@pulumi/azuread 5.0.0 → 5.3.0-alpha.1631825344
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/application.d.ts +12 -0
- package/application.js +3 -0
- package/application.js.map +1 -1
- package/applicationCertificate.js +1 -0
- package/applicationCertificate.js.map +1 -1
- package/applicationPassword.js +1 -0
- package/applicationPassword.js.map +1 -1
- package/applicationPreAuthorized.js +1 -0
- package/applicationPreAuthorized.js.map +1 -1
- package/conditionalAccessPolicy.d.ts +167 -0
- package/conditionalAccessPolicy.js +141 -0
- package/conditionalAccessPolicy.js.map +1 -0
- package/config/index.js +11 -4
- package/config/index.js.map +1 -1
- package/config/vars.d.ts +12 -12
- package/config/vars.js +76 -52
- package/config/vars.js.map +1 -1
- package/getApplication.js +1 -0
- package/getApplication.js.map +1 -1
- package/getApplicationPublishedAppIds.js +1 -0
- package/getApplicationPublishedAppIds.js.map +1 -1
- package/getApplicationTemplate.d.ts +75 -0
- package/getApplicationTemplate.js +41 -0
- package/getApplicationTemplate.js.map +1 -0
- package/getClientConfig.js +1 -0
- package/getClientConfig.js.map +1 -1
- package/getDomains.js +1 -0
- package/getDomains.js.map +1 -1
- package/getGroup.js +1 -0
- package/getGroup.js.map +1 -1
- package/getGroups.d.ts +16 -0
- package/getGroups.js +13 -0
- package/getGroups.js.map +1 -1
- package/getServicePrincipal.d.ts +5 -1
- package/getServicePrincipal.js +1 -0
- package/getServicePrincipal.js.map +1 -1
- package/getServicePrincipals.d.ts +112 -0
- package/getServicePrincipals.js +82 -0
- package/getServicePrincipals.js.map +1 -0
- package/getUser.js +1 -0
- package/getUser.js.map +1 -1
- package/getUsers.d.ts +6 -1
- package/getUsers.js +3 -1
- package/getUsers.js.map +1 -1
- package/group.js +1 -0
- package/group.js.map +1 -1
- package/groupMember.js +1 -0
- package/groupMember.js.map +1 -1
- package/index.d.ts +5 -0
- package/index.js +48 -23
- package/index.js.map +1 -1
- package/invitation.d.ts +174 -0
- package/invitation.js +130 -0
- package/invitation.js.map +1 -0
- package/namedLocation.d.ts +120 -0
- package/namedLocation.js +105 -0
- package/namedLocation.js.map +1 -0
- package/package.json +4 -3
- package/package.json.bak +2 -1
- package/package.json.dev +3 -2
- package/provider.js +4 -3
- package/provider.js.map +1 -1
- package/servicePrincipal.d.ts +48 -0
- package/servicePrincipal.js +39 -0
- package/servicePrincipal.js.map +1 -1
- package/servicePrincipalCertificate.js +1 -0
- package/servicePrincipalCertificate.js.map +1 -1
- package/servicePrincipalPassword.js +1 -0
- package/servicePrincipalPassword.js.map +1 -1
- package/types/index.js +1 -0
- package/types/index.js.map +1 -1
- package/types/input.d.ts +167 -0
- package/types/output.d.ts +219 -0
- package/user.d.ts +24 -0
- package/user.js +5 -0
- package/user.js.map +1 -1
- package/utilities.js +1 -0
- package/utilities.js.map +1 -1
package/application.d.ts
CHANGED
|
@@ -129,6 +129,10 @@ export declare class Application extends pulumi.CustomResource {
|
|
|
129
129
|
* URL of the application's support page.
|
|
130
130
|
*/
|
|
131
131
|
readonly supportUrl: pulumi.Output<string | undefined>;
|
|
132
|
+
/**
|
|
133
|
+
* Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.
|
|
134
|
+
*/
|
|
135
|
+
readonly templateId: pulumi.Output<string>;
|
|
132
136
|
/**
|
|
133
137
|
* URL of the application's terms of service statement.
|
|
134
138
|
*/
|
|
@@ -254,6 +258,10 @@ export interface ApplicationState {
|
|
|
254
258
|
* URL of the application's support page.
|
|
255
259
|
*/
|
|
256
260
|
supportUrl?: pulumi.Input<string>;
|
|
261
|
+
/**
|
|
262
|
+
* Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.
|
|
263
|
+
*/
|
|
264
|
+
templateId?: pulumi.Input<string>;
|
|
257
265
|
/**
|
|
258
266
|
* URL of the application's terms of service statement.
|
|
259
267
|
*/
|
|
@@ -339,6 +347,10 @@ export interface ApplicationArgs {
|
|
|
339
347
|
* URL of the application's support page.
|
|
340
348
|
*/
|
|
341
349
|
supportUrl?: pulumi.Input<string>;
|
|
350
|
+
/**
|
|
351
|
+
* Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.
|
|
352
|
+
*/
|
|
353
|
+
templateId?: pulumi.Input<string>;
|
|
342
354
|
/**
|
|
343
355
|
* URL of the application's terms of service statement.
|
|
344
356
|
*/
|
package/application.js
CHANGED
|
@@ -2,6 +2,7 @@
|
|
|
2
2
|
// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
|
|
3
3
|
// *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
5
|
+
exports.Application = void 0;
|
|
5
6
|
const pulumi = require("@pulumi/pulumi");
|
|
6
7
|
const utilities = require("./utilities");
|
|
7
8
|
/**
|
|
@@ -44,6 +45,7 @@ class Application extends pulumi.CustomResource {
|
|
|
44
45
|
inputs["signInAudience"] = state ? state.signInAudience : undefined;
|
|
45
46
|
inputs["singlePageApplication"] = state ? state.singlePageApplication : undefined;
|
|
46
47
|
inputs["supportUrl"] = state ? state.supportUrl : undefined;
|
|
48
|
+
inputs["templateId"] = state ? state.templateId : undefined;
|
|
47
49
|
inputs["termsOfServiceUrl"] = state ? state.termsOfServiceUrl : undefined;
|
|
48
50
|
inputs["web"] = state ? state.web : undefined;
|
|
49
51
|
}
|
|
@@ -70,6 +72,7 @@ class Application extends pulumi.CustomResource {
|
|
|
70
72
|
inputs["signInAudience"] = args ? args.signInAudience : undefined;
|
|
71
73
|
inputs["singlePageApplication"] = args ? args.singlePageApplication : undefined;
|
|
72
74
|
inputs["supportUrl"] = args ? args.supportUrl : undefined;
|
|
75
|
+
inputs["templateId"] = args ? args.templateId : undefined;
|
|
73
76
|
inputs["termsOfServiceUrl"] = args ? args.termsOfServiceUrl : undefined;
|
|
74
77
|
inputs["web"] = args ? args.web : undefined;
|
|
75
78
|
inputs["appRoleIds"] = undefined /*out*/;
|
package/application.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"application.js","sourceRoot":"","sources":["../application.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF
|
|
1
|
+
{"version":3,"file":"application.js","sourceRoot":"","sources":["../application.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAEzC,yCAAyC;AAEzC;;;;;;;;GAQG;AACH,MAAa,WAAY,SAAQ,MAAM,CAAC,cAAc;IAqJlD,YAAY,IAAY,EAAE,WAAgD,EAAE,IAAmC;QAC3G,IAAI,MAAM,GAAkB,EAAE,CAAC;QAC/B,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2C,CAAC;YAC1D,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9C,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,MAAM,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,MAAM,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,MAAM,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,MAAM,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,MAAM,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,MAAM,CAAC,6BAA6B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,MAAM,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,MAAM,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,MAAM,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,MAAM,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,MAAM,CAAC,4BAA4B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,MAAM,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,MAAM,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,MAAM,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,MAAM,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,MAAM,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,MAAM,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,MAAM,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,MAAM,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,MAAM,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,MAAM,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;SACjD;aAAM;YACH,MAAM,IAAI,GAAG,WAA0C,CAAC;YACxD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5C,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,MAAM,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,MAAM,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,MAAM,CAAC,6BAA6B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,MAAM,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,MAAM,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,MAAM,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,MAAM,CAAC,4BAA4B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,MAAM,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAClD,MAAM,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,MAAM,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,MAAM,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,MAAM,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,MAAM,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,MAAM,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,MAAM,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5C,MAAM,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACzC,MAAM,CAAC,eAAe,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC5C,MAAM,CAAC,qBAAqB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAClD,MAAM,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACtC,MAAM,CAAC,0BAA0B,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACvD,MAAM,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACvC,MAAM,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACjD;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YACf,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE,EAAC,CAAC,CAAC;SACxE;QACD,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;IA3ND;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwB,EAAE,IAAmC;QACtH,OAAO,IAAI,WAAW,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAClE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,YAAY,CAAC;IAC5D,CAAC;;AA1BL,kCA6NC;AA/MG,gBAAgB;AACO,wBAAY,GAAG,uCAAuC,CAAC"}
|
|
@@ -2,6 +2,7 @@
|
|
|
2
2
|
// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
|
|
3
3
|
// *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
5
|
+
exports.ApplicationCertificate = void 0;
|
|
5
6
|
const pulumi = require("@pulumi/pulumi");
|
|
6
7
|
const utilities = require("./utilities");
|
|
7
8
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"applicationCertificate.js","sourceRoot":"","sources":["../applicationCertificate.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF
|
|
1
|
+
{"version":3,"file":"applicationCertificate.js","sourceRoot":"","sources":["../applicationCertificate.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;GAUG;AACH,MAAa,sBAAuB,SAAQ,MAAM,CAAC,cAAc;IAqE7D,YAAY,IAAY,EAAE,WAAsE,EAAE,IAAmC;QACjI,IAAI,MAAM,GAAkB,EAAE,CAAC;QAC/B,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsD,CAAC;YACrE,MAAM,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,MAAM,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,MAAM,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAClD,MAAM,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAChD,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;SACrD;aAAM;YACH,MAAM,IAAI,GAAG,WAAqD,CAAC;YACnE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,mBAAmB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAChE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;aACtE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,MAAM,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,MAAM,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAChD,MAAM,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9C,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;SACnD;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YACf,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE,EAAC,CAAC,CAAC;SACxE;QACD,KAAK,CAAC,sBAAsB,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC;IAtGD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmC,EAAE,IAAmC;QACjI,OAAO,IAAI,sBAAsB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC7E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,sBAAsB,CAAC,YAAY,CAAC;IACvE,CAAC;;AA1BL,wDAwGC;AA1FG,gBAAgB;AACO,mCAAY,GAAG,6DAA6D,CAAC"}
|
package/applicationPassword.js
CHANGED
|
@@ -2,6 +2,7 @@
|
|
|
2
2
|
// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
|
|
3
3
|
// *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
5
|
+
exports.ApplicationPassword = void 0;
|
|
5
6
|
const pulumi = require("@pulumi/pulumi");
|
|
6
7
|
const utilities = require("./utilities");
|
|
7
8
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"applicationPassword.js","sourceRoot":"","sources":["../applicationPassword.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF
|
|
1
|
+
{"version":3,"file":"applicationPassword.js","sourceRoot":"","sources":["../applicationPassword.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;GAIG;AACH,MAAa,mBAAoB,SAAQ,MAAM,CAAC,cAAc;IAqE1D,YAAY,IAAY,EAAE,WAAgE,EAAE,IAAmC;QAC3H,IAAI,MAAM,GAAkB,EAAE,CAAC;QAC/B,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAmD,CAAC;YAClE,MAAM,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,MAAM,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,MAAM,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAClD,MAAM,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;SACrD;aAAM;YACH,MAAM,IAAI,GAAG,WAAkD,CAAC;YAChE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,mBAAmB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAChE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;aACtE;YACD,MAAM,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,MAAM,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,MAAM,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,MAAM,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,MAAM,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACpC,MAAM,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACvC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YACf,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE,EAAC,CAAC,CAAC;SACxE;QACD,KAAK,CAAC,mBAAmB,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;IAnGD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAgC,EAAE,IAAmC;QAC9H,OAAO,IAAI,mBAAmB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC1E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,mBAAmB,CAAC,YAAY,CAAC;IACpE,CAAC;;AA1BL,kDAqGC;AAvFG,gBAAgB;AACO,gCAAY,GAAG,uDAAuD,CAAC"}
|
|
@@ -2,6 +2,7 @@
|
|
|
2
2
|
// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
|
|
3
3
|
// *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
5
|
+
exports.ApplicationPreAuthorized = void 0;
|
|
5
6
|
const pulumi = require("@pulumi/pulumi");
|
|
6
7
|
const utilities = require("./utilities");
|
|
7
8
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"applicationPreAuthorized.js","sourceRoot":"","sources":["../applicationPreAuthorized.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF
|
|
1
|
+
{"version":3,"file":"applicationPreAuthorized.js","sourceRoot":"","sources":["../applicationPreAuthorized.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;GAUG;AACH,MAAa,wBAAyB,SAAQ,MAAM,CAAC,cAAc;IAiD/D,YAAY,IAAY,EAAE,WAA0E,EAAE,IAAmC;QACrI,IAAI,MAAM,GAAkB,EAAE,CAAC;QAC/B,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAwD,CAAC;YACvE,MAAM,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,MAAM,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,MAAM,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;SACrE;aAAM;YACH,MAAM,IAAI,GAAG,WAAuD,CAAC;YACrE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,mBAAmB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAChE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;aACtE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC5D,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;aAClE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;aAChE;YACD,MAAM,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,MAAM,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,MAAM,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;SACnE;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YACf,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE,EAAC,CAAC,CAAC;SACxE;QACD,KAAK,CAAC,wBAAwB,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC;IA3ED;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAqC,EAAE,IAAmC;QACnI,OAAO,IAAI,wBAAwB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC/E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,wBAAwB,CAAC,YAAY,CAAC;IACzE,CAAC;;AA1BL,4DA6EC;AA/DG,gBAAgB;AACO,qCAAY,GAAG,iEAAiE,CAAC"}
|
|
@@ -0,0 +1,167 @@
|
|
|
1
|
+
import * as pulumi from "@pulumi/pulumi";
|
|
2
|
+
import { input as inputs, output as outputs } from "./types";
|
|
3
|
+
/**
|
|
4
|
+
* Manages a Conditional Access Policy within Azure Active Directory.
|
|
5
|
+
*
|
|
6
|
+
* ## API Permissions
|
|
7
|
+
*
|
|
8
|
+
* The following API permissions are required in order to use this resource.
|
|
9
|
+
*
|
|
10
|
+
* When authenticated with a service principal, this resource requires the following application roles: `Policy.ReadWrite.ConditionalAccess` and `Policy.Read.All`
|
|
11
|
+
*
|
|
12
|
+
* When authenticated with a user principal, this resource requires one of the following directory roles: `Conditional Access Administrator` or `Global Administrator`
|
|
13
|
+
*
|
|
14
|
+
* ## Example Usage
|
|
15
|
+
*
|
|
16
|
+
* ```typescript
|
|
17
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
18
|
+
* import * as azuread from "@pulumi/azuread";
|
|
19
|
+
*
|
|
20
|
+
* const example = new azuread.ConditionalAccessPolicy("example", {
|
|
21
|
+
* conditions: {
|
|
22
|
+
* applications: {
|
|
23
|
+
* excludedApplications: ["00000004-0000-0ff1-ce00-000000000000"],
|
|
24
|
+
* includedApplications: ["All"],
|
|
25
|
+
* },
|
|
26
|
+
* clientAppTypes: ["all"],
|
|
27
|
+
* locations: {
|
|
28
|
+
* excludedLocations: ["AllTrusted"],
|
|
29
|
+
* includedLocations: ["All"],
|
|
30
|
+
* },
|
|
31
|
+
* platforms: {
|
|
32
|
+
* excludedPlatforms: ["iOS"],
|
|
33
|
+
* includedPlatforms: ["android"],
|
|
34
|
+
* },
|
|
35
|
+
* signInRiskLevels: ["medium"],
|
|
36
|
+
* userRiskLevels: ["medium"],
|
|
37
|
+
* users: {
|
|
38
|
+
* excludedUsers: ["GuestsOrExternalUsers"],
|
|
39
|
+
* includedUsers: ["All"],
|
|
40
|
+
* },
|
|
41
|
+
* },
|
|
42
|
+
* displayName: "example policy",
|
|
43
|
+
* grantControls: {
|
|
44
|
+
* builtInControls: ["mfa"],
|
|
45
|
+
* operator: "OR",
|
|
46
|
+
* },
|
|
47
|
+
* sessionControls: {
|
|
48
|
+
* applicationEnforcedRestrictions: [{
|
|
49
|
+
* enabled: true,
|
|
50
|
+
* }],
|
|
51
|
+
* cloudAppSecurity: [{
|
|
52
|
+
* cloudAppSecurityType: "monitorOnly",
|
|
53
|
+
* enabled: true,
|
|
54
|
+
* }],
|
|
55
|
+
* signInFrequency: [{
|
|
56
|
+
* enabled: true,
|
|
57
|
+
* type: "hours",
|
|
58
|
+
* value: 10,
|
|
59
|
+
* }],
|
|
60
|
+
* },
|
|
61
|
+
* state: "disabled",
|
|
62
|
+
* });
|
|
63
|
+
* ```
|
|
64
|
+
*
|
|
65
|
+
* ## Import
|
|
66
|
+
*
|
|
67
|
+
* Conditional Access Policies can be imported using the `id`, e.g.
|
|
68
|
+
*
|
|
69
|
+
* ```sh
|
|
70
|
+
* $ pulumi import azuread:index/conditionalAccessPolicy:ConditionalAccessPolicy my_location 00000000-0000-0000-0000-000000000000
|
|
71
|
+
* ```
|
|
72
|
+
*/
|
|
73
|
+
export declare class ConditionalAccessPolicy extends pulumi.CustomResource {
|
|
74
|
+
/**
|
|
75
|
+
* Get an existing ConditionalAccessPolicy resource's state with the given name, ID, and optional extra
|
|
76
|
+
* properties used to qualify the lookup.
|
|
77
|
+
*
|
|
78
|
+
* @param name The _unique_ name of the resulting resource.
|
|
79
|
+
* @param id The _unique_ provider ID of the resource to lookup.
|
|
80
|
+
* @param state Any extra arguments used during the lookup.
|
|
81
|
+
* @param opts Optional settings to control the behavior of the CustomResource.
|
|
82
|
+
*/
|
|
83
|
+
static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ConditionalAccessPolicyState, opts?: pulumi.CustomResourceOptions): ConditionalAccessPolicy;
|
|
84
|
+
/**
|
|
85
|
+
* Returns true if the given object is an instance of ConditionalAccessPolicy. This is designed to work even
|
|
86
|
+
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
87
|
+
*/
|
|
88
|
+
static isInstance(obj: any): obj is ConditionalAccessPolicy;
|
|
89
|
+
/**
|
|
90
|
+
* A `conditions` block as documented below, which specifies the rules that must be met for the policy to apply.
|
|
91
|
+
*/
|
|
92
|
+
readonly conditions: pulumi.Output<outputs.ConditionalAccessPolicyConditions>;
|
|
93
|
+
/**
|
|
94
|
+
* The friendly name for this Conditional Access Policy.
|
|
95
|
+
*/
|
|
96
|
+
readonly displayName: pulumi.Output<string>;
|
|
97
|
+
/**
|
|
98
|
+
* A `grantControls` block as documented below, which specifies the grant controls that must be fulfilled to pass the policy.
|
|
99
|
+
*/
|
|
100
|
+
readonly grantControls: pulumi.Output<outputs.ConditionalAccessPolicyGrantControls>;
|
|
101
|
+
/**
|
|
102
|
+
* A `sessionControls` block as documented below, which specifies the session controls that are enforced after sign-in.
|
|
103
|
+
*/
|
|
104
|
+
readonly sessionControls: pulumi.Output<outputs.ConditionalAccessPolicySessionControls | undefined>;
|
|
105
|
+
/**
|
|
106
|
+
* Specifies the state of the policy object. Possible values are: `enabled`, `disabled` and `enabledForReportingButNotEnforced`
|
|
107
|
+
*/
|
|
108
|
+
readonly state: pulumi.Output<string>;
|
|
109
|
+
/**
|
|
110
|
+
* Create a ConditionalAccessPolicy resource with the given unique name, arguments, and options.
|
|
111
|
+
*
|
|
112
|
+
* @param name The _unique_ name of the resource.
|
|
113
|
+
* @param args The arguments to use to populate this resource's properties.
|
|
114
|
+
* @param opts A bag of options that control this resource's behavior.
|
|
115
|
+
*/
|
|
116
|
+
constructor(name: string, args: ConditionalAccessPolicyArgs, opts?: pulumi.CustomResourceOptions);
|
|
117
|
+
}
|
|
118
|
+
/**
|
|
119
|
+
* Input properties used for looking up and filtering ConditionalAccessPolicy resources.
|
|
120
|
+
*/
|
|
121
|
+
export interface ConditionalAccessPolicyState {
|
|
122
|
+
/**
|
|
123
|
+
* A `conditions` block as documented below, which specifies the rules that must be met for the policy to apply.
|
|
124
|
+
*/
|
|
125
|
+
conditions?: pulumi.Input<inputs.ConditionalAccessPolicyConditions>;
|
|
126
|
+
/**
|
|
127
|
+
* The friendly name for this Conditional Access Policy.
|
|
128
|
+
*/
|
|
129
|
+
displayName?: pulumi.Input<string>;
|
|
130
|
+
/**
|
|
131
|
+
* A `grantControls` block as documented below, which specifies the grant controls that must be fulfilled to pass the policy.
|
|
132
|
+
*/
|
|
133
|
+
grantControls?: pulumi.Input<inputs.ConditionalAccessPolicyGrantControls>;
|
|
134
|
+
/**
|
|
135
|
+
* A `sessionControls` block as documented below, which specifies the session controls that are enforced after sign-in.
|
|
136
|
+
*/
|
|
137
|
+
sessionControls?: pulumi.Input<inputs.ConditionalAccessPolicySessionControls>;
|
|
138
|
+
/**
|
|
139
|
+
* Specifies the state of the policy object. Possible values are: `enabled`, `disabled` and `enabledForReportingButNotEnforced`
|
|
140
|
+
*/
|
|
141
|
+
state?: pulumi.Input<string>;
|
|
142
|
+
}
|
|
143
|
+
/**
|
|
144
|
+
* The set of arguments for constructing a ConditionalAccessPolicy resource.
|
|
145
|
+
*/
|
|
146
|
+
export interface ConditionalAccessPolicyArgs {
|
|
147
|
+
/**
|
|
148
|
+
* A `conditions` block as documented below, which specifies the rules that must be met for the policy to apply.
|
|
149
|
+
*/
|
|
150
|
+
conditions: pulumi.Input<inputs.ConditionalAccessPolicyConditions>;
|
|
151
|
+
/**
|
|
152
|
+
* The friendly name for this Conditional Access Policy.
|
|
153
|
+
*/
|
|
154
|
+
displayName: pulumi.Input<string>;
|
|
155
|
+
/**
|
|
156
|
+
* A `grantControls` block as documented below, which specifies the grant controls that must be fulfilled to pass the policy.
|
|
157
|
+
*/
|
|
158
|
+
grantControls: pulumi.Input<inputs.ConditionalAccessPolicyGrantControls>;
|
|
159
|
+
/**
|
|
160
|
+
* A `sessionControls` block as documented below, which specifies the session controls that are enforced after sign-in.
|
|
161
|
+
*/
|
|
162
|
+
sessionControls?: pulumi.Input<inputs.ConditionalAccessPolicySessionControls>;
|
|
163
|
+
/**
|
|
164
|
+
* Specifies the state of the policy object. Possible values are: `enabled`, `disabled` and `enabledForReportingButNotEnforced`
|
|
165
|
+
*/
|
|
166
|
+
state: pulumi.Input<string>;
|
|
167
|
+
}
|
|
@@ -0,0 +1,141 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
|
|
3
|
+
// *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
5
|
+
exports.ConditionalAccessPolicy = void 0;
|
|
6
|
+
const pulumi = require("@pulumi/pulumi");
|
|
7
|
+
const utilities = require("./utilities");
|
|
8
|
+
/**
|
|
9
|
+
* Manages a Conditional Access Policy within Azure Active Directory.
|
|
10
|
+
*
|
|
11
|
+
* ## API Permissions
|
|
12
|
+
*
|
|
13
|
+
* The following API permissions are required in order to use this resource.
|
|
14
|
+
*
|
|
15
|
+
* When authenticated with a service principal, this resource requires the following application roles: `Policy.ReadWrite.ConditionalAccess` and `Policy.Read.All`
|
|
16
|
+
*
|
|
17
|
+
* When authenticated with a user principal, this resource requires one of the following directory roles: `Conditional Access Administrator` or `Global Administrator`
|
|
18
|
+
*
|
|
19
|
+
* ## Example Usage
|
|
20
|
+
*
|
|
21
|
+
* ```typescript
|
|
22
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
23
|
+
* import * as azuread from "@pulumi/azuread";
|
|
24
|
+
*
|
|
25
|
+
* const example = new azuread.ConditionalAccessPolicy("example", {
|
|
26
|
+
* conditions: {
|
|
27
|
+
* applications: {
|
|
28
|
+
* excludedApplications: ["00000004-0000-0ff1-ce00-000000000000"],
|
|
29
|
+
* includedApplications: ["All"],
|
|
30
|
+
* },
|
|
31
|
+
* clientAppTypes: ["all"],
|
|
32
|
+
* locations: {
|
|
33
|
+
* excludedLocations: ["AllTrusted"],
|
|
34
|
+
* includedLocations: ["All"],
|
|
35
|
+
* },
|
|
36
|
+
* platforms: {
|
|
37
|
+
* excludedPlatforms: ["iOS"],
|
|
38
|
+
* includedPlatforms: ["android"],
|
|
39
|
+
* },
|
|
40
|
+
* signInRiskLevels: ["medium"],
|
|
41
|
+
* userRiskLevels: ["medium"],
|
|
42
|
+
* users: {
|
|
43
|
+
* excludedUsers: ["GuestsOrExternalUsers"],
|
|
44
|
+
* includedUsers: ["All"],
|
|
45
|
+
* },
|
|
46
|
+
* },
|
|
47
|
+
* displayName: "example policy",
|
|
48
|
+
* grantControls: {
|
|
49
|
+
* builtInControls: ["mfa"],
|
|
50
|
+
* operator: "OR",
|
|
51
|
+
* },
|
|
52
|
+
* sessionControls: {
|
|
53
|
+
* applicationEnforcedRestrictions: [{
|
|
54
|
+
* enabled: true,
|
|
55
|
+
* }],
|
|
56
|
+
* cloudAppSecurity: [{
|
|
57
|
+
* cloudAppSecurityType: "monitorOnly",
|
|
58
|
+
* enabled: true,
|
|
59
|
+
* }],
|
|
60
|
+
* signInFrequency: [{
|
|
61
|
+
* enabled: true,
|
|
62
|
+
* type: "hours",
|
|
63
|
+
* value: 10,
|
|
64
|
+
* }],
|
|
65
|
+
* },
|
|
66
|
+
* state: "disabled",
|
|
67
|
+
* });
|
|
68
|
+
* ```
|
|
69
|
+
*
|
|
70
|
+
* ## Import
|
|
71
|
+
*
|
|
72
|
+
* Conditional Access Policies can be imported using the `id`, e.g.
|
|
73
|
+
*
|
|
74
|
+
* ```sh
|
|
75
|
+
* $ pulumi import azuread:index/conditionalAccessPolicy:ConditionalAccessPolicy my_location 00000000-0000-0000-0000-000000000000
|
|
76
|
+
* ```
|
|
77
|
+
*/
|
|
78
|
+
class ConditionalAccessPolicy extends pulumi.CustomResource {
|
|
79
|
+
constructor(name, argsOrState, opts) {
|
|
80
|
+
let inputs = {};
|
|
81
|
+
opts = opts || {};
|
|
82
|
+
if (opts.id) {
|
|
83
|
+
const state = argsOrState;
|
|
84
|
+
inputs["conditions"] = state ? state.conditions : undefined;
|
|
85
|
+
inputs["displayName"] = state ? state.displayName : undefined;
|
|
86
|
+
inputs["grantControls"] = state ? state.grantControls : undefined;
|
|
87
|
+
inputs["sessionControls"] = state ? state.sessionControls : undefined;
|
|
88
|
+
inputs["state"] = state ? state.state : undefined;
|
|
89
|
+
}
|
|
90
|
+
else {
|
|
91
|
+
const args = argsOrState;
|
|
92
|
+
if ((!args || args.conditions === undefined) && !opts.urn) {
|
|
93
|
+
throw new Error("Missing required property 'conditions'");
|
|
94
|
+
}
|
|
95
|
+
if ((!args || args.displayName === undefined) && !opts.urn) {
|
|
96
|
+
throw new Error("Missing required property 'displayName'");
|
|
97
|
+
}
|
|
98
|
+
if ((!args || args.grantControls === undefined) && !opts.urn) {
|
|
99
|
+
throw new Error("Missing required property 'grantControls'");
|
|
100
|
+
}
|
|
101
|
+
if ((!args || args.state === undefined) && !opts.urn) {
|
|
102
|
+
throw new Error("Missing required property 'state'");
|
|
103
|
+
}
|
|
104
|
+
inputs["conditions"] = args ? args.conditions : undefined;
|
|
105
|
+
inputs["displayName"] = args ? args.displayName : undefined;
|
|
106
|
+
inputs["grantControls"] = args ? args.grantControls : undefined;
|
|
107
|
+
inputs["sessionControls"] = args ? args.sessionControls : undefined;
|
|
108
|
+
inputs["state"] = args ? args.state : undefined;
|
|
109
|
+
}
|
|
110
|
+
if (!opts.version) {
|
|
111
|
+
opts = pulumi.mergeOptions(opts, { version: utilities.getVersion() });
|
|
112
|
+
}
|
|
113
|
+
super(ConditionalAccessPolicy.__pulumiType, name, inputs, opts);
|
|
114
|
+
}
|
|
115
|
+
/**
|
|
116
|
+
* Get an existing ConditionalAccessPolicy resource's state with the given name, ID, and optional extra
|
|
117
|
+
* properties used to qualify the lookup.
|
|
118
|
+
*
|
|
119
|
+
* @param name The _unique_ name of the resulting resource.
|
|
120
|
+
* @param id The _unique_ provider ID of the resource to lookup.
|
|
121
|
+
* @param state Any extra arguments used during the lookup.
|
|
122
|
+
* @param opts Optional settings to control the behavior of the CustomResource.
|
|
123
|
+
*/
|
|
124
|
+
static get(name, id, state, opts) {
|
|
125
|
+
return new ConditionalAccessPolicy(name, state, Object.assign(Object.assign({}, opts), { id: id }));
|
|
126
|
+
}
|
|
127
|
+
/**
|
|
128
|
+
* Returns true if the given object is an instance of ConditionalAccessPolicy. This is designed to work even
|
|
129
|
+
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
130
|
+
*/
|
|
131
|
+
static isInstance(obj) {
|
|
132
|
+
if (obj === undefined || obj === null) {
|
|
133
|
+
return false;
|
|
134
|
+
}
|
|
135
|
+
return obj['__pulumiType'] === ConditionalAccessPolicy.__pulumiType;
|
|
136
|
+
}
|
|
137
|
+
}
|
|
138
|
+
exports.ConditionalAccessPolicy = ConditionalAccessPolicy;
|
|
139
|
+
/** @internal */
|
|
140
|
+
ConditionalAccessPolicy.__pulumiType = 'azuread:index/conditionalAccessPolicy:ConditionalAccessPolicy';
|
|
141
|
+
//# sourceMappingURL=conditionalAccessPolicy.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"conditionalAccessPolicy.js","sourceRoot":"","sources":["../conditionalAccessPolicy.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAEzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqEG;AACH,MAAa,uBAAwB,SAAQ,MAAM,CAAC,cAAc;IAyD9D,YAAY,IAAY,EAAE,WAAwE,EAAE,IAAmC;QACnI,IAAI,MAAM,GAAkB,EAAE,CAAC;QAC/B,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAuD,CAAC;YACtE,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,MAAM,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,MAAM,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,MAAM,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;SACrD;aAAM;YACH,MAAM,IAAI,GAAG,WAAsD,CAAC;YACpE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;aAChE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,MAAM,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,MAAM,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,MAAM,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;SACnD;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YACf,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE,EAAC,CAAC,CAAC;SACxE;QACD,KAAK,CAAC,uBAAuB,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACpE,CAAC;IA1FD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAoC,EAAE,IAAmC;QAClI,OAAO,IAAI,uBAAuB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC9E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,uBAAuB,CAAC,YAAY,CAAC;IACxE,CAAC;;AA1BL,0DA4FC;AA9EG,gBAAgB;AACO,oCAAY,GAAG,+DAA+D,CAAC"}
|
package/config/index.js
CHANGED
|
@@ -1,10 +1,17 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
|
|
3
3
|
// *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
|
-
function
|
|
5
|
-
|
|
6
|
-
}
|
|
4
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
5
|
+
if (k2 === undefined) k2 = k;
|
|
6
|
+
Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
|
|
7
|
+
}) : (function(o, m, k, k2) {
|
|
8
|
+
if (k2 === undefined) k2 = k;
|
|
9
|
+
o[k2] = m[k];
|
|
10
|
+
}));
|
|
11
|
+
var __exportStar = (this && this.__exportStar) || function(m, exports) {
|
|
12
|
+
for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
|
|
13
|
+
};
|
|
7
14
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
8
15
|
// Export members:
|
|
9
|
-
|
|
16
|
+
__exportStar(require("./vars"), exports);
|
|
10
17
|
//# sourceMappingURL=index.js.map
|
package/config/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../config/index.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../config/index.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;;;;;;;;;;AAEjF,kBAAkB;AAClB,yCAAuB"}
|
package/config/vars.d.ts
CHANGED
|
@@ -1,51 +1,51 @@
|
|
|
1
1
|
/**
|
|
2
2
|
* Base64 encoded PKCS#12 certificate bundle to use when authenticating as a Service Principal using a Client Certificate
|
|
3
3
|
*/
|
|
4
|
-
export declare
|
|
4
|
+
export declare const clientCertificate: string | undefined;
|
|
5
5
|
/**
|
|
6
6
|
* The password to decrypt the Client Certificate. For use when authenticating as a Service Principal using a Client
|
|
7
7
|
* Certificate
|
|
8
8
|
*/
|
|
9
|
-
export declare
|
|
9
|
+
export declare const clientCertificatePassword: string | undefined;
|
|
10
10
|
/**
|
|
11
11
|
* The path to the Client Certificate associated with the Service Principal for use when authenticating as a Service
|
|
12
12
|
* Principal using a Client Certificate
|
|
13
13
|
*/
|
|
14
|
-
export declare
|
|
14
|
+
export declare const clientCertificatePath: string | undefined;
|
|
15
15
|
/**
|
|
16
16
|
* The Client ID which should be used for service principal authentication
|
|
17
17
|
*/
|
|
18
|
-
export declare
|
|
18
|
+
export declare const clientId: string | undefined;
|
|
19
19
|
/**
|
|
20
20
|
* The application password to use when authenticating as a Service Principal using a Client Secret
|
|
21
21
|
*/
|
|
22
|
-
export declare
|
|
22
|
+
export declare const clientSecret: string | undefined;
|
|
23
23
|
/**
|
|
24
24
|
* Disable the Terraform Partner ID, which is used if a custom `partner_id` isn't specified
|
|
25
25
|
*/
|
|
26
|
-
export declare
|
|
26
|
+
export declare const disableTerraformPartnerId: boolean | undefined;
|
|
27
27
|
/**
|
|
28
28
|
* The cloud environment which should be used. Possible values are `global` (formerly `public`), `usgovernment`, `dod`,
|
|
29
29
|
* `germany`, and `china`. Defaults to `global`
|
|
30
30
|
*/
|
|
31
|
-
export declare
|
|
31
|
+
export declare const environment: string;
|
|
32
32
|
/**
|
|
33
33
|
* The path to a custom endpoint for Managed Identity - in most circumstances this should be detected automatically
|
|
34
34
|
*/
|
|
35
|
-
export declare
|
|
35
|
+
export declare const msiEndpoint: string | undefined;
|
|
36
36
|
/**
|
|
37
37
|
* A GUID/UUID that is registered with Microsoft to facilitate partner resource usage attribution
|
|
38
38
|
*/
|
|
39
|
-
export declare
|
|
39
|
+
export declare const partnerId: string | undefined;
|
|
40
40
|
/**
|
|
41
41
|
* The Tenant ID which should be used. Works with all authentication methods except Managed Identity
|
|
42
42
|
*/
|
|
43
|
-
export declare
|
|
43
|
+
export declare const tenantId: string | undefined;
|
|
44
44
|
/**
|
|
45
45
|
* Allow Azure CLI to be used for Authentication
|
|
46
46
|
*/
|
|
47
|
-
export declare
|
|
47
|
+
export declare const useCli: boolean | undefined;
|
|
48
48
|
/**
|
|
49
49
|
* Allow Managed Identity to be used for Authentication
|
|
50
50
|
*/
|
|
51
|
-
export declare
|
|
51
|
+
export declare const useMsi: boolean;
|