@sst-provider/cloudflare5 5.0.0-alpha1 → 5.0.0-alpha1-1

package/bin/zeroTrustAccessPolicy.d.ts

@@ -18,56 +18,67 @@ export declare class ZeroTrustAccessPolicy extends pulumi.CustomResource {
      */
     static isInstance(obj: any): obj is ZeroTrustAccessPolicy;
     /**
-     * The account identifier to target for the resource. Conflicts with `zone_id`.
+     * The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
      */
     readonly accountId: pulumi.Output<string | undefined>;
     /**
-     * The ID of the application the policy is associated with. Required when using `precedence`. **Modifying this attribute
-     * will force creation of a new resource.**
+     * UUID
      */
-    readonly applicationId: pulumi.Output<string | undefined>;
-    readonly approvalGroups: pulumi.Output<outputs.ZeroTrustAccessPolicyApprovalGroup[] | undefined>;
-    readonly approvalRequired: pulumi.Output<boolean | undefined>;
+    readonly appId: pulumi.Output<string>;
     /**
-     * The rules that define how users may connect to the targets secured by your application.
+     * Administrators who can approve a temporary authentication request.
      */
-    readonly connectionRules: pulumi.Output<outputs.ZeroTrustAccessPolicyConnectionRules | undefined>;
+    readonly approvalGroups: pulumi.Output<outputs.ZeroTrustAccessPolicyApprovalGroup[]>;
     /**
-     * Defines the action Access will take if the policy matches the user. Available values: `allow`, `deny`, `non_identity`,
-     * `bypass`.
+     * Requires the user to request access from an administrator at the start of each session.
+     */
+    readonly approvalRequired: pulumi.Output<boolean>;
+    readonly createdAt: pulumi.Output<string>;
+    /**
+     * The action Access will take if a user matches this policy.
      */
     readonly decision: pulumi.Output<string>;
-    readonly excludes: pulumi.Output<outputs.ZeroTrustAccessPolicyExclude[] | undefined>;
+    /**
+     * Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules.
+     */
+    readonly excludes: pulumi.Output<outputs.ZeroTrustAccessPolicyExclude[]>;
+    /**
+     * Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
+     */
     readonly includes: pulumi.Output<outputs.ZeroTrustAccessPolicyInclude[]>;
     /**
-     * Require this application to be served in an isolated browser for users matching this policy.
+     * Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must
+     * be on for the account in order to use this feature.
      */
-    readonly isolationRequired: pulumi.Output<boolean | undefined>;
+    readonly isolationRequired: pulumi.Output<boolean>;
     /**
-     * Friendly name of the Access Policy.
+     * The name of the Access policy.
      */
     readonly name: pulumi.Output<string>;
     /**
-     * The unique precedence for policies on a single application. Required when using `application_id`.
+     * The order of execution for this policy. Must be unique for each policy within an app.
      */
     readonly precedence: pulumi.Output<number | undefined>;
     /**
-     * The prompt to display to the user for a justification for accessing the resource. Required when using
-     * `purpose_justification_required`.
+     * A custom message that will appear on the purpose justification screen.
+     */
+    readonly purposeJustificationPrompt: pulumi.Output<string>;
+    /**
+     * Require users to enter a justification when they log in to the application.
      */
-    readonly purposeJustificationPrompt: pulumi.Output<string | undefined>;
+    readonly purposeJustificationRequired: pulumi.Output<boolean>;
     /**
-     * Whether to prompt the user for a justification for accessing the resource.
+     * Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules.
      */
-    readonly purposeJustificationRequired: pulumi.Output<boolean | undefined>;
-    readonly requires: pulumi.Output<outputs.ZeroTrustAccessPolicyRequire[] | undefined>;
+    readonly requires: pulumi.Output<outputs.ZeroTrustAccessPolicyRequire[]>;
     /**
-     * How often a user will be forced to re-authorise. Must be in the format `48h` or `2h45m`.
+     * The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid
+     * time units are: ns, us (or µs), ms, s, m, h.
      */
-    readonly sessionDuration: pulumi.Output<string | undefined>;
-    readonly zeroTrustAccessPolicyId: pulumi.Output<string>;
+    readonly sessionDuration: pulumi.Output<string>;
+    readonly updatedAt: pulumi.Output<string>;
     /**
-     * The zone identifier to target for the resource. Conflicts with `account_id`.
+     * The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
      */
     readonly zoneId: pulumi.Output<string | undefined>;
     /**
@@ -84,56 +95,67 @@ export declare class ZeroTrustAccessPolicy extends pulumi.CustomResource {
  */
 export interface ZeroTrustAccessPolicyState {
     /**
-     * The account identifier to target for the resource. Conflicts with `zone_id`.
+     * The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
      */
     accountId?: pulumi.Input<string>;
     /**
-     * The ID of the application the policy is associated with. Required when using `precedence`. **Modifying this attribute
-     * will force creation of a new resource.**
+     * UUID
+     */
+    appId?: pulumi.Input<string>;
+    /**
+     * Administrators who can approve a temporary authentication request.
      */
-    applicationId?: pulumi.Input<string>;
     approvalGroups?: pulumi.Input<pulumi.Input<inputs.ZeroTrustAccessPolicyApprovalGroup>[]>;
-    approvalRequired?: pulumi.Input<boolean>;
     /**
-     * The rules that define how users may connect to the targets secured by your application.
+     * Requires the user to request access from an administrator at the start of each session.
      */
-    connectionRules?: pulumi.Input<inputs.ZeroTrustAccessPolicyConnectionRules>;
+    approvalRequired?: pulumi.Input<boolean>;
+    createdAt?: pulumi.Input<string>;
     /**
-     * Defines the action Access will take if the policy matches the user. Available values: `allow`, `deny`, `non_identity`,
-     * `bypass`.
+     * The action Access will take if a user matches this policy.
      */
     decision?: pulumi.Input<string>;
+    /**
+     * Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules.
+     */
     excludes?: pulumi.Input<pulumi.Input<inputs.ZeroTrustAccessPolicyExclude>[]>;
+    /**
+     * Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
+     */
     includes?: pulumi.Input<pulumi.Input<inputs.ZeroTrustAccessPolicyInclude>[]>;
     /**
-     * Require this application to be served in an isolated browser for users matching this policy.
+     * Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must
+     * be on for the account in order to use this feature.
      */
     isolationRequired?: pulumi.Input<boolean>;
     /**
-     * Friendly name of the Access Policy.
+     * The name of the Access policy.
      */
     name?: pulumi.Input<string>;
     /**
-     * The unique precedence for policies on a single application. Required when using `application_id`.
+     * The order of execution for this policy. Must be unique for each policy within an app.
      */
     precedence?: pulumi.Input<number>;
     /**
-     * The prompt to display to the user for a justification for accessing the resource. Required when using
-     * `purpose_justification_required`.
+     * A custom message that will appear on the purpose justification screen.
      */
     purposeJustificationPrompt?: pulumi.Input<string>;
     /**
-     * Whether to prompt the user for a justification for accessing the resource.
+     * Require users to enter a justification when they log in to the application.
      */
     purposeJustificationRequired?: pulumi.Input<boolean>;
+    /**
+     * Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules.
+     */
     requires?: pulumi.Input<pulumi.Input<inputs.ZeroTrustAccessPolicyRequire>[]>;
     /**
-     * How often a user will be forced to re-authorise. Must be in the format `48h` or `2h45m`.
+     * The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid
+     * time units are: ns, us (or µs), ms, s, m, h.
      */
     sessionDuration?: pulumi.Input<string>;
-    zeroTrustAccessPolicyId?: pulumi.Input<string>;
+    updatedAt?: pulumi.Input<string>;
     /**
-     * The zone identifier to target for the resource. Conflicts with `account_id`.
+     * The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
      */
     zoneId?: pulumi.Input<string>;
 }
@@ -142,56 +164,65 @@ export interface ZeroTrustAccessPolicyState {
  */
 export interface ZeroTrustAccessPolicyArgs {
     /**
-     * The account identifier to target for the resource. Conflicts with `zone_id`.
+     * The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
      */
     accountId?: pulumi.Input<string>;
     /**
-     * The ID of the application the policy is associated with. Required when using `precedence`. **Modifying this attribute
-     * will force creation of a new resource.**
+     * UUID
+     */
+    appId: pulumi.Input<string>;
+    /**
+     * Administrators who can approve a temporary authentication request.
      */
-    applicationId?: pulumi.Input<string>;
     approvalGroups?: pulumi.Input<pulumi.Input<inputs.ZeroTrustAccessPolicyApprovalGroup>[]>;
-    approvalRequired?: pulumi.Input<boolean>;
     /**
-     * The rules that define how users may connect to the targets secured by your application.
+     * Requires the user to request access from an administrator at the start of each session.
      */
-    connectionRules?: pulumi.Input<inputs.ZeroTrustAccessPolicyConnectionRules>;
+    approvalRequired?: pulumi.Input<boolean>;
     /**
-     * Defines the action Access will take if the policy matches the user. Available values: `allow`, `deny`, `non_identity`,
-     * `bypass`.
+     * The action Access will take if a user matches this policy.
      */
     decision: pulumi.Input<string>;
+    /**
+     * Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules.
+     */
     excludes?: pulumi.Input<pulumi.Input<inputs.ZeroTrustAccessPolicyExclude>[]>;
+    /**
+     * Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
+     */
     includes: pulumi.Input<pulumi.Input<inputs.ZeroTrustAccessPolicyInclude>[]>;
     /**
-     * Require this application to be served in an isolated browser for users matching this policy.
+     * Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must
+     * be on for the account in order to use this feature.
      */
     isolationRequired?: pulumi.Input<boolean>;
     /**
-     * Friendly name of the Access Policy.
+     * The name of the Access policy.
      */
     name?: pulumi.Input<string>;
     /**
-     * The unique precedence for policies on a single application. Required when using `application_id`.
+     * The order of execution for this policy. Must be unique for each policy within an app.
      */
     precedence?: pulumi.Input<number>;
     /**
-     * The prompt to display to the user for a justification for accessing the resource. Required when using
-     * `purpose_justification_required`.
+     * A custom message that will appear on the purpose justification screen.
      */
     purposeJustificationPrompt?: pulumi.Input<string>;
     /**
-     * Whether to prompt the user for a justification for accessing the resource.
+     * Require users to enter a justification when they log in to the application.
      */
     purposeJustificationRequired?: pulumi.Input<boolean>;
+    /**
+     * Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules.
+     */
     requires?: pulumi.Input<pulumi.Input<inputs.ZeroTrustAccessPolicyRequire>[]>;
     /**
-     * How often a user will be forced to re-authorise. Must be in the format `48h` or `2h45m`.
+     * The amount of time that tokens issued for the application will be valid. Must be in the format `300ms` or `2h45m`. Valid
+     * time units are: ns, us (or µs), ms, s, m, h.
      */
     sessionDuration?: pulumi.Input<string>;
-    zeroTrustAccessPolicyId?: pulumi.Input<string>;
     /**
-     * The zone identifier to target for the resource. Conflicts with `account_id`.
+     * The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
      */
     zoneId?: pulumi.Input<string>;
 }

package/bin/zeroTrustAccessPolicy.js

@@ -34,10 +34,10 @@ class ZeroTrustAccessPolicy extends pulumi.CustomResource {
         if (opts.id) {
             const state = argsOrState;
             resourceInputs["accountId"] = state ? state.accountId : undefined;
-            resourceInputs["applicationId"] = state ? state.applicationId : undefined;
+            resourceInputs["appId"] = state ? state.appId : undefined;
             resourceInputs["approvalGroups"] = state ? state.approvalGroups : undefined;
             resourceInputs["approvalRequired"] = state ? state.approvalRequired : undefined;
-            resourceInputs["connectionRules"] = state ? state.connectionRules : undefined;
+            resourceInputs["createdAt"] = state ? state.createdAt : undefined;
             resourceInputs["decision"] = state ? state.decision : undefined;
             resourceInputs["excludes"] = state ? state.excludes : undefined;
             resourceInputs["includes"] = state ? state.includes : undefined;
@@ -48,11 +48,14 @@ class ZeroTrustAccessPolicy extends pulumi.CustomResource {
             resourceInputs["purposeJustificationRequired"] = state ? state.purposeJustificationRequired : undefined;
             resourceInputs["requires"] = state ? state.requires : undefined;
             resourceInputs["sessionDuration"] = state ? state.sessionDuration : undefined;
-            resourceInputs["zeroTrustAccessPolicyId"] = state ? state.zeroTrustAccessPolicyId : undefined;
+            resourceInputs["updatedAt"] = state ? state.updatedAt : undefined;
             resourceInputs["zoneId"] = state ? state.zoneId : undefined;
         }
         else {
             const args = argsOrState;
+            if ((!args || args.appId === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'appId'");
+            }
             if ((!args || args.decision === undefined) && !opts.urn) {
                 throw new Error("Missing required property 'decision'");
             }
@@ -60,10 +63,9 @@ class ZeroTrustAccessPolicy extends pulumi.CustomResource {
                 throw new Error("Missing required property 'includes'");
             }
             resourceInputs["accountId"] = args ? args.accountId : undefined;
-            resourceInputs["applicationId"] = args ? args.applicationId : undefined;
+            resourceInputs["appId"] = args ? args.appId : undefined;
             resourceInputs["approvalGroups"] = args ? args.approvalGroups : undefined;
             resourceInputs["approvalRequired"] = args ? args.approvalRequired : undefined;
-            resourceInputs["connectionRules"] = args ? args.connectionRules : undefined;
             resourceInputs["decision"] = args ? args.decision : undefined;
             resourceInputs["excludes"] = args ? args.excludes : undefined;
             resourceInputs["includes"] = args ? args.includes : undefined;
@@ -74,8 +76,9 @@ class ZeroTrustAccessPolicy extends pulumi.CustomResource {
             resourceInputs["purposeJustificationRequired"] = args ? args.purposeJustificationRequired : undefined;
             resourceInputs["requires"] = args ? args.requires : undefined;
             resourceInputs["sessionDuration"] = args ? args.sessionDuration : undefined;
-            resourceInputs["zeroTrustAccessPolicyId"] = args ? args.zeroTrustAccessPolicyId : undefined;
             resourceInputs["zoneId"] = args ? args.zoneId : undefined;
+            resourceInputs["createdAt"] = undefined /*out*/;
+            resourceInputs["updatedAt"] = undefined /*out*/;
         }
         opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
         super(ZeroTrustAccessPolicy.__pulumiType, name, resourceInputs, opts, false /*dependency*/, utilities.getPackage());

package/bin/zeroTrustAccessPolicy.js.map

@@ -1 +1 @@
-{"version":3,"file":"zeroTrustAccessPolicy.js","sourceRoot":"","sources":["../zeroTrustAccessPolicy.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC,MAAa,qBAAsB,SAAQ,MAAM,CAAC,cAAc;IAC5D;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAkC,EAAE,IAAmC;QAChI,OAAO,IAAI,qBAAqB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC5E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,qBAAqB,CAAC,YAAY,CAAC;IACtE,CAAC;IAgED,YAAY,IAAY,EAAE,WAAoE,EAAE,IAAmC;QAC/H,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAqD,CAAC;YACpE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,4BAA4B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,SAAS,CAAC;YACpG,cAAc,CAAC,8BAA8B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC,SAAS,CAAC;YACxG,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;aAAM;YACH,MAAM,IAAI,GAAG,WAAoD,CAAC;YAClE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,4BAA4B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,cAAc,CAAC,8BAA8B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,qBAAqB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC;IACxH,CAAC;;AA5IL,sDA6IC;AA/HG,gBAAgB;AACO,kCAAY,GAAG,8DAA8D,CAAC"}
+{"version":3,"file":"zeroTrustAccessPolicy.js","sourceRoot":"","sources":["../zeroTrustAccessPolicy.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC,MAAa,qBAAsB,SAAQ,MAAM,CAAC,cAAc;IAC5D;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAkC,EAAE,IAAmC;QAChI,OAAO,IAAI,qBAAqB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC5E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,qBAAqB,CAAC,YAAY,CAAC;IACtE,CAAC;IA2ED,YAAY,IAAY,EAAE,WAAoE,EAAE,IAAmC;QAC/H,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAqD,CAAC;YACpE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,4BAA4B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,SAAS,CAAC;YACpG,cAAc,CAAC,8BAA8B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC,SAAS,CAAC;YACxG,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;aAAM;YACH,MAAM,IAAI,GAAG,WAAoD,CAAC;YAClE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,4BAA4B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,cAAc,CAAC,8BAA8B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACnD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,qBAAqB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC;IACxH,CAAC;;AA1JL,sDA2JC;AA7IG,gBAAgB;AACO,kCAAY,GAAG,8DAA8D,CAAC"}

package/bin/zeroTrustAccessServiceToken.d.ts

@@ -16,33 +16,32 @@ export declare class ZeroTrustAccessServiceToken extends pulumi.CustomResource {
      */
     static isInstance(obj: any): obj is ZeroTrustAccessServiceToken;
     /**
-     * The account identifier to target for the resource. Conflicts with `zone_id`.
+     * The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
      */
     readonly accountId: pulumi.Output<string | undefined>;
     /**
-     * Client ID associated with the Service Token. **Modifying this attribute will force creation of a new resource.**
+     * The Client ID for the service token. Access will check for this value in the `CF-Access-Client-ID` request header.
      */
     readonly clientId: pulumi.Output<string>;
     /**
-     * A secret for interacting with Access protocols. **Modifying this attribute will force creation of a new resource.**
+     * The Client Secret for the service token. Access will check for this value in the `CF-Access-Client-Secret` request
+     * header.
      */
     readonly clientSecret: pulumi.Output<string>;
+    readonly createdAt: pulumi.Output<string>;
     /**
-     * Length of time the service token is valid for. Available values: `8760h`, `17520h`, `43800h`, `87600h`, `forever`.
+     * The duration for how long the service token will be valid. Must be in the format `300ms` or `2h45m`. Valid time units
+     * are: ns, us (or µs), ms, s, m, h. The default is 1 year in hours (8760h).
      */
     readonly duration: pulumi.Output<string>;
-    /**
-     * Date when the token expires.
-     */
     readonly expiresAt: pulumi.Output<string>;
-    readonly minDaysForRenewal: pulumi.Output<number | undefined>;
     /**
-     * Friendly name of the token's intent.
+     * The name of the service token.
      */
     readonly name: pulumi.Output<string>;
-    readonly zeroTrustAccessServiceTokenId: pulumi.Output<string>;
+    readonly updatedAt: pulumi.Output<string>;
     /**
-     * The zone identifier to target for the resource. Conflicts with `account_id`.
+     * The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
      */
     readonly zoneId: pulumi.Output<string | undefined>;
     /**
@@ -59,33 +58,32 @@ export declare class ZeroTrustAccessServiceToken extends pulumi.CustomResource {
  */
 export interface ZeroTrustAccessServiceTokenState {
     /**
-     * The account identifier to target for the resource. Conflicts with `zone_id`.
+     * The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
      */
     accountId?: pulumi.Input<string>;
     /**
-     * Client ID associated with the Service Token. **Modifying this attribute will force creation of a new resource.**
+     * The Client ID for the service token. Access will check for this value in the `CF-Access-Client-ID` request header.
      */
     clientId?: pulumi.Input<string>;
     /**
-     * A secret for interacting with Access protocols. **Modifying this attribute will force creation of a new resource.**
+     * The Client Secret for the service token. Access will check for this value in the `CF-Access-Client-Secret` request
+     * header.
      */
     clientSecret?: pulumi.Input<string>;
+    createdAt?: pulumi.Input<string>;
     /**
-     * Length of time the service token is valid for. Available values: `8760h`, `17520h`, `43800h`, `87600h`, `forever`.
+     * The duration for how long the service token will be valid. Must be in the format `300ms` or `2h45m`. Valid time units
+     * are: ns, us (or µs), ms, s, m, h. The default is 1 year in hours (8760h).
      */
     duration?: pulumi.Input<string>;
-    /**
-     * Date when the token expires.
-     */
     expiresAt?: pulumi.Input<string>;
-    minDaysForRenewal?: pulumi.Input<number>;
     /**
-     * Friendly name of the token's intent.
+     * The name of the service token.
      */
     name?: pulumi.Input<string>;
-    zeroTrustAccessServiceTokenId?: pulumi.Input<string>;
+    updatedAt?: pulumi.Input<string>;
     /**
-     * The zone identifier to target for the resource. Conflicts with `account_id`.
+     * The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
      */
     zoneId?: pulumi.Input<string>;
 }
@@ -94,21 +92,20 @@ export interface ZeroTrustAccessServiceTokenState {
  */
 export interface ZeroTrustAccessServiceTokenArgs {
     /**
-     * The account identifier to target for the resource. Conflicts with `zone_id`.
+     * The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
      */
     accountId?: pulumi.Input<string>;
     /**
-     * Length of time the service token is valid for. Available values: `8760h`, `17520h`, `43800h`, `87600h`, `forever`.
+     * The duration for how long the service token will be valid. Must be in the format `300ms` or `2h45m`. Valid time units
+     * are: ns, us (or µs), ms, s, m, h. The default is 1 year in hours (8760h).
      */
     duration?: pulumi.Input<string>;
-    minDaysForRenewal?: pulumi.Input<number>;
     /**
-     * Friendly name of the token's intent.
+     * The name of the service token.
      */
     name?: pulumi.Input<string>;
-    zeroTrustAccessServiceTokenId?: pulumi.Input<string>;
     /**
-     * The zone identifier to target for the resource. Conflicts with `account_id`.
+     * The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
      */
     zoneId?: pulumi.Input<string>;
 }

package/bin/zeroTrustAccessServiceToken.js

@@ -36,28 +36,26 @@ class ZeroTrustAccessServiceToken extends pulumi.CustomResource {
             resourceInputs["accountId"] = state ? state.accountId : undefined;
             resourceInputs["clientId"] = state ? state.clientId : undefined;
             resourceInputs["clientSecret"] = state ? state.clientSecret : undefined;
+            resourceInputs["createdAt"] = state ? state.createdAt : undefined;
             resourceInputs["duration"] = state ? state.duration : undefined;
             resourceInputs["expiresAt"] = state ? state.expiresAt : undefined;
-            resourceInputs["minDaysForRenewal"] = state ? state.minDaysForRenewal : undefined;
             resourceInputs["name"] = state ? state.name : undefined;
-            resourceInputs["zeroTrustAccessServiceTokenId"] = state ? state.zeroTrustAccessServiceTokenId : undefined;
+            resourceInputs["updatedAt"] = state ? state.updatedAt : undefined;
             resourceInputs["zoneId"] = state ? state.zoneId : undefined;
         }
         else {
             const args = argsOrState;
             resourceInputs["accountId"] = args ? args.accountId : undefined;
             resourceInputs["duration"] = args ? args.duration : undefined;
-            resourceInputs["minDaysForRenewal"] = args ? args.minDaysForRenewal : undefined;
             resourceInputs["name"] = args ? args.name : undefined;
-            resourceInputs["zeroTrustAccessServiceTokenId"] = args ? args.zeroTrustAccessServiceTokenId : undefined;
             resourceInputs["zoneId"] = args ? args.zoneId : undefined;
             resourceInputs["clientId"] = undefined /*out*/;
             resourceInputs["clientSecret"] = undefined /*out*/;
+            resourceInputs["createdAt"] = undefined /*out*/;
             resourceInputs["expiresAt"] = undefined /*out*/;
+            resourceInputs["updatedAt"] = undefined /*out*/;
         }
         opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
-        const secretOpts = { additionalSecretOutputs: ["clientSecret"] };
-        opts = pulumi.mergeOptions(opts, secretOpts);
         super(ZeroTrustAccessServiceToken.__pulumiType, name, resourceInputs, opts, false /*dependency*/, utilities.getPackage());
     }
 }

package/bin/zeroTrustAccessServiceToken.js.map

@@ -1 +1 @@
-{"version":3,"file":"zeroTrustAccessServiceToken.js","sourceRoot":"","sources":["../zeroTrustAccessServiceToken.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC,MAAa,2BAA4B,SAAQ,MAAM,CAAC,cAAc;IAClE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwC,EAAE,IAAmC;QACtI,OAAO,IAAI,2BAA2B,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAClF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,2BAA2B,CAAC,YAAY,CAAC;IAC5E,CAAC;IAyCD,YAAY,IAAY,EAAE,WAAgF,EAAE,IAAmC;QAC3I,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2D,CAAC;YAC1E,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,+BAA+B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1G,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;aAAM;YACH,MAAM,IAAI,GAAG,WAA0D,CAAC;YACxE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,+BAA+B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,CAAC,SAAS,CAAC;YACxG,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACnD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACnD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC;QACjE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,2BAA2B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC;IAC9H,CAAC;;AAjGL,kEAkGC;AApFG,gBAAgB;AACO,wCAAY,GAAG,0EAA0E,CAAC"}
+{"version":3,"file":"zeroTrustAccessServiceToken.js","sourceRoot":"","sources":["../zeroTrustAccessServiceToken.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC,MAAa,2BAA4B,SAAQ,MAAM,CAAC,cAAc;IAClE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwC,EAAE,IAAmC;QACtI,OAAO,IAAI,2BAA2B,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAClF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,2BAA2B,CAAC,YAAY,CAAC;IAC5E,CAAC;IAwCD,YAAY,IAAY,EAAE,WAAgF,EAAE,IAAmC;QAC3I,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2D,CAAC;YAC1E,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;aAAM;YACH,MAAM,IAAI,GAAG,WAA0D,CAAC;YACxE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACnD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACnD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,2BAA2B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC;IAC9H,CAAC;;AA9FL,kEA+FC;AAjFG,gBAAgB;AACO,wCAAY,GAAG,0EAA0E,CAAC"}

package/bin/zeroTrustAccessShortLivedCertificate.d.ts

@@ -16,26 +16,17 @@ export declare class ZeroTrustAccessShortLivedCertificate extends pulumi.CustomR
      */
     static isInstance(obj: any): obj is ZeroTrustAccessShortLivedCertificate;
     /**
-     * The account identifier to target for the resource. Conflicts with `zone_id`.
+     * The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
      */
-    readonly accountId: pulumi.Output<string>;
+    readonly accountId: pulumi.Output<string | undefined>;
     /**
-     * The Access Application ID to associate with the CA certificate.
+     * UUID
      */
-    readonly applicationId: pulumi.Output<string>;
+    readonly appId: pulumi.Output<string>;
     /**
-     * Application Audience (AUD) Tag of the CA certificate.
+     * The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
      */
-    readonly aud: pulumi.Output<string>;
-    /**
-     * Cryptographic public key of the generated CA certificate.
-     */
-    readonly publicKey: pulumi.Output<string>;
-    readonly zeroTrustAccessShortLivedCertificateId: pulumi.Output<string>;
-    /**
-     * The zone identifier to target for the resource. Conflicts with `account_id`.
-     */
-    readonly zoneId: pulumi.Output<string>;
+    readonly zoneId: pulumi.Output<string | undefined>;
     /**
      * Create a ZeroTrustAccessShortLivedCertificate resource with the given unique name, arguments, and options.
      *
@@ -50,24 +41,15 @@ export declare class ZeroTrustAccessShortLivedCertificate extends pulumi.CustomR
  */
 export interface ZeroTrustAccessShortLivedCertificateState {
     /**
-     * The account identifier to target for the resource. Conflicts with `zone_id`.
+     * The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
      */
     accountId?: pulumi.Input<string>;
     /**
-     * The Access Application ID to associate with the CA certificate.
-     */
-    applicationId?: pulumi.Input<string>;
-    /**
-     * Application Audience (AUD) Tag of the CA certificate.
-     */
-    aud?: pulumi.Input<string>;
-    /**
-     * Cryptographic public key of the generated CA certificate.
+     * UUID
      */
-    publicKey?: pulumi.Input<string>;
-    zeroTrustAccessShortLivedCertificateId?: pulumi.Input<string>;
+    appId?: pulumi.Input<string>;
     /**
-     * The zone identifier to target for the resource. Conflicts with `account_id`.
+     * The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
      */
     zoneId?: pulumi.Input<string>;
 }
@@ -76,16 +58,15 @@ export interface ZeroTrustAccessShortLivedCertificateState {
  */
 export interface ZeroTrustAccessShortLivedCertificateArgs {
     /**
-     * The account identifier to target for the resource. Conflicts with `zone_id`.
+     * The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
      */
     accountId?: pulumi.Input<string>;
     /**
-     * The Access Application ID to associate with the CA certificate.
+     * UUID
      */
-    applicationId: pulumi.Input<string>;
-    zeroTrustAccessShortLivedCertificateId?: pulumi.Input<string>;
+    appId: pulumi.Input<string>;
     /**
-     * The zone identifier to target for the resource. Conflicts with `account_id`.
+     * The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
      */
     zoneId?: pulumi.Input<string>;
 }

package/bin/zeroTrustAccessShortLivedCertificate.js

@@ -34,23 +34,17 @@ class ZeroTrustAccessShortLivedCertificate extends pulumi.CustomResource {
         if (opts.id) {
             const state = argsOrState;
             resourceInputs["accountId"] = state ? state.accountId : undefined;
-            resourceInputs["applicationId"] = state ? state.applicationId : undefined;
-            resourceInputs["aud"] = state ? state.aud : undefined;
-            resourceInputs["publicKey"] = state ? state.publicKey : undefined;
-            resourceInputs["zeroTrustAccessShortLivedCertificateId"] = state ? state.zeroTrustAccessShortLivedCertificateId : undefined;
+            resourceInputs["appId"] = state ? state.appId : undefined;
             resourceInputs["zoneId"] = state ? state.zoneId : undefined;
         }
         else {
             const args = argsOrState;
-            if ((!args || args.applicationId === undefined) && !opts.urn) {
-                throw new Error("Missing required property 'applicationId'");
+            if ((!args || args.appId === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'appId'");
             }
             resourceInputs["accountId"] = args ? args.accountId : undefined;
-            resourceInputs["applicationId"] = args ? args.applicationId : undefined;
-            resourceInputs["zeroTrustAccessShortLivedCertificateId"] = args ? args.zeroTrustAccessShortLivedCertificateId : undefined;
+            resourceInputs["appId"] = args ? args.appId : undefined;
             resourceInputs["zoneId"] = args ? args.zoneId : undefined;
-            resourceInputs["aud"] = undefined /*out*/;
-            resourceInputs["publicKey"] = undefined /*out*/;
         }
         opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
         super(ZeroTrustAccessShortLivedCertificate.__pulumiType, name, resourceInputs, opts, false /*dependency*/, utilities.getPackage());