pulumi-databricks 1.74.0a1753335781__py3-none-any.whl → 1.77.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_databricks/__init__.py +185 -12
- pulumi_databricks/_inputs.py +30467 -20225
- pulumi_databricks/access_control_rule_set.py +28 -29
- pulumi_databricks/account_federation_policy.py +473 -0
- pulumi_databricks/account_network_policy.py +74 -43
- pulumi_databricks/account_setting_v2.py +759 -0
- pulumi_databricks/aibi_dashboard_embedding_access_policy_setting.py +30 -31
- pulumi_databricks/aibi_dashboard_embedding_approved_domains_setting.py +30 -31
- pulumi_databricks/alert.py +185 -186
- pulumi_databricks/alert_v2.py +369 -211
- pulumi_databricks/app.py +315 -209
- pulumi_databricks/apps_settings_custom_template.py +531 -0
- pulumi_databricks/artifact_allowlist.py +72 -73
- pulumi_databricks/automatic_cluster_update_workspace_setting.py +30 -31
- pulumi_databricks/budget.py +84 -85
- pulumi_databricks/budget_policy.py +75 -53
- pulumi_databricks/catalog.py +544 -225
- pulumi_databricks/catalog_workspace_binding.py +82 -83
- pulumi_databricks/cluster.py +561 -683
- pulumi_databricks/cluster_policy.py +115 -116
- pulumi_databricks/compliance_security_profile_workspace_setting.py +30 -31
- pulumi_databricks/config/__init__.py +1 -1
- pulumi_databricks/config/__init__.pyi +3 -2
- pulumi_databricks/config/vars.py +40 -37
- pulumi_databricks/connection.py +346 -211
- pulumi_databricks/credential.py +262 -263
- pulumi_databricks/custom_app_integration.py +175 -176
- pulumi_databricks/dashboard.py +207 -208
- pulumi_databricks/data_quality_monitor.py +453 -0
- pulumi_databricks/data_quality_refresh.py +492 -0
- pulumi_databricks/database_database_catalog.py +437 -0
- pulumi_databricks/database_instance.py +938 -137
- pulumi_databricks/database_synced_database_table.py +589 -0
- pulumi_databricks/dbfs_file.py +87 -84
- pulumi_databricks/default_namespace_setting.py +30 -31
- pulumi_databricks/directory.py +61 -62
- pulumi_databricks/disable_legacy_access_setting.py +109 -33
- pulumi_databricks/disable_legacy_dbfs_setting.py +58 -39
- pulumi_databricks/disable_legacy_features_setting.py +62 -37
- pulumi_databricks/enhanced_security_monitoring_workspace_setting.py +30 -31
- pulumi_databricks/entitlements.py +148 -149
- pulumi_databricks/entity_tag_assignment.py +409 -0
- pulumi_databricks/external_location.py +276 -290
- pulumi_databricks/external_metadata.py +726 -0
- pulumi_databricks/feature_engineering_feature.py +480 -0
- pulumi_databricks/feature_engineering_materialized_feature.py +397 -0
- pulumi_databricks/file.py +96 -97
- pulumi_databricks/get_account_federation_policies.py +127 -0
- pulumi_databricks/get_account_federation_policy.py +214 -0
- pulumi_databricks/get_account_network_policies.py +36 -7
- pulumi_databricks/get_account_network_policy.py +33 -29
- pulumi_databricks/get_account_setting_v2.py +331 -0
- pulumi_databricks/get_alert_v2.py +100 -84
- pulumi_databricks/get_alerts_v2.py +35 -17
- pulumi_databricks/get_app.py +31 -20
- pulumi_databricks/get_apps.py +26 -15
- pulumi_databricks/get_apps_settings_custom_template.py +207 -0
- pulumi_databricks/get_apps_settings_custom_templates.py +133 -0
- pulumi_databricks/get_aws_assume_role_policy.py +27 -28
- pulumi_databricks/get_aws_bucket_policy.py +39 -40
- pulumi_databricks/get_aws_cross_account_policy.py +47 -48
- pulumi_databricks/get_aws_unity_catalog_assume_role_policy.py +35 -36
- pulumi_databricks/get_aws_unity_catalog_policy.py +35 -36
- pulumi_databricks/get_budget_policies.py +74 -11
- pulumi_databricks/get_budget_policy.py +43 -39
- pulumi_databricks/get_catalog.py +35 -19
- pulumi_databricks/get_catalogs.py +32 -14
- pulumi_databricks/get_cluster.py +41 -25
- pulumi_databricks/get_cluster_policy.py +72 -54
- pulumi_databricks/get_clusters.py +41 -25
- pulumi_databricks/get_current_config.py +23 -24
- pulumi_databricks/get_current_metastore.py +29 -13
- pulumi_databricks/get_current_user.py +17 -18
- pulumi_databricks/get_dashboards.py +34 -15
- pulumi_databricks/get_data_quality_monitor.py +210 -0
- pulumi_databricks/get_data_quality_monitors.py +143 -0
- pulumi_databricks/get_data_quality_refresh.py +270 -0
- pulumi_databricks/get_data_quality_refreshes.py +207 -0
- pulumi_databricks/get_database_database_catalog.py +176 -0
- pulumi_databricks/get_database_database_catalogs.py +120 -0
- pulumi_databricks/get_database_instance.py +274 -50
- pulumi_databricks/get_database_instances.py +35 -11
- pulumi_databricks/get_database_synced_database_table.py +225 -0
- pulumi_databricks/get_database_synced_database_tables.py +120 -0
- pulumi_databricks/get_dbfs_file.py +19 -20
- pulumi_databricks/get_dbfs_file_paths.py +16 -17
- pulumi_databricks/get_directory.py +43 -25
- pulumi_databricks/get_entity_tag_assignment.py +202 -0
- pulumi_databricks/get_entity_tag_assignments.py +187 -0
- pulumi_databricks/get_external_location.py +35 -19
- pulumi_databricks/get_external_locations.py +32 -14
- pulumi_databricks/get_external_metadata.py +292 -0
- pulumi_databricks/get_external_metadatas.py +135 -0
- pulumi_databricks/get_feature_engineering_feature.py +179 -0
- pulumi_databricks/get_feature_engineering_features.py +103 -0
- pulumi_databricks/get_feature_engineering_materialized_feature.py +180 -0
- pulumi_databricks/get_feature_engineering_materialized_features.py +123 -0
- pulumi_databricks/get_functions.py +38 -24
- pulumi_databricks/get_group.py +85 -86
- pulumi_databricks/get_instance_pool.py +10 -11
- pulumi_databricks/get_instance_profiles.py +25 -9
- pulumi_databricks/get_job.py +22 -23
- pulumi_databricks/get_jobs.py +44 -26
- pulumi_databricks/get_materialized_features_feature_tag.py +102 -0
- pulumi_databricks/get_materialized_features_feature_tags.py +133 -0
- pulumi_databricks/get_metastore.py +28 -29
- pulumi_databricks/get_metastores.py +9 -10
- pulumi_databricks/get_mlflow_experiment.py +62 -46
- pulumi_databricks/get_mlflow_model.py +47 -31
- pulumi_databricks/get_mlflow_models.py +32 -14
- pulumi_databricks/get_mws_credentials.py +9 -10
- pulumi_databricks/get_mws_network_connectivity_config.py +40 -41
- pulumi_databricks/get_mws_network_connectivity_configs.py +15 -16
- pulumi_databricks/get_mws_workspaces.py +5 -6
- pulumi_databricks/get_node_type.py +123 -87
- pulumi_databricks/get_notebook.py +37 -38
- pulumi_databricks/get_notebook_paths.py +16 -17
- pulumi_databricks/get_notification_destinations.py +33 -18
- pulumi_databricks/get_online_store.py +36 -27
- pulumi_databricks/get_online_stores.py +33 -13
- pulumi_databricks/get_pipelines.py +49 -31
- pulumi_databricks/get_policy_info.py +338 -0
- pulumi_databricks/get_policy_infos.py +169 -0
- pulumi_databricks/get_quality_monitor_v2.py +21 -18
- pulumi_databricks/get_quality_monitors_v2.py +26 -8
- pulumi_databricks/get_registered_model.py +41 -27
- pulumi_databricks/get_registered_model_versions.py +29 -15
- pulumi_databricks/get_rfa_access_request_destinations.py +126 -0
- pulumi_databricks/get_schema.py +32 -16
- pulumi_databricks/get_schemas.py +38 -20
- pulumi_databricks/get_service_principal.py +80 -58
- pulumi_databricks/get_service_principal_federation_policies.py +151 -0
- pulumi_databricks/get_service_principal_federation_policy.py +220 -0
- pulumi_databricks/get_service_principals.py +16 -17
- pulumi_databricks/get_serving_endpoints.py +23 -9
- pulumi_databricks/get_share.py +130 -32
- pulumi_databricks/get_shares.py +29 -11
- pulumi_databricks/get_spark_version.py +87 -69
- pulumi_databricks/get_sql_warehouse.py +124 -110
- pulumi_databricks/get_sql_warehouses.py +37 -19
- pulumi_databricks/get_storage_credential.py +32 -16
- pulumi_databricks/get_storage_credentials.py +32 -14
- pulumi_databricks/get_table.py +30 -14
- pulumi_databricks/get_tables.py +41 -23
- pulumi_databricks/get_tag_policies.py +139 -0
- pulumi_databricks/get_tag_policy.py +175 -0
- pulumi_databricks/get_user.py +33 -34
- pulumi_databricks/get_views.py +41 -23
- pulumi_databricks/get_volume.py +32 -16
- pulumi_databricks/get_volumes.py +41 -23
- pulumi_databricks/get_workspace_network_option.py +45 -26
- pulumi_databricks/get_workspace_setting_v2.py +331 -0
- pulumi_databricks/get_zones.py +39 -21
- pulumi_databricks/git_credential.py +242 -76
- pulumi_databricks/global_init_script.py +99 -100
- pulumi_databricks/grant.py +215 -212
- pulumi_databricks/grants.py +200 -211
- pulumi_databricks/group.py +176 -177
- pulumi_databricks/group_instance_profile.py +37 -38
- pulumi_databricks/group_member.py +37 -38
- pulumi_databricks/group_role.py +37 -38
- pulumi_databricks/instance_pool.py +168 -169
- pulumi_databricks/instance_profile.py +69 -70
- pulumi_databricks/ip_access_list.py +71 -72
- pulumi_databricks/job.py +426 -346
- pulumi_databricks/lakehouse_monitor.py +199 -200
- pulumi_databricks/library.py +264 -99
- pulumi_databricks/materialized_features_feature_tag.py +213 -0
- pulumi_databricks/metastore.py +254 -255
- pulumi_databricks/metastore_assignment.py +52 -53
- pulumi_databricks/metastore_data_access.py +153 -154
- pulumi_databricks/metastore_provider.py +69 -70
- pulumi_databricks/mlflow_experiment.py +108 -109
- pulumi_databricks/mlflow_model.py +45 -46
- pulumi_databricks/mlflow_webhook.py +75 -76
- pulumi_databricks/model_serving.py +195 -74
- pulumi_databricks/model_serving_provisioned_throughput.py +100 -54
- pulumi_databricks/mount.py +103 -104
- pulumi_databricks/mws_credentials.py +99 -100
- pulumi_databricks/mws_customer_managed_keys.py +75 -76
- pulumi_databricks/mws_log_delivery.py +188 -189
- pulumi_databricks/mws_ncc_binding.py +35 -36
- pulumi_databricks/mws_ncc_private_endpoint_rule.py +312 -289
- pulumi_databricks/mws_network_connectivity_config.py +136 -98
- pulumi_databricks/mws_networks.py +159 -160
- pulumi_databricks/mws_permission_assignment.py +70 -71
- pulumi_databricks/mws_private_access_settings.py +116 -117
- pulumi_databricks/mws_storage_configurations.py +74 -75
- pulumi_databricks/mws_vpc_endpoint.py +149 -150
- pulumi_databricks/mws_workspaces.py +464 -418
- pulumi_databricks/notebook.py +143 -144
- pulumi_databricks/notification_destination.py +38 -39
- pulumi_databricks/obo_token.py +63 -64
- pulumi_databricks/online_store.py +121 -70
- pulumi_databricks/online_table.py +41 -42
- pulumi_databricks/outputs.py +47821 -30802
- pulumi_databricks/permission_assignment.py +298 -57
- pulumi_databricks/permissions.py +523 -362
- pulumi_databricks/pipeline.py +515 -480
- pulumi_databricks/policy_info.py +916 -0
- pulumi_databricks/provider.py +283 -269
- pulumi_databricks/pulumi-plugin.json +1 -1
- pulumi_databricks/quality_monitor.py +263 -217
- pulumi_databricks/quality_monitor_v2.py +49 -46
- pulumi_databricks/query.py +227 -228
- pulumi_databricks/recipient.py +208 -209
- pulumi_databricks/registered_model.py +393 -122
- pulumi_databricks/repo.py +117 -118
- pulumi_databricks/restrict_workspace_admins_setting.py +30 -31
- pulumi_databricks/rfa_access_request_destinations.py +286 -0
- pulumi_databricks/schema.py +159 -160
- pulumi_databricks/secret.py +72 -73
- pulumi_databricks/secret_acl.py +52 -53
- pulumi_databricks/secret_scope.py +55 -56
- pulumi_databricks/service_principal.py +279 -278
- pulumi_databricks/service_principal_federation_policy.py +469 -0
- pulumi_databricks/service_principal_role.py +35 -36
- pulumi_databricks/service_principal_secret.py +156 -157
- pulumi_databricks/share.py +186 -187
- pulumi_databricks/sql_alert.py +98 -99
- pulumi_databricks/sql_dashboard.py +94 -95
- pulumi_databricks/sql_endpoint.py +298 -266
- pulumi_databricks/sql_global_config.py +103 -104
- pulumi_databricks/sql_permissions.py +121 -122
- pulumi_databricks/sql_query.py +150 -151
- pulumi_databricks/sql_table.py +310 -283
- pulumi_databricks/sql_visualization.py +92 -93
- pulumi_databricks/sql_widget.py +91 -88
- pulumi_databricks/storage_credential.py +236 -184
- pulumi_databricks/system_schema.py +50 -51
- pulumi_databricks/table.py +147 -148
- pulumi_databricks/tag_policy.py +357 -0
- pulumi_databricks/token.py +83 -84
- pulumi_databricks/user.py +284 -285
- pulumi_databricks/user_instance_profile.py +35 -36
- pulumi_databricks/user_role.py +35 -36
- pulumi_databricks/vector_search_endpoint.py +117 -118
- pulumi_databricks/vector_search_index.py +86 -87
- pulumi_databricks/volume.py +129 -130
- pulumi_databricks/workspace_binding.py +82 -131
- pulumi_databricks/workspace_conf.py +18 -19
- pulumi_databricks/workspace_file.py +100 -101
- pulumi_databricks/workspace_network_option.py +89 -40
- pulumi_databricks/workspace_setting_v2.py +759 -0
- {pulumi_databricks-1.74.0a1753335781.dist-info → pulumi_databricks-1.77.0.dist-info}/METADATA +1 -1
- pulumi_databricks-1.77.0.dist-info/RECORD +250 -0
- pulumi_databricks/get_recipient_federation_policies.py +0 -83
- pulumi_databricks/get_recipient_federation_policy.py +0 -166
- pulumi_databricks/recipient_federation_policy.py +0 -347
- pulumi_databricks-1.74.0a1753335781.dist-info/RECORD +0 -205
- {pulumi_databricks-1.74.0a1753335781.dist-info → pulumi_databricks-1.77.0.dist-info}/WHEEL +0 -0
- {pulumi_databricks-1.74.0a1753335781.dist-info → pulumi_databricks-1.77.0.dist-info}/top_level.txt +0 -0
|
@@ -2,8 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import builtins
|
|
6
|
-
import copy
|
|
5
|
+
import builtins as _builtins
|
|
7
6
|
import warnings
|
|
8
7
|
import sys
|
|
9
8
|
import pulumi
|
|
@@ -50,43 +49,43 @@ class GetAwsBucketPolicyResult:
|
|
|
50
49
|
raise TypeError("Expected argument 'json' to be a str")
|
|
51
50
|
pulumi.set(__self__, "json", json)
|
|
52
51
|
|
|
53
|
-
@property
|
|
52
|
+
@_builtins.property
|
|
54
53
|
@pulumi.getter(name="awsPartition")
|
|
55
|
-
def aws_partition(self) -> Optional[
|
|
54
|
+
def aws_partition(self) -> Optional[_builtins.str]:
|
|
56
55
|
return pulumi.get(self, "aws_partition")
|
|
57
56
|
|
|
58
|
-
@property
|
|
57
|
+
@_builtins.property
|
|
59
58
|
@pulumi.getter
|
|
60
|
-
def bucket(self) ->
|
|
59
|
+
def bucket(self) -> _builtins.str:
|
|
61
60
|
return pulumi.get(self, "bucket")
|
|
62
61
|
|
|
63
|
-
@property
|
|
62
|
+
@_builtins.property
|
|
64
63
|
@pulumi.getter(name="databricksAccountId")
|
|
65
64
|
@_utilities.deprecated("""databricks_account_id will be will be removed in the next major release.""")
|
|
66
|
-
def databricks_account_id(self) -> Optional[
|
|
65
|
+
def databricks_account_id(self) -> Optional[_builtins.str]:
|
|
67
66
|
return pulumi.get(self, "databricks_account_id")
|
|
68
67
|
|
|
69
|
-
@property
|
|
68
|
+
@_builtins.property
|
|
70
69
|
@pulumi.getter(name="databricksE2AccountId")
|
|
71
|
-
def databricks_e2_account_id(self) -> Optional[
|
|
70
|
+
def databricks_e2_account_id(self) -> Optional[_builtins.str]:
|
|
72
71
|
return pulumi.get(self, "databricks_e2_account_id")
|
|
73
72
|
|
|
74
|
-
@property
|
|
73
|
+
@_builtins.property
|
|
75
74
|
@pulumi.getter(name="fullAccessRole")
|
|
76
|
-
def full_access_role(self) -> Optional[
|
|
75
|
+
def full_access_role(self) -> Optional[_builtins.str]:
|
|
77
76
|
return pulumi.get(self, "full_access_role")
|
|
78
77
|
|
|
79
|
-
@property
|
|
78
|
+
@_builtins.property
|
|
80
79
|
@pulumi.getter
|
|
81
|
-
def id(self) ->
|
|
80
|
+
def id(self) -> _builtins.str:
|
|
82
81
|
"""
|
|
83
82
|
The provider-assigned unique ID for this managed resource.
|
|
84
83
|
"""
|
|
85
84
|
return pulumi.get(self, "id")
|
|
86
85
|
|
|
87
|
-
@property
|
|
86
|
+
@_builtins.property
|
|
88
87
|
@pulumi.getter
|
|
89
|
-
def json(self) ->
|
|
88
|
+
def json(self) -> _builtins.str:
|
|
90
89
|
"""
|
|
91
90
|
(Read-only) AWS IAM Policy JSON document to grant Databricks full access to bucket.
|
|
92
91
|
"""
|
|
@@ -108,11 +107,11 @@ class AwaitableGetAwsBucketPolicyResult(GetAwsBucketPolicyResult):
|
|
|
108
107
|
json=self.json)
|
|
109
108
|
|
|
110
109
|
|
|
111
|
-
def get_aws_bucket_policy(aws_partition: Optional[
|
|
112
|
-
bucket: Optional[
|
|
113
|
-
databricks_account_id: Optional[
|
|
114
|
-
databricks_e2_account_id: Optional[
|
|
115
|
-
full_access_role: Optional[
|
|
110
|
+
def get_aws_bucket_policy(aws_partition: Optional[_builtins.str] = None,
|
|
111
|
+
bucket: Optional[_builtins.str] = None,
|
|
112
|
+
databricks_account_id: Optional[_builtins.str] = None,
|
|
113
|
+
databricks_e2_account_id: Optional[_builtins.str] = None,
|
|
114
|
+
full_access_role: Optional[_builtins.str] = None,
|
|
116
115
|
opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetAwsBucketPolicyResult:
|
|
117
116
|
"""
|
|
118
117
|
This datasource configures a simple access policy for AWS S3 buckets, so that Databricks can access data in it.
|
|
@@ -126,22 +125,22 @@ def get_aws_bucket_policy(aws_partition: Optional[builtins.str] = None,
|
|
|
126
125
|
import pulumi_aws as aws
|
|
127
126
|
import pulumi_databricks as databricks
|
|
128
127
|
|
|
129
|
-
|
|
128
|
+
this_bucket = aws.s3.Bucket("this",
|
|
130
129
|
bucket="<unique_bucket_name>",
|
|
131
130
|
force_destroy=True)
|
|
132
|
-
this = databricks.get_aws_bucket_policy_output(bucket=
|
|
131
|
+
this = databricks.get_aws_bucket_policy_output(bucket=this_bucket.bucket)
|
|
133
132
|
this_bucket_policy = aws.s3.BucketPolicy("this",
|
|
134
|
-
bucket=
|
|
133
|
+
bucket=this_bucket.id,
|
|
135
134
|
policy=this.json)
|
|
136
135
|
```
|
|
137
136
|
|
|
138
137
|
Bucket policy with full access:
|
|
139
138
|
|
|
140
139
|
|
|
141
|
-
:param
|
|
142
|
-
:param
|
|
143
|
-
:param
|
|
144
|
-
:param
|
|
140
|
+
:param _builtins.str aws_partition: AWS partition. The options are `aws`, `aws-us-gov`, or `aws-us-gov-dod`. Defaults to `aws`
|
|
141
|
+
:param _builtins.str bucket: AWS S3 Bucket name for which to generate the policy document. The name must follow the [S3 bucket naming rules](https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html).
|
|
142
|
+
:param _builtins.str databricks_e2_account_id: Your Databricks account ID. Used to generate restrictive IAM policies that will increase the security of your root bucket
|
|
143
|
+
:param _builtins.str full_access_role: Data access role that can have full access for this bucket
|
|
145
144
|
"""
|
|
146
145
|
__args__ = dict()
|
|
147
146
|
__args__['awsPartition'] = aws_partition
|
|
@@ -160,11 +159,11 @@ def get_aws_bucket_policy(aws_partition: Optional[builtins.str] = None,
|
|
|
160
159
|
full_access_role=pulumi.get(__ret__, 'full_access_role'),
|
|
161
160
|
id=pulumi.get(__ret__, 'id'),
|
|
162
161
|
json=pulumi.get(__ret__, 'json'))
|
|
163
|
-
def get_aws_bucket_policy_output(aws_partition: Optional[pulumi.Input[Optional[
|
|
164
|
-
bucket: Optional[pulumi.Input[
|
|
165
|
-
databricks_account_id: Optional[pulumi.Input[Optional[
|
|
166
|
-
databricks_e2_account_id: Optional[pulumi.Input[Optional[
|
|
167
|
-
full_access_role: Optional[pulumi.Input[Optional[
|
|
162
|
+
def get_aws_bucket_policy_output(aws_partition: Optional[pulumi.Input[Optional[_builtins.str]]] = None,
|
|
163
|
+
bucket: Optional[pulumi.Input[_builtins.str]] = None,
|
|
164
|
+
databricks_account_id: Optional[pulumi.Input[Optional[_builtins.str]]] = None,
|
|
165
|
+
databricks_e2_account_id: Optional[pulumi.Input[Optional[_builtins.str]]] = None,
|
|
166
|
+
full_access_role: Optional[pulumi.Input[Optional[_builtins.str]]] = None,
|
|
168
167
|
opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetAwsBucketPolicyResult]:
|
|
169
168
|
"""
|
|
170
169
|
This datasource configures a simple access policy for AWS S3 buckets, so that Databricks can access data in it.
|
|
@@ -178,22 +177,22 @@ def get_aws_bucket_policy_output(aws_partition: Optional[pulumi.Input[Optional[b
|
|
|
178
177
|
import pulumi_aws as aws
|
|
179
178
|
import pulumi_databricks as databricks
|
|
180
179
|
|
|
181
|
-
|
|
180
|
+
this_bucket = aws.s3.Bucket("this",
|
|
182
181
|
bucket="<unique_bucket_name>",
|
|
183
182
|
force_destroy=True)
|
|
184
|
-
this = databricks.get_aws_bucket_policy_output(bucket=
|
|
183
|
+
this = databricks.get_aws_bucket_policy_output(bucket=this_bucket.bucket)
|
|
185
184
|
this_bucket_policy = aws.s3.BucketPolicy("this",
|
|
186
|
-
bucket=
|
|
185
|
+
bucket=this_bucket.id,
|
|
187
186
|
policy=this.json)
|
|
188
187
|
```
|
|
189
188
|
|
|
190
189
|
Bucket policy with full access:
|
|
191
190
|
|
|
192
191
|
|
|
193
|
-
:param
|
|
194
|
-
:param
|
|
195
|
-
:param
|
|
196
|
-
:param
|
|
192
|
+
:param _builtins.str aws_partition: AWS partition. The options are `aws`, `aws-us-gov`, or `aws-us-gov-dod`. Defaults to `aws`
|
|
193
|
+
:param _builtins.str bucket: AWS S3 Bucket name for which to generate the policy document. The name must follow the [S3 bucket naming rules](https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html).
|
|
194
|
+
:param _builtins.str databricks_e2_account_id: Your Databricks account ID. Used to generate restrictive IAM policies that will increase the security of your root bucket
|
|
195
|
+
:param _builtins.str full_access_role: Data access role that can have full access for this bucket
|
|
197
196
|
"""
|
|
198
197
|
__args__ = dict()
|
|
199
198
|
__args__['awsPartition'] = aws_partition
|
|
@@ -2,8 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import builtins
|
|
6
|
-
import copy
|
|
5
|
+
import builtins as _builtins
|
|
7
6
|
import warnings
|
|
8
7
|
import sys
|
|
9
8
|
import pulumi
|
|
@@ -56,55 +55,55 @@ class GetAwsCrossAccountPolicyResult:
|
|
|
56
55
|
raise TypeError("Expected argument 'vpc_id' to be a str")
|
|
57
56
|
pulumi.set(__self__, "vpc_id", vpc_id)
|
|
58
57
|
|
|
59
|
-
@property
|
|
58
|
+
@_builtins.property
|
|
60
59
|
@pulumi.getter(name="awsAccountId")
|
|
61
|
-
def aws_account_id(self) -> Optional[
|
|
60
|
+
def aws_account_id(self) -> Optional[_builtins.str]:
|
|
62
61
|
return pulumi.get(self, "aws_account_id")
|
|
63
62
|
|
|
64
|
-
@property
|
|
63
|
+
@_builtins.property
|
|
65
64
|
@pulumi.getter(name="awsPartition")
|
|
66
|
-
def aws_partition(self) -> Optional[
|
|
65
|
+
def aws_partition(self) -> Optional[_builtins.str]:
|
|
67
66
|
return pulumi.get(self, "aws_partition")
|
|
68
67
|
|
|
69
|
-
@property
|
|
68
|
+
@_builtins.property
|
|
70
69
|
@pulumi.getter
|
|
71
|
-
def id(self) ->
|
|
70
|
+
def id(self) -> _builtins.str:
|
|
72
71
|
"""
|
|
73
72
|
The provider-assigned unique ID for this managed resource.
|
|
74
73
|
"""
|
|
75
74
|
return pulumi.get(self, "id")
|
|
76
75
|
|
|
77
|
-
@property
|
|
76
|
+
@_builtins.property
|
|
78
77
|
@pulumi.getter
|
|
79
|
-
def json(self) ->
|
|
78
|
+
def json(self) -> _builtins.str:
|
|
80
79
|
"""
|
|
81
80
|
AWS IAM Policy JSON document
|
|
82
81
|
"""
|
|
83
82
|
return pulumi.get(self, "json")
|
|
84
83
|
|
|
85
|
-
@property
|
|
84
|
+
@_builtins.property
|
|
86
85
|
@pulumi.getter(name="passRoles")
|
|
87
|
-
def pass_roles(self) -> Optional[Sequence[
|
|
86
|
+
def pass_roles(self) -> Optional[Sequence[_builtins.str]]:
|
|
88
87
|
return pulumi.get(self, "pass_roles")
|
|
89
88
|
|
|
90
|
-
@property
|
|
89
|
+
@_builtins.property
|
|
91
90
|
@pulumi.getter(name="policyType")
|
|
92
|
-
def policy_type(self) -> Optional[
|
|
91
|
+
def policy_type(self) -> Optional[_builtins.str]:
|
|
93
92
|
return pulumi.get(self, "policy_type")
|
|
94
93
|
|
|
95
|
-
@property
|
|
94
|
+
@_builtins.property
|
|
96
95
|
@pulumi.getter
|
|
97
|
-
def region(self) -> Optional[
|
|
96
|
+
def region(self) -> Optional[_builtins.str]:
|
|
98
97
|
return pulumi.get(self, "region")
|
|
99
98
|
|
|
100
|
-
@property
|
|
99
|
+
@_builtins.property
|
|
101
100
|
@pulumi.getter(name="securityGroupId")
|
|
102
|
-
def security_group_id(self) -> Optional[
|
|
101
|
+
def security_group_id(self) -> Optional[_builtins.str]:
|
|
103
102
|
return pulumi.get(self, "security_group_id")
|
|
104
103
|
|
|
105
|
-
@property
|
|
104
|
+
@_builtins.property
|
|
106
105
|
@pulumi.getter(name="vpcId")
|
|
107
|
-
def vpc_id(self) -> Optional[
|
|
106
|
+
def vpc_id(self) -> Optional[_builtins.str]:
|
|
108
107
|
return pulumi.get(self, "vpc_id")
|
|
109
108
|
|
|
110
109
|
|
|
@@ -125,13 +124,13 @@ class AwaitableGetAwsCrossAccountPolicyResult(GetAwsCrossAccountPolicyResult):
|
|
|
125
124
|
vpc_id=self.vpc_id)
|
|
126
125
|
|
|
127
126
|
|
|
128
|
-
def get_aws_cross_account_policy(aws_account_id: Optional[
|
|
129
|
-
aws_partition: Optional[
|
|
130
|
-
pass_roles: Optional[Sequence[
|
|
131
|
-
policy_type: Optional[
|
|
132
|
-
region: Optional[
|
|
133
|
-
security_group_id: Optional[
|
|
134
|
-
vpc_id: Optional[
|
|
127
|
+
def get_aws_cross_account_policy(aws_account_id: Optional[_builtins.str] = None,
|
|
128
|
+
aws_partition: Optional[_builtins.str] = None,
|
|
129
|
+
pass_roles: Optional[Sequence[_builtins.str]] = None,
|
|
130
|
+
policy_type: Optional[_builtins.str] = None,
|
|
131
|
+
region: Optional[_builtins.str] = None,
|
|
132
|
+
security_group_id: Optional[_builtins.str] = None,
|
|
133
|
+
vpc_id: Optional[_builtins.str] = None,
|
|
135
134
|
opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetAwsCrossAccountPolicyResult:
|
|
136
135
|
"""
|
|
137
136
|
This data source constructs necessary AWS cross-account policy for you, which is based on [official documentation](https://docs.databricks.com/administration-guide/account-api/iam-role.html#language-Your%C2%A0VPC,%C2%A0default).
|
|
@@ -159,14 +158,14 @@ def get_aws_cross_account_policy(aws_account_id: Optional[builtins.str] = None,
|
|
|
159
158
|
* InstanceProfile to manage AWS EC2 instance profiles that users can launch Cluster and access data, like databricks_mount.
|
|
160
159
|
|
|
161
160
|
|
|
162
|
-
:param
|
|
163
|
-
:param
|
|
164
|
-
:param Sequence[
|
|
161
|
+
:param _builtins.str aws_account_id: — Your AWS account ID, which is a number.
|
|
162
|
+
:param _builtins.str aws_partition: AWS partition. The options are `aws`, `aws-us-gov`, or `aws-us-gov-dod`. Defaults to `aws`
|
|
163
|
+
:param Sequence[_builtins.str] pass_roles: List of Data IAM role ARNs that are explicitly granted `iam:PassRole` action.
|
|
165
164
|
The below arguments are only valid for `restricted` policy type
|
|
166
|
-
:param
|
|
167
|
-
:param
|
|
168
|
-
:param
|
|
169
|
-
:param
|
|
165
|
+
:param _builtins.str policy_type: The type of cross account policy to generated: `managed` for Databricks-managed VPC and `customer` for customer-managed VPC, `restricted` for customer-managed VPC with policy restrictions
|
|
166
|
+
:param _builtins.str region: — AWS Region name for your VPC deployment, for example `us-west-2`.
|
|
167
|
+
:param _builtins.str security_group_id: — ID of your AWS security group. When you add a security group restriction, you cannot reuse the cross-account IAM role or reference a credentials ID (`credentials_id`) for any other workspaces. For those other workspaces, you must create separate roles, policies, and credentials objects.
|
|
168
|
+
:param _builtins.str vpc_id: — ID of the AWS VPC where you want to launch workspaces.
|
|
170
169
|
"""
|
|
171
170
|
__args__ = dict()
|
|
172
171
|
__args__['awsAccountId'] = aws_account_id
|
|
@@ -189,13 +188,13 @@ def get_aws_cross_account_policy(aws_account_id: Optional[builtins.str] = None,
|
|
|
189
188
|
region=pulumi.get(__ret__, 'region'),
|
|
190
189
|
security_group_id=pulumi.get(__ret__, 'security_group_id'),
|
|
191
190
|
vpc_id=pulumi.get(__ret__, 'vpc_id'))
|
|
192
|
-
def get_aws_cross_account_policy_output(aws_account_id: Optional[pulumi.Input[Optional[
|
|
193
|
-
aws_partition: Optional[pulumi.Input[Optional[
|
|
194
|
-
pass_roles: Optional[pulumi.Input[Optional[Sequence[
|
|
195
|
-
policy_type: Optional[pulumi.Input[Optional[
|
|
196
|
-
region: Optional[pulumi.Input[Optional[
|
|
197
|
-
security_group_id: Optional[pulumi.Input[Optional[
|
|
198
|
-
vpc_id: Optional[pulumi.Input[Optional[
|
|
191
|
+
def get_aws_cross_account_policy_output(aws_account_id: Optional[pulumi.Input[Optional[_builtins.str]]] = None,
|
|
192
|
+
aws_partition: Optional[pulumi.Input[Optional[_builtins.str]]] = None,
|
|
193
|
+
pass_roles: Optional[pulumi.Input[Optional[Sequence[_builtins.str]]]] = None,
|
|
194
|
+
policy_type: Optional[pulumi.Input[Optional[_builtins.str]]] = None,
|
|
195
|
+
region: Optional[pulumi.Input[Optional[_builtins.str]]] = None,
|
|
196
|
+
security_group_id: Optional[pulumi.Input[Optional[_builtins.str]]] = None,
|
|
197
|
+
vpc_id: Optional[pulumi.Input[Optional[_builtins.str]]] = None,
|
|
199
198
|
opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetAwsCrossAccountPolicyResult]:
|
|
200
199
|
"""
|
|
201
200
|
This data source constructs necessary AWS cross-account policy for you, which is based on [official documentation](https://docs.databricks.com/administration-guide/account-api/iam-role.html#language-Your%C2%A0VPC,%C2%A0default).
|
|
@@ -223,14 +222,14 @@ def get_aws_cross_account_policy_output(aws_account_id: Optional[pulumi.Input[Op
|
|
|
223
222
|
* InstanceProfile to manage AWS EC2 instance profiles that users can launch Cluster and access data, like databricks_mount.
|
|
224
223
|
|
|
225
224
|
|
|
226
|
-
:param
|
|
227
|
-
:param
|
|
228
|
-
:param Sequence[
|
|
225
|
+
:param _builtins.str aws_account_id: — Your AWS account ID, which is a number.
|
|
226
|
+
:param _builtins.str aws_partition: AWS partition. The options are `aws`, `aws-us-gov`, or `aws-us-gov-dod`. Defaults to `aws`
|
|
227
|
+
:param Sequence[_builtins.str] pass_roles: List of Data IAM role ARNs that are explicitly granted `iam:PassRole` action.
|
|
229
228
|
The below arguments are only valid for `restricted` policy type
|
|
230
|
-
:param
|
|
231
|
-
:param
|
|
232
|
-
:param
|
|
233
|
-
:param
|
|
229
|
+
:param _builtins.str policy_type: The type of cross account policy to generated: `managed` for Databricks-managed VPC and `customer` for customer-managed VPC, `restricted` for customer-managed VPC with policy restrictions
|
|
230
|
+
:param _builtins.str region: — AWS Region name for your VPC deployment, for example `us-west-2`.
|
|
231
|
+
:param _builtins.str security_group_id: — ID of your AWS security group. When you add a security group restriction, you cannot reuse the cross-account IAM role or reference a credentials ID (`credentials_id`) for any other workspaces. For those other workspaces, you must create separate roles, policies, and credentials objects.
|
|
232
|
+
:param _builtins.str vpc_id: — ID of the AWS VPC where you want to launch workspaces.
|
|
234
233
|
"""
|
|
235
234
|
__args__ = dict()
|
|
236
235
|
__args__['awsAccountId'] = aws_account_id
|
|
@@ -2,8 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import builtins
|
|
6
|
-
import copy
|
|
5
|
+
import builtins as _builtins
|
|
7
6
|
import warnings
|
|
8
7
|
import sys
|
|
9
8
|
import pulumi
|
|
@@ -50,42 +49,42 @@ class GetAwsUnityCatalogAssumeRolePolicyResult:
|
|
|
50
49
|
raise TypeError("Expected argument 'unity_catalog_iam_arn' to be a str")
|
|
51
50
|
pulumi.set(__self__, "unity_catalog_iam_arn", unity_catalog_iam_arn)
|
|
52
51
|
|
|
53
|
-
@property
|
|
52
|
+
@_builtins.property
|
|
54
53
|
@pulumi.getter(name="awsAccountId")
|
|
55
|
-
def aws_account_id(self) ->
|
|
54
|
+
def aws_account_id(self) -> _builtins.str:
|
|
56
55
|
return pulumi.get(self, "aws_account_id")
|
|
57
56
|
|
|
58
|
-
@property
|
|
57
|
+
@_builtins.property
|
|
59
58
|
@pulumi.getter(name="awsPartition")
|
|
60
|
-
def aws_partition(self) -> Optional[
|
|
59
|
+
def aws_partition(self) -> Optional[_builtins.str]:
|
|
61
60
|
return pulumi.get(self, "aws_partition")
|
|
62
61
|
|
|
63
|
-
@property
|
|
62
|
+
@_builtins.property
|
|
64
63
|
@pulumi.getter(name="externalId")
|
|
65
|
-
def external_id(self) ->
|
|
64
|
+
def external_id(self) -> _builtins.str:
|
|
66
65
|
return pulumi.get(self, "external_id")
|
|
67
66
|
|
|
68
|
-
@property
|
|
67
|
+
@_builtins.property
|
|
69
68
|
@pulumi.getter
|
|
70
|
-
def id(self) ->
|
|
69
|
+
def id(self) -> _builtins.str:
|
|
71
70
|
return pulumi.get(self, "id")
|
|
72
71
|
|
|
73
|
-
@property
|
|
72
|
+
@_builtins.property
|
|
74
73
|
@pulumi.getter
|
|
75
|
-
def json(self) ->
|
|
74
|
+
def json(self) -> _builtins.str:
|
|
76
75
|
"""
|
|
77
76
|
AWS IAM Policy JSON document for assume role
|
|
78
77
|
"""
|
|
79
78
|
return pulumi.get(self, "json")
|
|
80
79
|
|
|
81
|
-
@property
|
|
80
|
+
@_builtins.property
|
|
82
81
|
@pulumi.getter(name="roleName")
|
|
83
|
-
def role_name(self) ->
|
|
82
|
+
def role_name(self) -> _builtins.str:
|
|
84
83
|
return pulumi.get(self, "role_name")
|
|
85
84
|
|
|
86
|
-
@property
|
|
85
|
+
@_builtins.property
|
|
87
86
|
@pulumi.getter(name="unityCatalogIamArn")
|
|
88
|
-
def unity_catalog_iam_arn(self) ->
|
|
87
|
+
def unity_catalog_iam_arn(self) -> _builtins.str:
|
|
89
88
|
return pulumi.get(self, "unity_catalog_iam_arn")
|
|
90
89
|
|
|
91
90
|
|
|
@@ -104,11 +103,11 @@ class AwaitableGetAwsUnityCatalogAssumeRolePolicyResult(GetAwsUnityCatalogAssume
|
|
|
104
103
|
unity_catalog_iam_arn=self.unity_catalog_iam_arn)
|
|
105
104
|
|
|
106
105
|
|
|
107
|
-
def get_aws_unity_catalog_assume_role_policy(aws_account_id: Optional[
|
|
108
|
-
aws_partition: Optional[
|
|
109
|
-
external_id: Optional[
|
|
110
|
-
role_name: Optional[
|
|
111
|
-
unity_catalog_iam_arn: Optional[
|
|
106
|
+
def get_aws_unity_catalog_assume_role_policy(aws_account_id: Optional[_builtins.str] = None,
|
|
107
|
+
aws_partition: Optional[_builtins.str] = None,
|
|
108
|
+
external_id: Optional[_builtins.str] = None,
|
|
109
|
+
role_name: Optional[_builtins.str] = None,
|
|
110
|
+
unity_catalog_iam_arn: Optional[_builtins.str] = None,
|
|
112
111
|
opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetAwsUnityCatalogAssumeRolePolicyResult:
|
|
113
112
|
"""
|
|
114
113
|
This data source constructs the necessary AWS Unity Catalog assume role policy for you.
|
|
@@ -143,11 +142,11 @@ def get_aws_unity_catalog_assume_role_policy(aws_account_id: Optional[builtins.s
|
|
|
143
142
|
```
|
|
144
143
|
|
|
145
144
|
|
|
146
|
-
:param
|
|
147
|
-
:param
|
|
148
|
-
:param
|
|
149
|
-
:param
|
|
150
|
-
:param
|
|
145
|
+
:param _builtins.str aws_account_id: The Account ID of the current AWS account (not your Databricks account).
|
|
146
|
+
:param _builtins.str aws_partition: AWS partition. The options are `aws`,`aws-us-gov` or `aws-us-gov-dod`. Defaults to `aws`
|
|
147
|
+
:param _builtins.str external_id: The storage credential external id.
|
|
148
|
+
:param _builtins.str role_name: The name of the AWS IAM role to be created for Unity Catalog.
|
|
149
|
+
:param _builtins.str unity_catalog_iam_arn: The Databricks Unity Catalog IAM Role ARN. Defaults to `arn:aws:iam::414351767826:role/unity-catalog-prod-UCMasterRole-14S5ZJVKOTYTL` on standard AWS partition selection, `arn:aws-us-gov:iam::044793339203:role/unity-catalog-prod-UCMasterRole-1QRFA8SGY15OJ` on GovCloud partition selection, and `arn:aws-us-gov:iam::170661010020:role/unity-catalog-prod-UCMasterRole-1DI6DL6ZP26AS` on GovCloud DoD partition selection
|
|
151
150
|
"""
|
|
152
151
|
__args__ = dict()
|
|
153
152
|
__args__['awsAccountId'] = aws_account_id
|
|
@@ -166,11 +165,11 @@ def get_aws_unity_catalog_assume_role_policy(aws_account_id: Optional[builtins.s
|
|
|
166
165
|
json=pulumi.get(__ret__, 'json'),
|
|
167
166
|
role_name=pulumi.get(__ret__, 'role_name'),
|
|
168
167
|
unity_catalog_iam_arn=pulumi.get(__ret__, 'unity_catalog_iam_arn'))
|
|
169
|
-
def get_aws_unity_catalog_assume_role_policy_output(aws_account_id: Optional[pulumi.Input[
|
|
170
|
-
aws_partition: Optional[pulumi.Input[Optional[
|
|
171
|
-
external_id: Optional[pulumi.Input[
|
|
172
|
-
role_name: Optional[pulumi.Input[
|
|
173
|
-
unity_catalog_iam_arn: Optional[pulumi.Input[Optional[
|
|
168
|
+
def get_aws_unity_catalog_assume_role_policy_output(aws_account_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
169
|
+
aws_partition: Optional[pulumi.Input[Optional[_builtins.str]]] = None,
|
|
170
|
+
external_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
171
|
+
role_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
172
|
+
unity_catalog_iam_arn: Optional[pulumi.Input[Optional[_builtins.str]]] = None,
|
|
174
173
|
opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetAwsUnityCatalogAssumeRolePolicyResult]:
|
|
175
174
|
"""
|
|
176
175
|
This data source constructs the necessary AWS Unity Catalog assume role policy for you.
|
|
@@ -205,11 +204,11 @@ def get_aws_unity_catalog_assume_role_policy_output(aws_account_id: Optional[pul
|
|
|
205
204
|
```
|
|
206
205
|
|
|
207
206
|
|
|
208
|
-
:param
|
|
209
|
-
:param
|
|
210
|
-
:param
|
|
211
|
-
:param
|
|
212
|
-
:param
|
|
207
|
+
:param _builtins.str aws_account_id: The Account ID of the current AWS account (not your Databricks account).
|
|
208
|
+
:param _builtins.str aws_partition: AWS partition. The options are `aws`,`aws-us-gov` or `aws-us-gov-dod`. Defaults to `aws`
|
|
209
|
+
:param _builtins.str external_id: The storage credential external id.
|
|
210
|
+
:param _builtins.str role_name: The name of the AWS IAM role to be created for Unity Catalog.
|
|
211
|
+
:param _builtins.str unity_catalog_iam_arn: The Databricks Unity Catalog IAM Role ARN. Defaults to `arn:aws:iam::414351767826:role/unity-catalog-prod-UCMasterRole-14S5ZJVKOTYTL` on standard AWS partition selection, `arn:aws-us-gov:iam::044793339203:role/unity-catalog-prod-UCMasterRole-1QRFA8SGY15OJ` on GovCloud partition selection, and `arn:aws-us-gov:iam::170661010020:role/unity-catalog-prod-UCMasterRole-1DI6DL6ZP26AS` on GovCloud DoD partition selection
|
|
213
212
|
"""
|
|
214
213
|
__args__ = dict()
|
|
215
214
|
__args__['awsAccountId'] = aws_account_id
|
|
@@ -2,8 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import builtins
|
|
6
|
-
import copy
|
|
5
|
+
import builtins as _builtins
|
|
7
6
|
import warnings
|
|
8
7
|
import sys
|
|
9
8
|
import pulumi
|
|
@@ -50,45 +49,45 @@ class GetAwsUnityCatalogPolicyResult:
|
|
|
50
49
|
raise TypeError("Expected argument 'role_name' to be a str")
|
|
51
50
|
pulumi.set(__self__, "role_name", role_name)
|
|
52
51
|
|
|
53
|
-
@property
|
|
52
|
+
@_builtins.property
|
|
54
53
|
@pulumi.getter(name="awsAccountId")
|
|
55
|
-
def aws_account_id(self) ->
|
|
54
|
+
def aws_account_id(self) -> _builtins.str:
|
|
56
55
|
return pulumi.get(self, "aws_account_id")
|
|
57
56
|
|
|
58
|
-
@property
|
|
57
|
+
@_builtins.property
|
|
59
58
|
@pulumi.getter(name="awsPartition")
|
|
60
|
-
def aws_partition(self) -> Optional[
|
|
59
|
+
def aws_partition(self) -> Optional[_builtins.str]:
|
|
61
60
|
return pulumi.get(self, "aws_partition")
|
|
62
61
|
|
|
63
|
-
@property
|
|
62
|
+
@_builtins.property
|
|
64
63
|
@pulumi.getter(name="bucketName")
|
|
65
|
-
def bucket_name(self) ->
|
|
64
|
+
def bucket_name(self) -> _builtins.str:
|
|
66
65
|
return pulumi.get(self, "bucket_name")
|
|
67
66
|
|
|
68
|
-
@property
|
|
67
|
+
@_builtins.property
|
|
69
68
|
@pulumi.getter
|
|
70
|
-
def id(self) ->
|
|
69
|
+
def id(self) -> _builtins.str:
|
|
71
70
|
"""
|
|
72
71
|
The provider-assigned unique ID for this managed resource.
|
|
73
72
|
"""
|
|
74
73
|
return pulumi.get(self, "id")
|
|
75
74
|
|
|
76
|
-
@property
|
|
75
|
+
@_builtins.property
|
|
77
76
|
@pulumi.getter
|
|
78
|
-
def json(self) ->
|
|
77
|
+
def json(self) -> _builtins.str:
|
|
79
78
|
"""
|
|
80
79
|
AWS IAM Policy JSON document
|
|
81
80
|
"""
|
|
82
81
|
return pulumi.get(self, "json")
|
|
83
82
|
|
|
84
|
-
@property
|
|
83
|
+
@_builtins.property
|
|
85
84
|
@pulumi.getter(name="kmsName")
|
|
86
|
-
def kms_name(self) -> Optional[
|
|
85
|
+
def kms_name(self) -> Optional[_builtins.str]:
|
|
87
86
|
return pulumi.get(self, "kms_name")
|
|
88
87
|
|
|
89
|
-
@property
|
|
88
|
+
@_builtins.property
|
|
90
89
|
@pulumi.getter(name="roleName")
|
|
91
|
-
def role_name(self) ->
|
|
90
|
+
def role_name(self) -> _builtins.str:
|
|
92
91
|
return pulumi.get(self, "role_name")
|
|
93
92
|
|
|
94
93
|
|
|
@@ -107,11 +106,11 @@ class AwaitableGetAwsUnityCatalogPolicyResult(GetAwsUnityCatalogPolicyResult):
|
|
|
107
106
|
role_name=self.role_name)
|
|
108
107
|
|
|
109
108
|
|
|
110
|
-
def get_aws_unity_catalog_policy(aws_account_id: Optional[
|
|
111
|
-
aws_partition: Optional[
|
|
112
|
-
bucket_name: Optional[
|
|
113
|
-
kms_name: Optional[
|
|
114
|
-
role_name: Optional[
|
|
109
|
+
def get_aws_unity_catalog_policy(aws_account_id: Optional[_builtins.str] = None,
|
|
110
|
+
aws_partition: Optional[_builtins.str] = None,
|
|
111
|
+
bucket_name: Optional[_builtins.str] = None,
|
|
112
|
+
kms_name: Optional[_builtins.str] = None,
|
|
113
|
+
role_name: Optional[_builtins.str] = None,
|
|
115
114
|
opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetAwsUnityCatalogPolicyResult:
|
|
116
115
|
"""
|
|
117
116
|
This data source constructs the necessary AWS Unity Catalog policy for you.
|
|
@@ -146,11 +145,11 @@ def get_aws_unity_catalog_policy(aws_account_id: Optional[builtins.str] = None,
|
|
|
146
145
|
```
|
|
147
146
|
|
|
148
147
|
|
|
149
|
-
:param
|
|
150
|
-
:param
|
|
151
|
-
:param
|
|
152
|
-
:param
|
|
153
|
-
:param
|
|
148
|
+
:param _builtins.str aws_account_id: The Account ID of the current AWS account (not your Databricks account).
|
|
149
|
+
:param _builtins.str aws_partition: AWS partition. The options are `aws`, `aws-us-gov`, or `aws-us-gov-dod`. Defaults to `aws`
|
|
150
|
+
:param _builtins.str bucket_name: The name of the S3 bucket used as root storage location for [managed tables](https://docs.databricks.com/data-governance/unity-catalog/index.html#managed-table) in Unity Catalog. The name must follow the [S3 bucket naming rules](https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html).
|
|
151
|
+
:param _builtins.str kms_name: If encryption is enabled, provide the ARN of the KMS key that encrypts the S3 bucket contents. If encryption is disabled, do not provide this argument.
|
|
152
|
+
:param _builtins.str role_name: The name of the AWS IAM role that you created in the previous step in the [official documentation](https://docs.databricks.com/data-governance/unity-catalog/get-started.html#configure-a-storage-bucket-and-iam-role-in-aws).
|
|
154
153
|
"""
|
|
155
154
|
__args__ = dict()
|
|
156
155
|
__args__['awsAccountId'] = aws_account_id
|
|
@@ -169,11 +168,11 @@ def get_aws_unity_catalog_policy(aws_account_id: Optional[builtins.str] = None,
|
|
|
169
168
|
json=pulumi.get(__ret__, 'json'),
|
|
170
169
|
kms_name=pulumi.get(__ret__, 'kms_name'),
|
|
171
170
|
role_name=pulumi.get(__ret__, 'role_name'))
|
|
172
|
-
def get_aws_unity_catalog_policy_output(aws_account_id: Optional[pulumi.Input[
|
|
173
|
-
aws_partition: Optional[pulumi.Input[Optional[
|
|
174
|
-
bucket_name: Optional[pulumi.Input[
|
|
175
|
-
kms_name: Optional[pulumi.Input[Optional[
|
|
176
|
-
role_name: Optional[pulumi.Input[
|
|
171
|
+
def get_aws_unity_catalog_policy_output(aws_account_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
172
|
+
aws_partition: Optional[pulumi.Input[Optional[_builtins.str]]] = None,
|
|
173
|
+
bucket_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
174
|
+
kms_name: Optional[pulumi.Input[Optional[_builtins.str]]] = None,
|
|
175
|
+
role_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
177
176
|
opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetAwsUnityCatalogPolicyResult]:
|
|
178
177
|
"""
|
|
179
178
|
This data source constructs the necessary AWS Unity Catalog policy for you.
|
|
@@ -208,11 +207,11 @@ def get_aws_unity_catalog_policy_output(aws_account_id: Optional[pulumi.Input[bu
|
|
|
208
207
|
```
|
|
209
208
|
|
|
210
209
|
|
|
211
|
-
:param
|
|
212
|
-
:param
|
|
213
|
-
:param
|
|
214
|
-
:param
|
|
215
|
-
:param
|
|
210
|
+
:param _builtins.str aws_account_id: The Account ID of the current AWS account (not your Databricks account).
|
|
211
|
+
:param _builtins.str aws_partition: AWS partition. The options are `aws`, `aws-us-gov`, or `aws-us-gov-dod`. Defaults to `aws`
|
|
212
|
+
:param _builtins.str bucket_name: The name of the S3 bucket used as root storage location for [managed tables](https://docs.databricks.com/data-governance/unity-catalog/index.html#managed-table) in Unity Catalog. The name must follow the [S3 bucket naming rules](https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html).
|
|
213
|
+
:param _builtins.str kms_name: If encryption is enabled, provide the ARN of the KMS key that encrypts the S3 bucket contents. If encryption is disabled, do not provide this argument.
|
|
214
|
+
:param _builtins.str role_name: The name of the AWS IAM role that you created in the previous step in the [official documentation](https://docs.databricks.com/data-governance/unity-catalog/get-started.html#configure-a-storage-bucket-and-iam-role-in-aws).
|
|
216
215
|
"""
|
|
217
216
|
__args__ = dict()
|
|
218
217
|
__args__['awsAccountId'] = aws_account_id
|