@pulumi/aws 5.0.0 → 5.1.0

package/grafana/workspace.d.ts

@@ -0,0 +1,231 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Provides an Amazon Managed Grafana workspace resource.
+ *
+ * ## Example Usage
+ * ### Basic configuration
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const assume = new aws.iam.Role("assume", {assumeRolePolicy: JSON.stringify({
+ *     Version: "2012-10-17",
+ *     Statement: [{
+ *         Action: "sts:AssumeRole",
+ *         Effect: "Allow",
+ *         Sid: "",
+ *         Principal: {
+ *             Service: "grafana.amazonaws.com",
+ *         },
+ *     }],
+ * })});
+ * const example = new aws.grafana.Workspace("example", {
+ *     accountAccessType: "CURRENT_ACCOUNT",
+ *     authenticationProviders: ["SAML"],
+ *     permissionType: "SERVICE_MANAGED",
+ *     roleArn: assume.arn,
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * Grafana Workspace can be imported using the workspace's `id`, e.g.,
+ *
+ * ```sh
+ *  $ pulumi import aws:grafana/workspace:Workspace example g-2054c75a02
+ * ```
+ */
+export declare class Workspace extends pulumi.CustomResource {
+    /**
+     * Get an existing Workspace resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: WorkspaceState, opts?: pulumi.CustomResourceOptions): Workspace;
+    /**
+     * Returns true if the given object is an instance of Workspace.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is Workspace;
+    /**
+     * The type of account access for the workspace. Valid values are `CURRENT_ACCOUNT` and `ORGANIZATION`. If `ORGANIZATION` is specified, then `organizationalUnits` must also be present.
+     */
+    readonly accountAccessType: pulumi.Output<string>;
+    /**
+     * The Amazon Resource Name (ARN) of the Grafana workspace.
+     */
+    readonly arn: pulumi.Output<string>;
+    /**
+     * The authentication providers for the workspace. Valid values are `AWS_SSO`, `SAML`, or both.
+     */
+    readonly authenticationProviders: pulumi.Output<string[]>;
+    /**
+     * The data sources for the workspace. Valid values are `AMAZON_OPENSEARCH_SERVICE`, `CLOUDWATCH`, `PROMETHEUS`, `XRAY`, `TIMESTREAM`, `SITEWISE`.
+     */
+    readonly dataSources: pulumi.Output<string[] | undefined>;
+    /**
+     * The workspace description.
+     */
+    readonly description: pulumi.Output<string | undefined>;
+    /**
+     * The endpoint of the Grafana workspace.
+     */
+    readonly endpoint: pulumi.Output<string>;
+    /**
+     * The version of Grafana running on the workspace.
+     */
+    readonly grafanaVersion: pulumi.Output<string>;
+    /**
+     * The Grafana workspace name.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * The notification destinations. If a data source is specified here, Amazon Managed Grafana will create IAM roles and permissions needed to use these destinations. Must be set to `SNS`.
+     */
+    readonly notificationDestinations: pulumi.Output<string[] | undefined>;
+    /**
+     * The role name that the workspace uses to access resources through Amazon Organizations.
+     */
+    readonly organizationRoleName: pulumi.Output<string | undefined>;
+    /**
+     * The Amazon Organizations organizational units that the workspace is authorized to use data sources from.
+     */
+    readonly organizationalUnits: pulumi.Output<string[] | undefined>;
+    /**
+     * The permission type of the workspace. If `SERVICE_MANAGED` is specified, the IAM roles and IAM policy attachments are generated automatically. If `CUSTOMER_MANAGED` is specified, the IAM roles and IAM policy attachments will not be created.
+     */
+    readonly permissionType: pulumi.Output<string>;
+    /**
+     * The IAM role ARN that the workspace assumes.
+     */
+    readonly roleArn: pulumi.Output<string | undefined>;
+    readonly samlConfigurationStatus: pulumi.Output<string>;
+    /**
+     * The AWS CloudFormation stack set name that provisions IAM roles to be used by the workspace.
+     */
+    readonly stackSetName: pulumi.Output<string | undefined>;
+    /**
+     * Create a Workspace resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: WorkspaceArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering Workspace resources.
+ */
+export interface WorkspaceState {
+    /**
+     * The type of account access for the workspace. Valid values are `CURRENT_ACCOUNT` and `ORGANIZATION`. If `ORGANIZATION` is specified, then `organizationalUnits` must also be present.
+     */
+    accountAccessType?: pulumi.Input<string>;
+    /**
+     * The Amazon Resource Name (ARN) of the Grafana workspace.
+     */
+    arn?: pulumi.Input<string>;
+    /**
+     * The authentication providers for the workspace. Valid values are `AWS_SSO`, `SAML`, or both.
+     */
+    authenticationProviders?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The data sources for the workspace. Valid values are `AMAZON_OPENSEARCH_SERVICE`, `CLOUDWATCH`, `PROMETHEUS`, `XRAY`, `TIMESTREAM`, `SITEWISE`.
+     */
+    dataSources?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The workspace description.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * The endpoint of the Grafana workspace.
+     */
+    endpoint?: pulumi.Input<string>;
+    /**
+     * The version of Grafana running on the workspace.
+     */
+    grafanaVersion?: pulumi.Input<string>;
+    /**
+     * The Grafana workspace name.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * The notification destinations. If a data source is specified here, Amazon Managed Grafana will create IAM roles and permissions needed to use these destinations. Must be set to `SNS`.
+     */
+    notificationDestinations?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The role name that the workspace uses to access resources through Amazon Organizations.
+     */
+    organizationRoleName?: pulumi.Input<string>;
+    /**
+     * The Amazon Organizations organizational units that the workspace is authorized to use data sources from.
+     */
+    organizationalUnits?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The permission type of the workspace. If `SERVICE_MANAGED` is specified, the IAM roles and IAM policy attachments are generated automatically. If `CUSTOMER_MANAGED` is specified, the IAM roles and IAM policy attachments will not be created.
+     */
+    permissionType?: pulumi.Input<string>;
+    /**
+     * The IAM role ARN that the workspace assumes.
+     */
+    roleArn?: pulumi.Input<string>;
+    samlConfigurationStatus?: pulumi.Input<string>;
+    /**
+     * The AWS CloudFormation stack set name that provisions IAM roles to be used by the workspace.
+     */
+    stackSetName?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a Workspace resource.
+ */
+export interface WorkspaceArgs {
+    /**
+     * The type of account access for the workspace. Valid values are `CURRENT_ACCOUNT` and `ORGANIZATION`. If `ORGANIZATION` is specified, then `organizationalUnits` must also be present.
+     */
+    accountAccessType: pulumi.Input<string>;
+    /**
+     * The authentication providers for the workspace. Valid values are `AWS_SSO`, `SAML`, or both.
+     */
+    authenticationProviders: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The data sources for the workspace. Valid values are `AMAZON_OPENSEARCH_SERVICE`, `CLOUDWATCH`, `PROMETHEUS`, `XRAY`, `TIMESTREAM`, `SITEWISE`.
+     */
+    dataSources?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The workspace description.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * The Grafana workspace name.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * The notification destinations. If a data source is specified here, Amazon Managed Grafana will create IAM roles and permissions needed to use these destinations. Must be set to `SNS`.
+     */
+    notificationDestinations?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The role name that the workspace uses to access resources through Amazon Organizations.
+     */
+    organizationRoleName?: pulumi.Input<string>;
+    /**
+     * The Amazon Organizations organizational units that the workspace is authorized to use data sources from.
+     */
+    organizationalUnits?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The permission type of the workspace. If `SERVICE_MANAGED` is specified, the IAM roles and IAM policy attachments are generated automatically. If `CUSTOMER_MANAGED` is specified, the IAM roles and IAM policy attachments will not be created.
+     */
+    permissionType: pulumi.Input<string>;
+    /**
+     * The IAM role ARN that the workspace assumes.
+     */
+    roleArn?: pulumi.Input<string>;
+    /**
+     * The AWS CloudFormation stack set name that provisions IAM roles to be used by the workspace.
+     */
+    stackSetName?: pulumi.Input<string>;
+}

package/grafana/workspace.js

@@ -0,0 +1,123 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Workspace = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * Provides an Amazon Managed Grafana workspace resource.
+ *
+ * ## Example Usage
+ * ### Basic configuration
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const assume = new aws.iam.Role("assume", {assumeRolePolicy: JSON.stringify({
+ *     Version: "2012-10-17",
+ *     Statement: [{
+ *         Action: "sts:AssumeRole",
+ *         Effect: "Allow",
+ *         Sid: "",
+ *         Principal: {
+ *             Service: "grafana.amazonaws.com",
+ *         },
+ *     }],
+ * })});
+ * const example = new aws.grafana.Workspace("example", {
+ *     accountAccessType: "CURRENT_ACCOUNT",
+ *     authenticationProviders: ["SAML"],
+ *     permissionType: "SERVICE_MANAGED",
+ *     roleArn: assume.arn,
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * Grafana Workspace can be imported using the workspace's `id`, e.g.,
+ *
+ * ```sh
+ *  $ pulumi import aws:grafana/workspace:Workspace example g-2054c75a02
+ * ```
+ */
+class Workspace extends pulumi.CustomResource {
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["accountAccessType"] = state ? state.accountAccessType : undefined;
+            resourceInputs["arn"] = state ? state.arn : undefined;
+            resourceInputs["authenticationProviders"] = state ? state.authenticationProviders : undefined;
+            resourceInputs["dataSources"] = state ? state.dataSources : undefined;
+            resourceInputs["description"] = state ? state.description : undefined;
+            resourceInputs["endpoint"] = state ? state.endpoint : undefined;
+            resourceInputs["grafanaVersion"] = state ? state.grafanaVersion : undefined;
+            resourceInputs["name"] = state ? state.name : undefined;
+            resourceInputs["notificationDestinations"] = state ? state.notificationDestinations : undefined;
+            resourceInputs["organizationRoleName"] = state ? state.organizationRoleName : undefined;
+            resourceInputs["organizationalUnits"] = state ? state.organizationalUnits : undefined;
+            resourceInputs["permissionType"] = state ? state.permissionType : undefined;
+            resourceInputs["roleArn"] = state ? state.roleArn : undefined;
+            resourceInputs["samlConfigurationStatus"] = state ? state.samlConfigurationStatus : undefined;
+            resourceInputs["stackSetName"] = state ? state.stackSetName : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.accountAccessType === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'accountAccessType'");
+            }
+            if ((!args || args.authenticationProviders === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'authenticationProviders'");
+            }
+            if ((!args || args.permissionType === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'permissionType'");
+            }
+            resourceInputs["accountAccessType"] = args ? args.accountAccessType : undefined;
+            resourceInputs["authenticationProviders"] = args ? args.authenticationProviders : undefined;
+            resourceInputs["dataSources"] = args ? args.dataSources : undefined;
+            resourceInputs["description"] = args ? args.description : undefined;
+            resourceInputs["name"] = args ? args.name : undefined;
+            resourceInputs["notificationDestinations"] = args ? args.notificationDestinations : undefined;
+            resourceInputs["organizationRoleName"] = args ? args.organizationRoleName : undefined;
+            resourceInputs["organizationalUnits"] = args ? args.organizationalUnits : undefined;
+            resourceInputs["permissionType"] = args ? args.permissionType : undefined;
+            resourceInputs["roleArn"] = args ? args.roleArn : undefined;
+            resourceInputs["stackSetName"] = args ? args.stackSetName : undefined;
+            resourceInputs["arn"] = undefined /*out*/;
+            resourceInputs["endpoint"] = undefined /*out*/;
+            resourceInputs["grafanaVersion"] = undefined /*out*/;
+            resourceInputs["samlConfigurationStatus"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(Workspace.__pulumiType, name, resourceInputs, opts);
+    }
+    /**
+     * Get an existing Workspace resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new Workspace(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of Workspace.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === Workspace.__pulumiType;
+    }
+}
+exports.Workspace = Workspace;
+/** @internal */
+Workspace.__pulumiType = 'aws:grafana/workspace:Workspace';
+//# sourceMappingURL=workspace.js.map

package/grafana/workspace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../../grafana/workspace.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAa,SAAU,SAAQ,MAAM,CAAC,cAAc;IA8FhD,YAAY,IAAY,EAAE,WAA4C,EAAE,IAAmC;QACvG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAyC,CAAC;YACxD,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3E;aAAM;YACH,MAAM,IAAI,GAAG,WAAwC,CAAC;YACtD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC9D,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;aACpE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,uBAAuB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;aAC1E;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3D,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;aACjE;YACD,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC1C,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,gBAAgB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACrD,cAAc,CAAC,yBAAyB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACjE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC9D,CAAC;IA9ID;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAsB,EAAE,IAAmC;QACpH,OAAO,IAAI,SAAS,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAChE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,SAAS,CAAC,YAAY,CAAC;IAC1D,CAAC;;AA1BL,8BAgJC;AAlIG,gBAAgB;AACO,sBAAY,GAAG,iCAAiC,CAAC"}

package/grafana/workspaceSamlConfiguration.d.ts

@@ -0,0 +1,242 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Provides an Amazon Managed Grafana workspace SAML configuration resource.
+ *
+ * ## Example Usage
+ * ### Basic configuration
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const assume = new aws.iam.Role("assume", {assumeRolePolicy: JSON.stringify({
+ *     Version: "2012-10-17",
+ *     Statement: [{
+ *         Action: "sts:AssumeRole",
+ *         Effect: "Allow",
+ *         Sid: "",
+ *         Principal: {
+ *             Service: "grafana.amazonaws.com",
+ *         },
+ *     }],
+ * })});
+ * const exampleWorkspace = new aws.grafana.Workspace("exampleWorkspace", {
+ *     accountAccessType: "CURRENT_ACCOUNT",
+ *     authenticationProviders: ["SAML"],
+ *     permissionType: "SERVICE_MANAGED",
+ *     roleArn: assume.arn,
+ * });
+ * const exampleWorkspaceSamlConfiguration = new aws.grafana.WorkspaceSamlConfiguration("exampleWorkspaceSamlConfiguration", {
+ *     editorRoleValues: ["editor"],
+ *     idpMetadataUrl: "https://my_idp_metadata.url",
+ *     workspaceId: exampleWorkspace.id,
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * Grafana Workspace SAML configuration can be imported using the workspace's `id`, e.g.,
+ *
+ * ```sh
+ *  $ pulumi import aws:grafana/workspaceSamlConfiguration:WorkspaceSamlConfiguration example g-2054c75a02
+ * ```
+ */
+export declare class WorkspaceSamlConfiguration extends pulumi.CustomResource {
+    /**
+     * Get an existing WorkspaceSamlConfiguration resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: WorkspaceSamlConfigurationState, opts?: pulumi.CustomResourceOptions): WorkspaceSamlConfiguration;
+    /**
+     * Returns true if the given object is an instance of WorkspaceSamlConfiguration.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is WorkspaceSamlConfiguration;
+    /**
+     * The admin role values.
+     */
+    readonly adminRoleValues: pulumi.Output<string[] | undefined>;
+    /**
+     * The allowed organizations.
+     */
+    readonly allowedOrganizations: pulumi.Output<string[] | undefined>;
+    /**
+     * The editor role values.
+     */
+    readonly editorRoleValues: pulumi.Output<string[]>;
+    /**
+     * The email assertion.
+     */
+    readonly emailAssertion: pulumi.Output<string>;
+    /**
+     * The groups assertion.
+     */
+    readonly groupsAssertion: pulumi.Output<string | undefined>;
+    /**
+     * The IDP Metadata URL. Note that either `idpMetadataUrl` or `idpMetadataXml` (but not both) must be specified.
+     */
+    readonly idpMetadataUrl: pulumi.Output<string | undefined>;
+    /**
+     * The IDP Metadata XML. Note that either `idpMetadataUrl` or `idpMetadataXml` (but not both) must be specified.
+     */
+    readonly idpMetadataXml: pulumi.Output<string | undefined>;
+    /**
+     * The login assertion.
+     */
+    readonly loginAssertion: pulumi.Output<string>;
+    /**
+     * The login validity duration.
+     */
+    readonly loginValidityDuration: pulumi.Output<number>;
+    /**
+     * The name assertion.
+     */
+    readonly nameAssertion: pulumi.Output<string>;
+    /**
+     * The org assertion.
+     */
+    readonly orgAssertion: pulumi.Output<string | undefined>;
+    /**
+     * The role assertion.
+     */
+    readonly roleAssertion: pulumi.Output<string | undefined>;
+    /**
+     * The status of the SAML configuration.
+     */
+    readonly status: pulumi.Output<string>;
+    /**
+     * The workspace id.
+     */
+    readonly workspaceId: pulumi.Output<string>;
+    /**
+     * Create a WorkspaceSamlConfiguration resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: WorkspaceSamlConfigurationArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering WorkspaceSamlConfiguration resources.
+ */
+export interface WorkspaceSamlConfigurationState {
+    /**
+     * The admin role values.
+     */
+    adminRoleValues?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The allowed organizations.
+     */
+    allowedOrganizations?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The editor role values.
+     */
+    editorRoleValues?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The email assertion.
+     */
+    emailAssertion?: pulumi.Input<string>;
+    /**
+     * The groups assertion.
+     */
+    groupsAssertion?: pulumi.Input<string>;
+    /**
+     * The IDP Metadata URL. Note that either `idpMetadataUrl` or `idpMetadataXml` (but not both) must be specified.
+     */
+    idpMetadataUrl?: pulumi.Input<string>;
+    /**
+     * The IDP Metadata XML. Note that either `idpMetadataUrl` or `idpMetadataXml` (but not both) must be specified.
+     */
+    idpMetadataXml?: pulumi.Input<string>;
+    /**
+     * The login assertion.
+     */
+    loginAssertion?: pulumi.Input<string>;
+    /**
+     * The login validity duration.
+     */
+    loginValidityDuration?: pulumi.Input<number>;
+    /**
+     * The name assertion.
+     */
+    nameAssertion?: pulumi.Input<string>;
+    /**
+     * The org assertion.
+     */
+    orgAssertion?: pulumi.Input<string>;
+    /**
+     * The role assertion.
+     */
+    roleAssertion?: pulumi.Input<string>;
+    /**
+     * The status of the SAML configuration.
+     */
+    status?: pulumi.Input<string>;
+    /**
+     * The workspace id.
+     */
+    workspaceId?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a WorkspaceSamlConfiguration resource.
+ */
+export interface WorkspaceSamlConfigurationArgs {
+    /**
+     * The admin role values.
+     */
+    adminRoleValues?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The allowed organizations.
+     */
+    allowedOrganizations?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The editor role values.
+     */
+    editorRoleValues: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The email assertion.
+     */
+    emailAssertion?: pulumi.Input<string>;
+    /**
+     * The groups assertion.
+     */
+    groupsAssertion?: pulumi.Input<string>;
+    /**
+     * The IDP Metadata URL. Note that either `idpMetadataUrl` or `idpMetadataXml` (but not both) must be specified.
+     */
+    idpMetadataUrl?: pulumi.Input<string>;
+    /**
+     * The IDP Metadata XML. Note that either `idpMetadataUrl` or `idpMetadataXml` (but not both) must be specified.
+     */
+    idpMetadataXml?: pulumi.Input<string>;
+    /**
+     * The login assertion.
+     */
+    loginAssertion?: pulumi.Input<string>;
+    /**
+     * The login validity duration.
+     */
+    loginValidityDuration?: pulumi.Input<number>;
+    /**
+     * The name assertion.
+     */
+    nameAssertion?: pulumi.Input<string>;
+    /**
+     * The org assertion.
+     */
+    orgAssertion?: pulumi.Input<string>;
+    /**
+     * The role assertion.
+     */
+    roleAssertion?: pulumi.Input<string>;
+    /**
+     * The workspace id.
+     */
+    workspaceId: pulumi.Input<string>;
+}