pulumi-snowflake 0.57.0a1721977458__py3-none-any.whl → 0.57.0a1722246300__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-snowflake might be problematic. Click here for more details.
- pulumi_snowflake/__init__.py +20 -0
- pulumi_snowflake/_inputs.py +2475 -237
- pulumi_snowflake/account_role.py +226 -0
- pulumi_snowflake/api_authentication_integration_with_authorization_code_grant.py +4 -0
- pulumi_snowflake/api_authentication_integration_with_client_credentials.py +4 -0
- pulumi_snowflake/api_authentication_integration_with_jwt_bearer.py +4 -0
- pulumi_snowflake/database.py +63 -63
- pulumi_snowflake/external_oauth_integration.py +2 -2
- pulumi_snowflake/get_network_policies.py +122 -0
- pulumi_snowflake/get_roles.py +37 -31
- pulumi_snowflake/get_schemas.py +115 -38
- pulumi_snowflake/get_streamlits.py +159 -0
- pulumi_snowflake/network_policy.py +103 -19
- pulumi_snowflake/oauth_integration_for_custom_clients.py +18 -14
- pulumi_snowflake/oauth_integration_for_partner_applications.py +18 -14
- pulumi_snowflake/outputs.py +5849 -2728
- pulumi_snowflake/pulumi-plugin.json +1 -1
- pulumi_snowflake/role.py +44 -72
- pulumi_snowflake/saml2_integration.py +32 -28
- pulumi_snowflake/schema.py +905 -151
- pulumi_snowflake/scim_integration.py +25 -21
- pulumi_snowflake/secondary_database.py +63 -63
- pulumi_snowflake/shared_database.py +63 -63
- pulumi_snowflake/streamlit.py +650 -0
- pulumi_snowflake/table.py +0 -120
- pulumi_snowflake/table_constraint.py +2 -2
- pulumi_snowflake/unsafe_execute.py +8 -8
- {pulumi_snowflake-0.57.0a1721977458.dist-info → pulumi_snowflake-0.57.0a1722246300.dist-info}/METADATA +1 -1
- {pulumi_snowflake-0.57.0a1721977458.dist-info → pulumi_snowflake-0.57.0a1722246300.dist-info}/RECORD +31 -27
- {pulumi_snowflake-0.57.0a1721977458.dist-info → pulumi_snowflake-0.57.0a1722246300.dist-info}/WHEEL +1 -1
- {pulumi_snowflake-0.57.0a1721977458.dist-info → pulumi_snowflake-0.57.0a1722246300.dist-info}/top_level.txt +0 -0
|
@@ -8,6 +8,8 @@ import pulumi
|
|
|
8
8
|
import pulumi.runtime
|
|
9
9
|
from typing import Any, Mapping, Optional, Sequence, Union, overload
|
|
10
10
|
from . import _utilities
|
|
11
|
+
from . import outputs
|
|
12
|
+
from ._inputs import *
|
|
11
13
|
|
|
12
14
|
__all__ = ['NetworkPolicyArgs', 'NetworkPolicy']
|
|
13
15
|
|
|
@@ -24,7 +26,7 @@ class NetworkPolicyArgs:
|
|
|
24
26
|
The set of arguments for constructing a NetworkPolicy resource.
|
|
25
27
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_ip_lists: Specifies one or more IPv4 addresses (CIDR notation) that are allowed access to your Snowflake account.
|
|
26
28
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_network_rule_lists: Specifies a list of fully qualified network rules that contain the network identifiers that are allowed access to Snowflake.
|
|
27
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_ip_lists: Specifies one or more IPv4 addresses (CIDR notation) that are denied access to your Snowflake account
|
|
29
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_ip_lists: Specifies one or more IPv4 addresses (CIDR notation) that are denied access to your Snowflake account. **Do not** add `0.0.0.0/0` to `blocked_ip_list`, in order to block all IP addresses except a select list, you only need to add IP addresses to `allowed_ip_list`.
|
|
28
30
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_network_rule_lists: Specifies a list of fully qualified network rules that contain the network identifiers that are denied access to Snowflake.
|
|
29
31
|
:param pulumi.Input[str] comment: Specifies a comment for the network policy.
|
|
30
32
|
:param pulumi.Input[str] name: Specifies the identifier for the network policy; must be unique for the account in which the network policy is created.
|
|
@@ -70,7 +72,7 @@ class NetworkPolicyArgs:
|
|
|
70
72
|
@pulumi.getter(name="blockedIpLists")
|
|
71
73
|
def blocked_ip_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
72
74
|
"""
|
|
73
|
-
Specifies one or more IPv4 addresses (CIDR notation) that are denied access to your Snowflake account
|
|
75
|
+
Specifies one or more IPv4 addresses (CIDR notation) that are denied access to your Snowflake account. **Do not** add `0.0.0.0/0` to `blocked_ip_list`, in order to block all IP addresses except a select list, you only need to add IP addresses to `allowed_ip_list`.
|
|
74
76
|
"""
|
|
75
77
|
return pulumi.get(self, "blocked_ip_lists")
|
|
76
78
|
|
|
@@ -123,15 +125,19 @@ class _NetworkPolicyState:
|
|
|
123
125
|
blocked_ip_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
124
126
|
blocked_network_rule_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
125
127
|
comment: Optional[pulumi.Input[str]] = None,
|
|
126
|
-
|
|
128
|
+
describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['NetworkPolicyDescribeOutputArgs']]]] = None,
|
|
129
|
+
name: Optional[pulumi.Input[str]] = None,
|
|
130
|
+
show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['NetworkPolicyShowOutputArgs']]]] = None):
|
|
127
131
|
"""
|
|
128
132
|
Input properties used for looking up and filtering NetworkPolicy resources.
|
|
129
133
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_ip_lists: Specifies one or more IPv4 addresses (CIDR notation) that are allowed access to your Snowflake account.
|
|
130
134
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_network_rule_lists: Specifies a list of fully qualified network rules that contain the network identifiers that are allowed access to Snowflake.
|
|
131
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_ip_lists: Specifies one or more IPv4 addresses (CIDR notation) that are denied access to your Snowflake account
|
|
135
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_ip_lists: Specifies one or more IPv4 addresses (CIDR notation) that are denied access to your Snowflake account. **Do not** add `0.0.0.0/0` to `blocked_ip_list`, in order to block all IP addresses except a select list, you only need to add IP addresses to `allowed_ip_list`.
|
|
132
136
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_network_rule_lists: Specifies a list of fully qualified network rules that contain the network identifiers that are denied access to Snowflake.
|
|
133
137
|
:param pulumi.Input[str] comment: Specifies a comment for the network policy.
|
|
138
|
+
:param pulumi.Input[Sequence[pulumi.Input['NetworkPolicyDescribeOutputArgs']]] describe_outputs: Outputs the result of `DESCRIBE NETWORK POLICY` for the given network policy.
|
|
134
139
|
:param pulumi.Input[str] name: Specifies the identifier for the network policy; must be unique for the account in which the network policy is created.
|
|
140
|
+
:param pulumi.Input[Sequence[pulumi.Input['NetworkPolicyShowOutputArgs']]] show_outputs: Outputs the result of `SHOW NETWORK POLICIES` for the given network policy.
|
|
135
141
|
"""
|
|
136
142
|
if allowed_ip_lists is not None:
|
|
137
143
|
pulumi.set(__self__, "allowed_ip_lists", allowed_ip_lists)
|
|
@@ -143,8 +149,12 @@ class _NetworkPolicyState:
|
|
|
143
149
|
pulumi.set(__self__, "blocked_network_rule_lists", blocked_network_rule_lists)
|
|
144
150
|
if comment is not None:
|
|
145
151
|
pulumi.set(__self__, "comment", comment)
|
|
152
|
+
if describe_outputs is not None:
|
|
153
|
+
pulumi.set(__self__, "describe_outputs", describe_outputs)
|
|
146
154
|
if name is not None:
|
|
147
155
|
pulumi.set(__self__, "name", name)
|
|
156
|
+
if show_outputs is not None:
|
|
157
|
+
pulumi.set(__self__, "show_outputs", show_outputs)
|
|
148
158
|
|
|
149
159
|
@property
|
|
150
160
|
@pulumi.getter(name="allowedIpLists")
|
|
@@ -174,7 +184,7 @@ class _NetworkPolicyState:
|
|
|
174
184
|
@pulumi.getter(name="blockedIpLists")
|
|
175
185
|
def blocked_ip_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
176
186
|
"""
|
|
177
|
-
Specifies one or more IPv4 addresses (CIDR notation) that are denied access to your Snowflake account
|
|
187
|
+
Specifies one or more IPv4 addresses (CIDR notation) that are denied access to your Snowflake account. **Do not** add `0.0.0.0/0` to `blocked_ip_list`, in order to block all IP addresses except a select list, you only need to add IP addresses to `allowed_ip_list`.
|
|
178
188
|
"""
|
|
179
189
|
return pulumi.get(self, "blocked_ip_lists")
|
|
180
190
|
|
|
@@ -206,6 +216,18 @@ class _NetworkPolicyState:
|
|
|
206
216
|
def comment(self, value: Optional[pulumi.Input[str]]):
|
|
207
217
|
pulumi.set(self, "comment", value)
|
|
208
218
|
|
|
219
|
+
@property
|
|
220
|
+
@pulumi.getter(name="describeOutputs")
|
|
221
|
+
def describe_outputs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['NetworkPolicyDescribeOutputArgs']]]]:
|
|
222
|
+
"""
|
|
223
|
+
Outputs the result of `DESCRIBE NETWORK POLICY` for the given network policy.
|
|
224
|
+
"""
|
|
225
|
+
return pulumi.get(self, "describe_outputs")
|
|
226
|
+
|
|
227
|
+
@describe_outputs.setter
|
|
228
|
+
def describe_outputs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['NetworkPolicyDescribeOutputArgs']]]]):
|
|
229
|
+
pulumi.set(self, "describe_outputs", value)
|
|
230
|
+
|
|
209
231
|
@property
|
|
210
232
|
@pulumi.getter
|
|
211
233
|
def name(self) -> Optional[pulumi.Input[str]]:
|
|
@@ -218,6 +240,18 @@ class _NetworkPolicyState:
|
|
|
218
240
|
def name(self, value: Optional[pulumi.Input[str]]):
|
|
219
241
|
pulumi.set(self, "name", value)
|
|
220
242
|
|
|
243
|
+
@property
|
|
244
|
+
@pulumi.getter(name="showOutputs")
|
|
245
|
+
def show_outputs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['NetworkPolicyShowOutputArgs']]]]:
|
|
246
|
+
"""
|
|
247
|
+
Outputs the result of `SHOW NETWORK POLICIES` for the given network policy.
|
|
248
|
+
"""
|
|
249
|
+
return pulumi.get(self, "show_outputs")
|
|
250
|
+
|
|
251
|
+
@show_outputs.setter
|
|
252
|
+
def show_outputs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['NetworkPolicyShowOutputArgs']]]]):
|
|
253
|
+
pulumi.set(self, "show_outputs", value)
|
|
254
|
+
|
|
221
255
|
|
|
222
256
|
class NetworkPolicy(pulumi.CustomResource):
|
|
223
257
|
@overload
|
|
@@ -232,19 +266,32 @@ class NetworkPolicy(pulumi.CustomResource):
|
|
|
232
266
|
name: Optional[pulumi.Input[str]] = None,
|
|
233
267
|
__props__=None):
|
|
234
268
|
"""
|
|
235
|
-
|
|
269
|
+
!> **V1 release candidate** This resource was reworked and is a release candidate for the V1. We do not expect significant changes in it before the V1. We will welcome any feedback and adjust the resource if needed. Any errors reported will be resolved with a higher priority. We encourage checking this resource out before the V1 release. Please follow the migration guide to use it.
|
|
270
|
+
|
|
271
|
+
Resource used to control network traffic. For more information, check an [official guide](https://docs.snowflake.com/en/user-guide/network-policies) on controlling network traffic with network policies.
|
|
236
272
|
|
|
237
|
-
##
|
|
273
|
+
## Minimal
|
|
238
274
|
|
|
239
|
-
|
|
240
|
-
|
|
241
|
-
|
|
275
|
+
resource "NetworkPolicy" "basic" {
|
|
276
|
+
name = "network_policy_name"
|
|
277
|
+
}
|
|
278
|
+
|
|
279
|
+
## Complete (with every optional set)
|
|
280
|
+
|
|
281
|
+
resource "NetworkPolicy" "basic" {
|
|
282
|
+
name = "network_policy_name"
|
|
283
|
+
allowed_network_rule_list = ["<fully qualified network rule id>"]
|
|
284
|
+
blocked_network_rule_list = ["<fully qualified network rule id>"]
|
|
285
|
+
allowed_ip_list = ["192.168.1.0/24"]
|
|
286
|
+
blocked_ip_list = ["192.168.1.99"]
|
|
287
|
+
comment = "my network policy"
|
|
288
|
+
}
|
|
242
289
|
|
|
243
290
|
:param str resource_name: The name of the resource.
|
|
244
291
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
245
292
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_ip_lists: Specifies one or more IPv4 addresses (CIDR notation) that are allowed access to your Snowflake account.
|
|
246
293
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_network_rule_lists: Specifies a list of fully qualified network rules that contain the network identifiers that are allowed access to Snowflake.
|
|
247
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_ip_lists: Specifies one or more IPv4 addresses (CIDR notation) that are denied access to your Snowflake account
|
|
294
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_ip_lists: Specifies one or more IPv4 addresses (CIDR notation) that are denied access to your Snowflake account. **Do not** add `0.0.0.0/0` to `blocked_ip_list`, in order to block all IP addresses except a select list, you only need to add IP addresses to `allowed_ip_list`.
|
|
248
295
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_network_rule_lists: Specifies a list of fully qualified network rules that contain the network identifiers that are denied access to Snowflake.
|
|
249
296
|
:param pulumi.Input[str] comment: Specifies a comment for the network policy.
|
|
250
297
|
:param pulumi.Input[str] name: Specifies the identifier for the network policy; must be unique for the account in which the network policy is created.
|
|
@@ -256,13 +303,26 @@ class NetworkPolicy(pulumi.CustomResource):
|
|
|
256
303
|
args: Optional[NetworkPolicyArgs] = None,
|
|
257
304
|
opts: Optional[pulumi.ResourceOptions] = None):
|
|
258
305
|
"""
|
|
259
|
-
|
|
306
|
+
!> **V1 release candidate** This resource was reworked and is a release candidate for the V1. We do not expect significant changes in it before the V1. We will welcome any feedback and adjust the resource if needed. Any errors reported will be resolved with a higher priority. We encourage checking this resource out before the V1 release. Please follow the migration guide to use it.
|
|
307
|
+
|
|
308
|
+
Resource used to control network traffic. For more information, check an [official guide](https://docs.snowflake.com/en/user-guide/network-policies) on controlling network traffic with network policies.
|
|
309
|
+
|
|
310
|
+
## Minimal
|
|
260
311
|
|
|
261
|
-
|
|
312
|
+
resource "NetworkPolicy" "basic" {
|
|
313
|
+
name = "network_policy_name"
|
|
314
|
+
}
|
|
262
315
|
|
|
263
|
-
|
|
264
|
-
|
|
265
|
-
|
|
316
|
+
## Complete (with every optional set)
|
|
317
|
+
|
|
318
|
+
resource "NetworkPolicy" "basic" {
|
|
319
|
+
name = "network_policy_name"
|
|
320
|
+
allowed_network_rule_list = ["<fully qualified network rule id>"]
|
|
321
|
+
blocked_network_rule_list = ["<fully qualified network rule id>"]
|
|
322
|
+
allowed_ip_list = ["192.168.1.0/24"]
|
|
323
|
+
blocked_ip_list = ["192.168.1.99"]
|
|
324
|
+
comment = "my network policy"
|
|
325
|
+
}
|
|
266
326
|
|
|
267
327
|
:param str resource_name: The name of the resource.
|
|
268
328
|
:param NetworkPolicyArgs args: The arguments to use to populate this resource's properties.
|
|
@@ -300,6 +360,8 @@ class NetworkPolicy(pulumi.CustomResource):
|
|
|
300
360
|
__props__.__dict__["blocked_network_rule_lists"] = blocked_network_rule_lists
|
|
301
361
|
__props__.__dict__["comment"] = comment
|
|
302
362
|
__props__.__dict__["name"] = name
|
|
363
|
+
__props__.__dict__["describe_outputs"] = None
|
|
364
|
+
__props__.__dict__["show_outputs"] = None
|
|
303
365
|
super(NetworkPolicy, __self__).__init__(
|
|
304
366
|
'snowflake:index/networkPolicy:NetworkPolicy',
|
|
305
367
|
resource_name,
|
|
@@ -315,7 +377,9 @@ class NetworkPolicy(pulumi.CustomResource):
|
|
|
315
377
|
blocked_ip_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
316
378
|
blocked_network_rule_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
317
379
|
comment: Optional[pulumi.Input[str]] = None,
|
|
318
|
-
|
|
380
|
+
describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['NetworkPolicyDescribeOutputArgs']]]]] = None,
|
|
381
|
+
name: Optional[pulumi.Input[str]] = None,
|
|
382
|
+
show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['NetworkPolicyShowOutputArgs']]]]] = None) -> 'NetworkPolicy':
|
|
319
383
|
"""
|
|
320
384
|
Get an existing NetworkPolicy resource's state with the given name, id, and optional extra
|
|
321
385
|
properties used to qualify the lookup.
|
|
@@ -325,10 +389,12 @@ class NetworkPolicy(pulumi.CustomResource):
|
|
|
325
389
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
326
390
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_ip_lists: Specifies one or more IPv4 addresses (CIDR notation) that are allowed access to your Snowflake account.
|
|
327
391
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_network_rule_lists: Specifies a list of fully qualified network rules that contain the network identifiers that are allowed access to Snowflake.
|
|
328
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_ip_lists: Specifies one or more IPv4 addresses (CIDR notation) that are denied access to your Snowflake account
|
|
392
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_ip_lists: Specifies one or more IPv4 addresses (CIDR notation) that are denied access to your Snowflake account. **Do not** add `0.0.0.0/0` to `blocked_ip_list`, in order to block all IP addresses except a select list, you only need to add IP addresses to `allowed_ip_list`.
|
|
329
393
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_network_rule_lists: Specifies a list of fully qualified network rules that contain the network identifiers that are denied access to Snowflake.
|
|
330
394
|
:param pulumi.Input[str] comment: Specifies a comment for the network policy.
|
|
395
|
+
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['NetworkPolicyDescribeOutputArgs']]]] describe_outputs: Outputs the result of `DESCRIBE NETWORK POLICY` for the given network policy.
|
|
331
396
|
:param pulumi.Input[str] name: Specifies the identifier for the network policy; must be unique for the account in which the network policy is created.
|
|
397
|
+
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['NetworkPolicyShowOutputArgs']]]] show_outputs: Outputs the result of `SHOW NETWORK POLICIES` for the given network policy.
|
|
332
398
|
"""
|
|
333
399
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
334
400
|
|
|
@@ -339,7 +405,9 @@ class NetworkPolicy(pulumi.CustomResource):
|
|
|
339
405
|
__props__.__dict__["blocked_ip_lists"] = blocked_ip_lists
|
|
340
406
|
__props__.__dict__["blocked_network_rule_lists"] = blocked_network_rule_lists
|
|
341
407
|
__props__.__dict__["comment"] = comment
|
|
408
|
+
__props__.__dict__["describe_outputs"] = describe_outputs
|
|
342
409
|
__props__.__dict__["name"] = name
|
|
410
|
+
__props__.__dict__["show_outputs"] = show_outputs
|
|
343
411
|
return NetworkPolicy(resource_name, opts=opts, __props__=__props__)
|
|
344
412
|
|
|
345
413
|
@property
|
|
@@ -362,7 +430,7 @@ class NetworkPolicy(pulumi.CustomResource):
|
|
|
362
430
|
@pulumi.getter(name="blockedIpLists")
|
|
363
431
|
def blocked_ip_lists(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
|
364
432
|
"""
|
|
365
|
-
Specifies one or more IPv4 addresses (CIDR notation) that are denied access to your Snowflake account
|
|
433
|
+
Specifies one or more IPv4 addresses (CIDR notation) that are denied access to your Snowflake account. **Do not** add `0.0.0.0/0` to `blocked_ip_list`, in order to block all IP addresses except a select list, you only need to add IP addresses to `allowed_ip_list`.
|
|
366
434
|
"""
|
|
367
435
|
return pulumi.get(self, "blocked_ip_lists")
|
|
368
436
|
|
|
@@ -382,6 +450,14 @@ class NetworkPolicy(pulumi.CustomResource):
|
|
|
382
450
|
"""
|
|
383
451
|
return pulumi.get(self, "comment")
|
|
384
452
|
|
|
453
|
+
@property
|
|
454
|
+
@pulumi.getter(name="describeOutputs")
|
|
455
|
+
def describe_outputs(self) -> pulumi.Output[Sequence['outputs.NetworkPolicyDescribeOutput']]:
|
|
456
|
+
"""
|
|
457
|
+
Outputs the result of `DESCRIBE NETWORK POLICY` for the given network policy.
|
|
458
|
+
"""
|
|
459
|
+
return pulumi.get(self, "describe_outputs")
|
|
460
|
+
|
|
385
461
|
@property
|
|
386
462
|
@pulumi.getter
|
|
387
463
|
def name(self) -> pulumi.Output[str]:
|
|
@@ -390,3 +466,11 @@ class NetworkPolicy(pulumi.CustomResource):
|
|
|
390
466
|
"""
|
|
391
467
|
return pulumi.get(self, "name")
|
|
392
468
|
|
|
469
|
+
@property
|
|
470
|
+
@pulumi.getter(name="showOutputs")
|
|
471
|
+
def show_outputs(self) -> pulumi.Output[Sequence['outputs.NetworkPolicyShowOutput']]:
|
|
472
|
+
"""
|
|
473
|
+
Outputs the result of `SHOW NETWORK POLICIES` for the given network policy.
|
|
474
|
+
"""
|
|
475
|
+
return pulumi.get(self, "show_outputs")
|
|
476
|
+
|
|
@@ -34,7 +34,7 @@ class OauthIntegrationForCustomClientsArgs:
|
|
|
34
34
|
"""
|
|
35
35
|
The set of arguments for constructing a OauthIntegrationForCustomClients resource.
|
|
36
36
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating.
|
|
37
|
-
:param pulumi.Input[str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are:
|
|
37
|
+
:param pulumi.Input[str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
|
|
38
38
|
:param pulumi.Input[str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
|
|
39
39
|
:param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
|
|
40
40
|
:param pulumi.Input[str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
@@ -44,7 +44,7 @@ class OauthIntegrationForCustomClientsArgs:
|
|
|
44
44
|
:param pulumi.Input[str] oauth_enforce_pkce: Boolean that specifies whether Proof Key for Code Exchange (PKCE) should be required for the integration. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
45
45
|
:param pulumi.Input[str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
46
46
|
:param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
47
|
-
:param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are:
|
|
47
|
+
:param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
48
48
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] pre_authorized_roles_lists: A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating.
|
|
49
49
|
"""
|
|
50
50
|
pulumi.set(__self__, "blocked_roles_lists", blocked_roles_lists)
|
|
@@ -91,7 +91,7 @@ class OauthIntegrationForCustomClientsArgs:
|
|
|
91
91
|
@pulumi.getter(name="oauthClientType")
|
|
92
92
|
def oauth_client_type(self) -> pulumi.Input[str]:
|
|
93
93
|
"""
|
|
94
|
-
Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are:
|
|
94
|
+
Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
|
|
95
95
|
"""
|
|
96
96
|
return pulumi.get(self, "oauth_client_type")
|
|
97
97
|
|
|
@@ -229,7 +229,7 @@ class OauthIntegrationForCustomClientsArgs:
|
|
|
229
229
|
@pulumi.getter(name="oauthUseSecondaryRoles")
|
|
230
230
|
def oauth_use_secondary_roles(self) -> Optional[pulumi.Input[str]]:
|
|
231
231
|
"""
|
|
232
|
-
Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are:
|
|
232
|
+
Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
233
233
|
"""
|
|
234
234
|
return pulumi.get(self, "oauth_use_secondary_roles")
|
|
235
235
|
|
|
@@ -279,12 +279,12 @@ class _OauthIntegrationForCustomClientsState:
|
|
|
279
279
|
:param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
|
|
280
280
|
:param pulumi.Input[str] network_policy: Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token.
|
|
281
281
|
:param pulumi.Input[str] oauth_allow_non_tls_redirect_uri: If true, allows setting oauth*redirect*uri to a URI not protected by TLS. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
282
|
-
:param pulumi.Input[str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are:
|
|
282
|
+
:param pulumi.Input[str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
|
|
283
283
|
:param pulumi.Input[str] oauth_enforce_pkce: Boolean that specifies whether Proof Key for Code Exchange (PKCE) should be required for the integration. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
284
284
|
:param pulumi.Input[str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
285
285
|
:param pulumi.Input[str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
|
|
286
286
|
:param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
287
|
-
:param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are:
|
|
287
|
+
:param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
288
288
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] pre_authorized_roles_lists: A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating.
|
|
289
289
|
:param pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForCustomClientsShowOutputArgs']]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATION` for the given integration.
|
|
290
290
|
"""
|
|
@@ -429,7 +429,7 @@ class _OauthIntegrationForCustomClientsState:
|
|
|
429
429
|
@pulumi.getter(name="oauthClientType")
|
|
430
430
|
def oauth_client_type(self) -> Optional[pulumi.Input[str]]:
|
|
431
431
|
"""
|
|
432
|
-
Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are:
|
|
432
|
+
Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
|
|
433
433
|
"""
|
|
434
434
|
return pulumi.get(self, "oauth_client_type")
|
|
435
435
|
|
|
@@ -489,7 +489,7 @@ class _OauthIntegrationForCustomClientsState:
|
|
|
489
489
|
@pulumi.getter(name="oauthUseSecondaryRoles")
|
|
490
490
|
def oauth_use_secondary_roles(self) -> Optional[pulumi.Input[str]]:
|
|
491
491
|
"""
|
|
492
|
-
Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are:
|
|
492
|
+
Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
493
493
|
"""
|
|
494
494
|
return pulumi.get(self, "oauth_use_secondary_roles")
|
|
495
495
|
|
|
@@ -546,6 +546,8 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
|
|
|
546
546
|
"""
|
|
547
547
|
!> **V1 release candidate** This resource was reworked and is a release candidate for the V1. We do not expect significant changes in it before the V1. We will welcome any feedback and adjust the resource if needed. Any errors reported will be resolved with a higher priority. We encourage checking this resource out before the V1 release. Please follow the migration guide to use it.
|
|
548
548
|
|
|
549
|
+
Resource used to manage oauth security integration for custom clients objects. For more information, check [security integrations documentation](https://docs.snowflake.com/en/sql-reference/sql/create-security-integration-oauth-snowflake).
|
|
550
|
+
|
|
549
551
|
## Example Usage
|
|
550
552
|
|
|
551
553
|
```python
|
|
@@ -603,12 +605,12 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
|
|
|
603
605
|
:param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
|
|
604
606
|
:param pulumi.Input[str] network_policy: Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token.
|
|
605
607
|
:param pulumi.Input[str] oauth_allow_non_tls_redirect_uri: If true, allows setting oauth*redirect*uri to a URI not protected by TLS. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
606
|
-
:param pulumi.Input[str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are:
|
|
608
|
+
:param pulumi.Input[str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
|
|
607
609
|
:param pulumi.Input[str] oauth_enforce_pkce: Boolean that specifies whether Proof Key for Code Exchange (PKCE) should be required for the integration. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
608
610
|
:param pulumi.Input[str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
609
611
|
:param pulumi.Input[str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
|
|
610
612
|
:param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
611
|
-
:param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are:
|
|
613
|
+
:param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
612
614
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] pre_authorized_roles_lists: A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating.
|
|
613
615
|
"""
|
|
614
616
|
...
|
|
@@ -620,6 +622,8 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
|
|
|
620
622
|
"""
|
|
621
623
|
!> **V1 release candidate** This resource was reworked and is a release candidate for the V1. We do not expect significant changes in it before the V1. We will welcome any feedback and adjust the resource if needed. Any errors reported will be resolved with a higher priority. We encourage checking this resource out before the V1 release. Please follow the migration guide to use it.
|
|
622
624
|
|
|
625
|
+
Resource used to manage oauth security integration for custom clients objects. For more information, check [security integrations documentation](https://docs.snowflake.com/en/sql-reference/sql/create-security-integration-oauth-snowflake).
|
|
626
|
+
|
|
623
627
|
## Example Usage
|
|
624
628
|
|
|
625
629
|
```python
|
|
@@ -772,12 +776,12 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
|
|
|
772
776
|
:param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
|
|
773
777
|
:param pulumi.Input[str] network_policy: Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token.
|
|
774
778
|
:param pulumi.Input[str] oauth_allow_non_tls_redirect_uri: If true, allows setting oauth*redirect*uri to a URI not protected by TLS. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
775
|
-
:param pulumi.Input[str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are:
|
|
779
|
+
:param pulumi.Input[str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
|
|
776
780
|
:param pulumi.Input[str] oauth_enforce_pkce: Boolean that specifies whether Proof Key for Code Exchange (PKCE) should be required for the integration. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
777
781
|
:param pulumi.Input[str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
778
782
|
:param pulumi.Input[str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
|
|
779
783
|
:param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
780
|
-
:param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are:
|
|
784
|
+
:param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
781
785
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] pre_authorized_roles_lists: A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating.
|
|
782
786
|
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['OauthIntegrationForCustomClientsShowOutputArgs']]]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATION` for the given integration.
|
|
783
787
|
"""
|
|
@@ -874,7 +878,7 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
|
|
|
874
878
|
@pulumi.getter(name="oauthClientType")
|
|
875
879
|
def oauth_client_type(self) -> pulumi.Output[str]:
|
|
876
880
|
"""
|
|
877
|
-
Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are:
|
|
881
|
+
Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
|
|
878
882
|
"""
|
|
879
883
|
return pulumi.get(self, "oauth_client_type")
|
|
880
884
|
|
|
@@ -914,7 +918,7 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
|
|
|
914
918
|
@pulumi.getter(name="oauthUseSecondaryRoles")
|
|
915
919
|
def oauth_use_secondary_roles(self) -> pulumi.Output[Optional[str]]:
|
|
916
920
|
"""
|
|
917
|
-
Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are:
|
|
921
|
+
Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
918
922
|
"""
|
|
919
923
|
return pulumi.get(self, "oauth_use_secondary_roles")
|
|
920
924
|
|
|
@@ -28,13 +28,13 @@ class OauthIntegrationForPartnerApplicationsArgs:
|
|
|
28
28
|
"""
|
|
29
29
|
The set of arguments for constructing a OauthIntegrationForPartnerApplications resource.
|
|
30
30
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating.
|
|
31
|
-
:param pulumi.Input[str] oauth_client: Creates an OAuth interface between Snowflake and a partner application. Valid options are:
|
|
31
|
+
:param pulumi.Input[str] oauth_client: Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
|
|
32
32
|
:param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
|
|
33
33
|
:param pulumi.Input[str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
34
34
|
:param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
|
|
35
35
|
:param pulumi.Input[str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
36
36
|
:param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
37
|
-
:param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are:
|
|
37
|
+
:param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
38
38
|
"""
|
|
39
39
|
pulumi.set(__self__, "blocked_roles_lists", blocked_roles_lists)
|
|
40
40
|
pulumi.set(__self__, "oauth_client", oauth_client)
|
|
@@ -69,7 +69,7 @@ class OauthIntegrationForPartnerApplicationsArgs:
|
|
|
69
69
|
@pulumi.getter(name="oauthClient")
|
|
70
70
|
def oauth_client(self) -> pulumi.Input[str]:
|
|
71
71
|
"""
|
|
72
|
-
Creates an OAuth interface between Snowflake and a partner application. Valid options are:
|
|
72
|
+
Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
|
|
73
73
|
"""
|
|
74
74
|
return pulumi.get(self, "oauth_client")
|
|
75
75
|
|
|
@@ -150,7 +150,7 @@ class OauthIntegrationForPartnerApplicationsArgs:
|
|
|
150
150
|
@pulumi.getter(name="oauthUseSecondaryRoles")
|
|
151
151
|
def oauth_use_secondary_roles(self) -> Optional[pulumi.Input[str]]:
|
|
152
152
|
"""
|
|
153
|
-
Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are:
|
|
153
|
+
Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
154
154
|
"""
|
|
155
155
|
return pulumi.get(self, "oauth_use_secondary_roles")
|
|
156
156
|
|
|
@@ -180,10 +180,10 @@ class _OauthIntegrationForPartnerApplicationsState:
|
|
|
180
180
|
:param pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForPartnerApplicationsDescribeOutputArgs']]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATION` for the given integration.
|
|
181
181
|
:param pulumi.Input[str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
182
182
|
:param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
|
|
183
|
-
:param pulumi.Input[str] oauth_client: Creates an OAuth interface between Snowflake and a partner application. Valid options are:
|
|
183
|
+
:param pulumi.Input[str] oauth_client: Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
|
|
184
184
|
:param pulumi.Input[str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
185
185
|
:param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
186
|
-
:param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are:
|
|
186
|
+
:param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
187
187
|
:param pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForPartnerApplicationsShowOutputArgs']]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATION` for the given integration.
|
|
188
188
|
"""
|
|
189
189
|
if blocked_roles_lists is not None:
|
|
@@ -273,7 +273,7 @@ class _OauthIntegrationForPartnerApplicationsState:
|
|
|
273
273
|
@pulumi.getter(name="oauthClient")
|
|
274
274
|
def oauth_client(self) -> Optional[pulumi.Input[str]]:
|
|
275
275
|
"""
|
|
276
|
-
Creates an OAuth interface between Snowflake and a partner application. Valid options are:
|
|
276
|
+
Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
|
|
277
277
|
"""
|
|
278
278
|
return pulumi.get(self, "oauth_client")
|
|
279
279
|
|
|
@@ -318,7 +318,7 @@ class _OauthIntegrationForPartnerApplicationsState:
|
|
|
318
318
|
@pulumi.getter(name="oauthUseSecondaryRoles")
|
|
319
319
|
def oauth_use_secondary_roles(self) -> Optional[pulumi.Input[str]]:
|
|
320
320
|
"""
|
|
321
|
-
Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are:
|
|
321
|
+
Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
322
322
|
"""
|
|
323
323
|
return pulumi.get(self, "oauth_use_secondary_roles")
|
|
324
324
|
|
|
@@ -357,6 +357,8 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
357
357
|
"""
|
|
358
358
|
!> **V1 release candidate** This resource was reworked and is a release candidate for the V1. We do not expect significant changes in it before the V1. We will welcome any feedback and adjust the resource if needed. Any errors reported will be resolved with a higher priority. We encourage checking this resource out before the V1 release. Please follow the migration guide to use it.
|
|
359
359
|
|
|
360
|
+
Resource used to manage oauth security integration for partner applications objects. For more information, check [security integrations documentation](https://docs.snowflake.com/en/sql-reference/sql/create-security-integration-oauth-snowflake).
|
|
361
|
+
|
|
360
362
|
## Import
|
|
361
363
|
|
|
362
364
|
```sh
|
|
@@ -369,10 +371,10 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
369
371
|
:param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
|
|
370
372
|
:param pulumi.Input[str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
371
373
|
:param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
|
|
372
|
-
:param pulumi.Input[str] oauth_client: Creates an OAuth interface between Snowflake and a partner application. Valid options are:
|
|
374
|
+
:param pulumi.Input[str] oauth_client: Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
|
|
373
375
|
:param pulumi.Input[str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
374
376
|
:param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
375
|
-
:param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are:
|
|
377
|
+
:param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
376
378
|
"""
|
|
377
379
|
...
|
|
378
380
|
@overload
|
|
@@ -383,6 +385,8 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
383
385
|
"""
|
|
384
386
|
!> **V1 release candidate** This resource was reworked and is a release candidate for the V1. We do not expect significant changes in it before the V1. We will welcome any feedback and adjust the resource if needed. Any errors reported will be resolved with a higher priority. We encourage checking this resource out before the V1 release. Please follow the migration guide to use it.
|
|
385
387
|
|
|
388
|
+
Resource used to manage oauth security integration for partner applications objects. For more information, check [security integrations documentation](https://docs.snowflake.com/en/sql-reference/sql/create-security-integration-oauth-snowflake).
|
|
389
|
+
|
|
386
390
|
## Import
|
|
387
391
|
|
|
388
392
|
```sh
|
|
@@ -470,10 +474,10 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
470
474
|
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['OauthIntegrationForPartnerApplicationsDescribeOutputArgs']]]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATION` for the given integration.
|
|
471
475
|
:param pulumi.Input[str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
472
476
|
:param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
|
|
473
|
-
:param pulumi.Input[str] oauth_client: Creates an OAuth interface between Snowflake and a partner application. Valid options are:
|
|
477
|
+
:param pulumi.Input[str] oauth_client: Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
|
|
474
478
|
:param pulumi.Input[str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
475
479
|
:param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
476
|
-
:param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are:
|
|
480
|
+
:param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
477
481
|
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['OauthIntegrationForPartnerApplicationsShowOutputArgs']]]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATION` for the given integration.
|
|
478
482
|
"""
|
|
479
483
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
@@ -537,7 +541,7 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
537
541
|
@pulumi.getter(name="oauthClient")
|
|
538
542
|
def oauth_client(self) -> pulumi.Output[str]:
|
|
539
543
|
"""
|
|
540
|
-
Creates an OAuth interface between Snowflake and a partner application. Valid options are:
|
|
544
|
+
Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
|
|
541
545
|
"""
|
|
542
546
|
return pulumi.get(self, "oauth_client")
|
|
543
547
|
|
|
@@ -566,7 +570,7 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
566
570
|
@pulumi.getter(name="oauthUseSecondaryRoles")
|
|
567
571
|
def oauth_use_secondary_roles(self) -> pulumi.Output[Optional[str]]:
|
|
568
572
|
"""
|
|
569
|
-
Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are:
|
|
573
|
+
Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
570
574
|
"""
|
|
571
575
|
return pulumi.get(self, "oauth_use_secondary_roles")
|
|
572
576
|
|