@formalco/pulumi 1.2.3 → 1.2.5

package/integrationCloudAzureActivation.d.ts

@@ -0,0 +1,76 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Reports the Azure tenant and managed identity client id back to Formal to activate an Azure Cloud Integration.
+ */
+export declare class IntegrationCloudAzureActivation extends pulumi.CustomResource {
+    /**
+     * Get an existing IntegrationCloudAzureActivation resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: IntegrationCloudAzureActivationState, opts?: pulumi.CustomResourceOptions): IntegrationCloudAzureActivation;
+    /**
+     * Returns true if the given object is an instance of IntegrationCloudAzureActivation.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is IntegrationCloudAzureActivation;
+    /**
+     * The client id of the managed identity created for this integration.
+     */
+    readonly clientId: pulumi.Output<string>;
+    /**
+     * The ID of the Azure Cloud Integration to activate.
+     */
+    readonly integrationId: pulumi.Output<string>;
+    /**
+     * The Entra tenant the managed identity created for this integration belongs to.
+     */
+    readonly tenantId: pulumi.Output<string>;
+    /**
+     * Create a IntegrationCloudAzureActivation resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: IntegrationCloudAzureActivationArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering IntegrationCloudAzureActivation resources.
+ */
+export interface IntegrationCloudAzureActivationState {
+    /**
+     * The client id of the managed identity created for this integration.
+     */
+    clientId?: pulumi.Input<string | undefined>;
+    /**
+     * The ID of the Azure Cloud Integration to activate.
+     */
+    integrationId?: pulumi.Input<string | undefined>;
+    /**
+     * The Entra tenant the managed identity created for this integration belongs to.
+     */
+    tenantId?: pulumi.Input<string | undefined>;
+}
+/**
+ * The set of arguments for constructing a IntegrationCloudAzureActivation resource.
+ */
+export interface IntegrationCloudAzureActivationArgs {
+    /**
+     * The client id of the managed identity created for this integration.
+     */
+    clientId: pulumi.Input<string>;
+    /**
+     * The ID of the Azure Cloud Integration to activate.
+     */
+    integrationId: pulumi.Input<string>;
+    /**
+     * The Entra tenant the managed identity created for this integration belongs to.
+     */
+    tenantId: pulumi.Input<string>;
+}
+//# sourceMappingURL=integrationCloudAzureActivation.d.ts.map

package/integrationCloudAzureActivation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrationCloudAzureActivation.d.ts","sourceRoot":"","sources":["../integrationCloudAzureActivation.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC;;GAEG;AACH,qBAAa,+BAAgC,SAAQ,MAAM,CAAC,cAAc;IACtE;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,oCAAoC,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,+BAA+B;IAOhL;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,+BAA+B;IAO1E;;OAEG;IACH,SAAwB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxD;;OAEG;IACH,SAAwB,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7D;;OAEG;IACH,SAAwB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAExD;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mCAAmC,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CA2B3G;AAED;;GAEG;AACH,MAAM,WAAW,oCAAoC;IACjD;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5C;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjD;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,mCAAmC;IAChD;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAClC"}

package/integrationCloudAzureActivation.js

@@ -0,0 +1,88 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IntegrationCloudAzureActivation = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const utilities = __importStar(require("./utilities"));
+/**
+ * Reports the Azure tenant and managed identity client id back to Formal to activate an Azure Cloud Integration.
+ */
+class IntegrationCloudAzureActivation extends pulumi.CustomResource {
+    /**
+     * Get an existing IntegrationCloudAzureActivation resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new IntegrationCloudAzureActivation(name, state, { ...opts, id: id });
+    }
+    /** @internal */
+    static __pulumiType = 'formal:index/integrationCloudAzureActivation:IntegrationCloudAzureActivation';
+    /**
+     * Returns true if the given object is an instance of IntegrationCloudAzureActivation.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === IntegrationCloudAzureActivation.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["clientId"] = state?.clientId;
+            resourceInputs["integrationId"] = state?.integrationId;
+            resourceInputs["tenantId"] = state?.tenantId;
+        }
+        else {
+            const args = argsOrState;
+            if (args?.clientId === undefined && !opts.urn) {
+                throw new Error("Missing required property 'clientId'");
+            }
+            if (args?.integrationId === undefined && !opts.urn) {
+                throw new Error("Missing required property 'integrationId'");
+            }
+            if (args?.tenantId === undefined && !opts.urn) {
+                throw new Error("Missing required property 'tenantId'");
+            }
+            resourceInputs["clientId"] = args?.clientId;
+            resourceInputs["integrationId"] = args?.integrationId;
+            resourceInputs["tenantId"] = args?.tenantId;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(IntegrationCloudAzureActivation.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.IntegrationCloudAzureActivation = IntegrationCloudAzureActivation;
+//# sourceMappingURL=integrationCloudAzureActivation.js.map

package/integrationCloudAzureActivation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrationCloudAzureActivation.js","sourceRoot":"","sources":["../integrationCloudAzureActivation.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,uDAAyC;AAEzC;;GAEG;AACH,MAAa,+BAAgC,SAAQ,MAAM,CAAC,cAAc;IACtE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA4C,EAAE,IAAmC;QAC1I,OAAO,IAAI,+BAA+B,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,8EAA8E,CAAC;IAErH;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,+BAA+B,CAAC,YAAY,CAAC;IAChF,CAAC;IAuBD,YAAY,IAAY,EAAE,WAAwF,EAAE,IAAmC;QACnJ,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA+D,CAAC;YAC9E,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;SAChD;aAAM;YACH,MAAM,IAAI,GAAG,WAA8D,CAAC;YAC5E,IAAI,IAAI,EAAE,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,IAAI,EAAE,aAAa,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAChD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;aAChE;YACD,IAAI,IAAI,EAAE,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;SAC/C;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,+BAA+B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACpF,CAAC;;AA1EL,0EA2EC"}

package/integrationOidc.d.ts

@@ -19,11 +19,11 @@ export declare class IntegrationOidc extends pulumi.CustomResource {
      */
     static isInstance(obj: any): obj is IntegrationOidc;
     /**
-     * The Formal audience value that tokens must present: `oidc.formal.ai/{id}`.
+     * The Formal audience value that tokens may present: `oidc.formal.ai/{id}`. Providers that cannot set a custom audience (e.g. Spacelift) can instead send `X-Formal-OIDC-Integration-Id` with this resource's `id`.
      */
     readonly audience: pulumi.Output<string>;
     /**
-     * CEL expression evaluated against verified token claims. Must return a boolean. Defaults to `true`.
+     * CEL expression evaluated against verified token claims. Must return a boolean. Defaults to `true`. When selecting the integration with `X-Formal-OIDC-Integration-Id`, this condition must validate the provider-native audience and identity claims.
      */
     readonly claimCondition: pulumi.Output<string | undefined>;
     /**
@@ -72,11 +72,11 @@ export declare class IntegrationOidc extends pulumi.CustomResource {
  */
 export interface IntegrationOidcState {
     /**
-     * The Formal audience value that tokens must present: `oidc.formal.ai/{id}`.
+     * The Formal audience value that tokens may present: `oidc.formal.ai/{id}`. Providers that cannot set a custom audience (e.g. Spacelift) can instead send `X-Formal-OIDC-Integration-Id` with this resource's `id`.
      */
     audience?: pulumi.Input<string | undefined>;
     /**
-     * CEL expression evaluated against verified token claims. Must return a boolean. Defaults to `true`.
+     * CEL expression evaluated against verified token claims. Must return a boolean. Defaults to `true`. When selecting the integration with `X-Formal-OIDC-Integration-Id`, this condition must validate the provider-native audience and identity claims.
      */
     claimCondition?: pulumi.Input<string | undefined>;
     /**
@@ -117,7 +117,7 @@ export interface IntegrationOidcState {
  */
 export interface IntegrationOidcArgs {
     /**
-     * CEL expression evaluated against verified token claims. Must return a boolean. Defaults to `true`.
+     * CEL expression evaluated against verified token claims. Must return a boolean. Defaults to `true`. When selecting the integration with `X-Formal-OIDC-Integration-Id`, this condition must validate the provider-native audience and identity claims.
      */
     claimCondition?: pulumi.Input<string | undefined>;
     /**

package/nativeUser.d.ts

@@ -44,7 +44,7 @@ export declare class NativeUser extends pulumi.CustomResource {
      */
     readonly terminationProtection: pulumi.Output<boolean | undefined>;
     /**
-     * The password of the Native User.
+     * Whether the Connector uses this Native User when a connection does not name one. Defaults to false, so a Resource whose Native Users all leave this unset has no default.
      */
     readonly useAsDefault: pulumi.Output<boolean | undefined>;
     /**
@@ -86,7 +86,7 @@ export interface NativeUserState {
      */
     terminationProtection?: pulumi.Input<boolean | undefined>;
     /**
-     * The password of the Native User.
+     * Whether the Connector uses this Native User when a connection does not name one. Defaults to false, so a Resource whose Native Users all leave this unset has no default.
      */
     useAsDefault?: pulumi.Input<boolean | undefined>;
 }
@@ -120,7 +120,7 @@ export interface NativeUserArgs {
      */
     terminationProtection?: pulumi.Input<boolean | undefined>;
     /**
-     * The password of the Native User.
+     * Whether the Connector uses this Native User when a connection does not name one. Defaults to false, so a Resource whose Native Users all leave this unset has no default.
      */
     useAsDefault?: pulumi.Input<boolean | undefined>;
 }

package/nativeUserV3.d.ts

@@ -0,0 +1,348 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "./types/input";
+import * as outputs from "./types/output";
+/**
+ * A Native User the Formal connector authenticates to a Resource as. The Resource decides which Native User a session uses through its `formal.ResourceNativeUserSelection` expression.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as formal from "@formalco/pulumi";
+ *
+ * const config = new pulumi.Config();
+ * const analyticsAdminPassword = config.require("analyticsAdminPassword");
+ * const db = new formal.Resource("db", {
+ *     name: "analytics-postgres",
+ *     hostname: "analytics.internal",
+ *     technology: "postgres",
+ *     port: 5432,
+ *     nativeUsersV3Enabled: true,
+ * });
+ * // Username and password, read from an environment variable on the connector.
+ * const basic = new formal.NativeUserV3("basic", {
+ *     basic: {
+ *         password: {
+ *             environmentVariable: "ANALYTICS_ADMIN_PASSWORD",
+ *         },
+ *         username: "app_admin",
+ *     },
+ *     resourceId: db.id,
+ *     label: "admin",
+ * });
+ * // Username and password, with the password passed as a write-only value so it
+ * // never lands in Terraform state. Increment literal_wo_version to rotate it.
+ * const basicWriteOnly = new formal.NativeUserV3("basic_write_only", {
+ *     basic: {
+ *         password: {
+ *             literalWo: analyticsAdminPassword,
+ *             literalWoVersion: 1,
+ *         },
+ *         username: "app_admin",
+ *     },
+ *     resourceId: db.id,
+ *     label: "admin-write-only",
+ * });
+ * // AWS IAM, inheriting the role from the connector's environment.
+ * const awsIam = new formal.NativeUserV3("aws_iam", {
+ *     awsIam: {
+ *         username: "app_iam",
+ *     },
+ *     resourceId: db.id,
+ *     label: "iam",
+ * });
+ * const api = new formal.Resource("api", {
+ *     name: "billing-api",
+ *     hostname: "billing.internal",
+ *     technology: "http",
+ *     port: 443,
+ *     nativeUsersV3Enabled: true,
+ * });
+ * const bearerToken = new formal.NativeUserV3("bearer_token", {
+ *     httpBearer: {
+ *         token: {
+ *             environmentVariable: "BILLING_API_TOKEN",
+ *         },
+ *         header: "Authorization",
+ *     },
+ *     resourceId: api.id,
+ *     label: "service-account",
+ * });
+ * // Credentials resolved at connection time by a hook running on the connector,
+ * // for example to mint short-lived credentials from a secrets manager.
+ * const fromHook = new formal.NativeUserV3("from_hook", {
+ *     hook: {
+ *         outputType: "basic",
+ *         allowlistedEnvVariables: [
+ *             "FORMAL_ENV_USER",
+ *             "FORMAL_ENV_PASSWORD",
+ *         ],
+ *         code: `export default async function (_input, env) {
+ *   return {
+ *     username: env.FORMAL_ENV_USER,
+ *     password: env.FORMAL_ENV_PASSWORD,
+ *   };
+ * }
+ * `,
+ *     },
+ *     resourceId: db.id,
+ *     label: "dynamic",
+ * });
+ * ```
+ */
+export declare class NativeUserV3 extends pulumi.CustomResource {
+    /**
+     * Get an existing NativeUserV3 resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: NativeUserV3State, opts?: pulumi.CustomResourceOptions): NativeUserV3;
+    /**
+     * Returns true if the given object is an instance of NativeUserV3.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is NativeUserV3;
+    /**
+     * AWS IAM authentication.
+     */
+    readonly awsIam: pulumi.Output<outputs.NativeUserV3AwsIam | undefined>;
+    /**
+     * AWS IAM authentication using an assumed role.
+     */
+    readonly awsIamRole: pulumi.Output<outputs.NativeUserV3AwsIamRole | undefined>;
+    /**
+     * Azure IAM authentication.
+     */
+    readonly azureIam: pulumi.Output<outputs.NativeUserV3AzureIam | undefined>;
+    /**
+     * Username and password authentication, for example Postgres or MySQL.
+     */
+    readonly basic: pulumi.Output<outputs.NativeUserV3Basic | undefined>;
+    /**
+     * Creation time of the Native User.
+     */
+    readonly createdAt: pulumi.Output<string>;
+    /**
+     * GCP IAM authentication.
+     */
+    readonly gcpIam: pulumi.Output<outputs.NativeUserV3GcpIam | undefined>;
+    /**
+     * Credentials resolved on the connector by running a hook.
+     */
+    readonly hook: pulumi.Output<outputs.NativeUserV3Hook | undefined>;
+    /**
+     * HTTP API key authentication, sent as a header.
+     */
+    readonly httpApiKeyHeader: pulumi.Output<outputs.NativeUserV3HttpApiKeyHeader | undefined>;
+    /**
+     * HTTP API key authentication, sent as a query parameter.
+     */
+    readonly httpApiKeyQuery: pulumi.Output<outputs.NativeUserV3HttpApiKeyQuery | undefined>;
+    /**
+     * HTTP Basic authentication, injected on a named header.
+     */
+    readonly httpBasic: pulumi.Output<outputs.NativeUserV3HttpBasic | undefined>;
+    /**
+     * HTTP Bearer token authentication, injected on a named header.
+     */
+    readonly httpBearer: pulumi.Output<outputs.NativeUserV3HttpBearer | undefined>;
+    /**
+     * Kubernetes authentication using an inline kubeconfig document.
+     */
+    readonly kubernetesInline: pulumi.Output<outputs.NativeUserV3KubernetesInline | undefined>;
+    /**
+     * Kubernetes authentication using a kubeconfig file path on the connector.
+     */
+    readonly kubernetesPath: pulumi.Output<outputs.NativeUserV3KubernetesPath | undefined>;
+    /**
+     * A name for this Native User, unique within the Resource. Selection expressions reference the Native User by ID, so the label is safe to rename.
+     */
+    readonly label: pulumi.Output<string>;
+    /**
+     * The ID of the Resource this Native User authenticates to.
+     */
+    readonly resourceId: pulumi.Output<string>;
+    /**
+     * Snowflake key-pair authentication.
+     */
+    readonly snowflakeKey: pulumi.Output<outputs.NativeUserV3SnowflakeKey | undefined>;
+    /**
+     * SSH private key authentication.
+     */
+    readonly sshKey: pulumi.Output<outputs.NativeUserV3SshKey | undefined>;
+    /**
+     * If set to true, this Native User cannot be deleted.
+     */
+    readonly terminationProtection: pulumi.Output<boolean | undefined>;
+    /**
+     * Last update time of the Native User.
+     */
+    readonly updatedAt: pulumi.Output<string>;
+    /**
+     * Create a NativeUserV3 resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: NativeUserV3Args, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering NativeUserV3 resources.
+ */
+export interface NativeUserV3State {
+    /**
+     * AWS IAM authentication.
+     */
+    awsIam?: pulumi.Input<inputs.NativeUserV3AwsIam | undefined>;
+    /**
+     * AWS IAM authentication using an assumed role.
+     */
+    awsIamRole?: pulumi.Input<inputs.NativeUserV3AwsIamRole | undefined>;
+    /**
+     * Azure IAM authentication.
+     */
+    azureIam?: pulumi.Input<inputs.NativeUserV3AzureIam | undefined>;
+    /**
+     * Username and password authentication, for example Postgres or MySQL.
+     */
+    basic?: pulumi.Input<inputs.NativeUserV3Basic | undefined>;
+    /**
+     * Creation time of the Native User.
+     */
+    createdAt?: pulumi.Input<string | undefined>;
+    /**
+     * GCP IAM authentication.
+     */
+    gcpIam?: pulumi.Input<inputs.NativeUserV3GcpIam | undefined>;
+    /**
+     * Credentials resolved on the connector by running a hook.
+     */
+    hook?: pulumi.Input<inputs.NativeUserV3Hook | undefined>;
+    /**
+     * HTTP API key authentication, sent as a header.
+     */
+    httpApiKeyHeader?: pulumi.Input<inputs.NativeUserV3HttpApiKeyHeader | undefined>;
+    /**
+     * HTTP API key authentication, sent as a query parameter.
+     */
+    httpApiKeyQuery?: pulumi.Input<inputs.NativeUserV3HttpApiKeyQuery | undefined>;
+    /**
+     * HTTP Basic authentication, injected on a named header.
+     */
+    httpBasic?: pulumi.Input<inputs.NativeUserV3HttpBasic | undefined>;
+    /**
+     * HTTP Bearer token authentication, injected on a named header.
+     */
+    httpBearer?: pulumi.Input<inputs.NativeUserV3HttpBearer | undefined>;
+    /**
+     * Kubernetes authentication using an inline kubeconfig document.
+     */
+    kubernetesInline?: pulumi.Input<inputs.NativeUserV3KubernetesInline | undefined>;
+    /**
+     * Kubernetes authentication using a kubeconfig file path on the connector.
+     */
+    kubernetesPath?: pulumi.Input<inputs.NativeUserV3KubernetesPath | undefined>;
+    /**
+     * A name for this Native User, unique within the Resource. Selection expressions reference the Native User by ID, so the label is safe to rename.
+     */
+    label?: pulumi.Input<string | undefined>;
+    /**
+     * The ID of the Resource this Native User authenticates to.
+     */
+    resourceId?: pulumi.Input<string | undefined>;
+    /**
+     * Snowflake key-pair authentication.
+     */
+    snowflakeKey?: pulumi.Input<inputs.NativeUserV3SnowflakeKey | undefined>;
+    /**
+     * SSH private key authentication.
+     */
+    sshKey?: pulumi.Input<inputs.NativeUserV3SshKey | undefined>;
+    /**
+     * If set to true, this Native User cannot be deleted.
+     */
+    terminationProtection?: pulumi.Input<boolean | undefined>;
+    /**
+     * Last update time of the Native User.
+     */
+    updatedAt?: pulumi.Input<string | undefined>;
+}
+/**
+ * The set of arguments for constructing a NativeUserV3 resource.
+ */
+export interface NativeUserV3Args {
+    /**
+     * AWS IAM authentication.
+     */
+    awsIam?: pulumi.Input<inputs.NativeUserV3AwsIam | undefined>;
+    /**
+     * AWS IAM authentication using an assumed role.
+     */
+    awsIamRole?: pulumi.Input<inputs.NativeUserV3AwsIamRole | undefined>;
+    /**
+     * Azure IAM authentication.
+     */
+    azureIam?: pulumi.Input<inputs.NativeUserV3AzureIam | undefined>;
+    /**
+     * Username and password authentication, for example Postgres or MySQL.
+     */
+    basic?: pulumi.Input<inputs.NativeUserV3Basic | undefined>;
+    /**
+     * GCP IAM authentication.
+     */
+    gcpIam?: pulumi.Input<inputs.NativeUserV3GcpIam | undefined>;
+    /**
+     * Credentials resolved on the connector by running a hook.
+     */
+    hook?: pulumi.Input<inputs.NativeUserV3Hook | undefined>;
+    /**
+     * HTTP API key authentication, sent as a header.
+     */
+    httpApiKeyHeader?: pulumi.Input<inputs.NativeUserV3HttpApiKeyHeader | undefined>;
+    /**
+     * HTTP API key authentication, sent as a query parameter.
+     */
+    httpApiKeyQuery?: pulumi.Input<inputs.NativeUserV3HttpApiKeyQuery | undefined>;
+    /**
+     * HTTP Basic authentication, injected on a named header.
+     */
+    httpBasic?: pulumi.Input<inputs.NativeUserV3HttpBasic | undefined>;
+    /**
+     * HTTP Bearer token authentication, injected on a named header.
+     */
+    httpBearer?: pulumi.Input<inputs.NativeUserV3HttpBearer | undefined>;
+    /**
+     * Kubernetes authentication using an inline kubeconfig document.
+     */
+    kubernetesInline?: pulumi.Input<inputs.NativeUserV3KubernetesInline | undefined>;
+    /**
+     * Kubernetes authentication using a kubeconfig file path on the connector.
+     */
+    kubernetesPath?: pulumi.Input<inputs.NativeUserV3KubernetesPath | undefined>;
+    /**
+     * A name for this Native User, unique within the Resource. Selection expressions reference the Native User by ID, so the label is safe to rename.
+     */
+    label: pulumi.Input<string>;
+    /**
+     * The ID of the Resource this Native User authenticates to.
+     */
+    resourceId: pulumi.Input<string>;
+    /**
+     * Snowflake key-pair authentication.
+     */
+    snowflakeKey?: pulumi.Input<inputs.NativeUserV3SnowflakeKey | undefined>;
+    /**
+     * SSH private key authentication.
+     */
+    sshKey?: pulumi.Input<inputs.NativeUserV3SshKey | undefined>;
+    /**
+     * If set to true, this Native User cannot be deleted.
+     */
+    terminationProtection?: pulumi.Input<boolean | undefined>;
+}
+//# sourceMappingURL=nativeUserV3.d.ts.map

package/nativeUserV3.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nativeUserV3.d.ts","sourceRoot":"","sources":["../nativeUserV3.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAG1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwFG;AACH,qBAAa,YAAa,SAAQ,MAAM,CAAC,cAAc;IACnD;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,YAAY;IAO1I;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,YAAY;IAOvD;;OAEG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAC;IACtF;;OAEG;IACH,SAAwB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IAC9F;;OAEG;IACH,SAAwB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAAC;IAC1F;;OAEG;IACH,SAAwB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAAC;IACpF;;OAEG;IACH,SAAgC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE;;OAEG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAC;IACtF;;OAEG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IAClF;;OAEG;IACH,SAAwB,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAAC;IAC1G;;OAEG;IACH,SAAwB,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,2BAA2B,GAAG,SAAS,CAAC,CAAC;IACxG;;OAEG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;IAC5F;;OAEG;IACH,SAAwB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IAC9F;;OAEG;IACH,SAAwB,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAAC;IAC1G;;OAEG;IACH,SAAwB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;IACtG;;OAEG;IACH,SAAwB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrD;;OAEG;IACH,SAAwB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D;;OAEG;IACH,SAAwB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAAC;IAClG;;OAEG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAC;IACtF;;OAEG;IACH,SAAwB,qBAAqB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAClF;;OAEG;IACH,SAAgC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEjE;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAwDxF;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAC9B;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAC;IAC7D;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IACrE;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAAC;IAC3D;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAC;IAC7D;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IACzD;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAAC;IACjF;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,2BAA2B,GAAG,SAAS,CAAC,CAAC;IAC/E;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;IACnE;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IACrE;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAAC;IACjF;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;IAC7E;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAAC;IACzE;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAC;IAC7D;;OAEG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC1D;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC7B;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAC;IAC7D;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IACrE;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAAC;IAC3D;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAC;IAC7D;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IACzD;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAAC;IACjF;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,2BAA2B,GAAG,SAAS,CAAC,CAAC;IAC/E;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;IACnE;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IACrE;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAAC;IACjF;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;IAC7E;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAAC;IACzE;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAC;IAC7D;;OAEG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;CAC7D"}