pulumi-snowflake 0.58.0__py3-none-any.whl → 0.58.0a1722528062__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_snowflake/_inputs.py +125 -5857
- pulumi_snowflake/account.py +50 -28
- pulumi_snowflake/account_parameter.py +28 -0
- pulumi_snowflake/account_password_policy_attachment.py +30 -2
- pulumi_snowflake/account_role.py +32 -51
- pulumi_snowflake/alert.py +45 -33
- pulumi_snowflake/api_authentication_integration_with_authorization_code_grant.py +19 -39
- pulumi_snowflake/api_authentication_integration_with_client_credentials.py +19 -39
- pulumi_snowflake/api_authentication_integration_with_jwt_bearer.py +19 -39
- pulumi_snowflake/api_integration.py +54 -28
- pulumi_snowflake/cortex_search_service.py +0 -28
- pulumi_snowflake/database.py +148 -97
- pulumi_snowflake/database_old.py +77 -5
- pulumi_snowflake/database_role.py +42 -76
- pulumi_snowflake/dynamic_table.py +43 -33
- pulumi_snowflake/email_notification_integration.py +26 -28
- pulumi_snowflake/external_function.py +62 -38
- pulumi_snowflake/external_oauth_integration.py +21 -41
- pulumi_snowflake/external_table.py +58 -38
- pulumi_snowflake/failover_group.py +82 -38
- pulumi_snowflake/file_format.py +26 -28
- pulumi_snowflake/function.py +9 -33
- pulumi_snowflake/get_cortex_search_services.py +16 -16
- pulumi_snowflake/get_database_roles.py +38 -61
- pulumi_snowflake/get_databases.py +6 -6
- pulumi_snowflake/get_dynamic_tables.py +12 -12
- pulumi_snowflake/get_grants.py +138 -138
- pulumi_snowflake/get_network_policies.py +2 -2
- pulumi_snowflake/get_roles.py +2 -2
- pulumi_snowflake/get_schemas.py +8 -12
- pulumi_snowflake/get_security_integrations.py +2 -2
- pulumi_snowflake/get_streamlits.py +10 -10
- pulumi_snowflake/get_users.py +33 -96
- pulumi_snowflake/get_views.py +53 -92
- pulumi_snowflake/get_warehouses.py +2 -2
- pulumi_snowflake/grant_account_role.py +4 -0
- pulumi_snowflake/grant_application_role.py +4 -0
- pulumi_snowflake/grant_database_role.py +4 -0
- pulumi_snowflake/grant_ownership.py +5 -5
- pulumi_snowflake/grant_privileges_to_account_role.py +15 -15
- pulumi_snowflake/grant_privileges_to_database_role.py +12 -16
- pulumi_snowflake/grant_privileges_to_share.py +0 -47
- pulumi_snowflake/managed_account.py +4 -28
- pulumi_snowflake/masking_policy.py +89 -33
- pulumi_snowflake/materialized_view.py +39 -33
- pulumi_snowflake/network_policy.py +49 -47
- pulumi_snowflake/network_policy_attachment.py +30 -0
- pulumi_snowflake/network_rule.py +66 -28
- pulumi_snowflake/notification_integration.py +34 -28
- pulumi_snowflake/oauth_integration.py +34 -0
- pulumi_snowflake/oauth_integration_for_custom_clients.py +105 -39
- pulumi_snowflake/oauth_integration_for_partner_applications.py +19 -39
- pulumi_snowflake/object_parameter.py +103 -5
- pulumi_snowflake/outputs.py +4207 -12013
- pulumi_snowflake/password_policy.py +28 -28
- pulumi_snowflake/pipe.py +4 -28
- pulumi_snowflake/procedure.py +9 -33
- pulumi_snowflake/provider.py +16 -16
- pulumi_snowflake/pulumi-plugin.json +1 -1
- pulumi_snowflake/resource_monitor.py +48 -28
- pulumi_snowflake/role.py +32 -51
- pulumi_snowflake/row_access_policy.py +34 -28
- pulumi_snowflake/saml2_integration.py +19 -39
- pulumi_snowflake/saml_integration.py +34 -0
- pulumi_snowflake/schema.py +28 -52
- pulumi_snowflake/scim_integration.py +19 -39
- pulumi_snowflake/secondary_database.py +19 -35
- pulumi_snowflake/sequence.py +36 -4
- pulumi_snowflake/session_parameter.py +32 -0
- pulumi_snowflake/share.py +28 -28
- pulumi_snowflake/shared_database.py +15 -35
- pulumi_snowflake/stage.py +33 -33
- pulumi_snowflake/storage_integration.py +4 -28
- pulumi_snowflake/stream.py +4 -28
- pulumi_snowflake/streamlit.py +19 -39
- pulumi_snowflake/table.py +47 -43
- pulumi_snowflake/table_column_masking_policy_application.py +14 -2
- pulumi_snowflake/table_constraint.py +157 -5
- pulumi_snowflake/tag.py +40 -28
- pulumi_snowflake/tag_association.py +125 -5
- pulumi_snowflake/tag_masking_policy_association.py +4 -0
- pulumi_snowflake/task.py +92 -28
- pulumi_snowflake/unsafe_execute.py +20 -2
- pulumi_snowflake/user.py +373 -3346
- pulumi_snowflake/user_password_policy_attachment.py +36 -0
- pulumi_snowflake/view.py +185 -465
- pulumi_snowflake/warehouse.py +43 -39
- {pulumi_snowflake-0.58.0.dist-info → pulumi_snowflake-0.58.0a1722528062.dist-info}/METADATA +1 -1
- pulumi_snowflake-0.58.0a1722528062.dist-info/RECORD +129 -0
- {pulumi_snowflake-0.58.0.dist-info → pulumi_snowflake-0.58.0a1722528062.dist-info}/WHEEL +1 -1
- pulumi_snowflake-0.58.0.dist-info/RECORD +0 -129
- {pulumi_snowflake-0.58.0.dist-info → pulumi_snowflake-0.58.0a1722528062.dist-info}/top_level.txt +0 -0
|
@@ -241,7 +241,6 @@ class _ResourceMonitorState:
|
|
|
241
241
|
credit_quota: Optional[pulumi.Input[int]] = None,
|
|
242
242
|
end_timestamp: Optional[pulumi.Input[str]] = None,
|
|
243
243
|
frequency: Optional[pulumi.Input[str]] = None,
|
|
244
|
-
fully_qualified_name: Optional[pulumi.Input[str]] = None,
|
|
245
244
|
name: Optional[pulumi.Input[str]] = None,
|
|
246
245
|
notify_triggers: Optional[pulumi.Input[Sequence[pulumi.Input[int]]]] = None,
|
|
247
246
|
notify_users: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
@@ -257,7 +256,6 @@ class _ResourceMonitorState:
|
|
|
257
256
|
:param pulumi.Input[int] credit_quota: The number of credits allocated monthly to the resource monitor.
|
|
258
257
|
:param pulumi.Input[str] end_timestamp: The date and time when the resource monitor suspends the assigned warehouses.
|
|
259
258
|
:param pulumi.Input[str] frequency: The frequency interval at which the credit usage resets to 0. If you set a frequency for a resource monitor, you must also set START_TIMESTAMP.
|
|
260
|
-
:param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
261
259
|
:param pulumi.Input[str] name: Identifier for the resource monitor; must be unique for your account.
|
|
262
260
|
:param pulumi.Input[Sequence[pulumi.Input[int]]] notify_triggers: A list of percentage thresholds at which to send an alert to subscribed users.
|
|
263
261
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] notify_users: Specifies the list of users to receive email notifications on resource monitors.
|
|
@@ -275,8 +273,6 @@ class _ResourceMonitorState:
|
|
|
275
273
|
pulumi.set(__self__, "end_timestamp", end_timestamp)
|
|
276
274
|
if frequency is not None:
|
|
277
275
|
pulumi.set(__self__, "frequency", frequency)
|
|
278
|
-
if fully_qualified_name is not None:
|
|
279
|
-
pulumi.set(__self__, "fully_qualified_name", fully_qualified_name)
|
|
280
276
|
if name is not None:
|
|
281
277
|
pulumi.set(__self__, "name", name)
|
|
282
278
|
if notify_triggers is not None:
|
|
@@ -340,18 +336,6 @@ class _ResourceMonitorState:
|
|
|
340
336
|
def frequency(self, value: Optional[pulumi.Input[str]]):
|
|
341
337
|
pulumi.set(self, "frequency", value)
|
|
342
338
|
|
|
343
|
-
@property
|
|
344
|
-
@pulumi.getter(name="fullyQualifiedName")
|
|
345
|
-
def fully_qualified_name(self) -> Optional[pulumi.Input[str]]:
|
|
346
|
-
"""
|
|
347
|
-
Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
348
|
-
"""
|
|
349
|
-
return pulumi.get(self, "fully_qualified_name")
|
|
350
|
-
|
|
351
|
-
@fully_qualified_name.setter
|
|
352
|
-
def fully_qualified_name(self, value: Optional[pulumi.Input[str]]):
|
|
353
|
-
pulumi.set(self, "fully_qualified_name", value)
|
|
354
|
-
|
|
355
339
|
@property
|
|
356
340
|
@pulumi.getter
|
|
357
341
|
def name(self) -> Optional[pulumi.Input[str]]:
|
|
@@ -495,6 +479,30 @@ class ResourceMonitor(pulumi.CustomResource):
|
|
|
495
479
|
warehouses: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
496
480
|
__props__=None):
|
|
497
481
|
"""
|
|
482
|
+
## Example Usage
|
|
483
|
+
|
|
484
|
+
```python
|
|
485
|
+
import pulumi
|
|
486
|
+
import pulumi_snowflake as snowflake
|
|
487
|
+
|
|
488
|
+
monitor = snowflake.ResourceMonitor("monitor",
|
|
489
|
+
name="monitor",
|
|
490
|
+
credit_quota=100,
|
|
491
|
+
frequency="DAILY",
|
|
492
|
+
start_timestamp="2020-12-07 00:00",
|
|
493
|
+
end_timestamp="2021-12-07 00:00",
|
|
494
|
+
notify_triggers=[
|
|
495
|
+
40,
|
|
496
|
+
50,
|
|
497
|
+
],
|
|
498
|
+
suspend_triggers=50,
|
|
499
|
+
suspend_immediate_triggers=90,
|
|
500
|
+
notify_users=[
|
|
501
|
+
"USERONE",
|
|
502
|
+
"USERTWO",
|
|
503
|
+
])
|
|
504
|
+
```
|
|
505
|
+
|
|
498
506
|
## Import
|
|
499
507
|
|
|
500
508
|
format is the resource monitor name
|
|
@@ -526,6 +534,30 @@ class ResourceMonitor(pulumi.CustomResource):
|
|
|
526
534
|
args: Optional[ResourceMonitorArgs] = None,
|
|
527
535
|
opts: Optional[pulumi.ResourceOptions] = None):
|
|
528
536
|
"""
|
|
537
|
+
## Example Usage
|
|
538
|
+
|
|
539
|
+
```python
|
|
540
|
+
import pulumi
|
|
541
|
+
import pulumi_snowflake as snowflake
|
|
542
|
+
|
|
543
|
+
monitor = snowflake.ResourceMonitor("monitor",
|
|
544
|
+
name="monitor",
|
|
545
|
+
credit_quota=100,
|
|
546
|
+
frequency="DAILY",
|
|
547
|
+
start_timestamp="2020-12-07 00:00",
|
|
548
|
+
end_timestamp="2021-12-07 00:00",
|
|
549
|
+
notify_triggers=[
|
|
550
|
+
40,
|
|
551
|
+
50,
|
|
552
|
+
],
|
|
553
|
+
suspend_triggers=50,
|
|
554
|
+
suspend_immediate_triggers=90,
|
|
555
|
+
notify_users=[
|
|
556
|
+
"USERONE",
|
|
557
|
+
"USERTWO",
|
|
558
|
+
])
|
|
559
|
+
```
|
|
560
|
+
|
|
529
561
|
## Import
|
|
530
562
|
|
|
531
563
|
format is the resource monitor name
|
|
@@ -584,7 +616,6 @@ class ResourceMonitor(pulumi.CustomResource):
|
|
|
584
616
|
__props__.__dict__["suspend_trigger"] = suspend_trigger
|
|
585
617
|
__props__.__dict__["suspend_triggers"] = suspend_triggers
|
|
586
618
|
__props__.__dict__["warehouses"] = warehouses
|
|
587
|
-
__props__.__dict__["fully_qualified_name"] = None
|
|
588
619
|
super(ResourceMonitor, __self__).__init__(
|
|
589
620
|
'snowflake:index/resourceMonitor:ResourceMonitor',
|
|
590
621
|
resource_name,
|
|
@@ -598,7 +629,6 @@ class ResourceMonitor(pulumi.CustomResource):
|
|
|
598
629
|
credit_quota: Optional[pulumi.Input[int]] = None,
|
|
599
630
|
end_timestamp: Optional[pulumi.Input[str]] = None,
|
|
600
631
|
frequency: Optional[pulumi.Input[str]] = None,
|
|
601
|
-
fully_qualified_name: Optional[pulumi.Input[str]] = None,
|
|
602
632
|
name: Optional[pulumi.Input[str]] = None,
|
|
603
633
|
notify_triggers: Optional[pulumi.Input[Sequence[pulumi.Input[int]]]] = None,
|
|
604
634
|
notify_users: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
@@ -619,7 +649,6 @@ class ResourceMonitor(pulumi.CustomResource):
|
|
|
619
649
|
:param pulumi.Input[int] credit_quota: The number of credits allocated monthly to the resource monitor.
|
|
620
650
|
:param pulumi.Input[str] end_timestamp: The date and time when the resource monitor suspends the assigned warehouses.
|
|
621
651
|
:param pulumi.Input[str] frequency: The frequency interval at which the credit usage resets to 0. If you set a frequency for a resource monitor, you must also set START_TIMESTAMP.
|
|
622
|
-
:param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
623
652
|
:param pulumi.Input[str] name: Identifier for the resource monitor; must be unique for your account.
|
|
624
653
|
:param pulumi.Input[Sequence[pulumi.Input[int]]] notify_triggers: A list of percentage thresholds at which to send an alert to subscribed users.
|
|
625
654
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] notify_users: Specifies the list of users to receive email notifications on resource monitors.
|
|
@@ -638,7 +667,6 @@ class ResourceMonitor(pulumi.CustomResource):
|
|
|
638
667
|
__props__.__dict__["credit_quota"] = credit_quota
|
|
639
668
|
__props__.__dict__["end_timestamp"] = end_timestamp
|
|
640
669
|
__props__.__dict__["frequency"] = frequency
|
|
641
|
-
__props__.__dict__["fully_qualified_name"] = fully_qualified_name
|
|
642
670
|
__props__.__dict__["name"] = name
|
|
643
671
|
__props__.__dict__["notify_triggers"] = notify_triggers
|
|
644
672
|
__props__.__dict__["notify_users"] = notify_users
|
|
@@ -675,14 +703,6 @@ class ResourceMonitor(pulumi.CustomResource):
|
|
|
675
703
|
"""
|
|
676
704
|
return pulumi.get(self, "frequency")
|
|
677
705
|
|
|
678
|
-
@property
|
|
679
|
-
@pulumi.getter(name="fullyQualifiedName")
|
|
680
|
-
def fully_qualified_name(self) -> pulumi.Output[str]:
|
|
681
|
-
"""
|
|
682
|
-
Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
683
|
-
"""
|
|
684
|
-
return pulumi.get(self, "fully_qualified_name")
|
|
685
|
-
|
|
686
706
|
@property
|
|
687
707
|
@pulumi.getter
|
|
688
708
|
def name(self) -> pulumi.Output[str]:
|
pulumi_snowflake/role.py
CHANGED
|
@@ -20,7 +20,6 @@ class RoleArgs:
|
|
|
20
20
|
name: Optional[pulumi.Input[str]] = None):
|
|
21
21
|
"""
|
|
22
22
|
The set of arguments for constructing a Role resource.
|
|
23
|
-
:param pulumi.Input[str] name: Identifier for the role; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `(`, `)`, `"`
|
|
24
23
|
"""
|
|
25
24
|
if comment is not None:
|
|
26
25
|
pulumi.set(__self__, "comment", comment)
|
|
@@ -39,9 +38,6 @@ class RoleArgs:
|
|
|
39
38
|
@property
|
|
40
39
|
@pulumi.getter
|
|
41
40
|
def name(self) -> Optional[pulumi.Input[str]]:
|
|
42
|
-
"""
|
|
43
|
-
Identifier for the role; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `(`, `)`, `"`
|
|
44
|
-
"""
|
|
45
41
|
return pulumi.get(self, "name")
|
|
46
42
|
|
|
47
43
|
@name.setter
|
|
@@ -53,19 +49,14 @@ class RoleArgs:
|
|
|
53
49
|
class _RoleState:
|
|
54
50
|
def __init__(__self__, *,
|
|
55
51
|
comment: Optional[pulumi.Input[str]] = None,
|
|
56
|
-
fully_qualified_name: Optional[pulumi.Input[str]] = None,
|
|
57
52
|
name: Optional[pulumi.Input[str]] = None,
|
|
58
53
|
show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['RoleShowOutputArgs']]]] = None):
|
|
59
54
|
"""
|
|
60
55
|
Input properties used for looking up and filtering Role resources.
|
|
61
|
-
:param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
62
|
-
:param pulumi.Input[str] name: Identifier for the role; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `(`, `)`, `"`
|
|
63
56
|
:param pulumi.Input[Sequence[pulumi.Input['RoleShowOutputArgs']]] show_outputs: Outputs the result of `SHOW ROLES` for the given role.
|
|
64
57
|
"""
|
|
65
58
|
if comment is not None:
|
|
66
59
|
pulumi.set(__self__, "comment", comment)
|
|
67
|
-
if fully_qualified_name is not None:
|
|
68
|
-
pulumi.set(__self__, "fully_qualified_name", fully_qualified_name)
|
|
69
60
|
if name is not None:
|
|
70
61
|
pulumi.set(__self__, "name", name)
|
|
71
62
|
if show_outputs is not None:
|
|
@@ -80,24 +71,9 @@ class _RoleState:
|
|
|
80
71
|
def comment(self, value: Optional[pulumi.Input[str]]):
|
|
81
72
|
pulumi.set(self, "comment", value)
|
|
82
73
|
|
|
83
|
-
@property
|
|
84
|
-
@pulumi.getter(name="fullyQualifiedName")
|
|
85
|
-
def fully_qualified_name(self) -> Optional[pulumi.Input[str]]:
|
|
86
|
-
"""
|
|
87
|
-
Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
88
|
-
"""
|
|
89
|
-
return pulumi.get(self, "fully_qualified_name")
|
|
90
|
-
|
|
91
|
-
@fully_qualified_name.setter
|
|
92
|
-
def fully_qualified_name(self, value: Optional[pulumi.Input[str]]):
|
|
93
|
-
pulumi.set(self, "fully_qualified_name", value)
|
|
94
|
-
|
|
95
74
|
@property
|
|
96
75
|
@pulumi.getter
|
|
97
76
|
def name(self) -> Optional[pulumi.Input[str]]:
|
|
98
|
-
"""
|
|
99
|
-
Identifier for the role; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `(`, `)`, `"`
|
|
100
|
-
"""
|
|
101
77
|
return pulumi.get(self, "name")
|
|
102
78
|
|
|
103
79
|
@name.setter
|
|
@@ -126,15 +102,25 @@ class Role(pulumi.CustomResource):
|
|
|
126
102
|
name: Optional[pulumi.Input[str]] = None,
|
|
127
103
|
__props__=None):
|
|
128
104
|
"""
|
|
129
|
-
|
|
105
|
+
> **Deprecation** This resource is deprecated and will be removed in a future major version release. Please use AccountRole instead. <deprecation>
|
|
106
|
+
|
|
107
|
+
The resource is used for role management, where roles can be assigned privileges and, in turn, granted to users and other roles. When granted to roles they can create hierarchies of privilege structures. For more details, refer to the [official documentation](https://docs.snowflake.com/en/user-guide/security-access-control-overview).
|
|
108
|
+
|
|
109
|
+
## Minimal
|
|
110
|
+
|
|
111
|
+
resource "Role" "minimal" {
|
|
112
|
+
name = "role_name"
|
|
113
|
+
}
|
|
130
114
|
|
|
131
|
-
|
|
132
|
-
|
|
133
|
-
|
|
115
|
+
## Complete (with every optional set)
|
|
116
|
+
|
|
117
|
+
resource "Role" "complete" {
|
|
118
|
+
name = "role_name"
|
|
119
|
+
comment = "my account role"
|
|
120
|
+
}
|
|
134
121
|
|
|
135
122
|
:param str resource_name: The name of the resource.
|
|
136
123
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
137
|
-
:param pulumi.Input[str] name: Identifier for the role; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `(`, `)`, `"`
|
|
138
124
|
"""
|
|
139
125
|
...
|
|
140
126
|
@overload
|
|
@@ -143,11 +129,22 @@ class Role(pulumi.CustomResource):
|
|
|
143
129
|
args: Optional[RoleArgs] = None,
|
|
144
130
|
opts: Optional[pulumi.ResourceOptions] = None):
|
|
145
131
|
"""
|
|
146
|
-
|
|
132
|
+
> **Deprecation** This resource is deprecated and will be removed in a future major version release. Please use AccountRole instead. <deprecation>
|
|
133
|
+
|
|
134
|
+
The resource is used for role management, where roles can be assigned privileges and, in turn, granted to users and other roles. When granted to roles they can create hierarchies of privilege structures. For more details, refer to the [official documentation](https://docs.snowflake.com/en/user-guide/security-access-control-overview).
|
|
135
|
+
|
|
136
|
+
## Minimal
|
|
147
137
|
|
|
148
|
-
|
|
149
|
-
|
|
150
|
-
|
|
138
|
+
resource "Role" "minimal" {
|
|
139
|
+
name = "role_name"
|
|
140
|
+
}
|
|
141
|
+
|
|
142
|
+
## Complete (with every optional set)
|
|
143
|
+
|
|
144
|
+
resource "Role" "complete" {
|
|
145
|
+
name = "role_name"
|
|
146
|
+
comment = "my account role"
|
|
147
|
+
}
|
|
151
148
|
|
|
152
149
|
:param str resource_name: The name of the resource.
|
|
153
150
|
:param RoleArgs args: The arguments to use to populate this resource's properties.
|
|
@@ -177,7 +174,6 @@ class Role(pulumi.CustomResource):
|
|
|
177
174
|
|
|
178
175
|
__props__.__dict__["comment"] = comment
|
|
179
176
|
__props__.__dict__["name"] = name
|
|
180
|
-
__props__.__dict__["fully_qualified_name"] = None
|
|
181
177
|
__props__.__dict__["show_outputs"] = None
|
|
182
178
|
super(Role, __self__).__init__(
|
|
183
179
|
'snowflake:index/role:Role',
|
|
@@ -190,9 +186,8 @@ class Role(pulumi.CustomResource):
|
|
|
190
186
|
id: pulumi.Input[str],
|
|
191
187
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
192
188
|
comment: Optional[pulumi.Input[str]] = None,
|
|
193
|
-
fully_qualified_name: Optional[pulumi.Input[str]] = None,
|
|
194
189
|
name: Optional[pulumi.Input[str]] = None,
|
|
195
|
-
show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
190
|
+
show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['RoleShowOutputArgs']]]]] = None) -> 'Role':
|
|
196
191
|
"""
|
|
197
192
|
Get an existing Role resource's state with the given name, id, and optional extra
|
|
198
193
|
properties used to qualify the lookup.
|
|
@@ -200,16 +195,13 @@ class Role(pulumi.CustomResource):
|
|
|
200
195
|
:param str resource_name: The unique name of the resulting resource.
|
|
201
196
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
202
197
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
203
|
-
:param pulumi.Input[
|
|
204
|
-
:param pulumi.Input[str] name: Identifier for the role; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `(`, `)`, `"`
|
|
205
|
-
:param pulumi.Input[Sequence[pulumi.Input[Union['RoleShowOutputArgs', 'RoleShowOutputArgsDict']]]] show_outputs: Outputs the result of `SHOW ROLES` for the given role.
|
|
198
|
+
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['RoleShowOutputArgs']]]] show_outputs: Outputs the result of `SHOW ROLES` for the given role.
|
|
206
199
|
"""
|
|
207
200
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
208
201
|
|
|
209
202
|
__props__ = _RoleState.__new__(_RoleState)
|
|
210
203
|
|
|
211
204
|
__props__.__dict__["comment"] = comment
|
|
212
|
-
__props__.__dict__["fully_qualified_name"] = fully_qualified_name
|
|
213
205
|
__props__.__dict__["name"] = name
|
|
214
206
|
__props__.__dict__["show_outputs"] = show_outputs
|
|
215
207
|
return Role(resource_name, opts=opts, __props__=__props__)
|
|
@@ -219,20 +211,9 @@ class Role(pulumi.CustomResource):
|
|
|
219
211
|
def comment(self) -> pulumi.Output[Optional[str]]:
|
|
220
212
|
return pulumi.get(self, "comment")
|
|
221
213
|
|
|
222
|
-
@property
|
|
223
|
-
@pulumi.getter(name="fullyQualifiedName")
|
|
224
|
-
def fully_qualified_name(self) -> pulumi.Output[str]:
|
|
225
|
-
"""
|
|
226
|
-
Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
227
|
-
"""
|
|
228
|
-
return pulumi.get(self, "fully_qualified_name")
|
|
229
|
-
|
|
230
214
|
@property
|
|
231
215
|
@pulumi.getter
|
|
232
216
|
def name(self) -> pulumi.Output[str]:
|
|
233
|
-
"""
|
|
234
|
-
Identifier for the role; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `(`, `)`, `"`
|
|
235
|
-
"""
|
|
236
217
|
return pulumi.get(self, "name")
|
|
237
218
|
|
|
238
219
|
@property
|
|
@@ -116,7 +116,6 @@ class _RowAccessPolicyState:
|
|
|
116
116
|
def __init__(__self__, *,
|
|
117
117
|
comment: Optional[pulumi.Input[str]] = None,
|
|
118
118
|
database: Optional[pulumi.Input[str]] = None,
|
|
119
|
-
fully_qualified_name: Optional[pulumi.Input[str]] = None,
|
|
120
119
|
name: Optional[pulumi.Input[str]] = None,
|
|
121
120
|
row_access_expression: Optional[pulumi.Input[str]] = None,
|
|
122
121
|
schema: Optional[pulumi.Input[str]] = None,
|
|
@@ -125,7 +124,6 @@ class _RowAccessPolicyState:
|
|
|
125
124
|
Input properties used for looking up and filtering RowAccessPolicy resources.
|
|
126
125
|
:param pulumi.Input[str] comment: Specifies a comment for the row access policy.
|
|
127
126
|
:param pulumi.Input[str] database: The database in which to create the row access policy.
|
|
128
|
-
:param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
129
127
|
:param pulumi.Input[str] name: Specifies the identifier for the row access policy; must be unique for the database and schema in which the row access policy is created.
|
|
130
128
|
:param pulumi.Input[str] row_access_expression: Specifies the SQL expression. The expression can be any boolean-valued SQL expression.
|
|
131
129
|
:param pulumi.Input[str] schema: The schema in which to create the row access policy.
|
|
@@ -135,8 +133,6 @@ class _RowAccessPolicyState:
|
|
|
135
133
|
pulumi.set(__self__, "comment", comment)
|
|
136
134
|
if database is not None:
|
|
137
135
|
pulumi.set(__self__, "database", database)
|
|
138
|
-
if fully_qualified_name is not None:
|
|
139
|
-
pulumi.set(__self__, "fully_qualified_name", fully_qualified_name)
|
|
140
136
|
if name is not None:
|
|
141
137
|
pulumi.set(__self__, "name", name)
|
|
142
138
|
if row_access_expression is not None:
|
|
@@ -170,18 +166,6 @@ class _RowAccessPolicyState:
|
|
|
170
166
|
def database(self, value: Optional[pulumi.Input[str]]):
|
|
171
167
|
pulumi.set(self, "database", value)
|
|
172
168
|
|
|
173
|
-
@property
|
|
174
|
-
@pulumi.getter(name="fullyQualifiedName")
|
|
175
|
-
def fully_qualified_name(self) -> Optional[pulumi.Input[str]]:
|
|
176
|
-
"""
|
|
177
|
-
Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
178
|
-
"""
|
|
179
|
-
return pulumi.get(self, "fully_qualified_name")
|
|
180
|
-
|
|
181
|
-
@fully_qualified_name.setter
|
|
182
|
-
def fully_qualified_name(self, value: Optional[pulumi.Input[str]]):
|
|
183
|
-
pulumi.set(self, "fully_qualified_name", value)
|
|
184
|
-
|
|
185
169
|
@property
|
|
186
170
|
@pulumi.getter
|
|
187
171
|
def name(self) -> Optional[pulumi.Input[str]]:
|
|
@@ -244,6 +228,23 @@ class RowAccessPolicy(pulumi.CustomResource):
|
|
|
244
228
|
signature: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
|
|
245
229
|
__props__=None):
|
|
246
230
|
"""
|
|
231
|
+
## Example Usage
|
|
232
|
+
|
|
233
|
+
```python
|
|
234
|
+
import pulumi
|
|
235
|
+
import pulumi_snowflake as snowflake
|
|
236
|
+
|
|
237
|
+
example_row_access_policy = snowflake.RowAccessPolicy("example_row_access_policy",
|
|
238
|
+
name="EXAMPLE_ROW_ACCESS_POLICY",
|
|
239
|
+
database="EXAMPLE_DB",
|
|
240
|
+
schema="EXAMPLE_SCHEMA",
|
|
241
|
+
signature={
|
|
242
|
+
"A": "VARCHAR",
|
|
243
|
+
"B": "VARCHAR",
|
|
244
|
+
},
|
|
245
|
+
row_access_expression="case when current_role() in ('ANALYST') then true else false end")
|
|
246
|
+
```
|
|
247
|
+
|
|
247
248
|
## Import
|
|
248
249
|
|
|
249
250
|
format is database name | schema name | policy name
|
|
@@ -268,6 +269,23 @@ class RowAccessPolicy(pulumi.CustomResource):
|
|
|
268
269
|
args: RowAccessPolicyArgs,
|
|
269
270
|
opts: Optional[pulumi.ResourceOptions] = None):
|
|
270
271
|
"""
|
|
272
|
+
## Example Usage
|
|
273
|
+
|
|
274
|
+
```python
|
|
275
|
+
import pulumi
|
|
276
|
+
import pulumi_snowflake as snowflake
|
|
277
|
+
|
|
278
|
+
example_row_access_policy = snowflake.RowAccessPolicy("example_row_access_policy",
|
|
279
|
+
name="EXAMPLE_ROW_ACCESS_POLICY",
|
|
280
|
+
database="EXAMPLE_DB",
|
|
281
|
+
schema="EXAMPLE_SCHEMA",
|
|
282
|
+
signature={
|
|
283
|
+
"A": "VARCHAR",
|
|
284
|
+
"B": "VARCHAR",
|
|
285
|
+
},
|
|
286
|
+
row_access_expression="case when current_role() in ('ANALYST') then true else false end")
|
|
287
|
+
```
|
|
288
|
+
|
|
271
289
|
## Import
|
|
272
290
|
|
|
273
291
|
format is database name | schema name | policy name
|
|
@@ -320,7 +338,6 @@ class RowAccessPolicy(pulumi.CustomResource):
|
|
|
320
338
|
if signature is None and not opts.urn:
|
|
321
339
|
raise TypeError("Missing required property 'signature'")
|
|
322
340
|
__props__.__dict__["signature"] = signature
|
|
323
|
-
__props__.__dict__["fully_qualified_name"] = None
|
|
324
341
|
super(RowAccessPolicy, __self__).__init__(
|
|
325
342
|
'snowflake:index/rowAccessPolicy:RowAccessPolicy',
|
|
326
343
|
resource_name,
|
|
@@ -333,7 +350,6 @@ class RowAccessPolicy(pulumi.CustomResource):
|
|
|
333
350
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
334
351
|
comment: Optional[pulumi.Input[str]] = None,
|
|
335
352
|
database: Optional[pulumi.Input[str]] = None,
|
|
336
|
-
fully_qualified_name: Optional[pulumi.Input[str]] = None,
|
|
337
353
|
name: Optional[pulumi.Input[str]] = None,
|
|
338
354
|
row_access_expression: Optional[pulumi.Input[str]] = None,
|
|
339
355
|
schema: Optional[pulumi.Input[str]] = None,
|
|
@@ -347,7 +363,6 @@ class RowAccessPolicy(pulumi.CustomResource):
|
|
|
347
363
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
348
364
|
:param pulumi.Input[str] comment: Specifies a comment for the row access policy.
|
|
349
365
|
:param pulumi.Input[str] database: The database in which to create the row access policy.
|
|
350
|
-
:param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
351
366
|
:param pulumi.Input[str] name: Specifies the identifier for the row access policy; must be unique for the database and schema in which the row access policy is created.
|
|
352
367
|
:param pulumi.Input[str] row_access_expression: Specifies the SQL expression. The expression can be any boolean-valued SQL expression.
|
|
353
368
|
:param pulumi.Input[str] schema: The schema in which to create the row access policy.
|
|
@@ -359,7 +374,6 @@ class RowAccessPolicy(pulumi.CustomResource):
|
|
|
359
374
|
|
|
360
375
|
__props__.__dict__["comment"] = comment
|
|
361
376
|
__props__.__dict__["database"] = database
|
|
362
|
-
__props__.__dict__["fully_qualified_name"] = fully_qualified_name
|
|
363
377
|
__props__.__dict__["name"] = name
|
|
364
378
|
__props__.__dict__["row_access_expression"] = row_access_expression
|
|
365
379
|
__props__.__dict__["schema"] = schema
|
|
@@ -382,14 +396,6 @@ class RowAccessPolicy(pulumi.CustomResource):
|
|
|
382
396
|
"""
|
|
383
397
|
return pulumi.get(self, "database")
|
|
384
398
|
|
|
385
|
-
@property
|
|
386
|
-
@pulumi.getter(name="fullyQualifiedName")
|
|
387
|
-
def fully_qualified_name(self) -> pulumi.Output[str]:
|
|
388
|
-
"""
|
|
389
|
-
Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
390
|
-
"""
|
|
391
|
-
return pulumi.get(self, "fully_qualified_name")
|
|
392
|
-
|
|
393
399
|
@property
|
|
394
400
|
@pulumi.getter
|
|
395
401
|
def name(self) -> pulumi.Output[str]:
|
|
@@ -43,7 +43,7 @@ class Saml2IntegrationArgs:
|
|
|
43
43
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_user_domains: A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
|
|
44
44
|
:param pulumi.Input[str] comment: Specifies a comment for the integration.
|
|
45
45
|
:param pulumi.Input[str] enabled: Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
46
|
-
:param pulumi.Input[str] name: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
|
|
46
|
+
:param pulumi.Input[str] name: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
|
|
47
47
|
:param pulumi.Input[str] saml2_enable_sp_initiated: The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
48
48
|
:param pulumi.Input[str] saml2_force_authn: The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
49
49
|
:param pulumi.Input[str] saml2_post_logout_redirect_url: The endpoint to which Snowflake redirects users after clicking the Log Out button in the classic Snowflake web interface. Snowflake terminates the Snowflake session upon redirecting to the specified endpoint.
|
|
@@ -184,7 +184,7 @@ class Saml2IntegrationArgs:
|
|
|
184
184
|
@pulumi.getter
|
|
185
185
|
def name(self) -> Optional[pulumi.Input[str]]:
|
|
186
186
|
"""
|
|
187
|
-
Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
|
|
187
|
+
Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
|
|
188
188
|
"""
|
|
189
189
|
return pulumi.get(self, "name")
|
|
190
190
|
|
|
@@ -297,7 +297,6 @@ class _Saml2IntegrationState:
|
|
|
297
297
|
comment: Optional[pulumi.Input[str]] = None,
|
|
298
298
|
describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['Saml2IntegrationDescribeOutputArgs']]]] = None,
|
|
299
299
|
enabled: Optional[pulumi.Input[str]] = None,
|
|
300
|
-
fully_qualified_name: Optional[pulumi.Input[str]] = None,
|
|
301
300
|
name: Optional[pulumi.Input[str]] = None,
|
|
302
301
|
saml2_enable_sp_initiated: Optional[pulumi.Input[str]] = None,
|
|
303
302
|
saml2_force_authn: Optional[pulumi.Input[str]] = None,
|
|
@@ -319,8 +318,7 @@ class _Saml2IntegrationState:
|
|
|
319
318
|
:param pulumi.Input[str] comment: Specifies a comment for the integration.
|
|
320
319
|
:param pulumi.Input[Sequence[pulumi.Input['Saml2IntegrationDescribeOutputArgs']]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATION` for the given integration.
|
|
321
320
|
:param pulumi.Input[str] enabled: Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
322
|
-
:param pulumi.Input[str]
|
|
323
|
-
:param pulumi.Input[str] name: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `(`, `)`, `"`
|
|
321
|
+
:param pulumi.Input[str] name: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
|
|
324
322
|
:param pulumi.Input[str] saml2_enable_sp_initiated: The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
325
323
|
:param pulumi.Input[str] saml2_force_authn: The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
326
324
|
:param pulumi.Input[str] saml2_issuer: The string containing the IdP EntityID / Issuer.
|
|
@@ -345,8 +343,6 @@ class _Saml2IntegrationState:
|
|
|
345
343
|
pulumi.set(__self__, "describe_outputs", describe_outputs)
|
|
346
344
|
if enabled is not None:
|
|
347
345
|
pulumi.set(__self__, "enabled", enabled)
|
|
348
|
-
if fully_qualified_name is not None:
|
|
349
|
-
pulumi.set(__self__, "fully_qualified_name", fully_qualified_name)
|
|
350
346
|
if name is not None:
|
|
351
347
|
pulumi.set(__self__, "name", name)
|
|
352
348
|
if saml2_enable_sp_initiated is not None:
|
|
@@ -436,23 +432,11 @@ class _Saml2IntegrationState:
|
|
|
436
432
|
def enabled(self, value: Optional[pulumi.Input[str]]):
|
|
437
433
|
pulumi.set(self, "enabled", value)
|
|
438
434
|
|
|
439
|
-
@property
|
|
440
|
-
@pulumi.getter(name="fullyQualifiedName")
|
|
441
|
-
def fully_qualified_name(self) -> Optional[pulumi.Input[str]]:
|
|
442
|
-
"""
|
|
443
|
-
Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
444
|
-
"""
|
|
445
|
-
return pulumi.get(self, "fully_qualified_name")
|
|
446
|
-
|
|
447
|
-
@fully_qualified_name.setter
|
|
448
|
-
def fully_qualified_name(self, value: Optional[pulumi.Input[str]]):
|
|
449
|
-
pulumi.set(self, "fully_qualified_name", value)
|
|
450
|
-
|
|
451
435
|
@property
|
|
452
436
|
@pulumi.getter
|
|
453
437
|
def name(self) -> Optional[pulumi.Input[str]]:
|
|
454
438
|
"""
|
|
455
|
-
Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
|
|
439
|
+
Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
|
|
456
440
|
"""
|
|
457
441
|
return pulumi.get(self, "name")
|
|
458
442
|
|
|
@@ -641,6 +625,10 @@ class Saml2Integration(pulumi.CustomResource):
|
|
|
641
625
|
saml2_x509_cert: Optional[pulumi.Input[str]] = None,
|
|
642
626
|
__props__=None):
|
|
643
627
|
"""
|
|
628
|
+
!> **V1 release candidate** This resource was reworked and is a release candidate for the V1. We do not expect significant changes in it before the V1. We will welcome any feedback and adjust the resource if needed. Any errors reported will be resolved with a higher priority. We encourage checking this resource out before the V1 release. Please follow the migration guide to use it.
|
|
629
|
+
|
|
630
|
+
Resource used to manage saml2 security integration objects. For more information, check [security integrations documentation](https://docs.snowflake.com/en/sql-reference/sql/create-security-integration-saml2).
|
|
631
|
+
|
|
644
632
|
## Import
|
|
645
633
|
|
|
646
634
|
```sh
|
|
@@ -653,7 +641,7 @@ class Saml2Integration(pulumi.CustomResource):
|
|
|
653
641
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_user_domains: A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
|
|
654
642
|
:param pulumi.Input[str] comment: Specifies a comment for the integration.
|
|
655
643
|
:param pulumi.Input[str] enabled: Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
656
|
-
:param pulumi.Input[str] name: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
|
|
644
|
+
:param pulumi.Input[str] name: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
|
|
657
645
|
:param pulumi.Input[str] saml2_enable_sp_initiated: The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
658
646
|
:param pulumi.Input[str] saml2_force_authn: The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
659
647
|
:param pulumi.Input[str] saml2_issuer: The string containing the IdP EntityID / Issuer.
|
|
@@ -674,6 +662,10 @@ class Saml2Integration(pulumi.CustomResource):
|
|
|
674
662
|
args: Saml2IntegrationArgs,
|
|
675
663
|
opts: Optional[pulumi.ResourceOptions] = None):
|
|
676
664
|
"""
|
|
665
|
+
!> **V1 release candidate** This resource was reworked and is a release candidate for the V1. We do not expect significant changes in it before the V1. We will welcome any feedback and adjust the resource if needed. Any errors reported will be resolved with a higher priority. We encourage checking this resource out before the V1 release. Please follow the migration guide to use it.
|
|
666
|
+
|
|
667
|
+
Resource used to manage saml2 security integration objects. For more information, check [security integrations documentation](https://docs.snowflake.com/en/sql-reference/sql/create-security-integration-saml2).
|
|
668
|
+
|
|
677
669
|
## Import
|
|
678
670
|
|
|
679
671
|
```sh
|
|
@@ -747,7 +739,6 @@ class Saml2Integration(pulumi.CustomResource):
|
|
|
747
739
|
raise TypeError("Missing required property 'saml2_x509_cert'")
|
|
748
740
|
__props__.__dict__["saml2_x509_cert"] = saml2_x509_cert
|
|
749
741
|
__props__.__dict__["describe_outputs"] = None
|
|
750
|
-
__props__.__dict__["fully_qualified_name"] = None
|
|
751
742
|
__props__.__dict__["show_outputs"] = None
|
|
752
743
|
super(Saml2Integration, __self__).__init__(
|
|
753
744
|
'snowflake:index/saml2Integration:Saml2Integration',
|
|
@@ -762,9 +753,8 @@ class Saml2Integration(pulumi.CustomResource):
|
|
|
762
753
|
allowed_email_patterns: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
763
754
|
allowed_user_domains: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
764
755
|
comment: Optional[pulumi.Input[str]] = None,
|
|
765
|
-
describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
756
|
+
describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['Saml2IntegrationDescribeOutputArgs']]]]] = None,
|
|
766
757
|
enabled: Optional[pulumi.Input[str]] = None,
|
|
767
|
-
fully_qualified_name: Optional[pulumi.Input[str]] = None,
|
|
768
758
|
name: Optional[pulumi.Input[str]] = None,
|
|
769
759
|
saml2_enable_sp_initiated: Optional[pulumi.Input[str]] = None,
|
|
770
760
|
saml2_force_authn: Optional[pulumi.Input[str]] = None,
|
|
@@ -778,7 +768,7 @@ class Saml2Integration(pulumi.CustomResource):
|
|
|
778
768
|
saml2_sp_initiated_login_page_label: Optional[pulumi.Input[str]] = None,
|
|
779
769
|
saml2_sso_url: Optional[pulumi.Input[str]] = None,
|
|
780
770
|
saml2_x509_cert: Optional[pulumi.Input[str]] = None,
|
|
781
|
-
show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
771
|
+
show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['Saml2IntegrationShowOutputArgs']]]]] = None) -> 'Saml2Integration':
|
|
782
772
|
"""
|
|
783
773
|
Get an existing Saml2Integration resource's state with the given name, id, and optional extra
|
|
784
774
|
properties used to qualify the lookup.
|
|
@@ -789,10 +779,9 @@ class Saml2Integration(pulumi.CustomResource):
|
|
|
789
779
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_email_patterns: A list of regular expressions that email addresses are matched against to authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
|
|
790
780
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_user_domains: A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
|
|
791
781
|
:param pulumi.Input[str] comment: Specifies a comment for the integration.
|
|
792
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
782
|
+
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['Saml2IntegrationDescribeOutputArgs']]]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATION` for the given integration.
|
|
793
783
|
:param pulumi.Input[str] enabled: Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
794
|
-
:param pulumi.Input[str]
|
|
795
|
-
:param pulumi.Input[str] name: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `(`, `)`, `"`
|
|
784
|
+
:param pulumi.Input[str] name: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
|
|
796
785
|
:param pulumi.Input[str] saml2_enable_sp_initiated: The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
797
786
|
:param pulumi.Input[str] saml2_force_authn: The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
798
787
|
:param pulumi.Input[str] saml2_issuer: The string containing the IdP EntityID / Issuer.
|
|
@@ -805,7 +794,7 @@ class Saml2Integration(pulumi.CustomResource):
|
|
|
805
794
|
:param pulumi.Input[str] saml2_sp_initiated_login_page_label: The string containing the label to display after the Log In With button on the login page. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
|
|
806
795
|
:param pulumi.Input[str] saml2_sso_url: The string containing the IdP SSO URL, where the user should be redirected by Snowflake (the Service Provider) with a SAML AuthnRequest message.
|
|
807
796
|
:param pulumi.Input[str] saml2_x509_cert: The Base64 encoded IdP signing certificate on a single line without the leading -----BEGIN CERTIFICATE----- and ending -----END CERTIFICATE----- markers.
|
|
808
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
797
|
+
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['Saml2IntegrationShowOutputArgs']]]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATION` for the given integration.
|
|
809
798
|
"""
|
|
810
799
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
811
800
|
|
|
@@ -816,7 +805,6 @@ class Saml2Integration(pulumi.CustomResource):
|
|
|
816
805
|
__props__.__dict__["comment"] = comment
|
|
817
806
|
__props__.__dict__["describe_outputs"] = describe_outputs
|
|
818
807
|
__props__.__dict__["enabled"] = enabled
|
|
819
|
-
__props__.__dict__["fully_qualified_name"] = fully_qualified_name
|
|
820
808
|
__props__.__dict__["name"] = name
|
|
821
809
|
__props__.__dict__["saml2_enable_sp_initiated"] = saml2_enable_sp_initiated
|
|
822
810
|
__props__.__dict__["saml2_force_authn"] = saml2_force_authn
|
|
@@ -873,19 +861,11 @@ class Saml2Integration(pulumi.CustomResource):
|
|
|
873
861
|
"""
|
|
874
862
|
return pulumi.get(self, "enabled")
|
|
875
863
|
|
|
876
|
-
@property
|
|
877
|
-
@pulumi.getter(name="fullyQualifiedName")
|
|
878
|
-
def fully_qualified_name(self) -> pulumi.Output[str]:
|
|
879
|
-
"""
|
|
880
|
-
Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
881
|
-
"""
|
|
882
|
-
return pulumi.get(self, "fully_qualified_name")
|
|
883
|
-
|
|
884
864
|
@property
|
|
885
865
|
@pulumi.getter
|
|
886
866
|
def name(self) -> pulumi.Output[str]:
|
|
887
867
|
"""
|
|
888
|
-
Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
|
|
868
|
+
Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
|
|
889
869
|
"""
|
|
890
870
|
return pulumi.get(self, "name")
|
|
891
871
|
|