@pulumi/databricks 1.32.1 → 1.33.0-alpha.1707544327
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/artifactAllowlist.d.ts +2 -4
- package/artifactAllowlist.js +2 -4
- package/artifactAllowlist.js.map +1 -1
- package/catalog.d.ts +2 -4
- package/catalog.js +2 -4
- package/catalog.js.map +1 -1
- package/cluster.d.ts +2 -4
- package/cluster.js +2 -4
- package/cluster.js.map +1 -1
- package/clusterPolicy.d.ts +2 -4
- package/clusterPolicy.js +2 -4
- package/clusterPolicy.js.map +1 -1
- package/connection.d.ts +2 -4
- package/connection.js +2 -4
- package/connection.js.map +1 -1
- package/dbfsFile.d.ts +2 -4
- package/dbfsFile.js +2 -4
- package/dbfsFile.js.map +1 -1
- package/directory.d.ts +2 -4
- package/directory.js +2 -4
- package/directory.js.map +1 -1
- package/entitlements.d.ts +2 -10
- package/entitlements.js +2 -10
- package/entitlements.js.map +1 -1
- package/externalLocation.d.ts +2 -4
- package/externalLocation.js +2 -4
- package/externalLocation.js.map +1 -1
- package/gitCredential.d.ts +2 -4
- package/gitCredential.js +2 -4
- package/gitCredential.js.map +1 -1
- package/globalInitScript.d.ts +2 -4
- package/globalInitScript.js +2 -4
- package/globalInitScript.js.map +1 -1
- package/group.d.ts +2 -4
- package/group.js +2 -4
- package/group.js.map +1 -1
- package/index.d.ts +0 -3
- package/index.js +4 -7
- package/index.js.map +1 -1
- package/instancePool.d.ts +2 -4
- package/instancePool.js +2 -4
- package/instancePool.js.map +1 -1
- package/instanceProfile.d.ts +2 -4
- package/instanceProfile.js +2 -4
- package/instanceProfile.js.map +1 -1
- package/ipAccessList.d.ts +2 -4
- package/ipAccessList.js +2 -4
- package/ipAccessList.js.map +1 -1
- package/job.d.ts +2 -4
- package/job.js +2 -4
- package/job.js.map +1 -1
- package/metastore.d.ts +2 -4
- package/metastore.js +2 -4
- package/metastore.js.map +1 -1
- package/metastoreAssignment.d.ts +2 -4
- package/metastoreAssignment.js +2 -4
- package/metastoreAssignment.js.map +1 -1
- package/metastoreDataAccess.d.ts +2 -4
- package/metastoreDataAccess.js +2 -4
- package/metastoreDataAccess.js.map +1 -1
- package/mlflowExperiment.d.ts +2 -4
- package/mlflowExperiment.js +2 -4
- package/mlflowExperiment.js.map +1 -1
- package/mlflowModel.d.ts +2 -4
- package/mlflowModel.js +2 -4
- package/mlflowModel.js.map +1 -1
- package/modelServing.d.ts +2 -4
- package/modelServing.js +2 -4
- package/modelServing.js.map +1 -1
- package/mwsCredentials.d.ts +2 -4
- package/mwsCredentials.js +2 -4
- package/mwsCredentials.js.map +1 -1
- package/mwsPermissionAssignment.d.ts +2 -4
- package/mwsPermissionAssignment.js +2 -4
- package/mwsPermissionAssignment.js.map +1 -1
- package/notebook.d.ts +2 -4
- package/notebook.js +2 -4
- package/notebook.js.map +1 -1
- package/package.json +1 -1
- package/permissions.d.ts +4 -20
- package/permissions.js +4 -20
- package/permissions.js.map +1 -1
- package/pipeline.d.ts +2 -4
- package/pipeline.js +2 -4
- package/pipeline.js.map +1 -1
- package/registeredModel.d.ts +2 -4
- package/registeredModel.js +2 -4
- package/registeredModel.js.map +1 -1
- package/repo.d.ts +2 -4
- package/repo.js +2 -4
- package/repo.js.map +1 -1
- package/schema.d.ts +2 -4
- package/schema.js +2 -4
- package/schema.js.map +1 -1
- package/secret.d.ts +2 -4
- package/secret.js +2 -4
- package/secret.js.map +1 -1
- package/secretAcl.d.ts +2 -4
- package/secretAcl.js +2 -4
- package/secretAcl.js.map +1 -1
- package/secretScope.d.ts +2 -4
- package/secretScope.js +2 -4
- package/secretScope.js.map +1 -1
- package/servicePrincipal.d.ts +2 -4
- package/servicePrincipal.js +2 -4
- package/servicePrincipal.js.map +1 -1
- package/sqlDashboard.d.ts +2 -4
- package/sqlDashboard.js +2 -4
- package/sqlDashboard.js.map +1 -1
- package/sqlEndpoint.d.ts +2 -4
- package/sqlEndpoint.js +2 -4
- package/sqlEndpoint.js.map +1 -1
- package/sqlGlobalConfig.d.ts +2 -4
- package/sqlGlobalConfig.js +2 -4
- package/sqlGlobalConfig.js.map +1 -1
- package/sqlPermissions.d.ts +2 -16
- package/sqlPermissions.js +2 -16
- package/sqlPermissions.js.map +1 -1
- package/sqlQuery.d.ts +2 -4
- package/sqlQuery.js +2 -4
- package/sqlQuery.js.map +1 -1
- package/sqlTable.d.ts +2 -4
- package/sqlTable.js +2 -4
- package/sqlTable.js.map +1 -1
- package/sqlVisualization.d.ts +2 -4
- package/sqlVisualization.js +2 -4
- package/sqlVisualization.js.map +1 -1
- package/sqlWidget.d.ts +2 -4
- package/sqlWidget.js +2 -4
- package/sqlWidget.js.map +1 -1
- package/storageCredential.d.ts +2 -4
- package/storageCredential.js +2 -4
- package/storageCredential.js.map +1 -1
- package/systemSchema.d.ts +2 -4
- package/systemSchema.js +2 -4
- package/systemSchema.js.map +1 -1
- package/types/input.d.ts +50 -50
- package/types/output.d.ts +34 -34
- package/user.d.ts +2 -4
- package/user.js +2 -4
- package/user.js.map +1 -1
- package/volume.d.ts +2 -4
- package/volume.js +2 -4
- package/volume.js.map +1 -1
- package/workspaceFile.d.ts +2 -4
- package/workspaceFile.js +2 -4
- package/workspaceFile.js.map +1 -1
- package/getAwsUnityCatalogPolicy.d.ts +0 -174
- package/getAwsUnityCatalogPolicy.js +0 -134
- package/getAwsUnityCatalogPolicy.js.map +0 -1
package/volume.js
CHANGED
|
@@ -67,12 +67,10 @@ const utilities = require("./utilities");
|
|
|
67
67
|
*
|
|
68
68
|
* ## Import
|
|
69
69
|
*
|
|
70
|
-
* This resource can be imported by `full_name` which is the 3-level Volume identifier
|
|
71
|
-
*
|
|
72
|
-
* bash
|
|
70
|
+
* This resource can be imported by `full_name` which is the 3-level Volume identifier`<catalog>.<schema>.<name>` bash
|
|
73
71
|
*
|
|
74
72
|
* ```sh
|
|
75
|
-
*
|
|
73
|
+
* $ pulumi import databricks:index/volume:Volume this <catalog_name>.<schema_name>.<name>
|
|
76
74
|
* ```
|
|
77
75
|
*/
|
|
78
76
|
class Volume extends pulumi.CustomResource {
|
package/volume.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"volume.js","sourceRoot":"","sources":["../volume.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"volume.js","sourceRoot":"","sources":["../volume.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AACH,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmB,EAAE,IAAmC;QACjH,OAAO,IAAI,MAAM,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC7D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;IACvD,CAAC;IAuCD,YAAY,IAAY,EAAE,WAAsC,EAAE,IAAmC;QACjG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsC,CAAC;YACrD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SACvE;aAAM;YACH,MAAM,IAAI,GAAG,WAAqC,CAAC;YACnD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SACrE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;;AAlGL,wBAmGC;AArFG,gBAAgB;AACO,mBAAY,GAAG,gCAAgC,CAAC"}
|
package/workspaceFile.d.ts
CHANGED
|
@@ -2,12 +2,10 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
2
2
|
/**
|
|
3
3
|
* ## Import
|
|
4
4
|
*
|
|
5
|
-
* The workspace file resource can be imported using workspace file path
|
|
6
|
-
*
|
|
7
|
-
* bash
|
|
5
|
+
* The workspace file resource can be imported using workspace file path bash
|
|
8
6
|
*
|
|
9
7
|
* ```sh
|
|
10
|
-
*
|
|
8
|
+
* $ pulumi import databricks:index/workspaceFile:WorkspaceFile this /path/to/file
|
|
11
9
|
* ```
|
|
12
10
|
*/
|
|
13
11
|
export declare class WorkspaceFile extends pulumi.CustomResource {
|
package/workspaceFile.js
CHANGED
|
@@ -8,12 +8,10 @@ const utilities = require("./utilities");
|
|
|
8
8
|
/**
|
|
9
9
|
* ## Import
|
|
10
10
|
*
|
|
11
|
-
* The workspace file resource can be imported using workspace file path
|
|
12
|
-
*
|
|
13
|
-
* bash
|
|
11
|
+
* The workspace file resource can be imported using workspace file path bash
|
|
14
12
|
*
|
|
15
13
|
* ```sh
|
|
16
|
-
*
|
|
14
|
+
* $ pulumi import databricks:index/workspaceFile:WorkspaceFile this /path/to/file
|
|
17
15
|
* ```
|
|
18
16
|
*/
|
|
19
17
|
class WorkspaceFile extends pulumi.CustomResource {
|
package/workspaceFile.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"workspaceFile.js","sourceRoot":"","sources":["../workspaceFile.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"workspaceFile.js","sourceRoot":"","sources":["../workspaceFile.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;GAQG;AACH,MAAa,aAAc,SAAQ,MAAM,CAAC,cAAc;IACpD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA0B,EAAE,IAAmC;QACxH,OAAO,IAAI,aAAa,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACpE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,aAAa,CAAC,YAAY,CAAC;IAC9D,CAAC;IAiCD,YAAY,IAAY,EAAE,WAAoD,EAAE,IAAmC;QAC/G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA6C,CAAC;YAC5D,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7E;aAAM;YACH,MAAM,IAAI,GAAG,WAA4C,CAAC;YAC1D,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC1C,cAAc,CAAC,eAAe,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACvD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;;AAtFL,sCAuFC;AAzEG,gBAAgB;AACO,0BAAY,GAAG,8CAA8C,CAAC"}
|
|
@@ -1,174 +0,0 @@
|
|
|
1
|
-
import * as pulumi from "@pulumi/pulumi";
|
|
2
|
-
/**
|
|
3
|
-
* > **Note** This resource has an evolving API, which may change in future versions of the provider. Please always consult [latest documentation](https://docs.databricks.com/administration-guide/account-api/iam-role.html#language-Your%C2%A0VPC,%C2%A0default) in case of any questions.
|
|
4
|
-
*
|
|
5
|
-
* This data source constructs necessary AWS Unity Catalog policy for you, which is based on [official documentation](https://docs.databricks.com/data-governance/unity-catalog/get-started.html#configure-a-storage-bucket-and-iam-role-in-aws).
|
|
6
|
-
*
|
|
7
|
-
* ## Example Usage
|
|
8
|
-
*
|
|
9
|
-
* ```typescript
|
|
10
|
-
* import * as pulumi from "@pulumi/pulumi";
|
|
11
|
-
* import * as aws from "@pulumi/aws";
|
|
12
|
-
* import * as databricks from "@pulumi/databricks";
|
|
13
|
-
*
|
|
14
|
-
* const this = databricks.getAwsUnityCatalogPolicy({
|
|
15
|
-
* awsAccountId: _var.aws_account_id,
|
|
16
|
-
* bucketName: "databricks-bucket",
|
|
17
|
-
* roleName: "databricks-role",
|
|
18
|
-
* kmsName: "databricks-kms",
|
|
19
|
-
* });
|
|
20
|
-
* const passroleForUc = aws.iam.getPolicyDocument({
|
|
21
|
-
* statements: [
|
|
22
|
-
* {
|
|
23
|
-
* effect: "Allow",
|
|
24
|
-
* actions: ["sts:AssumeRole"],
|
|
25
|
-
* principals: [{
|
|
26
|
-
* identifiers: ["arn:aws:iam::414351767826:role/unity-catalog-prod-UCMasterRole-14S5ZJVKOTYTL"],
|
|
27
|
-
* type: "AWS",
|
|
28
|
-
* }],
|
|
29
|
-
* conditions: [{
|
|
30
|
-
* test: "StringEquals",
|
|
31
|
-
* variable: "sts:ExternalId",
|
|
32
|
-
* values: [_var.databricks_account_id],
|
|
33
|
-
* }],
|
|
34
|
-
* },
|
|
35
|
-
* {
|
|
36
|
-
* sid: "ExplicitSelfRoleAssumption",
|
|
37
|
-
* effect: "Allow",
|
|
38
|
-
* actions: ["sts:AssumeRole"],
|
|
39
|
-
* principals: [{
|
|
40
|
-
* type: "AWS",
|
|
41
|
-
* identifiers: [`arn:aws:iam::${_var.aws_account_id}:root`],
|
|
42
|
-
* }],
|
|
43
|
-
* conditions: [{
|
|
44
|
-
* test: "ArnLike",
|
|
45
|
-
* variable: "aws:PrincipalArn",
|
|
46
|
-
* values: [`arn:aws:iam::${_var.aws_account_id}:role/${_var.prefix}-uc-access`],
|
|
47
|
-
* }],
|
|
48
|
-
* },
|
|
49
|
-
* ],
|
|
50
|
-
* });
|
|
51
|
-
* const unityMetastore = new aws.iam.Policy("unityMetastore", {policy: _this.then(_this => _this.json)});
|
|
52
|
-
* const metastoreDataAccess = new aws.iam.Role("metastoreDataAccess", {
|
|
53
|
-
* assumeRolePolicy: passroleForUc.then(passroleForUc => passroleForUc.json),
|
|
54
|
-
* managedPolicyArns: [unityMetastore.arn],
|
|
55
|
-
* });
|
|
56
|
-
* ```
|
|
57
|
-
*/
|
|
58
|
-
export declare function getAwsUnityCatalogPolicy(args: GetAwsUnityCatalogPolicyArgs, opts?: pulumi.InvokeOptions): Promise<GetAwsUnityCatalogPolicyResult>;
|
|
59
|
-
/**
|
|
60
|
-
* A collection of arguments for invoking getAwsUnityCatalogPolicy.
|
|
61
|
-
*/
|
|
62
|
-
export interface GetAwsUnityCatalogPolicyArgs {
|
|
63
|
-
/**
|
|
64
|
-
* The Account ID of the current AWS account (not your Databricks account).
|
|
65
|
-
*/
|
|
66
|
-
awsAccountId: string;
|
|
67
|
-
/**
|
|
68
|
-
* The name of the S3 bucket used as root storage location for [managed tables](https://docs.databricks.com/data-governance/unity-catalog/index.html#managed-table) in Unity Catalog.
|
|
69
|
-
*/
|
|
70
|
-
bucketName: string;
|
|
71
|
-
/**
|
|
72
|
-
* If encryption is enabled, provide the name of the KMS key that encrypts the S3 bucket contents. If encryption is disabled, do not provide this argument.
|
|
73
|
-
*/
|
|
74
|
-
kmsName?: string;
|
|
75
|
-
/**
|
|
76
|
-
* The name of the AWS IAM role that you created in the previous step in the [official documentation](https://docs.databricks.com/data-governance/unity-catalog/get-started.html#configure-a-storage-bucket-and-iam-role-in-aws).
|
|
77
|
-
*/
|
|
78
|
-
roleName: string;
|
|
79
|
-
}
|
|
80
|
-
/**
|
|
81
|
-
* A collection of values returned by getAwsUnityCatalogPolicy.
|
|
82
|
-
*/
|
|
83
|
-
export interface GetAwsUnityCatalogPolicyResult {
|
|
84
|
-
readonly awsAccountId: string;
|
|
85
|
-
readonly bucketName: string;
|
|
86
|
-
/**
|
|
87
|
-
* The provider-assigned unique ID for this managed resource.
|
|
88
|
-
*/
|
|
89
|
-
readonly id: string;
|
|
90
|
-
/**
|
|
91
|
-
* AWS IAM Policy JSON document
|
|
92
|
-
*/
|
|
93
|
-
readonly json: string;
|
|
94
|
-
readonly kmsName?: string;
|
|
95
|
-
readonly roleName: string;
|
|
96
|
-
}
|
|
97
|
-
/**
|
|
98
|
-
* > **Note** This resource has an evolving API, which may change in future versions of the provider. Please always consult [latest documentation](https://docs.databricks.com/administration-guide/account-api/iam-role.html#language-Your%C2%A0VPC,%C2%A0default) in case of any questions.
|
|
99
|
-
*
|
|
100
|
-
* This data source constructs necessary AWS Unity Catalog policy for you, which is based on [official documentation](https://docs.databricks.com/data-governance/unity-catalog/get-started.html#configure-a-storage-bucket-and-iam-role-in-aws).
|
|
101
|
-
*
|
|
102
|
-
* ## Example Usage
|
|
103
|
-
*
|
|
104
|
-
* ```typescript
|
|
105
|
-
* import * as pulumi from "@pulumi/pulumi";
|
|
106
|
-
* import * as aws from "@pulumi/aws";
|
|
107
|
-
* import * as databricks from "@pulumi/databricks";
|
|
108
|
-
*
|
|
109
|
-
* const this = databricks.getAwsUnityCatalogPolicy({
|
|
110
|
-
* awsAccountId: _var.aws_account_id,
|
|
111
|
-
* bucketName: "databricks-bucket",
|
|
112
|
-
* roleName: "databricks-role",
|
|
113
|
-
* kmsName: "databricks-kms",
|
|
114
|
-
* });
|
|
115
|
-
* const passroleForUc = aws.iam.getPolicyDocument({
|
|
116
|
-
* statements: [
|
|
117
|
-
* {
|
|
118
|
-
* effect: "Allow",
|
|
119
|
-
* actions: ["sts:AssumeRole"],
|
|
120
|
-
* principals: [{
|
|
121
|
-
* identifiers: ["arn:aws:iam::414351767826:role/unity-catalog-prod-UCMasterRole-14S5ZJVKOTYTL"],
|
|
122
|
-
* type: "AWS",
|
|
123
|
-
* }],
|
|
124
|
-
* conditions: [{
|
|
125
|
-
* test: "StringEquals",
|
|
126
|
-
* variable: "sts:ExternalId",
|
|
127
|
-
* values: [_var.databricks_account_id],
|
|
128
|
-
* }],
|
|
129
|
-
* },
|
|
130
|
-
* {
|
|
131
|
-
* sid: "ExplicitSelfRoleAssumption",
|
|
132
|
-
* effect: "Allow",
|
|
133
|
-
* actions: ["sts:AssumeRole"],
|
|
134
|
-
* principals: [{
|
|
135
|
-
* type: "AWS",
|
|
136
|
-
* identifiers: [`arn:aws:iam::${_var.aws_account_id}:root`],
|
|
137
|
-
* }],
|
|
138
|
-
* conditions: [{
|
|
139
|
-
* test: "ArnLike",
|
|
140
|
-
* variable: "aws:PrincipalArn",
|
|
141
|
-
* values: [`arn:aws:iam::${_var.aws_account_id}:role/${_var.prefix}-uc-access`],
|
|
142
|
-
* }],
|
|
143
|
-
* },
|
|
144
|
-
* ],
|
|
145
|
-
* });
|
|
146
|
-
* const unityMetastore = new aws.iam.Policy("unityMetastore", {policy: _this.then(_this => _this.json)});
|
|
147
|
-
* const metastoreDataAccess = new aws.iam.Role("metastoreDataAccess", {
|
|
148
|
-
* assumeRolePolicy: passroleForUc.then(passroleForUc => passroleForUc.json),
|
|
149
|
-
* managedPolicyArns: [unityMetastore.arn],
|
|
150
|
-
* });
|
|
151
|
-
* ```
|
|
152
|
-
*/
|
|
153
|
-
export declare function getAwsUnityCatalogPolicyOutput(args: GetAwsUnityCatalogPolicyOutputArgs, opts?: pulumi.InvokeOptions): pulumi.Output<GetAwsUnityCatalogPolicyResult>;
|
|
154
|
-
/**
|
|
155
|
-
* A collection of arguments for invoking getAwsUnityCatalogPolicy.
|
|
156
|
-
*/
|
|
157
|
-
export interface GetAwsUnityCatalogPolicyOutputArgs {
|
|
158
|
-
/**
|
|
159
|
-
* The Account ID of the current AWS account (not your Databricks account).
|
|
160
|
-
*/
|
|
161
|
-
awsAccountId: pulumi.Input<string>;
|
|
162
|
-
/**
|
|
163
|
-
* The name of the S3 bucket used as root storage location for [managed tables](https://docs.databricks.com/data-governance/unity-catalog/index.html#managed-table) in Unity Catalog.
|
|
164
|
-
*/
|
|
165
|
-
bucketName: pulumi.Input<string>;
|
|
166
|
-
/**
|
|
167
|
-
* If encryption is enabled, provide the name of the KMS key that encrypts the S3 bucket contents. If encryption is disabled, do not provide this argument.
|
|
168
|
-
*/
|
|
169
|
-
kmsName?: pulumi.Input<string>;
|
|
170
|
-
/**
|
|
171
|
-
* The name of the AWS IAM role that you created in the previous step in the [official documentation](https://docs.databricks.com/data-governance/unity-catalog/get-started.html#configure-a-storage-bucket-and-iam-role-in-aws).
|
|
172
|
-
*/
|
|
173
|
-
roleName: pulumi.Input<string>;
|
|
174
|
-
}
|
|
@@ -1,134 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
|
|
3
|
-
// *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
5
|
-
exports.getAwsUnityCatalogPolicyOutput = exports.getAwsUnityCatalogPolicy = void 0;
|
|
6
|
-
const pulumi = require("@pulumi/pulumi");
|
|
7
|
-
const utilities = require("./utilities");
|
|
8
|
-
/**
|
|
9
|
-
* > **Note** This resource has an evolving API, which may change in future versions of the provider. Please always consult [latest documentation](https://docs.databricks.com/administration-guide/account-api/iam-role.html#language-Your%C2%A0VPC,%C2%A0default) in case of any questions.
|
|
10
|
-
*
|
|
11
|
-
* This data source constructs necessary AWS Unity Catalog policy for you, which is based on [official documentation](https://docs.databricks.com/data-governance/unity-catalog/get-started.html#configure-a-storage-bucket-and-iam-role-in-aws).
|
|
12
|
-
*
|
|
13
|
-
* ## Example Usage
|
|
14
|
-
*
|
|
15
|
-
* ```typescript
|
|
16
|
-
* import * as pulumi from "@pulumi/pulumi";
|
|
17
|
-
* import * as aws from "@pulumi/aws";
|
|
18
|
-
* import * as databricks from "@pulumi/databricks";
|
|
19
|
-
*
|
|
20
|
-
* const this = databricks.getAwsUnityCatalogPolicy({
|
|
21
|
-
* awsAccountId: _var.aws_account_id,
|
|
22
|
-
* bucketName: "databricks-bucket",
|
|
23
|
-
* roleName: "databricks-role",
|
|
24
|
-
* kmsName: "databricks-kms",
|
|
25
|
-
* });
|
|
26
|
-
* const passroleForUc = aws.iam.getPolicyDocument({
|
|
27
|
-
* statements: [
|
|
28
|
-
* {
|
|
29
|
-
* effect: "Allow",
|
|
30
|
-
* actions: ["sts:AssumeRole"],
|
|
31
|
-
* principals: [{
|
|
32
|
-
* identifiers: ["arn:aws:iam::414351767826:role/unity-catalog-prod-UCMasterRole-14S5ZJVKOTYTL"],
|
|
33
|
-
* type: "AWS",
|
|
34
|
-
* }],
|
|
35
|
-
* conditions: [{
|
|
36
|
-
* test: "StringEquals",
|
|
37
|
-
* variable: "sts:ExternalId",
|
|
38
|
-
* values: [_var.databricks_account_id],
|
|
39
|
-
* }],
|
|
40
|
-
* },
|
|
41
|
-
* {
|
|
42
|
-
* sid: "ExplicitSelfRoleAssumption",
|
|
43
|
-
* effect: "Allow",
|
|
44
|
-
* actions: ["sts:AssumeRole"],
|
|
45
|
-
* principals: [{
|
|
46
|
-
* type: "AWS",
|
|
47
|
-
* identifiers: [`arn:aws:iam::${_var.aws_account_id}:root`],
|
|
48
|
-
* }],
|
|
49
|
-
* conditions: [{
|
|
50
|
-
* test: "ArnLike",
|
|
51
|
-
* variable: "aws:PrincipalArn",
|
|
52
|
-
* values: [`arn:aws:iam::${_var.aws_account_id}:role/${_var.prefix}-uc-access`],
|
|
53
|
-
* }],
|
|
54
|
-
* },
|
|
55
|
-
* ],
|
|
56
|
-
* });
|
|
57
|
-
* const unityMetastore = new aws.iam.Policy("unityMetastore", {policy: _this.then(_this => _this.json)});
|
|
58
|
-
* const metastoreDataAccess = new aws.iam.Role("metastoreDataAccess", {
|
|
59
|
-
* assumeRolePolicy: passroleForUc.then(passroleForUc => passroleForUc.json),
|
|
60
|
-
* managedPolicyArns: [unityMetastore.arn],
|
|
61
|
-
* });
|
|
62
|
-
* ```
|
|
63
|
-
*/
|
|
64
|
-
function getAwsUnityCatalogPolicy(args, opts) {
|
|
65
|
-
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
|
|
66
|
-
return pulumi.runtime.invoke("databricks:index/getAwsUnityCatalogPolicy:getAwsUnityCatalogPolicy", {
|
|
67
|
-
"awsAccountId": args.awsAccountId,
|
|
68
|
-
"bucketName": args.bucketName,
|
|
69
|
-
"kmsName": args.kmsName,
|
|
70
|
-
"roleName": args.roleName,
|
|
71
|
-
}, opts);
|
|
72
|
-
}
|
|
73
|
-
exports.getAwsUnityCatalogPolicy = getAwsUnityCatalogPolicy;
|
|
74
|
-
/**
|
|
75
|
-
* > **Note** This resource has an evolving API, which may change in future versions of the provider. Please always consult [latest documentation](https://docs.databricks.com/administration-guide/account-api/iam-role.html#language-Your%C2%A0VPC,%C2%A0default) in case of any questions.
|
|
76
|
-
*
|
|
77
|
-
* This data source constructs necessary AWS Unity Catalog policy for you, which is based on [official documentation](https://docs.databricks.com/data-governance/unity-catalog/get-started.html#configure-a-storage-bucket-and-iam-role-in-aws).
|
|
78
|
-
*
|
|
79
|
-
* ## Example Usage
|
|
80
|
-
*
|
|
81
|
-
* ```typescript
|
|
82
|
-
* import * as pulumi from "@pulumi/pulumi";
|
|
83
|
-
* import * as aws from "@pulumi/aws";
|
|
84
|
-
* import * as databricks from "@pulumi/databricks";
|
|
85
|
-
*
|
|
86
|
-
* const this = databricks.getAwsUnityCatalogPolicy({
|
|
87
|
-
* awsAccountId: _var.aws_account_id,
|
|
88
|
-
* bucketName: "databricks-bucket",
|
|
89
|
-
* roleName: "databricks-role",
|
|
90
|
-
* kmsName: "databricks-kms",
|
|
91
|
-
* });
|
|
92
|
-
* const passroleForUc = aws.iam.getPolicyDocument({
|
|
93
|
-
* statements: [
|
|
94
|
-
* {
|
|
95
|
-
* effect: "Allow",
|
|
96
|
-
* actions: ["sts:AssumeRole"],
|
|
97
|
-
* principals: [{
|
|
98
|
-
* identifiers: ["arn:aws:iam::414351767826:role/unity-catalog-prod-UCMasterRole-14S5ZJVKOTYTL"],
|
|
99
|
-
* type: "AWS",
|
|
100
|
-
* }],
|
|
101
|
-
* conditions: [{
|
|
102
|
-
* test: "StringEquals",
|
|
103
|
-
* variable: "sts:ExternalId",
|
|
104
|
-
* values: [_var.databricks_account_id],
|
|
105
|
-
* }],
|
|
106
|
-
* },
|
|
107
|
-
* {
|
|
108
|
-
* sid: "ExplicitSelfRoleAssumption",
|
|
109
|
-
* effect: "Allow",
|
|
110
|
-
* actions: ["sts:AssumeRole"],
|
|
111
|
-
* principals: [{
|
|
112
|
-
* type: "AWS",
|
|
113
|
-
* identifiers: [`arn:aws:iam::${_var.aws_account_id}:root`],
|
|
114
|
-
* }],
|
|
115
|
-
* conditions: [{
|
|
116
|
-
* test: "ArnLike",
|
|
117
|
-
* variable: "aws:PrincipalArn",
|
|
118
|
-
* values: [`arn:aws:iam::${_var.aws_account_id}:role/${_var.prefix}-uc-access`],
|
|
119
|
-
* }],
|
|
120
|
-
* },
|
|
121
|
-
* ],
|
|
122
|
-
* });
|
|
123
|
-
* const unityMetastore = new aws.iam.Policy("unityMetastore", {policy: _this.then(_this => _this.json)});
|
|
124
|
-
* const metastoreDataAccess = new aws.iam.Role("metastoreDataAccess", {
|
|
125
|
-
* assumeRolePolicy: passroleForUc.then(passroleForUc => passroleForUc.json),
|
|
126
|
-
* managedPolicyArns: [unityMetastore.arn],
|
|
127
|
-
* });
|
|
128
|
-
* ```
|
|
129
|
-
*/
|
|
130
|
-
function getAwsUnityCatalogPolicyOutput(args, opts) {
|
|
131
|
-
return pulumi.output(args).apply((a) => getAwsUnityCatalogPolicy(a, opts));
|
|
132
|
-
}
|
|
133
|
-
exports.getAwsUnityCatalogPolicyOutput = getAwsUnityCatalogPolicyOutput;
|
|
134
|
-
//# sourceMappingURL=getAwsUnityCatalogPolicy.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"getAwsUnityCatalogPolicy.js","sourceRoot":"","sources":["../getAwsUnityCatalogPolicy.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,SAAgB,wBAAwB,CAAC,IAAkC,EAAE,IAA2B;IAEpG,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,oEAAoE,EAAE;QAC/F,cAAc,EAAE,IAAI,CAAC,YAAY;QACjC,YAAY,EAAE,IAAI,CAAC,UAAU;QAC7B,SAAS,EAAE,IAAI,CAAC,OAAO;QACvB,UAAU,EAAE,IAAI,CAAC,QAAQ;KAC5B,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AATD,4DASC;AAyCD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,SAAgB,8BAA8B,CAAC,IAAwC,EAAE,IAA2B;IAChH,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,wBAAwB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AACnF,CAAC;AAFD,wEAEC"}
|