pulumi-aws 7.9.1__py3-none-any.whl → 7.10.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_aws/__init__.py +40 -0
- pulumi_aws/_inputs.py +40 -0
- pulumi_aws/appstream/_inputs.py +54 -0
- pulumi_aws/appstream/directory_config.py +55 -0
- pulumi_aws/appstream/outputs.py +49 -0
- pulumi_aws/bedrock/__init__.py +5 -0
- pulumi_aws/bedrock/_inputs.py +2097 -0
- pulumi_aws/bedrock/agent_agent.py +9 -7
- pulumi_aws/bedrock/agentcore_api_key_credential_provider.py +122 -1
- pulumi_aws/bedrock/agentcore_memory.py +614 -0
- pulumi_aws/bedrock/agentcore_memory_strategy.py +800 -0
- pulumi_aws/bedrock/agentcore_oauth2_credential_provider.py +477 -0
- pulumi_aws/bedrock/agentcore_token_vault_cmk.py +291 -0
- pulumi_aws/bedrock/agentcore_workload_identity.py +359 -0
- pulumi_aws/bedrock/outputs.py +1739 -0
- pulumi_aws/cloudtrail/trail.py +7 -7
- pulumi_aws/config/outputs.py +24 -0
- pulumi_aws/docdb/cluster.py +109 -1
- pulumi_aws/ec2/route.py +12 -0
- pulumi_aws/ecs/task_definition.py +7 -7
- pulumi_aws/fis/_inputs.py +3 -3
- pulumi_aws/fis/outputs.py +2 -2
- pulumi_aws/kms/key_policy.py +7 -7
- pulumi_aws/odb/network.py +47 -0
- pulumi_aws/organizations/_inputs.py +170 -42
- pulumi_aws/organizations/account.py +57 -8
- pulumi_aws/organizations/get_organization.py +7 -7
- pulumi_aws/organizations/organization.py +27 -27
- pulumi_aws/organizations/outputs.py +310 -62
- pulumi_aws/pulumi-plugin.json +1 -1
- pulumi_aws/rds/cluster.py +102 -1
- pulumi_aws/rds/instance.py +102 -1
- pulumi_aws/redshift/cluster.py +130 -1
- pulumi_aws/redshiftserverless/namespace.py +109 -1
- pulumi_aws/secretsmanager/secret_version.py +122 -1
- pulumi_aws/ssm/parameter.py +145 -2
- pulumi_aws/transfer/host_key.py +75 -1
- pulumi_aws/workspaces/get_workspace.py +19 -0
- {pulumi_aws-7.9.1.dist-info → pulumi_aws-7.10.0.dist-info}/METADATA +1 -1
- {pulumi_aws-7.9.1.dist-info → pulumi_aws-7.10.0.dist-info}/RECORD +42 -37
- {pulumi_aws-7.9.1.dist-info → pulumi_aws-7.10.0.dist-info}/WHEEL +0 -0
- {pulumi_aws-7.9.1.dist-info → pulumi_aws-7.10.0.dist-info}/top_level.txt +0 -0
|
@@ -169,23 +169,27 @@ class _AccountState:
|
|
|
169
169
|
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
170
170
|
parent_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
171
171
|
role_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
172
|
+
state: Optional[pulumi.Input[_builtins.str]] = None,
|
|
172
173
|
status: Optional[pulumi.Input[_builtins.str]] = None,
|
|
173
174
|
tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
|
|
174
175
|
tags_all: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None):
|
|
175
176
|
"""
|
|
176
177
|
Input properties used for looking up and filtering Account resources.
|
|
177
|
-
:param pulumi.Input[_builtins.str] arn:
|
|
178
|
+
:param pulumi.Input[_builtins.str] arn: ARN for this account.
|
|
178
179
|
:param pulumi.Input[_builtins.bool] close_on_deletion: If true, a deletion event will close the account. Otherwise, it will only remove from the organization. This is not supported for GovCloud accounts.
|
|
179
180
|
:param pulumi.Input[_builtins.bool] create_govcloud: Whether to also create a GovCloud account. The GovCloud account is tied to the main (commercial) account this resource creates. If `true`, the GovCloud account ID is available in the `govcloud_id` attribute. The only way to manage the GovCloud account with the provider is to subsequently import the account using this resource.
|
|
180
181
|
:param pulumi.Input[_builtins.str] email: Email address of the owner to assign to the new member account. This email address must not already be associated with another AWS account.
|
|
181
182
|
:param pulumi.Input[_builtins.str] govcloud_id: ID for a GovCloud account created with the account.
|
|
182
183
|
:param pulumi.Input[_builtins.str] iam_user_access_to_billing: If set to `ALLOW`, the new account enables IAM users and roles to access account billing information if they have the required permissions. If set to `DENY`, then only the root user (and no roles) of the new account can access account billing information. If this is unset, the AWS API will default this to `ALLOW`. If the resource is created and this option is changed, it will try to recreate the account.
|
|
184
|
+
:param pulumi.Input[_builtins.str] joined_method: Method by which the account joined the organization.
|
|
185
|
+
:param pulumi.Input[_builtins.str] joined_timestamp: Date the account became a part of the organization.
|
|
183
186
|
:param pulumi.Input[_builtins.str] name: Friendly name for the member account.
|
|
184
187
|
|
|
185
188
|
The following arguments are optional:
|
|
186
189
|
:param pulumi.Input[_builtins.str] parent_id: Parent Organizational Unit ID or Root ID for the account. Defaults to the Organization default Root ID. A configuration must be present for this argument to perform drift detection.
|
|
187
190
|
:param pulumi.Input[_builtins.str] role_name: The name of an IAM role that Organizations automatically preconfigures in the new member account. This role trusts the root account, allowing users in the root account to assume the role, as permitted by the root account administrator. The role has administrator permissions in the new member account. The Organizations API provides no method for reading this information after account creation, so the provider cannot perform drift detection on its value and will always show a difference for a configured value after import unless `ignoreChanges` is used.
|
|
188
|
-
:param pulumi.Input[_builtins.str]
|
|
191
|
+
:param pulumi.Input[_builtins.str] state: State of the account in the organization.
|
|
192
|
+
:param pulumi.Input[_builtins.str] status: (**Deprecated** use `state` instead) Status of the account in the organization.
|
|
189
193
|
:param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] tags: Key-value map of resource tags. If configured with a provider `default_tags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
|
|
190
194
|
:param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] tags_all: A map of tags assigned to the resource, including those inherited from the provider `default_tags` configuration block.
|
|
191
195
|
"""
|
|
@@ -211,6 +215,11 @@ class _AccountState:
|
|
|
211
215
|
pulumi.set(__self__, "parent_id", parent_id)
|
|
212
216
|
if role_name is not None:
|
|
213
217
|
pulumi.set(__self__, "role_name", role_name)
|
|
218
|
+
if state is not None:
|
|
219
|
+
pulumi.set(__self__, "state", state)
|
|
220
|
+
if status is not None:
|
|
221
|
+
warnings.warn("""status is deprecated. Use state instead.""", DeprecationWarning)
|
|
222
|
+
pulumi.log.warn("""status is deprecated: status is deprecated. Use state instead.""")
|
|
214
223
|
if status is not None:
|
|
215
224
|
pulumi.set(__self__, "status", status)
|
|
216
225
|
if tags is not None:
|
|
@@ -222,7 +231,7 @@ class _AccountState:
|
|
|
222
231
|
@pulumi.getter
|
|
223
232
|
def arn(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
224
233
|
"""
|
|
225
|
-
|
|
234
|
+
ARN for this account.
|
|
226
235
|
"""
|
|
227
236
|
return pulumi.get(self, "arn")
|
|
228
237
|
|
|
@@ -293,6 +302,9 @@ class _AccountState:
|
|
|
293
302
|
@_builtins.property
|
|
294
303
|
@pulumi.getter(name="joinedMethod")
|
|
295
304
|
def joined_method(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
305
|
+
"""
|
|
306
|
+
Method by which the account joined the organization.
|
|
307
|
+
"""
|
|
296
308
|
return pulumi.get(self, "joined_method")
|
|
297
309
|
|
|
298
310
|
@joined_method.setter
|
|
@@ -302,6 +314,9 @@ class _AccountState:
|
|
|
302
314
|
@_builtins.property
|
|
303
315
|
@pulumi.getter(name="joinedTimestamp")
|
|
304
316
|
def joined_timestamp(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
317
|
+
"""
|
|
318
|
+
Date the account became a part of the organization.
|
|
319
|
+
"""
|
|
305
320
|
return pulumi.get(self, "joined_timestamp")
|
|
306
321
|
|
|
307
322
|
@joined_timestamp.setter
|
|
@@ -348,9 +363,22 @@ class _AccountState:
|
|
|
348
363
|
|
|
349
364
|
@_builtins.property
|
|
350
365
|
@pulumi.getter
|
|
366
|
+
def state(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
367
|
+
"""
|
|
368
|
+
State of the account in the organization.
|
|
369
|
+
"""
|
|
370
|
+
return pulumi.get(self, "state")
|
|
371
|
+
|
|
372
|
+
@state.setter
|
|
373
|
+
def state(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
374
|
+
pulumi.set(self, "state", value)
|
|
375
|
+
|
|
376
|
+
@_builtins.property
|
|
377
|
+
@pulumi.getter
|
|
378
|
+
@_utilities.deprecated("""status is deprecated. Use state instead.""")
|
|
351
379
|
def status(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
352
380
|
"""
|
|
353
|
-
|
|
381
|
+
(**Deprecated** use `state` instead) Status of the account in the organization.
|
|
354
382
|
"""
|
|
355
383
|
return pulumi.get(self, "status")
|
|
356
384
|
|
|
@@ -591,6 +619,7 @@ class Account(pulumi.CustomResource):
|
|
|
591
619
|
__props__.__dict__["govcloud_id"] = None
|
|
592
620
|
__props__.__dict__["joined_method"] = None
|
|
593
621
|
__props__.__dict__["joined_timestamp"] = None
|
|
622
|
+
__props__.__dict__["state"] = None
|
|
594
623
|
__props__.__dict__["status"] = None
|
|
595
624
|
__props__.__dict__["tags_all"] = None
|
|
596
625
|
super(Account, __self__).__init__(
|
|
@@ -614,6 +643,7 @@ class Account(pulumi.CustomResource):
|
|
|
614
643
|
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
615
644
|
parent_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
616
645
|
role_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
646
|
+
state: Optional[pulumi.Input[_builtins.str]] = None,
|
|
617
647
|
status: Optional[pulumi.Input[_builtins.str]] = None,
|
|
618
648
|
tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
|
|
619
649
|
tags_all: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None) -> 'Account':
|
|
@@ -624,18 +654,21 @@ class Account(pulumi.CustomResource):
|
|
|
624
654
|
:param str resource_name: The unique name of the resulting resource.
|
|
625
655
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
626
656
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
627
|
-
:param pulumi.Input[_builtins.str] arn:
|
|
657
|
+
:param pulumi.Input[_builtins.str] arn: ARN for this account.
|
|
628
658
|
:param pulumi.Input[_builtins.bool] close_on_deletion: If true, a deletion event will close the account. Otherwise, it will only remove from the organization. This is not supported for GovCloud accounts.
|
|
629
659
|
:param pulumi.Input[_builtins.bool] create_govcloud: Whether to also create a GovCloud account. The GovCloud account is tied to the main (commercial) account this resource creates. If `true`, the GovCloud account ID is available in the `govcloud_id` attribute. The only way to manage the GovCloud account with the provider is to subsequently import the account using this resource.
|
|
630
660
|
:param pulumi.Input[_builtins.str] email: Email address of the owner to assign to the new member account. This email address must not already be associated with another AWS account.
|
|
631
661
|
:param pulumi.Input[_builtins.str] govcloud_id: ID for a GovCloud account created with the account.
|
|
632
662
|
:param pulumi.Input[_builtins.str] iam_user_access_to_billing: If set to `ALLOW`, the new account enables IAM users and roles to access account billing information if they have the required permissions. If set to `DENY`, then only the root user (and no roles) of the new account can access account billing information. If this is unset, the AWS API will default this to `ALLOW`. If the resource is created and this option is changed, it will try to recreate the account.
|
|
663
|
+
:param pulumi.Input[_builtins.str] joined_method: Method by which the account joined the organization.
|
|
664
|
+
:param pulumi.Input[_builtins.str] joined_timestamp: Date the account became a part of the organization.
|
|
633
665
|
:param pulumi.Input[_builtins.str] name: Friendly name for the member account.
|
|
634
666
|
|
|
635
667
|
The following arguments are optional:
|
|
636
668
|
:param pulumi.Input[_builtins.str] parent_id: Parent Organizational Unit ID or Root ID for the account. Defaults to the Organization default Root ID. A configuration must be present for this argument to perform drift detection.
|
|
637
669
|
:param pulumi.Input[_builtins.str] role_name: The name of an IAM role that Organizations automatically preconfigures in the new member account. This role trusts the root account, allowing users in the root account to assume the role, as permitted by the root account administrator. The role has administrator permissions in the new member account. The Organizations API provides no method for reading this information after account creation, so the provider cannot perform drift detection on its value and will always show a difference for a configured value after import unless `ignoreChanges` is used.
|
|
638
|
-
:param pulumi.Input[_builtins.str]
|
|
670
|
+
:param pulumi.Input[_builtins.str] state: State of the account in the organization.
|
|
671
|
+
:param pulumi.Input[_builtins.str] status: (**Deprecated** use `state` instead) Status of the account in the organization.
|
|
639
672
|
:param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] tags: Key-value map of resource tags. If configured with a provider `default_tags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
|
|
640
673
|
:param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] tags_all: A map of tags assigned to the resource, including those inherited from the provider `default_tags` configuration block.
|
|
641
674
|
"""
|
|
@@ -654,6 +687,7 @@ class Account(pulumi.CustomResource):
|
|
|
654
687
|
__props__.__dict__["name"] = name
|
|
655
688
|
__props__.__dict__["parent_id"] = parent_id
|
|
656
689
|
__props__.__dict__["role_name"] = role_name
|
|
690
|
+
__props__.__dict__["state"] = state
|
|
657
691
|
__props__.__dict__["status"] = status
|
|
658
692
|
__props__.__dict__["tags"] = tags
|
|
659
693
|
__props__.__dict__["tags_all"] = tags_all
|
|
@@ -663,7 +697,7 @@ class Account(pulumi.CustomResource):
|
|
|
663
697
|
@pulumi.getter
|
|
664
698
|
def arn(self) -> pulumi.Output[_builtins.str]:
|
|
665
699
|
"""
|
|
666
|
-
|
|
700
|
+
ARN for this account.
|
|
667
701
|
"""
|
|
668
702
|
return pulumi.get(self, "arn")
|
|
669
703
|
|
|
@@ -710,11 +744,17 @@ class Account(pulumi.CustomResource):
|
|
|
710
744
|
@_builtins.property
|
|
711
745
|
@pulumi.getter(name="joinedMethod")
|
|
712
746
|
def joined_method(self) -> pulumi.Output[_builtins.str]:
|
|
747
|
+
"""
|
|
748
|
+
Method by which the account joined the organization.
|
|
749
|
+
"""
|
|
713
750
|
return pulumi.get(self, "joined_method")
|
|
714
751
|
|
|
715
752
|
@_builtins.property
|
|
716
753
|
@pulumi.getter(name="joinedTimestamp")
|
|
717
754
|
def joined_timestamp(self) -> pulumi.Output[_builtins.str]:
|
|
755
|
+
"""
|
|
756
|
+
Date the account became a part of the organization.
|
|
757
|
+
"""
|
|
718
758
|
return pulumi.get(self, "joined_timestamp")
|
|
719
759
|
|
|
720
760
|
@_builtins.property
|
|
@@ -745,9 +785,18 @@ class Account(pulumi.CustomResource):
|
|
|
745
785
|
|
|
746
786
|
@_builtins.property
|
|
747
787
|
@pulumi.getter
|
|
788
|
+
def state(self) -> pulumi.Output[_builtins.str]:
|
|
789
|
+
"""
|
|
790
|
+
State of the account in the organization.
|
|
791
|
+
"""
|
|
792
|
+
return pulumi.get(self, "state")
|
|
793
|
+
|
|
794
|
+
@_builtins.property
|
|
795
|
+
@pulumi.getter
|
|
796
|
+
@_utilities.deprecated("""status is deprecated. Use state instead.""")
|
|
748
797
|
def status(self) -> pulumi.Output[_builtins.str]:
|
|
749
798
|
"""
|
|
750
|
-
|
|
799
|
+
(**Deprecated** use `state` instead) Status of the account in the organization.
|
|
751
800
|
"""
|
|
752
801
|
return pulumi.get(self, "status")
|
|
753
802
|
|
|
@@ -77,7 +77,7 @@ class GetOrganizationResult:
|
|
|
77
77
|
@pulumi.getter
|
|
78
78
|
def arn(self) -> _builtins.str:
|
|
79
79
|
"""
|
|
80
|
-
ARN of the root
|
|
80
|
+
ARN of the root.
|
|
81
81
|
"""
|
|
82
82
|
return pulumi.get(self, "arn")
|
|
83
83
|
|
|
@@ -184,11 +184,11 @@ class AwaitableGetOrganizationResult(GetOrganizationResult):
|
|
|
184
184
|
|
|
185
185
|
def get_organization(opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetOrganizationResult:
|
|
186
186
|
"""
|
|
187
|
-
Get information about the organization that the
|
|
187
|
+
Get information about the organization that the users account belongs to.
|
|
188
188
|
|
|
189
189
|
## Example Usage
|
|
190
190
|
|
|
191
|
-
###
|
|
191
|
+
### Basic Usage
|
|
192
192
|
|
|
193
193
|
```python
|
|
194
194
|
import pulumi
|
|
@@ -198,7 +198,7 @@ def get_organization(opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGe
|
|
|
198
198
|
pulumi.export("accountIds", [__item.id for __item in example.accounts])
|
|
199
199
|
```
|
|
200
200
|
|
|
201
|
-
### SNS
|
|
201
|
+
### Limit SNS Topic Access to an Organization
|
|
202
202
|
|
|
203
203
|
```python
|
|
204
204
|
import pulumi
|
|
@@ -247,11 +247,11 @@ def get_organization(opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGe
|
|
|
247
247
|
roots=pulumi.get(__ret__, 'roots'))
|
|
248
248
|
def get_organization_output(opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetOrganizationResult]:
|
|
249
249
|
"""
|
|
250
|
-
Get information about the organization that the
|
|
250
|
+
Get information about the organization that the users account belongs to.
|
|
251
251
|
|
|
252
252
|
## Example Usage
|
|
253
253
|
|
|
254
|
-
###
|
|
254
|
+
### Basic Usage
|
|
255
255
|
|
|
256
256
|
```python
|
|
257
257
|
import pulumi
|
|
@@ -261,7 +261,7 @@ def get_organization_output(opts: Optional[Union[pulumi.InvokeOptions, pulumi.In
|
|
|
261
261
|
pulumi.export("accountIds", [__item.id for __item in example.accounts])
|
|
262
262
|
```
|
|
263
263
|
|
|
264
|
-
### SNS
|
|
264
|
+
### Limit SNS Topic Access to an Organization
|
|
265
265
|
|
|
266
266
|
```python
|
|
267
267
|
import pulumi
|
|
@@ -28,7 +28,7 @@ class OrganizationArgs:
|
|
|
28
28
|
The set of arguments for constructing a Organization resource.
|
|
29
29
|
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] aws_service_access_principals: List of AWS service principal names for which you want to enable integration with your organization. This is typically in the form of a URL, such as service-abbreviation.amazonaws.com. Organization must have `feature_set` set to `ALL`. Some services do not support enablement via this endpoint, see [warning in aws docs](https://docs.aws.amazon.com/organizations/latest/APIReference/API_EnableAWSServiceAccess.html).
|
|
30
30
|
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] enabled_policy_types: List of Organizations policy types to enable in the Organization Root. Organization must have `feature_set` set to `ALL`. For additional information about valid policy types (e.g., `AISERVICES_OPT_OUT_POLICY`, `BACKUP_POLICY`, `RESOURCE_CONTROL_POLICY`, `SERVICE_CONTROL_POLICY`, and `TAG_POLICY`), see the [AWS Organizations API Reference](https://docs.aws.amazon.com/organizations/latest/APIReference/API_EnablePolicyType.html).
|
|
31
|
-
:param pulumi.Input[_builtins.str] feature_set: Specify
|
|
31
|
+
:param pulumi.Input[_builtins.str] feature_set: Specify `ALL` (default) or `CONSOLIDATED_BILLING`.
|
|
32
32
|
"""
|
|
33
33
|
if aws_service_access_principals is not None:
|
|
34
34
|
pulumi.set(__self__, "aws_service_access_principals", aws_service_access_principals)
|
|
@@ -65,7 +65,7 @@ class OrganizationArgs:
|
|
|
65
65
|
@pulumi.getter(name="featureSet")
|
|
66
66
|
def feature_set(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
67
67
|
"""
|
|
68
|
-
Specify
|
|
68
|
+
Specify `ALL` (default) or `CONSOLIDATED_BILLING`.
|
|
69
69
|
"""
|
|
70
70
|
return pulumi.get(self, "feature_set")
|
|
71
71
|
|
|
@@ -91,14 +91,14 @@ class _OrganizationState:
|
|
|
91
91
|
"""
|
|
92
92
|
Input properties used for looking up and filtering Organization resources.
|
|
93
93
|
:param pulumi.Input[Sequence[pulumi.Input['OrganizationAccountArgs']]] accounts: List of organization accounts including the master account. For a list excluding the master account, see the `non_master_accounts` attribute. All elements have these attributes:
|
|
94
|
-
:param pulumi.Input[_builtins.str] arn: ARN of the root
|
|
94
|
+
:param pulumi.Input[_builtins.str] arn: ARN of the root.
|
|
95
95
|
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] aws_service_access_principals: List of AWS service principal names for which you want to enable integration with your organization. This is typically in the form of a URL, such as service-abbreviation.amazonaws.com. Organization must have `feature_set` set to `ALL`. Some services do not support enablement via this endpoint, see [warning in aws docs](https://docs.aws.amazon.com/organizations/latest/APIReference/API_EnableAWSServiceAccess.html).
|
|
96
96
|
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] enabled_policy_types: List of Organizations policy types to enable in the Organization Root. Organization must have `feature_set` set to `ALL`. For additional information about valid policy types (e.g., `AISERVICES_OPT_OUT_POLICY`, `BACKUP_POLICY`, `RESOURCE_CONTROL_POLICY`, `SERVICE_CONTROL_POLICY`, and `TAG_POLICY`), see the [AWS Organizations API Reference](https://docs.aws.amazon.com/organizations/latest/APIReference/API_EnablePolicyType.html).
|
|
97
|
-
:param pulumi.Input[_builtins.str] feature_set: Specify
|
|
98
|
-
:param pulumi.Input[_builtins.str] master_account_arn: ARN of the master account
|
|
99
|
-
:param pulumi.Input[_builtins.str] master_account_email: Email address of the master account
|
|
100
|
-
:param pulumi.Input[_builtins.str] master_account_id: Identifier of the master account
|
|
101
|
-
:param pulumi.Input[_builtins.str] master_account_name: Name of the master account
|
|
97
|
+
:param pulumi.Input[_builtins.str] feature_set: Specify `ALL` (default) or `CONSOLIDATED_BILLING`.
|
|
98
|
+
:param pulumi.Input[_builtins.str] master_account_arn: ARN of the master account.
|
|
99
|
+
:param pulumi.Input[_builtins.str] master_account_email: Email address of the master account.
|
|
100
|
+
:param pulumi.Input[_builtins.str] master_account_id: Identifier of the master account.
|
|
101
|
+
:param pulumi.Input[_builtins.str] master_account_name: Name of the master account.
|
|
102
102
|
:param pulumi.Input[Sequence[pulumi.Input['OrganizationNonMasterAccountArgs']]] non_master_accounts: List of organization accounts excluding the master account. For a list including the master account, see the `accounts` attribute. All elements have these attributes:
|
|
103
103
|
:param pulumi.Input[Sequence[pulumi.Input['OrganizationRootArgs']]] roots: List of organization roots. All elements have these attributes:
|
|
104
104
|
"""
|
|
@@ -141,7 +141,7 @@ class _OrganizationState:
|
|
|
141
141
|
@pulumi.getter
|
|
142
142
|
def arn(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
143
143
|
"""
|
|
144
|
-
ARN of the root
|
|
144
|
+
ARN of the root.
|
|
145
145
|
"""
|
|
146
146
|
return pulumi.get(self, "arn")
|
|
147
147
|
|
|
@@ -177,7 +177,7 @@ class _OrganizationState:
|
|
|
177
177
|
@pulumi.getter(name="featureSet")
|
|
178
178
|
def feature_set(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
179
179
|
"""
|
|
180
|
-
Specify
|
|
180
|
+
Specify `ALL` (default) or `CONSOLIDATED_BILLING`.
|
|
181
181
|
"""
|
|
182
182
|
return pulumi.get(self, "feature_set")
|
|
183
183
|
|
|
@@ -189,7 +189,7 @@ class _OrganizationState:
|
|
|
189
189
|
@pulumi.getter(name="masterAccountArn")
|
|
190
190
|
def master_account_arn(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
191
191
|
"""
|
|
192
|
-
ARN of the master account
|
|
192
|
+
ARN of the master account.
|
|
193
193
|
"""
|
|
194
194
|
return pulumi.get(self, "master_account_arn")
|
|
195
195
|
|
|
@@ -201,7 +201,7 @@ class _OrganizationState:
|
|
|
201
201
|
@pulumi.getter(name="masterAccountEmail")
|
|
202
202
|
def master_account_email(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
203
203
|
"""
|
|
204
|
-
Email address of the master account
|
|
204
|
+
Email address of the master account.
|
|
205
205
|
"""
|
|
206
206
|
return pulumi.get(self, "master_account_email")
|
|
207
207
|
|
|
@@ -213,7 +213,7 @@ class _OrganizationState:
|
|
|
213
213
|
@pulumi.getter(name="masterAccountId")
|
|
214
214
|
def master_account_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
215
215
|
"""
|
|
216
|
-
Identifier of the master account
|
|
216
|
+
Identifier of the master account.
|
|
217
217
|
"""
|
|
218
218
|
return pulumi.get(self, "master_account_id")
|
|
219
219
|
|
|
@@ -225,7 +225,7 @@ class _OrganizationState:
|
|
|
225
225
|
@pulumi.getter(name="masterAccountName")
|
|
226
226
|
def master_account_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
227
227
|
"""
|
|
228
|
-
Name of the master account
|
|
228
|
+
Name of the master account.
|
|
229
229
|
"""
|
|
230
230
|
return pulumi.get(self, "master_account_name")
|
|
231
231
|
|
|
@@ -311,7 +311,7 @@ class Organization(pulumi.CustomResource):
|
|
|
311
311
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
312
312
|
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] aws_service_access_principals: List of AWS service principal names for which you want to enable integration with your organization. This is typically in the form of a URL, such as service-abbreviation.amazonaws.com. Organization must have `feature_set` set to `ALL`. Some services do not support enablement via this endpoint, see [warning in aws docs](https://docs.aws.amazon.com/organizations/latest/APIReference/API_EnableAWSServiceAccess.html).
|
|
313
313
|
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] enabled_policy_types: List of Organizations policy types to enable in the Organization Root. Organization must have `feature_set` set to `ALL`. For additional information about valid policy types (e.g., `AISERVICES_OPT_OUT_POLICY`, `BACKUP_POLICY`, `RESOURCE_CONTROL_POLICY`, `SERVICE_CONTROL_POLICY`, and `TAG_POLICY`), see the [AWS Organizations API Reference](https://docs.aws.amazon.com/organizations/latest/APIReference/API_EnablePolicyType.html).
|
|
314
|
-
:param pulumi.Input[_builtins.str] feature_set: Specify
|
|
314
|
+
:param pulumi.Input[_builtins.str] feature_set: Specify `ALL` (default) or `CONSOLIDATED_BILLING`.
|
|
315
315
|
"""
|
|
316
316
|
...
|
|
317
317
|
@overload
|
|
@@ -425,14 +425,14 @@ class Organization(pulumi.CustomResource):
|
|
|
425
425
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
426
426
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
427
427
|
:param pulumi.Input[Sequence[pulumi.Input[Union['OrganizationAccountArgs', 'OrganizationAccountArgsDict']]]] accounts: List of organization accounts including the master account. For a list excluding the master account, see the `non_master_accounts` attribute. All elements have these attributes:
|
|
428
|
-
:param pulumi.Input[_builtins.str] arn: ARN of the root
|
|
428
|
+
:param pulumi.Input[_builtins.str] arn: ARN of the root.
|
|
429
429
|
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] aws_service_access_principals: List of AWS service principal names for which you want to enable integration with your organization. This is typically in the form of a URL, such as service-abbreviation.amazonaws.com. Organization must have `feature_set` set to `ALL`. Some services do not support enablement via this endpoint, see [warning in aws docs](https://docs.aws.amazon.com/organizations/latest/APIReference/API_EnableAWSServiceAccess.html).
|
|
430
430
|
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] enabled_policy_types: List of Organizations policy types to enable in the Organization Root. Organization must have `feature_set` set to `ALL`. For additional information about valid policy types (e.g., `AISERVICES_OPT_OUT_POLICY`, `BACKUP_POLICY`, `RESOURCE_CONTROL_POLICY`, `SERVICE_CONTROL_POLICY`, and `TAG_POLICY`), see the [AWS Organizations API Reference](https://docs.aws.amazon.com/organizations/latest/APIReference/API_EnablePolicyType.html).
|
|
431
|
-
:param pulumi.Input[_builtins.str] feature_set: Specify
|
|
432
|
-
:param pulumi.Input[_builtins.str] master_account_arn: ARN of the master account
|
|
433
|
-
:param pulumi.Input[_builtins.str] master_account_email: Email address of the master account
|
|
434
|
-
:param pulumi.Input[_builtins.str] master_account_id: Identifier of the master account
|
|
435
|
-
:param pulumi.Input[_builtins.str] master_account_name: Name of the master account
|
|
431
|
+
:param pulumi.Input[_builtins.str] feature_set: Specify `ALL` (default) or `CONSOLIDATED_BILLING`.
|
|
432
|
+
:param pulumi.Input[_builtins.str] master_account_arn: ARN of the master account.
|
|
433
|
+
:param pulumi.Input[_builtins.str] master_account_email: Email address of the master account.
|
|
434
|
+
:param pulumi.Input[_builtins.str] master_account_id: Identifier of the master account.
|
|
435
|
+
:param pulumi.Input[_builtins.str] master_account_name: Name of the master account.
|
|
436
436
|
:param pulumi.Input[Sequence[pulumi.Input[Union['OrganizationNonMasterAccountArgs', 'OrganizationNonMasterAccountArgsDict']]]] non_master_accounts: List of organization accounts excluding the master account. For a list including the master account, see the `accounts` attribute. All elements have these attributes:
|
|
437
437
|
:param pulumi.Input[Sequence[pulumi.Input[Union['OrganizationRootArgs', 'OrganizationRootArgsDict']]]] roots: List of organization roots. All elements have these attributes:
|
|
438
438
|
"""
|
|
@@ -465,7 +465,7 @@ class Organization(pulumi.CustomResource):
|
|
|
465
465
|
@pulumi.getter
|
|
466
466
|
def arn(self) -> pulumi.Output[_builtins.str]:
|
|
467
467
|
"""
|
|
468
|
-
ARN of the root
|
|
468
|
+
ARN of the root.
|
|
469
469
|
"""
|
|
470
470
|
return pulumi.get(self, "arn")
|
|
471
471
|
|
|
@@ -489,7 +489,7 @@ class Organization(pulumi.CustomResource):
|
|
|
489
489
|
@pulumi.getter(name="featureSet")
|
|
490
490
|
def feature_set(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
491
491
|
"""
|
|
492
|
-
Specify
|
|
492
|
+
Specify `ALL` (default) or `CONSOLIDATED_BILLING`.
|
|
493
493
|
"""
|
|
494
494
|
return pulumi.get(self, "feature_set")
|
|
495
495
|
|
|
@@ -497,7 +497,7 @@ class Organization(pulumi.CustomResource):
|
|
|
497
497
|
@pulumi.getter(name="masterAccountArn")
|
|
498
498
|
def master_account_arn(self) -> pulumi.Output[_builtins.str]:
|
|
499
499
|
"""
|
|
500
|
-
ARN of the master account
|
|
500
|
+
ARN of the master account.
|
|
501
501
|
"""
|
|
502
502
|
return pulumi.get(self, "master_account_arn")
|
|
503
503
|
|
|
@@ -505,7 +505,7 @@ class Organization(pulumi.CustomResource):
|
|
|
505
505
|
@pulumi.getter(name="masterAccountEmail")
|
|
506
506
|
def master_account_email(self) -> pulumi.Output[_builtins.str]:
|
|
507
507
|
"""
|
|
508
|
-
Email address of the master account
|
|
508
|
+
Email address of the master account.
|
|
509
509
|
"""
|
|
510
510
|
return pulumi.get(self, "master_account_email")
|
|
511
511
|
|
|
@@ -513,7 +513,7 @@ class Organization(pulumi.CustomResource):
|
|
|
513
513
|
@pulumi.getter(name="masterAccountId")
|
|
514
514
|
def master_account_id(self) -> pulumi.Output[_builtins.str]:
|
|
515
515
|
"""
|
|
516
|
-
Identifier of the master account
|
|
516
|
+
Identifier of the master account.
|
|
517
517
|
"""
|
|
518
518
|
return pulumi.get(self, "master_account_id")
|
|
519
519
|
|
|
@@ -521,7 +521,7 @@ class Organization(pulumi.CustomResource):
|
|
|
521
521
|
@pulumi.getter(name="masterAccountName")
|
|
522
522
|
def master_account_name(self) -> pulumi.Output[_builtins.str]:
|
|
523
523
|
"""
|
|
524
|
-
Name of the master account
|
|
524
|
+
Name of the master account.
|
|
525
525
|
"""
|
|
526
526
|
return pulumi.get(self, "master_account_name")
|
|
527
527
|
|