pulumi-snowflake 0.50.2a1709892015__py3-none-any.whl → 1.2.0a1736835738__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of pulumi-snowflake might be problematic. Click here for more details.

Files changed (182) hide show
  1. pulumi_snowflake/__init__.py +224 -172
  2. pulumi_snowflake/_inputs.py +52854 -1662
  3. pulumi_snowflake/_utilities.py +41 -5
  4. pulumi_snowflake/account.py +188 -214
  5. pulumi_snowflake/account_authentication_policy_attachment.py +149 -0
  6. pulumi_snowflake/account_parameter.py +21 -44
  7. pulumi_snowflake/account_password_policy_attachment.py +7 -28
  8. pulumi_snowflake/account_role.py +250 -0
  9. pulumi_snowflake/alert.py +38 -43
  10. pulumi_snowflake/api_authentication_integration_with_authorization_code_grant.py +704 -0
  11. pulumi_snowflake/api_authentication_integration_with_client_credentials.py +657 -0
  12. pulumi_snowflake/api_authentication_integration_with_jwt_bearer.py +692 -0
  13. pulumi_snowflake/api_integration.py +35 -50
  14. pulumi_snowflake/authentication_policy.py +622 -0
  15. pulumi_snowflake/config/__init__.pyi +76 -99
  16. pulumi_snowflake/config/outputs.py +5 -0
  17. pulumi_snowflake/config/vars.py +93 -124
  18. pulumi_snowflake/cortex_search_service.py +596 -0
  19. pulumi_snowflake/database.py +819 -209
  20. pulumi_snowflake/database_role.py +81 -40
  21. pulumi_snowflake/dynamic_table.py +44 -47
  22. pulumi_snowflake/email_notification_integration.py +35 -26
  23. pulumi_snowflake/{unsafe_execute.py → execute.py} +36 -139
  24. pulumi_snowflake/external_function.py +54 -71
  25. pulumi_snowflake/external_oauth_integration.py +593 -538
  26. pulumi_snowflake/external_table.py +67 -86
  27. pulumi_snowflake/external_volume.py +382 -0
  28. pulumi_snowflake/failover_group.py +59 -96
  29. pulumi_snowflake/file_format.py +33 -24
  30. pulumi_snowflake/function_java.py +1211 -0
  31. pulumi_snowflake/function_javascript.py +882 -0
  32. pulumi_snowflake/function_python.py +1212 -0
  33. pulumi_snowflake/function_scala.py +1212 -0
  34. pulumi_snowflake/function_sql.py +835 -0
  35. pulumi_snowflake/get_account_roles.py +129 -0
  36. pulumi_snowflake/get_accounts.py +53 -22
  37. pulumi_snowflake/get_alerts.py +22 -5
  38. pulumi_snowflake/get_connections.py +109 -0
  39. pulumi_snowflake/get_cortex_search_services.py +216 -0
  40. pulumi_snowflake/get_current_account.py +24 -9
  41. pulumi_snowflake/get_current_role.py +14 -7
  42. pulumi_snowflake/get_database.py +25 -5
  43. pulumi_snowflake/get_database_role.py +162 -0
  44. pulumi_snowflake/get_database_roles.py +79 -43
  45. pulumi_snowflake/get_databases.py +91 -69
  46. pulumi_snowflake/get_dynamic_tables.py +36 -19
  47. pulumi_snowflake/get_external_functions.py +28 -5
  48. pulumi_snowflake/get_external_tables.py +28 -5
  49. pulumi_snowflake/get_failover_groups.py +18 -7
  50. pulumi_snowflake/get_file_formats.py +28 -5
  51. pulumi_snowflake/get_functions.py +28 -5
  52. pulumi_snowflake/get_grants.py +207 -80
  53. pulumi_snowflake/get_masking_policies.py +91 -47
  54. pulumi_snowflake/get_materialized_views.py +28 -5
  55. pulumi_snowflake/get_network_policies.py +129 -0
  56. pulumi_snowflake/get_parameters.py +38 -11
  57. pulumi_snowflake/get_pipes.py +28 -5
  58. pulumi_snowflake/get_procedures.py +28 -5
  59. pulumi_snowflake/get_resource_monitors.py +37 -20
  60. pulumi_snowflake/get_row_access_policies.py +91 -47
  61. pulumi_snowflake/get_schemas.py +145 -37
  62. pulumi_snowflake/get_secrets.py +200 -0
  63. pulumi_snowflake/get_security_integrations.py +129 -0
  64. pulumi_snowflake/get_sequences.py +28 -5
  65. pulumi_snowflake/get_shares.py +18 -5
  66. pulumi_snowflake/get_stages.py +28 -5
  67. pulumi_snowflake/get_storage_integrations.py +16 -5
  68. pulumi_snowflake/get_streamlits.py +170 -0
  69. pulumi_snowflake/get_streams.py +114 -50
  70. pulumi_snowflake/get_system_generate_scim_access_token.py +18 -5
  71. pulumi_snowflake/get_system_get_aws_sns_iam_policy.py +32 -7
  72. pulumi_snowflake/get_system_get_private_link_config.py +121 -6
  73. pulumi_snowflake/get_system_get_snowflake_platform_info.py +15 -7
  74. pulumi_snowflake/get_tables.py +28 -5
  75. pulumi_snowflake/get_tags.py +130 -0
  76. pulumi_snowflake/get_tasks.py +134 -50
  77. pulumi_snowflake/get_users.py +116 -40
  78. pulumi_snowflake/get_views.py +114 -50
  79. pulumi_snowflake/get_warehouses.py +79 -22
  80. pulumi_snowflake/grant_account_role.py +28 -61
  81. pulumi_snowflake/grant_application_role.py +257 -0
  82. pulumi_snowflake/grant_database_role.py +35 -108
  83. pulumi_snowflake/grant_ownership.py +382 -0
  84. pulumi_snowflake/grant_privileges_to_account_role.py +42 -78
  85. pulumi_snowflake/grant_privileges_to_database_role.py +37 -223
  86. pulumi_snowflake/grant_privileges_to_share.py +96 -44
  87. pulumi_snowflake/legacy_service_user.py +3670 -0
  88. pulumi_snowflake/managed_account.py +42 -9
  89. pulumi_snowflake/masking_policy.py +213 -306
  90. pulumi_snowflake/materialized_view.py +62 -67
  91. pulumi_snowflake/network_policy.py +217 -57
  92. pulumi_snowflake/network_policy_attachment.py +7 -32
  93. pulumi_snowflake/network_rule.py +473 -0
  94. pulumi_snowflake/notification_integration.py +51 -82
  95. pulumi_snowflake/oauth_integration_for_custom_clients.py +906 -0
  96. pulumi_snowflake/{oauth_integration.py → oauth_integration_for_partner_applications.py} +191 -188
  97. pulumi_snowflake/object_parameter.py +12 -99
  98. pulumi_snowflake/outputs.py +49200 -2928
  99. pulumi_snowflake/password_policy.py +41 -28
  100. pulumi_snowflake/pipe.py +33 -0
  101. pulumi_snowflake/primary_connection.py +330 -0
  102. pulumi_snowflake/procedure_java.py +1273 -0
  103. pulumi_snowflake/procedure_javascript.py +895 -0
  104. pulumi_snowflake/procedure_python.py +1226 -0
  105. pulumi_snowflake/procedure_scala.py +1273 -0
  106. pulumi_snowflake/procedure_sql.py +895 -0
  107. pulumi_snowflake/provider.py +378 -613
  108. pulumi_snowflake/pulumi-plugin.json +2 -1
  109. pulumi_snowflake/resource_monitor.py +118 -323
  110. pulumi_snowflake/row_access_policy.py +200 -145
  111. pulumi_snowflake/{saml_integration.py → saml2_integration.py} +356 -295
  112. pulumi_snowflake/schema.py +949 -174
  113. pulumi_snowflake/scim_integration.py +286 -105
  114. pulumi_snowflake/secondary_connection.py +339 -0
  115. pulumi_snowflake/secondary_database.py +1080 -0
  116. pulumi_snowflake/secret_with_authorization_code_grant.py +548 -0
  117. pulumi_snowflake/secret_with_basic_authentication.py +500 -0
  118. pulumi_snowflake/secret_with_client_credentials.py +511 -0
  119. pulumi_snowflake/secret_with_generic_string.py +452 -0
  120. pulumi_snowflake/sequence.py +9 -30
  121. pulumi_snowflake/service_user.py +3585 -0
  122. pulumi_snowflake/share.py +35 -26
  123. pulumi_snowflake/shared_database.py +939 -0
  124. pulumi_snowflake/stage.py +95 -80
  125. pulumi_snowflake/storage_integration.py +48 -2
  126. pulumi_snowflake/stream_on_directory_table.py +517 -0
  127. pulumi_snowflake/stream_on_external_table.py +632 -0
  128. pulumi_snowflake/stream_on_table.py +666 -0
  129. pulumi_snowflake/stream_on_view.py +666 -0
  130. pulumi_snowflake/streamlit.py +671 -0
  131. pulumi_snowflake/table.py +86 -93
  132. pulumi_snowflake/table_column_masking_policy_application.py +7 -14
  133. pulumi_snowflake/table_constraint.py +29 -168
  134. pulumi_snowflake/tag.py +142 -70
  135. pulumi_snowflake/tag_association.py +40 -211
  136. pulumi_snowflake/task.py +3048 -414
  137. pulumi_snowflake/user.py +3351 -380
  138. pulumi_snowflake/user_authentication_policy_attachment.py +197 -0
  139. pulumi_snowflake/user_password_policy_attachment.py +7 -6
  140. pulumi_snowflake/user_public_keys.py +5 -0
  141. pulumi_snowflake/view.py +466 -211
  142. pulumi_snowflake/warehouse.py +184 -164
  143. {pulumi_snowflake-0.50.2a1709892015.dist-info → pulumi_snowflake-1.2.0a1736835738.dist-info}/METADATA +7 -6
  144. pulumi_snowflake-1.2.0a1736835738.dist-info/RECORD +148 -0
  145. {pulumi_snowflake-0.50.2a1709892015.dist-info → pulumi_snowflake-1.2.0a1736835738.dist-info}/WHEEL +1 -1
  146. pulumi_snowflake/account_grant.py +0 -339
  147. pulumi_snowflake/database_grant.py +0 -491
  148. pulumi_snowflake/external_table_grant.py +0 -686
  149. pulumi_snowflake/failover_group_grant.py +0 -388
  150. pulumi_snowflake/file_format_grant.py +0 -631
  151. pulumi_snowflake/function.py +0 -868
  152. pulumi_snowflake/function_grant.py +0 -741
  153. pulumi_snowflake/get_role.py +0 -117
  154. pulumi_snowflake/get_roles.py +0 -116
  155. pulumi_snowflake/grant_privileges_to_role.py +0 -667
  156. pulumi_snowflake/integration_grant.py +0 -436
  157. pulumi_snowflake/masking_policy_grant.py +0 -538
  158. pulumi_snowflake/materialized_view_grant.py +0 -685
  159. pulumi_snowflake/pipe_grant.py +0 -583
  160. pulumi_snowflake/procedure.py +0 -883
  161. pulumi_snowflake/procedure_grant.py +0 -741
  162. pulumi_snowflake/resource_monitor_grant.py +0 -383
  163. pulumi_snowflake/role.py +0 -269
  164. pulumi_snowflake/role_grants.py +0 -348
  165. pulumi_snowflake/role_ownership_grant.py +0 -334
  166. pulumi_snowflake/row_access_policy_grant.py +0 -536
  167. pulumi_snowflake/schema_grant.py +0 -643
  168. pulumi_snowflake/sequence_grant.py +0 -631
  169. pulumi_snowflake/session_parameter.py +0 -328
  170. pulumi_snowflake/stage_grant.py +0 -631
  171. pulumi_snowflake/stream.py +0 -610
  172. pulumi_snowflake/stream_grant.py +0 -631
  173. pulumi_snowflake/table_grant.py +0 -673
  174. pulumi_snowflake/tag_grant.py +0 -528
  175. pulumi_snowflake/tag_masking_policy_association.py +0 -210
  176. pulumi_snowflake/task_grant.py +0 -631
  177. pulumi_snowflake/user_grant.py +0 -390
  178. pulumi_snowflake/user_ownership_grant.py +0 -286
  179. pulumi_snowflake/view_grant.py +0 -701
  180. pulumi_snowflake/warehouse_grant.py +0 -436
  181. pulumi_snowflake-0.50.2a1709892015.dist-info/RECORD +0 -136
  182. {pulumi_snowflake-0.50.2a1709892015.dist-info → pulumi_snowflake-1.2.0a1736835738.dist-info}/top_level.txt +0 -0
@@ -4,10 +4,17 @@
4
4
 
5
5
  import copy
6
6
  import warnings
7
+ import sys
7
8
  import pulumi
8
9
  import pulumi.runtime
9
10
  from typing import Any, Mapping, Optional, Sequence, Union, overload
11
+ if sys.version_info >= (3, 11):
12
+ from typing import NotRequired, TypedDict, TypeAlias
13
+ else:
14
+ from typing_extensions import NotRequired, TypedDict, TypeAlias
10
15
  from . import _utilities
16
+ from . import outputs
17
+ from ._inputs import *
11
18
 
12
19
  __all__ = ['AccountArgs', 'Account']
13
20
 
@@ -17,45 +24,44 @@ class AccountArgs:
17
24
  admin_name: pulumi.Input[str],
18
25
  edition: pulumi.Input[str],
19
26
  email: pulumi.Input[str],
27
+ grace_period_in_days: pulumi.Input[int],
20
28
  admin_password: Optional[pulumi.Input[str]] = None,
21
29
  admin_rsa_public_key: Optional[pulumi.Input[str]] = None,
30
+ admin_user_type: Optional[pulumi.Input[str]] = None,
22
31
  comment: Optional[pulumi.Input[str]] = None,
23
32
  first_name: Optional[pulumi.Input[str]] = None,
24
- grace_period_in_days: Optional[pulumi.Input[int]] = None,
33
+ is_org_admin: Optional[pulumi.Input[str]] = None,
25
34
  last_name: Optional[pulumi.Input[str]] = None,
26
- must_change_password: Optional[pulumi.Input[bool]] = None,
35
+ must_change_password: Optional[pulumi.Input[str]] = None,
27
36
  name: Optional[pulumi.Input[str]] = None,
28
37
  region: Optional[pulumi.Input[str]] = None,
29
38
  region_group: Optional[pulumi.Input[str]] = None):
30
39
  """
31
40
  The set of arguments for constructing a Account resource.
32
- :param pulumi.Input[str] admin_name: Login name of the initial administrative user of the account. A new user is created in the new account with this name and password and granted the ACCOUNTADMIN role in the account. A login name can be any string consisting of letters, numbers, and underscores. Login names are always case-insensitive.
33
- :param pulumi.Input[str] edition: [Snowflake Edition](https://docs.snowflake.com/en/user-guide/intro-editions.html) of the account. Valid values are: STANDARD | ENTERPRISE | BUSINESS_CRITICAL
34
- :param pulumi.Input[str] email: Email address of the initial administrative user of the account. This email address is used to send any notifications about the account.
35
- :param pulumi.Input[str] admin_password: Password for the initial administrative user of the account. Optional if the `ADMIN_RSA_PUBLIC_KEY` parameter is specified. For more information about passwords in Snowflake, see [Snowflake-provided Password Policy](https://docs.snowflake.com/en/sql-reference/sql/create-account.html#:~:text=Snowflake%2Dprovided%20Password%20Policy).
36
- :param pulumi.Input[str] admin_rsa_public_key: Assigns a public key to the initial administrative user of the account in order to implement [key pair authentication](https://docs.snowflake.com/en/sql-reference/sql/create-account.html#:~:text=key%20pair%20authentication) for the user. Optional if the `ADMIN_PASSWORD` parameter is specified.
41
+ :param pulumi.Input[str] edition: Snowflake Edition of the account. See more about Snowflake Editions in the [official documentation](https://docs.snowflake.com/en/user-guide/intro-editions). Valid options are: `STANDARD` | `ENTERPRISE` | `BUSINESS_CRITICAL`
42
+ :param pulumi.Input[int] grace_period_in_days: Specifies the number of days during which the account can be restored (“undropped”). The minimum is 3 days and the maximum is 90 days.
37
43
  :param pulumi.Input[str] comment: Specifies a comment for the account.
38
- :param pulumi.Input[str] first_name: First name of the initial administrative user of the account
39
- :param pulumi.Input[int] grace_period_in_days: Specifies the number of days to wait before dropping the account. The default is 3 days.
40
- :param pulumi.Input[str] last_name: Last name of the initial administrative user of the account
41
- :param pulumi.Input[bool] must_change_password: Specifies whether the new user created to administer the account is forced to change their password upon first login into the account.
42
- :param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the account; must be unique within an organization, regardless of which Snowflake Region the account is in. In addition, the identifier must start with an alphabetic character and cannot contain spaces or special characters except for underscores (_). Note that if the account name includes underscores, features that do not accept account names with underscores (e.g. Okta SSO or SCIM) can reference a version of the account name that substitutes hyphens (-) for the underscores.
43
- :param pulumi.Input[str] region: ID of the Snowflake Region where the account is created. If no value is provided, Snowflake creates the account in the same Snowflake Region as the current account (i.e. the account in which the CREATE ACCOUNT statement is executed.)
44
- :param pulumi.Input[str] region_group: ID of the Snowflake Region where the account is created. If no value is provided, Snowflake creates the account in the same Snowflake Region as the current account (i.e. the account in which the CREATE ACCOUNT statement is executed.)
44
+ :param pulumi.Input[str] is_org_admin: Sets an account property that determines whether the ORGADMIN role is enabled in the account. Only an organization administrator (i.e. user with the ORGADMIN role) can set the property.
45
+ :param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the account. It must be unique within an organization, regardless of which Snowflake Region the account is in and must start with an alphabetic character and cannot contain spaces or special characters except for underscores (_). Note that if the account name includes underscores, features that do not accept account names with underscores (e.g. Okta SSO or SCIM) can reference a version of the account name that substitutes hyphens (-) for the underscores.
46
+ :param pulumi.Input[str] region: [Snowflake Region ID](https://docs.snowflake.com/en/user-guide/admin-account-identifier.html#label-snowflake-region-ids) of the region where the account is created. If no value is provided, Snowflake creates the account in the same Snowflake Region as the current account (i.e. the account in which the CREATE ACCOUNT statement is executed.)
47
+ :param pulumi.Input[str] region_group: ID of the region group where the account is created. To retrieve the region group ID for existing accounts in your organization, execute the [SHOW REGIONS](https://docs.snowflake.com/en/sql-reference/sql/show-regions) command. For information about when you might need to specify region group, see [Region groups](https://docs.snowflake.com/en/user-guide/admin-account-identifier.html#label-region-groups).
45
48
  """
46
49
  pulumi.set(__self__, "admin_name", admin_name)
47
50
  pulumi.set(__self__, "edition", edition)
48
51
  pulumi.set(__self__, "email", email)
52
+ pulumi.set(__self__, "grace_period_in_days", grace_period_in_days)
49
53
  if admin_password is not None:
50
54
  pulumi.set(__self__, "admin_password", admin_password)
51
55
  if admin_rsa_public_key is not None:
52
56
  pulumi.set(__self__, "admin_rsa_public_key", admin_rsa_public_key)
57
+ if admin_user_type is not None:
58
+ pulumi.set(__self__, "admin_user_type", admin_user_type)
53
59
  if comment is not None:
54
60
  pulumi.set(__self__, "comment", comment)
55
61
  if first_name is not None:
56
62
  pulumi.set(__self__, "first_name", first_name)
57
- if grace_period_in_days is not None:
58
- pulumi.set(__self__, "grace_period_in_days", grace_period_in_days)
63
+ if is_org_admin is not None:
64
+ pulumi.set(__self__, "is_org_admin", is_org_admin)
59
65
  if last_name is not None:
60
66
  pulumi.set(__self__, "last_name", last_name)
61
67
  if must_change_password is not None:
@@ -70,9 +76,6 @@ class AccountArgs:
70
76
  @property
71
77
  @pulumi.getter(name="adminName")
72
78
  def admin_name(self) -> pulumi.Input[str]:
73
- """
74
- Login name of the initial administrative user of the account. A new user is created in the new account with this name and password and granted the ACCOUNTADMIN role in the account. A login name can be any string consisting of letters, numbers, and underscores. Login names are always case-insensitive.
75
- """
76
79
  return pulumi.get(self, "admin_name")
77
80
 
78
81
  @admin_name.setter
@@ -83,7 +86,7 @@ class AccountArgs:
83
86
  @pulumi.getter
84
87
  def edition(self) -> pulumi.Input[str]:
85
88
  """
86
- [Snowflake Edition](https://docs.snowflake.com/en/user-guide/intro-editions.html) of the account. Valid values are: STANDARD | ENTERPRISE | BUSINESS_CRITICAL
89
+ Snowflake Edition of the account. See more about Snowflake Editions in the [official documentation](https://docs.snowflake.com/en/user-guide/intro-editions). Valid options are: `STANDARD` | `ENTERPRISE` | `BUSINESS_CRITICAL`
87
90
  """
88
91
  return pulumi.get(self, "edition")
89
92
 
@@ -94,9 +97,6 @@ class AccountArgs:
94
97
  @property
95
98
  @pulumi.getter
96
99
  def email(self) -> pulumi.Input[str]:
97
- """
98
- Email address of the initial administrative user of the account. This email address is used to send any notifications about the account.
99
- """
100
100
  return pulumi.get(self, "email")
101
101
 
102
102
  @email.setter
@@ -104,11 +104,20 @@ class AccountArgs:
104
104
  pulumi.set(self, "email", value)
105
105
 
106
106
  @property
107
- @pulumi.getter(name="adminPassword")
108
- def admin_password(self) -> Optional[pulumi.Input[str]]:
107
+ @pulumi.getter(name="gracePeriodInDays")
108
+ def grace_period_in_days(self) -> pulumi.Input[int]:
109
109
  """
110
- Password for the initial administrative user of the account. Optional if the `ADMIN_RSA_PUBLIC_KEY` parameter is specified. For more information about passwords in Snowflake, see [Snowflake-provided Password Policy](https://docs.snowflake.com/en/sql-reference/sql/create-account.html#:~:text=Snowflake%2Dprovided%20Password%20Policy).
110
+ Specifies the number of days during which the account can be restored (“undropped”). The minimum is 3 days and the maximum is 90 days.
111
111
  """
112
+ return pulumi.get(self, "grace_period_in_days")
113
+
114
+ @grace_period_in_days.setter
115
+ def grace_period_in_days(self, value: pulumi.Input[int]):
116
+ pulumi.set(self, "grace_period_in_days", value)
117
+
118
+ @property
119
+ @pulumi.getter(name="adminPassword")
120
+ def admin_password(self) -> Optional[pulumi.Input[str]]:
112
121
  return pulumi.get(self, "admin_password")
113
122
 
114
123
  @admin_password.setter
@@ -118,15 +127,21 @@ class AccountArgs:
118
127
  @property
119
128
  @pulumi.getter(name="adminRsaPublicKey")
120
129
  def admin_rsa_public_key(self) -> Optional[pulumi.Input[str]]:
121
- """
122
- Assigns a public key to the initial administrative user of the account in order to implement [key pair authentication](https://docs.snowflake.com/en/sql-reference/sql/create-account.html#:~:text=key%20pair%20authentication) for the user. Optional if the `ADMIN_PASSWORD` parameter is specified.
123
- """
124
130
  return pulumi.get(self, "admin_rsa_public_key")
125
131
 
126
132
  @admin_rsa_public_key.setter
127
133
  def admin_rsa_public_key(self, value: Optional[pulumi.Input[str]]):
128
134
  pulumi.set(self, "admin_rsa_public_key", value)
129
135
 
136
+ @property
137
+ @pulumi.getter(name="adminUserType")
138
+ def admin_user_type(self) -> Optional[pulumi.Input[str]]:
139
+ return pulumi.get(self, "admin_user_type")
140
+
141
+ @admin_user_type.setter
142
+ def admin_user_type(self, value: Optional[pulumi.Input[str]]):
143
+ pulumi.set(self, "admin_user_type", value)
144
+
130
145
  @property
131
146
  @pulumi.getter
132
147
  def comment(self) -> Optional[pulumi.Input[str]]:
@@ -142,9 +157,6 @@ class AccountArgs:
142
157
  @property
143
158
  @pulumi.getter(name="firstName")
144
159
  def first_name(self) -> Optional[pulumi.Input[str]]:
145
- """
146
- First name of the initial administrative user of the account
147
- """
148
160
  return pulumi.get(self, "first_name")
149
161
 
150
162
  @first_name.setter
@@ -152,23 +164,20 @@ class AccountArgs:
152
164
  pulumi.set(self, "first_name", value)
153
165
 
154
166
  @property
155
- @pulumi.getter(name="gracePeriodInDays")
156
- def grace_period_in_days(self) -> Optional[pulumi.Input[int]]:
167
+ @pulumi.getter(name="isOrgAdmin")
168
+ def is_org_admin(self) -> Optional[pulumi.Input[str]]:
157
169
  """
158
- Specifies the number of days to wait before dropping the account. The default is 3 days.
170
+ Sets an account property that determines whether the ORGADMIN role is enabled in the account. Only an organization administrator (i.e. user with the ORGADMIN role) can set the property.
159
171
  """
160
- return pulumi.get(self, "grace_period_in_days")
172
+ return pulumi.get(self, "is_org_admin")
161
173
 
162
- @grace_period_in_days.setter
163
- def grace_period_in_days(self, value: Optional[pulumi.Input[int]]):
164
- pulumi.set(self, "grace_period_in_days", value)
174
+ @is_org_admin.setter
175
+ def is_org_admin(self, value: Optional[pulumi.Input[str]]):
176
+ pulumi.set(self, "is_org_admin", value)
165
177
 
166
178
  @property
167
179
  @pulumi.getter(name="lastName")
168
180
  def last_name(self) -> Optional[pulumi.Input[str]]:
169
- """
170
- Last name of the initial administrative user of the account
171
- """
172
181
  return pulumi.get(self, "last_name")
173
182
 
174
183
  @last_name.setter
@@ -177,21 +186,18 @@ class AccountArgs:
177
186
 
178
187
  @property
179
188
  @pulumi.getter(name="mustChangePassword")
180
- def must_change_password(self) -> Optional[pulumi.Input[bool]]:
181
- """
182
- Specifies whether the new user created to administer the account is forced to change their password upon first login into the account.
183
- """
189
+ def must_change_password(self) -> Optional[pulumi.Input[str]]:
184
190
  return pulumi.get(self, "must_change_password")
185
191
 
186
192
  @must_change_password.setter
187
- def must_change_password(self, value: Optional[pulumi.Input[bool]]):
193
+ def must_change_password(self, value: Optional[pulumi.Input[str]]):
188
194
  pulumi.set(self, "must_change_password", value)
189
195
 
190
196
  @property
191
197
  @pulumi.getter
192
198
  def name(self) -> Optional[pulumi.Input[str]]:
193
199
  """
194
- Specifies the identifier (i.e. name) for the account; must be unique within an organization, regardless of which Snowflake Region the account is in. In addition, the identifier must start with an alphabetic character and cannot contain spaces or special characters except for underscores (_). Note that if the account name includes underscores, features that do not accept account names with underscores (e.g. Okta SSO or SCIM) can reference a version of the account name that substitutes hyphens (-) for the underscores.
200
+ Specifies the identifier (i.e. name) for the account. It must be unique within an organization, regardless of which Snowflake Region the account is in and must start with an alphabetic character and cannot contain spaces or special characters except for underscores (_). Note that if the account name includes underscores, features that do not accept account names with underscores (e.g. Okta SSO or SCIM) can reference a version of the account name that substitutes hyphens (-) for the underscores.
195
201
  """
196
202
  return pulumi.get(self, "name")
197
203
 
@@ -203,7 +209,7 @@ class AccountArgs:
203
209
  @pulumi.getter
204
210
  def region(self) -> Optional[pulumi.Input[str]]:
205
211
  """
206
- ID of the Snowflake Region where the account is created. If no value is provided, Snowflake creates the account in the same Snowflake Region as the current account (i.e. the account in which the CREATE ACCOUNT statement is executed.)
212
+ [Snowflake Region ID](https://docs.snowflake.com/en/user-guide/admin-account-identifier.html#label-snowflake-region-ids) of the region where the account is created. If no value is provided, Snowflake creates the account in the same Snowflake Region as the current account (i.e. the account in which the CREATE ACCOUNT statement is executed.)
207
213
  """
208
214
  return pulumi.get(self, "region")
209
215
 
@@ -215,7 +221,7 @@ class AccountArgs:
215
221
  @pulumi.getter(name="regionGroup")
216
222
  def region_group(self) -> Optional[pulumi.Input[str]]:
217
223
  """
218
- ID of the Snowflake Region where the account is created. If no value is provided, Snowflake creates the account in the same Snowflake Region as the current account (i.e. the account in which the CREATE ACCOUNT statement is executed.)
224
+ ID of the region group where the account is created. To retrieve the region group ID for existing accounts in your organization, execute the [SHOW REGIONS](https://docs.snowflake.com/en/sql-reference/sql/show-regions) command. For information about when you might need to specify region group, see [Region groups](https://docs.snowflake.com/en/user-guide/admin-account-identifier.html#label-region-groups).
219
225
  """
220
226
  return pulumi.get(self, "region_group")
221
227
 
@@ -230,33 +236,31 @@ class _AccountState:
230
236
  admin_name: Optional[pulumi.Input[str]] = None,
231
237
  admin_password: Optional[pulumi.Input[str]] = None,
232
238
  admin_rsa_public_key: Optional[pulumi.Input[str]] = None,
239
+ admin_user_type: Optional[pulumi.Input[str]] = None,
233
240
  comment: Optional[pulumi.Input[str]] = None,
234
241
  edition: Optional[pulumi.Input[str]] = None,
235
242
  email: Optional[pulumi.Input[str]] = None,
236
243
  first_name: Optional[pulumi.Input[str]] = None,
244
+ fully_qualified_name: Optional[pulumi.Input[str]] = None,
237
245
  grace_period_in_days: Optional[pulumi.Input[int]] = None,
238
- is_org_admin: Optional[pulumi.Input[bool]] = None,
246
+ is_org_admin: Optional[pulumi.Input[str]] = None,
239
247
  last_name: Optional[pulumi.Input[str]] = None,
240
- must_change_password: Optional[pulumi.Input[bool]] = None,
248
+ must_change_password: Optional[pulumi.Input[str]] = None,
241
249
  name: Optional[pulumi.Input[str]] = None,
242
250
  region: Optional[pulumi.Input[str]] = None,
243
- region_group: Optional[pulumi.Input[str]] = None):
251
+ region_group: Optional[pulumi.Input[str]] = None,
252
+ show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['AccountShowOutputArgs']]]] = None):
244
253
  """
245
254
  Input properties used for looking up and filtering Account resources.
246
- :param pulumi.Input[str] admin_name: Login name of the initial administrative user of the account. A new user is created in the new account with this name and password and granted the ACCOUNTADMIN role in the account. A login name can be any string consisting of letters, numbers, and underscores. Login names are always case-insensitive.
247
- :param pulumi.Input[str] admin_password: Password for the initial administrative user of the account. Optional if the `ADMIN_RSA_PUBLIC_KEY` parameter is specified. For more information about passwords in Snowflake, see [Snowflake-provided Password Policy](https://docs.snowflake.com/en/sql-reference/sql/create-account.html#:~:text=Snowflake%2Dprovided%20Password%20Policy).
248
- :param pulumi.Input[str] admin_rsa_public_key: Assigns a public key to the initial administrative user of the account in order to implement [key pair authentication](https://docs.snowflake.com/en/sql-reference/sql/create-account.html#:~:text=key%20pair%20authentication) for the user. Optional if the `ADMIN_PASSWORD` parameter is specified.
249
255
  :param pulumi.Input[str] comment: Specifies a comment for the account.
250
- :param pulumi.Input[str] edition: [Snowflake Edition](https://docs.snowflake.com/en/user-guide/intro-editions.html) of the account. Valid values are: STANDARD | ENTERPRISE | BUSINESS_CRITICAL
251
- :param pulumi.Input[str] email: Email address of the initial administrative user of the account. This email address is used to send any notifications about the account.
252
- :param pulumi.Input[str] first_name: First name of the initial administrative user of the account
253
- :param pulumi.Input[int] grace_period_in_days: Specifies the number of days to wait before dropping the account. The default is 3 days.
254
- :param pulumi.Input[bool] is_org_admin: Indicates whether the ORGADMIN role is enabled in an account. If TRUE, the role is enabled.
255
- :param pulumi.Input[str] last_name: Last name of the initial administrative user of the account
256
- :param pulumi.Input[bool] must_change_password: Specifies whether the new user created to administer the account is forced to change their password upon first login into the account.
257
- :param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the account; must be unique within an organization, regardless of which Snowflake Region the account is in. In addition, the identifier must start with an alphabetic character and cannot contain spaces or special characters except for underscores (_). Note that if the account name includes underscores, features that do not accept account names with underscores (e.g. Okta SSO or SCIM) can reference a version of the account name that substitutes hyphens (-) for the underscores.
258
- :param pulumi.Input[str] region: ID of the Snowflake Region where the account is created. If no value is provided, Snowflake creates the account in the same Snowflake Region as the current account (i.e. the account in which the CREATE ACCOUNT statement is executed.)
259
- :param pulumi.Input[str] region_group: ID of the Snowflake Region where the account is created. If no value is provided, Snowflake creates the account in the same Snowflake Region as the current account (i.e. the account in which the CREATE ACCOUNT statement is executed.)
256
+ :param pulumi.Input[str] edition: Snowflake Edition of the account. See more about Snowflake Editions in the [official documentation](https://docs.snowflake.com/en/user-guide/intro-editions). Valid options are: `STANDARD` | `ENTERPRISE` | `BUSINESS_CRITICAL`
257
+ :param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
258
+ :param pulumi.Input[int] grace_period_in_days: Specifies the number of days during which the account can be restored (“undropped”). The minimum is 3 days and the maximum is 90 days.
259
+ :param pulumi.Input[str] is_org_admin: Sets an account property that determines whether the ORGADMIN role is enabled in the account. Only an organization administrator (i.e. user with the ORGADMIN role) can set the property.
260
+ :param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the account. It must be unique within an organization, regardless of which Snowflake Region the account is in and must start with an alphabetic character and cannot contain spaces or special characters except for underscores (_). Note that if the account name includes underscores, features that do not accept account names with underscores (e.g. Okta SSO or SCIM) can reference a version of the account name that substitutes hyphens (-) for the underscores.
261
+ :param pulumi.Input[str] region: [Snowflake Region ID](https://docs.snowflake.com/en/user-guide/admin-account-identifier.html#label-snowflake-region-ids) of the region where the account is created. If no value is provided, Snowflake creates the account in the same Snowflake Region as the current account (i.e. the account in which the CREATE ACCOUNT statement is executed.)
262
+ :param pulumi.Input[str] region_group: ID of the region group where the account is created. To retrieve the region group ID for existing accounts in your organization, execute the [SHOW REGIONS](https://docs.snowflake.com/en/sql-reference/sql/show-regions) command. For information about when you might need to specify region group, see [Region groups](https://docs.snowflake.com/en/user-guide/admin-account-identifier.html#label-region-groups).
263
+ :param pulumi.Input[Sequence[pulumi.Input['AccountShowOutputArgs']]] show_outputs: Outputs the result of `SHOW ACCOUNTS` for the given account.
260
264
  """
261
265
  if admin_name is not None:
262
266
  pulumi.set(__self__, "admin_name", admin_name)
@@ -264,6 +268,8 @@ class _AccountState:
264
268
  pulumi.set(__self__, "admin_password", admin_password)
265
269
  if admin_rsa_public_key is not None:
266
270
  pulumi.set(__self__, "admin_rsa_public_key", admin_rsa_public_key)
271
+ if admin_user_type is not None:
272
+ pulumi.set(__self__, "admin_user_type", admin_user_type)
267
273
  if comment is not None:
268
274
  pulumi.set(__self__, "comment", comment)
269
275
  if edition is not None:
@@ -272,6 +278,8 @@ class _AccountState:
272
278
  pulumi.set(__self__, "email", email)
273
279
  if first_name is not None:
274
280
  pulumi.set(__self__, "first_name", first_name)
281
+ if fully_qualified_name is not None:
282
+ pulumi.set(__self__, "fully_qualified_name", fully_qualified_name)
275
283
  if grace_period_in_days is not None:
276
284
  pulumi.set(__self__, "grace_period_in_days", grace_period_in_days)
277
285
  if is_org_admin is not None:
@@ -286,13 +294,12 @@ class _AccountState:
286
294
  pulumi.set(__self__, "region", region)
287
295
  if region_group is not None:
288
296
  pulumi.set(__self__, "region_group", region_group)
297
+ if show_outputs is not None:
298
+ pulumi.set(__self__, "show_outputs", show_outputs)
289
299
 
290
300
  @property
291
301
  @pulumi.getter(name="adminName")
292
302
  def admin_name(self) -> Optional[pulumi.Input[str]]:
293
- """
294
- Login name of the initial administrative user of the account. A new user is created in the new account with this name and password and granted the ACCOUNTADMIN role in the account. A login name can be any string consisting of letters, numbers, and underscores. Login names are always case-insensitive.
295
- """
296
303
  return pulumi.get(self, "admin_name")
297
304
 
298
305
  @admin_name.setter
@@ -302,9 +309,6 @@ class _AccountState:
302
309
  @property
303
310
  @pulumi.getter(name="adminPassword")
304
311
  def admin_password(self) -> Optional[pulumi.Input[str]]:
305
- """
306
- Password for the initial administrative user of the account. Optional if the `ADMIN_RSA_PUBLIC_KEY` parameter is specified. For more information about passwords in Snowflake, see [Snowflake-provided Password Policy](https://docs.snowflake.com/en/sql-reference/sql/create-account.html#:~:text=Snowflake%2Dprovided%20Password%20Policy).
307
- """
308
312
  return pulumi.get(self, "admin_password")
309
313
 
310
314
  @admin_password.setter
@@ -314,15 +318,21 @@ class _AccountState:
314
318
  @property
315
319
  @pulumi.getter(name="adminRsaPublicKey")
316
320
  def admin_rsa_public_key(self) -> Optional[pulumi.Input[str]]:
317
- """
318
- Assigns a public key to the initial administrative user of the account in order to implement [key pair authentication](https://docs.snowflake.com/en/sql-reference/sql/create-account.html#:~:text=key%20pair%20authentication) for the user. Optional if the `ADMIN_PASSWORD` parameter is specified.
319
- """
320
321
  return pulumi.get(self, "admin_rsa_public_key")
321
322
 
322
323
  @admin_rsa_public_key.setter
323
324
  def admin_rsa_public_key(self, value: Optional[pulumi.Input[str]]):
324
325
  pulumi.set(self, "admin_rsa_public_key", value)
325
326
 
327
+ @property
328
+ @pulumi.getter(name="adminUserType")
329
+ def admin_user_type(self) -> Optional[pulumi.Input[str]]:
330
+ return pulumi.get(self, "admin_user_type")
331
+
332
+ @admin_user_type.setter
333
+ def admin_user_type(self, value: Optional[pulumi.Input[str]]):
334
+ pulumi.set(self, "admin_user_type", value)
335
+
326
336
  @property
327
337
  @pulumi.getter
328
338
  def comment(self) -> Optional[pulumi.Input[str]]:
@@ -339,7 +349,7 @@ class _AccountState:
339
349
  @pulumi.getter
340
350
  def edition(self) -> Optional[pulumi.Input[str]]:
341
351
  """
342
- [Snowflake Edition](https://docs.snowflake.com/en/user-guide/intro-editions.html) of the account. Valid values are: STANDARD | ENTERPRISE | BUSINESS_CRITICAL
352
+ Snowflake Edition of the account. See more about Snowflake Editions in the [official documentation](https://docs.snowflake.com/en/user-guide/intro-editions). Valid options are: `STANDARD` | `ENTERPRISE` | `BUSINESS_CRITICAL`
343
353
  """
344
354
  return pulumi.get(self, "edition")
345
355
 
@@ -350,9 +360,6 @@ class _AccountState:
350
360
  @property
351
361
  @pulumi.getter
352
362
  def email(self) -> Optional[pulumi.Input[str]]:
353
- """
354
- Email address of the initial administrative user of the account. This email address is used to send any notifications about the account.
355
- """
356
363
  return pulumi.get(self, "email")
357
364
 
358
365
  @email.setter
@@ -362,20 +369,29 @@ class _AccountState:
362
369
  @property
363
370
  @pulumi.getter(name="firstName")
364
371
  def first_name(self) -> Optional[pulumi.Input[str]]:
365
- """
366
- First name of the initial administrative user of the account
367
- """
368
372
  return pulumi.get(self, "first_name")
369
373
 
370
374
  @first_name.setter
371
375
  def first_name(self, value: Optional[pulumi.Input[str]]):
372
376
  pulumi.set(self, "first_name", value)
373
377
 
378
+ @property
379
+ @pulumi.getter(name="fullyQualifiedName")
380
+ def fully_qualified_name(self) -> Optional[pulumi.Input[str]]:
381
+ """
382
+ Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
383
+ """
384
+ return pulumi.get(self, "fully_qualified_name")
385
+
386
+ @fully_qualified_name.setter
387
+ def fully_qualified_name(self, value: Optional[pulumi.Input[str]]):
388
+ pulumi.set(self, "fully_qualified_name", value)
389
+
374
390
  @property
375
391
  @pulumi.getter(name="gracePeriodInDays")
376
392
  def grace_period_in_days(self) -> Optional[pulumi.Input[int]]:
377
393
  """
378
- Specifies the number of days to wait before dropping the account. The default is 3 days.
394
+ Specifies the number of days during which the account can be restored (“undropped”). The minimum is 3 days and the maximum is 90 days.
379
395
  """
380
396
  return pulumi.get(self, "grace_period_in_days")
381
397
 
@@ -385,22 +401,19 @@ class _AccountState:
385
401
 
386
402
  @property
387
403
  @pulumi.getter(name="isOrgAdmin")
388
- def is_org_admin(self) -> Optional[pulumi.Input[bool]]:
404
+ def is_org_admin(self) -> Optional[pulumi.Input[str]]:
389
405
  """
390
- Indicates whether the ORGADMIN role is enabled in an account. If TRUE, the role is enabled.
406
+ Sets an account property that determines whether the ORGADMIN role is enabled in the account. Only an organization administrator (i.e. user with the ORGADMIN role) can set the property.
391
407
  """
392
408
  return pulumi.get(self, "is_org_admin")
393
409
 
394
410
  @is_org_admin.setter
395
- def is_org_admin(self, value: Optional[pulumi.Input[bool]]):
411
+ def is_org_admin(self, value: Optional[pulumi.Input[str]]):
396
412
  pulumi.set(self, "is_org_admin", value)
397
413
 
398
414
  @property
399
415
  @pulumi.getter(name="lastName")
400
416
  def last_name(self) -> Optional[pulumi.Input[str]]:
401
- """
402
- Last name of the initial administrative user of the account
403
- """
404
417
  return pulumi.get(self, "last_name")
405
418
 
406
419
  @last_name.setter
@@ -409,21 +422,18 @@ class _AccountState:
409
422
 
410
423
  @property
411
424
  @pulumi.getter(name="mustChangePassword")
412
- def must_change_password(self) -> Optional[pulumi.Input[bool]]:
413
- """
414
- Specifies whether the new user created to administer the account is forced to change their password upon first login into the account.
415
- """
425
+ def must_change_password(self) -> Optional[pulumi.Input[str]]:
416
426
  return pulumi.get(self, "must_change_password")
417
427
 
418
428
  @must_change_password.setter
419
- def must_change_password(self, value: Optional[pulumi.Input[bool]]):
429
+ def must_change_password(self, value: Optional[pulumi.Input[str]]):
420
430
  pulumi.set(self, "must_change_password", value)
421
431
 
422
432
  @property
423
433
  @pulumi.getter
424
434
  def name(self) -> Optional[pulumi.Input[str]]:
425
435
  """
426
- Specifies the identifier (i.e. name) for the account; must be unique within an organization, regardless of which Snowflake Region the account is in. In addition, the identifier must start with an alphabetic character and cannot contain spaces or special characters except for underscores (_). Note that if the account name includes underscores, features that do not accept account names with underscores (e.g. Okta SSO or SCIM) can reference a version of the account name that substitutes hyphens (-) for the underscores.
436
+ Specifies the identifier (i.e. name) for the account. It must be unique within an organization, regardless of which Snowflake Region the account is in and must start with an alphabetic character and cannot contain spaces or special characters except for underscores (_). Note that if the account name includes underscores, features that do not accept account names with underscores (e.g. Okta SSO or SCIM) can reference a version of the account name that substitutes hyphens (-) for the underscores.
427
437
  """
428
438
  return pulumi.get(self, "name")
429
439
 
@@ -435,7 +445,7 @@ class _AccountState:
435
445
  @pulumi.getter
436
446
  def region(self) -> Optional[pulumi.Input[str]]:
437
447
  """
438
- ID of the Snowflake Region where the account is created. If no value is provided, Snowflake creates the account in the same Snowflake Region as the current account (i.e. the account in which the CREATE ACCOUNT statement is executed.)
448
+ [Snowflake Region ID](https://docs.snowflake.com/en/user-guide/admin-account-identifier.html#label-snowflake-region-ids) of the region where the account is created. If no value is provided, Snowflake creates the account in the same Snowflake Region as the current account (i.e. the account in which the CREATE ACCOUNT statement is executed.)
439
449
  """
440
450
  return pulumi.get(self, "region")
441
451
 
@@ -447,7 +457,7 @@ class _AccountState:
447
457
  @pulumi.getter(name="regionGroup")
448
458
  def region_group(self) -> Optional[pulumi.Input[str]]:
449
459
  """
450
- ID of the Snowflake Region where the account is created. If no value is provided, Snowflake creates the account in the same Snowflake Region as the current account (i.e. the account in which the CREATE ACCOUNT statement is executed.)
460
+ ID of the region group where the account is created. To retrieve the region group ID for existing accounts in your organization, execute the [SHOW REGIONS](https://docs.snowflake.com/en/sql-reference/sql/show-regions) command. For information about when you might need to specify region group, see [Region groups](https://docs.snowflake.com/en/user-guide/admin-account-identifier.html#label-region-groups).
451
461
  """
452
462
  return pulumi.get(self, "region_group")
453
463
 
@@ -455,6 +465,18 @@ class _AccountState:
455
465
  def region_group(self, value: Optional[pulumi.Input[str]]):
456
466
  pulumi.set(self, "region_group", value)
457
467
 
468
+ @property
469
+ @pulumi.getter(name="showOutputs")
470
+ def show_outputs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['AccountShowOutputArgs']]]]:
471
+ """
472
+ Outputs the result of `SHOW ACCOUNTS` for the given account.
473
+ """
474
+ return pulumi.get(self, "show_outputs")
475
+
476
+ @show_outputs.setter
477
+ def show_outputs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['AccountShowOutputArgs']]]]):
478
+ pulumi.set(self, "show_outputs", value)
479
+
458
480
 
459
481
  class Account(pulumi.CustomResource):
460
482
  @overload
@@ -464,65 +486,35 @@ class Account(pulumi.CustomResource):
464
486
  admin_name: Optional[pulumi.Input[str]] = None,
465
487
  admin_password: Optional[pulumi.Input[str]] = None,
466
488
  admin_rsa_public_key: Optional[pulumi.Input[str]] = None,
489
+ admin_user_type: Optional[pulumi.Input[str]] = None,
467
490
  comment: Optional[pulumi.Input[str]] = None,
468
491
  edition: Optional[pulumi.Input[str]] = None,
469
492
  email: Optional[pulumi.Input[str]] = None,
470
493
  first_name: Optional[pulumi.Input[str]] = None,
471
494
  grace_period_in_days: Optional[pulumi.Input[int]] = None,
495
+ is_org_admin: Optional[pulumi.Input[str]] = None,
472
496
  last_name: Optional[pulumi.Input[str]] = None,
473
- must_change_password: Optional[pulumi.Input[bool]] = None,
497
+ must_change_password: Optional[pulumi.Input[str]] = None,
474
498
  name: Optional[pulumi.Input[str]] = None,
475
499
  region: Optional[pulumi.Input[str]] = None,
476
500
  region_group: Optional[pulumi.Input[str]] = None,
477
501
  __props__=None):
478
502
  """
479
- The account resource allows you to create and manage Snowflake accounts.
480
-
481
- **WARNING** This resource cannot be destroyed!!! The only way to delete accounts is to go through [Snowflake Support](https://docs.snowflake.com/en/user-guide/organizations-manage-accounts.html#deleting-an-account)
482
-
483
- **NOTE** ORGADMIN priviliges are required for this resource
484
-
485
- ## Example Usage
486
-
487
- ```python
488
- import pulumi
489
- import pulumi_snowflake as snowflake
490
-
491
- orgadmin = snowflake.Provider("orgadmin", role="ORGADMIN")
492
- ac1 = snowflake.Account("ac1",
493
- admin_name="John Doe",
494
- admin_password="Abcd1234!",
495
- email="john.doe@snowflake.com",
496
- first_name="John",
497
- last_name="Doe",
498
- must_change_password=True,
499
- edition="STANDARD",
500
- comment="Snowflake Test Account",
501
- region="AWS_US_WEST_2",
502
- opts=pulumi.ResourceOptions(provider=snowflake["orgadmin"]))
503
- ```
504
-
505
503
  ## Import
506
504
 
507
505
  ```sh
508
- $ pulumi import snowflake:index/account:Account account <account_locator>
506
+ $ pulumi import snowflake:index/account:Account example '"<organization_name>"."<account_name>"'
509
507
  ```
510
508
 
511
509
  :param str resource_name: The name of the resource.
512
510
  :param pulumi.ResourceOptions opts: Options for the resource.
513
- :param pulumi.Input[str] admin_name: Login name of the initial administrative user of the account. A new user is created in the new account with this name and password and granted the ACCOUNTADMIN role in the account. A login name can be any string consisting of letters, numbers, and underscores. Login names are always case-insensitive.
514
- :param pulumi.Input[str] admin_password: Password for the initial administrative user of the account. Optional if the `ADMIN_RSA_PUBLIC_KEY` parameter is specified. For more information about passwords in Snowflake, see [Snowflake-provided Password Policy](https://docs.snowflake.com/en/sql-reference/sql/create-account.html#:~:text=Snowflake%2Dprovided%20Password%20Policy).
515
- :param pulumi.Input[str] admin_rsa_public_key: Assigns a public key to the initial administrative user of the account in order to implement [key pair authentication](https://docs.snowflake.com/en/sql-reference/sql/create-account.html#:~:text=key%20pair%20authentication) for the user. Optional if the `ADMIN_PASSWORD` parameter is specified.
516
511
  :param pulumi.Input[str] comment: Specifies a comment for the account.
517
- :param pulumi.Input[str] edition: [Snowflake Edition](https://docs.snowflake.com/en/user-guide/intro-editions.html) of the account. Valid values are: STANDARD | ENTERPRISE | BUSINESS_CRITICAL
518
- :param pulumi.Input[str] email: Email address of the initial administrative user of the account. This email address is used to send any notifications about the account.
519
- :param pulumi.Input[str] first_name: First name of the initial administrative user of the account
520
- :param pulumi.Input[int] grace_period_in_days: Specifies the number of days to wait before dropping the account. The default is 3 days.
521
- :param pulumi.Input[str] last_name: Last name of the initial administrative user of the account
522
- :param pulumi.Input[bool] must_change_password: Specifies whether the new user created to administer the account is forced to change their password upon first login into the account.
523
- :param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the account; must be unique within an organization, regardless of which Snowflake Region the account is in. In addition, the identifier must start with an alphabetic character and cannot contain spaces or special characters except for underscores (_). Note that if the account name includes underscores, features that do not accept account names with underscores (e.g. Okta SSO or SCIM) can reference a version of the account name that substitutes hyphens (-) for the underscores.
524
- :param pulumi.Input[str] region: ID of the Snowflake Region where the account is created. If no value is provided, Snowflake creates the account in the same Snowflake Region as the current account (i.e. the account in which the CREATE ACCOUNT statement is executed.)
525
- :param pulumi.Input[str] region_group: ID of the Snowflake Region where the account is created. If no value is provided, Snowflake creates the account in the same Snowflake Region as the current account (i.e. the account in which the CREATE ACCOUNT statement is executed.)
512
+ :param pulumi.Input[str] edition: Snowflake Edition of the account. See more about Snowflake Editions in the [official documentation](https://docs.snowflake.com/en/user-guide/intro-editions). Valid options are: `STANDARD` | `ENTERPRISE` | `BUSINESS_CRITICAL`
513
+ :param pulumi.Input[int] grace_period_in_days: Specifies the number of days during which the account can be restored (“undropped”). The minimum is 3 days and the maximum is 90 days.
514
+ :param pulumi.Input[str] is_org_admin: Sets an account property that determines whether the ORGADMIN role is enabled in the account. Only an organization administrator (i.e. user with the ORGADMIN role) can set the property.
515
+ :param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the account. It must be unique within an organization, regardless of which Snowflake Region the account is in and must start with an alphabetic character and cannot contain spaces or special characters except for underscores (_). Note that if the account name includes underscores, features that do not accept account names with underscores (e.g. Okta SSO or SCIM) can reference a version of the account name that substitutes hyphens (-) for the underscores.
516
+ :param pulumi.Input[str] region: [Snowflake Region ID](https://docs.snowflake.com/en/user-guide/admin-account-identifier.html#label-snowflake-region-ids) of the region where the account is created. If no value is provided, Snowflake creates the account in the same Snowflake Region as the current account (i.e. the account in which the CREATE ACCOUNT statement is executed.)
517
+ :param pulumi.Input[str] region_group: ID of the region group where the account is created. To retrieve the region group ID for existing accounts in your organization, execute the [SHOW REGIONS](https://docs.snowflake.com/en/sql-reference/sql/show-regions) command. For information about when you might need to specify region group, see [Region groups](https://docs.snowflake.com/en/user-guide/admin-account-identifier.html#label-region-groups).
526
518
  """
527
519
  ...
528
520
  @overload
@@ -531,36 +523,10 @@ class Account(pulumi.CustomResource):
531
523
  args: AccountArgs,
532
524
  opts: Optional[pulumi.ResourceOptions] = None):
533
525
  """
534
- The account resource allows you to create and manage Snowflake accounts.
535
-
536
- **WARNING** This resource cannot be destroyed!!! The only way to delete accounts is to go through [Snowflake Support](https://docs.snowflake.com/en/user-guide/organizations-manage-accounts.html#deleting-an-account)
537
-
538
- **NOTE** ORGADMIN priviliges are required for this resource
539
-
540
- ## Example Usage
541
-
542
- ```python
543
- import pulumi
544
- import pulumi_snowflake as snowflake
545
-
546
- orgadmin = snowflake.Provider("orgadmin", role="ORGADMIN")
547
- ac1 = snowflake.Account("ac1",
548
- admin_name="John Doe",
549
- admin_password="Abcd1234!",
550
- email="john.doe@snowflake.com",
551
- first_name="John",
552
- last_name="Doe",
553
- must_change_password=True,
554
- edition="STANDARD",
555
- comment="Snowflake Test Account",
556
- region="AWS_US_WEST_2",
557
- opts=pulumi.ResourceOptions(provider=snowflake["orgadmin"]))
558
- ```
559
-
560
526
  ## Import
561
527
 
562
528
  ```sh
563
- $ pulumi import snowflake:index/account:Account account <account_locator>
529
+ $ pulumi import snowflake:index/account:Account example '"<organization_name>"."<account_name>"'
564
530
  ```
565
531
 
566
532
  :param str resource_name: The name of the resource.
@@ -581,13 +547,15 @@ class Account(pulumi.CustomResource):
581
547
  admin_name: Optional[pulumi.Input[str]] = None,
582
548
  admin_password: Optional[pulumi.Input[str]] = None,
583
549
  admin_rsa_public_key: Optional[pulumi.Input[str]] = None,
550
+ admin_user_type: Optional[pulumi.Input[str]] = None,
584
551
  comment: Optional[pulumi.Input[str]] = None,
585
552
  edition: Optional[pulumi.Input[str]] = None,
586
553
  email: Optional[pulumi.Input[str]] = None,
587
554
  first_name: Optional[pulumi.Input[str]] = None,
588
555
  grace_period_in_days: Optional[pulumi.Input[int]] = None,
556
+ is_org_admin: Optional[pulumi.Input[str]] = None,
589
557
  last_name: Optional[pulumi.Input[str]] = None,
590
- must_change_password: Optional[pulumi.Input[bool]] = None,
558
+ must_change_password: Optional[pulumi.Input[str]] = None,
591
559
  name: Optional[pulumi.Input[str]] = None,
592
560
  region: Optional[pulumi.Input[str]] = None,
593
561
  region_group: Optional[pulumi.Input[str]] = None,
@@ -602,9 +570,10 @@ class Account(pulumi.CustomResource):
602
570
 
603
571
  if admin_name is None and not opts.urn:
604
572
  raise TypeError("Missing required property 'admin_name'")
605
- __props__.__dict__["admin_name"] = admin_name
573
+ __props__.__dict__["admin_name"] = None if admin_name is None else pulumi.Output.secret(admin_name)
606
574
  __props__.__dict__["admin_password"] = None if admin_password is None else pulumi.Output.secret(admin_password)
607
- __props__.__dict__["admin_rsa_public_key"] = None if admin_rsa_public_key is None else pulumi.Output.secret(admin_rsa_public_key)
575
+ __props__.__dict__["admin_rsa_public_key"] = admin_rsa_public_key
576
+ __props__.__dict__["admin_user_type"] = admin_user_type
608
577
  __props__.__dict__["comment"] = comment
609
578
  if edition is None and not opts.urn:
610
579
  raise TypeError("Missing required property 'edition'")
@@ -613,14 +582,18 @@ class Account(pulumi.CustomResource):
613
582
  raise TypeError("Missing required property 'email'")
614
583
  __props__.__dict__["email"] = None if email is None else pulumi.Output.secret(email)
615
584
  __props__.__dict__["first_name"] = None if first_name is None else pulumi.Output.secret(first_name)
585
+ if grace_period_in_days is None and not opts.urn:
586
+ raise TypeError("Missing required property 'grace_period_in_days'")
616
587
  __props__.__dict__["grace_period_in_days"] = grace_period_in_days
588
+ __props__.__dict__["is_org_admin"] = is_org_admin
617
589
  __props__.__dict__["last_name"] = None if last_name is None else pulumi.Output.secret(last_name)
618
590
  __props__.__dict__["must_change_password"] = must_change_password
619
591
  __props__.__dict__["name"] = name
620
592
  __props__.__dict__["region"] = region
621
593
  __props__.__dict__["region_group"] = region_group
622
- __props__.__dict__["is_org_admin"] = None
623
- secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["adminPassword", "adminRsaPublicKey", "email", "firstName", "lastName"])
594
+ __props__.__dict__["fully_qualified_name"] = None
595
+ __props__.__dict__["show_outputs"] = None
596
+ secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["adminName", "adminPassword", "email", "firstName", "lastName"])
624
597
  opts = pulumi.ResourceOptions.merge(opts, secret_opts)
625
598
  super(Account, __self__).__init__(
626
599
  'snowflake:index/account:Account',
@@ -635,17 +608,20 @@ class Account(pulumi.CustomResource):
635
608
  admin_name: Optional[pulumi.Input[str]] = None,
636
609
  admin_password: Optional[pulumi.Input[str]] = None,
637
610
  admin_rsa_public_key: Optional[pulumi.Input[str]] = None,
611
+ admin_user_type: Optional[pulumi.Input[str]] = None,
638
612
  comment: Optional[pulumi.Input[str]] = None,
639
613
  edition: Optional[pulumi.Input[str]] = None,
640
614
  email: Optional[pulumi.Input[str]] = None,
641
615
  first_name: Optional[pulumi.Input[str]] = None,
616
+ fully_qualified_name: Optional[pulumi.Input[str]] = None,
642
617
  grace_period_in_days: Optional[pulumi.Input[int]] = None,
643
- is_org_admin: Optional[pulumi.Input[bool]] = None,
618
+ is_org_admin: Optional[pulumi.Input[str]] = None,
644
619
  last_name: Optional[pulumi.Input[str]] = None,
645
- must_change_password: Optional[pulumi.Input[bool]] = None,
620
+ must_change_password: Optional[pulumi.Input[str]] = None,
646
621
  name: Optional[pulumi.Input[str]] = None,
647
622
  region: Optional[pulumi.Input[str]] = None,
648
- region_group: Optional[pulumi.Input[str]] = None) -> 'Account':
623
+ region_group: Optional[pulumi.Input[str]] = None,
624
+ show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['AccountShowOutputArgs', 'AccountShowOutputArgsDict']]]]] = None) -> 'Account':
649
625
  """
650
626
  Get an existing Account resource's state with the given name, id, and optional extra
651
627
  properties used to qualify the lookup.
@@ -653,20 +629,15 @@ class Account(pulumi.CustomResource):
653
629
  :param str resource_name: The unique name of the resulting resource.
654
630
  :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
655
631
  :param pulumi.ResourceOptions opts: Options for the resource.
656
- :param pulumi.Input[str] admin_name: Login name of the initial administrative user of the account. A new user is created in the new account with this name and password and granted the ACCOUNTADMIN role in the account. A login name can be any string consisting of letters, numbers, and underscores. Login names are always case-insensitive.
657
- :param pulumi.Input[str] admin_password: Password for the initial administrative user of the account. Optional if the `ADMIN_RSA_PUBLIC_KEY` parameter is specified. For more information about passwords in Snowflake, see [Snowflake-provided Password Policy](https://docs.snowflake.com/en/sql-reference/sql/create-account.html#:~:text=Snowflake%2Dprovided%20Password%20Policy).
658
- :param pulumi.Input[str] admin_rsa_public_key: Assigns a public key to the initial administrative user of the account in order to implement [key pair authentication](https://docs.snowflake.com/en/sql-reference/sql/create-account.html#:~:text=key%20pair%20authentication) for the user. Optional if the `ADMIN_PASSWORD` parameter is specified.
659
632
  :param pulumi.Input[str] comment: Specifies a comment for the account.
660
- :param pulumi.Input[str] edition: [Snowflake Edition](https://docs.snowflake.com/en/user-guide/intro-editions.html) of the account. Valid values are: STANDARD | ENTERPRISE | BUSINESS_CRITICAL
661
- :param pulumi.Input[str] email: Email address of the initial administrative user of the account. This email address is used to send any notifications about the account.
662
- :param pulumi.Input[str] first_name: First name of the initial administrative user of the account
663
- :param pulumi.Input[int] grace_period_in_days: Specifies the number of days to wait before dropping the account. The default is 3 days.
664
- :param pulumi.Input[bool] is_org_admin: Indicates whether the ORGADMIN role is enabled in an account. If TRUE, the role is enabled.
665
- :param pulumi.Input[str] last_name: Last name of the initial administrative user of the account
666
- :param pulumi.Input[bool] must_change_password: Specifies whether the new user created to administer the account is forced to change their password upon first login into the account.
667
- :param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the account; must be unique within an organization, regardless of which Snowflake Region the account is in. In addition, the identifier must start with an alphabetic character and cannot contain spaces or special characters except for underscores (_). Note that if the account name includes underscores, features that do not accept account names with underscores (e.g. Okta SSO or SCIM) can reference a version of the account name that substitutes hyphens (-) for the underscores.
668
- :param pulumi.Input[str] region: ID of the Snowflake Region where the account is created. If no value is provided, Snowflake creates the account in the same Snowflake Region as the current account (i.e. the account in which the CREATE ACCOUNT statement is executed.)
669
- :param pulumi.Input[str] region_group: ID of the Snowflake Region where the account is created. If no value is provided, Snowflake creates the account in the same Snowflake Region as the current account (i.e. the account in which the CREATE ACCOUNT statement is executed.)
633
+ :param pulumi.Input[str] edition: Snowflake Edition of the account. See more about Snowflake Editions in the [official documentation](https://docs.snowflake.com/en/user-guide/intro-editions). Valid options are: `STANDARD` | `ENTERPRISE` | `BUSINESS_CRITICAL`
634
+ :param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
635
+ :param pulumi.Input[int] grace_period_in_days: Specifies the number of days during which the account can be restored (“undropped”). The minimum is 3 days and the maximum is 90 days.
636
+ :param pulumi.Input[str] is_org_admin: Sets an account property that determines whether the ORGADMIN role is enabled in the account. Only an organization administrator (i.e. user with the ORGADMIN role) can set the property.
637
+ :param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the account. It must be unique within an organization, regardless of which Snowflake Region the account is in and must start with an alphabetic character and cannot contain spaces or special characters except for underscores (_). Note that if the account name includes underscores, features that do not accept account names with underscores (e.g. Okta SSO or SCIM) can reference a version of the account name that substitutes hyphens (-) for the underscores.
638
+ :param pulumi.Input[str] region: [Snowflake Region ID](https://docs.snowflake.com/en/user-guide/admin-account-identifier.html#label-snowflake-region-ids) of the region where the account is created. If no value is provided, Snowflake creates the account in the same Snowflake Region as the current account (i.e. the account in which the CREATE ACCOUNT statement is executed.)
639
+ :param pulumi.Input[str] region_group: ID of the region group where the account is created. To retrieve the region group ID for existing accounts in your organization, execute the [SHOW REGIONS](https://docs.snowflake.com/en/sql-reference/sql/show-regions) command. For information about when you might need to specify region group, see [Region groups](https://docs.snowflake.com/en/user-guide/admin-account-identifier.html#label-region-groups).
640
+ :param pulumi.Input[Sequence[pulumi.Input[Union['AccountShowOutputArgs', 'AccountShowOutputArgsDict']]]] show_outputs: Outputs the result of `SHOW ACCOUNTS` for the given account.
670
641
  """
671
642
  opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
672
643
 
@@ -675,10 +646,12 @@ class Account(pulumi.CustomResource):
675
646
  __props__.__dict__["admin_name"] = admin_name
676
647
  __props__.__dict__["admin_password"] = admin_password
677
648
  __props__.__dict__["admin_rsa_public_key"] = admin_rsa_public_key
649
+ __props__.__dict__["admin_user_type"] = admin_user_type
678
650
  __props__.__dict__["comment"] = comment
679
651
  __props__.__dict__["edition"] = edition
680
652
  __props__.__dict__["email"] = email
681
653
  __props__.__dict__["first_name"] = first_name
654
+ __props__.__dict__["fully_qualified_name"] = fully_qualified_name
682
655
  __props__.__dict__["grace_period_in_days"] = grace_period_in_days
683
656
  __props__.__dict__["is_org_admin"] = is_org_admin
684
657
  __props__.__dict__["last_name"] = last_name
@@ -686,32 +659,29 @@ class Account(pulumi.CustomResource):
686
659
  __props__.__dict__["name"] = name
687
660
  __props__.__dict__["region"] = region
688
661
  __props__.__dict__["region_group"] = region_group
662
+ __props__.__dict__["show_outputs"] = show_outputs
689
663
  return Account(resource_name, opts=opts, __props__=__props__)
690
664
 
691
665
  @property
692
666
  @pulumi.getter(name="adminName")
693
667
  def admin_name(self) -> pulumi.Output[str]:
694
- """
695
- Login name of the initial administrative user of the account. A new user is created in the new account with this name and password and granted the ACCOUNTADMIN role in the account. A login name can be any string consisting of letters, numbers, and underscores. Login names are always case-insensitive.
696
- """
697
668
  return pulumi.get(self, "admin_name")
698
669
 
699
670
  @property
700
671
  @pulumi.getter(name="adminPassword")
701
672
  def admin_password(self) -> pulumi.Output[Optional[str]]:
702
- """
703
- Password for the initial administrative user of the account. Optional if the `ADMIN_RSA_PUBLIC_KEY` parameter is specified. For more information about passwords in Snowflake, see [Snowflake-provided Password Policy](https://docs.snowflake.com/en/sql-reference/sql/create-account.html#:~:text=Snowflake%2Dprovided%20Password%20Policy).
704
- """
705
673
  return pulumi.get(self, "admin_password")
706
674
 
707
675
  @property
708
676
  @pulumi.getter(name="adminRsaPublicKey")
709
677
  def admin_rsa_public_key(self) -> pulumi.Output[Optional[str]]:
710
- """
711
- Assigns a public key to the initial administrative user of the account in order to implement [key pair authentication](https://docs.snowflake.com/en/sql-reference/sql/create-account.html#:~:text=key%20pair%20authentication) for the user. Optional if the `ADMIN_PASSWORD` parameter is specified.
712
- """
713
678
  return pulumi.get(self, "admin_rsa_public_key")
714
679
 
680
+ @property
681
+ @pulumi.getter(name="adminUserType")
682
+ def admin_user_type(self) -> pulumi.Output[Optional[str]]:
683
+ return pulumi.get(self, "admin_user_type")
684
+
715
685
  @property
716
686
  @pulumi.getter
717
687
  def comment(self) -> pulumi.Output[Optional[str]]:
@@ -724,63 +694,59 @@ class Account(pulumi.CustomResource):
724
694
  @pulumi.getter
725
695
  def edition(self) -> pulumi.Output[str]:
726
696
  """
727
- [Snowflake Edition](https://docs.snowflake.com/en/user-guide/intro-editions.html) of the account. Valid values are: STANDARD | ENTERPRISE | BUSINESS_CRITICAL
697
+ Snowflake Edition of the account. See more about Snowflake Editions in the [official documentation](https://docs.snowflake.com/en/user-guide/intro-editions). Valid options are: `STANDARD` | `ENTERPRISE` | `BUSINESS_CRITICAL`
728
698
  """
729
699
  return pulumi.get(self, "edition")
730
700
 
731
701
  @property
732
702
  @pulumi.getter
733
703
  def email(self) -> pulumi.Output[str]:
734
- """
735
- Email address of the initial administrative user of the account. This email address is used to send any notifications about the account.
736
- """
737
704
  return pulumi.get(self, "email")
738
705
 
739
706
  @property
740
707
  @pulumi.getter(name="firstName")
741
708
  def first_name(self) -> pulumi.Output[Optional[str]]:
709
+ return pulumi.get(self, "first_name")
710
+
711
+ @property
712
+ @pulumi.getter(name="fullyQualifiedName")
713
+ def fully_qualified_name(self) -> pulumi.Output[str]:
742
714
  """
743
- First name of the initial administrative user of the account
715
+ Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
744
716
  """
745
- return pulumi.get(self, "first_name")
717
+ return pulumi.get(self, "fully_qualified_name")
746
718
 
747
719
  @property
748
720
  @pulumi.getter(name="gracePeriodInDays")
749
- def grace_period_in_days(self) -> pulumi.Output[Optional[int]]:
721
+ def grace_period_in_days(self) -> pulumi.Output[int]:
750
722
  """
751
- Specifies the number of days to wait before dropping the account. The default is 3 days.
723
+ Specifies the number of days during which the account can be restored (“undropped”). The minimum is 3 days and the maximum is 90 days.
752
724
  """
753
725
  return pulumi.get(self, "grace_period_in_days")
754
726
 
755
727
  @property
756
728
  @pulumi.getter(name="isOrgAdmin")
757
- def is_org_admin(self) -> pulumi.Output[bool]:
729
+ def is_org_admin(self) -> pulumi.Output[Optional[str]]:
758
730
  """
759
- Indicates whether the ORGADMIN role is enabled in an account. If TRUE, the role is enabled.
731
+ Sets an account property that determines whether the ORGADMIN role is enabled in the account. Only an organization administrator (i.e. user with the ORGADMIN role) can set the property.
760
732
  """
761
733
  return pulumi.get(self, "is_org_admin")
762
734
 
763
735
  @property
764
736
  @pulumi.getter(name="lastName")
765
737
  def last_name(self) -> pulumi.Output[Optional[str]]:
766
- """
767
- Last name of the initial administrative user of the account
768
- """
769
738
  return pulumi.get(self, "last_name")
770
739
 
771
740
  @property
772
741
  @pulumi.getter(name="mustChangePassword")
773
- def must_change_password(self) -> pulumi.Output[Optional[bool]]:
774
- """
775
- Specifies whether the new user created to administer the account is forced to change their password upon first login into the account.
776
- """
742
+ def must_change_password(self) -> pulumi.Output[Optional[str]]:
777
743
  return pulumi.get(self, "must_change_password")
778
744
 
779
745
  @property
780
746
  @pulumi.getter
781
747
  def name(self) -> pulumi.Output[str]:
782
748
  """
783
- Specifies the identifier (i.e. name) for the account; must be unique within an organization, regardless of which Snowflake Region the account is in. In addition, the identifier must start with an alphabetic character and cannot contain spaces or special characters except for underscores (_). Note that if the account name includes underscores, features that do not accept account names with underscores (e.g. Okta SSO or SCIM) can reference a version of the account name that substitutes hyphens (-) for the underscores.
749
+ Specifies the identifier (i.e. name) for the account. It must be unique within an organization, regardless of which Snowflake Region the account is in and must start with an alphabetic character and cannot contain spaces or special characters except for underscores (_). Note that if the account name includes underscores, features that do not accept account names with underscores (e.g. Okta SSO or SCIM) can reference a version of the account name that substitutes hyphens (-) for the underscores.
784
750
  """
785
751
  return pulumi.get(self, "name")
786
752
 
@@ -788,7 +754,7 @@ class Account(pulumi.CustomResource):
788
754
  @pulumi.getter
789
755
  def region(self) -> pulumi.Output[Optional[str]]:
790
756
  """
791
- ID of the Snowflake Region where the account is created. If no value is provided, Snowflake creates the account in the same Snowflake Region as the current account (i.e. the account in which the CREATE ACCOUNT statement is executed.)
757
+ [Snowflake Region ID](https://docs.snowflake.com/en/user-guide/admin-account-identifier.html#label-snowflake-region-ids) of the region where the account is created. If no value is provided, Snowflake creates the account in the same Snowflake Region as the current account (i.e. the account in which the CREATE ACCOUNT statement is executed.)
792
758
  """
793
759
  return pulumi.get(self, "region")
794
760
 
@@ -796,7 +762,15 @@ class Account(pulumi.CustomResource):
796
762
  @pulumi.getter(name="regionGroup")
797
763
  def region_group(self) -> pulumi.Output[Optional[str]]:
798
764
  """
799
- ID of the Snowflake Region where the account is created. If no value is provided, Snowflake creates the account in the same Snowflake Region as the current account (i.e. the account in which the CREATE ACCOUNT statement is executed.)
765
+ ID of the region group where the account is created. To retrieve the region group ID for existing accounts in your organization, execute the [SHOW REGIONS](https://docs.snowflake.com/en/sql-reference/sql/show-regions) command. For information about when you might need to specify region group, see [Region groups](https://docs.snowflake.com/en/user-guide/admin-account-identifier.html#label-region-groups).
800
766
  """
801
767
  return pulumi.get(self, "region_group")
802
768
 
769
+ @property
770
+ @pulumi.getter(name="showOutputs")
771
+ def show_outputs(self) -> pulumi.Output[Sequence['outputs.AccountShowOutput']]:
772
+ """
773
+ Outputs the result of `SHOW ACCOUNTS` for the given account.
774
+ """
775
+ return pulumi.get(self, "show_outputs")
776
+