@pulumiverse/grafana 0.7.0 → 0.7.1

package/types/input.d.ts

@@ -1312,9 +1312,13 @@ export interface OncallIntegrationTemplates {
      */
     groupingKey?: pulumi.Input<string>;
     /**
-     * Templates for Microsoft Teams.
+     * Templates for Microsoft Teams. **NOTE**: Microsoft Teams templates are only available on Grafana Cloud.
      */
     microsoftTeams?: pulumi.Input<inputs.OncallIntegrationTemplatesMicrosoftTeams>;
+    /**
+     * Templates for Mobile app push notifications.
+     */
+    mobileApp?: pulumi.Input<inputs.OncallIntegrationTemplatesMobileApp>;
     /**
      * Templates for Phone Call.
      */
@@ -1368,6 +1372,16 @@ export interface OncallIntegrationTemplatesMicrosoftTeams {
      */
     title?: pulumi.Input<string>;
 }
+export interface OncallIntegrationTemplatesMobileApp {
+    /**
+     * Template for Alert message.
+     */
+    message?: pulumi.Input<string>;
+    /**
+     * Template for Alert title.
+     */
+    title?: pulumi.Input<string>;
+}
 export interface OncallIntegrationTemplatesPhoneCall {
     /**
      * Template for Alert title.
@@ -1538,7 +1552,7 @@ export interface RolePermission {
 }
 export interface RuleGroupRule {
     /**
-     * Key-value pairs of metadata to attach to the alert rule that may add user-defined context, but cannot be used for matching, grouping, or routing. Defaults to `map[]`.
+     * Key-value pairs of metadata to attach to the alert rule. They add additional information, such as a `summary` or `runbookUrl`, to help identify and investigate alerts. The `dashboardUId` and `panelId` annotations, which link alerts to a panel, must be set together. Defaults to `map[]`.
      */
     annotations?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
@@ -1578,9 +1592,13 @@ export interface RuleGroupRule {
      */
     noDataState?: pulumi.Input<string>;
     /**
-     * Notification settings for the rule. If specified, it overrides the notification policies. Available since Grafana 10.4, requires feature flag 'alertingSimplifiedRouting' enabled.
+     * Notification settings for the rule. If specified, it overrides the notification policies. Available since Grafana 10.4, requires feature flag 'alertingSimplifiedRouting' to be enabled.
      */
     notificationSettings?: pulumi.Input<inputs.RuleGroupRuleNotificationSettings>;
+    /**
+     * Settings for a recording rule. Available since Grafana 11.2, requires feature flag 'grafanaManagedRecordingRules' to be enabled.
+     */
+    record?: pulumi.Input<inputs.RuleGroupRuleRecord>;
     /**
      * The unique identifier of the alert rule.
      */
@@ -1644,6 +1662,16 @@ export interface RuleGroupRuleNotificationSettings {
      */
     repeatInterval?: pulumi.Input<string>;
 }
+export interface RuleGroupRuleRecord {
+    /**
+     * The ref id of the query node in the data field to use as the source of the metric.
+     */
+    from: pulumi.Input<string>;
+    /**
+     * The name of the metric to write to.
+     */
+    metric: pulumi.Input<string>;
+}
 export interface SLOAlerting {
     /**
      * Advanced Options for Alert Rules
@@ -1673,7 +1701,13 @@ export interface SLOAlertingAdvancedOptions {
     minFailures?: pulumi.Input<number>;
 }
 export interface SLOAlertingAnnotation {
+    /**
+     * Key for filtering and identification
+     */
     key: pulumi.Input<string>;
+    /**
+     * Templatable value
+     */
     value: pulumi.Input<string>;
 }
 export interface SLOAlertingFastburn {
@@ -1687,15 +1721,33 @@ export interface SLOAlertingFastburn {
     labels?: pulumi.Input<pulumi.Input<inputs.SLOAlertingFastburnLabel>[]>;
 }
 export interface SLOAlertingFastburnAnnotation {
+    /**
+     * Key for filtering and identification
+     */
     key: pulumi.Input<string>;
+    /**
+     * Templatable value
+     */
     value: pulumi.Input<string>;
 }
 export interface SLOAlertingFastburnLabel {
+    /**
+     * Key for filtering and identification
+     */
     key: pulumi.Input<string>;
+    /**
+     * Templatable value
+     */
     value: pulumi.Input<string>;
 }
 export interface SLOAlertingLabel {
+    /**
+     * Key for filtering and identification
+     */
     key: pulumi.Input<string>;
+    /**
+     * Templatable value
+     */
     value: pulumi.Input<string>;
 }
 export interface SLOAlertingSlowburn {
@@ -1709,21 +1761,39 @@ export interface SLOAlertingSlowburn {
     labels?: pulumi.Input<pulumi.Input<inputs.SLOAlertingSlowburnLabel>[]>;
 }
 export interface SLOAlertingSlowburnAnnotation {
+    /**
+     * Key for filtering and identification
+     */
     key: pulumi.Input<string>;
+    /**
+     * Templatable value
+     */
     value: pulumi.Input<string>;
 }
 export interface SLOAlertingSlowburnLabel {
+    /**
+     * Key for filtering and identification
+     */
     key: pulumi.Input<string>;
+    /**
+     * Templatable value
+     */
     value: pulumi.Input<string>;
 }
 export interface SLODestinationDatasource {
     /**
-     * UID for the Mimir Datasource
+     * UID for the Datasource
      */
-    uid?: pulumi.Input<string>;
+    uid: pulumi.Input<string>;
 }
 export interface SLOLabel {
+    /**
+     * Key for filtering and identification
+     */
     key: pulumi.Input<string>;
+    /**
+     * Templatable value
+     */
     value: pulumi.Input<string>;
 }
 export interface SLOObjective {
@@ -1778,6 +1848,144 @@ export interface ServiceAccountPermissionPermission {
      */
     userId?: pulumi.Input<string>;
 }
+export interface SsoSettingsLdapSettings {
+    /**
+     * Whether to allow new Grafana user creation through LDAP login. If set to false, then only existing Grafana users can log in with LDAP.
+     */
+    allowSignUp?: pulumi.Input<boolean>;
+    /**
+     * The LDAP configuration.
+     */
+    config: pulumi.Input<inputs.SsoSettingsLdapSettingsConfig>;
+    /**
+     * Define whether this configuration is enabled for LDAP. Defaults to `true`.
+     */
+    enabled?: pulumi.Input<boolean>;
+    /**
+     * Prevent synchronizing users’ organization roles from LDAP.
+     */
+    skipOrgRoleSync?: pulumi.Input<boolean>;
+}
+export interface SsoSettingsLdapSettingsConfig {
+    /**
+     * The LDAP servers configuration.
+     */
+    servers: pulumi.Input<pulumi.Input<inputs.SsoSettingsLdapSettingsConfigServer>[]>;
+}
+export interface SsoSettingsLdapSettingsConfigServer {
+    /**
+     * The LDAP server attributes. The following attributes can be configured: email, member_of, name, surname, username.
+     */
+    attributes?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    }>;
+    /**
+     * The search user bind DN.
+     */
+    bindDn?: pulumi.Input<string>;
+    /**
+     * The search user bind password.
+     */
+    bindPassword?: pulumi.Input<string>;
+    /**
+     * The path to the client certificate.
+     */
+    clientCert?: pulumi.Input<string>;
+    /**
+     * The Base64 encoded value of the client certificate.
+     */
+    clientCertValue?: pulumi.Input<string>;
+    /**
+     * The path to the client private key.
+     */
+    clientKey?: pulumi.Input<string>;
+    /**
+     * The Base64 encoded value of the client private key.
+     */
+    clientKeyValue?: pulumi.Input<string>;
+    /**
+     * For mapping an LDAP group to a Grafana organization and role.
+     */
+    groupMappings?: pulumi.Input<pulumi.Input<inputs.SsoSettingsLdapSettingsConfigServerGroupMapping>[]>;
+    /**
+     * An array of the base DNs to search through for groups. Typically uses ou=groups.
+     */
+    groupSearchBaseDns?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Group search filter, to retrieve the groups of which the user is a member (only set if memberOf attribute is not available).
+     */
+    groupSearchFilter?: pulumi.Input<string>;
+    /**
+     * The %s in the search filter will be replaced with the attribute defined in this field.
+     */
+    groupSearchFilterUserAttribute?: pulumi.Input<string>;
+    /**
+     * The LDAP server host.
+     */
+    host: pulumi.Input<string>;
+    /**
+     * Minimum TLS version allowed. Accepted values are: TLS1.2, TLS1.3.
+     */
+    minTlsVersion?: pulumi.Input<string>;
+    /**
+     * The LDAP server port.
+     */
+    port?: pulumi.Input<number>;
+    /**
+     * The path to the root CA certificate.
+     */
+    rootCaCert?: pulumi.Input<string>;
+    /**
+     * The Base64 encoded values of the root CA certificates.
+     */
+    rootCaCertValues?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * An array of base DNs to search through.
+     */
+    searchBaseDns: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The user search filter, for example "(cn=%s)" or "(sAMAccountName=%s)" or "(uid=%s)".
+     */
+    searchFilter: pulumi.Input<string>;
+    /**
+     * If set to true, the SSL cert validation will be skipped.
+     */
+    sslSkipVerify?: pulumi.Input<boolean>;
+    /**
+     * If set to true, use LDAP with STARTTLS instead of LDAPS.
+     */
+    startTls?: pulumi.Input<boolean>;
+    /**
+     * The timeout in seconds for connecting to the LDAP host.
+     */
+    timeout?: pulumi.Input<number>;
+    /**
+     * Accepted TLS ciphers. For a complete list of supported ciphers, refer to: https://go.dev/src/crypto/tls/cipher_suites.go.
+     */
+    tlsCiphers?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Set to true if LDAP server should use an encrypted TLS connection (either with STARTTLS or LDAPS).
+     */
+    useSsl?: pulumi.Input<boolean>;
+}
+export interface SsoSettingsLdapSettingsConfigServerGroupMapping {
+    /**
+     * If set to true, it makes the user of groupDn Grafana server admin.
+     */
+    grafanaAdmin?: pulumi.Input<boolean>;
+    /**
+     * LDAP distinguished name (DN) of LDAP group. If you want to match all (or no LDAP groups) then you can use wildcard ("*").
+     */
+    groupDn: pulumi.Input<string>;
+    /**
+     * The Grafana organization database id.
+     */
+    orgId?: pulumi.Input<number>;
+    /**
+     * Assign users of groupDn the organization role Admin, Editor, or Viewer.
+     */
+    orgRole: pulumi.Input<string>;
+}
 export interface SsoSettingsOauth2Settings {
     /**
      * If enabled, it will automatically sync the Grafana server administrator role.
@@ -1873,6 +2081,14 @@ export interface SsoSettingsOauth2Settings {
      * JMESPath expression to use for user name lookup from the user ID token. This name will be used as the user’s display name. Only applicable to Generic OAuth.
      */
     nameAttributePath?: pulumi.Input<string>;
+    /**
+     * JMESPath expression to use for the organization mapping lookup from the user ID token. The extracted list will be used for the organization mapping (to match "Organization" in the "orgMapping"). Only applicable to Generic OAuth and Okta.
+     */
+    orgAttributePath?: pulumi.Input<string>;
+    /**
+     * List of comma- or space-separated Organization:OrgIdOrOrgName:Role mappings. Organization can be * meaning “All users”. Role is optional and can have the following values: None, Viewer, Editor or Admin.
+     */
+    orgMapping?: pulumi.Input<string>;
     /**
      * JMESPath expression to use for Grafana role lookup.
      */
@@ -1983,10 +2199,26 @@ export interface SsoSettingsSamlSettings {
      * Path for the SP X.509 certificate.
      */
     certificatePath?: pulumi.Input<string>;
+    /**
+     * The client Id of your OAuth2 app.
+     */
+    clientId?: pulumi.Input<string>;
+    /**
+     * The client secret of your OAuth2 app.
+     */
+    clientSecret?: pulumi.Input<string>;
     /**
      * Define whether this configuration is enabled for SAML. Defaults to `true`.
      */
     enabled?: pulumi.Input<boolean>;
+    /**
+     * The entity ID is a globally unique identifier for the service provider. It is used to identify the service provider to the identity provider. Defaults to the URL of the Grafana instance if not set.
+     */
+    entityId?: pulumi.Input<string>;
+    /**
+     * If enabled, Grafana will fetch groups from Microsoft Graph API instead of using the groups claim from the ID token.
+     */
+    forceUseGraphApi?: pulumi.Input<boolean>;
     /**
      * Base64-encoded string for the IdP SAML metadata XML.
      */
@@ -2063,6 +2295,10 @@ export interface SsoSettingsSamlSettings {
      * Prevent synchronizing users’ organization roles from your IdP.
      */
     skipOrgRoleSync?: pulumi.Input<boolean>;
+    /**
+     * The token endpoint of your OAuth2 provider. Required for Azure AD providers.
+     */
+    tokenUrl?: pulumi.Input<string>;
 }
 export interface SyntheticMonitoringCheckSettings {
     /**
@@ -3728,7 +3964,7 @@ export declare namespace alerting {
     }
     interface RuleGroupRule {
         /**
-         * Key-value pairs of metadata to attach to the alert rule that may add user-defined context, but cannot be used for matching, grouping, or routing. Defaults to `map[]`.
+         * Key-value pairs of metadata to attach to the alert rule. They add additional information, such as a `summary` or `runbookUrl`, to help identify and investigate alerts. The `dashboardUId` and `panelId` annotations, which link alerts to a panel, must be set together. Defaults to `map[]`.
          */
         annotations?: pulumi.Input<{
             [key: string]: pulumi.Input<string>;
@@ -3768,9 +4004,13 @@ export declare namespace alerting {
          */
         noDataState?: pulumi.Input<string>;
         /**
-         * Notification settings for the rule. If specified, it overrides the notification policies. Available since Grafana 10.4, requires feature flag 'alertingSimplifiedRouting' enabled.
+         * Notification settings for the rule. If specified, it overrides the notification policies. Available since Grafana 10.4, requires feature flag 'alertingSimplifiedRouting' to be enabled.
          */
         notificationSettings?: pulumi.Input<inputs.alerting.RuleGroupRuleNotificationSettings>;
+        /**
+         * Settings for a recording rule. Available since Grafana 11.2, requires feature flag 'grafanaManagedRecordingRules' to be enabled.
+         */
+        record?: pulumi.Input<inputs.alerting.RuleGroupRuleRecord>;
         /**
          * The unique identifier of the alert rule.
          */
@@ -3834,6 +4074,16 @@ export declare namespace alerting {
          */
         repeatInterval?: pulumi.Input<string>;
     }
+    interface RuleGroupRuleRecord {
+        /**
+         * The ref id of the query node in the data field to use as the source of the metric.
+         */
+        from: pulumi.Input<string>;
+        /**
+         * The name of the metric to write to.
+         */
+        metric: pulumi.Input<string>;
+    }
 }
 export declare namespace cloud {
     interface AccessPolicyRealm {
@@ -3853,6 +4103,418 @@ export declare namespace cloud {
          */
         selector: pulumi.Input<string>;
     }
+    interface GetProviderAwsCloudwatchScrapeJobCustomNamespace {
+        /**
+         * One or more configuration blocks to configure metrics and their statistics to scrape. Each block must represent a distinct metric name. When accessing this as an attribute reference, it is a list of objects.
+         */
+        metrics?: inputs.cloud.GetProviderAwsCloudwatchScrapeJobCustomNamespaceMetric[];
+        /**
+         * The name of the custom namespace to scrape.
+         */
+        name?: string;
+        /**
+         * The interval in seconds to scrape the custom namespace.
+         */
+        scrapeIntervalSeconds?: number;
+    }
+    interface GetProviderAwsCloudwatchScrapeJobCustomNamespaceArgs {
+        /**
+         * One or more configuration blocks to configure metrics and their statistics to scrape. Each block must represent a distinct metric name. When accessing this as an attribute reference, it is a list of objects.
+         */
+        metrics?: pulumi.Input<pulumi.Input<inputs.cloud.GetProviderAwsCloudwatchScrapeJobCustomNamespaceMetricArgs>[]>;
+        /**
+         * The name of the custom namespace to scrape.
+         */
+        name?: pulumi.Input<string>;
+        /**
+         * The interval in seconds to scrape the custom namespace.
+         */
+        scrapeIntervalSeconds?: pulumi.Input<number>;
+    }
+    interface GetProviderAwsCloudwatchScrapeJobCustomNamespaceMetric {
+        /**
+         * The name of the metric to scrape.
+         */
+        name?: string;
+        /**
+         * A set of statistics to scrape.
+         */
+        statistics?: string[];
+    }
+    interface GetProviderAwsCloudwatchScrapeJobCustomNamespaceMetricArgs {
+        /**
+         * The name of the metric to scrape.
+         */
+        name?: pulumi.Input<string>;
+        /**
+         * A set of statistics to scrape.
+         */
+        statistics?: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface GetProviderAwsCloudwatchScrapeJobService {
+        /**
+         * One or more configuration blocks to configure metrics and their statistics to scrape. Each block must represent a distinct metric name. When accessing this as an attribute reference, it is a list of objects.
+         */
+        metrics?: inputs.cloud.GetProviderAwsCloudwatchScrapeJobServiceMetric[];
+        /**
+         * The name of the service to scrape. See https://grafana.com/docs/grafana-cloud/monitor-infrastructure/aws/cloudwatch-metrics/services/ for supported services, metrics, and their statistics.
+         */
+        name?: string;
+        /**
+         * One or more configuration blocks to configure tag filters applied to discovery of resource entities in the associated AWS account. When accessing this as an attribute reference, it is a list of objects.
+         */
+        resourceDiscoveryTagFilters?: inputs.cloud.GetProviderAwsCloudwatchScrapeJobServiceResourceDiscoveryTagFilter[];
+        /**
+         * The interval in seconds to scrape the service. See https://grafana.com/docs/grafana-cloud/monitor-infrastructure/aws/cloudwatch-metrics/services/ for supported scrape intervals.
+         */
+        scrapeIntervalSeconds?: number;
+        /**
+         * A set of tags to add to all metrics exported by this scrape job, for use in PromQL queries.
+         */
+        tagsToAddToMetrics?: string[];
+    }
+    interface GetProviderAwsCloudwatchScrapeJobServiceArgs {
+        /**
+         * One or more configuration blocks to configure metrics and their statistics to scrape. Each block must represent a distinct metric name. When accessing this as an attribute reference, it is a list of objects.
+         */
+        metrics?: pulumi.Input<pulumi.Input<inputs.cloud.GetProviderAwsCloudwatchScrapeJobServiceMetricArgs>[]>;
+        /**
+         * The name of the service to scrape. See https://grafana.com/docs/grafana-cloud/monitor-infrastructure/aws/cloudwatch-metrics/services/ for supported services, metrics, and their statistics.
+         */
+        name?: pulumi.Input<string>;
+        /**
+         * One or more configuration blocks to configure tag filters applied to discovery of resource entities in the associated AWS account. When accessing this as an attribute reference, it is a list of objects.
+         */
+        resourceDiscoveryTagFilters?: pulumi.Input<pulumi.Input<inputs.cloud.GetProviderAwsCloudwatchScrapeJobServiceResourceDiscoveryTagFilterArgs>[]>;
+        /**
+         * The interval in seconds to scrape the service. See https://grafana.com/docs/grafana-cloud/monitor-infrastructure/aws/cloudwatch-metrics/services/ for supported scrape intervals.
+         */
+        scrapeIntervalSeconds?: pulumi.Input<number>;
+        /**
+         * A set of tags to add to all metrics exported by this scrape job, for use in PromQL queries.
+         */
+        tagsToAddToMetrics?: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface GetProviderAwsCloudwatchScrapeJobServiceMetric {
+        /**
+         * The name of the metric to scrape.
+         */
+        name?: string;
+        /**
+         * A set of statistics to scrape.
+         */
+        statistics?: string[];
+    }
+    interface GetProviderAwsCloudwatchScrapeJobServiceMetricArgs {
+        /**
+         * The name of the metric to scrape.
+         */
+        name?: pulumi.Input<string>;
+        /**
+         * A set of statistics to scrape.
+         */
+        statistics?: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface GetProviderAwsCloudwatchScrapeJobServiceResourceDiscoveryTagFilter {
+        /**
+         * The key of the tag filter.
+         */
+        key?: string;
+        /**
+         * The value of the tag filter.
+         */
+        value?: string;
+    }
+    interface GetProviderAwsCloudwatchScrapeJobServiceResourceDiscoveryTagFilterArgs {
+        /**
+         * The key of the tag filter.
+         */
+        key?: pulumi.Input<string>;
+        /**
+         * The value of the tag filter.
+         */
+        value?: pulumi.Input<string>;
+    }
+    interface GetProviderAwsCloudwatchScrapeJobsScrapeJob {
+        /**
+         * The ID assigned by the Grafana Cloud Provider API to an AWS Account resource that should be associated with this CloudWatch Scrape Job. This can be provided by the `resourceId` attribute of the `grafana.cloud.ProviderAwsAccount` resource.
+         */
+        awsAccountResourceId?: string;
+        /**
+         * Zero or more configuration blocks to configure custom namespaces for the CloudWatch Scrape Job to scrape. Each block must have a distinct `name` attribute. When accessing this as an attribute reference, it is a list of objects.
+         */
+        customNamespaces?: inputs.cloud.GetProviderAwsCloudwatchScrapeJobsScrapeJobCustomNamespace[];
+        /**
+         * When the CloudWatch Scrape Job is disabled, this will show the reason that it is in that state.
+         */
+        disabledReason?: string;
+        /**
+         * Whether the CloudWatch Scrape Job is enabled or not.
+         */
+        enabled?: boolean;
+        /**
+         * When enabled, AWS resource tags are exported as Prometheus labels to metrics formatted as `aws_<service_name>_info`.
+         */
+        exportTags?: boolean;
+        id?: string;
+        name?: string;
+        /**
+         * The set of AWS region names that this CloudWatch Scrape Job is configured to scrape.
+         */
+        regions?: string[];
+        /**
+         * When true, the `regions` attribute will be the set of regions configured in the override. When false, the `regions` attribute will be the set of regions belonging to the AWS Account resource that is associated with this CloudWatch Scrape Job.
+         */
+        regionsSubsetOverrideUsed?: boolean;
+        /**
+         * The AWS ARN of the IAM role associated with the AWS Account resource that is being used by this CloudWatch Scrape Job.
+         */
+        roleArn?: string;
+        /**
+         * One or more configuration blocks to dictate what this CloudWatch Scrape Job should scrape. Each block must have a distinct `name` attribute. When accessing this as an attribute reference, it is a list of objects.
+         */
+        services?: inputs.cloud.GetProviderAwsCloudwatchScrapeJobsScrapeJobService[];
+        stackId?: string;
+    }
+    interface GetProviderAwsCloudwatchScrapeJobsScrapeJobArgs {
+        /**
+         * The ID assigned by the Grafana Cloud Provider API to an AWS Account resource that should be associated with this CloudWatch Scrape Job. This can be provided by the `resourceId` attribute of the `grafana.cloud.ProviderAwsAccount` resource.
+         */
+        awsAccountResourceId?: pulumi.Input<string>;
+        /**
+         * Zero or more configuration blocks to configure custom namespaces for the CloudWatch Scrape Job to scrape. Each block must have a distinct `name` attribute. When accessing this as an attribute reference, it is a list of objects.
+         */
+        customNamespaces?: pulumi.Input<pulumi.Input<inputs.cloud.GetProviderAwsCloudwatchScrapeJobsScrapeJobCustomNamespaceArgs>[]>;
+        /**
+         * When the CloudWatch Scrape Job is disabled, this will show the reason that it is in that state.
+         */
+        disabledReason?: pulumi.Input<string>;
+        /**
+         * Whether the CloudWatch Scrape Job is enabled or not.
+         */
+        enabled?: pulumi.Input<boolean>;
+        /**
+         * When enabled, AWS resource tags are exported as Prometheus labels to metrics formatted as `aws_<service_name>_info`.
+         */
+        exportTags?: pulumi.Input<boolean>;
+        id?: pulumi.Input<string>;
+        name?: pulumi.Input<string>;
+        /**
+         * The set of AWS region names that this CloudWatch Scrape Job is configured to scrape.
+         */
+        regions?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * When true, the `regions` attribute will be the set of regions configured in the override. When false, the `regions` attribute will be the set of regions belonging to the AWS Account resource that is associated with this CloudWatch Scrape Job.
+         */
+        regionsSubsetOverrideUsed?: pulumi.Input<boolean>;
+        /**
+         * The AWS ARN of the IAM role associated with the AWS Account resource that is being used by this CloudWatch Scrape Job.
+         */
+        roleArn?: pulumi.Input<string>;
+        /**
+         * One or more configuration blocks to dictate what this CloudWatch Scrape Job should scrape. Each block must have a distinct `name` attribute. When accessing this as an attribute reference, it is a list of objects.
+         */
+        services?: pulumi.Input<pulumi.Input<inputs.cloud.GetProviderAwsCloudwatchScrapeJobsScrapeJobServiceArgs>[]>;
+        stackId?: pulumi.Input<string>;
+    }
+    interface GetProviderAwsCloudwatchScrapeJobsScrapeJobCustomNamespace {
+        /**
+         * One or more configuration blocks to configure metrics and their statistics to scrape. Each block must represent a distinct metric name. When accessing this as an attribute reference, it is a list of objects.
+         */
+        metrics?: inputs.cloud.GetProviderAwsCloudwatchScrapeJobsScrapeJobCustomNamespaceMetric[];
+        /**
+         * The name of the custom namespace to scrape.
+         */
+        name?: string;
+        /**
+         * The interval in seconds to scrape the custom namespace.
+         */
+        scrapeIntervalSeconds?: number;
+    }
+    interface GetProviderAwsCloudwatchScrapeJobsScrapeJobCustomNamespaceArgs {
+        /**
+         * One or more configuration blocks to configure metrics and their statistics to scrape. Each block must represent a distinct metric name. When accessing this as an attribute reference, it is a list of objects.
+         */
+        metrics?: pulumi.Input<pulumi.Input<inputs.cloud.GetProviderAwsCloudwatchScrapeJobsScrapeJobCustomNamespaceMetricArgs>[]>;
+        /**
+         * The name of the custom namespace to scrape.
+         */
+        name?: pulumi.Input<string>;
+        /**
+         * The interval in seconds to scrape the custom namespace.
+         */
+        scrapeIntervalSeconds?: pulumi.Input<number>;
+    }
+    interface GetProviderAwsCloudwatchScrapeJobsScrapeJobCustomNamespaceMetric {
+        /**
+         * The name of the metric to scrape.
+         */
+        name?: string;
+        /**
+         * A set of statistics to scrape.
+         */
+        statistics?: string[];
+    }
+    interface GetProviderAwsCloudwatchScrapeJobsScrapeJobCustomNamespaceMetricArgs {
+        /**
+         * The name of the metric to scrape.
+         */
+        name?: pulumi.Input<string>;
+        /**
+         * A set of statistics to scrape.
+         */
+        statistics?: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface GetProviderAwsCloudwatchScrapeJobsScrapeJobService {
+        /**
+         * One or more configuration blocks to configure metrics and their statistics to scrape. Each block must represent a distinct metric name. When accessing this as an attribute reference, it is a list of objects.
+         */
+        metrics?: inputs.cloud.GetProviderAwsCloudwatchScrapeJobsScrapeJobServiceMetric[];
+        /**
+         * The name of the service to scrape. See https://grafana.com/docs/grafana-cloud/monitor-infrastructure/aws/cloudwatch-metrics/services/ for supported services, metrics, and their statistics.
+         */
+        name?: string;
+        /**
+         * One or more configuration blocks to configure tag filters applied to discovery of resource entities in the associated AWS account. When accessing this as an attribute reference, it is a list of objects.
+         */
+        resourceDiscoveryTagFilters?: inputs.cloud.GetProviderAwsCloudwatchScrapeJobsScrapeJobServiceResourceDiscoveryTagFilter[];
+        /**
+         * The interval in seconds to scrape the service. See https://grafana.com/docs/grafana-cloud/monitor-infrastructure/aws/cloudwatch-metrics/services/ for supported scrape intervals.
+         */
+        scrapeIntervalSeconds?: number;
+        /**
+         * A set of tags to add to all metrics exported by this scrape job, for use in PromQL queries.
+         */
+        tagsToAddToMetrics?: string[];
+    }
+    interface GetProviderAwsCloudwatchScrapeJobsScrapeJobServiceArgs {
+        /**
+         * One or more configuration blocks to configure metrics and their statistics to scrape. Each block must represent a distinct metric name. When accessing this as an attribute reference, it is a list of objects.
+         */
+        metrics?: pulumi.Input<pulumi.Input<inputs.cloud.GetProviderAwsCloudwatchScrapeJobsScrapeJobServiceMetricArgs>[]>;
+        /**
+         * The name of the service to scrape. See https://grafana.com/docs/grafana-cloud/monitor-infrastructure/aws/cloudwatch-metrics/services/ for supported services, metrics, and their statistics.
+         */
+        name?: pulumi.Input<string>;
+        /**
+         * One or more configuration blocks to configure tag filters applied to discovery of resource entities in the associated AWS account. When accessing this as an attribute reference, it is a list of objects.
+         */
+        resourceDiscoveryTagFilters?: pulumi.Input<pulumi.Input<inputs.cloud.GetProviderAwsCloudwatchScrapeJobsScrapeJobServiceResourceDiscoveryTagFilterArgs>[]>;
+        /**
+         * The interval in seconds to scrape the service. See https://grafana.com/docs/grafana-cloud/monitor-infrastructure/aws/cloudwatch-metrics/services/ for supported scrape intervals.
+         */
+        scrapeIntervalSeconds?: pulumi.Input<number>;
+        /**
+         * A set of tags to add to all metrics exported by this scrape job, for use in PromQL queries.
+         */
+        tagsToAddToMetrics?: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface GetProviderAwsCloudwatchScrapeJobsScrapeJobServiceMetric {
+        /**
+         * The name of the metric to scrape.
+         */
+        name?: string;
+        /**
+         * A set of statistics to scrape.
+         */
+        statistics?: string[];
+    }
+    interface GetProviderAwsCloudwatchScrapeJobsScrapeJobServiceMetricArgs {
+        /**
+         * The name of the metric to scrape.
+         */
+        name?: pulumi.Input<string>;
+        /**
+         * A set of statistics to scrape.
+         */
+        statistics?: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface GetProviderAwsCloudwatchScrapeJobsScrapeJobServiceResourceDiscoveryTagFilter {
+        /**
+         * The key of the tag filter.
+         */
+        key?: string;
+        /**
+         * The value of the tag filter.
+         */
+        value?: string;
+    }
+    interface GetProviderAwsCloudwatchScrapeJobsScrapeJobServiceResourceDiscoveryTagFilterArgs {
+        /**
+         * The key of the tag filter.
+         */
+        key?: pulumi.Input<string>;
+        /**
+         * The value of the tag filter.
+         */
+        value?: pulumi.Input<string>;
+    }
+    interface ProviderAwsCloudwatchScrapeJobCustomNamespace {
+        /**
+         * One or more configuration blocks to configure metrics and their statistics to scrape. Each block must represent a distinct metric name. When accessing this as an attribute reference, it is a list of objects.
+         */
+        metrics?: pulumi.Input<pulumi.Input<inputs.cloud.ProviderAwsCloudwatchScrapeJobCustomNamespaceMetric>[]>;
+        /**
+         * The name of the custom namespace to scrape.
+         */
+        name: pulumi.Input<string>;
+        /**
+         * The interval in seconds to scrape the custom namespace.
+         */
+        scrapeIntervalSeconds?: pulumi.Input<number>;
+    }
+    interface ProviderAwsCloudwatchScrapeJobCustomNamespaceMetric {
+        /**
+         * The name of the metric to scrape.
+         */
+        name: pulumi.Input<string>;
+        /**
+         * A set of statistics to scrape.
+         */
+        statistics: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface ProviderAwsCloudwatchScrapeJobService {
+        /**
+         * One or more configuration blocks to configure metrics and their statistics to scrape. Please note that AWS metric names must be supplied, and not their PromQL counterparts. Each block must represent a distinct metric name. When accessing this as an attribute reference, it is a list of objects.
+         */
+        metrics?: pulumi.Input<pulumi.Input<inputs.cloud.ProviderAwsCloudwatchScrapeJobServiceMetric>[]>;
+        /**
+         * The name of the service to scrape. See https://grafana.com/docs/grafana-cloud/monitor-infrastructure/aws/cloudwatch-metrics/services/ for supported services.
+         */
+        name: pulumi.Input<string>;
+        /**
+         * One or more configuration blocks to configure tag filters applied to discovery of resource entities in the associated AWS account. When accessing this as an attribute reference, it is a list of objects.
+         */
+        resourceDiscoveryTagFilters?: pulumi.Input<pulumi.Input<inputs.cloud.ProviderAwsCloudwatchScrapeJobServiceResourceDiscoveryTagFilter>[]>;
+        /**
+         * The interval in seconds to scrape the service. See https://grafana.com/docs/grafana-cloud/monitor-infrastructure/aws/cloudwatch-metrics/services/ for supported scrape intervals.
+         */
+        scrapeIntervalSeconds?: pulumi.Input<number>;
+        /**
+         * A set of tags to add to all metrics exported by this scrape job, for use in PromQL queries.
+         */
+        tagsToAddToMetrics?: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface ProviderAwsCloudwatchScrapeJobServiceMetric {
+        /**
+         * The name of the metric to scrape.
+         */
+        name: pulumi.Input<string>;
+        /**
+         * A set of statistics to scrape.
+         */
+        statistics: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface ProviderAwsCloudwatchScrapeJobServiceResourceDiscoveryTagFilter {
+        /**
+         * The key of the tag filter.
+         */
+        key: pulumi.Input<string>;
+        /**
+         * The value of the tag filter.
+         */
+        value: pulumi.Input<string>;
+    }
 }
 export declare namespace enterprise {
     interface DataSourcePermissionPermission {
@@ -4035,9 +4697,13 @@ export declare namespace onCall {
          */
         groupingKey?: pulumi.Input<string>;
         /**
-         * Templates for Microsoft Teams.
+         * Templates for Microsoft Teams. **NOTE**: Microsoft Teams templates are only available on Grafana Cloud.
          */
         microsoftTeams?: pulumi.Input<inputs.onCall.IntegrationTemplatesMicrosoftTeams>;
+        /**
+         * Templates for Mobile app push notifications.
+         */
+        mobileApp?: pulumi.Input<inputs.onCall.IntegrationTemplatesMobileApp>;
         /**
          * Templates for Phone Call.
          */
@@ -4091,6 +4757,16 @@ export declare namespace onCall {
          */
         title?: pulumi.Input<string>;
     }
+    interface IntegrationTemplatesMobileApp {
+        /**
+         * Template for Alert message.
+         */
+        message?: pulumi.Input<string>;
+        /**
+         * Template for Alert title.
+         */
+        title?: pulumi.Input<string>;
+    }
     interface IntegrationTemplatesPhoneCall {
         /**
          * Template for Alert title.
@@ -4244,6 +4920,144 @@ export declare namespace oss {
          */
         userId?: pulumi.Input<string>;
     }
+    interface SsoSettingsLdapSettings {
+        /**
+         * Whether to allow new Grafana user creation through LDAP login. If set to false, then only existing Grafana users can log in with LDAP.
+         */
+        allowSignUp?: pulumi.Input<boolean>;
+        /**
+         * The LDAP configuration.
+         */
+        config: pulumi.Input<inputs.oss.SsoSettingsLdapSettingsConfig>;
+        /**
+         * Define whether this configuration is enabled for LDAP. Defaults to `true`.
+         */
+        enabled?: pulumi.Input<boolean>;
+        /**
+         * Prevent synchronizing users’ organization roles from LDAP.
+         */
+        skipOrgRoleSync?: pulumi.Input<boolean>;
+    }
+    interface SsoSettingsLdapSettingsConfig {
+        /**
+         * The LDAP servers configuration.
+         */
+        servers: pulumi.Input<pulumi.Input<inputs.oss.SsoSettingsLdapSettingsConfigServer>[]>;
+    }
+    interface SsoSettingsLdapSettingsConfigServer {
+        /**
+         * The LDAP server attributes. The following attributes can be configured: email, member_of, name, surname, username.
+         */
+        attributes?: pulumi.Input<{
+            [key: string]: pulumi.Input<string>;
+        }>;
+        /**
+         * The search user bind DN.
+         */
+        bindDn?: pulumi.Input<string>;
+        /**
+         * The search user bind password.
+         */
+        bindPassword?: pulumi.Input<string>;
+        /**
+         * The path to the client certificate.
+         */
+        clientCert?: pulumi.Input<string>;
+        /**
+         * The Base64 encoded value of the client certificate.
+         */
+        clientCertValue?: pulumi.Input<string>;
+        /**
+         * The path to the client private key.
+         */
+        clientKey?: pulumi.Input<string>;
+        /**
+         * The Base64 encoded value of the client private key.
+         */
+        clientKeyValue?: pulumi.Input<string>;
+        /**
+         * For mapping an LDAP group to a Grafana organization and role.
+         */
+        groupMappings?: pulumi.Input<pulumi.Input<inputs.oss.SsoSettingsLdapSettingsConfigServerGroupMapping>[]>;
+        /**
+         * An array of the base DNs to search through for groups. Typically uses ou=groups.
+         */
+        groupSearchBaseDns?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * Group search filter, to retrieve the groups of which the user is a member (only set if memberOf attribute is not available).
+         */
+        groupSearchFilter?: pulumi.Input<string>;
+        /**
+         * The %s in the search filter will be replaced with the attribute defined in this field.
+         */
+        groupSearchFilterUserAttribute?: pulumi.Input<string>;
+        /**
+         * The LDAP server host.
+         */
+        host: pulumi.Input<string>;
+        /**
+         * Minimum TLS version allowed. Accepted values are: TLS1.2, TLS1.3.
+         */
+        minTlsVersion?: pulumi.Input<string>;
+        /**
+         * The LDAP server port.
+         */
+        port?: pulumi.Input<number>;
+        /**
+         * The path to the root CA certificate.
+         */
+        rootCaCert?: pulumi.Input<string>;
+        /**
+         * The Base64 encoded values of the root CA certificates.
+         */
+        rootCaCertValues?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * An array of base DNs to search through.
+         */
+        searchBaseDns: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * The user search filter, for example "(cn=%s)" or "(sAMAccountName=%s)" or "(uid=%s)".
+         */
+        searchFilter: pulumi.Input<string>;
+        /**
+         * If set to true, the SSL cert validation will be skipped.
+         */
+        sslSkipVerify?: pulumi.Input<boolean>;
+        /**
+         * If set to true, use LDAP with STARTTLS instead of LDAPS.
+         */
+        startTls?: pulumi.Input<boolean>;
+        /**
+         * The timeout in seconds for connecting to the LDAP host.
+         */
+        timeout?: pulumi.Input<number>;
+        /**
+         * Accepted TLS ciphers. For a complete list of supported ciphers, refer to: https://go.dev/src/crypto/tls/cipher_suites.go.
+         */
+        tlsCiphers?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * Set to true if LDAP server should use an encrypted TLS connection (either with STARTTLS or LDAPS).
+         */
+        useSsl?: pulumi.Input<boolean>;
+    }
+    interface SsoSettingsLdapSettingsConfigServerGroupMapping {
+        /**
+         * If set to true, it makes the user of groupDn Grafana server admin.
+         */
+        grafanaAdmin?: pulumi.Input<boolean>;
+        /**
+         * LDAP distinguished name (DN) of LDAP group. If you want to match all (or no LDAP groups) then you can use wildcard ("*").
+         */
+        groupDn: pulumi.Input<string>;
+        /**
+         * The Grafana organization database id.
+         */
+        orgId?: pulumi.Input<number>;
+        /**
+         * Assign users of groupDn the organization role Admin, Editor, or Viewer.
+         */
+        orgRole: pulumi.Input<string>;
+    }
     interface SsoSettingsOauth2Settings {
         /**
          * If enabled, it will automatically sync the Grafana server administrator role.
@@ -4339,6 +5153,14 @@ export declare namespace oss {
          * JMESPath expression to use for user name lookup from the user ID token. This name will be used as the user’s display name. Only applicable to Generic OAuth.
          */
         nameAttributePath?: pulumi.Input<string>;
+        /**
+         * JMESPath expression to use for the organization mapping lookup from the user ID token. The extracted list will be used for the organization mapping (to match "Organization" in the "orgMapping"). Only applicable to Generic OAuth and Okta.
+         */
+        orgAttributePath?: pulumi.Input<string>;
+        /**
+         * List of comma- or space-separated Organization:OrgIdOrOrgName:Role mappings. Organization can be * meaning “All users”. Role is optional and can have the following values: None, Viewer, Editor or Admin.
+         */
+        orgMapping?: pulumi.Input<string>;
         /**
          * JMESPath expression to use for Grafana role lookup.
          */
@@ -4449,10 +5271,26 @@ export declare namespace oss {
          * Path for the SP X.509 certificate.
          */
         certificatePath?: pulumi.Input<string>;
+        /**
+         * The client Id of your OAuth2 app.
+         */
+        clientId?: pulumi.Input<string>;
+        /**
+         * The client secret of your OAuth2 app.
+         */
+        clientSecret?: pulumi.Input<string>;
         /**
          * Define whether this configuration is enabled for SAML. Defaults to `true`.
          */
         enabled?: pulumi.Input<boolean>;
+        /**
+         * The entity ID is a globally unique identifier for the service provider. It is used to identify the service provider to the identity provider. Defaults to the URL of the Grafana instance if not set.
+         */
+        entityId?: pulumi.Input<string>;
+        /**
+         * If enabled, Grafana will fetch groups from Microsoft Graph API instead of using the groups claim from the ID token.
+         */
+        forceUseGraphApi?: pulumi.Input<boolean>;
         /**
          * Base64-encoded string for the IdP SAML metadata XML.
          */
@@ -4529,6 +5367,10 @@ export declare namespace oss {
          * Prevent synchronizing users’ organization roles from your IdP.
          */
         skipOrgRoleSync?: pulumi.Input<boolean>;
+        /**
+         * The token endpoint of your OAuth2 provider. Required for Azure AD providers.
+         */
+        tokenUrl?: pulumi.Input<string>;
     }
     interface TeamPreferences {
         /**
@@ -4582,7 +5424,13 @@ export declare namespace slo {
         minFailures?: pulumi.Input<number>;
     }
     interface SLOAlertingAnnotation {
+        /**
+         * Key for filtering and identification
+         */
         key: pulumi.Input<string>;
+        /**
+         * Templatable value
+         */
         value: pulumi.Input<string>;
     }
     interface SLOAlertingFastburn {
@@ -4596,15 +5444,33 @@ export declare namespace slo {
         labels?: pulumi.Input<pulumi.Input<inputs.slo.SLOAlertingFastburnLabel>[]>;
     }
     interface SLOAlertingFastburnAnnotation {
+        /**
+         * Key for filtering and identification
+         */
         key: pulumi.Input<string>;
+        /**
+         * Templatable value
+         */
         value: pulumi.Input<string>;
     }
     interface SLOAlertingFastburnLabel {
+        /**
+         * Key for filtering and identification
+         */
         key: pulumi.Input<string>;
+        /**
+         * Templatable value
+         */
         value: pulumi.Input<string>;
     }
     interface SLOAlertingLabel {
+        /**
+         * Key for filtering and identification
+         */
         key: pulumi.Input<string>;
+        /**
+         * Templatable value
+         */
         value: pulumi.Input<string>;
     }
     interface SLOAlertingSlowburn {
@@ -4618,21 +5484,39 @@ export declare namespace slo {
         labels?: pulumi.Input<pulumi.Input<inputs.slo.SLOAlertingSlowburnLabel>[]>;
     }
     interface SLOAlertingSlowburnAnnotation {
+        /**
+         * Key for filtering and identification
+         */
         key: pulumi.Input<string>;
+        /**
+         * Templatable value
+         */
         value: pulumi.Input<string>;
     }
     interface SLOAlertingSlowburnLabel {
+        /**
+         * Key for filtering and identification
+         */
         key: pulumi.Input<string>;
+        /**
+         * Templatable value
+         */
         value: pulumi.Input<string>;
     }
     interface SLODestinationDatasource {
         /**
-         * UID for the Mimir Datasource
+         * UID for the Datasource
          */
-        uid?: pulumi.Input<string>;
+        uid: pulumi.Input<string>;
     }
     interface SLOLabel {
+        /**
+         * Key for filtering and identification
+         */
         key: pulumi.Input<string>;
+        /**
+         * Templatable value
+         */
         value: pulumi.Input<string>;
     }
     interface SLOObjective {