@pulumi/datadog 5.4.0 → 5.5.0-alpha.1780549102

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@pulumi/datadog",
-    "version": "5.4.0",
+    "version": "5.5.0-alpha.1780549102",
     "description": "A Pulumi package for creating and managing Datadog resources.",
     "keywords": [
         "pulumi",
@@ -22,6 +22,6 @@
     "pulumi": {
         "resource": true,
         "name": "datadog",
-        "version": "5.4.0"
+        "version": "5.5.0-alpha.1780549102"
     }
 }

package/serviceAccessToken.d.ts

@@ -0,0 +1,158 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Provides a Datadog `serviceAccessToken` resource. This can be used to create and manage Datadog service access tokens (SATs). A SAT is an access token scoped to a service account; this resource is intentionally limited to service-account-owned tokens.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as datadog from "@pulumi/datadog";
+ *
+ * // Source the permissions for scoped tokens
+ * const ddPerms = datadog.getPermissions({});
+ * // Create a long-lived Service Access Token (SAT) for monitor management
+ * const monitorManagementToken = new datadog.ServiceAccessToken("monitor_management_token", {
+ *     serviceAccountId: "00000000-0000-1234-0000-000000000000",
+ *     name: "Monitor Management Service Access Token",
+ *     scopes: [
+ *         ddPerms.then(ddPerms => ddPerms.permissions?.monitorsRead),
+ *         ddPerms.then(ddPerms => ddPerms.permissions?.monitorsWrite),
+ *     ],
+ * });
+ * // Create a Service Access Token (SAT) with a fixed expiration date.
+ * // The Datadog API caps expirations at 365 days from creation. expires_at is
+ * // immutable after creation; to rotate it, destroy and re-create the resource.
+ * const expiringToken = new datadog.ServiceAccessToken("expiring_token", {
+ *     serviceAccountId: "00000000-0000-1234-0000-000000000000",
+ *     name: "Short-lived CI Service Access Token",
+ *     scopes: [ddPerms.then(ddPerms => ddPerms.permissions?.dashboardsRead)],
+ *     expiresAt: "2027-01-01T00:00:00Z",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * The `pulumi import` command can be used, for example:
+ *
+ * Importing a service access token cannot import the value of the key.
+ *
+ * ```sh
+ * $ pulumi import datadog:index/serviceAccessToken:ServiceAccessToken this "<service_account_id>:<token_id>"
+ * ```
+ */
+export declare class ServiceAccessToken extends pulumi.CustomResource {
+    /**
+     * Get an existing ServiceAccessToken resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ServiceAccessTokenState, opts?: pulumi.CustomResourceOptions): ServiceAccessToken;
+    /**
+     * Returns true if the given object is an instance of ServiceAccessToken.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is ServiceAccessToken;
+    /**
+     * Creation date of the access token, in RFC3339 format.
+     */
+    readonly createdAt: pulumi.Output<string>;
+    /**
+     * Expiration date of the service access token, in RFC3339 format. Omit for a non-expiring token. The Datadog API caps expirations to within 365 days from creation. This attribute is immutable: it cannot be added, changed, or removed after creation. To rotate the expiration, destroy and re-create the resource.
+     */
+    readonly expiresAt: pulumi.Output<string | undefined>;
+    /**
+     * The value of the service access token. This value is only available at creation time and cannot be imported.
+     */
+    readonly key: pulumi.Output<string>;
+    /**
+     * Date the access token was last used, in RFC3339 format. Empty if the token has never been used.
+     */
+    readonly lastUsedAt: pulumi.Output<string>;
+    /**
+     * Name of the service access token. Must be non-empty. String length must be at least 1.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * The public portion of the access token, used for identification.
+     */
+    readonly publicPortion: pulumi.Output<string>;
+    /**
+     * Authorization scopes granted to the service access token. At least one scope is required.
+     */
+    readonly scopes: pulumi.Output<string[]>;
+    /**
+     * ID of the service account that owns this access token.
+     */
+    readonly serviceAccountId: pulumi.Output<string>;
+    /**
+     * Create a ServiceAccessToken resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ServiceAccessTokenArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering ServiceAccessToken resources.
+ */
+export interface ServiceAccessTokenState {
+    /**
+     * Creation date of the access token, in RFC3339 format.
+     */
+    createdAt?: pulumi.Input<string | undefined>;
+    /**
+     * Expiration date of the service access token, in RFC3339 format. Omit for a non-expiring token. The Datadog API caps expirations to within 365 days from creation. This attribute is immutable: it cannot be added, changed, or removed after creation. To rotate the expiration, destroy and re-create the resource.
+     */
+    expiresAt?: pulumi.Input<string | undefined>;
+    /**
+     * The value of the service access token. This value is only available at creation time and cannot be imported.
+     */
+    key?: pulumi.Input<string | undefined>;
+    /**
+     * Date the access token was last used, in RFC3339 format. Empty if the token has never been used.
+     */
+    lastUsedAt?: pulumi.Input<string | undefined>;
+    /**
+     * Name of the service access token. Must be non-empty. String length must be at least 1.
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * The public portion of the access token, used for identification.
+     */
+    publicPortion?: pulumi.Input<string | undefined>;
+    /**
+     * Authorization scopes granted to the service access token. At least one scope is required.
+     */
+    scopes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * ID of the service account that owns this access token.
+     */
+    serviceAccountId?: pulumi.Input<string | undefined>;
+}
+/**
+ * The set of arguments for constructing a ServiceAccessToken resource.
+ */
+export interface ServiceAccessTokenArgs {
+    /**
+     * Expiration date of the service access token, in RFC3339 format. Omit for a non-expiring token. The Datadog API caps expirations to within 365 days from creation. This attribute is immutable: it cannot be added, changed, or removed after creation. To rotate the expiration, destroy and re-create the resource.
+     */
+    expiresAt?: pulumi.Input<string | undefined>;
+    /**
+     * Name of the service access token. Must be non-empty. String length must be at least 1.
+     */
+    name: pulumi.Input<string>;
+    /**
+     * Authorization scopes granted to the service access token. At least one scope is required.
+     */
+    scopes: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * ID of the service account that owns this access token.
+     */
+    serviceAccountId: pulumi.Input<string>;
+}
+//# sourceMappingURL=serviceAccessToken.d.ts.map

package/serviceAccessToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serviceAccessToken.d.ts","sourceRoot":"","sources":["../serviceAccessToken.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,qBAAa,kBAAmB,SAAQ,MAAM,CAAC,cAAc;IACzD;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,uBAAuB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,kBAAkB;IAOtJ;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,kBAAkB;IAO7D;;OAEG;IACH,SAAgC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE;;OAEG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACrE;;OAEG;IACH,SAAgC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3D;;OAEG;IACH,SAAgC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClE;;OAEG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD;;OAEG;IACH,SAAgC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrE;;OAEG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACxD;;OAEG;IACH,SAAwB,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhE;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAuC9F;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACpC;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACvC;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjD;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAC1D;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CACvD;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACnC;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7C;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAC1C"}

package/serviceAccessToken.js

@@ -0,0 +1,138 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServiceAccessToken = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const utilities = __importStar(require("./utilities"));
+/**
+ * Provides a Datadog `serviceAccessToken` resource. This can be used to create and manage Datadog service access tokens (SATs). A SAT is an access token scoped to a service account; this resource is intentionally limited to service-account-owned tokens.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as datadog from "@pulumi/datadog";
+ *
+ * // Source the permissions for scoped tokens
+ * const ddPerms = datadog.getPermissions({});
+ * // Create a long-lived Service Access Token (SAT) for monitor management
+ * const monitorManagementToken = new datadog.ServiceAccessToken("monitor_management_token", {
+ *     serviceAccountId: "00000000-0000-1234-0000-000000000000",
+ *     name: "Monitor Management Service Access Token",
+ *     scopes: [
+ *         ddPerms.then(ddPerms => ddPerms.permissions?.monitorsRead),
+ *         ddPerms.then(ddPerms => ddPerms.permissions?.monitorsWrite),
+ *     ],
+ * });
+ * // Create a Service Access Token (SAT) with a fixed expiration date.
+ * // The Datadog API caps expirations at 365 days from creation. expires_at is
+ * // immutable after creation; to rotate it, destroy and re-create the resource.
+ * const expiringToken = new datadog.ServiceAccessToken("expiring_token", {
+ *     serviceAccountId: "00000000-0000-1234-0000-000000000000",
+ *     name: "Short-lived CI Service Access Token",
+ *     scopes: [ddPerms.then(ddPerms => ddPerms.permissions?.dashboardsRead)],
+ *     expiresAt: "2027-01-01T00:00:00Z",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * The `pulumi import` command can be used, for example:
+ *
+ * Importing a service access token cannot import the value of the key.
+ *
+ * ```sh
+ * $ pulumi import datadog:index/serviceAccessToken:ServiceAccessToken this "<service_account_id>:<token_id>"
+ * ```
+ */
+class ServiceAccessToken extends pulumi.CustomResource {
+    /**
+     * Get an existing ServiceAccessToken resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new ServiceAccessToken(name, state, { ...opts, id: id });
+    }
+    /** @internal */
+    static __pulumiType = 'datadog:index/serviceAccessToken:ServiceAccessToken';
+    /**
+     * Returns true if the given object is an instance of ServiceAccessToken.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === ServiceAccessToken.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["createdAt"] = state?.createdAt;
+            resourceInputs["expiresAt"] = state?.expiresAt;
+            resourceInputs["key"] = state?.key;
+            resourceInputs["lastUsedAt"] = state?.lastUsedAt;
+            resourceInputs["name"] = state?.name;
+            resourceInputs["publicPortion"] = state?.publicPortion;
+            resourceInputs["scopes"] = state?.scopes;
+            resourceInputs["serviceAccountId"] = state?.serviceAccountId;
+        }
+        else {
+            const args = argsOrState;
+            if (args?.name === undefined && !opts.urn) {
+                throw new Error("Missing required property 'name'");
+            }
+            if (args?.scopes === undefined && !opts.urn) {
+                throw new Error("Missing required property 'scopes'");
+            }
+            if (args?.serviceAccountId === undefined && !opts.urn) {
+                throw new Error("Missing required property 'serviceAccountId'");
+            }
+            resourceInputs["expiresAt"] = args?.expiresAt;
+            resourceInputs["name"] = args?.name;
+            resourceInputs["scopes"] = args?.scopes;
+            resourceInputs["serviceAccountId"] = args?.serviceAccountId;
+            resourceInputs["createdAt"] = undefined /*out*/;
+            resourceInputs["key"] = undefined /*out*/;
+            resourceInputs["lastUsedAt"] = undefined /*out*/;
+            resourceInputs["publicPortion"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        const secretOpts = { additionalSecretOutputs: ["key"] };
+        opts = pulumi.mergeOptions(opts, secretOpts);
+        super(ServiceAccessToken.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.ServiceAccessToken = ServiceAccessToken;
+//# sourceMappingURL=serviceAccessToken.js.map

package/serviceAccessToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serviceAccessToken.js","sourceRoot":"","sources":["../serviceAccessToken.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,uDAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAa,kBAAmB,SAAQ,MAAM,CAAC,cAAc;IACzD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA+B,EAAE,IAAmC;QAC7H,OAAO,IAAI,kBAAkB,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,qDAAqD,CAAC;IAE5F;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,kBAAkB,CAAC,YAAY,CAAC;IACnE,CAAC;IA2CD,YAAY,IAAY,EAAE,WAA8D,EAAE,IAAmC;QACzH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAkD,CAAC;YACjE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC;YACnC,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;SAChE;aAAM;YACH,MAAM,IAAI,GAAG,WAAiD,CAAC;YAC/D,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,IAAI,IAAI,EAAE,gBAAgB,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;aACnE;YACD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC1C,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,eAAe,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACvD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,kBAAkB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACvE,CAAC;;AA1GL,gDA2GC"}

package/types/input.d.ts

@@ -66586,6 +66586,10 @@ export interface ObservabilityPipelineConfigDestination {
      * The `socket` destination sends logs over TCP or UDP to a remote server.
      */
     sockets?: pulumi.Input<pulumi.Input<inputs.ObservabilityPipelineConfigDestinationSocket>[] | undefined>;
+    /**
+     * The `splunkHecMetrics` destination forwards metrics to Splunk using the HTTP Event Collector (HEC).
+     */
+    splunkHecMetrics?: pulumi.Input<inputs.ObservabilityPipelineConfigDestinationSplunkHecMetrics | undefined>;
     /**
      * The `splunkHec` destination forwards logs to Splunk using the HTTP Event Collector (HEC).
      */
@@ -68328,6 +68332,96 @@ export interface ObservabilityPipelineConfigDestinationSplunkHecBufferMemory {
      */
     whenFull?: pulumi.Input<string | undefined>;
 }
+export interface ObservabilityPipelineConfigDestinationSplunkHecMetrics {
+    /**
+     * Configuration for buffer settings on destination components. Exactly one of `disk` or `memory` must be specified.
+     */
+    buffer?: pulumi.Input<inputs.ObservabilityPipelineConfigDestinationSplunkHecMetricsBuffer | undefined>;
+    /**
+     * Compression algorithm applied when sending metrics to Splunk HEC. Valid values are `none`, `gzip`.
+     */
+    compression?: pulumi.Input<string | undefined>;
+    /**
+     * Optional default namespace for metrics sent to Splunk HEC.
+     */
+    defaultNamespace?: pulumi.Input<string | undefined>;
+    /**
+     * Name of the environment variable or secret that holds the Splunk HEC endpoint URL.
+     */
+    endpointUrlKey?: pulumi.Input<string | undefined>;
+    /**
+     * Optional name of the Splunk index where metrics are written.
+     */
+    index?: pulumi.Input<string | undefined>;
+    /**
+     * The Splunk source field value for metric events.
+     */
+    source?: pulumi.Input<string | undefined>;
+    /**
+     * The Splunk sourcetype to assign to metric events.
+     */
+    sourcetype?: pulumi.Input<string | undefined>;
+    /**
+     * Configuration for enabling TLS encryption between the pipeline component and external services.
+     */
+    tls?: pulumi.Input<inputs.ObservabilityPipelineConfigDestinationSplunkHecMetricsTls | undefined>;
+    /**
+     * Name of the environment variable or secret that holds the Splunk HEC token.
+     */
+    tokenKey?: pulumi.Input<string | undefined>;
+}
+export interface ObservabilityPipelineConfigDestinationSplunkHecMetricsBuffer {
+    /**
+     * Options for configuring a disk buffer. Cannot be used with `memory`.
+     */
+    disk?: pulumi.Input<inputs.ObservabilityPipelineConfigDestinationSplunkHecMetricsBufferDisk | undefined>;
+    /**
+     * Options for configuring a memory buffer. Cannot be used with `disk`.
+     */
+    memory?: pulumi.Input<inputs.ObservabilityPipelineConfigDestinationSplunkHecMetricsBufferMemory | undefined>;
+}
+export interface ObservabilityPipelineConfigDestinationSplunkHecMetricsBufferDisk {
+    /**
+     * Maximum size of the disk buffer (in bytes).
+     */
+    maxSize?: pulumi.Input<number | undefined>;
+    /**
+     * Behavior when the buffer is full. Valid values are `block` or `dropNewest`. Defaults to `"block"`.
+     */
+    whenFull?: pulumi.Input<string | undefined>;
+}
+export interface ObservabilityPipelineConfigDestinationSplunkHecMetricsBufferMemory {
+    /**
+     * Maximum events for the memory buffer.
+     */
+    maxEvents?: pulumi.Input<number | undefined>;
+    /**
+     * Maximum size of the memory buffer (in bytes).
+     */
+    maxSize?: pulumi.Input<number | undefined>;
+    /**
+     * Behavior when the buffer is full. Valid values are `block` or `dropNewest`. Defaults to `"block"`.
+     */
+    whenFull?: pulumi.Input<string | undefined>;
+}
+export interface ObservabilityPipelineConfigDestinationSplunkHecMetricsTls {
+    /**
+     * Path to the Certificate Authority (CA) file used to validate the server's TLS certificate.
+     */
+    caFile?: pulumi.Input<string | undefined>;
+    /**
+     * Path to the TLS client certificate file used to authenticate the pipeline component with upstream or downstream services.
+     */
+    crtFile: pulumi.Input<string>;
+    /**
+     * Path to the private key file associated with the TLS client certificate. Used for mutual TLS authentication.
+     */
+    keyFile?: pulumi.Input<string | undefined>;
+    /**
+     * Name of the environment variable or secret that holds the passphrase for the private key file.
+     */
+    keyPassKey?: pulumi.Input<string | undefined>;
+}
 export interface ObservabilityPipelineConfigDestinationSumoLogic {
     /**
      * Configuration for buffer settings on destination components. Exactly one of `disk` or `memory` must be specified.
@@ -70298,10 +70392,54 @@ export interface OnCallTeamRoutingRulesRule {
     urgency?: pulumi.Input<string | undefined>;
 }
 export interface OnCallTeamRoutingRulesRuleAction {
+    escalationPolicy?: pulumi.Input<inputs.OnCallTeamRoutingRulesRuleActionEscalationPolicy | undefined>;
     sendSlackMessage?: pulumi.Input<inputs.OnCallTeamRoutingRulesRuleActionSendSlackMessage | undefined>;
     sendTeamsMessage?: pulumi.Input<inputs.OnCallTeamRoutingRulesRuleActionSendTeamsMessage | undefined>;
     triggerWorkflowAutomation?: pulumi.Input<inputs.OnCallTeamRoutingRulesRuleActionTriggerWorkflowAutomation | undefined>;
 }
+export interface OnCallTeamRoutingRulesRuleActionEscalationPolicy {
+    /**
+     * Number of minutes before an acknowledged page is re-triggered. Value must be between 30 and 4320.
+     */
+    ackTimeoutMinutes?: pulumi.Input<number | undefined>;
+    /**
+     * Escalation policy ID.
+     */
+    policyId?: pulumi.Input<string | undefined>;
+    /**
+     * Support hours during which the escalation policy will execute.
+     */
+    supportHours?: pulumi.Input<inputs.OnCallTeamRoutingRulesRuleActionEscalationPolicySupportHours | undefined>;
+    /**
+     * Urgency for pages created via this action. Valid values are `high`, `low`, `dynamic`.
+     */
+    urgency?: pulumi.Input<string | undefined>;
+}
+export interface OnCallTeamRoutingRulesRuleActionEscalationPolicySupportHours {
+    restrictions?: pulumi.Input<pulumi.Input<inputs.OnCallTeamRoutingRulesRuleActionEscalationPolicySupportHoursRestriction>[] | undefined>;
+    /**
+     * Specifies the time zone applicable to the restrictions, e.g. `America/New_York`.
+     */
+    timeZone?: pulumi.Input<string | undefined>;
+}
+export interface OnCallTeamRoutingRulesRuleActionEscalationPolicySupportHoursRestriction {
+    /**
+     * The weekday when the restriction period ends. Valid values are `monday`, `tuesday`, `wednesday`, `thursday`, `friday`, `saturday`, `sunday`.
+     */
+    endDay?: pulumi.Input<string | undefined>;
+    /**
+     * The time of day when the restriction ends (hh:mm:ss).
+     */
+    endTime?: pulumi.Input<string | undefined>;
+    /**
+     * The weekday when the restriction period starts. Valid values are `monday`, `tuesday`, `wednesday`, `thursday`, `friday`, `saturday`, `sunday`.
+     */
+    startDay?: pulumi.Input<string | undefined>;
+    /**
+     * The time of day when the restriction begins (hh:mm:ss).
+     */
+    startTime?: pulumi.Input<string | undefined>;
+}
 export interface OnCallTeamRoutingRulesRuleActionSendSlackMessage {
     /**
      * Slack channel ID.