pulumi-aws 7.9.1__py3-none-any.whl → 7.10.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_aws/__init__.py +40 -0
- pulumi_aws/_inputs.py +40 -0
- pulumi_aws/appstream/_inputs.py +54 -0
- pulumi_aws/appstream/directory_config.py +55 -0
- pulumi_aws/appstream/outputs.py +49 -0
- pulumi_aws/bedrock/__init__.py +5 -0
- pulumi_aws/bedrock/_inputs.py +2097 -0
- pulumi_aws/bedrock/agent_agent.py +9 -7
- pulumi_aws/bedrock/agentcore_api_key_credential_provider.py +122 -1
- pulumi_aws/bedrock/agentcore_memory.py +614 -0
- pulumi_aws/bedrock/agentcore_memory_strategy.py +800 -0
- pulumi_aws/bedrock/agentcore_oauth2_credential_provider.py +477 -0
- pulumi_aws/bedrock/agentcore_token_vault_cmk.py +291 -0
- pulumi_aws/bedrock/agentcore_workload_identity.py +359 -0
- pulumi_aws/bedrock/outputs.py +1739 -0
- pulumi_aws/cloudtrail/trail.py +7 -7
- pulumi_aws/config/outputs.py +24 -0
- pulumi_aws/docdb/cluster.py +109 -1
- pulumi_aws/ec2/route.py +12 -0
- pulumi_aws/ecs/task_definition.py +7 -7
- pulumi_aws/fis/_inputs.py +3 -3
- pulumi_aws/fis/outputs.py +2 -2
- pulumi_aws/kms/key_policy.py +7 -7
- pulumi_aws/odb/network.py +47 -0
- pulumi_aws/organizations/_inputs.py +170 -42
- pulumi_aws/organizations/account.py +57 -8
- pulumi_aws/organizations/get_organization.py +7 -7
- pulumi_aws/organizations/organization.py +27 -27
- pulumi_aws/organizations/outputs.py +310 -62
- pulumi_aws/pulumi-plugin.json +1 -1
- pulumi_aws/rds/cluster.py +102 -1
- pulumi_aws/rds/instance.py +102 -1
- pulumi_aws/redshift/cluster.py +130 -1
- pulumi_aws/redshiftserverless/namespace.py +109 -1
- pulumi_aws/secretsmanager/secret_version.py +122 -1
- pulumi_aws/ssm/parameter.py +145 -2
- pulumi_aws/transfer/host_key.py +75 -1
- pulumi_aws/workspaces/get_workspace.py +19 -0
- {pulumi_aws-7.9.1.dist-info → pulumi_aws-7.10.0.dist-info}/METADATA +1 -1
- {pulumi_aws-7.9.1.dist-info → pulumi_aws-7.10.0.dist-info}/RECORD +42 -37
- {pulumi_aws-7.9.1.dist-info → pulumi_aws-7.10.0.dist-info}/WHEEL +0 -0
- {pulumi_aws-7.9.1.dist-info → pulumi_aws-7.10.0.dist-info}/top_level.txt +0 -0
|
@@ -23,6 +23,8 @@ class SecretVersionArgs:
|
|
|
23
23
|
region: Optional[pulumi.Input[_builtins.str]] = None,
|
|
24
24
|
secret_binary: Optional[pulumi.Input[_builtins.str]] = None,
|
|
25
25
|
secret_string: Optional[pulumi.Input[_builtins.str]] = None,
|
|
26
|
+
secret_string_wo: Optional[pulumi.Input[_builtins.str]] = None,
|
|
27
|
+
secret_string_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
|
|
26
28
|
version_stages: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None):
|
|
27
29
|
"""
|
|
28
30
|
The set of arguments for constructing a SecretVersion resource.
|
|
@@ -30,6 +32,9 @@ class SecretVersionArgs:
|
|
|
30
32
|
:param pulumi.Input[_builtins.str] region: Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
|
|
31
33
|
:param pulumi.Input[_builtins.str] secret_binary: Specifies binary data that you want to encrypt and store in this version of the secret. This is required if `secret_string` or `secret_string_wo` is not set. Needs to be encoded to base64.
|
|
32
34
|
:param pulumi.Input[_builtins.str] secret_string: Specifies text data that you want to encrypt and store in this version of the secret. This is required if `secret_binary` or `secret_string_wo` is not set.
|
|
35
|
+
:param pulumi.Input[_builtins.str] secret_string_wo: **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
|
|
36
|
+
Specifies text data that you want to encrypt and store in this version of the secret. This is required if `secret_binary` or `secret_string` is not set.
|
|
37
|
+
:param pulumi.Input[_builtins.int] secret_string_wo_version: Used together with `secret_string_wo` to trigger an update. Increment this value when an update to `secret_string_wo` is required.
|
|
33
38
|
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] version_stages: Specifies a list of staging labels that are attached to this version of the secret. A staging label must be unique to a single version of the secret. If you specify a staging label that's already associated with a different version of the same secret then that staging label is automatically removed from the other version and attached to this version. If you do not specify a value, then AWS Secrets Manager automatically moves the staging label `AWSCURRENT` to this new version on creation.
|
|
34
39
|
|
|
35
40
|
> **NOTE:** If `version_stages` is configured, you must include the `AWSCURRENT` staging label if this secret version is the only version or if the label is currently present on this secret version, otherwise this provider will show a perpetual difference.
|
|
@@ -41,6 +46,10 @@ class SecretVersionArgs:
|
|
|
41
46
|
pulumi.set(__self__, "secret_binary", secret_binary)
|
|
42
47
|
if secret_string is not None:
|
|
43
48
|
pulumi.set(__self__, "secret_string", secret_string)
|
|
49
|
+
if secret_string_wo is not None:
|
|
50
|
+
pulumi.set(__self__, "secret_string_wo", secret_string_wo)
|
|
51
|
+
if secret_string_wo_version is not None:
|
|
52
|
+
pulumi.set(__self__, "secret_string_wo_version", secret_string_wo_version)
|
|
44
53
|
if version_stages is not None:
|
|
45
54
|
pulumi.set(__self__, "version_stages", version_stages)
|
|
46
55
|
|
|
@@ -92,6 +101,31 @@ class SecretVersionArgs:
|
|
|
92
101
|
def secret_string(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
93
102
|
pulumi.set(self, "secret_string", value)
|
|
94
103
|
|
|
104
|
+
@_builtins.property
|
|
105
|
+
@pulumi.getter(name="secretStringWo")
|
|
106
|
+
def secret_string_wo(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
107
|
+
"""
|
|
108
|
+
**NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
|
|
109
|
+
Specifies text data that you want to encrypt and store in this version of the secret. This is required if `secret_binary` or `secret_string` is not set.
|
|
110
|
+
"""
|
|
111
|
+
return pulumi.get(self, "secret_string_wo")
|
|
112
|
+
|
|
113
|
+
@secret_string_wo.setter
|
|
114
|
+
def secret_string_wo(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
115
|
+
pulumi.set(self, "secret_string_wo", value)
|
|
116
|
+
|
|
117
|
+
@_builtins.property
|
|
118
|
+
@pulumi.getter(name="secretStringWoVersion")
|
|
119
|
+
def secret_string_wo_version(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
120
|
+
"""
|
|
121
|
+
Used together with `secret_string_wo` to trigger an update. Increment this value when an update to `secret_string_wo` is required.
|
|
122
|
+
"""
|
|
123
|
+
return pulumi.get(self, "secret_string_wo_version")
|
|
124
|
+
|
|
125
|
+
@secret_string_wo_version.setter
|
|
126
|
+
def secret_string_wo_version(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
127
|
+
pulumi.set(self, "secret_string_wo_version", value)
|
|
128
|
+
|
|
95
129
|
@_builtins.property
|
|
96
130
|
@pulumi.getter(name="versionStages")
|
|
97
131
|
def version_stages(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
@@ -111,10 +145,13 @@ class SecretVersionArgs:
|
|
|
111
145
|
class _SecretVersionState:
|
|
112
146
|
def __init__(__self__, *,
|
|
113
147
|
arn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
148
|
+
has_secret_string_wo: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
114
149
|
region: Optional[pulumi.Input[_builtins.str]] = None,
|
|
115
150
|
secret_binary: Optional[pulumi.Input[_builtins.str]] = None,
|
|
116
151
|
secret_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
117
152
|
secret_string: Optional[pulumi.Input[_builtins.str]] = None,
|
|
153
|
+
secret_string_wo: Optional[pulumi.Input[_builtins.str]] = None,
|
|
154
|
+
secret_string_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
|
|
118
155
|
version_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
119
156
|
version_stages: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None):
|
|
120
157
|
"""
|
|
@@ -124,6 +161,9 @@ class _SecretVersionState:
|
|
|
124
161
|
:param pulumi.Input[_builtins.str] secret_binary: Specifies binary data that you want to encrypt and store in this version of the secret. This is required if `secret_string` or `secret_string_wo` is not set. Needs to be encoded to base64.
|
|
125
162
|
:param pulumi.Input[_builtins.str] secret_id: Specifies the secret to which you want to add a new version. You can specify either the Amazon Resource Name (ARN) or the friendly name of the secret. The secret must already exist.
|
|
126
163
|
:param pulumi.Input[_builtins.str] secret_string: Specifies text data that you want to encrypt and store in this version of the secret. This is required if `secret_binary` or `secret_string_wo` is not set.
|
|
164
|
+
:param pulumi.Input[_builtins.str] secret_string_wo: **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
|
|
165
|
+
Specifies text data that you want to encrypt and store in this version of the secret. This is required if `secret_binary` or `secret_string` is not set.
|
|
166
|
+
:param pulumi.Input[_builtins.int] secret_string_wo_version: Used together with `secret_string_wo` to trigger an update. Increment this value when an update to `secret_string_wo` is required.
|
|
127
167
|
:param pulumi.Input[_builtins.str] version_id: The unique identifier of the version of the secret.
|
|
128
168
|
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] version_stages: Specifies a list of staging labels that are attached to this version of the secret. A staging label must be unique to a single version of the secret. If you specify a staging label that's already associated with a different version of the same secret then that staging label is automatically removed from the other version and attached to this version. If you do not specify a value, then AWS Secrets Manager automatically moves the staging label `AWSCURRENT` to this new version on creation.
|
|
129
169
|
|
|
@@ -131,6 +171,8 @@ class _SecretVersionState:
|
|
|
131
171
|
"""
|
|
132
172
|
if arn is not None:
|
|
133
173
|
pulumi.set(__self__, "arn", arn)
|
|
174
|
+
if has_secret_string_wo is not None:
|
|
175
|
+
pulumi.set(__self__, "has_secret_string_wo", has_secret_string_wo)
|
|
134
176
|
if region is not None:
|
|
135
177
|
pulumi.set(__self__, "region", region)
|
|
136
178
|
if secret_binary is not None:
|
|
@@ -139,6 +181,10 @@ class _SecretVersionState:
|
|
|
139
181
|
pulumi.set(__self__, "secret_id", secret_id)
|
|
140
182
|
if secret_string is not None:
|
|
141
183
|
pulumi.set(__self__, "secret_string", secret_string)
|
|
184
|
+
if secret_string_wo is not None:
|
|
185
|
+
pulumi.set(__self__, "secret_string_wo", secret_string_wo)
|
|
186
|
+
if secret_string_wo_version is not None:
|
|
187
|
+
pulumi.set(__self__, "secret_string_wo_version", secret_string_wo_version)
|
|
142
188
|
if version_id is not None:
|
|
143
189
|
pulumi.set(__self__, "version_id", version_id)
|
|
144
190
|
if version_stages is not None:
|
|
@@ -156,6 +202,15 @@ class _SecretVersionState:
|
|
|
156
202
|
def arn(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
157
203
|
pulumi.set(self, "arn", value)
|
|
158
204
|
|
|
205
|
+
@_builtins.property
|
|
206
|
+
@pulumi.getter(name="hasSecretStringWo")
|
|
207
|
+
def has_secret_string_wo(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
208
|
+
return pulumi.get(self, "has_secret_string_wo")
|
|
209
|
+
|
|
210
|
+
@has_secret_string_wo.setter
|
|
211
|
+
def has_secret_string_wo(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
212
|
+
pulumi.set(self, "has_secret_string_wo", value)
|
|
213
|
+
|
|
159
214
|
@_builtins.property
|
|
160
215
|
@pulumi.getter
|
|
161
216
|
def region(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
@@ -204,6 +259,31 @@ class _SecretVersionState:
|
|
|
204
259
|
def secret_string(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
205
260
|
pulumi.set(self, "secret_string", value)
|
|
206
261
|
|
|
262
|
+
@_builtins.property
|
|
263
|
+
@pulumi.getter(name="secretStringWo")
|
|
264
|
+
def secret_string_wo(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
265
|
+
"""
|
|
266
|
+
**NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
|
|
267
|
+
Specifies text data that you want to encrypt and store in this version of the secret. This is required if `secret_binary` or `secret_string` is not set.
|
|
268
|
+
"""
|
|
269
|
+
return pulumi.get(self, "secret_string_wo")
|
|
270
|
+
|
|
271
|
+
@secret_string_wo.setter
|
|
272
|
+
def secret_string_wo(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
273
|
+
pulumi.set(self, "secret_string_wo", value)
|
|
274
|
+
|
|
275
|
+
@_builtins.property
|
|
276
|
+
@pulumi.getter(name="secretStringWoVersion")
|
|
277
|
+
def secret_string_wo_version(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
278
|
+
"""
|
|
279
|
+
Used together with `secret_string_wo` to trigger an update. Increment this value when an update to `secret_string_wo` is required.
|
|
280
|
+
"""
|
|
281
|
+
return pulumi.get(self, "secret_string_wo_version")
|
|
282
|
+
|
|
283
|
+
@secret_string_wo_version.setter
|
|
284
|
+
def secret_string_wo_version(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
285
|
+
pulumi.set(self, "secret_string_wo_version", value)
|
|
286
|
+
|
|
207
287
|
@_builtins.property
|
|
208
288
|
@pulumi.getter(name="versionId")
|
|
209
289
|
def version_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
@@ -241,6 +321,8 @@ class SecretVersion(pulumi.CustomResource):
|
|
|
241
321
|
secret_binary: Optional[pulumi.Input[_builtins.str]] = None,
|
|
242
322
|
secret_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
243
323
|
secret_string: Optional[pulumi.Input[_builtins.str]] = None,
|
|
324
|
+
secret_string_wo: Optional[pulumi.Input[_builtins.str]] = None,
|
|
325
|
+
secret_string_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
|
|
244
326
|
version_stages: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
245
327
|
__props__=None):
|
|
246
328
|
"""
|
|
@@ -290,6 +372,9 @@ class SecretVersion(pulumi.CustomResource):
|
|
|
290
372
|
:param pulumi.Input[_builtins.str] secret_binary: Specifies binary data that you want to encrypt and store in this version of the secret. This is required if `secret_string` or `secret_string_wo` is not set. Needs to be encoded to base64.
|
|
291
373
|
:param pulumi.Input[_builtins.str] secret_id: Specifies the secret to which you want to add a new version. You can specify either the Amazon Resource Name (ARN) or the friendly name of the secret. The secret must already exist.
|
|
292
374
|
:param pulumi.Input[_builtins.str] secret_string: Specifies text data that you want to encrypt and store in this version of the secret. This is required if `secret_binary` or `secret_string_wo` is not set.
|
|
375
|
+
:param pulumi.Input[_builtins.str] secret_string_wo: **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
|
|
376
|
+
Specifies text data that you want to encrypt and store in this version of the secret. This is required if `secret_binary` or `secret_string` is not set.
|
|
377
|
+
:param pulumi.Input[_builtins.int] secret_string_wo_version: Used together with `secret_string_wo` to trigger an update. Increment this value when an update to `secret_string_wo` is required.
|
|
293
378
|
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] version_stages: Specifies a list of staging labels that are attached to this version of the secret. A staging label must be unique to a single version of the secret. If you specify a staging label that's already associated with a different version of the same secret then that staging label is automatically removed from the other version and attached to this version. If you do not specify a value, then AWS Secrets Manager automatically moves the staging label `AWSCURRENT` to this new version on creation.
|
|
294
379
|
|
|
295
380
|
> **NOTE:** If `version_stages` is configured, you must include the `AWSCURRENT` staging label if this secret version is the only version or if the label is currently present on this secret version, otherwise this provider will show a perpetual difference.
|
|
@@ -360,6 +445,8 @@ class SecretVersion(pulumi.CustomResource):
|
|
|
360
445
|
secret_binary: Optional[pulumi.Input[_builtins.str]] = None,
|
|
361
446
|
secret_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
362
447
|
secret_string: Optional[pulumi.Input[_builtins.str]] = None,
|
|
448
|
+
secret_string_wo: Optional[pulumi.Input[_builtins.str]] = None,
|
|
449
|
+
secret_string_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
|
|
363
450
|
version_stages: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
364
451
|
__props__=None):
|
|
365
452
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
@@ -376,10 +463,13 @@ class SecretVersion(pulumi.CustomResource):
|
|
|
376
463
|
raise TypeError("Missing required property 'secret_id'")
|
|
377
464
|
__props__.__dict__["secret_id"] = secret_id
|
|
378
465
|
__props__.__dict__["secret_string"] = None if secret_string is None else pulumi.Output.secret(secret_string)
|
|
466
|
+
__props__.__dict__["secret_string_wo"] = None if secret_string_wo is None else pulumi.Output.secret(secret_string_wo)
|
|
467
|
+
__props__.__dict__["secret_string_wo_version"] = secret_string_wo_version
|
|
379
468
|
__props__.__dict__["version_stages"] = version_stages
|
|
380
469
|
__props__.__dict__["arn"] = None
|
|
470
|
+
__props__.__dict__["has_secret_string_wo"] = None
|
|
381
471
|
__props__.__dict__["version_id"] = None
|
|
382
|
-
secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["secretBinary", "secretString"])
|
|
472
|
+
secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["secretBinary", "secretString", "secretStringWo"])
|
|
383
473
|
opts = pulumi.ResourceOptions.merge(opts, secret_opts)
|
|
384
474
|
super(SecretVersion, __self__).__init__(
|
|
385
475
|
'aws:secretsmanager/secretVersion:SecretVersion',
|
|
@@ -392,10 +482,13 @@ class SecretVersion(pulumi.CustomResource):
|
|
|
392
482
|
id: pulumi.Input[str],
|
|
393
483
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
394
484
|
arn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
485
|
+
has_secret_string_wo: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
395
486
|
region: Optional[pulumi.Input[_builtins.str]] = None,
|
|
396
487
|
secret_binary: Optional[pulumi.Input[_builtins.str]] = None,
|
|
397
488
|
secret_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
398
489
|
secret_string: Optional[pulumi.Input[_builtins.str]] = None,
|
|
490
|
+
secret_string_wo: Optional[pulumi.Input[_builtins.str]] = None,
|
|
491
|
+
secret_string_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
|
|
399
492
|
version_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
400
493
|
version_stages: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None) -> 'SecretVersion':
|
|
401
494
|
"""
|
|
@@ -410,6 +503,9 @@ class SecretVersion(pulumi.CustomResource):
|
|
|
410
503
|
:param pulumi.Input[_builtins.str] secret_binary: Specifies binary data that you want to encrypt and store in this version of the secret. This is required if `secret_string` or `secret_string_wo` is not set. Needs to be encoded to base64.
|
|
411
504
|
:param pulumi.Input[_builtins.str] secret_id: Specifies the secret to which you want to add a new version. You can specify either the Amazon Resource Name (ARN) or the friendly name of the secret. The secret must already exist.
|
|
412
505
|
:param pulumi.Input[_builtins.str] secret_string: Specifies text data that you want to encrypt and store in this version of the secret. This is required if `secret_binary` or `secret_string_wo` is not set.
|
|
506
|
+
:param pulumi.Input[_builtins.str] secret_string_wo: **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
|
|
507
|
+
Specifies text data that you want to encrypt and store in this version of the secret. This is required if `secret_binary` or `secret_string` is not set.
|
|
508
|
+
:param pulumi.Input[_builtins.int] secret_string_wo_version: Used together with `secret_string_wo` to trigger an update. Increment this value when an update to `secret_string_wo` is required.
|
|
413
509
|
:param pulumi.Input[_builtins.str] version_id: The unique identifier of the version of the secret.
|
|
414
510
|
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] version_stages: Specifies a list of staging labels that are attached to this version of the secret. A staging label must be unique to a single version of the secret. If you specify a staging label that's already associated with a different version of the same secret then that staging label is automatically removed from the other version and attached to this version. If you do not specify a value, then AWS Secrets Manager automatically moves the staging label `AWSCURRENT` to this new version on creation.
|
|
415
511
|
|
|
@@ -420,10 +516,13 @@ class SecretVersion(pulumi.CustomResource):
|
|
|
420
516
|
__props__ = _SecretVersionState.__new__(_SecretVersionState)
|
|
421
517
|
|
|
422
518
|
__props__.__dict__["arn"] = arn
|
|
519
|
+
__props__.__dict__["has_secret_string_wo"] = has_secret_string_wo
|
|
423
520
|
__props__.__dict__["region"] = region
|
|
424
521
|
__props__.__dict__["secret_binary"] = secret_binary
|
|
425
522
|
__props__.__dict__["secret_id"] = secret_id
|
|
426
523
|
__props__.__dict__["secret_string"] = secret_string
|
|
524
|
+
__props__.__dict__["secret_string_wo"] = secret_string_wo
|
|
525
|
+
__props__.__dict__["secret_string_wo_version"] = secret_string_wo_version
|
|
427
526
|
__props__.__dict__["version_id"] = version_id
|
|
428
527
|
__props__.__dict__["version_stages"] = version_stages
|
|
429
528
|
return SecretVersion(resource_name, opts=opts, __props__=__props__)
|
|
@@ -436,6 +535,11 @@ class SecretVersion(pulumi.CustomResource):
|
|
|
436
535
|
"""
|
|
437
536
|
return pulumi.get(self, "arn")
|
|
438
537
|
|
|
538
|
+
@_builtins.property
|
|
539
|
+
@pulumi.getter(name="hasSecretStringWo")
|
|
540
|
+
def has_secret_string_wo(self) -> pulumi.Output[_builtins.bool]:
|
|
541
|
+
return pulumi.get(self, "has_secret_string_wo")
|
|
542
|
+
|
|
439
543
|
@_builtins.property
|
|
440
544
|
@pulumi.getter
|
|
441
545
|
def region(self) -> pulumi.Output[_builtins.str]:
|
|
@@ -468,6 +572,23 @@ class SecretVersion(pulumi.CustomResource):
|
|
|
468
572
|
"""
|
|
469
573
|
return pulumi.get(self, "secret_string")
|
|
470
574
|
|
|
575
|
+
@_builtins.property
|
|
576
|
+
@pulumi.getter(name="secretStringWo")
|
|
577
|
+
def secret_string_wo(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
578
|
+
"""
|
|
579
|
+
**NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
|
|
580
|
+
Specifies text data that you want to encrypt and store in this version of the secret. This is required if `secret_binary` or `secret_string` is not set.
|
|
581
|
+
"""
|
|
582
|
+
return pulumi.get(self, "secret_string_wo")
|
|
583
|
+
|
|
584
|
+
@_builtins.property
|
|
585
|
+
@pulumi.getter(name="secretStringWoVersion")
|
|
586
|
+
def secret_string_wo_version(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
587
|
+
"""
|
|
588
|
+
Used together with `secret_string_wo` to trigger an update. Increment this value when an update to `secret_string_wo` is required.
|
|
589
|
+
"""
|
|
590
|
+
return pulumi.get(self, "secret_string_wo_version")
|
|
591
|
+
|
|
471
592
|
@_builtins.property
|
|
472
593
|
@pulumi.getter(name="versionId")
|
|
473
594
|
def version_id(self) -> pulumi.Output[_builtins.str]:
|
pulumi_aws/ssm/parameter.py
CHANGED
|
@@ -32,7 +32,9 @@ class ParameterArgs:
|
|
|
32
32
|
region: Optional[pulumi.Input[_builtins.str]] = None,
|
|
33
33
|
tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
|
|
34
34
|
tier: Optional[pulumi.Input[_builtins.str]] = None,
|
|
35
|
-
value: Optional[pulumi.Input[_builtins.str]] = None
|
|
35
|
+
value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
36
|
+
value_wo: Optional[pulumi.Input[_builtins.str]] = None,
|
|
37
|
+
value_wo_version: Optional[pulumi.Input[_builtins.int]] = None):
|
|
36
38
|
"""
|
|
37
39
|
The set of arguments for constructing a Parameter resource.
|
|
38
40
|
:param pulumi.Input[Union[_builtins.str, 'ParameterType']] type: Type of the parameter. Valid types are `String`, `StringList` and `SecureString`.
|
|
@@ -50,6 +52,11 @@ class ParameterArgs:
|
|
|
50
52
|
:param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] tags: Map of tags to assign to the object. If configured with a provider `default_tags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
|
|
51
53
|
:param pulumi.Input[_builtins.str] tier: Parameter tier to assign to the parameter. If not specified, will use the default parameter tier for the region. Valid tiers are `Standard`, `Advanced`, and `Intelligent-Tiering`. Downgrading an `Advanced` tier parameter to `Standard` will recreate the resource. For more information on parameter tiers, see the [AWS SSM Parameter tier comparison and guide](https://docs.aws.amazon.com/systems-manager/latest/userguide/parameter-store-advanced-parameters.html).
|
|
52
54
|
:param pulumi.Input[_builtins.str] value: Value of the parameter. This value is always marked as sensitive in the pulumi preview output, regardless of `type
|
|
55
|
+
:param pulumi.Input[_builtins.str] value_wo: **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
|
|
56
|
+
Value of the parameter. This value is always marked as sensitive in the pulumi preview output, regardless of `type`. Additionally, `write-only` values are never stored to state. `value_wo_version` can be used to trigger an update and is required with this argument.
|
|
57
|
+
:param pulumi.Input[_builtins.int] value_wo_version: Used together with `value_wo` to trigger an update. Increment this value when an update to the `value_wo` is required.
|
|
58
|
+
|
|
59
|
+
> **NOTE:** `aws:ssm:integration` data_type parameters must be of the type `SecureString` and the name must start with the prefix `/d9d01087-4a3f-49e0-b0b4-d568d7826553/ssm/integrations/webhook/`. See [here](https://docs.aws.amazon.com/systems-manager/latest/userguide/creating-integrations.html) for information on the usage of `aws:ssm:integration` parameters.
|
|
53
60
|
"""
|
|
54
61
|
pulumi.set(__self__, "type", type)
|
|
55
62
|
if allowed_pattern is not None:
|
|
@@ -76,6 +83,10 @@ class ParameterArgs:
|
|
|
76
83
|
pulumi.set(__self__, "tier", tier)
|
|
77
84
|
if value is not None:
|
|
78
85
|
pulumi.set(__self__, "value", value)
|
|
86
|
+
if value_wo is not None:
|
|
87
|
+
pulumi.set(__self__, "value_wo", value_wo)
|
|
88
|
+
if value_wo_version is not None:
|
|
89
|
+
pulumi.set(__self__, "value_wo_version", value_wo_version)
|
|
79
90
|
|
|
80
91
|
@_builtins.property
|
|
81
92
|
@pulumi.getter
|
|
@@ -235,6 +246,33 @@ class ParameterArgs:
|
|
|
235
246
|
def value(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
236
247
|
pulumi.set(self, "value", value)
|
|
237
248
|
|
|
249
|
+
@_builtins.property
|
|
250
|
+
@pulumi.getter(name="valueWo")
|
|
251
|
+
def value_wo(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
252
|
+
"""
|
|
253
|
+
**NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
|
|
254
|
+
Value of the parameter. This value is always marked as sensitive in the pulumi preview output, regardless of `type`. Additionally, `write-only` values are never stored to state. `value_wo_version` can be used to trigger an update and is required with this argument.
|
|
255
|
+
"""
|
|
256
|
+
return pulumi.get(self, "value_wo")
|
|
257
|
+
|
|
258
|
+
@value_wo.setter
|
|
259
|
+
def value_wo(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
260
|
+
pulumi.set(self, "value_wo", value)
|
|
261
|
+
|
|
262
|
+
@_builtins.property
|
|
263
|
+
@pulumi.getter(name="valueWoVersion")
|
|
264
|
+
def value_wo_version(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
265
|
+
"""
|
|
266
|
+
Used together with `value_wo` to trigger an update. Increment this value when an update to the `value_wo` is required.
|
|
267
|
+
|
|
268
|
+
> **NOTE:** `aws:ssm:integration` data_type parameters must be of the type `SecureString` and the name must start with the prefix `/d9d01087-4a3f-49e0-b0b4-d568d7826553/ssm/integrations/webhook/`. See [here](https://docs.aws.amazon.com/systems-manager/latest/userguide/creating-integrations.html) for information on the usage of `aws:ssm:integration` parameters.
|
|
269
|
+
"""
|
|
270
|
+
return pulumi.get(self, "value_wo_version")
|
|
271
|
+
|
|
272
|
+
@value_wo_version.setter
|
|
273
|
+
def value_wo_version(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
274
|
+
pulumi.set(self, "value_wo_version", value)
|
|
275
|
+
|
|
238
276
|
|
|
239
277
|
@pulumi.input_type
|
|
240
278
|
class _ParameterState:
|
|
@@ -243,6 +281,7 @@ class _ParameterState:
|
|
|
243
281
|
arn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
244
282
|
data_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
245
283
|
description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
284
|
+
has_value_wo: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
246
285
|
insecure_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
247
286
|
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
248
287
|
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
@@ -253,6 +292,8 @@ class _ParameterState:
|
|
|
253
292
|
tier: Optional[pulumi.Input[_builtins.str]] = None,
|
|
254
293
|
type: Optional[pulumi.Input[Union[_builtins.str, 'ParameterType']]] = None,
|
|
255
294
|
value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
295
|
+
value_wo: Optional[pulumi.Input[_builtins.str]] = None,
|
|
296
|
+
value_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
|
|
256
297
|
version: Optional[pulumi.Input[_builtins.int]] = None):
|
|
257
298
|
"""
|
|
258
299
|
Input properties used for looking up and filtering Parameter resources.
|
|
@@ -260,6 +301,7 @@ class _ParameterState:
|
|
|
260
301
|
:param pulumi.Input[_builtins.str] arn: ARN of the parameter.
|
|
261
302
|
:param pulumi.Input[_builtins.str] data_type: Data type of the parameter. Valid values: `text`, `aws:ssm:integration` and `aws:ec2:image` for AMI format, see the [Native parameter support for Amazon Machine Image IDs](https://docs.aws.amazon.com/systems-manager/latest/userguide/parameter-store-ec2-aliases.html).
|
|
262
303
|
:param pulumi.Input[_builtins.str] description: Description of the parameter.
|
|
304
|
+
:param pulumi.Input[_builtins.bool] has_value_wo: Indicates whether the resource has a `value_wo` set.
|
|
263
305
|
:param pulumi.Input[_builtins.str] insecure_value: Value of the parameter. **Use caution:** This value is _never_ marked as sensitive in the pulumi preview output. This argument is not valid with a `type` of `SecureString`.
|
|
264
306
|
:param pulumi.Input[_builtins.str] key_id: KMS key ID or ARN for encrypting a SecureString.
|
|
265
307
|
:param pulumi.Input[_builtins.str] name: Name of the parameter. If the name contains a path (e.g., any forward slashes (`/`)), it must be fully qualified with a leading forward slash (`/`). For additional requirements and constraints, see the [AWS SSM User Guide](https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-parameter-name-constraints.html).
|
|
@@ -272,6 +314,11 @@ class _ParameterState:
|
|
|
272
314
|
|
|
273
315
|
The following arguments are optional:
|
|
274
316
|
:param pulumi.Input[_builtins.str] value: Value of the parameter. This value is always marked as sensitive in the pulumi preview output, regardless of `type
|
|
317
|
+
:param pulumi.Input[_builtins.str] value_wo: **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
|
|
318
|
+
Value of the parameter. This value is always marked as sensitive in the pulumi preview output, regardless of `type`. Additionally, `write-only` values are never stored to state. `value_wo_version` can be used to trigger an update and is required with this argument.
|
|
319
|
+
:param pulumi.Input[_builtins.int] value_wo_version: Used together with `value_wo` to trigger an update. Increment this value when an update to the `value_wo` is required.
|
|
320
|
+
|
|
321
|
+
> **NOTE:** `aws:ssm:integration` data_type parameters must be of the type `SecureString` and the name must start with the prefix `/d9d01087-4a3f-49e0-b0b4-d568d7826553/ssm/integrations/webhook/`. See [here](https://docs.aws.amazon.com/systems-manager/latest/userguide/creating-integrations.html) for information on the usage of `aws:ssm:integration` parameters.
|
|
275
322
|
:param pulumi.Input[_builtins.int] version: Version of the parameter.
|
|
276
323
|
"""
|
|
277
324
|
if allowed_pattern is not None:
|
|
@@ -282,6 +329,8 @@ class _ParameterState:
|
|
|
282
329
|
pulumi.set(__self__, "data_type", data_type)
|
|
283
330
|
if description is not None:
|
|
284
331
|
pulumi.set(__self__, "description", description)
|
|
332
|
+
if has_value_wo is not None:
|
|
333
|
+
pulumi.set(__self__, "has_value_wo", has_value_wo)
|
|
285
334
|
if insecure_value is not None:
|
|
286
335
|
pulumi.set(__self__, "insecure_value", insecure_value)
|
|
287
336
|
if key_id is not None:
|
|
@@ -302,6 +351,10 @@ class _ParameterState:
|
|
|
302
351
|
pulumi.set(__self__, "type", type)
|
|
303
352
|
if value is not None:
|
|
304
353
|
pulumi.set(__self__, "value", value)
|
|
354
|
+
if value_wo is not None:
|
|
355
|
+
pulumi.set(__self__, "value_wo", value_wo)
|
|
356
|
+
if value_wo_version is not None:
|
|
357
|
+
pulumi.set(__self__, "value_wo_version", value_wo_version)
|
|
305
358
|
if version is not None:
|
|
306
359
|
pulumi.set(__self__, "version", version)
|
|
307
360
|
|
|
@@ -353,6 +406,18 @@ class _ParameterState:
|
|
|
353
406
|
def description(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
354
407
|
pulumi.set(self, "description", value)
|
|
355
408
|
|
|
409
|
+
@_builtins.property
|
|
410
|
+
@pulumi.getter(name="hasValueWo")
|
|
411
|
+
def has_value_wo(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
412
|
+
"""
|
|
413
|
+
Indicates whether the resource has a `value_wo` set.
|
|
414
|
+
"""
|
|
415
|
+
return pulumi.get(self, "has_value_wo")
|
|
416
|
+
|
|
417
|
+
@has_value_wo.setter
|
|
418
|
+
def has_value_wo(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
419
|
+
pulumi.set(self, "has_value_wo", value)
|
|
420
|
+
|
|
356
421
|
@_builtins.property
|
|
357
422
|
@pulumi.getter(name="insecureValue")
|
|
358
423
|
def insecure_value(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
@@ -475,6 +540,33 @@ class _ParameterState:
|
|
|
475
540
|
def value(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
476
541
|
pulumi.set(self, "value", value)
|
|
477
542
|
|
|
543
|
+
@_builtins.property
|
|
544
|
+
@pulumi.getter(name="valueWo")
|
|
545
|
+
def value_wo(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
546
|
+
"""
|
|
547
|
+
**NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
|
|
548
|
+
Value of the parameter. This value is always marked as sensitive in the pulumi preview output, regardless of `type`. Additionally, `write-only` values are never stored to state. `value_wo_version` can be used to trigger an update and is required with this argument.
|
|
549
|
+
"""
|
|
550
|
+
return pulumi.get(self, "value_wo")
|
|
551
|
+
|
|
552
|
+
@value_wo.setter
|
|
553
|
+
def value_wo(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
554
|
+
pulumi.set(self, "value_wo", value)
|
|
555
|
+
|
|
556
|
+
@_builtins.property
|
|
557
|
+
@pulumi.getter(name="valueWoVersion")
|
|
558
|
+
def value_wo_version(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
559
|
+
"""
|
|
560
|
+
Used together with `value_wo` to trigger an update. Increment this value when an update to the `value_wo` is required.
|
|
561
|
+
|
|
562
|
+
> **NOTE:** `aws:ssm:integration` data_type parameters must be of the type `SecureString` and the name must start with the prefix `/d9d01087-4a3f-49e0-b0b4-d568d7826553/ssm/integrations/webhook/`. See [here](https://docs.aws.amazon.com/systems-manager/latest/userguide/creating-integrations.html) for information on the usage of `aws:ssm:integration` parameters.
|
|
563
|
+
"""
|
|
564
|
+
return pulumi.get(self, "value_wo_version")
|
|
565
|
+
|
|
566
|
+
@value_wo_version.setter
|
|
567
|
+
def value_wo_version(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
568
|
+
pulumi.set(self, "value_wo_version", value)
|
|
569
|
+
|
|
478
570
|
@_builtins.property
|
|
479
571
|
@pulumi.getter
|
|
480
572
|
def version(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
@@ -507,6 +599,8 @@ class Parameter(pulumi.CustomResource):
|
|
|
507
599
|
tier: Optional[pulumi.Input[_builtins.str]] = None,
|
|
508
600
|
type: Optional[pulumi.Input[Union[_builtins.str, 'ParameterType']]] = None,
|
|
509
601
|
value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
602
|
+
value_wo: Optional[pulumi.Input[_builtins.str]] = None,
|
|
603
|
+
value_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
|
|
510
604
|
__props__=None):
|
|
511
605
|
"""
|
|
512
606
|
Provides an SSM Parameter resource.
|
|
@@ -591,6 +685,11 @@ class Parameter(pulumi.CustomResource):
|
|
|
591
685
|
|
|
592
686
|
The following arguments are optional:
|
|
593
687
|
:param pulumi.Input[_builtins.str] value: Value of the parameter. This value is always marked as sensitive in the pulumi preview output, regardless of `type
|
|
688
|
+
:param pulumi.Input[_builtins.str] value_wo: **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
|
|
689
|
+
Value of the parameter. This value is always marked as sensitive in the pulumi preview output, regardless of `type`. Additionally, `write-only` values are never stored to state. `value_wo_version` can be used to trigger an update and is required with this argument.
|
|
690
|
+
:param pulumi.Input[_builtins.int] value_wo_version: Used together with `value_wo` to trigger an update. Increment this value when an update to the `value_wo` is required.
|
|
691
|
+
|
|
692
|
+
> **NOTE:** `aws:ssm:integration` data_type parameters must be of the type `SecureString` and the name must start with the prefix `/d9d01087-4a3f-49e0-b0b4-d568d7826553/ssm/integrations/webhook/`. See [here](https://docs.aws.amazon.com/systems-manager/latest/userguide/creating-integrations.html) for information on the usage of `aws:ssm:integration` parameters.
|
|
594
693
|
"""
|
|
595
694
|
...
|
|
596
695
|
@overload
|
|
@@ -692,6 +791,8 @@ class Parameter(pulumi.CustomResource):
|
|
|
692
791
|
tier: Optional[pulumi.Input[_builtins.str]] = None,
|
|
693
792
|
type: Optional[pulumi.Input[Union[_builtins.str, 'ParameterType']]] = None,
|
|
694
793
|
value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
794
|
+
value_wo: Optional[pulumi.Input[_builtins.str]] = None,
|
|
795
|
+
value_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
|
|
695
796
|
__props__=None):
|
|
696
797
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
697
798
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -716,9 +817,12 @@ class Parameter(pulumi.CustomResource):
|
|
|
716
817
|
raise TypeError("Missing required property 'type'")
|
|
717
818
|
__props__.__dict__["type"] = type
|
|
718
819
|
__props__.__dict__["value"] = None if value is None else pulumi.Output.secret(value)
|
|
820
|
+
__props__.__dict__["value_wo"] = None if value_wo is None else pulumi.Output.secret(value_wo)
|
|
821
|
+
__props__.__dict__["value_wo_version"] = value_wo_version
|
|
822
|
+
__props__.__dict__["has_value_wo"] = None
|
|
719
823
|
__props__.__dict__["tags_all"] = None
|
|
720
824
|
__props__.__dict__["version"] = None
|
|
721
|
-
secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["value"])
|
|
825
|
+
secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["value", "valueWo"])
|
|
722
826
|
opts = pulumi.ResourceOptions.merge(opts, secret_opts)
|
|
723
827
|
super(Parameter, __self__).__init__(
|
|
724
828
|
'aws:ssm/parameter:Parameter',
|
|
@@ -734,6 +838,7 @@ class Parameter(pulumi.CustomResource):
|
|
|
734
838
|
arn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
735
839
|
data_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
736
840
|
description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
841
|
+
has_value_wo: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
737
842
|
insecure_value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
738
843
|
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
739
844
|
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
@@ -744,6 +849,8 @@ class Parameter(pulumi.CustomResource):
|
|
|
744
849
|
tier: Optional[pulumi.Input[_builtins.str]] = None,
|
|
745
850
|
type: Optional[pulumi.Input[Union[_builtins.str, 'ParameterType']]] = None,
|
|
746
851
|
value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
852
|
+
value_wo: Optional[pulumi.Input[_builtins.str]] = None,
|
|
853
|
+
value_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
|
|
747
854
|
version: Optional[pulumi.Input[_builtins.int]] = None) -> 'Parameter':
|
|
748
855
|
"""
|
|
749
856
|
Get an existing Parameter resource's state with the given name, id, and optional extra
|
|
@@ -756,6 +863,7 @@ class Parameter(pulumi.CustomResource):
|
|
|
756
863
|
:param pulumi.Input[_builtins.str] arn: ARN of the parameter.
|
|
757
864
|
:param pulumi.Input[_builtins.str] data_type: Data type of the parameter. Valid values: `text`, `aws:ssm:integration` and `aws:ec2:image` for AMI format, see the [Native parameter support for Amazon Machine Image IDs](https://docs.aws.amazon.com/systems-manager/latest/userguide/parameter-store-ec2-aliases.html).
|
|
758
865
|
:param pulumi.Input[_builtins.str] description: Description of the parameter.
|
|
866
|
+
:param pulumi.Input[_builtins.bool] has_value_wo: Indicates whether the resource has a `value_wo` set.
|
|
759
867
|
:param pulumi.Input[_builtins.str] insecure_value: Value of the parameter. **Use caution:** This value is _never_ marked as sensitive in the pulumi preview output. This argument is not valid with a `type` of `SecureString`.
|
|
760
868
|
:param pulumi.Input[_builtins.str] key_id: KMS key ID or ARN for encrypting a SecureString.
|
|
761
869
|
:param pulumi.Input[_builtins.str] name: Name of the parameter. If the name contains a path (e.g., any forward slashes (`/`)), it must be fully qualified with a leading forward slash (`/`). For additional requirements and constraints, see the [AWS SSM User Guide](https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-parameter-name-constraints.html).
|
|
@@ -768,6 +876,11 @@ class Parameter(pulumi.CustomResource):
|
|
|
768
876
|
|
|
769
877
|
The following arguments are optional:
|
|
770
878
|
:param pulumi.Input[_builtins.str] value: Value of the parameter. This value is always marked as sensitive in the pulumi preview output, regardless of `type
|
|
879
|
+
:param pulumi.Input[_builtins.str] value_wo: **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
|
|
880
|
+
Value of the parameter. This value is always marked as sensitive in the pulumi preview output, regardless of `type`. Additionally, `write-only` values are never stored to state. `value_wo_version` can be used to trigger an update and is required with this argument.
|
|
881
|
+
:param pulumi.Input[_builtins.int] value_wo_version: Used together with `value_wo` to trigger an update. Increment this value when an update to the `value_wo` is required.
|
|
882
|
+
|
|
883
|
+
> **NOTE:** `aws:ssm:integration` data_type parameters must be of the type `SecureString` and the name must start with the prefix `/d9d01087-4a3f-49e0-b0b4-d568d7826553/ssm/integrations/webhook/`. See [here](https://docs.aws.amazon.com/systems-manager/latest/userguide/creating-integrations.html) for information on the usage of `aws:ssm:integration` parameters.
|
|
771
884
|
:param pulumi.Input[_builtins.int] version: Version of the parameter.
|
|
772
885
|
"""
|
|
773
886
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
@@ -778,6 +891,7 @@ class Parameter(pulumi.CustomResource):
|
|
|
778
891
|
__props__.__dict__["arn"] = arn
|
|
779
892
|
__props__.__dict__["data_type"] = data_type
|
|
780
893
|
__props__.__dict__["description"] = description
|
|
894
|
+
__props__.__dict__["has_value_wo"] = has_value_wo
|
|
781
895
|
__props__.__dict__["insecure_value"] = insecure_value
|
|
782
896
|
__props__.__dict__["key_id"] = key_id
|
|
783
897
|
__props__.__dict__["name"] = name
|
|
@@ -788,6 +902,8 @@ class Parameter(pulumi.CustomResource):
|
|
|
788
902
|
__props__.__dict__["tier"] = tier
|
|
789
903
|
__props__.__dict__["type"] = type
|
|
790
904
|
__props__.__dict__["value"] = value
|
|
905
|
+
__props__.__dict__["value_wo"] = value_wo
|
|
906
|
+
__props__.__dict__["value_wo_version"] = value_wo_version
|
|
791
907
|
__props__.__dict__["version"] = version
|
|
792
908
|
return Parameter(resource_name, opts=opts, __props__=__props__)
|
|
793
909
|
|
|
@@ -823,6 +939,14 @@ class Parameter(pulumi.CustomResource):
|
|
|
823
939
|
"""
|
|
824
940
|
return pulumi.get(self, "description")
|
|
825
941
|
|
|
942
|
+
@_builtins.property
|
|
943
|
+
@pulumi.getter(name="hasValueWo")
|
|
944
|
+
def has_value_wo(self) -> pulumi.Output[_builtins.bool]:
|
|
945
|
+
"""
|
|
946
|
+
Indicates whether the resource has a `value_wo` set.
|
|
947
|
+
"""
|
|
948
|
+
return pulumi.get(self, "has_value_wo")
|
|
949
|
+
|
|
826
950
|
@_builtins.property
|
|
827
951
|
@pulumi.getter(name="insecureValue")
|
|
828
952
|
def insecure_value(self) -> pulumi.Output[_builtins.str]:
|
|
@@ -905,6 +1029,25 @@ class Parameter(pulumi.CustomResource):
|
|
|
905
1029
|
"""
|
|
906
1030
|
return pulumi.get(self, "value")
|
|
907
1031
|
|
|
1032
|
+
@_builtins.property
|
|
1033
|
+
@pulumi.getter(name="valueWo")
|
|
1034
|
+
def value_wo(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1035
|
+
"""
|
|
1036
|
+
**NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
|
|
1037
|
+
Value of the parameter. This value is always marked as sensitive in the pulumi preview output, regardless of `type`. Additionally, `write-only` values are never stored to state. `value_wo_version` can be used to trigger an update and is required with this argument.
|
|
1038
|
+
"""
|
|
1039
|
+
return pulumi.get(self, "value_wo")
|
|
1040
|
+
|
|
1041
|
+
@_builtins.property
|
|
1042
|
+
@pulumi.getter(name="valueWoVersion")
|
|
1043
|
+
def value_wo_version(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
1044
|
+
"""
|
|
1045
|
+
Used together with `value_wo` to trigger an update. Increment this value when an update to the `value_wo` is required.
|
|
1046
|
+
|
|
1047
|
+
> **NOTE:** `aws:ssm:integration` data_type parameters must be of the type `SecureString` and the name must start with the prefix `/d9d01087-4a3f-49e0-b0b4-d568d7826553/ssm/integrations/webhook/`. See [here](https://docs.aws.amazon.com/systems-manager/latest/userguide/creating-integrations.html) for information on the usage of `aws:ssm:integration` parameters.
|
|
1048
|
+
"""
|
|
1049
|
+
return pulumi.get(self, "value_wo_version")
|
|
1050
|
+
|
|
908
1051
|
@_builtins.property
|
|
909
1052
|
@pulumi.getter
|
|
910
1053
|
def version(self) -> pulumi.Output[_builtins.int]:
|