246
570
  [key: string]: pulumi.Input<string>;
247
571
  }>;
572
+ /**
573
+ * The client ID for the OAuth provider, used to identify the application to the provider.
574
+ */
248
575
  clientId?: pulumi.Input<string>;
576
+ /**
577
+ * The client secret for the OAuth provider, used to authenticate the application with the provider.
578
+ */
249
579
  clientSecret?: pulumi.Input<string>;
580
+ /**
581
+ * A brief description of the OAuth provider.
582
+ */
250
583
  description?: pulumi.Input<string>;
251
584
  disabled?: pulumi.Input<boolean>;
585
+ /**
586
+ * The type of grant (`authorizationCode` or `implicit`) to use when requesting access tokens from the OAuth provider.
587
+ */
252
588
  grantType?: pulumi.Input<string>;
253
589
  issuer?: pulumi.Input<string>;
590
+ /**
591
+ * The URL where the application can retrieve JSON Web Key Sets (JWKS) for the OAuth provider.
592
+ */
254
593
  jwksEndpoint?: pulumi.Input<string>;
594
+ /**
595
+ * The URL of the logo associated with the OAuth provider.
596
+ */
255
597
  logo?: pulumi.Input<string>;
598
+ /**
599
+ * Whether to merge existing user accounts with new ones created through OAuth authentication.
600
+ */
256
601
  mergeUserAccounts?: pulumi.Input<boolean>;
602
+ /**
603
+ * Custom prompts or consent screens that users may see during OAuth authentication.
604
+ */
257
605
  prompts?: pulumi.Input<pulumi.Input<string>[]>;
606
+ /**
607
+ * Settings related to token management for the OAuth provider.
608
+ */
258
609
  providerTokenManagement?: pulumi.Input<inputs.ProjectAuthenticationOauthSystemGithubProviderTokenManagement>;
610
+ /**
611
+ * Scopes of access that the application requests from the user's account on the OAuth provider.
612
+ */
259
613
  scopes?: pulumi.Input<pulumi.Input<string>[]>;
614
+ /**
615
+ * The URL where the application requests an access token from the OAuth provider.
616
+ */
260
617
  tokenEndpoint?: pulumi.Input<string>;
618
+ /**
619
+ * The URL where the application retrieves user information from the OAuth provider.
620
+ */
261
621
  userInfoEndpoint?: pulumi.Input<string>;
262
622
  }
263
623
  export interface ProjectAuthenticationOauthSystemGithubProviderTokenManagement {
@@ -265,23 +625,62 @@ export interface ProjectAuthenticationOauthSystemGithubProviderTokenManagement {
265
625
  redirectUrl?: pulumi.Input<string>;
266
626
  }
267
627
  export interface ProjectAuthenticationOauthSystemGitlab {
628
+ /**
629
+ * The URL that users are redirected to for authorization with the OAuth provider.
630
+ */
268
631
  authorizationEndpoint?: pulumi.Input<string>;
269
632
  claimMapping?: pulumi.Input<{
270
633
  [key: string]: pulumi.Input<string>;
271
634
  }>;
635
+ /**
636
+ * The client ID for the OAuth provider, used to identify the application to the provider.
637
+ */
272
638
  clientId?: pulumi.Input<string>;
639
+ /**
640
+ * The client secret for the OAuth provider, used to authenticate the application with the provider.
641
+ */
273
642
  clientSecret?: pulumi.Input<string>;
643
+ /**
644
+ * A brief description of the OAuth provider.
645
+ */
274
646
  description?: pulumi.Input<string>;
275
647
  disabled?: pulumi.Input<boolean>;
648
+ /**
649
+ * The type of grant (`authorizationCode` or `implicit`) to use when requesting access tokens from the OAuth provider.
650
+ */
276
651
  grantType?: pulumi.Input<string>;
277
652
  issuer?: pulumi.Input<string>;
653
+ /**
654
+ * The URL where the application can retrieve JSON Web Key Sets (JWKS) for the OAuth provider.
655
+ */
278
656
  jwksEndpoint?: pulumi.Input<string>;
657
+ /**
658
+ * The URL of the logo associated with the OAuth provider.
659
+ */
279
660
  logo?: pulumi.Input<string>;
661
+ /**
662
+ * Whether to merge existing user accounts with new ones created through OAuth authentication.
663
+ */
280
664
  mergeUserAccounts?: pulumi.Input<boolean>;
665
+ /**
666
+ * Custom prompts or consent screens that users may see during OAuth authentication.
667
+ */
281
668
  prompts?: pulumi.Input<pulumi.Input<string>[]>;
669
+ /**
670
+ * Settings related to token management for the OAuth provider.
671
+ */
282
672
  providerTokenManagement?: pulumi.Input<inputs.ProjectAuthenticationOauthSystemGitlabProviderTokenManagement>;
673
+ /**
674
+ * Scopes of access that the application requests from the user's account on the OAuth provider.
675
+ */
283
676
  scopes?: pulumi.Input<pulumi.Input<string>[]>;
677
+ /**
678
+ * The URL where the application requests an access token from the OAuth provider.
679
+ */
284
680
  tokenEndpoint?: pulumi.Input<string>;
681
+ /**
682
+ * The URL where the application retrieves user information from the OAuth provider.
683
+ */
285
684
  userInfoEndpoint?: pulumi.Input<string>;
286
685
  }
287
686
  export interface ProjectAuthenticationOauthSystemGitlabProviderTokenManagement {
@@ -289,23 +688,62 @@ export interface ProjectAuthenticationOauthSystemGitlabProviderTokenManagement {
289
688
  redirectUrl?: pulumi.Input<string>;
290
689
  }
291
690
  export interface ProjectAuthenticationOauthSystemGoogle {
691
+ /**
692
+ * The URL that users are redirected to for authorization with the OAuth provider.
693
+ */
292
694
  authorizationEndpoint?: pulumi.Input<string>;
293
695
  claimMapping?: pulumi.Input<{
294
696
  [key: string]: pulumi.Input<string>;
295
697
  }>;
698
+ /**
699
+ * The client ID for the OAuth provider, used to identify the application to the provider.
700
+ */
296
701
  clientId?: pulumi.Input<string>;
702
+ /**
703
+ * The client secret for the OAuth provider, used to authenticate the application with the provider.
704
+ */
297
705
  clientSecret?: pulumi.Input<string>;
706
+ /**
707
+ * A brief description of the OAuth provider.
708
+ */
298
709
  description?: pulumi.Input<string>;
299
710
  disabled?: pulumi.Input<boolean>;
711
+ /**
712
+ * The type of grant (`authorizationCode` or `implicit`) to use when requesting access tokens from the OAuth provider.
713
+ */
300
714
  grantType?: pulumi.Input<string>;
301
715
  issuer?: pulumi.Input<string>;
716
+ /**
717
+ * The URL where the application can retrieve JSON Web Key Sets (JWKS) for the OAuth provider.
718
+ */
302
719
  jwksEndpoint?: pulumi.Input<string>;
720
+ /**
721
+ * The URL of the logo associated with the OAuth provider.
722
+ */
303
723
  logo?: pulumi.Input<string>;
724
+ /**
725
+ * Whether to merge existing user accounts with new ones created through OAuth authentication.
726
+ */
304
727
  mergeUserAccounts?: pulumi.Input<boolean>;
728
+ /**
729
+ * Custom prompts or consent screens that users may see during OAuth authentication.
730
+ */
305
731
  prompts?: pulumi.Input<pulumi.Input<string>[]>;
732
+ /**
733
+ * Settings related to token management for the OAuth provider.
734
+ */
306
735
  providerTokenManagement?: pulumi.Input<inputs.ProjectAuthenticationOauthSystemGoogleProviderTokenManagement>;
736
+ /**
737
+ * Scopes of access that the application requests from the user's account on the OAuth provider.
738
+ */
307
739
  scopes?: pulumi.Input<pulumi.Input<string>[]>;
740
+ /**
741
+ * The URL where the application requests an access token from the OAuth provider.
742
+ */
308
743
  tokenEndpoint?: pulumi.Input<string>;
744
+ /**
745
+ * The URL where the application retrieves user information from the OAuth provider.
746
+ */
309
747
  userInfoEndpoint?: pulumi.Input<string>;
310
748
  }
311
749
  export interface ProjectAuthenticationOauthSystemGoogleProviderTokenManagement {
@@ -313,23 +751,62 @@ export interface ProjectAuthenticationOauthSystemGoogleProviderTokenManagement {
313
751
  redirectUrl?: pulumi.Input<string>;
314
752
  }
315
753
  export interface ProjectAuthenticationOauthSystemLinkedin {
754
+ /**
755
+ * The URL that users are redirected to for authorization with the OAuth provider.
756
+ */
316
757
  authorizationEndpoint?: pulumi.Input<string>;
317
758
  claimMapping?: pulumi.Input<{
318
759
  [key: string]: pulumi.Input<string>;
319
760
  }>;
761
+ /**
762
+ * The client ID for the OAuth provider, used to identify the application to the provider.
763
+ */
320
764
  clientId?: pulumi.Input<string>;
765
+ /**
766
+ * The client secret for the OAuth provider, used to authenticate the application with the provider.
767
+ */
321
768
  clientSecret?: pulumi.Input<string>;
769
+ /**
770
+ * A brief description of the OAuth provider.
771
+ */
322
772
  description?: pulumi.Input<string>;
323
773
  disabled?: pulumi.Input<boolean>;
774
+ /**
775
+ * The type of grant (`authorizationCode` or `implicit`) to use when requesting access tokens from the OAuth provider.
776
+ */
324
777
  grantType?: pulumi.Input<string>;
325
778
  issuer?: pulumi.Input<string>;
779
+ /**
780
+ * The URL where the application can retrieve JSON Web Key Sets (JWKS) for the OAuth provider.
781
+ */
326
782
  jwksEndpoint?: pulumi.Input<string>;
783
+ /**
784
+ * The URL of the logo associated with the OAuth provider.
785
+ */
327
786
  logo?: pulumi.Input<string>;
787
+ /**
788
+ * Whether to merge existing user accounts with new ones created through OAuth authentication.
789
+ */
328
790
  mergeUserAccounts?: pulumi.Input<boolean>;
791
+ /**
792
+ * Custom prompts or consent screens that users may see during OAuth authentication.
793
+ */
329
794
  prompts?: pulumi.Input<pulumi.Input<string>[]>;
795
+ /**
796
+ * Settings related to token management for the OAuth provider.
797
+ */
330
798
  providerTokenManagement?: pulumi.Input<inputs.ProjectAuthenticationOauthSystemLinkedinProviderTokenManagement>;
799
+ /**
800
+ * Scopes of access that the application requests from the user's account on the OAuth provider.
801
+ */
331
802
  scopes?: pulumi.Input<pulumi.Input<string>[]>;
803
+ /**
804
+ * The URL where the application requests an access token from the OAuth provider.
805
+ */
332
806
  tokenEndpoint?: pulumi.Input<string>;
807
+ /**
808
+ * The URL where the application retrieves user information from the OAuth provider.
809
+ */
333
810
  userInfoEndpoint?: pulumi.Input<string>;
334
811
  }
335
812
  export interface ProjectAuthenticationOauthSystemLinkedinProviderTokenManagement {
@@ -337,23 +814,62 @@ export interface ProjectAuthenticationOauthSystemLinkedinProviderTokenManagement
337
814
  redirectUrl?: pulumi.Input<string>;
338
815
  }
339
816
  export interface ProjectAuthenticationOauthSystemMicrosoft {
817
+ /**
818
+ * The URL that users are redirected to for authorization with the OAuth provider.
819
+ */
340
820
  authorizationEndpoint?: pulumi.Input<string>;
341
821
  claimMapping?: pulumi.Input<{
342
822
  [key: string]: pulumi.Input<string>;
343
823
  }>;
824
+ /**
825
+ * The client ID for the OAuth provider, used to identify the application to the provider.
826
+ */
344
827
  clientId?: pulumi.Input<string>;
828
+ /**
829
+ * The client secret for the OAuth provider, used to authenticate the application with the provider.
830
+ */
345
831
  clientSecret?: pulumi.Input<string>;
832
+ /**
833
+ * A brief description of the OAuth provider.
834
+ */
346
835
  description?: pulumi.Input<string>;
347
836
  disabled?: pulumi.Input<boolean>;
837
+ /**
838
+ * The type of grant (`authorizationCode` or `implicit`) to use when requesting access tokens from the OAuth provider.
839
+ */
348
840
  grantType?: pulumi.Input<string>;
349
841
  issuer?: pulumi.Input<string>;
842
+ /**
843
+ * The URL where the application can retrieve JSON Web Key Sets (JWKS) for the OAuth provider.
844
+ */
350
845
  jwksEndpoint?: pulumi.Input<string>;
846
+ /**
847
+ * The URL of the logo associated with the OAuth provider.
848
+ */
351
849
  logo?: pulumi.Input<string>;
850
+ /**
851
+ * Whether to merge existing user accounts with new ones created through OAuth authentication.
852
+ */
352
853
  mergeUserAccounts?: pulumi.Input<boolean>;
854
+ /**
855
+ * Custom prompts or consent screens that users may see during OAuth authentication.
856
+ */
353
857
  prompts?: pulumi.Input<pulumi.Input<string>[]>;
858
+ /**
859
+ * Settings related to token management for the OAuth provider.
860
+ */
354
861
  providerTokenManagement?: pulumi.Input<inputs.ProjectAuthenticationOauthSystemMicrosoftProviderTokenManagement>;
862
+ /**
863
+ * Scopes of access that the application requests from the user's account on the OAuth provider.
864
+ */
355
865
  scopes?: pulumi.Input<pulumi.Input<string>[]>;
866
+ /**
867
+ * The URL where the application requests an access token from the OAuth provider.
868
+ */
356
869
  tokenEndpoint?: pulumi.Input<string>;
870
+ /**
871
+ * The URL where the application retrieves user information from the OAuth provider.
872
+ */
357
873
  userInfoEndpoint?: pulumi.Input<string>;
358
874
  }
359
875
  export interface ProjectAuthenticationOauthSystemMicrosoftProviderTokenManagement {
@@ -361,23 +877,62 @@ export interface ProjectAuthenticationOauthSystemMicrosoftProviderTokenManagemen
361
877
  redirectUrl?: pulumi.Input<string>;
362
878
  }
363
879
  export interface ProjectAuthenticationOauthSystemSlack {
880
+ /**
881
+ * The URL that users are redirected to for authorization with the OAuth provider.
882
+ */
364
883
  authorizationEndpoint?: pulumi.Input<string>;
365
884
  claimMapping?: pulumi.Input<{
366
885
  [key: string]: pulumi.Input<string>;
367
886
  }>;
887
+ /**
888
+ * The client ID for the OAuth provider, used to identify the application to the provider.
889
+ */
368
890
  clientId?: pulumi.Input<string>;
891
+ /**
892
+ * The client secret for the OAuth provider, used to authenticate the application with the provider.
893
+ */
369
894
  clientSecret?: pulumi.Input<string>;
895
+ /**
896
+ * A brief description of the OAuth provider.
897
+ */
370
898
  description?: pulumi.Input<string>;
371
899
  disabled?: pulumi.Input<boolean>;
900
+ /**
901
+ * The type of grant (`authorizationCode` or `implicit`) to use when requesting access tokens from the OAuth provider.
902
+ */
372
903
  grantType?: pulumi.Input<string>;
373
904
  issuer?: pulumi.Input<string>;
905
+ /**
906
+ * The URL where the application can retrieve JSON Web Key Sets (JWKS) for the OAuth provider.
907
+ */
374
908
  jwksEndpoint?: pulumi.Input<string>;
909
+ /**
910
+ * The URL of the logo associated with the OAuth provider.
911
+ */
375
912
  logo?: pulumi.Input<string>;
913
+ /**
914
+ * Whether to merge existing user accounts with new ones created through OAuth authentication.
915
+ */
376
916
  mergeUserAccounts?: pulumi.Input<boolean>;
917
+ /**
918
+ * Custom prompts or consent screens that users may see during OAuth authentication.
919
+ */
377
920
  prompts?: pulumi.Input<pulumi.Input<string>[]>;
921
+ /**
922
+ * Settings related to token management for the OAuth provider.
923
+ */
378
924
  providerTokenManagement?: pulumi.Input<inputs.ProjectAuthenticationOauthSystemSlackProviderTokenManagement>;
925
+ /**
926
+ * Scopes of access that the application requests from the user's account on the OAuth provider.
927
+ */
379
928
  scopes?: pulumi.Input<pulumi.Input<string>[]>;
929
+ /**
930
+ * The URL where the application requests an access token from the OAuth provider.
931
+ */
380
932
  tokenEndpoint?: pulumi.Input<string>;
933
+ /**
934
+ * The URL where the application retrieves user information from the OAuth provider.
935
+ */
381
936
  userInfoEndpoint?: pulumi.Input<string>;
382
937
  }
383
938
  export interface ProjectAuthenticationOauthSystemSlackProviderTokenManagement {
@@ -385,12 +940,27 @@ export interface ProjectAuthenticationOauthSystemSlackProviderTokenManagement {
385
940
  redirectUrl?: pulumi.Input<string>;
386
941
  }
387
942
  export interface ProjectAuthenticationOtp {
943
+ /**
944
+ * The domain to embed in OTP messages.
945
+ */
388
946
  domain?: pulumi.Input<string>;
947
+ /**
948
+ * Settings related to sending emails with OTP codes.
949
+ */
389
950
  emailService?: pulumi.Input<inputs.ProjectAuthenticationOtpEmailService>;
390
951
  enabled?: pulumi.Input<boolean>;
952
+ /**
953
+ * The amount of time that an OTP code will be valid for.
954
+ */
391
955
  expirationTime?: pulumi.Input<number>;
392
956
  expirationTimeUnit?: pulumi.Input<string>;
957
+ /**
958
+ * Settings related to sending SMS messages with OTP codes.
959
+ */
393
960
  textService?: pulumi.Input<inputs.ProjectAuthenticationOtpTextService>;
961
+ /**
962
+ * Settings related to voice calls with OTP codes.
963
+ */
394
964
  voiceService?: pulumi.Input<inputs.ProjectAuthenticationOtpVoiceService>;
395
965
  }
396
966
  export interface ProjectAuthenticationOtpEmailService {
@@ -426,19 +996,59 @@ export interface ProjectAuthenticationOtpVoiceServiceTemplate {
426
996
  id?: pulumi.Input<string>;
427
997
  name: pulumi.Input<string>;
428
998
  }
999
+ export interface ProjectAuthenticationPasskeys {
1000
+ enabled?: pulumi.Input<boolean>;
1001
+ /**
1002
+ * Passkeys will be usable in the following domain and all its subdomains.
1003
+ */
1004
+ topLevelDomain?: pulumi.Input<string>;
1005
+ }
429
1006
  export interface ProjectAuthenticationPassword {
1007
+ /**
1008
+ * Settings related to sending password reset emails as part of the password feature.
1009
+ */
430
1010
  emailService?: pulumi.Input<inputs.ProjectAuthenticationPasswordEmailService>;
431
1011
  enabled?: pulumi.Input<boolean>;
1012
+ /**
1013
+ * Whether users are required to change their password periodically.
1014
+ */
432
1015
  expiration?: pulumi.Input<boolean>;
1016
+ /**
1017
+ * The number of weeks after which a user's password expires and they need to replace it.
1018
+ */
433
1019
  expirationWeeks?: pulumi.Input<number>;
1020
+ /**
1021
+ * Whether the user account should be locked after a specified number of failed login attempts.
1022
+ */
434
1023
  lock?: pulumi.Input<boolean>;
1024
+ /**
1025
+ * The number of failed login attempts allowed before an account is locked.
1026
+ */
435
1027
  lockAttempts?: pulumi.Input<number>;
1028
+ /**
1029
+ * Whether passwords must contain at least one lowercase letter.
1030
+ */
436
1031
  lowercase?: pulumi.Input<boolean>;
1032
+ /**
1033
+ * The minimum length of the password that users are required to use. The maximum length is always `64`.
1034
+ */
437
1035
  minLength?: pulumi.Input<number>;
1036
+ /**
1037
+ * Whether passwords must contain at least one non-alphanumeric character (e.g. `!`, `@`, `#`).
1038
+ */
438
1039
  nonAlphanumeric?: pulumi.Input<boolean>;
1040
+ /**
1041
+ * Whether passwords must contain at least one number.
1042
+ */
439
1043
  number?: pulumi.Input<boolean>;
1044
+ /**
1045
+ * Whether to forbid password reuse when users change their password.
1046
+ */
440
1047
  reuse?: pulumi.Input<boolean>;
441
1048
  reuseAmount?: pulumi.Input<number>;
1049
+ /**
1050
+ * Whether passwords must contain at least one uppercase letter.
1051
+ */
442
1052
  uppercase?: pulumi.Input<boolean>;
443
1053
  }
444
1054
  export interface ProjectAuthenticationPasswordEmailService {
@@ -456,15 +1066,14 @@ export interface ProjectAuthenticationPasswordEmailServiceTemplate {
456
1066
  }
457
1067
  export interface ProjectAuthenticationSso {
458
1068
  enabled?: pulumi.Input<boolean>;
1069
+ /**
1070
+ * Whether to merge existing user accounts with new ones created through SSO authentication.
1071
+ */
459
1072
  mergeUsers?: pulumi.Input<boolean>;
460
1073
  }
461
1074
  export interface ProjectAuthenticationTotp {
462
1075
  enabled?: pulumi.Input<boolean>;
463
1076
  }
464
- export interface ProjectAuthenticationWebauthn {
465
- enabled?: pulumi.Input<boolean>;
466
- topLevelDomain?: pulumi.Input<string>;
467
- }
468
1077
  export interface ProjectAuthorization {
469
1078
  permissions?: pulumi.Input<pulumi.Input<inputs.ProjectAuthorizationPermission>[]>;
470
1079
  roles?: pulumi.Input<pulumi.Input<inputs.ProjectAuthorizationRole>[]>;
@@ -481,61 +1090,172 @@ export interface ProjectAuthorizationRole {
481
1090
  permissions?: pulumi.Input<pulumi.Input<string>[]>;
482
1091
  }
483
1092
  export interface ProjectConnectors {
1093
+ /**
1094
+ * AbuseIPDB provides an API to identify if an IP address has been associated with malicious activities online.
1095
+ */
484
1096
  abuseipdbs?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsAbuseipdb>[]>;
1097
+ /**
1098
+ * Amplitude, an analytics product that allows you to collects events from web and mobile apps, unify those and use those to better understand your customers needs.
1099
+ */
485
1100
  amplitudes?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsAmplitude>[]>;
486
1101
  auditWebhooks?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsAuditWebhook>[]>;
487
1102
  awsS3s?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsAwsS3>[]>;
488
1103
  awsTranslates?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsAwsTranslate>[]>;
1104
+ /**
1105
+ * An identity verification platform that allow customers to digitally verify their identity from anywhere.
1106
+ */
489
1107
  clears?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsClear>[]>;
1108
+ /**
1109
+ * Datadog, an observability service for cloud-scale applications, providing monitoring of servers, databases, tools, and services, through a SaaS-based data analytics platform.
1110
+ */
490
1111
  datadogs?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsDatadog>[]>;
491
1112
  devrevGrows?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsDevrevGrow>[]>;
1113
+ /**
1114
+ * Docebo is a cloud-based Learning Management System (LMS) designed to increase performance and learning engagement.
1115
+ */
492
1116
  docebos?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsDocebo>[]>;
1117
+ fingerprintDescopes?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsFingerprintDescope>[]>;
1118
+ /**
1119
+ * Use the Fingerprint (formerly FingerprintJS) connector to add device intelligence and prevent fraud.
1120
+ */
1121
+ fingerprints?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsFingerprint>[]>;
1122
+ /**
1123
+ * Use the Forter connector for account fraud prevention.
1124
+ */
493
1125
  forters?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsForter>[]>;
494
1126
  googleCloudTranslations?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsGoogleCloudTranslation>[]>;
1127
+ /**
1128
+ * API to check if password appeared previously exposed in data breaches.
1129
+ */
495
1130
  hibps?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsHibp>[]>;
1131
+ httpStaticIps?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsHttpStaticIp>[]>;
1132
+ /**
1133
+ * A general purpose HTTP client
1134
+ */
496
1135
  https?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsHttp>[]>;
1136
+ /**
1137
+ * HubSpot is a CRM platform with software, integrations, and resources needed to connect marketing, sales, content management, and customer service.
1138
+ */
497
1139
  hubspots?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsHubspot>[]>;
1140
+ /**
1141
+ * Intercom is a Conversational Relationship Platform (CRP).
1142
+ */
498
1143
  intercoms?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsIntercom>[]>;
1144
+ /**
1145
+ * Use this connector to send audit events and troubleshooting logs to New Relic.
1146
+ */
499
1147
  newrelics?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsNewrelic>[]>;
500
1148
  recaptchaEnterprises?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsRecaptchaEnterprise>[]>;
1149
+ /**
1150
+ * reCAPTCHA is a free google service that protects your site from spam and abuse. It uses advanced risk analysis techniques to tell humans and bots apart.
1151
+ */
501
1152
  recaptchas?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsRecaptcha>[]>;
1153
+ /**
1154
+ * AWS Rekognition, cloud-based AI service that offers computer vision capabilities for analyzing and processing images. Useful for registration and verification processes, and can be used to detect fraud and prevent identity theft.
1155
+ */
502
1156
  rekognitions?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsRekognition>[]>;
1157
+ /**
1158
+ * Salesforce is a leading cloud-based Customer Relationship Management (CRM) platform that helps businesses streamline their sales, service, and marketing operations.
1159
+ */
503
1160
  salesforces?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsSalesforce>[]>;
1161
+ /**
1162
+ * Segment, an analytics product that allows you to collects events from web and mobile apps, unify those and use those to better understand your customers needs.
1163
+ */
504
1164
  segments?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsSegment>[]>;
505
1165
  sendgrids?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsSendgrid>[]>;
506
1166
  smtps?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsSmtp>[]>;
1167
+ /**
1168
+ * Sumo Logic, fast troubleshooting and investigation with AI/ML-powered log analytics
1169
+ */
507
1170
  sumologics?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsSumologic>[]>;
1171
+ /**
1172
+ * Telesign Phone number intelligence API provides risk score for phone numbers.
1173
+ */
508
1174
  telesigns?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsTelesign>[]>;
1175
+ /**
1176
+ * API security for a cloud-first, API-driven world.
1177
+ */
509
1178
  traceables?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsTraceable>[]>;
510
1179
  twilioCores?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsTwilioCore>[]>;
511
1180
  twilioVerifies?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsTwilioVerify>[]>;
1181
+ /**
1182
+ * AI-powered identity verification solution for identity fraud prevention, Know Your Customer compliance, and fast conversions of valuable customers.
1183
+ */
512
1184
  veriffs?: pulumi.Input<pulumi.Input<inputs.ProjectConnectorsVeriff>[]>;
513
1185
  }
514
1186
  export interface ProjectConnectorsAbuseipdb {
1187
+ /**
1188
+ * The unique AbuseIPDB API key.
1189
+ */
515
1190
  apiKey: pulumi.Input<string>;
1191
+ /**
1192
+ * A description of what your connector is used for.
1193
+ */
516
1194
  description?: pulumi.Input<string>;
517
1195
  id?: pulumi.Input<string>;
1196
+ /**
1197
+ * A custom name for your connector.
1198
+ */
518
1199
  name: pulumi.Input<string>;
519
1200
  }
520
1201
  export interface ProjectConnectorsAmplitude {
1202
+ /**
1203
+ * The Amplitude API Key generated for the Descope service.
1204
+ */
521
1205
  apiKey: pulumi.Input<string>;
1206
+ /**
1207
+ * A description of what your connector is used for.
1208
+ */
522
1209
  description?: pulumi.Input<string>;
523
1210
  id?: pulumi.Input<string>;
1211
+ /**
1212
+ * A custom name for your connector.
1213
+ */
524
1214
  name: pulumi.Input<string>;
1215
+ /**
1216
+ * The server URL of the Amplitude API, when using different api or a custom domain in Amplitude.
1217
+ */
525
1218
  serverUrl?: pulumi.Input<string>;
1219
+ /**
1220
+ * `EU` or `US`. Sets the Amplitude server zone. Set this to `EU` for Amplitude projects created in `EU` data center. Default is `US`.
1221
+ */
526
1222
  serverZone?: pulumi.Input<string>;
527
1223
  }
528
1224
  export interface ProjectConnectorsAuditWebhook {
1225
+ /**
1226
+ * Specify which events will be sent to the external audit service (including tenant selection).
1227
+ */
529
1228
  auditFilters?: pulumi.Input<string>;
1229
+ /**
1230
+ * Authentication Information
1231
+ */
530
1232
  authentication?: pulumi.Input<inputs.ProjectConnectorsAuditWebhookAuthentication>;
1233
+ /**
1234
+ * The base URL to fetch
1235
+ */
531
1236
  baseUrl: pulumi.Input<string>;
1237
+ /**
1238
+ * A description of what your connector is used for.
1239
+ */
532
1240
  description?: pulumi.Input<string>;
1241
+ /**
1242
+ * The headers to send with the request
1243
+ */
533
1244
  headers?: pulumi.Input<{
534
1245
  [key: string]: pulumi.Input<string>;
535
1246
  }>;
1247
+ /**
1248
+ * HMAC is a method for message signing with a symmetrical key. This secret will be used to sign the payload, and the resulting signature will be sent in the `x-descope-webhook-s256` header. The receiving service should use this secret to verify the integrity and authenticity of the payload by checking the provided signature
1249
+ */
536
1250
  hmacSecret?: pulumi.Input<string>;
537
1251
  id?: pulumi.Input<string>;
1252
+ /**
1253
+ * Will ignore certificate errors raised by the client
1254
+ */
538
1255
  insecure?: pulumi.Input<boolean>;
1256
+ /**
1257
+ * A custom name for your connector.
1258
+ */
539
1259
  name: pulumi.Input<string>;
540
1260
  }
541
1261
  export interface ProjectConnectorsAuditWebhookAuthentication {
@@ -552,90 +1272,291 @@ export interface ProjectConnectorsAuditWebhookAuthenticationBasic {
552
1272
  username: pulumi.Input<string>;
553
1273
  }
554
1274
  export interface ProjectConnectorsAwsS3 {
1275
+ /**
1276
+ * The unique AWS access key ID.
1277
+ */
555
1278
  accessKeyId: pulumi.Input<string>;
1279
+ auditEnabled?: pulumi.Input<boolean>;
556
1280
  auditFilters?: pulumi.Input<string>;
1281
+ /**
1282
+ * The AWS S3 bucket. This bucket should already exist for the connector to work.
1283
+ */
557
1284
  bucket: pulumi.Input<string>;
1285
+ /**
1286
+ * A description of what your connector is used for.
1287
+ */
558
1288
  description?: pulumi.Input<string>;
559
1289
  id?: pulumi.Input<string>;
1290
+ /**
1291
+ * A custom name for your connector.
1292
+ */
560
1293
  name: pulumi.Input<string>;
1294
+ /**
1295
+ * The AWS S3 region, e.g. `us-east-1`.
1296
+ */
561
1297
  region: pulumi.Input<string>;
1298
+ /**
1299
+ * The secret AWS access key.
1300
+ */
562
1301
  secretAccessKey: pulumi.Input<string>;
1302
+ troubleshootLogEnabled?: pulumi.Input<boolean>;
563
1303
  }
564
1304
  export interface ProjectConnectorsAwsTranslate {
1305
+ /**
1306
+ * AWS access key ID.
1307
+ */
565
1308
  accessKeyId: pulumi.Input<string>;
1309
+ /**
1310
+ * A description of what your connector is used for.
1311
+ */
566
1312
  description?: pulumi.Input<string>;
567
1313
  id?: pulumi.Input<string>;
1314
+ /**
1315
+ * A custom name for your connector.
1316
+ */
568
1317
  name: pulumi.Input<string>;
1318
+ /**
1319
+ * The AWS region to which this client will send requests. (e.g. us-east-1.)
1320
+ */
569
1321
  region: pulumi.Input<string>;
1322
+ /**
1323
+ * AWS secret access key.
1324
+ */
570
1325
  secretAccessKey: pulumi.Input<string>;
1326
+ /**
1327
+ * (Optional) A security or session token to use with these credentials. Usually present for temporary credentials.
1328
+ */
571
1329
  sessionToken?: pulumi.Input<string>;
572
1330
  }
573
1331
  export interface ProjectConnectorsClear {
1332
+ /**
1333
+ * Your CLEAR API key.
1334
+ */
574
1335
  apiKey: pulumi.Input<string>;
1336
+ /**
1337
+ * A description of what your connector is used for.
1338
+ */
575
1339
  description?: pulumi.Input<string>;
576
1340
  id?: pulumi.Input<string>;
1341
+ /**
1342
+ * A custom name for your connector.
1343
+ */
577
1344
  name: pulumi.Input<string>;
1345
+ /**
1346
+ * Your CLEAR project ID.
1347
+ */
578
1348
  projectId: pulumi.Input<string>;
579
1349
  }
580
1350
  export interface ProjectConnectorsDatadog {
1351
+ /**
1352
+ * The unique Datadog organization key.
1353
+ */
581
1354
  apiKey: pulumi.Input<string>;
582
1355
  auditEnabled?: pulumi.Input<boolean>;
583
1356
  auditFilters?: pulumi.Input<string>;
1357
+ /**
1358
+ * A description of what your connector is used for.
1359
+ */
584
1360
  description?: pulumi.Input<string>;
585
1361
  id?: pulumi.Input<string>;
1362
+ /**
1363
+ * A custom name for your connector.
1364
+ */
586
1365
  name: pulumi.Input<string>;
1366
+ /**
1367
+ * The Datadog site to send logs to. Default is `datadoghq.com`. European, free tier and other customers should set their site accordingly.
1368
+ */
587
1369
  site?: pulumi.Input<string>;
588
1370
  troubleshootLogEnabled?: pulumi.Input<boolean>;
589
1371
  }
590
1372
  export interface ProjectConnectorsDevrevGrow {
1373
+ /**
1374
+ * Authentication to DevRev APIs requires a personal access token (PAT).
1375
+ */
591
1376
  apiKey: pulumi.Input<string>;
1377
+ /**
1378
+ * A description of what your connector is used for.
1379
+ */
592
1380
  description?: pulumi.Input<string>;
593
1381
  id?: pulumi.Input<string>;
1382
+ /**
1383
+ * A custom name for your connector.
1384
+ */
594
1385
  name: pulumi.Input<string>;
595
1386
  }
596
1387
  export interface ProjectConnectorsDocebo {
1388
+ /**
1389
+ * The Docebo api base url.
1390
+ */
597
1391
  baseUrl: pulumi.Input<string>;
1392
+ /**
1393
+ * The Docebo OAuth 2.0 app client ID.
1394
+ */
598
1395
  clientId: pulumi.Input<string>;
1396
+ /**
1397
+ * The Docebo OAuth 2.0 app client secret.
1398
+ */
599
1399
  clientSecret: pulumi.Input<string>;
1400
+ /**
1401
+ * A description of what your connector is used for.
1402
+ */
600
1403
  description?: pulumi.Input<string>;
601
1404
  id?: pulumi.Input<string>;
1405
+ /**
1406
+ * A custom name for your connector.
1407
+ */
602
1408
  name: pulumi.Input<string>;
1409
+ /**
1410
+ * The Docebo user's password.
1411
+ */
603
1412
  password: pulumi.Input<string>;
1413
+ /**
1414
+ * The Docebo username.
1415
+ */
604
1416
  username: pulumi.Input<string>;
605
1417
  }
1418
+ export interface ProjectConnectorsFingerprint {
1419
+ /**
1420
+ * The Cloudflare integration Endpoint URL.
1421
+ */
1422
+ cloudflareEndpointUrl?: pulumi.Input<string>;
1423
+ /**
1424
+ * The Cloudflare integration Script URL.
1425
+ */
1426
+ cloudflareScriptUrl?: pulumi.Input<string>;
1427
+ /**
1428
+ * A description of what your connector is used for.
1429
+ */
1430
+ description?: pulumi.Input<string>;
1431
+ id?: pulumi.Input<string>;
1432
+ /**
1433
+ * A custom name for your connector.
1434
+ */
1435
+ name: pulumi.Input<string>;
1436
+ /**
1437
+ * The Fingerprint public API key.
1438
+ */
1439
+ publicApiKey: pulumi.Input<string>;
1440
+ /**
1441
+ * The Fingerprint secret API key.
1442
+ */
1443
+ secretApiKey: pulumi.Input<string>;
1444
+ /**
1445
+ * Enable to configure the relevant Cloudflare integration parameters if Cloudflare integration is set in your Fingerprint account.
1446
+ */
1447
+ useCloudflareIntegration?: pulumi.Input<boolean>;
1448
+ }
1449
+ export interface ProjectConnectorsFingerprintDescope {
1450
+ /**
1451
+ * The custom domain to fetch
1452
+ */
1453
+ customDomain?: pulumi.Input<string>;
1454
+ /**
1455
+ * A description of what your connector is used for.
1456
+ */
1457
+ description?: pulumi.Input<string>;
1458
+ id?: pulumi.Input<string>;
1459
+ /**
1460
+ * A custom name for your connector.
1461
+ */
1462
+ name: pulumi.Input<string>;
1463
+ }
606
1464
  export interface ProjectConnectorsForter {
1465
+ /**
1466
+ * A description of what your connector is used for.
1467
+ */
607
1468
  description?: pulumi.Input<string>;
608
1469
  id?: pulumi.Input<string>;
1470
+ /**
1471
+ * A custom name for your connector.
1472
+ */
609
1473
  name: pulumi.Input<string>;
1474
+ /**
1475
+ * Override the user IP address.
1476
+ */
610
1477
  overrideIpAddress?: pulumi.Input<string>;
1478
+ /**
1479
+ * Override the user email.
1480
+ */
611
1481
  overrideUserEmail?: pulumi.Input<string>;
1482
+ /**
1483
+ * Override the user's IP address or email so that Forter can provide a specific decision or recommendation. Contact the Forter team for further details. Note: Overriding the user IP address or email is intended for testing purpose and should not be utilized in production environments.
1484
+ */
612
1485
  overrides?: pulumi.Input<boolean>;
1486
+ /**
1487
+ * The Forter secret key.
1488
+ */
613
1489
  secretKey: pulumi.Input<string>;
1490
+ /**
1491
+ * The Forter site ID.
1492
+ */
614
1493
  siteId: pulumi.Input<string>;
615
1494
  }
616
1495
  export interface ProjectConnectorsGoogleCloudTranslation {
1496
+ /**
1497
+ * A description of what your connector is used for.
1498
+ */
617
1499
  description?: pulumi.Input<string>;
618
1500
  id?: pulumi.Input<string>;
1501
+ /**
1502
+ * A custom name for your connector.
1503
+ */
619
1504
  name: pulumi.Input<string>;
1505
+ /**
1506
+ * The Google Cloud project ID where the Google Cloud Translation is managed.
1507
+ */
620
1508
  projectId: pulumi.Input<string>;
1509
+ /**
1510
+ * Service Account JSON associated with the current project.
1511
+ */
621
1512
  serviceAccountJson: pulumi.Input<string>;
622
1513
  }
623
1514
  export interface ProjectConnectorsHibp {
1515
+ /**
1516
+ * A description of what your connector is used for.
1517
+ */
624
1518
  description?: pulumi.Input<string>;
625
1519
  id?: pulumi.Input<string>;
1520
+ /**
1521
+ * A custom name for your connector.
1522
+ */
626
1523
  name: pulumi.Input<string>;
627
1524
  }
628
1525
  export interface ProjectConnectorsHttp {
1526
+ /**
1527
+ * Authentication Information
1528
+ */
629
1529
  authentication?: pulumi.Input<inputs.ProjectConnectorsHttpAuthentication>;
1530
+ /**
1531
+ * The base URL to fetch
1532
+ */
630
1533
  baseUrl: pulumi.Input<string>;
1534
+ /**
1535
+ * A description of what your connector is used for.
1536
+ */
631
1537
  description?: pulumi.Input<string>;
1538
+ /**
1539
+ * The headers to send with the request
1540
+ */
632
1541
  headers?: pulumi.Input<{
633
1542
  [key: string]: pulumi.Input<string>;
634
1543
  }>;
1544
+ /**
1545
+ * HMAC is a method for message signing with a symmetrical key. This secret will be used to sign the base64 encoded payload, and the resulting signature will be sent in the `x-descope-webhook-s256` header. The receiving service should use this secret to verify the integrity and authenticity of the payload by checking the provided signature
1546
+ */
635
1547
  hmacSecret?: pulumi.Input<string>;
636
1548
  id?: pulumi.Input<string>;
1549
+ /**
1550
+ * The connector response context will also include the headers. The context will have a "body" attribute and a "headers" attribute. See more details in the help guide
1551
+ */
637
1552
  includeHeadersInContext?: pulumi.Input<boolean>;
1553
+ /**
1554
+ * Will ignore certificate errors raised by the client
1555
+ */
638
1556
  insecure?: pulumi.Input<boolean>;
1557
+ /**
1558
+ * A custom name for your connector.
1559
+ */
639
1560
  name: pulumi.Input<string>;
640
1561
  }
641
1562
  export interface ProjectConnectorsHttpAuthentication {
@@ -651,75 +1572,253 @@ export interface ProjectConnectorsHttpAuthenticationBasic {
651
1572
  password: pulumi.Input<string>;
652
1573
  username: pulumi.Input<string>;
653
1574
  }
1575
+ export interface ProjectConnectorsHttpStaticIp {
1576
+ /**
1577
+ * Authentication Information
1578
+ */
1579
+ authentication?: pulumi.Input<inputs.ProjectConnectorsHttpStaticIpAuthentication>;
1580
+ /**
1581
+ * The base URL to fetch
1582
+ */
1583
+ baseUrl: pulumi.Input<string>;
1584
+ /**
1585
+ * A description of what your connector is used for.
1586
+ */
1587
+ description?: pulumi.Input<string>;
1588
+ /**
1589
+ * The headers to send with the request
1590
+ */
1591
+ headers?: pulumi.Input<{
1592
+ [key: string]: pulumi.Input<string>;
1593
+ }>;
1594
+ /**
1595
+ * HMAC is a method for message signing with a symmetrical key. This secret will be used to sign the base64 encoded payload, and the resulting signature will be sent in the `x-descope-webhook-s256` header. The receiving service should use this secret to verify the integrity and authenticity of the payload by checking the provided signature
1596
+ */
1597
+ hmacSecret?: pulumi.Input<string>;
1598
+ id?: pulumi.Input<string>;
1599
+ /**
1600
+ * The connector response context will also include the headers. The context will have a "body" attribute and a "headers" attribute. See more details in the help guide
1601
+ */
1602
+ includeHeadersInContext?: pulumi.Input<boolean>;
1603
+ /**
1604
+ * Will ignore certificate errors raised by the client
1605
+ */
1606
+ insecure?: pulumi.Input<boolean>;
1607
+ /**
1608
+ * A custom name for your connector.
1609
+ */
1610
+ name: pulumi.Input<string>;
1611
+ }
1612
+ export interface ProjectConnectorsHttpStaticIpAuthentication {
1613
+ apiKey?: pulumi.Input<inputs.ProjectConnectorsHttpStaticIpAuthenticationApiKey>;
1614
+ basic?: pulumi.Input<inputs.ProjectConnectorsHttpStaticIpAuthenticationBasic>;
1615
+ bearerToken?: pulumi.Input<string>;
1616
+ }
1617
+ export interface ProjectConnectorsHttpStaticIpAuthenticationApiKey {
1618
+ key: pulumi.Input<string>;
1619
+ token: pulumi.Input<string>;
1620
+ }
1621
+ export interface ProjectConnectorsHttpStaticIpAuthenticationBasic {
1622
+ password: pulumi.Input<string>;
1623
+ username: pulumi.Input<string>;
1624
+ }
654
1625
  export interface ProjectConnectorsHubspot {
1626
+ /**
1627
+ * The HubSpot private API access token generated for the Descope service.
1628
+ */
655
1629
  accessToken: pulumi.Input<string>;
1630
+ /**
1631
+ * The base URL of the HubSpot API, when using a custom domain in HubSpot, default value is https://api.hubapi.com .
1632
+ */
656
1633
  baseUrl?: pulumi.Input<string>;
1634
+ /**
1635
+ * A description of what your connector is used for.
1636
+ */
657
1637
  description?: pulumi.Input<string>;
658
1638
  id?: pulumi.Input<string>;
1639
+ /**
1640
+ * A custom name for your connector.
1641
+ */
659
1642
  name: pulumi.Input<string>;
660
1643
  }
661
1644
  export interface ProjectConnectorsIntercom {
1645
+ /**
1646
+ * A description of what your connector is used for.
1647
+ */
662
1648
  description?: pulumi.Input<string>;
663
1649
  id?: pulumi.Input<string>;
1650
+ /**
1651
+ * A custom name for your connector.
1652
+ */
664
1653
  name: pulumi.Input<string>;
1654
+ /**
1655
+ * Regional Hosting - US, EU, or AU. default: US
1656
+ */
665
1657
  region?: pulumi.Input<string>;
1658
+ /**
1659
+ * The Intercom access token.
1660
+ */
666
1661
  token: pulumi.Input<string>;
667
1662
  }
668
1663
  export interface ProjectConnectorsNewrelic {
1664
+ /**
1665
+ * Ingest License Key of the account you want to report data to.
1666
+ */
669
1667
  apiKey: pulumi.Input<string>;
670
1668
  auditEnabled?: pulumi.Input<boolean>;
671
1669
  auditFilters?: pulumi.Input<string>;
1670
+ /**
1671
+ * The New Relic data center the account belongs to. Possible values are: `US`, `EU`, `FedRAMP`. Default is `US`.
1672
+ */
672
1673
  dataCenter?: pulumi.Input<string>;
1674
+ /**
1675
+ * A description of what your connector is used for.
1676
+ */
673
1677
  description?: pulumi.Input<string>;
674
1678
  id?: pulumi.Input<string>;
1679
+ /**
1680
+ * Specify a custom prefix for all log fields. The default prefix is `descope.`.
1681
+ */
1682
+ logsPrefix?: pulumi.Input<string>;
1683
+ /**
1684
+ * A custom name for your connector.
1685
+ */
675
1686
  name: pulumi.Input<string>;
1687
+ /**
1688
+ * Enable this option to use a custom prefix for log fields.
1689
+ */
1690
+ overrideLogsPrefix?: pulumi.Input<boolean>;
676
1691
  troubleshootLogEnabled?: pulumi.Input<boolean>;
677
1692
  }
678
1693
  export interface ProjectConnectorsRecaptcha {
1694
+ /**
1695
+ * A description of what your connector is used for.
1696
+ */
679
1697
  description?: pulumi.Input<string>;
680
1698
  id?: pulumi.Input<string>;
1699
+ /**
1700
+ * A custom name for your connector.
1701
+ */
681
1702
  name: pulumi.Input<string>;
1703
+ /**
1704
+ * The secret key authorizes communication between Descope backend and the reCAPTCHA server to verify the user's response.
1705
+ */
682
1706
  secretKey: pulumi.Input<string>;
1707
+ /**
1708
+ * The site key is used to invoke reCAPTCHA service on your site or mobile application.
1709
+ */
683
1710
  siteKey: pulumi.Input<string>;
684
1711
  }
685
1712
  export interface ProjectConnectorsRecaptchaEnterprise {
1713
+ /**
1714
+ * API key associated with the current project.
1715
+ */
686
1716
  apiKey: pulumi.Input<string>;
1717
+ /**
1718
+ * When configured, the Recaptcha action will return the score without assessing the request. The score ranges between 0 and 1, where 1 is a human interaction and 0 is a bot.
1719
+ */
687
1720
  assessmentScore?: pulumi.Input<number>;
1721
+ /**
1722
+ * A description of what your connector is used for.
1723
+ */
688
1724
  description?: pulumi.Input<string>;
689
1725
  id?: pulumi.Input<string>;
1726
+ /**
1727
+ * A custom name for your connector.
1728
+ */
690
1729
  name: pulumi.Input<string>;
1730
+ /**
1731
+ * Override the default assessment model. Note: Overriding assessment is intended for automated testing and should not be utilized in production environments.
1732
+ */
691
1733
  overrideAssessment?: pulumi.Input<boolean>;
1734
+ /**
1735
+ * The Google Cloud project ID where the reCAPTCHA Enterprise is managed.
1736
+ */
692
1737
  projectId: pulumi.Input<string>;
1738
+ /**
1739
+ * The site key is used to invoke reCAPTCHA Enterprise service on your site or mobile application.
1740
+ */
693
1741
  siteKey: pulumi.Input<string>;
694
1742
  }
695
1743
  export interface ProjectConnectorsRekognition {
1744
+ /**
1745
+ * The AWS access key ID
1746
+ */
696
1747
  accessKeyId: pulumi.Input<string>;
1748
+ /**
1749
+ * The collection to store registered users in. Should match `[a-zA-Z0-9_.-]+` pattern. Changing this will cause losing existing users.
1750
+ */
697
1751
  collectionId: pulumi.Input<string>;
1752
+ /**
1753
+ * A description of what your connector is used for.
1754
+ */
698
1755
  description?: pulumi.Input<string>;
699
1756
  id?: pulumi.Input<string>;
1757
+ /**
1758
+ * A custom name for your connector.
1759
+ */
700
1760
  name: pulumi.Input<string>;
1761
+ /**
1762
+ * The AWS secret access key
1763
+ */
701
1764
  secretAccessKey: pulumi.Input<string>;
702
1765
  }
703
1766
  export interface ProjectConnectorsSalesforce {
1767
+ /**
1768
+ * The Salesforce API base URL.
1769
+ */
704
1770
  baseUrl: pulumi.Input<string>;
1771
+ /**
1772
+ * The consumer key of the connected app.
1773
+ */
705
1774
  clientId: pulumi.Input<string>;
1775
+ /**
1776
+ * The consumer secret of the connected app.
1777
+ */
706
1778
  clientSecret: pulumi.Input<string>;
1779
+ /**
1780
+ * A description of what your connector is used for.
1781
+ */
707
1782
  description?: pulumi.Input<string>;
708
1783
  id?: pulumi.Input<string>;
1784
+ /**
1785
+ * A custom name for your connector.
1786
+ */
709
1787
  name: pulumi.Input<string>;
1788
+ /**
1789
+ * REST API Version.
1790
+ */
710
1791
  version: pulumi.Input<string>;
711
1792
  }
712
1793
  export interface ProjectConnectorsSegment {
1794
+ /**
1795
+ * A description of what your connector is used for.
1796
+ */
713
1797
  description?: pulumi.Input<string>;
1798
+ /**
1799
+ * The base URL of the Segment API, when using a custom domain in Segment.
1800
+ */
714
1801
  host?: pulumi.Input<string>;
715
1802
  id?: pulumi.Input<string>;
1803
+ /**
1804
+ * A custom name for your connector.
1805
+ */
716
1806
  name: pulumi.Input<string>;
1807
+ /**
1808
+ * The Segment Write Key generated for the Descope service.
1809
+ */
717
1810
  writeKey: pulumi.Input<string>;
718
1811
  }
719
1812
  export interface ProjectConnectorsSendgrid {
720
1813
  authentication: pulumi.Input<inputs.ProjectConnectorsSendgridAuthentication>;
1814
+ /**
1815
+ * A description of what your connector is used for.
1816
+ */
721
1817
  description?: pulumi.Input<string>;
722
1818
  id?: pulumi.Input<string>;
1819
+ /**
1820
+ * A custom name for your connector.
1821
+ */
723
1822
  name: pulumi.Input<string>;
724
1823
  sender: pulumi.Input<inputs.ProjectConnectorsSendgridSender>;
725
1824
  }
@@ -732,8 +1831,14 @@ export interface ProjectConnectorsSendgridSender {
732
1831
  }
733
1832
  export interface ProjectConnectorsSmtp {
734
1833
  authentication: pulumi.Input<inputs.ProjectConnectorsSmtpAuthentication>;
1834
+ /**
1835
+ * A description of what your connector is used for.
1836
+ */
735
1837
  description?: pulumi.Input<string>;
736
1838
  id?: pulumi.Input<string>;
1839
+ /**
1840
+ * A custom name for your connector.
1841
+ */
737
1842
  name: pulumi.Input<string>;
738
1843
  sender: pulumi.Input<inputs.ProjectConnectorsSmtpSender>;
739
1844
  server: pulumi.Input<inputs.ProjectConnectorsSmtpServer>;
@@ -754,31 +1859,70 @@ export interface ProjectConnectorsSmtpServer {
754
1859
  export interface ProjectConnectorsSumologic {
755
1860
  auditEnabled?: pulumi.Input<boolean>;
756
1861
  auditFilters?: pulumi.Input<string>;
1862
+ /**
1863
+ * A description of what your connector is used for.
1864
+ */
757
1865
  description?: pulumi.Input<string>;
1866
+ /**
1867
+ * The URL associated with an HTTP Hosted collector
1868
+ */
758
1869
  httpSourceUrl: pulumi.Input<string>;
759
1870
  id?: pulumi.Input<string>;
1871
+ /**
1872
+ * A custom name for your connector.
1873
+ */
760
1874
  name: pulumi.Input<string>;
761
1875
  troubleshootLogEnabled?: pulumi.Input<boolean>;
762
1876
  }
763
1877
  export interface ProjectConnectorsTelesign {
1878
+ /**
1879
+ * The unique Telesign API key
1880
+ */
764
1881
  apiKey: pulumi.Input<string>;
1882
+ /**
1883
+ * The unique Telesign account Customer ID
1884
+ */
765
1885
  customerId: pulumi.Input<string>;
1886
+ /**
1887
+ * A description of what your connector is used for.
1888
+ */
766
1889
  description?: pulumi.Input<string>;
767
1890
  id?: pulumi.Input<string>;
1891
+ /**
1892
+ * A custom name for your connector.
1893
+ */
768
1894
  name: pulumi.Input<string>;
769
1895
  }
770
1896
  export interface ProjectConnectorsTraceable {
1897
+ /**
1898
+ * A description of what your connector is used for.
1899
+ */
771
1900
  description?: pulumi.Input<string>;
1901
+ /**
1902
+ * EU(Europe) Region deployment of Traceable platform.
1903
+ */
772
1904
  euRegion?: pulumi.Input<boolean>;
773
1905
  id?: pulumi.Input<string>;
1906
+ /**
1907
+ * A custom name for your connector.
1908
+ */
774
1909
  name: pulumi.Input<string>;
1910
+ /**
1911
+ * The Traceable secret key.
1912
+ */
775
1913
  secretKey: pulumi.Input<string>;
776
1914
  }
777
1915
  export interface ProjectConnectorsTwilioCore {
778
1916
  accountSid: pulumi.Input<string>;
779
1917
  authentication: pulumi.Input<inputs.ProjectConnectorsTwilioCoreAuthentication>;
1918
+ /**
1919
+ * A description of what your connector is used for.
1920
+ */
780
1921
  description?: pulumi.Input<string>;
781
1922
  id?: pulumi.Input<string>;
1923
+ /**
1924
+ * A custom name for your connector.
1925
+ */
782
1926
  name: pulumi.Input<string>;
783
1927
  senders: pulumi.Input<inputs.ProjectConnectorsTwilioCoreSenders>;
784
1928
  }
@@ -801,8 +1945,14 @@ export interface ProjectConnectorsTwilioCoreSendersVoice {
801
1945
  export interface ProjectConnectorsTwilioVerify {
802
1946
  accountSid: pulumi.Input<string>;
803
1947
  authentication: pulumi.Input<inputs.ProjectConnectorsTwilioVerifyAuthentication>;
1948
+ /**
1949
+ * A description of what your connector is used for.
1950
+ */
804
1951
  description?: pulumi.Input<string>;
805
1952
  id?: pulumi.Input<string>;
1953
+ /**
1954
+ * A custom name for your connector.
1955
+ */
806
1956
  name: pulumi.Input<string>;
807
1957
  sender?: pulumi.Input<string>;
808
1958
  serviceSid: pulumi.Input<string>;
@@ -813,31 +1963,54 @@ export interface ProjectConnectorsTwilioVerifyAuthentication {
813
1963
  authToken?: pulumi.Input<string>;
814
1964
  }
815
1965
  export interface ProjectConnectorsVeriff {
1966
+ /**
1967
+ * The Veriff Public API Key, you can find under Veriff Station - Integrations.
1968
+ */
816
1969
  apiKey: pulumi.Input<string>;
1970
+ /**
1971
+ * The base URL of the Veriff API, default value is https://stationapi.veriff.com.
1972
+ */
817
1973
  baseUrl?: pulumi.Input<string>;
1974
+ /**
1975
+ * A description of what your connector is used for.
1976
+ */
818
1977
  description?: pulumi.Input<string>;
819
1978
  id?: pulumi.Input<string>;
1979
+ /**
1980
+ * A custom name for your connector.
1981
+ */
820
1982
  name: pulumi.Input<string>;
1983
+ /**
1984
+ * The Veriff Shared secret key, you can find under Veriff Station - Integrations.
1985
+ */
821
1986
  secretKey: pulumi.Input<string>;
822
1987
  }
823
1988
  export interface ProjectFlows {
824
1989
  data: pulumi.Input<string>;
825
1990
  }
826
1991
  export interface ProjectJwtTemplates {
827
- templates?: pulumi.Input<pulumi.Input<inputs.ProjectJwtTemplatesTemplate>[]>;
1992
+ accessKeyTemplates?: pulumi.Input<pulumi.Input<inputs.ProjectJwtTemplatesAccessKeyTemplate>[]>;
1993
+ userTemplates?: pulumi.Input<pulumi.Input<inputs.ProjectJwtTemplatesUserTemplate>[]>;
828
1994
  }
829
- export interface ProjectJwtTemplatesTemplate {
1995
+ export interface ProjectJwtTemplatesAccessKeyTemplate {
1996
+ authSchema?: pulumi.Input<string>;
1997
+ conformanceIssuer?: pulumi.Input<boolean>;
1998
+ description?: pulumi.Input<string>;
1999
+ id?: pulumi.Input<string>;
2000
+ name: pulumi.Input<string>;
2001
+ template: pulumi.Input<string>;
2002
+ }
2003
+ export interface ProjectJwtTemplatesUserTemplate {
830
2004
  authSchema?: pulumi.Input<string>;
831
2005
  conformanceIssuer?: pulumi.Input<boolean>;
832
2006
  description?: pulumi.Input<string>;
833
2007
  id?: pulumi.Input<string>;
834
2008
  name: pulumi.Input<string>;
835
2009
  template: pulumi.Input<string>;
836
- type: pulumi.Input<string>;
837
2010
  }
838
2011
  export interface ProjectProjectSettings {
839
2012
  accessKeyJwtTemplate?: pulumi.Input<string>;
840
- cookiePolicy?: pulumi.Input<number>;
2013
+ cookiePolicy?: pulumi.Input<string>;
841
2014
  domain?: pulumi.Input<string>;
842
2015
  enableInactivity?: pulumi.Input<boolean>;
843
2016
  inactivityTime?: pulumi.Input<string>;