@pulumi/datadog 5.11.0-alpha.1789105914 → 5.11.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/actionConnection.d.ts +24 -0
- package/actionConnection.d.ts.map +1 -1
- package/actionConnection.js +8 -0
- package/actionConnection.js.map +1 -1
- package/actionExecutionPolicy.d.ts +244 -0
- package/actionExecutionPolicy.d.ts.map +1 -0
- package/actionExecutionPolicy.js +201 -0
- package/actionExecutionPolicy.js.map +1 -0
- package/aws/getIntegrationAccount.d.ts +41 -0
- package/aws/getIntegrationAccount.d.ts.map +1 -0
- package/aws/getIntegrationAccount.js +51 -0
- package/aws/getIntegrationAccount.js.map +1 -0
- package/aws/index.d.ts +3 -0
- package/aws/index.d.ts.map +1 -1
- package/aws/index.js +4 -1
- package/aws/index.js.map +1 -1
- package/cloudConfigurationRule.d.ts +3 -3
- package/config/vars.d.ts +5 -1
- package/config/vars.d.ts.map +1 -1
- package/config/vars.js +6 -0
- package/config/vars.js.map +1 -1
- package/customAllocationRule.d.ts +31 -0
- package/customAllocationRule.d.ts.map +1 -1
- package/customAllocationRule.js +31 -0
- package/customAllocationRule.js.map +1 -1
- package/dashboardV2.d.ts +12 -0
- package/dashboardV2.d.ts.map +1 -1
- package/dashboardV2.js +2 -0
- package/dashboardV2.js.map +1 -1
- package/datastore.d.ts +4 -4
- package/datastore.d.ts.map +1 -1
- package/getActionConnection.d.ts +4 -0
- package/getActionConnection.d.ts.map +1 -1
- package/getActionConnection.js.map +1 -1
- package/getMonitor.d.ts +1 -1
- package/getStatusPage.d.ts +123 -0
- package/getStatusPage.d.ts.map +1 -0
- package/getStatusPage.js +73 -0
- package/getStatusPage.js.map +1 -0
- package/getStatusPageComponent.d.ts +102 -0
- package/getStatusPageComponent.d.ts.map +1 -0
- package/getStatusPageComponent.js +77 -0
- package/getStatusPageComponent.js.map +1 -0
- package/getStatusPageComponents.d.ts +92 -0
- package/getStatusPageComponents.d.ts.map +1 -0
- package/getStatusPageComponents.js +77 -0
- package/getStatusPageComponents.js.map +1 -0
- package/getStatusPageDegradationTemplate.d.ts +98 -0
- package/getStatusPageDegradationTemplate.d.ts.map +1 -0
- package/getStatusPageDegradationTemplate.js +77 -0
- package/getStatusPageDegradationTemplate.js.map +1 -0
- package/getStatusPageDegradationTemplates.d.ts +80 -0
- package/getStatusPageDegradationTemplates.d.ts.map +1 -0
- package/getStatusPageDegradationTemplates.js +75 -0
- package/getStatusPageDegradationTemplates.js.map +1 -0
- package/getStatusPageMaintenanceTemplate.d.ts +105 -0
- package/getStatusPageMaintenanceTemplate.d.ts.map +1 -0
- package/getStatusPageMaintenanceTemplate.js +77 -0
- package/getStatusPageMaintenanceTemplate.js.map +1 -0
- package/getStatusPageMaintenanceTemplates.d.ts +80 -0
- package/getStatusPageMaintenanceTemplates.d.ts.map +1 -0
- package/getStatusPageMaintenanceTemplates.js +75 -0
- package/getStatusPageMaintenanceTemplates.js.map +1 -0
- package/getStatusPages.d.ts +68 -0
- package/getStatusPages.d.ts.map +1 -0
- package/getStatusPages.js +75 -0
- package/getStatusPages.js.map +1 -0
- package/getSyntheticsTest.d.ts +105 -0
- package/getSyntheticsTest.d.ts.map +1 -1
- package/getSyntheticsTest.js +68 -0
- package/getSyntheticsTest.js.map +1 -1
- package/governanceControl.d.ts +141 -0
- package/governanceControl.d.ts.map +1 -0
- package/governanceControl.js +119 -0
- package/governanceControl.js.map +1 -0
- package/index.d.ts +57 -0
- package/index.d.ts.map +1 -1
- package/index.js +86 -6
- package/index.js.map +1 -1
- package/monitor.d.ts +3 -3
- package/monitorNotificationRule.d.ts +12 -0
- package/monitorNotificationRule.d.ts.map +1 -1
- package/monitorNotificationRule.js +2 -0
- package/monitorNotificationRule.js.map +1 -1
- package/orgGroupPolicy.d.ts +23 -3
- package/orgGroupPolicy.d.ts.map +1 -1
- package/orgGroupPolicy.js +20 -0
- package/orgGroupPolicy.js.map +1 -1
- package/package.json +2 -2
- package/provider.d.ts +5 -1
- package/provider.d.ts.map +1 -1
- package/provider.js +1 -0
- package/provider.js.map +1 -1
- package/rumExclusionFilter.d.ts +124 -0
- package/rumExclusionFilter.d.ts.map +1 -0
- package/rumExclusionFilter.js +116 -0
- package/rumExclusionFilter.js.map +1 -0
- package/rumRetentionQuota.d.ts +106 -0
- package/rumRetentionQuota.d.ts.map +1 -0
- package/rumRetentionQuota.js +113 -0
- package/rumRetentionQuota.js.map +1 -0
- package/samlIdpMetadata.d.ts +84 -0
- package/samlIdpMetadata.d.ts.map +1 -0
- package/samlIdpMetadata.js +86 -0
- package/samlIdpMetadata.js.map +1 -0
- package/statusPage.d.ts +231 -0
- package/statusPage.d.ts.map +1 -0
- package/statusPage.js +140 -0
- package/statusPage.js.map +1 -0
- package/statusPageComponent.d.ts +173 -0
- package/statusPageComponent.d.ts.map +1 -0
- package/statusPageComponent.js +148 -0
- package/statusPageComponent.js.map +1 -0
- package/statusPageDegradationTemplate.d.ts +166 -0
- package/statusPageDegradationTemplate.d.ts.map +1 -0
- package/statusPageDegradationTemplate.js +141 -0
- package/statusPageDegradationTemplate.js.map +1 -0
- package/statusPageMaintenanceTemplate.d.ts +178 -0
- package/statusPageMaintenanceTemplate.d.ts.map +1 -0
- package/statusPageMaintenanceTemplate.js +135 -0
- package/statusPageMaintenanceTemplate.js.map +1 -0
- package/tagRule.d.ts +257 -0
- package/tagRule.d.ts.map +1 -0
- package/tagRule.js +168 -0
- package/tagRule.js.map +1 -0
- package/types/input.d.ts +20300 -80962
- package/types/input.d.ts.map +1 -1
- package/types/output.d.ts +20486 -80754
- package/types/output.d.ts.map +1 -1
- package/webhookOauth2ClientCredentials.d.ts +137 -0
- package/webhookOauth2ClientCredentials.d.ts.map +1 -0
- package/webhookOauth2ClientCredentials.js +124 -0
- package/webhookOauth2ClientCredentials.js.map +1 -0
package/actionConnection.d.ts
CHANGED
|
@@ -12,6 +12,10 @@ import * as outputs from "./types/output";
|
|
|
12
12
|
*
|
|
13
13
|
* const awsConnection = new datadog.ActionConnection("aws_connection", {
|
|
14
14
|
* name: "My AWS Connection",
|
|
15
|
+
* tags: [
|
|
16
|
+
* "env:prod",
|
|
17
|
+
* "team:action-platform",
|
|
18
|
+
* ],
|
|
15
19
|
* aws: [{
|
|
16
20
|
* assumeRole: [{
|
|
17
21
|
* accountId: "123456789012",
|
|
@@ -131,6 +135,10 @@ export declare class ActionConnection extends pulumi.CustomResource {
|
|
|
131
135
|
* Configuration for a Datadog connection
|
|
132
136
|
*/
|
|
133
137
|
readonly datadog: pulumi.Output<outputs.ActionConnectionDatadog | undefined>;
|
|
138
|
+
/**
|
|
139
|
+
* Tags associated with the connection, including those inherited from the provider's `defaultTags` configuration.
|
|
140
|
+
*/
|
|
141
|
+
readonly effectiveTags: pulumi.Output<string[]>;
|
|
134
142
|
/**
|
|
135
143
|
* Configuration for a Fastly connection
|
|
136
144
|
*/
|
|
@@ -191,6 +199,10 @@ export declare class ActionConnection extends pulumi.CustomResource {
|
|
|
191
199
|
* Configuration for a Statsig connection
|
|
192
200
|
*/
|
|
193
201
|
readonly statsig: pulumi.Output<outputs.ActionConnectionStatsig | undefined>;
|
|
202
|
+
/**
|
|
203
|
+
* User-defined tags associated with the connection. Each tag must follow the `key:value` format. The `default` tag key is reserved. See also `effectiveTags`, which includes provider-level `defaultTags`.
|
|
204
|
+
*/
|
|
205
|
+
readonly tags: pulumi.Output<string[] | undefined>;
|
|
194
206
|
/**
|
|
195
207
|
* Configuration for a VirusTotal connection
|
|
196
208
|
*/
|
|
@@ -244,6 +256,10 @@ export interface ActionConnectionState {
|
|
|
244
256
|
* Configuration for a Datadog connection
|
|
245
257
|
*/
|
|
246
258
|
datadog?: pulumi.Input<inputs.ActionConnectionDatadog | undefined>;
|
|
259
|
+
/**
|
|
260
|
+
* Tags associated with the connection, including those inherited from the provider's `defaultTags` configuration.
|
|
261
|
+
*/
|
|
262
|
+
effectiveTags?: pulumi.Input<pulumi.Input<string>[] | undefined>;
|
|
247
263
|
/**
|
|
248
264
|
* Configuration for a Fastly connection
|
|
249
265
|
*/
|
|
@@ -304,6 +320,10 @@ export interface ActionConnectionState {
|
|
|
304
320
|
* Configuration for a Statsig connection
|
|
305
321
|
*/
|
|
306
322
|
statsig?: pulumi.Input<inputs.ActionConnectionStatsig | undefined>;
|
|
323
|
+
/**
|
|
324
|
+
* User-defined tags associated with the connection. Each tag must follow the `key:value` format. The `default` tag key is reserved. See also `effectiveTags`, which includes provider-level `defaultTags`.
|
|
325
|
+
*/
|
|
326
|
+
tags?: pulumi.Input<pulumi.Input<string>[] | undefined>;
|
|
307
327
|
/**
|
|
308
328
|
* Configuration for a VirusTotal connection
|
|
309
329
|
*/
|
|
@@ -409,6 +429,10 @@ export interface ActionConnectionArgs {
|
|
|
409
429
|
* Configuration for a Statsig connection
|
|
410
430
|
*/
|
|
411
431
|
statsig?: pulumi.Input<inputs.ActionConnectionStatsig | undefined>;
|
|
432
|
+
/**
|
|
433
|
+
* User-defined tags associated with the connection. Each tag must follow the `key:value` format. The `default` tag key is reserved. See also `effectiveTags`, which includes provider-level `defaultTags`.
|
|
434
|
+
*/
|
|
435
|
+
tags?: pulumi.Input<pulumi.Input<string>[] | undefined>;
|
|
412
436
|
/**
|
|
413
437
|
* Configuration for a VirusTotal connection
|
|
414
438
|
*/
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"actionConnection.d.ts","sourceRoot":"","sources":["../actionConnection.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAG1C
|
|
1
|
+
{"version":3,"file":"actionConnection.d.ts","sourceRoot":"","sources":["../actionConnection.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAG1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiFG;AACH,qBAAa,gBAAiB,SAAQ,MAAM,CAAC,cAAc;IACvD;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,qBAAqB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,gBAAgB;IAOlJ;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,gBAAgB;IAO3D;;OAEG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAAC;IAChG;;OAEG;IACH,SAAwB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;IACxF;;OAEG;IACH,SAAwB,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAAC;IACpF;;OAEG;IACH,SAAwB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;IACxF;;OAEG;IACH,SAAwB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAAC;IAC9F;;OAEG;IACH,SAAwB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAAC;IAC5F;;OAEG;IACH,SAAwB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;IAClG;;OAEG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAAC;IAChG;;OAEG;IACH,SAAwB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAAC;IAC5F;;OAEG;IACH,SAAgC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE;;OAEG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IAC1F;;OAEG;IACH,SAAwB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAAC;IACtG;;OAEG;IACH,SAAwB,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAAC;IACpF;;OAEG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IAC1F;;OAEG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IAC1F;;OAEG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAAC;IAChG;;OAEG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAAC;IACtF;;OAEG;IACH,SAAwB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAAC;IACtG;;OAEG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD;;OAEG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IAC1F;;OAEG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAAC;IACtF;;OAEG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IAC1F;;OAEG;IACH,SAAwB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;IAClG;;OAEG;IACH,SAAwB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;IACxF;;OAEG;IACH,SAAwB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAAC;IAC5F;;OAEG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IAClE;;OAEG;IACH,SAAwB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;IAElG;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAqE5F;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IAClC;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAAC;IACvE;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;IAC/D;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAAC;IAC3D;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;IAC/D;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAAC;IACrE;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAAC;IACnE;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;IACzE;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAAC;IACvE;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAAC;IACnE;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAAC;IAC7E;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAAC;IAC3D;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAAC;IACvE;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAAC;IAC7D;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAAC;IAC7E;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAAC;IAC7D;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;IACzE;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;IAC/D;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAAC;IACnE;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACxD;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;CAC5E;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACjC;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAAC;IACvE;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;IAC/D;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAAC;IAC3D;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;IAC/D;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAAC;IACrE;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAAC;IACnE;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;IACzE;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAAC;IACvE;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAAC;IACnE;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAAC;IAC7E;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAAC;IAC3D;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAAC;IACvE;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAAC;IAC7D;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAAC;IAC7E;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAAC;IAC7D;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;IACzE;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;IAC/D;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAAC;IACnE;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACxD;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;CAC5E"}
|
package/actionConnection.js
CHANGED
|
@@ -39,6 +39,10 @@ const utilities = __importStar(require("./utilities"));
|
|
|
39
39
|
*
|
|
40
40
|
* const awsConnection = new datadog.ActionConnection("aws_connection", {
|
|
41
41
|
* name: "My AWS Connection",
|
|
42
|
+
* tags: [
|
|
43
|
+
* "env:prod",
|
|
44
|
+
* "team:action-platform",
|
|
45
|
+
* ],
|
|
42
46
|
* aws: [{
|
|
43
47
|
* assumeRole: [{
|
|
44
48
|
* accountId: "123456789012",
|
|
@@ -145,6 +149,7 @@ class ActionConnection extends pulumi.CustomResource {
|
|
|
145
149
|
resourceInputs["cloudflare"] = state?.cloudflare;
|
|
146
150
|
resourceInputs["configCat"] = state?.configCat;
|
|
147
151
|
resourceInputs["datadog"] = state?.datadog;
|
|
152
|
+
resourceInputs["effectiveTags"] = state?.effectiveTags;
|
|
148
153
|
resourceInputs["fastly"] = state?.fastly;
|
|
149
154
|
resourceInputs["freshservice"] = state?.freshservice;
|
|
150
155
|
resourceInputs["gcp"] = state?.gcp;
|
|
@@ -160,6 +165,7 @@ class ActionConnection extends pulumi.CustomResource {
|
|
|
160
165
|
resourceInputs["serviceNow"] = state?.serviceNow;
|
|
161
166
|
resourceInputs["split"] = state?.split;
|
|
162
167
|
resourceInputs["statsig"] = state?.statsig;
|
|
168
|
+
resourceInputs["tags"] = state?.tags;
|
|
163
169
|
resourceInputs["virusTotal"] = state?.virusTotal;
|
|
164
170
|
}
|
|
165
171
|
else {
|
|
@@ -191,7 +197,9 @@ class ActionConnection extends pulumi.CustomResource {
|
|
|
191
197
|
resourceInputs["serviceNow"] = args?.serviceNow;
|
|
192
198
|
resourceInputs["split"] = args?.split;
|
|
193
199
|
resourceInputs["statsig"] = args?.statsig;
|
|
200
|
+
resourceInputs["tags"] = args?.tags;
|
|
194
201
|
resourceInputs["virusTotal"] = args?.virusTotal;
|
|
202
|
+
resourceInputs["effectiveTags"] = undefined /*out*/;
|
|
195
203
|
}
|
|
196
204
|
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
|
|
197
205
|
super(ActionConnection.__pulumiType, name, resourceInputs, opts);
|
package/actionConnection.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"actionConnection.js","sourceRoot":"","sources":["../actionConnection.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AAGzC,uDAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"actionConnection.js","sourceRoot":"","sources":["../actionConnection.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AAGzC,uDAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiFG;AACH,MAAa,gBAAiB,SAAQ,MAAM,CAAC,cAAc;IACvD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA6B,EAAE,IAAmC;QAC3H,OAAO,IAAI,gBAAgB,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,iDAAiD,CAAC;IAExF;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,gBAAgB,CAAC,YAAY,CAAC;IACjE,CAAC;IAuHD,YAAY,IAAY,EAAE,WAA0D,EAAE,IAAmC;QACrH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAgD,CAAC;YAC/D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC;YACnC,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC;YACnC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;SACpD;aAAM;YACH,MAAM,IAAI,GAAG,WAA+C,CAAC;YAC7D,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC;YAClC,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC;YAClC,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,eAAe,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACvD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,gBAAgB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC;;AApNL,4CAqNC"}
|
|
@@ -0,0 +1,244 @@
|
|
|
1
|
+
import * as pulumi from "@pulumi/pulumi";
|
|
2
|
+
import * as inputs from "./types/input";
|
|
3
|
+
import * as outputs from "./types/output";
|
|
4
|
+
/**
|
|
5
|
+
* Provides a Datadog Execution Policy resource. Execution policies control which Action Platform actions may run against your infrastructure, and where. Each policy pairs an effect (`allow` or `deny`) with a pattern of actions, optionally narrowed to specific Kubernetes namespaces, scripts or remote shell paths, and optionally scoped to agents matching a set of Fleet Automation tags.
|
|
6
|
+
*
|
|
7
|
+
* ## Example Usage
|
|
8
|
+
*
|
|
9
|
+
* ```typescript
|
|
10
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
11
|
+
* import * as datadog from "@pulumi/datadog";
|
|
12
|
+
*
|
|
13
|
+
* // Kubernetes: allow read-only actions against prod namespaces, on agents/PARs
|
|
14
|
+
* // matching either target tag set below.
|
|
15
|
+
* const kubernetesProdRead = new datadog.ActionExecutionPolicy("kubernetes_prod_read", {
|
|
16
|
+
* name: "allow-kubernetes-prod-read",
|
|
17
|
+
* effect: "allow",
|
|
18
|
+
* actionPattern: [{
|
|
19
|
+
* integration: "INTEGRATION_KUBERNETES",
|
|
20
|
+
* actionFqns: [
|
|
21
|
+
* "com.datadoghq.kubernetes.core.getPod",
|
|
22
|
+
* "com.datadoghq.kubernetes.core.listPod",
|
|
23
|
+
* ],
|
|
24
|
+
* }],
|
|
25
|
+
* scope: [{
|
|
26
|
+
* kubernetes: [{
|
|
27
|
+
* rules: [{
|
|
28
|
+
* targetNamespaces: [
|
|
29
|
+
* "prod",
|
|
30
|
+
* "prod-system",
|
|
31
|
+
* ],
|
|
32
|
+
* }],
|
|
33
|
+
* }],
|
|
34
|
+
* }],
|
|
35
|
+
* targets: [
|
|
36
|
+
* {
|
|
37
|
+
* name: "prod-us",
|
|
38
|
+
* agentTags: [
|
|
39
|
+
* "env:prod",
|
|
40
|
+
* "region:us-east-1",
|
|
41
|
+
* ],
|
|
42
|
+
* },
|
|
43
|
+
* {
|
|
44
|
+
* name: "prod-eu",
|
|
45
|
+
* agentTags: [
|
|
46
|
+
* "env:prod",
|
|
47
|
+
* "region:eu-west-1",
|
|
48
|
+
* ],
|
|
49
|
+
* },
|
|
50
|
+
* ],
|
|
51
|
+
* });
|
|
52
|
+
* // Remote action (rshell): allow command execution restricted to a read-only path on staging agents.
|
|
53
|
+
* const rshellStagingReadonly = new datadog.ActionExecutionPolicy("rshell_staging_readonly", {
|
|
54
|
+
* name: "rshell-staging-readonly",
|
|
55
|
+
* effect: "allow",
|
|
56
|
+
* actionPattern: [{
|
|
57
|
+
* integration: "INTEGRATION_REMOTE_ACTION",
|
|
58
|
+
* actionFqns: ["com.datadoghq.remoteaction.rshell.runCommand"],
|
|
59
|
+
* }],
|
|
60
|
+
* scope: [{
|
|
61
|
+
* remoteActionRshell: [{
|
|
62
|
+
* rules: [{
|
|
63
|
+
* targetPaths: ["/etc/datadog-agent/"],
|
|
64
|
+
* access: "read_only",
|
|
65
|
+
* }],
|
|
66
|
+
* }],
|
|
67
|
+
* }],
|
|
68
|
+
* targets: [{
|
|
69
|
+
* name: "staging",
|
|
70
|
+
* agentTags: ["env:staging"],
|
|
71
|
+
* }],
|
|
72
|
+
* });
|
|
73
|
+
* // Scripts: deny a specific shell script action everywhere, regardless of agent tags
|
|
74
|
+
* // (no `target` block means the policy applies fleet-wide).
|
|
75
|
+
* const denyDangerousScript = new datadog.ActionExecutionPolicy("deny_dangerous_script", {
|
|
76
|
+
* name: "deny-dangerous-cleanup-script",
|
|
77
|
+
* effect: "deny",
|
|
78
|
+
* actionPattern: [{
|
|
79
|
+
* integration: "INTEGRATION_SCRIPT",
|
|
80
|
+
* actionFqns: ["com.datadoghq.script.runShellScript"],
|
|
81
|
+
* }],
|
|
82
|
+
* scope: [{
|
|
83
|
+
* scripts: [{
|
|
84
|
+
* rules: [{
|
|
85
|
+
* targetScriptNames: ["dangerous-cleanup.sh"],
|
|
86
|
+
* }],
|
|
87
|
+
* }],
|
|
88
|
+
* }],
|
|
89
|
+
* });
|
|
90
|
+
* // Access to a policy is managed separately via datadog_restriction_policy,
|
|
91
|
+
* // keyed by "execution-policy:<id>".
|
|
92
|
+
* const kubernetesProdPerms = new datadog.RestrictionPolicy("kubernetes_prod_perms", {
|
|
93
|
+
* resourceId: pulumi.interpolate`execution-policy:${kubernetesProdRead.id}`,
|
|
94
|
+
* bindings: [{
|
|
95
|
+
* relation: "editor",
|
|
96
|
+
* principals: ["role:sre-oncall"],
|
|
97
|
+
* }],
|
|
98
|
+
* });
|
|
99
|
+
* ```
|
|
100
|
+
*
|
|
101
|
+
* ## Import
|
|
102
|
+
*
|
|
103
|
+
* The `pulumi import` command can be used, for example:
|
|
104
|
+
*
|
|
105
|
+
* ```sh
|
|
106
|
+
* $ pulumi import datadog:index/actionExecutionPolicy:ActionExecutionPolicy my_policy 11111111-2222-3333-4444-555555555555
|
|
107
|
+
* ```
|
|
108
|
+
*/
|
|
109
|
+
export declare class ActionExecutionPolicy extends pulumi.CustomResource {
|
|
110
|
+
/**
|
|
111
|
+
* Get an existing ActionExecutionPolicy resource's state with the given name, ID, and optional extra
|
|
112
|
+
* properties used to qualify the lookup.
|
|
113
|
+
*
|
|
114
|
+
* @param name The _unique_ name of the resulting resource.
|
|
115
|
+
* @param id The _unique_ provider ID of the resource to lookup.
|
|
116
|
+
* @param state Any extra arguments used during the lookup.
|
|
117
|
+
* @param opts Optional settings to control the behavior of the CustomResource.
|
|
118
|
+
*/
|
|
119
|
+
static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ActionExecutionPolicyState, opts?: pulumi.CustomResourceOptions): ActionExecutionPolicy;
|
|
120
|
+
/**
|
|
121
|
+
* Returns true if the given object is an instance of ActionExecutionPolicy. This is designed to work even
|
|
122
|
+
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
123
|
+
*/
|
|
124
|
+
static isInstance(obj: any): obj is ActionExecutionPolicy;
|
|
125
|
+
/**
|
|
126
|
+
* The set of actions this policy applies to. Required.
|
|
127
|
+
*/
|
|
128
|
+
readonly actionPattern: pulumi.Output<outputs.ActionExecutionPolicyActionPattern | undefined>;
|
|
129
|
+
/**
|
|
130
|
+
* The date and time the execution policy was created, as an RFC3339 timestamp.
|
|
131
|
+
*/
|
|
132
|
+
readonly createdAt: pulumi.Output<string>;
|
|
133
|
+
/**
|
|
134
|
+
* The ID of the user who created the execution policy.
|
|
135
|
+
*/
|
|
136
|
+
readonly createdBy: pulumi.Output<string>;
|
|
137
|
+
/**
|
|
138
|
+
* Whether the policy allows or denies the matched actions. Valid values are `allow`, `deny`.
|
|
139
|
+
*/
|
|
140
|
+
readonly effect: pulumi.Output<string>;
|
|
141
|
+
/**
|
|
142
|
+
* The name of the execution policy.
|
|
143
|
+
*/
|
|
144
|
+
readonly name: pulumi.Output<string>;
|
|
145
|
+
/**
|
|
146
|
+
* Restricts where the policy applies, beyond `actionPattern`. When configured, exactly one of `kubernetes`, `scripts` or `remoteActionRshell` must be set, and it must match `action_pattern.integration`. Omitting this block means the policy has no scope restriction.
|
|
147
|
+
*/
|
|
148
|
+
readonly scope: pulumi.Output<outputs.ActionExecutionPolicyScope | undefined>;
|
|
149
|
+
/**
|
|
150
|
+
* A target this policy is scoped to, expressed as a set of Agent tags. Each target is matched independently; omitting all `target` blocks applies the policy fleet-wide.
|
|
151
|
+
*/
|
|
152
|
+
readonly targets: pulumi.Output<outputs.ActionExecutionPolicyTarget[] | undefined>;
|
|
153
|
+
/**
|
|
154
|
+
* The date and time the execution policy was last updated, as an RFC3339 timestamp.
|
|
155
|
+
*/
|
|
156
|
+
readonly updatedAt: pulumi.Output<string>;
|
|
157
|
+
/**
|
|
158
|
+
* The ID of the user who last updated the execution policy.
|
|
159
|
+
*/
|
|
160
|
+
readonly updatedBy: pulumi.Output<string>;
|
|
161
|
+
/**
|
|
162
|
+
* The version of the execution policy. Incremented by Datadog on every update.
|
|
163
|
+
*/
|
|
164
|
+
readonly version: pulumi.Output<number>;
|
|
165
|
+
/**
|
|
166
|
+
* Create a ActionExecutionPolicy resource with the given unique name, arguments, and options.
|
|
167
|
+
*
|
|
168
|
+
* @param name The _unique_ name of the resource.
|
|
169
|
+
* @param args The arguments to use to populate this resource's properties.
|
|
170
|
+
* @param opts A bag of options that control this resource's behavior.
|
|
171
|
+
*/
|
|
172
|
+
constructor(name: string, args: ActionExecutionPolicyArgs, opts?: pulumi.CustomResourceOptions);
|
|
173
|
+
}
|
|
174
|
+
/**
|
|
175
|
+
* Input properties used for looking up and filtering ActionExecutionPolicy resources.
|
|
176
|
+
*/
|
|
177
|
+
export interface ActionExecutionPolicyState {
|
|
178
|
+
/**
|
|
179
|
+
* The set of actions this policy applies to. Required.
|
|
180
|
+
*/
|
|
181
|
+
actionPattern?: pulumi.Input<inputs.ActionExecutionPolicyActionPattern | undefined>;
|
|
182
|
+
/**
|
|
183
|
+
* The date and time the execution policy was created, as an RFC3339 timestamp.
|
|
184
|
+
*/
|
|
185
|
+
createdAt?: pulumi.Input<string | undefined>;
|
|
186
|
+
/**
|
|
187
|
+
* The ID of the user who created the execution policy.
|
|
188
|
+
*/
|
|
189
|
+
createdBy?: pulumi.Input<string | undefined>;
|
|
190
|
+
/**
|
|
191
|
+
* Whether the policy allows or denies the matched actions. Valid values are `allow`, `deny`.
|
|
192
|
+
*/
|
|
193
|
+
effect?: pulumi.Input<string | undefined>;
|
|
194
|
+
/**
|
|
195
|
+
* The name of the execution policy.
|
|
196
|
+
*/
|
|
197
|
+
name?: pulumi.Input<string | undefined>;
|
|
198
|
+
/**
|
|
199
|
+
* Restricts where the policy applies, beyond `actionPattern`. When configured, exactly one of `kubernetes`, `scripts` or `remoteActionRshell` must be set, and it must match `action_pattern.integration`. Omitting this block means the policy has no scope restriction.
|
|
200
|
+
*/
|
|
201
|
+
scope?: pulumi.Input<inputs.ActionExecutionPolicyScope | undefined>;
|
|
202
|
+
/**
|
|
203
|
+
* A target this policy is scoped to, expressed as a set of Agent tags. Each target is matched independently; omitting all `target` blocks applies the policy fleet-wide.
|
|
204
|
+
*/
|
|
205
|
+
targets?: pulumi.Input<pulumi.Input<inputs.ActionExecutionPolicyTarget>[] | undefined>;
|
|
206
|
+
/**
|
|
207
|
+
* The date and time the execution policy was last updated, as an RFC3339 timestamp.
|
|
208
|
+
*/
|
|
209
|
+
updatedAt?: pulumi.Input<string | undefined>;
|
|
210
|
+
/**
|
|
211
|
+
* The ID of the user who last updated the execution policy.
|
|
212
|
+
*/
|
|
213
|
+
updatedBy?: pulumi.Input<string | undefined>;
|
|
214
|
+
/**
|
|
215
|
+
* The version of the execution policy. Incremented by Datadog on every update.
|
|
216
|
+
*/
|
|
217
|
+
version?: pulumi.Input<number | undefined>;
|
|
218
|
+
}
|
|
219
|
+
/**
|
|
220
|
+
* The set of arguments for constructing a ActionExecutionPolicy resource.
|
|
221
|
+
*/
|
|
222
|
+
export interface ActionExecutionPolicyArgs {
|
|
223
|
+
/**
|
|
224
|
+
* The set of actions this policy applies to. Required.
|
|
225
|
+
*/
|
|
226
|
+
actionPattern?: pulumi.Input<inputs.ActionExecutionPolicyActionPattern | undefined>;
|
|
227
|
+
/**
|
|
228
|
+
* Whether the policy allows or denies the matched actions. Valid values are `allow`, `deny`.
|
|
229
|
+
*/
|
|
230
|
+
effect: pulumi.Input<string>;
|
|
231
|
+
/**
|
|
232
|
+
* The name of the execution policy.
|
|
233
|
+
*/
|
|
234
|
+
name: pulumi.Input<string>;
|
|
235
|
+
/**
|
|
236
|
+
* Restricts where the policy applies, beyond `actionPattern`. When configured, exactly one of `kubernetes`, `scripts` or `remoteActionRshell` must be set, and it must match `action_pattern.integration`. Omitting this block means the policy has no scope restriction.
|
|
237
|
+
*/
|
|
238
|
+
scope?: pulumi.Input<inputs.ActionExecutionPolicyScope | undefined>;
|
|
239
|
+
/**
|
|
240
|
+
* A target this policy is scoped to, expressed as a set of Agent tags. Each target is matched independently; omitting all `target` blocks applies the policy fleet-wide.
|
|
241
|
+
*/
|
|
242
|
+
targets?: pulumi.Input<pulumi.Input<inputs.ActionExecutionPolicyTarget>[] | undefined>;
|
|
243
|
+
}
|
|
244
|
+
//# sourceMappingURL=actionExecutionPolicy.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"actionExecutionPolicy.d.ts","sourceRoot":"","sources":["../actionExecutionPolicy.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAG1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwGG;AACH,qBAAa,qBAAsB,SAAQ,MAAM,CAAC,cAAc;IAC5D;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,0BAA0B,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,qBAAqB;IAO5J;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,qBAAqB;IAOhE;;OAEG;IACH,SAAwB,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,kCAAkC,GAAG,SAAS,CAAC,CAAC;IAC7G;;OAEG;IACH,SAAgC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE;;OAEG;IACH,SAAgC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE;;OAEG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtD;;OAEG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD;;OAEG;IACH,SAAwB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;IAC7F;;OAEG;IACH,SAAwB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,2BAA2B,EAAE,GAAG,SAAS,CAAC,CAAC;IAClG;;OAEG;IACH,SAAgC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE;;OAEG;IACH,SAAgC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE;;OAEG;IACH,SAAgC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAE/D;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,yBAAyB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAsCjG;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACvC;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,kCAAkC,GAAG,SAAS,CAAC,CAAC;IACpF;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;IACpE;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,2BAA2B,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACvF;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACtC;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,kCAAkC,GAAG,SAAS,CAAC,CAAC;IACpF;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;IACpE;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,2BAA2B,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;CAC1F"}
|
|
@@ -0,0 +1,201 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
// *** WARNING: this file was generated by pulumi-language-nodejs. ***
|
|
3
|
+
// *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
5
|
+
if (k2 === undefined) k2 = k;
|
|
6
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
7
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
8
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
9
|
+
}
|
|
10
|
+
Object.defineProperty(o, k2, desc);
|
|
11
|
+
}) : (function(o, m, k, k2) {
|
|
12
|
+
if (k2 === undefined) k2 = k;
|
|
13
|
+
o[k2] = m[k];
|
|
14
|
+
}));
|
|
15
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
16
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
17
|
+
}) : function(o, v) {
|
|
18
|
+
o["default"] = v;
|
|
19
|
+
});
|
|
20
|
+
var __importStar = (this && this.__importStar) || function (mod) {
|
|
21
|
+
if (mod && mod.__esModule) return mod;
|
|
22
|
+
var result = {};
|
|
23
|
+
if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
|
|
24
|
+
__setModuleDefault(result, mod);
|
|
25
|
+
return result;
|
|
26
|
+
};
|
|
27
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
28
|
+
exports.ActionExecutionPolicy = void 0;
|
|
29
|
+
const pulumi = __importStar(require("@pulumi/pulumi"));
|
|
30
|
+
const utilities = __importStar(require("./utilities"));
|
|
31
|
+
/**
|
|
32
|
+
* Provides a Datadog Execution Policy resource. Execution policies control which Action Platform actions may run against your infrastructure, and where. Each policy pairs an effect (`allow` or `deny`) with a pattern of actions, optionally narrowed to specific Kubernetes namespaces, scripts or remote shell paths, and optionally scoped to agents matching a set of Fleet Automation tags.
|
|
33
|
+
*
|
|
34
|
+
* ## Example Usage
|
|
35
|
+
*
|
|
36
|
+
* ```typescript
|
|
37
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
38
|
+
* import * as datadog from "@pulumi/datadog";
|
|
39
|
+
*
|
|
40
|
+
* // Kubernetes: allow read-only actions against prod namespaces, on agents/PARs
|
|
41
|
+
* // matching either target tag set below.
|
|
42
|
+
* const kubernetesProdRead = new datadog.ActionExecutionPolicy("kubernetes_prod_read", {
|
|
43
|
+
* name: "allow-kubernetes-prod-read",
|
|
44
|
+
* effect: "allow",
|
|
45
|
+
* actionPattern: [{
|
|
46
|
+
* integration: "INTEGRATION_KUBERNETES",
|
|
47
|
+
* actionFqns: [
|
|
48
|
+
* "com.datadoghq.kubernetes.core.getPod",
|
|
49
|
+
* "com.datadoghq.kubernetes.core.listPod",
|
|
50
|
+
* ],
|
|
51
|
+
* }],
|
|
52
|
+
* scope: [{
|
|
53
|
+
* kubernetes: [{
|
|
54
|
+
* rules: [{
|
|
55
|
+
* targetNamespaces: [
|
|
56
|
+
* "prod",
|
|
57
|
+
* "prod-system",
|
|
58
|
+
* ],
|
|
59
|
+
* }],
|
|
60
|
+
* }],
|
|
61
|
+
* }],
|
|
62
|
+
* targets: [
|
|
63
|
+
* {
|
|
64
|
+
* name: "prod-us",
|
|
65
|
+
* agentTags: [
|
|
66
|
+
* "env:prod",
|
|
67
|
+
* "region:us-east-1",
|
|
68
|
+
* ],
|
|
69
|
+
* },
|
|
70
|
+
* {
|
|
71
|
+
* name: "prod-eu",
|
|
72
|
+
* agentTags: [
|
|
73
|
+
* "env:prod",
|
|
74
|
+
* "region:eu-west-1",
|
|
75
|
+
* ],
|
|
76
|
+
* },
|
|
77
|
+
* ],
|
|
78
|
+
* });
|
|
79
|
+
* // Remote action (rshell): allow command execution restricted to a read-only path on staging agents.
|
|
80
|
+
* const rshellStagingReadonly = new datadog.ActionExecutionPolicy("rshell_staging_readonly", {
|
|
81
|
+
* name: "rshell-staging-readonly",
|
|
82
|
+
* effect: "allow",
|
|
83
|
+
* actionPattern: [{
|
|
84
|
+
* integration: "INTEGRATION_REMOTE_ACTION",
|
|
85
|
+
* actionFqns: ["com.datadoghq.remoteaction.rshell.runCommand"],
|
|
86
|
+
* }],
|
|
87
|
+
* scope: [{
|
|
88
|
+
* remoteActionRshell: [{
|
|
89
|
+
* rules: [{
|
|
90
|
+
* targetPaths: ["/etc/datadog-agent/"],
|
|
91
|
+
* access: "read_only",
|
|
92
|
+
* }],
|
|
93
|
+
* }],
|
|
94
|
+
* }],
|
|
95
|
+
* targets: [{
|
|
96
|
+
* name: "staging",
|
|
97
|
+
* agentTags: ["env:staging"],
|
|
98
|
+
* }],
|
|
99
|
+
* });
|
|
100
|
+
* // Scripts: deny a specific shell script action everywhere, regardless of agent tags
|
|
101
|
+
* // (no `target` block means the policy applies fleet-wide).
|
|
102
|
+
* const denyDangerousScript = new datadog.ActionExecutionPolicy("deny_dangerous_script", {
|
|
103
|
+
* name: "deny-dangerous-cleanup-script",
|
|
104
|
+
* effect: "deny",
|
|
105
|
+
* actionPattern: [{
|
|
106
|
+
* integration: "INTEGRATION_SCRIPT",
|
|
107
|
+
* actionFqns: ["com.datadoghq.script.runShellScript"],
|
|
108
|
+
* }],
|
|
109
|
+
* scope: [{
|
|
110
|
+
* scripts: [{
|
|
111
|
+
* rules: [{
|
|
112
|
+
* targetScriptNames: ["dangerous-cleanup.sh"],
|
|
113
|
+
* }],
|
|
114
|
+
* }],
|
|
115
|
+
* }],
|
|
116
|
+
* });
|
|
117
|
+
* // Access to a policy is managed separately via datadog_restriction_policy,
|
|
118
|
+
* // keyed by "execution-policy:<id>".
|
|
119
|
+
* const kubernetesProdPerms = new datadog.RestrictionPolicy("kubernetes_prod_perms", {
|
|
120
|
+
* resourceId: pulumi.interpolate`execution-policy:${kubernetesProdRead.id}`,
|
|
121
|
+
* bindings: [{
|
|
122
|
+
* relation: "editor",
|
|
123
|
+
* principals: ["role:sre-oncall"],
|
|
124
|
+
* }],
|
|
125
|
+
* });
|
|
126
|
+
* ```
|
|
127
|
+
*
|
|
128
|
+
* ## Import
|
|
129
|
+
*
|
|
130
|
+
* The `pulumi import` command can be used, for example:
|
|
131
|
+
*
|
|
132
|
+
* ```sh
|
|
133
|
+
* $ pulumi import datadog:index/actionExecutionPolicy:ActionExecutionPolicy my_policy 11111111-2222-3333-4444-555555555555
|
|
134
|
+
* ```
|
|
135
|
+
*/
|
|
136
|
+
class ActionExecutionPolicy extends pulumi.CustomResource {
|
|
137
|
+
/**
|
|
138
|
+
* Get an existing ActionExecutionPolicy resource's state with the given name, ID, and optional extra
|
|
139
|
+
* properties used to qualify the lookup.
|
|
140
|
+
*
|
|
141
|
+
* @param name The _unique_ name of the resulting resource.
|
|
142
|
+
* @param id The _unique_ provider ID of the resource to lookup.
|
|
143
|
+
* @param state Any extra arguments used during the lookup.
|
|
144
|
+
* @param opts Optional settings to control the behavior of the CustomResource.
|
|
145
|
+
*/
|
|
146
|
+
static get(name, id, state, opts) {
|
|
147
|
+
return new ActionExecutionPolicy(name, state, { ...opts, id: id });
|
|
148
|
+
}
|
|
149
|
+
/** @internal */
|
|
150
|
+
static __pulumiType = 'datadog:index/actionExecutionPolicy:ActionExecutionPolicy';
|
|
151
|
+
/**
|
|
152
|
+
* Returns true if the given object is an instance of ActionExecutionPolicy. This is designed to work even
|
|
153
|
+
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
154
|
+
*/
|
|
155
|
+
static isInstance(obj) {
|
|
156
|
+
if (obj === undefined || obj === null) {
|
|
157
|
+
return false;
|
|
158
|
+
}
|
|
159
|
+
return obj['__pulumiType'] === ActionExecutionPolicy.__pulumiType;
|
|
160
|
+
}
|
|
161
|
+
constructor(name, argsOrState, opts) {
|
|
162
|
+
let resourceInputs = {};
|
|
163
|
+
opts = opts || {};
|
|
164
|
+
if (opts.id) {
|
|
165
|
+
const state = argsOrState;
|
|
166
|
+
resourceInputs["actionPattern"] = state?.actionPattern;
|
|
167
|
+
resourceInputs["createdAt"] = state?.createdAt;
|
|
168
|
+
resourceInputs["createdBy"] = state?.createdBy;
|
|
169
|
+
resourceInputs["effect"] = state?.effect;
|
|
170
|
+
resourceInputs["name"] = state?.name;
|
|
171
|
+
resourceInputs["scope"] = state?.scope;
|
|
172
|
+
resourceInputs["targets"] = state?.targets;
|
|
173
|
+
resourceInputs["updatedAt"] = state?.updatedAt;
|
|
174
|
+
resourceInputs["updatedBy"] = state?.updatedBy;
|
|
175
|
+
resourceInputs["version"] = state?.version;
|
|
176
|
+
}
|
|
177
|
+
else {
|
|
178
|
+
const args = argsOrState;
|
|
179
|
+
if (args?.effect === undefined && !opts.urn) {
|
|
180
|
+
throw new Error("Missing required property 'effect'");
|
|
181
|
+
}
|
|
182
|
+
if (args?.name === undefined && !opts.urn) {
|
|
183
|
+
throw new Error("Missing required property 'name'");
|
|
184
|
+
}
|
|
185
|
+
resourceInputs["actionPattern"] = args?.actionPattern;
|
|
186
|
+
resourceInputs["effect"] = args?.effect;
|
|
187
|
+
resourceInputs["name"] = args?.name;
|
|
188
|
+
resourceInputs["scope"] = args?.scope;
|
|
189
|
+
resourceInputs["targets"] = args?.targets;
|
|
190
|
+
resourceInputs["createdAt"] = undefined /*out*/;
|
|
191
|
+
resourceInputs["createdBy"] = undefined /*out*/;
|
|
192
|
+
resourceInputs["updatedAt"] = undefined /*out*/;
|
|
193
|
+
resourceInputs["updatedBy"] = undefined /*out*/;
|
|
194
|
+
resourceInputs["version"] = undefined /*out*/;
|
|
195
|
+
}
|
|
196
|
+
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
|
|
197
|
+
super(ActionExecutionPolicy.__pulumiType, name, resourceInputs, opts);
|
|
198
|
+
}
|
|
199
|
+
}
|
|
200
|
+
exports.ActionExecutionPolicy = ActionExecutionPolicy;
|
|
201
|
+
//# sourceMappingURL=actionExecutionPolicy.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"actionExecutionPolicy.js","sourceRoot":"","sources":["../actionExecutionPolicy.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AAGzC,uDAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwGG;AACH,MAAa,qBAAsB,SAAQ,MAAM,CAAC,cAAc;IAC5D;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAkC,EAAE,IAAmC;QAChI,OAAO,IAAI,qBAAqB,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,2DAA2D,CAAC;IAElG;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,qBAAqB,CAAC,YAAY,CAAC;IACtE,CAAC;IAmDD,YAAY,IAAY,EAAE,WAAoE,EAAE,IAAmC;QAC/H,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAqD,CAAC;YACpE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;SAC9C;aAAM;YACH,MAAM,IAAI,GAAG,WAAoD,CAAC;YAClE,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACjD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,qBAAqB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC1E,CAAC;;AAjHL,sDAkHC"}
|
|
@@ -0,0 +1,41 @@
|
|
|
1
|
+
import * as pulumi from "@pulumi/pulumi";
|
|
2
|
+
/**
|
|
3
|
+
* Use this data source to retrieve the Datadog AWS account integration config ID for a given AWS Account ID. This is the ID used to import an existing AWS integration into the `datadog.aws.IntegrationAccount` resource.
|
|
4
|
+
*/
|
|
5
|
+
export declare function getIntegrationAccount(args: GetIntegrationAccountArgs, opts?: pulumi.InvokeOptions): Promise<GetIntegrationAccountResult>;
|
|
6
|
+
/**
|
|
7
|
+
* A collection of arguments for invoking getIntegrationAccount.
|
|
8
|
+
*/
|
|
9
|
+
export interface GetIntegrationAccountArgs {
|
|
10
|
+
/**
|
|
11
|
+
* The AWS Account ID of the integration config to look up. Must be a 12-digit AWS Account ID without dashes.
|
|
12
|
+
*/
|
|
13
|
+
awsAccountId: string;
|
|
14
|
+
}
|
|
15
|
+
/**
|
|
16
|
+
* A collection of values returned by getIntegrationAccount.
|
|
17
|
+
*/
|
|
18
|
+
export interface GetIntegrationAccountResult {
|
|
19
|
+
/**
|
|
20
|
+
* The AWS Account ID of the integration config to look up. Must be a 12-digit AWS Account ID without dashes.
|
|
21
|
+
*/
|
|
22
|
+
readonly awsAccountId: string;
|
|
23
|
+
/**
|
|
24
|
+
* The ID of this resource.
|
|
25
|
+
*/
|
|
26
|
+
readonly id: string;
|
|
27
|
+
}
|
|
28
|
+
/**
|
|
29
|
+
* Use this data source to retrieve the Datadog AWS account integration config ID for a given AWS Account ID. This is the ID used to import an existing AWS integration into the `datadog.aws.IntegrationAccount` resource.
|
|
30
|
+
*/
|
|
31
|
+
export declare function getIntegrationAccountOutput(args: GetIntegrationAccountOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetIntegrationAccountResult>;
|
|
32
|
+
/**
|
|
33
|
+
* A collection of arguments for invoking getIntegrationAccount.
|
|
34
|
+
*/
|
|
35
|
+
export interface GetIntegrationAccountOutputArgs {
|
|
36
|
+
/**
|
|
37
|
+
* The AWS Account ID of the integration config to look up. Must be a 12-digit AWS Account ID without dashes.
|
|
38
|
+
*/
|
|
39
|
+
awsAccountId: pulumi.Input<string>;
|
|
40
|
+
}
|
|
41
|
+
//# sourceMappingURL=getIntegrationAccount.d.ts.map
|