@pulumi/aws 7.52.1 → 7.53.0-alpha.1793427939

package/cloudwatchomni/organizationDomain.d.ts

@@ -0,0 +1,293 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "../types/input";
+import * as outputs from "../types/output";
+/**
+ * Manages an Amazon CloudWatch Omni organization domain.
+ *
+ * An organization domain is a CloudWatch Omni domain shared by every account in an AWS Organizations organization. An organization can have one organization domain. While it exists, member accounts create their spaces in the organization domain instead of in an account domain.
+ *
+ * > **NOTE:** This resource must be managed from the organization's management account, in the domain's home Region. Trusted access for the `observabilityadmin.amazonaws.com` service principal must be enabled in AWS Organizations, and the management account must not have its own CloudWatch Omni domain.
+ *
+ * > **NOTE:** An organization domain cannot be deleted while any account in the organization has a space in it.
+ *
+ * ## Example Usage
+ *
+ * ### Basic Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const current = aws.getCallerIdentity({});
+ * const currentGetPartition = aws.getPartition({});
+ * const example = new aws.iam.Role("example", {
+ *     name: "example",
+ *     assumeRolePolicy: JSON.stringify({
+ *         Version: "2012-10-17",
+ *         Statement: [{
+ *             Effect: "Allow",
+ *             Principal: {
+ *                 Service: "cloudwatch.amazonaws.com",
+ *             },
+ *             Action: [
+ *                 "sts:AssumeRole",
+ *                 "sts:TagSession",
+ *             ],
+ *             Condition: {
+ *                 StringEquals: {
+ *                     "aws:SourceAccount": current.then(current => current.accountId),
+ *                 },
+ *             },
+ *         }],
+ *     }),
+ * });
+ * const exampleRolePolicyAttachment = new aws.iam.RolePolicyAttachment("example", {
+ *     role: example.name,
+ *     policyArn: currentGetPartition.then(currentGetPartition => `arn:${currentGetPartition.partition}:iam::aws:policy/CloudWatchOmniDomainAccessPolicy`),
+ * });
+ * const exampleOrganizationDomain = new aws.cloudwatchomni.OrganizationDomain("example", {
+ *     name: "example",
+ *     identityProviders: ["IAM"],
+ *     domainAccessRoleArn: example.arn,
+ * }, {
+ *     dependsOn: [exampleRolePolicyAttachment],
+ * });
+ * ```
+ *
+ * ### With IAM Identity Center
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = aws.ssoadmin.getInstances({});
+ * const exampleOrganizationDomain = new aws.cloudwatchomni.OrganizationDomain("example", {
+ *     identityProviderConfiguration: {
+ *         identityCenterConfiguration: {
+ *             identityCenterInstanceArn: example.then(example => example.arns?.[0]),
+ *         },
+ *     },
+ *     name: "example",
+ *     identityProviders: [
+ *         "IAM",
+ *         "IDC",
+ *     ],
+ *     domainAccessRoleArn: exampleAwsIamRole.arn,
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * ### Identity Schema
+ *
+ * #### Required
+ *
+ * * `domainId` (String) Domain ID.
+ *
+ * #### Optional
+ *
+ * * `accountId` (String) AWS Account where this resource is managed.
+ * * `region` (String) Region where this resource is managed.
+ *
+ * Using `pulumi import`, import a CloudWatch Omni Organization Domain by domain ID. For example:
+ *
+ * ```sh
+ * $ pulumi import aws:cloudwatchomni/organizationDomain:OrganizationDomain example d-0123456789abcdefghijklmno
+ * ```
+ */
+export declare class OrganizationDomain extends pulumi.CustomResource {
+    /**
+     * Get an existing OrganizationDomain resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: OrganizationDomainState, opts?: pulumi.CustomResourceOptions): OrganizationDomain;
+    /**
+     * Returns true if the given object is an instance of OrganizationDomain.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is OrganizationDomain;
+    /**
+     * ARN of the organization domain.
+     */
+    readonly arn: pulumi.Output<string>;
+    /**
+     * Additional endpoint URLs derived from the domain name.
+     */
+    readonly customEndpointUrls: pulumi.Output<string[]>;
+    /**
+     * ARN of the IAM role that CloudWatch Omni assumes to access the organization. The role must be in the management account, trust `cloudwatch.amazonaws.com` for `sts:AssumeRole` and `sts:TagSession`, and have the `CloudWatchOmniDomainAccessPolicy` AWS managed policy attached.
+     */
+    readonly domainAccessRoleArn: pulumi.Output<string>;
+    /**
+     * HTTPS endpoint URL for accessing the domain.
+     */
+    readonly domainEndpointUrl: pulumi.Output<string>;
+    /**
+     * Unique identifier of the organization domain.
+     */
+    readonly domainId: pulumi.Output<string>;
+    /**
+     * ARN of the IAM Identity Center application. Only set when `identityProviders` includes `IDC`.
+     */
+    readonly identityCenterApplicationArn: pulumi.Output<string>;
+    /**
+     * Identity provider configuration. Required when `identityProviders` includes `IDC`. See below.
+     */
+    readonly identityProviderConfiguration: pulumi.Output<outputs.cloudwatchomni.OrganizationDomainIdentityProviderConfiguration | undefined>;
+    /**
+     * Set of identity providers that users can sign in with. Valid values: `IAM`, `IDC`.
+     */
+    readonly identityProviders: pulumi.Output<string[]>;
+    /**
+     * Name of the domain. Must be 3-63 characters, contain only lowercase letters, numbers, and hyphens, begin and end with a letter or number, and not contain consecutive hyphens. Changing the name changes the domain's custom endpoint URLs.
+     *
+     * The following arguments are optional:
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * ID of the organization that the domain belongs to.
+     */
+    readonly organizationId: pulumi.Output<string>;
+    /**
+     * ID of the management account that owns the domain.
+     */
+    readonly ownerAccountId: pulumi.Output<string>;
+    /**
+     * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
+     */
+    readonly region: pulumi.Output<string>;
+    /**
+     * Status of the domain.
+     */
+    readonly status: pulumi.Output<string>;
+    /**
+     * Map of tags assigned to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
+     */
+    readonly tags: pulumi.Output<{
+        [key: string]: string;
+    } | undefined>;
+    /**
+     * Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
+     */
+    readonly tagsAll: pulumi.Output<{
+        [key: string]: string;
+    }>;
+    /**
+     * Create a OrganizationDomain resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: OrganizationDomainArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering OrganizationDomain resources.
+ */
+export interface OrganizationDomainState {
+    /**
+     * ARN of the organization domain.
+     */
+    arn?: pulumi.Input<string | undefined>;
+    /**
+     * Additional endpoint URLs derived from the domain name.
+     */
+    customEndpointUrls?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * ARN of the IAM role that CloudWatch Omni assumes to access the organization. The role must be in the management account, trust `cloudwatch.amazonaws.com` for `sts:AssumeRole` and `sts:TagSession`, and have the `CloudWatchOmniDomainAccessPolicy` AWS managed policy attached.
+     */
+    domainAccessRoleArn?: pulumi.Input<string | undefined>;
+    /**
+     * HTTPS endpoint URL for accessing the domain.
+     */
+    domainEndpointUrl?: pulumi.Input<string | undefined>;
+    /**
+     * Unique identifier of the organization domain.
+     */
+    domainId?: pulumi.Input<string | undefined>;
+    /**
+     * ARN of the IAM Identity Center application. Only set when `identityProviders` includes `IDC`.
+     */
+    identityCenterApplicationArn?: pulumi.Input<string | undefined>;
+    /**
+     * Identity provider configuration. Required when `identityProviders` includes `IDC`. See below.
+     */
+    identityProviderConfiguration?: pulumi.Input<inputs.cloudwatchomni.OrganizationDomainIdentityProviderConfiguration | undefined>;
+    /**
+     * Set of identity providers that users can sign in with. Valid values: `IAM`, `IDC`.
+     */
+    identityProviders?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Name of the domain. Must be 3-63 characters, contain only lowercase letters, numbers, and hyphens, begin and end with a letter or number, and not contain consecutive hyphens. Changing the name changes the domain's custom endpoint URLs.
+     *
+     * The following arguments are optional:
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * ID of the organization that the domain belongs to.
+     */
+    organizationId?: pulumi.Input<string | undefined>;
+    /**
+     * ID of the management account that owns the domain.
+     */
+    ownerAccountId?: pulumi.Input<string | undefined>;
+    /**
+     * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
+     */
+    region?: pulumi.Input<string | undefined>;
+    /**
+     * Status of the domain.
+     */
+    status?: pulumi.Input<string | undefined>;
+    /**
+     * Map of tags assigned to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
+     */
+    tags?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    } | undefined>;
+    /**
+     * Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
+     */
+    tagsAll?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    } | undefined>;
+}
+/**
+ * The set of arguments for constructing a OrganizationDomain resource.
+ */
+export interface OrganizationDomainArgs {
+    /**
+     * ARN of the IAM role that CloudWatch Omni assumes to access the organization. The role must be in the management account, trust `cloudwatch.amazonaws.com` for `sts:AssumeRole` and `sts:TagSession`, and have the `CloudWatchOmniDomainAccessPolicy` AWS managed policy attached.
+     */
+    domainAccessRoleArn: pulumi.Input<string>;
+    /**
+     * Identity provider configuration. Required when `identityProviders` includes `IDC`. See below.
+     */
+    identityProviderConfiguration?: pulumi.Input<inputs.cloudwatchomni.OrganizationDomainIdentityProviderConfiguration | undefined>;
+    /**
+     * Set of identity providers that users can sign in with. Valid values: `IAM`, `IDC`.
+     */
+    identityProviders: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Name of the domain. Must be 3-63 characters, contain only lowercase letters, numbers, and hyphens, begin and end with a letter or number, and not contain consecutive hyphens. Changing the name changes the domain's custom endpoint URLs.
+     *
+     * The following arguments are optional:
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
+     */
+    region?: pulumi.Input<string | undefined>;
+    /**
+     * Map of tags assigned to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
+     */
+    tags?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    } | undefined>;
+}
+//# sourceMappingURL=organizationDomain.d.ts.map

package/cloudwatchomni/organizationDomain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationDomain.d.ts","sourceRoot":"","sources":["../../cloudwatchomni/organizationDomain.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAI3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6FG;AACH,qBAAa,kBAAmB,SAAQ,MAAM,CAAC,cAAc;IACzD;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,uBAAuB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,kBAAkB;IAOtJ;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,kBAAkB;IAO7D;;OAEG;IACH,SAAgC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3D;;OAEG;IACH,SAAgC,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5E;;OAEG;IACH,SAAwB,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnE;;OAEG;IACH,SAAgC,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzE;;OAEG;IACH,SAAgC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChE;;OAEG;IACH,SAAgC,4BAA4B,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpF;;OAEG;IACH,SAAwB,6BAA6B,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,+CAA+C,GAAG,SAAS,CAAC,CAAC;IACzJ;;OAEG;IACH,SAAwB,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACnE;;;;OAIG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD;;OAEG;IACH,SAAgC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtE;;OAEG;IACH,SAAgC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtE;;OAEG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtD;;OAEG;IACH,SAAgC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9D;;OAEG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAC,GAAG,SAAS,CAAC,CAAC;IACjF;;OAEG;IACH,SAAgC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAC,CAAC,CAAC;IAEhF;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAgD9F;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACpC;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACvC;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACtE;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACvD;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACrD;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5C;;OAEG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAChE;;OAEG;IACH,6BAA6B,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,+CAA+C,GAAG,SAAS,CAAC,CAAC;IAChI;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACrE;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClD;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClD;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1C;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;KAAC,GAAG,SAAS,CAAC,CAAC;IACvE;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;KAAC,GAAG,SAAS,CAAC,CAAC;CAC7E;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACnC;;OAEG;IACH,mBAAmB,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1C;;OAEG;IACH,6BAA6B,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,+CAA+C,GAAG,SAAS,CAAC,CAAC;IAChI;;OAEG;IACH,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACxD;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;KAAC,GAAG,SAAS,CAAC,CAAC;CAC1E"}

package/cloudwatchomni/organizationDomain.js

@@ -0,0 +1,200 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OrganizationDomain = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const utilities = __importStar(require("../utilities"));
+/**
+ * Manages an Amazon CloudWatch Omni organization domain.
+ *
+ * An organization domain is a CloudWatch Omni domain shared by every account in an AWS Organizations organization. An organization can have one organization domain. While it exists, member accounts create their spaces in the organization domain instead of in an account domain.
+ *
+ * > **NOTE:** This resource must be managed from the organization's management account, in the domain's home Region. Trusted access for the `observabilityadmin.amazonaws.com` service principal must be enabled in AWS Organizations, and the management account must not have its own CloudWatch Omni domain.
+ *
+ * > **NOTE:** An organization domain cannot be deleted while any account in the organization has a space in it.
+ *
+ * ## Example Usage
+ *
+ * ### Basic Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const current = aws.getCallerIdentity({});
+ * const currentGetPartition = aws.getPartition({});
+ * const example = new aws.iam.Role("example", {
+ *     name: "example",
+ *     assumeRolePolicy: JSON.stringify({
+ *         Version: "2012-10-17",
+ *         Statement: [{
+ *             Effect: "Allow",
+ *             Principal: {
+ *                 Service: "cloudwatch.amazonaws.com",
+ *             },
+ *             Action: [
+ *                 "sts:AssumeRole",
+ *                 "sts:TagSession",
+ *             ],
+ *             Condition: {
+ *                 StringEquals: {
+ *                     "aws:SourceAccount": current.then(current => current.accountId),
+ *                 },
+ *             },
+ *         }],
+ *     }),
+ * });
+ * const exampleRolePolicyAttachment = new aws.iam.RolePolicyAttachment("example", {
+ *     role: example.name,
+ *     policyArn: currentGetPartition.then(currentGetPartition => `arn:${currentGetPartition.partition}:iam::aws:policy/CloudWatchOmniDomainAccessPolicy`),
+ * });
+ * const exampleOrganizationDomain = new aws.cloudwatchomni.OrganizationDomain("example", {
+ *     name: "example",
+ *     identityProviders: ["IAM"],
+ *     domainAccessRoleArn: example.arn,
+ * }, {
+ *     dependsOn: [exampleRolePolicyAttachment],
+ * });
+ * ```
+ *
+ * ### With IAM Identity Center
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = aws.ssoadmin.getInstances({});
+ * const exampleOrganizationDomain = new aws.cloudwatchomni.OrganizationDomain("example", {
+ *     identityProviderConfiguration: {
+ *         identityCenterConfiguration: {
+ *             identityCenterInstanceArn: example.then(example => example.arns?.[0]),
+ *         },
+ *     },
+ *     name: "example",
+ *     identityProviders: [
+ *         "IAM",
+ *         "IDC",
+ *     ],
+ *     domainAccessRoleArn: exampleAwsIamRole.arn,
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * ### Identity Schema
+ *
+ * #### Required
+ *
+ * * `domainId` (String) Domain ID.
+ *
+ * #### Optional
+ *
+ * * `accountId` (String) AWS Account where this resource is managed.
+ * * `region` (String) Region where this resource is managed.
+ *
+ * Using `pulumi import`, import a CloudWatch Omni Organization Domain by domain ID. For example:
+ *
+ * ```sh
+ * $ pulumi import aws:cloudwatchomni/organizationDomain:OrganizationDomain example d-0123456789abcdefghijklmno
+ * ```
+ */
+class OrganizationDomain extends pulumi.CustomResource {
+    /**
+     * Get an existing OrganizationDomain resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new OrganizationDomain(name, state, { ...opts, id: id });
+    }
+    /** @internal */
+    static __pulumiType = 'aws:cloudwatchomni/organizationDomain:OrganizationDomain';
+    /**
+     * Returns true if the given object is an instance of OrganizationDomain.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === OrganizationDomain.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["arn"] = state?.arn;
+            resourceInputs["customEndpointUrls"] = state?.customEndpointUrls;
+            resourceInputs["domainAccessRoleArn"] = state?.domainAccessRoleArn;
+            resourceInputs["domainEndpointUrl"] = state?.domainEndpointUrl;
+            resourceInputs["domainId"] = state?.domainId;
+            resourceInputs["identityCenterApplicationArn"] = state?.identityCenterApplicationArn;
+            resourceInputs["identityProviderConfiguration"] = state?.identityProviderConfiguration;
+            resourceInputs["identityProviders"] = state?.identityProviders;
+            resourceInputs["name"] = state?.name;
+            resourceInputs["organizationId"] = state?.organizationId;
+            resourceInputs["ownerAccountId"] = state?.ownerAccountId;
+            resourceInputs["region"] = state?.region;
+            resourceInputs["status"] = state?.status;
+            resourceInputs["tags"] = state?.tags;
+            resourceInputs["tagsAll"] = state?.tagsAll;
+        }
+        else {
+            const args = argsOrState;
+            if (args?.domainAccessRoleArn === undefined && !opts.urn) {
+                throw new Error("Missing required property 'domainAccessRoleArn'");
+            }
+            if (args?.identityProviders === undefined && !opts.urn) {
+                throw new Error("Missing required property 'identityProviders'");
+            }
+            resourceInputs["domainAccessRoleArn"] = args?.domainAccessRoleArn;
+            resourceInputs["identityProviderConfiguration"] = args?.identityProviderConfiguration;
+            resourceInputs["identityProviders"] = args?.identityProviders;
+            resourceInputs["name"] = args?.name;
+            resourceInputs["region"] = args?.region;
+            resourceInputs["tags"] = args?.tags;
+            resourceInputs["arn"] = undefined /*out*/;
+            resourceInputs["customEndpointUrls"] = undefined /*out*/;
+            resourceInputs["domainEndpointUrl"] = undefined /*out*/;
+            resourceInputs["domainId"] = undefined /*out*/;
+            resourceInputs["identityCenterApplicationArn"] = undefined /*out*/;
+            resourceInputs["organizationId"] = undefined /*out*/;
+            resourceInputs["ownerAccountId"] = undefined /*out*/;
+            resourceInputs["status"] = undefined /*out*/;
+            resourceInputs["tagsAll"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(OrganizationDomain.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.OrganizationDomain = OrganizationDomain;
+//# sourceMappingURL=organizationDomain.js.map

package/cloudwatchomni/organizationDomain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationDomain.js","sourceRoot":"","sources":["../../cloudwatchomni/organizationDomain.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AAIzC,wDAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6FG;AACH,MAAa,kBAAmB,SAAQ,MAAM,CAAC,cAAc;IACzD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA+B,EAAE,IAAmC;QAC7H,OAAO,IAAI,kBAAkB,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,0DAA0D,CAAC;IAEjG;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,kBAAkB,CAAC,YAAY,CAAC;IACnE,CAAC;IAyED,YAAY,IAAY,EAAE,WAA8D,EAAE,IAAmC;QACzH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAkD,CAAC;YACjE,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC;YACnC,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,EAAE,kBAAkB,CAAC;YACjE,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,EAAE,mBAAmB,CAAC;YACnE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,8BAA8B,CAAC,GAAG,KAAK,EAAE,4BAA4B,CAAC;YACrF,cAAc,CAAC,+BAA+B,CAAC,GAAG,KAAK,EAAE,6BAA6B,CAAC;YACvF,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;SAC9C;aAAM;YACH,MAAM,IAAI,GAAG,WAAiD,CAAC;YAC/D,IAAI,IAAI,EAAE,mBAAmB,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;aACtE;YACD,IAAI,IAAI,EAAE,iBAAiB,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;aACpE;YACD,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,EAAE,mBAAmB,CAAC;YAClE,cAAc,CAAC,+BAA+B,CAAC,GAAG,IAAI,EAAE,6BAA6B,CAAC;YACtF,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC1C,cAAc,CAAC,oBAAoB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACzD,cAAc,CAAC,mBAAmB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,8BAA8B,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACnE,cAAc,CAAC,gBAAgB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACrD,cAAc,CAAC,gBAAgB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACrD,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC7C,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACjD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,kBAAkB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACvE,CAAC;;AAjJL,gDAkJC"}