pulumi-azuread 5.48.0a1706744699__py3-none-any.whl → 6.8.0a1766208344__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-azuread might be problematic. Click here for more details.
- pulumi_azuread/__init__.py +48 -1
- pulumi_azuread/_inputs.py +3803 -919
- pulumi_azuread/_utilities.py +52 -12
- pulumi_azuread/access_package.py +84 -78
- pulumi_azuread/access_package_assignment_policy.py +202 -196
- pulumi_azuread/access_package_catalog.py +82 -76
- pulumi_azuread/access_package_catalog_role_assignment.py +73 -67
- pulumi_azuread/access_package_resource_catalog_association.py +73 -67
- pulumi_azuread/access_package_resource_package_association.py +79 -73
- pulumi_azuread/administrative_unit.py +120 -100
- pulumi_azuread/administrative_unit_member.py +66 -50
- pulumi_azuread/administrative_unit_role_member.py +75 -69
- pulumi_azuread/app_role_assignment.py +164 -264
- pulumi_azuread/application.py +766 -692
- pulumi_azuread/application_api_access.py +84 -80
- pulumi_azuread/application_app_role.py +120 -116
- pulumi_azuread/application_certificate.py +349 -211
- pulumi_azuread/application_fallback_public_client.py +50 -44
- pulumi_azuread/application_federated_identity_credential.py +142 -197
- pulumi_azuread/application_from_template.py +90 -84
- pulumi_azuread/application_identifier_uri.py +56 -52
- pulumi_azuread/application_known_clients.py +50 -44
- pulumi_azuread/application_optional_claims.py +87 -81
- pulumi_azuread/application_owner.py +76 -42
- pulumi_azuread/application_password.py +159 -205
- pulumi_azuread/application_permission_scope.py +160 -156
- pulumi_azuread/application_pre_authorized.py +120 -236
- pulumi_azuread/application_redirect_uris.py +75 -69
- pulumi_azuread/application_registration.py +315 -309
- pulumi_azuread/authentication_strength_policy.py +73 -67
- pulumi_azuread/claims_mapping_policy.py +48 -42
- pulumi_azuread/conditional_access_policy.py +248 -232
- pulumi_azuread/config/__init__.py +2 -1
- pulumi_azuread/config/__init__.pyi +23 -17
- pulumi_azuread/config/vars.py +47 -37
- pulumi_azuread/custom_directory_role.py +128 -122
- pulumi_azuread/directory_role.py +60 -54
- pulumi_azuread/directory_role_assignment.py +194 -181
- pulumi_azuread/directory_role_eligibility_schedule_request.py +86 -80
- pulumi_azuread/directory_role_member.py +54 -48
- pulumi_azuread/get_access_package.py +45 -31
- pulumi_azuread/get_access_package_catalog.py +40 -27
- pulumi_azuread/get_access_package_catalog_role.py +39 -25
- pulumi_azuread/get_administrative_unit.py +42 -27
- pulumi_azuread/get_application.py +135 -94
- pulumi_azuread/get_application_published_app_ids.py +42 -47
- pulumi_azuread/get_application_template.py +49 -33
- pulumi_azuread/get_client_config.py +24 -15
- pulumi_azuread/get_directory_object.py +32 -21
- pulumi_azuread/get_directory_role_templates.py +20 -12
- pulumi_azuread/get_directory_roles.py +23 -14
- pulumi_azuread/get_domains.py +65 -46
- pulumi_azuread/get_group.py +147 -88
- pulumi_azuread/get_group_role_management_policy.py +178 -0
- pulumi_azuread/get_groups.py +71 -51
- pulumi_azuread/get_named_location.py +47 -22
- pulumi_azuread/get_service_principal.py +108 -90
- pulumi_azuread/get_service_principals.py +60 -64
- pulumi_azuread/get_user.py +186 -118
- pulumi_azuread/get_users.py +96 -53
- pulumi_azuread/group.py +622 -464
- pulumi_azuread/group_member.py +56 -50
- pulumi_azuread/group_role_management_policy.py +544 -0
- pulumi_azuread/group_without_members.py +1610 -0
- pulumi_azuread/invitation.py +126 -120
- pulumi_azuread/named_location.py +90 -76
- pulumi_azuread/outputs.py +2844 -1308
- pulumi_azuread/privileged_access_group_assignment_schedule.py +695 -0
- pulumi_azuread/privileged_access_group_eligibility_schedule.py +695 -0
- pulumi_azuread/provider.py +292 -246
- pulumi_azuread/pulumi-plugin.json +2 -1
- pulumi_azuread/service_principal.py +400 -461
- pulumi_azuread/service_principal_certificate.py +230 -145
- pulumi_azuread/service_principal_claims_mapping_policy_assignment.py +53 -47
- pulumi_azuread/service_principal_delegated_permission_grant.py +146 -140
- pulumi_azuread/service_principal_password.py +156 -141
- pulumi_azuread/service_principal_token_signing_certificate.py +119 -124
- pulumi_azuread/synchronization_job.py +105 -111
- pulumi_azuread/synchronization_job_provision_on_demand.py +396 -0
- pulumi_azuread/synchronization_secret.py +64 -70
- pulumi_azuread/user.py +776 -730
- pulumi_azuread/user_flow_attribute.py +76 -70
- {pulumi_azuread-5.48.0a1706744699.dist-info → pulumi_azuread-6.8.0a1766208344.dist-info}/METADATA +21 -20
- pulumi_azuread-6.8.0a1766208344.dist-info/RECORD +87 -0
- {pulumi_azuread-5.48.0a1706744699.dist-info → pulumi_azuread-6.8.0a1766208344.dist-info}/WHEEL +1 -1
- pulumi_azuread-5.48.0a1706744699.dist-info/RECORD +0 -81
- {pulumi_azuread-5.48.0a1706744699.dist-info → pulumi_azuread-6.8.0a1766208344.dist-info}/top_level.txt +0 -0
|
@@ -1,12 +1,17 @@
|
|
|
1
1
|
# coding=utf-8
|
|
2
|
-
# *** WARNING: this file was generated by
|
|
2
|
+
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import
|
|
5
|
+
import builtins as _builtins
|
|
6
6
|
import warnings
|
|
7
|
+
import sys
|
|
7
8
|
import pulumi
|
|
8
9
|
import pulumi.runtime
|
|
9
10
|
from typing import Any, Mapping, Optional, Sequence, Union, overload
|
|
11
|
+
if sys.version_info >= (3, 11):
|
|
12
|
+
from typing import NotRequired, TypedDict, TypeAlias
|
|
13
|
+
else:
|
|
14
|
+
from typing_extensions import NotRequired, TypedDict, TypeAlias
|
|
10
15
|
from . import _utilities
|
|
11
16
|
|
|
12
17
|
__all__ = ['ApplicationFederatedIdentityCredentialArgs', 'ApplicationFederatedIdentityCredential']
|
|
@@ -14,154 +19,124 @@ __all__ = ['ApplicationFederatedIdentityCredentialArgs', 'ApplicationFederatedId
|
|
|
14
19
|
@pulumi.input_type
|
|
15
20
|
class ApplicationFederatedIdentityCredentialArgs:
|
|
16
21
|
def __init__(__self__, *,
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
description: Optional[pulumi.Input[str]] = None):
|
|
22
|
+
application_id: pulumi.Input[_builtins.str],
|
|
23
|
+
audiences: pulumi.Input[Sequence[pulumi.Input[_builtins.str]]],
|
|
24
|
+
display_name: pulumi.Input[_builtins.str],
|
|
25
|
+
issuer: pulumi.Input[_builtins.str],
|
|
26
|
+
subject: pulumi.Input[_builtins.str],
|
|
27
|
+
description: Optional[pulumi.Input[_builtins.str]] = None):
|
|
24
28
|
"""
|
|
25
29
|
The set of arguments for constructing a ApplicationFederatedIdentityCredential resource.
|
|
26
|
-
:param pulumi.Input[
|
|
27
|
-
:param pulumi.Input[str]
|
|
28
|
-
:param pulumi.Input[str]
|
|
29
|
-
:param pulumi.Input[str]
|
|
30
|
-
:param pulumi.Input[str]
|
|
31
|
-
:param pulumi.Input[str]
|
|
32
|
-
|
|
33
|
-
""
|
|
30
|
+
:param pulumi.Input[_builtins.str] application_id: The resource ID of the application for which this federated identity credential should be created. Changing this field forces a new resource to be created.
|
|
31
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] audiences: List of audiences that can appear in the external token. This specifies what should be accepted in the `aud` claim of incoming tokens.
|
|
32
|
+
:param pulumi.Input[_builtins.str] display_name: A unique display name for the federated identity credential. Changing this forces a new resource to be created.
|
|
33
|
+
:param pulumi.Input[_builtins.str] issuer: The URL of the external identity provider, which must match the issuer claim of the external token being exchanged. The combination of the values of issuer and subject must be unique on the app.
|
|
34
|
+
:param pulumi.Input[_builtins.str] subject: The identifier of the external software workload within the external identity provider. The combination of issuer and subject must be unique on the app.
|
|
35
|
+
:param pulumi.Input[_builtins.str] description: A description for the federated identity credential.
|
|
36
|
+
"""
|
|
37
|
+
pulumi.set(__self__, "application_id", application_id)
|
|
34
38
|
pulumi.set(__self__, "audiences", audiences)
|
|
35
39
|
pulumi.set(__self__, "display_name", display_name)
|
|
36
40
|
pulumi.set(__self__, "issuer", issuer)
|
|
37
41
|
pulumi.set(__self__, "subject", subject)
|
|
38
|
-
if application_id is not None:
|
|
39
|
-
pulumi.set(__self__, "application_id", application_id)
|
|
40
|
-
if application_object_id is not None:
|
|
41
|
-
warnings.warn("""The `application_object_id` property has been replaced with the `application_id` property and will be removed in version 3.0 of the AzureAD provider""", DeprecationWarning)
|
|
42
|
-
pulumi.log.warn("""application_object_id is deprecated: The `application_object_id` property has been replaced with the `application_id` property and will be removed in version 3.0 of the AzureAD provider""")
|
|
43
|
-
if application_object_id is not None:
|
|
44
|
-
pulumi.set(__self__, "application_object_id", application_object_id)
|
|
45
42
|
if description is not None:
|
|
46
43
|
pulumi.set(__self__, "description", description)
|
|
47
44
|
|
|
48
|
-
@property
|
|
45
|
+
@_builtins.property
|
|
46
|
+
@pulumi.getter(name="applicationId")
|
|
47
|
+
def application_id(self) -> pulumi.Input[_builtins.str]:
|
|
48
|
+
"""
|
|
49
|
+
The resource ID of the application for which this federated identity credential should be created. Changing this field forces a new resource to be created.
|
|
50
|
+
"""
|
|
51
|
+
return pulumi.get(self, "application_id")
|
|
52
|
+
|
|
53
|
+
@application_id.setter
|
|
54
|
+
def application_id(self, value: pulumi.Input[_builtins.str]):
|
|
55
|
+
pulumi.set(self, "application_id", value)
|
|
56
|
+
|
|
57
|
+
@_builtins.property
|
|
49
58
|
@pulumi.getter
|
|
50
|
-
def audiences(self) -> pulumi.Input[Sequence[pulumi.Input[str]]]:
|
|
59
|
+
def audiences(self) -> pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]:
|
|
51
60
|
"""
|
|
52
61
|
List of audiences that can appear in the external token. This specifies what should be accepted in the `aud` claim of incoming tokens.
|
|
53
62
|
"""
|
|
54
63
|
return pulumi.get(self, "audiences")
|
|
55
64
|
|
|
56
65
|
@audiences.setter
|
|
57
|
-
def audiences(self, value: pulumi.Input[Sequence[pulumi.Input[str]]]):
|
|
66
|
+
def audiences(self, value: pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]):
|
|
58
67
|
pulumi.set(self, "audiences", value)
|
|
59
68
|
|
|
60
|
-
@property
|
|
69
|
+
@_builtins.property
|
|
61
70
|
@pulumi.getter(name="displayName")
|
|
62
|
-
def display_name(self) -> pulumi.Input[str]:
|
|
71
|
+
def display_name(self) -> pulumi.Input[_builtins.str]:
|
|
63
72
|
"""
|
|
64
73
|
A unique display name for the federated identity credential. Changing this forces a new resource to be created.
|
|
65
74
|
"""
|
|
66
75
|
return pulumi.get(self, "display_name")
|
|
67
76
|
|
|
68
77
|
@display_name.setter
|
|
69
|
-
def display_name(self, value: pulumi.Input[str]):
|
|
78
|
+
def display_name(self, value: pulumi.Input[_builtins.str]):
|
|
70
79
|
pulumi.set(self, "display_name", value)
|
|
71
80
|
|
|
72
|
-
@property
|
|
81
|
+
@_builtins.property
|
|
73
82
|
@pulumi.getter
|
|
74
|
-
def issuer(self) -> pulumi.Input[str]:
|
|
83
|
+
def issuer(self) -> pulumi.Input[_builtins.str]:
|
|
75
84
|
"""
|
|
76
85
|
The URL of the external identity provider, which must match the issuer claim of the external token being exchanged. The combination of the values of issuer and subject must be unique on the app.
|
|
77
86
|
"""
|
|
78
87
|
return pulumi.get(self, "issuer")
|
|
79
88
|
|
|
80
89
|
@issuer.setter
|
|
81
|
-
def issuer(self, value: pulumi.Input[str]):
|
|
90
|
+
def issuer(self, value: pulumi.Input[_builtins.str]):
|
|
82
91
|
pulumi.set(self, "issuer", value)
|
|
83
92
|
|
|
84
|
-
@property
|
|
93
|
+
@_builtins.property
|
|
85
94
|
@pulumi.getter
|
|
86
|
-
def subject(self) -> pulumi.Input[str]:
|
|
95
|
+
def subject(self) -> pulumi.Input[_builtins.str]:
|
|
87
96
|
"""
|
|
88
97
|
The identifier of the external software workload within the external identity provider. The combination of issuer and subject must be unique on the app.
|
|
89
98
|
"""
|
|
90
99
|
return pulumi.get(self, "subject")
|
|
91
100
|
|
|
92
101
|
@subject.setter
|
|
93
|
-
def subject(self, value: pulumi.Input[str]):
|
|
102
|
+
def subject(self, value: pulumi.Input[_builtins.str]):
|
|
94
103
|
pulumi.set(self, "subject", value)
|
|
95
104
|
|
|
96
|
-
@property
|
|
97
|
-
@pulumi.getter(name="applicationId")
|
|
98
|
-
def application_id(self) -> Optional[pulumi.Input[str]]:
|
|
99
|
-
"""
|
|
100
|
-
The resource ID of the application for which this federated identity credential should be created. Changing this field forces a new resource to be created.
|
|
101
|
-
"""
|
|
102
|
-
return pulumi.get(self, "application_id")
|
|
103
|
-
|
|
104
|
-
@application_id.setter
|
|
105
|
-
def application_id(self, value: Optional[pulumi.Input[str]]):
|
|
106
|
-
pulumi.set(self, "application_id", value)
|
|
107
|
-
|
|
108
|
-
@property
|
|
109
|
-
@pulumi.getter(name="applicationObjectId")
|
|
110
|
-
def application_object_id(self) -> Optional[pulumi.Input[str]]:
|
|
111
|
-
"""
|
|
112
|
-
The object ID of the application for which this federated identity credential should be created
|
|
113
|
-
"""
|
|
114
|
-
warnings.warn("""The `application_object_id` property has been replaced with the `application_id` property and will be removed in version 3.0 of the AzureAD provider""", DeprecationWarning)
|
|
115
|
-
pulumi.log.warn("""application_object_id is deprecated: The `application_object_id` property has been replaced with the `application_id` property and will be removed in version 3.0 of the AzureAD provider""")
|
|
116
|
-
|
|
117
|
-
return pulumi.get(self, "application_object_id")
|
|
118
|
-
|
|
119
|
-
@application_object_id.setter
|
|
120
|
-
def application_object_id(self, value: Optional[pulumi.Input[str]]):
|
|
121
|
-
pulumi.set(self, "application_object_id", value)
|
|
122
|
-
|
|
123
|
-
@property
|
|
105
|
+
@_builtins.property
|
|
124
106
|
@pulumi.getter
|
|
125
|
-
def description(self) -> Optional[pulumi.Input[str]]:
|
|
107
|
+
def description(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
126
108
|
"""
|
|
127
109
|
A description for the federated identity credential.
|
|
128
110
|
"""
|
|
129
111
|
return pulumi.get(self, "description")
|
|
130
112
|
|
|
131
113
|
@description.setter
|
|
132
|
-
def description(self, value: Optional[pulumi.Input[str]]):
|
|
114
|
+
def description(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
133
115
|
pulumi.set(self, "description", value)
|
|
134
116
|
|
|
135
117
|
|
|
136
118
|
@pulumi.input_type
|
|
137
119
|
class _ApplicationFederatedIdentityCredentialState:
|
|
138
120
|
def __init__(__self__, *,
|
|
139
|
-
application_id: Optional[pulumi.Input[str]] = None,
|
|
140
|
-
|
|
141
|
-
|
|
142
|
-
|
|
143
|
-
|
|
144
|
-
|
|
145
|
-
|
|
146
|
-
subject: Optional[pulumi.Input[str]] = None):
|
|
121
|
+
application_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
122
|
+
audiences: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
123
|
+
credential_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
124
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
125
|
+
display_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
126
|
+
issuer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
127
|
+
subject: Optional[pulumi.Input[_builtins.str]] = None):
|
|
147
128
|
"""
|
|
148
129
|
Input properties used for looking up and filtering ApplicationFederatedIdentityCredential resources.
|
|
149
|
-
:param pulumi.Input[str] application_id: The resource ID of the application for which this federated identity credential should be created. Changing this field forces a new resource to be created.
|
|
150
|
-
:param pulumi.Input[str]
|
|
151
|
-
:param pulumi.Input[
|
|
152
|
-
:param pulumi.Input[str]
|
|
153
|
-
:param pulumi.Input[str]
|
|
154
|
-
:param pulumi.Input[str]
|
|
155
|
-
:param pulumi.Input[str]
|
|
156
|
-
:param pulumi.Input[str] subject: The identifier of the external software workload within the external identity provider. The combination of issuer and subject must be unique on the app.
|
|
130
|
+
:param pulumi.Input[_builtins.str] application_id: The resource ID of the application for which this federated identity credential should be created. Changing this field forces a new resource to be created.
|
|
131
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] audiences: List of audiences that can appear in the external token. This specifies what should be accepted in the `aud` claim of incoming tokens.
|
|
132
|
+
:param pulumi.Input[_builtins.str] credential_id: A UUID used to uniquely identify this federated identity credential.
|
|
133
|
+
:param pulumi.Input[_builtins.str] description: A description for the federated identity credential.
|
|
134
|
+
:param pulumi.Input[_builtins.str] display_name: A unique display name for the federated identity credential. Changing this forces a new resource to be created.
|
|
135
|
+
:param pulumi.Input[_builtins.str] issuer: The URL of the external identity provider, which must match the issuer claim of the external token being exchanged. The combination of the values of issuer and subject must be unique on the app.
|
|
136
|
+
:param pulumi.Input[_builtins.str] subject: The identifier of the external software workload within the external identity provider. The combination of issuer and subject must be unique on the app.
|
|
157
137
|
"""
|
|
158
138
|
if application_id is not None:
|
|
159
139
|
pulumi.set(__self__, "application_id", application_id)
|
|
160
|
-
if application_object_id is not None:
|
|
161
|
-
warnings.warn("""The `application_object_id` property has been replaced with the `application_id` property and will be removed in version 3.0 of the AzureAD provider""", DeprecationWarning)
|
|
162
|
-
pulumi.log.warn("""application_object_id is deprecated: The `application_object_id` property has been replaced with the `application_id` property and will be removed in version 3.0 of the AzureAD provider""")
|
|
163
|
-
if application_object_id is not None:
|
|
164
|
-
pulumi.set(__self__, "application_object_id", application_object_id)
|
|
165
140
|
if audiences is not None:
|
|
166
141
|
pulumi.set(__self__, "audiences", audiences)
|
|
167
142
|
if credential_id is not None:
|
|
@@ -175,118 +150,103 @@ class _ApplicationFederatedIdentityCredentialState:
|
|
|
175
150
|
if subject is not None:
|
|
176
151
|
pulumi.set(__self__, "subject", subject)
|
|
177
152
|
|
|
178
|
-
@property
|
|
153
|
+
@_builtins.property
|
|
179
154
|
@pulumi.getter(name="applicationId")
|
|
180
|
-
def application_id(self) -> Optional[pulumi.Input[str]]:
|
|
155
|
+
def application_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
181
156
|
"""
|
|
182
157
|
The resource ID of the application for which this federated identity credential should be created. Changing this field forces a new resource to be created.
|
|
183
158
|
"""
|
|
184
159
|
return pulumi.get(self, "application_id")
|
|
185
160
|
|
|
186
161
|
@application_id.setter
|
|
187
|
-
def application_id(self, value: Optional[pulumi.Input[str]]):
|
|
162
|
+
def application_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
188
163
|
pulumi.set(self, "application_id", value)
|
|
189
164
|
|
|
190
|
-
@property
|
|
191
|
-
@pulumi.getter(name="applicationObjectId")
|
|
192
|
-
def application_object_id(self) -> Optional[pulumi.Input[str]]:
|
|
193
|
-
"""
|
|
194
|
-
The object ID of the application for which this federated identity credential should be created
|
|
195
|
-
"""
|
|
196
|
-
warnings.warn("""The `application_object_id` property has been replaced with the `application_id` property and will be removed in version 3.0 of the AzureAD provider""", DeprecationWarning)
|
|
197
|
-
pulumi.log.warn("""application_object_id is deprecated: The `application_object_id` property has been replaced with the `application_id` property and will be removed in version 3.0 of the AzureAD provider""")
|
|
198
|
-
|
|
199
|
-
return pulumi.get(self, "application_object_id")
|
|
200
|
-
|
|
201
|
-
@application_object_id.setter
|
|
202
|
-
def application_object_id(self, value: Optional[pulumi.Input[str]]):
|
|
203
|
-
pulumi.set(self, "application_object_id", value)
|
|
204
|
-
|
|
205
|
-
@property
|
|
165
|
+
@_builtins.property
|
|
206
166
|
@pulumi.getter
|
|
207
|
-
def audiences(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
167
|
+
def audiences(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
208
168
|
"""
|
|
209
169
|
List of audiences that can appear in the external token. This specifies what should be accepted in the `aud` claim of incoming tokens.
|
|
210
170
|
"""
|
|
211
171
|
return pulumi.get(self, "audiences")
|
|
212
172
|
|
|
213
173
|
@audiences.setter
|
|
214
|
-
def audiences(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
174
|
+
def audiences(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
215
175
|
pulumi.set(self, "audiences", value)
|
|
216
176
|
|
|
217
|
-
@property
|
|
177
|
+
@_builtins.property
|
|
218
178
|
@pulumi.getter(name="credentialId")
|
|
219
|
-
def credential_id(self) -> Optional[pulumi.Input[str]]:
|
|
179
|
+
def credential_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
220
180
|
"""
|
|
221
181
|
A UUID used to uniquely identify this federated identity credential.
|
|
222
182
|
"""
|
|
223
183
|
return pulumi.get(self, "credential_id")
|
|
224
184
|
|
|
225
185
|
@credential_id.setter
|
|
226
|
-
def credential_id(self, value: Optional[pulumi.Input[str]]):
|
|
186
|
+
def credential_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
227
187
|
pulumi.set(self, "credential_id", value)
|
|
228
188
|
|
|
229
|
-
@property
|
|
189
|
+
@_builtins.property
|
|
230
190
|
@pulumi.getter
|
|
231
|
-
def description(self) -> Optional[pulumi.Input[str]]:
|
|
191
|
+
def description(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
232
192
|
"""
|
|
233
193
|
A description for the federated identity credential.
|
|
234
194
|
"""
|
|
235
195
|
return pulumi.get(self, "description")
|
|
236
196
|
|
|
237
197
|
@description.setter
|
|
238
|
-
def description(self, value: Optional[pulumi.Input[str]]):
|
|
198
|
+
def description(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
239
199
|
pulumi.set(self, "description", value)
|
|
240
200
|
|
|
241
|
-
@property
|
|
201
|
+
@_builtins.property
|
|
242
202
|
@pulumi.getter(name="displayName")
|
|
243
|
-
def display_name(self) -> Optional[pulumi.Input[str]]:
|
|
203
|
+
def display_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
244
204
|
"""
|
|
245
205
|
A unique display name for the federated identity credential. Changing this forces a new resource to be created.
|
|
246
206
|
"""
|
|
247
207
|
return pulumi.get(self, "display_name")
|
|
248
208
|
|
|
249
209
|
@display_name.setter
|
|
250
|
-
def display_name(self, value: Optional[pulumi.Input[str]]):
|
|
210
|
+
def display_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
251
211
|
pulumi.set(self, "display_name", value)
|
|
252
212
|
|
|
253
|
-
@property
|
|
213
|
+
@_builtins.property
|
|
254
214
|
@pulumi.getter
|
|
255
|
-
def issuer(self) -> Optional[pulumi.Input[str]]:
|
|
215
|
+
def issuer(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
256
216
|
"""
|
|
257
217
|
The URL of the external identity provider, which must match the issuer claim of the external token being exchanged. The combination of the values of issuer and subject must be unique on the app.
|
|
258
218
|
"""
|
|
259
219
|
return pulumi.get(self, "issuer")
|
|
260
220
|
|
|
261
221
|
@issuer.setter
|
|
262
|
-
def issuer(self, value: Optional[pulumi.Input[str]]):
|
|
222
|
+
def issuer(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
263
223
|
pulumi.set(self, "issuer", value)
|
|
264
224
|
|
|
265
|
-
@property
|
|
225
|
+
@_builtins.property
|
|
266
226
|
@pulumi.getter
|
|
267
|
-
def subject(self) -> Optional[pulumi.Input[str]]:
|
|
227
|
+
def subject(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
268
228
|
"""
|
|
269
229
|
The identifier of the external software workload within the external identity provider. The combination of issuer and subject must be unique on the app.
|
|
270
230
|
"""
|
|
271
231
|
return pulumi.get(self, "subject")
|
|
272
232
|
|
|
273
233
|
@subject.setter
|
|
274
|
-
def subject(self, value: Optional[pulumi.Input[str]]):
|
|
234
|
+
def subject(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
275
235
|
pulumi.set(self, "subject", value)
|
|
276
236
|
|
|
277
237
|
|
|
238
|
+
@pulumi.type_token("azuread:index/applicationFederatedIdentityCredential:ApplicationFederatedIdentityCredential")
|
|
278
239
|
class ApplicationFederatedIdentityCredential(pulumi.CustomResource):
|
|
279
240
|
@overload
|
|
280
241
|
def __init__(__self__,
|
|
281
242
|
resource_name: str,
|
|
282
243
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
283
|
-
application_id: Optional[pulumi.Input[str]] = None,
|
|
284
|
-
|
|
285
|
-
|
|
286
|
-
|
|
287
|
-
|
|
288
|
-
|
|
289
|
-
subject: Optional[pulumi.Input[str]] = None,
|
|
244
|
+
application_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
245
|
+
audiences: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
246
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
247
|
+
display_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
248
|
+
issuer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
249
|
+
subject: Optional[pulumi.Input[_builtins.str]] = None,
|
|
290
250
|
__props__=None):
|
|
291
251
|
"""
|
|
292
252
|
## Example Usage
|
|
@@ -295,9 +255,9 @@ class ApplicationFederatedIdentityCredential(pulumi.CustomResource):
|
|
|
295
255
|
import pulumi
|
|
296
256
|
import pulumi_azuread as azuread
|
|
297
257
|
|
|
298
|
-
|
|
299
|
-
example_application_federated_identity_credential = azuread.ApplicationFederatedIdentityCredential("
|
|
300
|
-
application_id=
|
|
258
|
+
example = azuread.ApplicationRegistration("example", display_name="example")
|
|
259
|
+
example_application_federated_identity_credential = azuread.ApplicationFederatedIdentityCredential("example",
|
|
260
|
+
application_id=example.id,
|
|
301
261
|
display_name="my-repo-deploy",
|
|
302
262
|
description="Deployments for my-repo",
|
|
303
263
|
audiences=["api://AzureADTokenExchange"],
|
|
@@ -310,20 +270,19 @@ class ApplicationFederatedIdentityCredential(pulumi.CustomResource):
|
|
|
310
270
|
Federated Identity Credentials can be imported using the object ID of the associated application and the ID of the federated identity credential, e.g.
|
|
311
271
|
|
|
312
272
|
```sh
|
|
313
|
-
|
|
273
|
+
$ pulumi import azuread:index/applicationFederatedIdentityCredential:ApplicationFederatedIdentityCredential example 00000000-0000-0000-0000-000000000000/federatedIdentityCredential/11111111-1111-1111-1111-111111111111
|
|
314
274
|
```
|
|
315
275
|
|
|
316
|
-
|
|
276
|
+
-> This ID format is unique to Terraform and is composed of the application's object ID, the string "federatedIdentityCredential" and the credential ID in the format `{ObjectId}/federatedIdentityCredential/{CredentialId}`.
|
|
317
277
|
|
|
318
278
|
:param str resource_name: The name of the resource.
|
|
319
279
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
320
|
-
:param pulumi.Input[str] application_id: The resource ID of the application for which this federated identity credential should be created. Changing this field forces a new resource to be created.
|
|
321
|
-
:param pulumi.Input[str]
|
|
322
|
-
:param pulumi.Input[
|
|
323
|
-
:param pulumi.Input[str]
|
|
324
|
-
:param pulumi.Input[str]
|
|
325
|
-
:param pulumi.Input[str]
|
|
326
|
-
:param pulumi.Input[str] subject: The identifier of the external software workload within the external identity provider. The combination of issuer and subject must be unique on the app.
|
|
280
|
+
:param pulumi.Input[_builtins.str] application_id: The resource ID of the application for which this federated identity credential should be created. Changing this field forces a new resource to be created.
|
|
281
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] audiences: List of audiences that can appear in the external token. This specifies what should be accepted in the `aud` claim of incoming tokens.
|
|
282
|
+
:param pulumi.Input[_builtins.str] description: A description for the federated identity credential.
|
|
283
|
+
:param pulumi.Input[_builtins.str] display_name: A unique display name for the federated identity credential. Changing this forces a new resource to be created.
|
|
284
|
+
:param pulumi.Input[_builtins.str] issuer: The URL of the external identity provider, which must match the issuer claim of the external token being exchanged. The combination of the values of issuer and subject must be unique on the app.
|
|
285
|
+
:param pulumi.Input[_builtins.str] subject: The identifier of the external software workload within the external identity provider. The combination of issuer and subject must be unique on the app.
|
|
327
286
|
"""
|
|
328
287
|
...
|
|
329
288
|
@overload
|
|
@@ -338,9 +297,9 @@ class ApplicationFederatedIdentityCredential(pulumi.CustomResource):
|
|
|
338
297
|
import pulumi
|
|
339
298
|
import pulumi_azuread as azuread
|
|
340
299
|
|
|
341
|
-
|
|
342
|
-
example_application_federated_identity_credential = azuread.ApplicationFederatedIdentityCredential("
|
|
343
|
-
application_id=
|
|
300
|
+
example = azuread.ApplicationRegistration("example", display_name="example")
|
|
301
|
+
example_application_federated_identity_credential = azuread.ApplicationFederatedIdentityCredential("example",
|
|
302
|
+
application_id=example.id,
|
|
344
303
|
display_name="my-repo-deploy",
|
|
345
304
|
description="Deployments for my-repo",
|
|
346
305
|
audiences=["api://AzureADTokenExchange"],
|
|
@@ -353,10 +312,10 @@ class ApplicationFederatedIdentityCredential(pulumi.CustomResource):
|
|
|
353
312
|
Federated Identity Credentials can be imported using the object ID of the associated application and the ID of the federated identity credential, e.g.
|
|
354
313
|
|
|
355
314
|
```sh
|
|
356
|
-
|
|
315
|
+
$ pulumi import azuread:index/applicationFederatedIdentityCredential:ApplicationFederatedIdentityCredential example 00000000-0000-0000-0000-000000000000/federatedIdentityCredential/11111111-1111-1111-1111-111111111111
|
|
357
316
|
```
|
|
358
317
|
|
|
359
|
-
|
|
318
|
+
-> This ID format is unique to Terraform and is composed of the application's object ID, the string "federatedIdentityCredential" and the credential ID in the format `{ObjectId}/federatedIdentityCredential/{CredentialId}`.
|
|
360
319
|
|
|
361
320
|
:param str resource_name: The name of the resource.
|
|
362
321
|
:param ApplicationFederatedIdentityCredentialArgs args: The arguments to use to populate this resource's properties.
|
|
@@ -373,13 +332,12 @@ class ApplicationFederatedIdentityCredential(pulumi.CustomResource):
|
|
|
373
332
|
def _internal_init(__self__,
|
|
374
333
|
resource_name: str,
|
|
375
334
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
376
|
-
application_id: Optional[pulumi.Input[str]] = None,
|
|
377
|
-
|
|
378
|
-
|
|
379
|
-
|
|
380
|
-
|
|
381
|
-
|
|
382
|
-
subject: Optional[pulumi.Input[str]] = None,
|
|
335
|
+
application_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
336
|
+
audiences: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
337
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
338
|
+
display_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
339
|
+
issuer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
340
|
+
subject: Optional[pulumi.Input[_builtins.str]] = None,
|
|
383
341
|
__props__=None):
|
|
384
342
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
385
343
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -389,8 +347,9 @@ class ApplicationFederatedIdentityCredential(pulumi.CustomResource):
|
|
|
389
347
|
raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
|
|
390
348
|
__props__ = ApplicationFederatedIdentityCredentialArgs.__new__(ApplicationFederatedIdentityCredentialArgs)
|
|
391
349
|
|
|
350
|
+
if application_id is None and not opts.urn:
|
|
351
|
+
raise TypeError("Missing required property 'application_id'")
|
|
392
352
|
__props__.__dict__["application_id"] = application_id
|
|
393
|
-
__props__.__dict__["application_object_id"] = application_object_id
|
|
394
353
|
if audiences is None and not opts.urn:
|
|
395
354
|
raise TypeError("Missing required property 'audiences'")
|
|
396
355
|
__props__.__dict__["audiences"] = audiences
|
|
@@ -415,14 +374,13 @@ class ApplicationFederatedIdentityCredential(pulumi.CustomResource):
|
|
|
415
374
|
def get(resource_name: str,
|
|
416
375
|
id: pulumi.Input[str],
|
|
417
376
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
418
|
-
application_id: Optional[pulumi.Input[str]] = None,
|
|
419
|
-
|
|
420
|
-
|
|
421
|
-
|
|
422
|
-
|
|
423
|
-
|
|
424
|
-
|
|
425
|
-
subject: Optional[pulumi.Input[str]] = None) -> 'ApplicationFederatedIdentityCredential':
|
|
377
|
+
application_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
378
|
+
audiences: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
379
|
+
credential_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
380
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
381
|
+
display_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
382
|
+
issuer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
383
|
+
subject: Optional[pulumi.Input[_builtins.str]] = None) -> 'ApplicationFederatedIdentityCredential':
|
|
426
384
|
"""
|
|
427
385
|
Get an existing ApplicationFederatedIdentityCredential resource's state with the given name, id, and optional extra
|
|
428
386
|
properties used to qualify the lookup.
|
|
@@ -430,21 +388,19 @@ class ApplicationFederatedIdentityCredential(pulumi.CustomResource):
|
|
|
430
388
|
:param str resource_name: The unique name of the resulting resource.
|
|
431
389
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
432
390
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
433
|
-
:param pulumi.Input[str] application_id: The resource ID of the application for which this federated identity credential should be created. Changing this field forces a new resource to be created.
|
|
434
|
-
:param pulumi.Input[str]
|
|
435
|
-
:param pulumi.Input[
|
|
436
|
-
:param pulumi.Input[str]
|
|
437
|
-
:param pulumi.Input[str]
|
|
438
|
-
:param pulumi.Input[str]
|
|
439
|
-
:param pulumi.Input[str]
|
|
440
|
-
:param pulumi.Input[str] subject: The identifier of the external software workload within the external identity provider. The combination of issuer and subject must be unique on the app.
|
|
391
|
+
:param pulumi.Input[_builtins.str] application_id: The resource ID of the application for which this federated identity credential should be created. Changing this field forces a new resource to be created.
|
|
392
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] audiences: List of audiences that can appear in the external token. This specifies what should be accepted in the `aud` claim of incoming tokens.
|
|
393
|
+
:param pulumi.Input[_builtins.str] credential_id: A UUID used to uniquely identify this federated identity credential.
|
|
394
|
+
:param pulumi.Input[_builtins.str] description: A description for the federated identity credential.
|
|
395
|
+
:param pulumi.Input[_builtins.str] display_name: A unique display name for the federated identity credential. Changing this forces a new resource to be created.
|
|
396
|
+
:param pulumi.Input[_builtins.str] issuer: The URL of the external identity provider, which must match the issuer claim of the external token being exchanged. The combination of the values of issuer and subject must be unique on the app.
|
|
397
|
+
:param pulumi.Input[_builtins.str] subject: The identifier of the external software workload within the external identity provider. The combination of issuer and subject must be unique on the app.
|
|
441
398
|
"""
|
|
442
399
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
443
400
|
|
|
444
401
|
__props__ = _ApplicationFederatedIdentityCredentialState.__new__(_ApplicationFederatedIdentityCredentialState)
|
|
445
402
|
|
|
446
403
|
__props__.__dict__["application_id"] = application_id
|
|
447
|
-
__props__.__dict__["application_object_id"] = application_object_id
|
|
448
404
|
__props__.__dict__["audiences"] = audiences
|
|
449
405
|
__props__.__dict__["credential_id"] = credential_id
|
|
450
406
|
__props__.__dict__["description"] = description
|
|
@@ -453,68 +409,57 @@ class ApplicationFederatedIdentityCredential(pulumi.CustomResource):
|
|
|
453
409
|
__props__.__dict__["subject"] = subject
|
|
454
410
|
return ApplicationFederatedIdentityCredential(resource_name, opts=opts, __props__=__props__)
|
|
455
411
|
|
|
456
|
-
@property
|
|
412
|
+
@_builtins.property
|
|
457
413
|
@pulumi.getter(name="applicationId")
|
|
458
|
-
def application_id(self) -> pulumi.Output[str]:
|
|
414
|
+
def application_id(self) -> pulumi.Output[_builtins.str]:
|
|
459
415
|
"""
|
|
460
416
|
The resource ID of the application for which this federated identity credential should be created. Changing this field forces a new resource to be created.
|
|
461
417
|
"""
|
|
462
418
|
return pulumi.get(self, "application_id")
|
|
463
419
|
|
|
464
|
-
@property
|
|
465
|
-
@pulumi.getter(name="applicationObjectId")
|
|
466
|
-
def application_object_id(self) -> pulumi.Output[str]:
|
|
467
|
-
"""
|
|
468
|
-
The object ID of the application for which this federated identity credential should be created
|
|
469
|
-
"""
|
|
470
|
-
warnings.warn("""The `application_object_id` property has been replaced with the `application_id` property and will be removed in version 3.0 of the AzureAD provider""", DeprecationWarning)
|
|
471
|
-
pulumi.log.warn("""application_object_id is deprecated: The `application_object_id` property has been replaced with the `application_id` property and will be removed in version 3.0 of the AzureAD provider""")
|
|
472
|
-
|
|
473
|
-
return pulumi.get(self, "application_object_id")
|
|
474
|
-
|
|
475
|
-
@property
|
|
420
|
+
@_builtins.property
|
|
476
421
|
@pulumi.getter
|
|
477
|
-
def audiences(self) -> pulumi.Output[Sequence[str]]:
|
|
422
|
+
def audiences(self) -> pulumi.Output[Sequence[_builtins.str]]:
|
|
478
423
|
"""
|
|
479
424
|
List of audiences that can appear in the external token. This specifies what should be accepted in the `aud` claim of incoming tokens.
|
|
480
425
|
"""
|
|
481
426
|
return pulumi.get(self, "audiences")
|
|
482
427
|
|
|
483
|
-
@property
|
|
428
|
+
@_builtins.property
|
|
484
429
|
@pulumi.getter(name="credentialId")
|
|
485
|
-
def credential_id(self) -> pulumi.Output[str]:
|
|
430
|
+
def credential_id(self) -> pulumi.Output[_builtins.str]:
|
|
486
431
|
"""
|
|
487
432
|
A UUID used to uniquely identify this federated identity credential.
|
|
488
433
|
"""
|
|
489
434
|
return pulumi.get(self, "credential_id")
|
|
490
435
|
|
|
491
|
-
@property
|
|
436
|
+
@_builtins.property
|
|
492
437
|
@pulumi.getter
|
|
493
|
-
def description(self) -> pulumi.Output[Optional[str]]:
|
|
438
|
+
def description(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
494
439
|
"""
|
|
495
440
|
A description for the federated identity credential.
|
|
496
441
|
"""
|
|
497
442
|
return pulumi.get(self, "description")
|
|
498
443
|
|
|
499
|
-
@property
|
|
444
|
+
@_builtins.property
|
|
500
445
|
@pulumi.getter(name="displayName")
|
|
501
|
-
def display_name(self) -> pulumi.Output[str]:
|
|
446
|
+
def display_name(self) -> pulumi.Output[_builtins.str]:
|
|
502
447
|
"""
|
|
503
448
|
A unique display name for the federated identity credential. Changing this forces a new resource to be created.
|
|
504
449
|
"""
|
|
505
450
|
return pulumi.get(self, "display_name")
|
|
506
451
|
|
|
507
|
-
@property
|
|
452
|
+
@_builtins.property
|
|
508
453
|
@pulumi.getter
|
|
509
|
-
def issuer(self) -> pulumi.Output[str]:
|
|
454
|
+
def issuer(self) -> pulumi.Output[_builtins.str]:
|
|
510
455
|
"""
|
|
511
456
|
The URL of the external identity provider, which must match the issuer claim of the external token being exchanged. The combination of the values of issuer and subject must be unique on the app.
|
|
512
457
|
"""
|
|
513
458
|
return pulumi.get(self, "issuer")
|
|
514
459
|
|
|
515
|
-
@property
|
|
460
|
+
@_builtins.property
|
|
516
461
|
@pulumi.getter
|
|
517
|
-
def subject(self) -> pulumi.Output[str]:
|
|
462
|
+
def subject(self) -> pulumi.Output[_builtins.str]:
|
|
518
463
|
"""
|
|
519
464
|
The identifier of the external software workload within the external identity provider. The combination of issuer and subject must be unique on the app.
|
|
520
465
|
"""
|