pulumi-snowflake 0.50.3a1710160126__py3-none-any.whl → 1.2.0a1736835738__py3-none-any.whl

pulumi_snowflake/masking_policy.py

@@ -4,9 +4,14 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from . import _utilities
 from . import outputs
 from ._inputs import *
@@ -16,74 +21,78 @@ __all__ = ['MaskingPolicyArgs', 'MaskingPolicy']
 @pulumi.input_type
 class MaskingPolicyArgs:
     def __init__(__self__, *,
+                 arguments: pulumi.Input[Sequence[pulumi.Input['MaskingPolicyArgumentArgs']]],
+                 body: pulumi.Input[str],
                  database: pulumi.Input[str],
-                 masking_expression: pulumi.Input[str],
                  return_data_type: pulumi.Input[str],
                  schema: pulumi.Input[str],
-                 signature: pulumi.Input['MaskingPolicySignatureArgs'],
                  comment: Optional[pulumi.Input[str]] = None,
-                 exempt_other_policies: Optional[pulumi.Input[bool]] = None,
-                 if_not_exists: Optional[pulumi.Input[bool]] = None,
-                 name: Optional[pulumi.Input[str]] = None,
-                 or_replace: Optional[pulumi.Input[bool]] = None):
+                 exempt_other_policies: Optional[pulumi.Input[str]] = None,
+                 name: Optional[pulumi.Input[str]] = None):
         """
         The set of arguments for constructing a MaskingPolicy resource.
-        :param pulumi.Input[str] database: The database in which to create the masking policy.
-        :param pulumi.Input[str] masking_expression: Specifies the SQL expression that transforms the data.
-        :param pulumi.Input[str] return_data_type: Specifies the data type to return.
-        :param pulumi.Input[str] schema: The schema in which to create the masking policy.
-        :param pulumi.Input['MaskingPolicySignatureArgs'] signature: The signature for the masking policy; specifies the input columns and data types to evaluate at query runtime.
+        :param pulumi.Input[Sequence[pulumi.Input['MaskingPolicyArgumentArgs']]] arguments: List of the arguments for the masking policy. The first column and its data type always indicate the column data type values to mask or tokenize in the subsequent policy conditions. Note that you can not specify a virtual column as the first column argument in a conditional masking policy.
+        :param pulumi.Input[str] body: Specifies the SQL expression that transforms the data. To mitigate permadiff on this field, the provider replaces blank characters with a space. This can lead to false positives in cases where a change in case or run of whitespace is semantically significant.
+        :param pulumi.Input[str] database: The database in which to create the masking policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
+        :param pulumi.Input[str] return_data_type: The return data type must match the input data type of the first column that is specified as an input column. For more information about data types, check [Snowflake docs](https://docs.snowflake.com/en/sql-reference/intro-summary-data-types).
+        :param pulumi.Input[str] schema: The schema in which to create the masking policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
         :param pulumi.Input[str] comment: Specifies a comment for the masking policy.
-        :param pulumi.Input[bool] exempt_other_policies: Specifies whether the row access policy or conditional masking policy can reference a column that is already protected by a masking policy.
-        :param pulumi.Input[bool] if_not_exists: Prevent overwriting a previous masking policy with the same name.
-        :param pulumi.Input[str] name: Specifies the column name to mask.
-        :param pulumi.Input[bool] or_replace: Whether to override a previous masking policy with the same name.
+        :param pulumi.Input[str] exempt_other_policies: Specifies whether the row access policy or conditional masking policy can reference a column that is already protected by a masking policy. Due to Snowflake limitations, when value is chenged, the resource is recreated. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
+        :param pulumi.Input[str] name: Specifies the identifier for the masking policy; must be unique for the database and schema in which the masking policy is created. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
         """
+        pulumi.set(__self__, "arguments", arguments)
+        pulumi.set(__self__, "body", body)
         pulumi.set(__self__, "database", database)
-        pulumi.set(__self__, "masking_expression", masking_expression)
         pulumi.set(__self__, "return_data_type", return_data_type)
         pulumi.set(__self__, "schema", schema)
-        pulumi.set(__self__, "signature", signature)
         if comment is not None:
             pulumi.set(__self__, "comment", comment)
         if exempt_other_policies is not None:
             pulumi.set(__self__, "exempt_other_policies", exempt_other_policies)
-        if if_not_exists is not None:
-            pulumi.set(__self__, "if_not_exists", if_not_exists)
         if name is not None:
             pulumi.set(__self__, "name", name)
-        if or_replace is not None:
-            pulumi.set(__self__, "or_replace", or_replace)
 
     @property
     @pulumi.getter
-    def database(self) -> pulumi.Input[str]:
+    def arguments(self) -> pulumi.Input[Sequence[pulumi.Input['MaskingPolicyArgumentArgs']]]:
         """
-        The database in which to create the masking policy.
+        List of the arguments for the masking policy. The first column and its data type always indicate the column data type values to mask or tokenize in the subsequent policy conditions. Note that you can not specify a virtual column as the first column argument in a conditional masking policy.
         """
-        return pulumi.get(self, "database")
+        return pulumi.get(self, "arguments")
 
-    @database.setter
-    def database(self, value: pulumi.Input[str]):
-        pulumi.set(self, "database", value)
+    @arguments.setter
+    def arguments(self, value: pulumi.Input[Sequence[pulumi.Input['MaskingPolicyArgumentArgs']]]):
+        pulumi.set(self, "arguments", value)
+
+    @property
+    @pulumi.getter
+    def body(self) -> pulumi.Input[str]:
+        """
+        Specifies the SQL expression that transforms the data. To mitigate permadiff on this field, the provider replaces blank characters with a space. This can lead to false positives in cases where a change in case or run of whitespace is semantically significant.
+        """
+        return pulumi.get(self, "body")
+
+    @body.setter
+    def body(self, value: pulumi.Input[str]):
+        pulumi.set(self, "body", value)
 
     @property
-    @pulumi.getter(name="maskingExpression")
-    def masking_expression(self) -> pulumi.Input[str]:
+    @pulumi.getter
+    def database(self) -> pulumi.Input[str]:
         """
-        Specifies the SQL expression that transforms the data.
+        The database in which to create the masking policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
         """
-        return pulumi.get(self, "masking_expression")
+        return pulumi.get(self, "database")
 
-    @masking_expression.setter
-    def masking_expression(self, value: pulumi.Input[str]):
-        pulumi.set(self, "masking_expression", value)
+    @database.setter
+    def database(self, value: pulumi.Input[str]):
+        pulumi.set(self, "database", value)
 
     @property
     @pulumi.getter(name="returnDataType")
     def return_data_type(self) -> pulumi.Input[str]:
         """
-        Specifies the data type to return.
+        The return data type must match the input data type of the first column that is specified as an input column. For more information about data types, check [Snowflake docs](https://docs.snowflake.com/en/sql-reference/intro-summary-data-types).
         """
         return pulumi.get(self, "return_data_type")
 
@@ -95,7 +104,7 @@ class MaskingPolicyArgs:
     @pulumi.getter
     def schema(self) -> pulumi.Input[str]:
         """
-        The schema in which to create the masking policy.
+        The schema in which to create the masking policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
         """
         return pulumi.get(self, "schema")
 
@@ -103,18 +112,6 @@ class MaskingPolicyArgs:
     def schema(self, value: pulumi.Input[str]):
         pulumi.set(self, "schema", value)
 
-    @property
-    @pulumi.getter
-    def signature(self) -> pulumi.Input['MaskingPolicySignatureArgs']:
-        """
-        The signature for the masking policy; specifies the input columns and data types to evaluate at query runtime.
-        """
-        return pulumi.get(self, "signature")
-
-    @signature.setter
-    def signature(self, value: pulumi.Input['MaskingPolicySignatureArgs']):
-        pulumi.set(self, "signature", value)
-
     @property
     @pulumi.getter
     def comment(self) -> Optional[pulumi.Input[str]]:
@@ -129,33 +126,21 @@ class MaskingPolicyArgs:
 
     @property
     @pulumi.getter(name="exemptOtherPolicies")
-    def exempt_other_policies(self) -> Optional[pulumi.Input[bool]]:
+    def exempt_other_policies(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies whether the row access policy or conditional masking policy can reference a column that is already protected by a masking policy.
+        Specifies whether the row access policy or conditional masking policy can reference a column that is already protected by a masking policy. Due to Snowflake limitations, when value is chenged, the resource is recreated. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
         """
         return pulumi.get(self, "exempt_other_policies")
 
     @exempt_other_policies.setter
-    def exempt_other_policies(self, value: Optional[pulumi.Input[bool]]):
+    def exempt_other_policies(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "exempt_other_policies", value)
 
-    @property
-    @pulumi.getter(name="ifNotExists")
-    def if_not_exists(self) -> Optional[pulumi.Input[bool]]:
-        """
-        Prevent overwriting a previous masking policy with the same name.
-        """
-        return pulumi.get(self, "if_not_exists")
-
-    @if_not_exists.setter
-    def if_not_exists(self, value: Optional[pulumi.Input[bool]]):
-        pulumi.set(self, "if_not_exists", value)
-
     @property
     @pulumi.getter
     def name(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies the column name to mask.
+        Specifies the identifier for the masking policy; must be unique for the database and schema in which the masking policy is created. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
         """
         return pulumi.get(self, "name")
 
@@ -163,69 +148,81 @@ class MaskingPolicyArgs:
     def name(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "name", value)
 
-    @property
-    @pulumi.getter(name="orReplace")
-    def or_replace(self) -> Optional[pulumi.Input[bool]]:
-        """
-        Whether to override a previous masking policy with the same name.
-        """
-        return pulumi.get(self, "or_replace")
-
-    @or_replace.setter
-    def or_replace(self, value: Optional[pulumi.Input[bool]]):
-        pulumi.set(self, "or_replace", value)
-
 
 @pulumi.input_type
 class _MaskingPolicyState:
     def __init__(__self__, *,
+                 arguments: Optional[pulumi.Input[Sequence[pulumi.Input['MaskingPolicyArgumentArgs']]]] = None,
+                 body: Optional[pulumi.Input[str]] = None,
                  comment: Optional[pulumi.Input[str]] = None,
                  database: Optional[pulumi.Input[str]] = None,
-                 exempt_other_policies: Optional[pulumi.Input[bool]] = None,
-                 if_not_exists: Optional[pulumi.Input[bool]] = None,
-                 masking_expression: Optional[pulumi.Input[str]] = None,
+                 describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['MaskingPolicyDescribeOutputArgs']]]] = None,
+                 exempt_other_policies: Optional[pulumi.Input[str]] = None,
+                 fully_qualified_name: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
-                 or_replace: Optional[pulumi.Input[bool]] = None,
-                 qualified_name: Optional[pulumi.Input[str]] = None,
                  return_data_type: Optional[pulumi.Input[str]] = None,
                  schema: Optional[pulumi.Input[str]] = None,
-                 signature: Optional[pulumi.Input['MaskingPolicySignatureArgs']] = None):
+                 show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['MaskingPolicyShowOutputArgs']]]] = None):
         """
         Input properties used for looking up and filtering MaskingPolicy resources.
+        :param pulumi.Input[Sequence[pulumi.Input['MaskingPolicyArgumentArgs']]] arguments: List of the arguments for the masking policy. The first column and its data type always indicate the column data type values to mask or tokenize in the subsequent policy conditions. Note that you can not specify a virtual column as the first column argument in a conditional masking policy.
+        :param pulumi.Input[str] body: Specifies the SQL expression that transforms the data. To mitigate permadiff on this field, the provider replaces blank characters with a space. This can lead to false positives in cases where a change in case or run of whitespace is semantically significant.
         :param pulumi.Input[str] comment: Specifies a comment for the masking policy.
-        :param pulumi.Input[str] database: The database in which to create the masking policy.
-        :param pulumi.Input[bool] exempt_other_policies: Specifies whether the row access policy or conditional masking policy can reference a column that is already protected by a masking policy.
-        :param pulumi.Input[bool] if_not_exists: Prevent overwriting a previous masking policy with the same name.
-        :param pulumi.Input[str] masking_expression: Specifies the SQL expression that transforms the data.
-        :param pulumi.Input[str] name: Specifies the column name to mask.
-        :param pulumi.Input[bool] or_replace: Whether to override a previous masking policy with the same name.
-        :param pulumi.Input[str] qualified_name: Specifies the qualified identifier for the masking policy.
-        :param pulumi.Input[str] return_data_type: Specifies the data type to return.
-        :param pulumi.Input[str] schema: The schema in which to create the masking policy.
-        :param pulumi.Input['MaskingPolicySignatureArgs'] signature: The signature for the masking policy; specifies the input columns and data types to evaluate at query runtime.
-        """
+        :param pulumi.Input[str] database: The database in which to create the masking policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
+        :param pulumi.Input[Sequence[pulumi.Input['MaskingPolicyDescribeOutputArgs']]] describe_outputs: Outputs the result of `DESCRIBE MASKING POLICY` for the given masking policy.
+        :param pulumi.Input[str] exempt_other_policies: Specifies whether the row access policy or conditional masking policy can reference a column that is already protected by a masking policy. Due to Snowflake limitations, when value is chenged, the resource is recreated. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
+        :param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
+        :param pulumi.Input[str] name: Specifies the identifier for the masking policy; must be unique for the database and schema in which the masking policy is created. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
+        :param pulumi.Input[str] return_data_type: The return data type must match the input data type of the first column that is specified as an input column. For more information about data types, check [Snowflake docs](https://docs.snowflake.com/en/sql-reference/intro-summary-data-types).
+        :param pulumi.Input[str] schema: The schema in which to create the masking policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
+        :param pulumi.Input[Sequence[pulumi.Input['MaskingPolicyShowOutputArgs']]] show_outputs: Outputs the result of `SHOW MASKING POLICIES` for the given masking policy.
+        """
+        if arguments is not None:
+            pulumi.set(__self__, "arguments", arguments)
+        if body is not None:
+            pulumi.set(__self__, "body", body)
         if comment is not None:
             pulumi.set(__self__, "comment", comment)
         if database is not None:
             pulumi.set(__self__, "database", database)
+        if describe_outputs is not None:
+            pulumi.set(__self__, "describe_outputs", describe_outputs)
         if exempt_other_policies is not None:
             pulumi.set(__self__, "exempt_other_policies", exempt_other_policies)
-        if if_not_exists is not None:
-            pulumi.set(__self__, "if_not_exists", if_not_exists)
-        if masking_expression is not None:
-            pulumi.set(__self__, "masking_expression", masking_expression)
+        if fully_qualified_name is not None:
+            pulumi.set(__self__, "fully_qualified_name", fully_qualified_name)
         if name is not None:
             pulumi.set(__self__, "name", name)
-        if or_replace is not None:
-            pulumi.set(__self__, "or_replace", or_replace)
-        if qualified_name is not None:
-            pulumi.set(__self__, "qualified_name", qualified_name)
         if return_data_type is not None:
             pulumi.set(__self__, "return_data_type", return_data_type)
         if schema is not None:
             pulumi.set(__self__, "schema", schema)
-        if signature is not None:
-            pulumi.set(__self__, "signature", signature)
+        if show_outputs is not None:
+            pulumi.set(__self__, "show_outputs", show_outputs)
+
+    @property
+    @pulumi.getter
+    def arguments(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['MaskingPolicyArgumentArgs']]]]:
+        """
+        List of the arguments for the masking policy. The first column and its data type always indicate the column data type values to mask or tokenize in the subsequent policy conditions. Note that you can not specify a virtual column as the first column argument in a conditional masking policy.
+        """
+        return pulumi.get(self, "arguments")
+
+    @arguments.setter
+    def arguments(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['MaskingPolicyArgumentArgs']]]]):
+        pulumi.set(self, "arguments", value)
+
+    @property
+    @pulumi.getter
+    def body(self) -> Optional[pulumi.Input[str]]:
+        """
+        Specifies the SQL expression that transforms the data. To mitigate permadiff on this field, the provider replaces blank characters with a space. This can lead to false positives in cases where a change in case or run of whitespace is semantically significant.
+        """
+        return pulumi.get(self, "body")
+
+    @body.setter
+    def body(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "body", value)
 
     @property
     @pulumi.getter
@@ -243,7 +240,7 @@ class _MaskingPolicyState:
     @pulumi.getter
     def database(self) -> Optional[pulumi.Input[str]]:
         """
-        The database in which to create the masking policy.
+        The database in which to create the masking policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
         """
         return pulumi.get(self, "database")
 
@@ -252,46 +249,46 @@ class _MaskingPolicyState:
         pulumi.set(self, "database", value)
 
     @property
-    @pulumi.getter(name="exemptOtherPolicies")
-    def exempt_other_policies(self) -> Optional[pulumi.Input[bool]]:
+    @pulumi.getter(name="describeOutputs")
+    def describe_outputs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['MaskingPolicyDescribeOutputArgs']]]]:
         """
-        Specifies whether the row access policy or conditional masking policy can reference a column that is already protected by a masking policy.
+        Outputs the result of `DESCRIBE MASKING POLICY` for the given masking policy.
         """
-        return pulumi.get(self, "exempt_other_policies")
+        return pulumi.get(self, "describe_outputs")
 
-    @exempt_other_policies.setter
-    def exempt_other_policies(self, value: Optional[pulumi.Input[bool]]):
-        pulumi.set(self, "exempt_other_policies", value)
+    @describe_outputs.setter
+    def describe_outputs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['MaskingPolicyDescribeOutputArgs']]]]):
+        pulumi.set(self, "describe_outputs", value)
 
     @property
-    @pulumi.getter(name="ifNotExists")
-    def if_not_exists(self) -> Optional[pulumi.Input[bool]]:
+    @pulumi.getter(name="exemptOtherPolicies")
+    def exempt_other_policies(self) -> Optional[pulumi.Input[str]]:
         """
-        Prevent overwriting a previous masking policy with the same name.
+        Specifies whether the row access policy or conditional masking policy can reference a column that is already protected by a masking policy. Due to Snowflake limitations, when value is chenged, the resource is recreated. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
         """
-        return pulumi.get(self, "if_not_exists")
+        return pulumi.get(self, "exempt_other_policies")
 
-    @if_not_exists.setter
-    def if_not_exists(self, value: Optional[pulumi.Input[bool]]):
-        pulumi.set(self, "if_not_exists", value)
+    @exempt_other_policies.setter
+    def exempt_other_policies(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "exempt_other_policies", value)
 
     @property
-    @pulumi.getter(name="maskingExpression")
-    def masking_expression(self) -> Optional[pulumi.Input[str]]:
+    @pulumi.getter(name="fullyQualifiedName")
+    def fully_qualified_name(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies the SQL expression that transforms the data.
+        Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
         """
-        return pulumi.get(self, "masking_expression")
+        return pulumi.get(self, "fully_qualified_name")
 
-    @masking_expression.setter
-    def masking_expression(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "masking_expression", value)
+    @fully_qualified_name.setter
+    def fully_qualified_name(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "fully_qualified_name", value)
 
     @property
     @pulumi.getter
     def name(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies the column name to mask.
+        Specifies the identifier for the masking policy; must be unique for the database and schema in which the masking policy is created. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
         """
         return pulumi.get(self, "name")
 
@@ -299,35 +296,11 @@ class _MaskingPolicyState:
     def name(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "name", value)
 
-    @property
-    @pulumi.getter(name="orReplace")
-    def or_replace(self) -> Optional[pulumi.Input[bool]]:
-        """
-        Whether to override a previous masking policy with the same name.
-        """
-        return pulumi.get(self, "or_replace")
-
-    @or_replace.setter
-    def or_replace(self, value: Optional[pulumi.Input[bool]]):
-        pulumi.set(self, "or_replace", value)
-
-    @property
-    @pulumi.getter(name="qualifiedName")
-    def qualified_name(self) -> Optional[pulumi.Input[str]]:
-        """
-        Specifies the qualified identifier for the masking policy.
-        """
-        return pulumi.get(self, "qualified_name")
-
-    @qualified_name.setter
-    def qualified_name(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "qualified_name", value)
-
     @property
     @pulumi.getter(name="returnDataType")
     def return_data_type(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies the data type to return.
+        The return data type must match the input data type of the first column that is specified as an input column. For more information about data types, check [Snowflake docs](https://docs.snowflake.com/en/sql-reference/intro-summary-data-types).
         """
         return pulumi.get(self, "return_data_type")
 
@@ -339,7 +312,7 @@ class _MaskingPolicyState:
     @pulumi.getter
     def schema(self) -> Optional[pulumi.Input[str]]:
         """
-        The schema in which to create the masking policy.
+        The schema in which to create the masking policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
         """
         return pulumi.get(self, "schema")
 
@@ -348,16 +321,16 @@ class _MaskingPolicyState:
         pulumi.set(self, "schema", value)
 
     @property
-    @pulumi.getter
-    def signature(self) -> Optional[pulumi.Input['MaskingPolicySignatureArgs']]:
+    @pulumi.getter(name="showOutputs")
+    def show_outputs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['MaskingPolicyShowOutputArgs']]]]:
         """
-        The signature for the masking policy; specifies the input columns and data types to evaluate at query runtime.
+        Outputs the result of `SHOW MASKING POLICIES` for the given masking policy.
         """
-        return pulumi.get(self, "signature")
+        return pulumi.get(self, "show_outputs")
 
-    @signature.setter
-    def signature(self, value: Optional[pulumi.Input['MaskingPolicySignatureArgs']]):
-        pulumi.set(self, "signature", value)
+    @show_outputs.setter
+    def show_outputs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['MaskingPolicyShowOutputArgs']]]]):
+        pulumi.set(self, "show_outputs", value)
 
 
 class MaskingPolicy(pulumi.CustomResource):
@@ -365,68 +338,32 @@ class MaskingPolicy(pulumi.CustomResource):
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 arguments: Optional[pulumi.Input[Sequence[pulumi.Input[Union['MaskingPolicyArgumentArgs', 'MaskingPolicyArgumentArgsDict']]]]] = None,
+                 body: Optional[pulumi.Input[str]] = None,
                  comment: Optional[pulumi.Input[str]] = None,
                  database: Optional[pulumi.Input[str]] = None,
-                 exempt_other_policies: Optional[pulumi.Input[bool]] = None,
-                 if_not_exists: Optional[pulumi.Input[bool]] = None,
-                 masking_expression: Optional[pulumi.Input[str]] = None,
+                 exempt_other_policies: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
-                 or_replace: Optional[pulumi.Input[bool]] = None,
                  return_data_type: Optional[pulumi.Input[str]] = None,
                  schema: Optional[pulumi.Input[str]] = None,
-                 signature: Optional[pulumi.Input[pulumi.InputType['MaskingPolicySignatureArgs']]] = None,
                  __props__=None):
         """
-        ## Example Usage
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_snowflake as snowflake
-
-        test = snowflake.MaskingPolicy("test",
-            database="EXAMPLE_DB",
-            masking_expression=\"\"\"  case 
-            when current_role() in ('ROLE_A') then 
-              val 
-            when is_role_in_session( 'ROLE_B' ) then 
-              'ABC123'
-            else
-              '******'
-          end
-
-        \"\"\",
-            return_data_type="VARCHAR",
-            schema="EXAMPLE_SCHEMA",
-            signature=snowflake.MaskingPolicySignatureArgs(
-                columns=[snowflake.MaskingPolicySignatureColumnArgs(
-                    name="val",
-                    type="VARCHAR",
-                )],
-            ))
-        ```
-        <!--End PulumiCodeChooser -->
-
         ## Import
 
-        format is database name | schema name | policy name
-
         ```sh
-        $ pulumi import snowflake:index/maskingPolicy:MaskingPolicy example 'dbName|schemaName|policyName'
+        $ pulumi import snowflake:index/maskingPolicy:MaskingPolicy example '"<database_name>"."<schema_name>"."<masking_policy_name>"'
         ```
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['MaskingPolicyArgumentArgs', 'MaskingPolicyArgumentArgsDict']]]] arguments: List of the arguments for the masking policy. The first column and its data type always indicate the column data type values to mask or tokenize in the subsequent policy conditions. Note that you can not specify a virtual column as the first column argument in a conditional masking policy.
+        :param pulumi.Input[str] body: Specifies the SQL expression that transforms the data. To mitigate permadiff on this field, the provider replaces blank characters with a space. This can lead to false positives in cases where a change in case or run of whitespace is semantically significant.
         :param pulumi.Input[str] comment: Specifies a comment for the masking policy.
-        :param pulumi.Input[str] database: The database in which to create the masking policy.
-        :param pulumi.Input[bool] exempt_other_policies: Specifies whether the row access policy or conditional masking policy can reference a column that is already protected by a masking policy.
-        :param pulumi.Input[bool] if_not_exists: Prevent overwriting a previous masking policy with the same name.
-        :param pulumi.Input[str] masking_expression: Specifies the SQL expression that transforms the data.
-        :param pulumi.Input[str] name: Specifies the column name to mask.
-        :param pulumi.Input[bool] or_replace: Whether to override a previous masking policy with the same name.
-        :param pulumi.Input[str] return_data_type: Specifies the data type to return.
-        :param pulumi.Input[str] schema: The schema in which to create the masking policy.
-        :param pulumi.Input[pulumi.InputType['MaskingPolicySignatureArgs']] signature: The signature for the masking policy; specifies the input columns and data types to evaluate at query runtime.
+        :param pulumi.Input[str] database: The database in which to create the masking policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
+        :param pulumi.Input[str] exempt_other_policies: Specifies whether the row access policy or conditional masking policy can reference a column that is already protected by a masking policy. Due to Snowflake limitations, when value is chenged, the resource is recreated. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
+        :param pulumi.Input[str] name: Specifies the identifier for the masking policy; must be unique for the database and schema in which the masking policy is created. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
+        :param pulumi.Input[str] return_data_type: The return data type must match the input data type of the first column that is specified as an input column. For more information about data types, check [Snowflake docs](https://docs.snowflake.com/en/sql-reference/intro-summary-data-types).
+        :param pulumi.Input[str] schema: The schema in which to create the masking policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
         """
         ...
     @overload
@@ -435,42 +372,10 @@ class MaskingPolicy(pulumi.CustomResource):
                  args: MaskingPolicyArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
-        ## Example Usage
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_snowflake as snowflake
-
-        test = snowflake.MaskingPolicy("test",
-            database="EXAMPLE_DB",
-            masking_expression=\"\"\"  case 
-            when current_role() in ('ROLE_A') then 
-              val 
-            when is_role_in_session( 'ROLE_B' ) then 
-              'ABC123'
-            else
-              '******'
-          end
-
-        \"\"\",
-            return_data_type="VARCHAR",
-            schema="EXAMPLE_SCHEMA",
-            signature=snowflake.MaskingPolicySignatureArgs(
-                columns=[snowflake.MaskingPolicySignatureColumnArgs(
-                    name="val",
-                    type="VARCHAR",
-                )],
-            ))
-        ```
-        <!--End PulumiCodeChooser -->
-
         ## Import
 
-        format is database name | schema name | policy name
-
         ```sh
-        $ pulumi import snowflake:index/maskingPolicy:MaskingPolicy example 'dbName|schemaName|policyName'
+        $ pulumi import snowflake:index/maskingPolicy:MaskingPolicy example '"<database_name>"."<schema_name>"."<masking_policy_name>"'
         ```
 
         :param str resource_name: The name of the resource.
@@ -488,16 +393,14 @@ class MaskingPolicy(pulumi.CustomResource):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 arguments: Optional[pulumi.Input[Sequence[pulumi.Input[Union['MaskingPolicyArgumentArgs', 'MaskingPolicyArgumentArgsDict']]]]] = None,
+                 body: Optional[pulumi.Input[str]] = None,
                  comment: Optional[pulumi.Input[str]] = None,
                  database: Optional[pulumi.Input[str]] = None,
-                 exempt_other_policies: Optional[pulumi.Input[bool]] = None,
-                 if_not_exists: Optional[pulumi.Input[bool]] = None,
-                 masking_expression: Optional[pulumi.Input[str]] = None,
+                 exempt_other_policies: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
-                 or_replace: Optional[pulumi.Input[bool]] = None,
                  return_data_type: Optional[pulumi.Input[str]] = None,
                  schema: Optional[pulumi.Input[str]] = None,
-                 signature: Optional[pulumi.Input[pulumi.InputType['MaskingPolicySignatureArgs']]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -507,27 +410,27 @@ class MaskingPolicy(pulumi.CustomResource):
                 raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
             __props__ = MaskingPolicyArgs.__new__(MaskingPolicyArgs)
 
+            if arguments is None and not opts.urn:
+                raise TypeError("Missing required property 'arguments'")
+            __props__.__dict__["arguments"] = arguments
+            if body is None and not opts.urn:
+                raise TypeError("Missing required property 'body'")
+            __props__.__dict__["body"] = body
             __props__.__dict__["comment"] = comment
             if database is None and not opts.urn:
                 raise TypeError("Missing required property 'database'")
             __props__.__dict__["database"] = database
             __props__.__dict__["exempt_other_policies"] = exempt_other_policies
-            __props__.__dict__["if_not_exists"] = if_not_exists
-            if masking_expression is None and not opts.urn:
-                raise TypeError("Missing required property 'masking_expression'")
-            __props__.__dict__["masking_expression"] = masking_expression
             __props__.__dict__["name"] = name
-            __props__.__dict__["or_replace"] = or_replace
             if return_data_type is None and not opts.urn:
                 raise TypeError("Missing required property 'return_data_type'")
             __props__.__dict__["return_data_type"] = return_data_type
             if schema is None and not opts.urn:
                 raise TypeError("Missing required property 'schema'")
             __props__.__dict__["schema"] = schema
-            if signature is None and not opts.urn:
-                raise TypeError("Missing required property 'signature'")
-            __props__.__dict__["signature"] = signature
-            __props__.__dict__["qualified_name"] = None
+            __props__.__dict__["describe_outputs"] = None
+            __props__.__dict__["fully_qualified_name"] = None
+            __props__.__dict__["show_outputs"] = None
         super(MaskingPolicy, __self__).__init__(
             'snowflake:index/maskingPolicy:MaskingPolicy',
             resource_name,
@@ -538,17 +441,17 @@ class MaskingPolicy(pulumi.CustomResource):
     def get(resource_name: str,
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
+            arguments: Optional[pulumi.Input[Sequence[pulumi.Input[Union['MaskingPolicyArgumentArgs', 'MaskingPolicyArgumentArgsDict']]]]] = None,
+            body: Optional[pulumi.Input[str]] = None,
             comment: Optional[pulumi.Input[str]] = None,
             database: Optional[pulumi.Input[str]] = None,
-            exempt_other_policies: Optional[pulumi.Input[bool]] = None,
-            if_not_exists: Optional[pulumi.Input[bool]] = None,
-            masking_expression: Optional[pulumi.Input[str]] = None,
+            describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['MaskingPolicyDescribeOutputArgs', 'MaskingPolicyDescribeOutputArgsDict']]]]] = None,
+            exempt_other_policies: Optional[pulumi.Input[str]] = None,
+            fully_qualified_name: Optional[pulumi.Input[str]] = None,
             name: Optional[pulumi.Input[str]] = None,
-            or_replace: Optional[pulumi.Input[bool]] = None,
-            qualified_name: Optional[pulumi.Input[str]] = None,
             return_data_type: Optional[pulumi.Input[str]] = None,
             schema: Optional[pulumi.Input[str]] = None,
-            signature: Optional[pulumi.Input[pulumi.InputType['MaskingPolicySignatureArgs']]] = None) -> 'MaskingPolicy':
+            show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['MaskingPolicyShowOutputArgs', 'MaskingPolicyShowOutputArgsDict']]]]] = None) -> 'MaskingPolicy':
         """
         Get an existing MaskingPolicy resource's state with the given name, id, and optional extra
         properties used to qualify the lookup.
@@ -556,104 +459,104 @@ class MaskingPolicy(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['MaskingPolicyArgumentArgs', 'MaskingPolicyArgumentArgsDict']]]] arguments: List of the arguments for the masking policy. The first column and its data type always indicate the column data type values to mask or tokenize in the subsequent policy conditions. Note that you can not specify a virtual column as the first column argument in a conditional masking policy.
+        :param pulumi.Input[str] body: Specifies the SQL expression that transforms the data. To mitigate permadiff on this field, the provider replaces blank characters with a space. This can lead to false positives in cases where a change in case or run of whitespace is semantically significant.
         :param pulumi.Input[str] comment: Specifies a comment for the masking policy.
-        :param pulumi.Input[str] database: The database in which to create the masking policy.
-        :param pulumi.Input[bool] exempt_other_policies: Specifies whether the row access policy or conditional masking policy can reference a column that is already protected by a masking policy.
-        :param pulumi.Input[bool] if_not_exists: Prevent overwriting a previous masking policy with the same name.
-        :param pulumi.Input[str] masking_expression: Specifies the SQL expression that transforms the data.
-        :param pulumi.Input[str] name: Specifies the column name to mask.
-        :param pulumi.Input[bool] or_replace: Whether to override a previous masking policy with the same name.
-        :param pulumi.Input[str] qualified_name: Specifies the qualified identifier for the masking policy.
-        :param pulumi.Input[str] return_data_type: Specifies the data type to return.
-        :param pulumi.Input[str] schema: The schema in which to create the masking policy.
-        :param pulumi.Input[pulumi.InputType['MaskingPolicySignatureArgs']] signature: The signature for the masking policy; specifies the input columns and data types to evaluate at query runtime.
+        :param pulumi.Input[str] database: The database in which to create the masking policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['MaskingPolicyDescribeOutputArgs', 'MaskingPolicyDescribeOutputArgsDict']]]] describe_outputs: Outputs the result of `DESCRIBE MASKING POLICY` for the given masking policy.
+        :param pulumi.Input[str] exempt_other_policies: Specifies whether the row access policy or conditional masking policy can reference a column that is already protected by a masking policy. Due to Snowflake limitations, when value is chenged, the resource is recreated. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
+        :param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
+        :param pulumi.Input[str] name: Specifies the identifier for the masking policy; must be unique for the database and schema in which the masking policy is created. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
+        :param pulumi.Input[str] return_data_type: The return data type must match the input data type of the first column that is specified as an input column. For more information about data types, check [Snowflake docs](https://docs.snowflake.com/en/sql-reference/intro-summary-data-types).
+        :param pulumi.Input[str] schema: The schema in which to create the masking policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['MaskingPolicyShowOutputArgs', 'MaskingPolicyShowOutputArgsDict']]]] show_outputs: Outputs the result of `SHOW MASKING POLICIES` for the given masking policy.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
         __props__ = _MaskingPolicyState.__new__(_MaskingPolicyState)
 
+        __props__.__dict__["arguments"] = arguments
+        __props__.__dict__["body"] = body
         __props__.__dict__["comment"] = comment
         __props__.__dict__["database"] = database
+        __props__.__dict__["describe_outputs"] = describe_outputs
         __props__.__dict__["exempt_other_policies"] = exempt_other_policies
-        __props__.__dict__["if_not_exists"] = if_not_exists
-        __props__.__dict__["masking_expression"] = masking_expression
+        __props__.__dict__["fully_qualified_name"] = fully_qualified_name
         __props__.__dict__["name"] = name
-        __props__.__dict__["or_replace"] = or_replace
-        __props__.__dict__["qualified_name"] = qualified_name
         __props__.__dict__["return_data_type"] = return_data_type
         __props__.__dict__["schema"] = schema
-        __props__.__dict__["signature"] = signature
+        __props__.__dict__["show_outputs"] = show_outputs
         return MaskingPolicy(resource_name, opts=opts, __props__=__props__)
 
     @property
     @pulumi.getter
-    def comment(self) -> pulumi.Output[Optional[str]]:
+    def arguments(self) -> pulumi.Output[Sequence['outputs.MaskingPolicyArgument']]:
         """
-        Specifies a comment for the masking policy.
+        List of the arguments for the masking policy. The first column and its data type always indicate the column data type values to mask or tokenize in the subsequent policy conditions. Note that you can not specify a virtual column as the first column argument in a conditional masking policy.
         """
-        return pulumi.get(self, "comment")
+        return pulumi.get(self, "arguments")
 
     @property
     @pulumi.getter
-    def database(self) -> pulumi.Output[str]:
+    def body(self) -> pulumi.Output[str]:
         """
-        The database in which to create the masking policy.
+        Specifies the SQL expression that transforms the data. To mitigate permadiff on this field, the provider replaces blank characters with a space. This can lead to false positives in cases where a change in case or run of whitespace is semantically significant.
         """
-        return pulumi.get(self, "database")
+        return pulumi.get(self, "body")
 
     @property
-    @pulumi.getter(name="exemptOtherPolicies")
-    def exempt_other_policies(self) -> pulumi.Output[Optional[bool]]:
+    @pulumi.getter
+    def comment(self) -> pulumi.Output[Optional[str]]:
         """
-        Specifies whether the row access policy or conditional masking policy can reference a column that is already protected by a masking policy.
+        Specifies a comment for the masking policy.
         """
-        return pulumi.get(self, "exempt_other_policies")
+        return pulumi.get(self, "comment")
 
     @property
-    @pulumi.getter(name="ifNotExists")
-    def if_not_exists(self) -> pulumi.Output[Optional[bool]]:
+    @pulumi.getter
+    def database(self) -> pulumi.Output[str]:
         """
-        Prevent overwriting a previous masking policy with the same name.
+        The database in which to create the masking policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
         """
-        return pulumi.get(self, "if_not_exists")
+        return pulumi.get(self, "database")
 
     @property
-    @pulumi.getter(name="maskingExpression")
-    def masking_expression(self) -> pulumi.Output[str]:
+    @pulumi.getter(name="describeOutputs")
+    def describe_outputs(self) -> pulumi.Output[Sequence['outputs.MaskingPolicyDescribeOutput']]:
         """
-        Specifies the SQL expression that transforms the data.
+        Outputs the result of `DESCRIBE MASKING POLICY` for the given masking policy.
         """
-        return pulumi.get(self, "masking_expression")
+        return pulumi.get(self, "describe_outputs")
 
     @property
-    @pulumi.getter
-    def name(self) -> pulumi.Output[str]:
+    @pulumi.getter(name="exemptOtherPolicies")
+    def exempt_other_policies(self) -> pulumi.Output[Optional[str]]:
         """
-        Specifies the column name to mask.
+        Specifies whether the row access policy or conditional masking policy can reference a column that is already protected by a masking policy. Due to Snowflake limitations, when value is chenged, the resource is recreated. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
         """
-        return pulumi.get(self, "name")
+        return pulumi.get(self, "exempt_other_policies")
 
     @property
-    @pulumi.getter(name="orReplace")
-    def or_replace(self) -> pulumi.Output[Optional[bool]]:
+    @pulumi.getter(name="fullyQualifiedName")
+    def fully_qualified_name(self) -> pulumi.Output[str]:
         """
-        Whether to override a previous masking policy with the same name.
+        Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
         """
-        return pulumi.get(self, "or_replace")
+        return pulumi.get(self, "fully_qualified_name")
 
     @property
-    @pulumi.getter(name="qualifiedName")
-    def qualified_name(self) -> pulumi.Output[str]:
+    @pulumi.getter
+    def name(self) -> pulumi.Output[str]:
         """
-        Specifies the qualified identifier for the masking policy.
+        Specifies the identifier for the masking policy; must be unique for the database and schema in which the masking policy is created. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
         """
-        return pulumi.get(self, "qualified_name")
+        return pulumi.get(self, "name")
 
     @property
     @pulumi.getter(name="returnDataType")
     def return_data_type(self) -> pulumi.Output[str]:
         """
-        Specifies the data type to return.
+        The return data type must match the input data type of the first column that is specified as an input column. For more information about data types, check [Snowflake docs](https://docs.snowflake.com/en/sql-reference/intro-summary-data-types).
         """
         return pulumi.get(self, "return_data_type")
 
@@ -661,15 +564,15 @@ class MaskingPolicy(pulumi.CustomResource):
     @pulumi.getter
     def schema(self) -> pulumi.Output[str]:
         """
-        The schema in which to create the masking policy.
+        The schema in which to create the masking policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
         """
         return pulumi.get(self, "schema")
 
     @property
-    @pulumi.getter
-    def signature(self) -> pulumi.Output['outputs.MaskingPolicySignature']:
+    @pulumi.getter(name="showOutputs")
+    def show_outputs(self) -> pulumi.Output[Sequence['outputs.MaskingPolicyShowOutput']]:
         """
-        The signature for the masking policy; specifies the input columns and data types to evaluate at query runtime.
+        Outputs the result of `SHOW MASKING POLICIES` for the given masking policy.
         """
-        return pulumi.get(self, "signature")
+        return pulumi.get(self, "show_outputs")