@pierskarsenbarg/sdm 1.4.2 → 1.6.0

package/types/output.d.ts

@@ -317,6 +317,7 @@ export interface GetResourceResource {
     athenas: outputs.GetResourceResourceAthena[];
     auroraMysqls: outputs.GetResourceResourceAuroraMysql[];
     auroraPostgres: outputs.GetResourceResourceAuroraPostgre[];
+    auroraPostgresIams: outputs.GetResourceResourceAuroraPostgresIam[];
     aws: outputs.GetResourceResourceAw[];
     awsConsoleStaticKeyPairs: outputs.GetResourceResourceAwsConsoleStaticKeyPair[];
     awsConsoles: outputs.GetResourceResourceAwsConsole[];
@@ -369,6 +370,7 @@ export interface GetResourceResource {
     rabbitmqAmqp091s: outputs.GetResourceResourceRabbitmqAmqp091[];
     rawTcps: outputs.GetResourceResourceRawTcp[];
     rdps: outputs.GetResourceResourceRdp[];
+    rdsPostgresIams: outputs.GetResourceResourceRdsPostgresIam[];
     redis: outputs.GetResourceResourceRedi[];
     redshifts: outputs.GetResourceResourceRedshift[];
     singleStores: outputs.GetResourceResourceSingleStore[];
@@ -1279,6 +1281,70 @@ export interface GetResourceResourceAuroraPostgre {
      */
     username?: string;
 }
+export interface GetResourceResourceAuroraPostgresIam {
+    /**
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+     */
+    bindInterface?: string;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
+    database?: string;
+    /**
+     * A filter applied to the routing logic to pin datasource to nodes.
+     */
+    egressFilter?: string;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
+    hostname?: string;
+    /**
+     * Unique identifier of the Resource.
+     */
+    id?: string;
+    /**
+     * Unique human-readable name of the Resource.
+     */
+    name?: string;
+    /**
+     * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion.
+     */
+    overrideDatabase?: boolean;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
+    port?: number;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride?: number;
+    /**
+     * The AWS region to connect to.
+     */
+    region?: string;
+    /**
+     * If provided, the gateway/relay will try to assume this role instead of the underlying compute's role.
+     */
+    roleAssumptionArn?: string;
+    /**
+     * ID of the secret store containing credentials for this resource, if any.
+     */
+    secretStoreId?: string;
+    /**
+     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+     */
+    subdomain?: string;
+    /**
+     * Tags is a map of key, value pairs.
+     */
+    tags?: {
+        [key: string]: string;
+    };
+    /**
+     * The username to authenticate with.
+     */
+    username?: string;
+}
 export interface GetResourceResourceAw {
     /**
      * The Access Key ID to use to authenticate.
@@ -4299,6 +4365,10 @@ export interface GetResourceResourceRdp {
      * Unique identifier of the Resource.
      */
     id?: string;
+    /**
+     * When set, require a resource lock to access the resource to ensure it can only be used by one user at a time.
+     */
+    lockRequired?: boolean;
     /**
      * Unique human-readable name of the Resource.
      */
@@ -4334,6 +4404,70 @@ export interface GetResourceResourceRdp {
      */
     username?: string;
 }
+export interface GetResourceResourceRdsPostgresIam {
+    /**
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+     */
+    bindInterface?: string;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
+    database?: string;
+    /**
+     * A filter applied to the routing logic to pin datasource to nodes.
+     */
+    egressFilter?: string;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
+    hostname?: string;
+    /**
+     * Unique identifier of the Resource.
+     */
+    id?: string;
+    /**
+     * Unique human-readable name of the Resource.
+     */
+    name?: string;
+    /**
+     * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion.
+     */
+    overrideDatabase?: boolean;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
+    port?: number;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride?: number;
+    /**
+     * The AWS region to connect to.
+     */
+    region?: string;
+    /**
+     * If provided, the gateway/relay will try to assume this role instead of the underlying compute's role.
+     */
+    roleAssumptionArn?: string;
+    /**
+     * ID of the secret store containing credentials for this resource, if any.
+     */
+    secretStoreId?: string;
+    /**
+     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+     */
+    subdomain?: string;
+    /**
+     * Tags is a map of key, value pairs.
+     */
+    tags?: {
+        [key: string]: string;
+    };
+    /**
+     * The username to authenticate with.
+     */
+    username?: string;
+}
 export interface GetResourceResourceRedi {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
@@ -4615,6 +4749,10 @@ export interface GetResourceResourceSnowsight {
     };
 }
 export interface GetResourceResourceSqlServer {
+    /**
+     * Whether to allow deprecated encryption protocols to be used for this resource. For example, TLS 1.0.
+     */
+    allowDeprecatedEncryption?: boolean;
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
@@ -4679,6 +4817,10 @@ export interface GetResourceResourceSqlServer {
     username?: string;
 }
 export interface GetResourceResourceSqlServerAzureAd {
+    /**
+     * Whether to allow deprecated encryption protocols to be used for this resource. For example, TLS 1.0.
+     */
+    allowDeprecatedEncryption?: boolean;
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
@@ -4748,6 +4890,10 @@ export interface GetResourceResourceSqlServerAzureAd {
     tenantId?: string;
 }
 export interface GetResourceResourceSqlServerKerberosAd {
+    /**
+     * Whether to allow deprecated encryption protocols to be used for this resource. For example, TLS 1.0.
+     */
+    allowDeprecatedEncryption?: boolean;
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
@@ -5493,6 +5639,64 @@ export interface GetSecretStoreSecretStoreVaultToken {
         [key: string]: string;
     };
 }
+export interface GetWorkflowApproverWorkflowApprover {
+    /**
+     * The approver id.
+     */
+    approverId?: string;
+    /**
+     * Unique identifier of the WorkflowApprover.
+     */
+    id?: string;
+    /**
+     * The workflow id.
+     */
+    workflowId?: string;
+}
+export interface GetWorkflowRoleWorkflowRole {
+    /**
+     * Unique identifier of the WorkflowRole.
+     */
+    id?: string;
+    /**
+     * The role id.
+     */
+    roleId?: string;
+    /**
+     * The workflow id.
+     */
+    workflowId?: string;
+}
+export interface GetWorkflowWorkflow {
+    /**
+     * AccessRules is a list of access rules defining the resources this Workflow provides access to.
+     */
+    accessRules?: string;
+    /**
+     * Optional auto grant setting to automatically approve requests or not, defaults to false.
+     */
+    autoGrant?: boolean;
+    /**
+     * Optional description of the Workflow.
+     */
+    description?: string;
+    /**
+     * Optional enabled state for workflow. This setting may be overridden by the system if the workflow doesn't meet the requirements to be enabled or if other conditions prevent enabling the workflow. The requirements to enable a workflow are that the workflow must be either set up for with auto grant enabled or have one or more WorkflowApprovers created for the workflow.
+     */
+    enabled?: boolean;
+    /**
+     * Unique identifier of the Workflow.
+     */
+    id?: string;
+    /**
+     * Unique human-readable name of the Workflow.
+     */
+    name?: string;
+    /**
+     * Optional weight for workflow to specify it's priority in matching a request.
+     */
+    weight?: number;
+}
 export interface NodeGateway {
     /**
      * The hostname/port tuple which the gateway daemon will bind to. If not provided on create, set to "0.0.0.0:listen_address_port".
@@ -5599,7 +5803,7 @@ export interface ResourceAks {
     /**
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
      */
-    healthcheckNamespace?: string;
+    healthcheckNamespace: string;
     /**
      * The host to dial to initiate a connection from the egress node to this resource.
      */
@@ -5651,7 +5855,7 @@ export interface ResourceAksBasicAuth {
     /**
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
      */
-    healthcheckNamespace?: string;
+    healthcheckNamespace: string;
     /**
      * The host to dial to initiate a connection from the egress node to this resource.
      */
@@ -5703,7 +5907,7 @@ export interface ResourceAksServiceAccount {
     /**
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
      */
-    healthcheckNamespace?: string;
+    healthcheckNamespace: string;
     /**
      * The host to dial to initiate a connection from the egress node to this resource.
      */
@@ -5760,7 +5964,7 @@ export interface ResourceAksServiceAccountUserImpersonation {
     /**
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
      */
-    healthcheckNamespace?: string;
+    healthcheckNamespace: string;
     /**
      * The host to dial to initiate a connection from the egress node to this resource.
      */
@@ -5821,7 +6025,7 @@ export interface ResourceAksUserImpersonation {
     /**
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
      */
-    healthcheckNamespace?: string;
+    healthcheckNamespace: string;
     /**
      * The host to dial to initiate a connection from the egress node to this resource.
      */
@@ -5881,7 +6085,7 @@ export interface ResourceAmazonEks {
     /**
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
      */
-    healthcheckNamespace?: string;
+    healthcheckNamespace: string;
     /**
      * Unique human-readable name of the Resource.
      */
@@ -5953,7 +6157,7 @@ export interface ResourceAmazonEksInstanceProfile {
     /**
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
      */
-    healthcheckNamespace?: string;
+    healthcheckNamespace: string;
     /**
      * Unique human-readable name of the Resource.
      */
@@ -6021,7 +6225,7 @@ export interface ResourceAmazonEksInstanceProfileUserImpersonation {
     /**
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
      */
-    healthcheckNamespace?: string;
+    healthcheckNamespace: string;
     /**
      * Unique human-readable name of the Resource.
      */
@@ -6093,7 +6297,7 @@ export interface ResourceAmazonEksUserImpersonation {
     /**
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
      */
-    healthcheckNamespace?: string;
+    healthcheckNamespace: string;
     /**
      * Unique human-readable name of the Resource.
      */
@@ -6305,7 +6509,7 @@ export interface ResourceAuroraMysql {
     /**
      * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
      */
-    database: string;
+    database?: string;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
@@ -6413,6 +6617,66 @@ export interface ResourceAuroraPostgres {
      */
     username?: string;
 }
+export interface ResourceAuroraPostgresIam {
+    /**
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+     */
+    bindInterface: string;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
+    database: string;
+    /**
+     * A filter applied to the routing logic to pin datasource to nodes.
+     */
+    egressFilter?: string;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
+    hostname: string;
+    /**
+     * Unique human-readable name of the Resource.
+     */
+    name: string;
+    /**
+     * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion.
+     */
+    overrideDatabase?: boolean;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
+    port?: number;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride: number;
+    /**
+     * The AWS region to connect to.
+     */
+    region: string;
+    /**
+     * If provided, the gateway/relay will try to assume this role instead of the underlying compute's role.
+     */
+    roleAssumptionArn?: string;
+    /**
+     * ID of the secret store containing credentials for this resource, if any.
+     */
+    secretStoreId?: string;
+    /**
+     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+     */
+    subdomain: string;
+    /**
+     * Tags is a map of key, value pairs.
+     */
+    tags?: {
+        [key: string]: string;
+    };
+    /**
+     * The username to authenticate with.
+     */
+    username?: string;
+}
 export interface ResourceAws {
     /**
      * The Access Key ID to use to authenticate.
@@ -6687,7 +6951,7 @@ export interface ResourceAzureMysql {
     /**
      * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
      */
-    database: string;
+    database?: string;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
@@ -7019,7 +7283,7 @@ export interface ResourceClustrix {
     /**
      * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
      */
-    database: string;
+    database?: string;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
@@ -7607,7 +7871,7 @@ export interface ResourceGoogleGke {
     /**
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
      */
-    healthcheckNamespace?: string;
+    healthcheckNamespace: string;
     /**
      * Unique human-readable name of the Resource.
      */
@@ -7663,7 +7927,7 @@ export interface ResourceGoogleGkeUserImpersonation {
     /**
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
      */
-    healthcheckNamespace?: string;
+    healthcheckNamespace: string;
     /**
      * Unique human-readable name of the Resource.
      */
@@ -7930,7 +8194,7 @@ export interface ResourceKubernetes {
     /**
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
      */
-    healthcheckNamespace?: string;
+    healthcheckNamespace: string;
     /**
      * The host to dial to initiate a connection from the egress node to this resource.
      */
@@ -7982,7 +8246,7 @@ export interface ResourceKubernetesBasicAuth {
     /**
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
      */
-    healthcheckNamespace?: string;
+    healthcheckNamespace: string;
     /**
      * The host to dial to initiate a connection from the egress node to this resource.
      */
@@ -8034,7 +8298,7 @@ export interface ResourceKubernetesServiceAccount {
     /**
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
      */
-    healthcheckNamespace?: string;
+    healthcheckNamespace: string;
     /**
      * The host to dial to initiate a connection from the egress node to this resource.
      */
@@ -8091,7 +8355,7 @@ export interface ResourceKubernetesServiceAccountUserImpersonation {
     /**
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
      */
-    healthcheckNamespace?: string;
+    healthcheckNamespace: string;
     /**
      * The host to dial to initiate a connection from the egress node to this resource.
      */
@@ -8152,7 +8416,7 @@ export interface ResourceKubernetesUserImpersonation {
     /**
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
      */
-    healthcheckNamespace?: string;
+    healthcheckNamespace: string;
     /**
      * The host to dial to initiate a connection from the egress node to this resource.
      */
@@ -8192,7 +8456,7 @@ export interface ResourceMaria {
     /**
      * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
      */
-    database: string;
+    database?: string;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
@@ -8292,7 +8556,7 @@ export interface ResourceMemsql {
     /**
      * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
      */
-    database: string;
+    database?: string;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
@@ -8660,7 +8924,7 @@ export interface ResourceMtlsMysql {
     /**
      * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
      */
-    database: string;
+    database?: string;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
@@ -8796,7 +9060,7 @@ export interface ResourceMysql {
     /**
      * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
      */
-    database: string;
+    database?: string;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
@@ -9225,6 +9489,10 @@ export interface ResourceRdp {
      * The host to dial to initiate a connection from the egress node to this resource.
      */
     hostname: string;
+    /**
+     * When set, require a resource lock to access the resource to ensure it can only be used by one user at a time.
+     */
+    lockRequired?: boolean;
     /**
      * Unique human-readable name of the Resource.
      */
@@ -9260,6 +9528,66 @@ export interface ResourceRdp {
      */
     username?: string;
 }
+export interface ResourceRdsPostgresIam {
+    /**
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+     */
+    bindInterface: string;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
+    database: string;
+    /**
+     * A filter applied to the routing logic to pin datasource to nodes.
+     */
+    egressFilter?: string;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
+    hostname: string;
+    /**
+     * Unique human-readable name of the Resource.
+     */
+    name: string;
+    /**
+     * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion.
+     */
+    overrideDatabase?: boolean;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
+    port?: number;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride: number;
+    /**
+     * The AWS region to connect to.
+     */
+    region: string;
+    /**
+     * If provided, the gateway/relay will try to assume this role instead of the underlying compute's role.
+     */
+    roleAssumptionArn?: string;
+    /**
+     * ID of the secret store containing credentials for this resource, if any.
+     */
+    secretStoreId?: string;
+    /**
+     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+     */
+    subdomain: string;
+    /**
+     * Tags is a map of key, value pairs.
+     */
+    tags?: {
+        [key: string]: string;
+    };
+    /**
+     * The username to authenticate with.
+     */
+    username?: string;
+}
 export interface ResourceRedis {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
@@ -9376,7 +9704,7 @@ export interface ResourceSingleStore {
     /**
      * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
      */
-    database: string;
+    database?: string;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
@@ -9521,6 +9849,10 @@ export interface ResourceSnowsight {
     };
 }
 export interface ResourceSqlServer {
+    /**
+     * Whether to allow deprecated encryption protocols to be used for this resource. For example, TLS 1.0.
+     */
+    allowDeprecatedEncryption?: boolean;
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
@@ -9528,7 +9860,7 @@ export interface ResourceSqlServer {
     /**
      * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
      */
-    database: string;
+    database?: string;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
@@ -9581,6 +9913,10 @@ export interface ResourceSqlServer {
     username?: string;
 }
 export interface ResourceSqlServerAzureAd {
+    /**
+     * Whether to allow deprecated encryption protocols to be used for this resource. For example, TLS 1.0.
+     */
+    allowDeprecatedEncryption?: boolean;
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
@@ -9592,7 +9928,7 @@ export interface ResourceSqlServerAzureAd {
     /**
      * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
      */
-    database: string;
+    database?: string;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
@@ -9646,6 +9982,10 @@ export interface ResourceSqlServerAzureAd {
     tenantId?: string;
 }
 export interface ResourceSqlServerKerberosAd {
+    /**
+     * Whether to allow deprecated encryption protocols to be used for this resource. For example, TLS 1.0.
+     */
+    allowDeprecatedEncryption?: boolean;
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
@@ -9653,7 +9993,7 @@ export interface ResourceSqlServerKerberosAd {
     /**
      * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
      */
-    database: string;
+    database?: string;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */