pulumi-snowflake 0.62.0a1732688512__py3-none-any.whl → 0.62.0a1732732164__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-snowflake might be problematic. Click here for more details.
- pulumi_snowflake/__init__.py +1 -0
- pulumi_snowflake/_inputs.py +6620 -588
- pulumi_snowflake/account_role.py +7 -7
- pulumi_snowflake/api_authentication_integration_with_authorization_code_grant.py +7 -7
- pulumi_snowflake/api_authentication_integration_with_client_credentials.py +7 -7
- pulumi_snowflake/api_authentication_integration_with_jwt_bearer.py +7 -7
- pulumi_snowflake/authentication_policy.py +21 -21
- pulumi_snowflake/database.py +7 -7
- pulumi_snowflake/database_role.py +14 -14
- pulumi_snowflake/external_oauth_integration.py +7 -7
- pulumi_snowflake/external_volume.py +7 -7
- pulumi_snowflake/get_tags.py +134 -0
- pulumi_snowflake/get_tasks.py +125 -56
- pulumi_snowflake/legacy_service_user.py +7 -7
- pulumi_snowflake/masking_policy.py +21 -21
- pulumi_snowflake/network_policy.py +7 -7
- pulumi_snowflake/oauth_integration_for_custom_clients.py +7 -7
- pulumi_snowflake/oauth_integration_for_partner_applications.py +7 -7
- pulumi_snowflake/outputs.py +12197 -5310
- pulumi_snowflake/password_policy.py +2 -4
- pulumi_snowflake/primary_connection.py +7 -7
- pulumi_snowflake/pulumi-plugin.json +1 -1
- pulumi_snowflake/resource_monitor.py +7 -7
- pulumi_snowflake/role.py +7 -7
- pulumi_snowflake/row_access_policy.py +21 -21
- pulumi_snowflake/saml2_integration.py +7 -7
- pulumi_snowflake/scim_integration.py +7 -7
- pulumi_snowflake/secondary_connection.py +7 -7
- pulumi_snowflake/secondary_database.py +7 -7
- pulumi_snowflake/secret_with_authorization_code_grant.py +21 -21
- pulumi_snowflake/secret_with_basic_authentication.py +21 -21
- pulumi_snowflake/secret_with_client_credentials.py +21 -21
- pulumi_snowflake/secret_with_generic_string.py +21 -21
- pulumi_snowflake/service_user.py +7 -7
- pulumi_snowflake/shared_database.py +7 -7
- pulumi_snowflake/storage_integration.py +13 -0
- pulumi_snowflake/stream_on_directory_table.py +28 -28
- pulumi_snowflake/stream_on_external_table.py +28 -28
- pulumi_snowflake/stream_on_table.py +28 -28
- pulumi_snowflake/stream_on_view.py +28 -28
- pulumi_snowflake/tag.py +109 -36
- pulumi_snowflake/task.py +3008 -317
- pulumi_snowflake/user.py +7 -7
- pulumi_snowflake/view.py +21 -21
- pulumi_snowflake/warehouse.py +7 -7
- {pulumi_snowflake-0.62.0a1732688512.dist-info → pulumi_snowflake-0.62.0a1732732164.dist-info}/METADATA +1 -1
- {pulumi_snowflake-0.62.0a1732688512.dist-info → pulumi_snowflake-0.62.0a1732732164.dist-info}/RECORD +49 -48
- {pulumi_snowflake-0.62.0a1732688512.dist-info → pulumi_snowflake-0.62.0a1732732164.dist-info}/WHEEL +0 -0
- {pulumi_snowflake-0.62.0a1732688512.dist-info → pulumi_snowflake-0.62.0a1732732164.dist-info}/top_level.txt +0 -0
pulumi_snowflake/account_role.py
CHANGED
|
@@ -25,7 +25,7 @@ class AccountRoleArgs:
|
|
|
25
25
|
name: Optional[pulumi.Input[str]] = None):
|
|
26
26
|
"""
|
|
27
27
|
The set of arguments for constructing a AccountRole resource.
|
|
28
|
-
:param pulumi.Input[str] name: Identifier for the role; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
28
|
+
:param pulumi.Input[str] name: Identifier for the role; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
29
29
|
"""
|
|
30
30
|
if comment is not None:
|
|
31
31
|
pulumi.set(__self__, "comment", comment)
|
|
@@ -45,7 +45,7 @@ class AccountRoleArgs:
|
|
|
45
45
|
@pulumi.getter
|
|
46
46
|
def name(self) -> Optional[pulumi.Input[str]]:
|
|
47
47
|
"""
|
|
48
|
-
Identifier for the role; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
48
|
+
Identifier for the role; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
49
49
|
"""
|
|
50
50
|
return pulumi.get(self, "name")
|
|
51
51
|
|
|
@@ -64,7 +64,7 @@ class _AccountRoleState:
|
|
|
64
64
|
"""
|
|
65
65
|
Input properties used for looking up and filtering AccountRole resources.
|
|
66
66
|
:param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
67
|
-
:param pulumi.Input[str] name: Identifier for the role; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
67
|
+
:param pulumi.Input[str] name: Identifier for the role; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
68
68
|
:param pulumi.Input[Sequence[pulumi.Input['AccountRoleShowOutputArgs']]] show_outputs: Outputs the result of `SHOW ROLES` for the given role.
|
|
69
69
|
"""
|
|
70
70
|
if comment is not None:
|
|
@@ -101,7 +101,7 @@ class _AccountRoleState:
|
|
|
101
101
|
@pulumi.getter
|
|
102
102
|
def name(self) -> Optional[pulumi.Input[str]]:
|
|
103
103
|
"""
|
|
104
|
-
Identifier for the role; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
104
|
+
Identifier for the role; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
105
105
|
"""
|
|
106
106
|
return pulumi.get(self, "name")
|
|
107
107
|
|
|
@@ -139,7 +139,7 @@ class AccountRole(pulumi.CustomResource):
|
|
|
139
139
|
|
|
140
140
|
:param str resource_name: The name of the resource.
|
|
141
141
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
142
|
-
:param pulumi.Input[str] name: Identifier for the role; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
142
|
+
:param pulumi.Input[str] name: Identifier for the role; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
143
143
|
"""
|
|
144
144
|
...
|
|
145
145
|
@overload
|
|
@@ -206,7 +206,7 @@ class AccountRole(pulumi.CustomResource):
|
|
|
206
206
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
207
207
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
208
208
|
:param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
209
|
-
:param pulumi.Input[str] name: Identifier for the role; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
209
|
+
:param pulumi.Input[str] name: Identifier for the role; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
210
210
|
:param pulumi.Input[Sequence[pulumi.Input[Union['AccountRoleShowOutputArgs', 'AccountRoleShowOutputArgsDict']]]] show_outputs: Outputs the result of `SHOW ROLES` for the given role.
|
|
211
211
|
"""
|
|
212
212
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
@@ -236,7 +236,7 @@ class AccountRole(pulumi.CustomResource):
|
|
|
236
236
|
@pulumi.getter
|
|
237
237
|
def name(self) -> pulumi.Output[str]:
|
|
238
238
|
"""
|
|
239
|
-
Identifier for the role; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
239
|
+
Identifier for the role; must be unique for your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
240
240
|
"""
|
|
241
241
|
return pulumi.get(self, "name")
|
|
242
242
|
|
|
@@ -38,7 +38,7 @@ class ApiAuthenticationIntegrationWithAuthorizationCodeGrantArgs:
|
|
|
38
38
|
:param pulumi.Input[str] oauth_client_id: Specifies the client ID for the OAuth application in the external service.
|
|
39
39
|
:param pulumi.Input[str] oauth_client_secret: Specifies the client secret for the OAuth application in the ServiceNow instance from the previous step. The connector uses this to request an access token from the ServiceNow instance.
|
|
40
40
|
:param pulumi.Input[str] comment: Specifies a comment for the integration.
|
|
41
|
-
:param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
41
|
+
:param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
42
42
|
:param pulumi.Input[int] oauth_access_token_validity: Specifies the default lifetime of the OAuth access token (in seconds) issued by an OAuth server.
|
|
43
43
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] oauth_allowed_scopes: Specifies a list of scopes to use when making a request from the OAuth by a role with USAGE on the integration during the OAuth client credentials flow.
|
|
44
44
|
:param pulumi.Input[str] oauth_authorization_endpoint: Specifies the URL for authenticating to the external service. If removed from the config, the resource is recreated.
|
|
@@ -118,7 +118,7 @@ class ApiAuthenticationIntegrationWithAuthorizationCodeGrantArgs:
|
|
|
118
118
|
@pulumi.getter
|
|
119
119
|
def name(self) -> Optional[pulumi.Input[str]]:
|
|
120
120
|
"""
|
|
121
|
-
Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
121
|
+
Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
122
122
|
"""
|
|
123
123
|
return pulumi.get(self, "name")
|
|
124
124
|
|
|
@@ -222,7 +222,7 @@ class _ApiAuthenticationIntegrationWithAuthorizationCodeGrantState:
|
|
|
222
222
|
:param pulumi.Input[Sequence[pulumi.Input['ApiAuthenticationIntegrationWithAuthorizationCodeGrantDescribeOutputArgs']]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATIONS` for the given security integration.
|
|
223
223
|
:param pulumi.Input[bool] enabled: Specifies whether this security integration is enabled or disabled.
|
|
224
224
|
:param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
225
|
-
:param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
225
|
+
:param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
226
226
|
:param pulumi.Input[int] oauth_access_token_validity: Specifies the default lifetime of the OAuth access token (in seconds) issued by an OAuth server.
|
|
227
227
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] oauth_allowed_scopes: Specifies a list of scopes to use when making a request from the OAuth by a role with USAGE on the integration during the OAuth client credentials flow.
|
|
228
228
|
:param pulumi.Input[str] oauth_authorization_endpoint: Specifies the URL for authenticating to the external service. If removed from the config, the resource is recreated.
|
|
@@ -314,7 +314,7 @@ class _ApiAuthenticationIntegrationWithAuthorizationCodeGrantState:
|
|
|
314
314
|
@pulumi.getter
|
|
315
315
|
def name(self) -> Optional[pulumi.Input[str]]:
|
|
316
316
|
"""
|
|
317
|
-
Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
317
|
+
Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
318
318
|
"""
|
|
319
319
|
return pulumi.get(self, "name")
|
|
320
320
|
|
|
@@ -459,7 +459,7 @@ class ApiAuthenticationIntegrationWithAuthorizationCodeGrant(pulumi.CustomResour
|
|
|
459
459
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
460
460
|
:param pulumi.Input[str] comment: Specifies a comment for the integration.
|
|
461
461
|
:param pulumi.Input[bool] enabled: Specifies whether this security integration is enabled or disabled.
|
|
462
|
-
:param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
462
|
+
:param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
463
463
|
:param pulumi.Input[int] oauth_access_token_validity: Specifies the default lifetime of the OAuth access token (in seconds) issued by an OAuth server.
|
|
464
464
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] oauth_allowed_scopes: Specifies a list of scopes to use when making a request from the OAuth by a role with USAGE on the integration during the OAuth client credentials flow.
|
|
465
465
|
:param pulumi.Input[str] oauth_authorization_endpoint: Specifies the URL for authenticating to the external service. If removed from the config, the resource is recreated.
|
|
@@ -572,7 +572,7 @@ class ApiAuthenticationIntegrationWithAuthorizationCodeGrant(pulumi.CustomResour
|
|
|
572
572
|
:param pulumi.Input[Sequence[pulumi.Input[Union['ApiAuthenticationIntegrationWithAuthorizationCodeGrantDescribeOutputArgs', 'ApiAuthenticationIntegrationWithAuthorizationCodeGrantDescribeOutputArgsDict']]]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATIONS` for the given security integration.
|
|
573
573
|
:param pulumi.Input[bool] enabled: Specifies whether this security integration is enabled or disabled.
|
|
574
574
|
:param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
575
|
-
:param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
575
|
+
:param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
576
576
|
:param pulumi.Input[int] oauth_access_token_validity: Specifies the default lifetime of the OAuth access token (in seconds) issued by an OAuth server.
|
|
577
577
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] oauth_allowed_scopes: Specifies a list of scopes to use when making a request from the OAuth by a role with USAGE on the integration during the OAuth client credentials flow.
|
|
578
578
|
:param pulumi.Input[str] oauth_authorization_endpoint: Specifies the URL for authenticating to the external service. If removed from the config, the resource is recreated.
|
|
@@ -639,7 +639,7 @@ class ApiAuthenticationIntegrationWithAuthorizationCodeGrant(pulumi.CustomResour
|
|
|
639
639
|
@pulumi.getter
|
|
640
640
|
def name(self) -> pulumi.Output[str]:
|
|
641
641
|
"""
|
|
642
|
-
Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
642
|
+
Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
643
643
|
"""
|
|
644
644
|
return pulumi.get(self, "name")
|
|
645
645
|
|
|
@@ -37,7 +37,7 @@ class ApiAuthenticationIntegrationWithClientCredentialsArgs:
|
|
|
37
37
|
:param pulumi.Input[str] oauth_client_id: Specifies the client ID for the OAuth application in the external service.
|
|
38
38
|
:param pulumi.Input[str] oauth_client_secret: Specifies the client secret for the OAuth application in the ServiceNow instance from the previous step. The connector uses this to request an access token from the ServiceNow instance.
|
|
39
39
|
:param pulumi.Input[str] comment: Specifies a comment for the integration.
|
|
40
|
-
:param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
40
|
+
:param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
41
41
|
:param pulumi.Input[int] oauth_access_token_validity: Specifies the default lifetime of the OAuth access token (in seconds) issued by an OAuth server.
|
|
42
42
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] oauth_allowed_scopes: Specifies a list of scopes to use when making a request from the OAuth by a role with USAGE on the integration during the OAuth client credentials flow.
|
|
43
43
|
:param pulumi.Input[str] oauth_client_auth_method: Specifies that POST is used as the authentication method to the external service. If removed from the config, the resource is recreated. Valid values are (case-insensitive): `CLIENT_SECRET_POST`.
|
|
@@ -114,7 +114,7 @@ class ApiAuthenticationIntegrationWithClientCredentialsArgs:
|
|
|
114
114
|
@pulumi.getter
|
|
115
115
|
def name(self) -> Optional[pulumi.Input[str]]:
|
|
116
116
|
"""
|
|
117
|
-
Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
117
|
+
Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
118
118
|
"""
|
|
119
119
|
return pulumi.get(self, "name")
|
|
120
120
|
|
|
@@ -205,7 +205,7 @@ class _ApiAuthenticationIntegrationWithClientCredentialsState:
|
|
|
205
205
|
:param pulumi.Input[Sequence[pulumi.Input['ApiAuthenticationIntegrationWithClientCredentialsDescribeOutputArgs']]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATIONS` for the given security integration.
|
|
206
206
|
:param pulumi.Input[bool] enabled: Specifies whether this security integration is enabled or disabled.
|
|
207
207
|
:param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
208
|
-
:param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
208
|
+
:param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
209
209
|
:param pulumi.Input[int] oauth_access_token_validity: Specifies the default lifetime of the OAuth access token (in seconds) issued by an OAuth server.
|
|
210
210
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] oauth_allowed_scopes: Specifies a list of scopes to use when making a request from the OAuth by a role with USAGE on the integration during the OAuth client credentials flow.
|
|
211
211
|
:param pulumi.Input[str] oauth_client_auth_method: Specifies that POST is used as the authentication method to the external service. If removed from the config, the resource is recreated. Valid values are (case-insensitive): `CLIENT_SECRET_POST`.
|
|
@@ -294,7 +294,7 @@ class _ApiAuthenticationIntegrationWithClientCredentialsState:
|
|
|
294
294
|
@pulumi.getter
|
|
295
295
|
def name(self) -> Optional[pulumi.Input[str]]:
|
|
296
296
|
"""
|
|
297
|
-
Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
297
|
+
Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
298
298
|
"""
|
|
299
299
|
return pulumi.get(self, "name")
|
|
300
300
|
|
|
@@ -426,7 +426,7 @@ class ApiAuthenticationIntegrationWithClientCredentials(pulumi.CustomResource):
|
|
|
426
426
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
427
427
|
:param pulumi.Input[str] comment: Specifies a comment for the integration.
|
|
428
428
|
:param pulumi.Input[bool] enabled: Specifies whether this security integration is enabled or disabled.
|
|
429
|
-
:param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
429
|
+
:param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
430
430
|
:param pulumi.Input[int] oauth_access_token_validity: Specifies the default lifetime of the OAuth access token (in seconds) issued by an OAuth server.
|
|
431
431
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] oauth_allowed_scopes: Specifies a list of scopes to use when making a request from the OAuth by a role with USAGE on the integration during the OAuth client credentials flow.
|
|
432
432
|
:param pulumi.Input[str] oauth_client_auth_method: Specifies that POST is used as the authentication method to the external service. If removed from the config, the resource is recreated. Valid values are (case-insensitive): `CLIENT_SECRET_POST`.
|
|
@@ -535,7 +535,7 @@ class ApiAuthenticationIntegrationWithClientCredentials(pulumi.CustomResource):
|
|
|
535
535
|
:param pulumi.Input[Sequence[pulumi.Input[Union['ApiAuthenticationIntegrationWithClientCredentialsDescribeOutputArgs', 'ApiAuthenticationIntegrationWithClientCredentialsDescribeOutputArgsDict']]]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATIONS` for the given security integration.
|
|
536
536
|
:param pulumi.Input[bool] enabled: Specifies whether this security integration is enabled or disabled.
|
|
537
537
|
:param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
538
|
-
:param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
538
|
+
:param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
539
539
|
:param pulumi.Input[int] oauth_access_token_validity: Specifies the default lifetime of the OAuth access token (in seconds) issued by an OAuth server.
|
|
540
540
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] oauth_allowed_scopes: Specifies a list of scopes to use when making a request from the OAuth by a role with USAGE on the integration during the OAuth client credentials flow.
|
|
541
541
|
:param pulumi.Input[str] oauth_client_auth_method: Specifies that POST is used as the authentication method to the external service. If removed from the config, the resource is recreated. Valid values are (case-insensitive): `CLIENT_SECRET_POST`.
|
|
@@ -600,7 +600,7 @@ class ApiAuthenticationIntegrationWithClientCredentials(pulumi.CustomResource):
|
|
|
600
600
|
@pulumi.getter
|
|
601
601
|
def name(self) -> pulumi.Output[str]:
|
|
602
602
|
"""
|
|
603
|
-
Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
603
|
+
Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
604
604
|
"""
|
|
605
605
|
return pulumi.get(self, "name")
|
|
606
606
|
|
|
@@ -38,7 +38,7 @@ class ApiAuthenticationIntegrationWithJwtBearerArgs:
|
|
|
38
38
|
:param pulumi.Input[str] oauth_client_id: Specifies the client ID for the OAuth application in the external service.
|
|
39
39
|
:param pulumi.Input[str] oauth_client_secret: Specifies the client secret for the OAuth application in the ServiceNow instance from the previous step. The connector uses this to request an access token from the ServiceNow instance.
|
|
40
40
|
:param pulumi.Input[str] comment: Specifies a comment for the integration.
|
|
41
|
-
:param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
41
|
+
:param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
42
42
|
:param pulumi.Input[int] oauth_access_token_validity: Specifies the default lifetime of the OAuth access token (in seconds) issued by an OAuth server.
|
|
43
43
|
:param pulumi.Input[str] oauth_authorization_endpoint: Specifies the URL for authenticating to the external service.
|
|
44
44
|
:param pulumi.Input[str] oauth_client_auth_method: Specifies that POST is used as the authentication method to the external service. If removed from the config, the resource is recreated. Valid values are (case-insensitive): `CLIENT_SECRET_POST`.
|
|
@@ -125,7 +125,7 @@ class ApiAuthenticationIntegrationWithJwtBearerArgs:
|
|
|
125
125
|
@pulumi.getter
|
|
126
126
|
def name(self) -> Optional[pulumi.Input[str]]:
|
|
127
127
|
"""
|
|
128
|
-
Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
128
|
+
Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
129
129
|
"""
|
|
130
130
|
return pulumi.get(self, "name")
|
|
131
131
|
|
|
@@ -217,7 +217,7 @@ class _ApiAuthenticationIntegrationWithJwtBearerState:
|
|
|
217
217
|
:param pulumi.Input[Sequence[pulumi.Input['ApiAuthenticationIntegrationWithJwtBearerDescribeOutputArgs']]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATIONS` for the given security integration.
|
|
218
218
|
:param pulumi.Input[bool] enabled: Specifies whether this security integration is enabled or disabled.
|
|
219
219
|
:param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
220
|
-
:param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
220
|
+
:param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
221
221
|
:param pulumi.Input[int] oauth_access_token_validity: Specifies the default lifetime of the OAuth access token (in seconds) issued by an OAuth server.
|
|
222
222
|
:param pulumi.Input[str] oauth_authorization_endpoint: Specifies the URL for authenticating to the external service.
|
|
223
223
|
:param pulumi.Input[str] oauth_client_auth_method: Specifies that POST is used as the authentication method to the external service. If removed from the config, the resource is recreated. Valid values are (case-insensitive): `CLIENT_SECRET_POST`.
|
|
@@ -308,7 +308,7 @@ class _ApiAuthenticationIntegrationWithJwtBearerState:
|
|
|
308
308
|
@pulumi.getter
|
|
309
309
|
def name(self) -> Optional[pulumi.Input[str]]:
|
|
310
310
|
"""
|
|
311
|
-
Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
311
|
+
Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
312
312
|
"""
|
|
313
313
|
return pulumi.get(self, "name")
|
|
314
314
|
|
|
@@ -450,7 +450,7 @@ class ApiAuthenticationIntegrationWithJwtBearer(pulumi.CustomResource):
|
|
|
450
450
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
451
451
|
:param pulumi.Input[str] comment: Specifies a comment for the integration.
|
|
452
452
|
:param pulumi.Input[bool] enabled: Specifies whether this security integration is enabled or disabled.
|
|
453
|
-
:param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
453
|
+
:param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
454
454
|
:param pulumi.Input[int] oauth_access_token_validity: Specifies the default lifetime of the OAuth access token (in seconds) issued by an OAuth server.
|
|
455
455
|
:param pulumi.Input[str] oauth_authorization_endpoint: Specifies the URL for authenticating to the external service.
|
|
456
456
|
:param pulumi.Input[str] oauth_client_auth_method: Specifies that POST is used as the authentication method to the external service. If removed from the config, the resource is recreated. Valid values are (case-insensitive): `CLIENT_SECRET_POST`.
|
|
@@ -564,7 +564,7 @@ class ApiAuthenticationIntegrationWithJwtBearer(pulumi.CustomResource):
|
|
|
564
564
|
:param pulumi.Input[Sequence[pulumi.Input[Union['ApiAuthenticationIntegrationWithJwtBearerDescribeOutputArgs', 'ApiAuthenticationIntegrationWithJwtBearerDescribeOutputArgsDict']]]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATIONS` for the given security integration.
|
|
565
565
|
:param pulumi.Input[bool] enabled: Specifies whether this security integration is enabled or disabled.
|
|
566
566
|
:param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
567
|
-
:param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
567
|
+
:param pulumi.Input[str] name: Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
568
568
|
:param pulumi.Input[int] oauth_access_token_validity: Specifies the default lifetime of the OAuth access token (in seconds) issued by an OAuth server.
|
|
569
569
|
:param pulumi.Input[str] oauth_authorization_endpoint: Specifies the URL for authenticating to the external service.
|
|
570
570
|
:param pulumi.Input[str] oauth_client_auth_method: Specifies that POST is used as the authentication method to the external service. If removed from the config, the resource is recreated. Valid values are (case-insensitive): `CLIENT_SECRET_POST`.
|
|
@@ -630,7 +630,7 @@ class ApiAuthenticationIntegrationWithJwtBearer(pulumi.CustomResource):
|
|
|
630
630
|
@pulumi.getter
|
|
631
631
|
def name(self) -> pulumi.Output[str]:
|
|
632
632
|
"""
|
|
633
|
-
Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
633
|
+
Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
634
634
|
"""
|
|
635
635
|
return pulumi.get(self, "name")
|
|
636
636
|
|
|
@@ -32,14 +32,14 @@ class AuthenticationPolicyArgs:
|
|
|
32
32
|
security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
|
|
33
33
|
"""
|
|
34
34
|
The set of arguments for constructing a AuthenticationPolicy resource.
|
|
35
|
-
:param pulumi.Input[str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
36
|
-
:param pulumi.Input[str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
35
|
+
:param pulumi.Input[str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
36
|
+
:param pulumi.Input[str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
37
37
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] authentication_methods: A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
|
|
38
38
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] client_types: A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
|
|
39
39
|
:param pulumi.Input[str] comment: Specifies a comment for the authentication policy.
|
|
40
40
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] mfa_authentication_methods: A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
|
|
41
41
|
:param pulumi.Input[str] mfa_enrollment: Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
|
|
42
|
-
:param pulumi.Input[str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
42
|
+
:param pulumi.Input[str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
43
43
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] security_integrations: A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
|
|
44
44
|
"""
|
|
45
45
|
pulumi.set(__self__, "database", database)
|
|
@@ -63,7 +63,7 @@ class AuthenticationPolicyArgs:
|
|
|
63
63
|
@pulumi.getter
|
|
64
64
|
def database(self) -> pulumi.Input[str]:
|
|
65
65
|
"""
|
|
66
|
-
The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
66
|
+
The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
67
67
|
"""
|
|
68
68
|
return pulumi.get(self, "database")
|
|
69
69
|
|
|
@@ -75,7 +75,7 @@ class AuthenticationPolicyArgs:
|
|
|
75
75
|
@pulumi.getter
|
|
76
76
|
def schema(self) -> pulumi.Input[str]:
|
|
77
77
|
"""
|
|
78
|
-
The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
78
|
+
The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
79
79
|
"""
|
|
80
80
|
return pulumi.get(self, "schema")
|
|
81
81
|
|
|
@@ -147,7 +147,7 @@ class AuthenticationPolicyArgs:
|
|
|
147
147
|
@pulumi.getter
|
|
148
148
|
def name(self) -> Optional[pulumi.Input[str]]:
|
|
149
149
|
"""
|
|
150
|
-
Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
150
|
+
Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
151
151
|
"""
|
|
152
152
|
return pulumi.get(self, "name")
|
|
153
153
|
|
|
@@ -188,13 +188,13 @@ class _AuthenticationPolicyState:
|
|
|
188
188
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] authentication_methods: A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
|
|
189
189
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] client_types: A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
|
|
190
190
|
:param pulumi.Input[str] comment: Specifies a comment for the authentication policy.
|
|
191
|
-
:param pulumi.Input[str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
191
|
+
:param pulumi.Input[str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
192
192
|
:param pulumi.Input[Sequence[pulumi.Input['AuthenticationPolicyDescribeOutputArgs']]] describe_outputs: Outputs the result of `DESCRIBE AUTHENTICATION POLICY` for the given policy.
|
|
193
193
|
:param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
194
194
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] mfa_authentication_methods: A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
|
|
195
195
|
:param pulumi.Input[str] mfa_enrollment: Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
|
|
196
|
-
:param pulumi.Input[str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
197
|
-
:param pulumi.Input[str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
196
|
+
:param pulumi.Input[str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
197
|
+
:param pulumi.Input[str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
198
198
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] security_integrations: A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
|
|
199
199
|
:param pulumi.Input[Sequence[pulumi.Input['AuthenticationPolicyShowOutputArgs']]] show_outputs: Outputs the result of `SHOW AUTHENTICATION POLICIES` for the given policy.
|
|
200
200
|
"""
|
|
@@ -263,7 +263,7 @@ class _AuthenticationPolicyState:
|
|
|
263
263
|
@pulumi.getter
|
|
264
264
|
def database(self) -> Optional[pulumi.Input[str]]:
|
|
265
265
|
"""
|
|
266
|
-
The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
266
|
+
The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
267
267
|
"""
|
|
268
268
|
return pulumi.get(self, "database")
|
|
269
269
|
|
|
@@ -323,7 +323,7 @@ class _AuthenticationPolicyState:
|
|
|
323
323
|
@pulumi.getter
|
|
324
324
|
def name(self) -> Optional[pulumi.Input[str]]:
|
|
325
325
|
"""
|
|
326
|
-
Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
326
|
+
Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
327
327
|
"""
|
|
328
328
|
return pulumi.get(self, "name")
|
|
329
329
|
|
|
@@ -335,7 +335,7 @@ class _AuthenticationPolicyState:
|
|
|
335
335
|
@pulumi.getter
|
|
336
336
|
def schema(self) -> Optional[pulumi.Input[str]]:
|
|
337
337
|
"""
|
|
338
|
-
The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
338
|
+
The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
339
339
|
"""
|
|
340
340
|
return pulumi.get(self, "schema")
|
|
341
341
|
|
|
@@ -395,11 +395,11 @@ class AuthenticationPolicy(pulumi.CustomResource):
|
|
|
395
395
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] authentication_methods: A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
|
|
396
396
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] client_types: A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
|
|
397
397
|
:param pulumi.Input[str] comment: Specifies a comment for the authentication policy.
|
|
398
|
-
:param pulumi.Input[str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
398
|
+
:param pulumi.Input[str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
399
399
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] mfa_authentication_methods: A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
|
|
400
400
|
:param pulumi.Input[str] mfa_enrollment: Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
|
|
401
|
-
:param pulumi.Input[str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
402
|
-
:param pulumi.Input[str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
401
|
+
:param pulumi.Input[str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
402
|
+
:param pulumi.Input[str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
403
403
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] security_integrations: A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
|
|
404
404
|
"""
|
|
405
405
|
...
|
|
@@ -496,13 +496,13 @@ class AuthenticationPolicy(pulumi.CustomResource):
|
|
|
496
496
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] authentication_methods: A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
|
|
497
497
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] client_types: A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
|
|
498
498
|
:param pulumi.Input[str] comment: Specifies a comment for the authentication policy.
|
|
499
|
-
:param pulumi.Input[str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
499
|
+
:param pulumi.Input[str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
500
500
|
:param pulumi.Input[Sequence[pulumi.Input[Union['AuthenticationPolicyDescribeOutputArgs', 'AuthenticationPolicyDescribeOutputArgsDict']]]] describe_outputs: Outputs the result of `DESCRIBE AUTHENTICATION POLICY` for the given policy.
|
|
501
501
|
:param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
502
502
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] mfa_authentication_methods: A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
|
|
503
503
|
:param pulumi.Input[str] mfa_enrollment: Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
|
|
504
|
-
:param pulumi.Input[str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
505
|
-
:param pulumi.Input[str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
504
|
+
:param pulumi.Input[str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
505
|
+
:param pulumi.Input[str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
506
506
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] security_integrations: A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
|
|
507
507
|
:param pulumi.Input[Sequence[pulumi.Input[Union['AuthenticationPolicyShowOutputArgs', 'AuthenticationPolicyShowOutputArgsDict']]]] show_outputs: Outputs the result of `SHOW AUTHENTICATION POLICIES` for the given policy.
|
|
508
508
|
"""
|
|
@@ -552,7 +552,7 @@ class AuthenticationPolicy(pulumi.CustomResource):
|
|
|
552
552
|
@pulumi.getter
|
|
553
553
|
def database(self) -> pulumi.Output[str]:
|
|
554
554
|
"""
|
|
555
|
-
The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
555
|
+
The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
556
556
|
"""
|
|
557
557
|
return pulumi.get(self, "database")
|
|
558
558
|
|
|
@@ -592,7 +592,7 @@ class AuthenticationPolicy(pulumi.CustomResource):
|
|
|
592
592
|
@pulumi.getter
|
|
593
593
|
def name(self) -> pulumi.Output[str]:
|
|
594
594
|
"""
|
|
595
|
-
Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
595
|
+
Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
596
596
|
"""
|
|
597
597
|
return pulumi.get(self, "name")
|
|
598
598
|
|
|
@@ -600,7 +600,7 @@ class AuthenticationPolicy(pulumi.CustomResource):
|
|
|
600
600
|
@pulumi.getter
|
|
601
601
|
def schema(self) -> pulumi.Output[str]:
|
|
602
602
|
"""
|
|
603
|
-
The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
603
|
+
The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
604
604
|
"""
|
|
605
605
|
return pulumi.get(self, "schema")
|
|
606
606
|
|
pulumi_snowflake/database.py
CHANGED
|
@@ -54,7 +54,7 @@ class DatabaseArgs:
|
|
|
54
54
|
:param pulumi.Input[bool] is_transient: Specifies the database as transient. Transient databases do not have a Fail-safe period so they do not incur additional storage costs once they leave Time Travel; however, this means they are also not protected by Fail-safe in the event of a data loss.
|
|
55
55
|
:param pulumi.Input[str] log_level: Specifies the severity level of messages that should be ingested and made available in the active event table. Valid options are: [TRACE DEBUG INFO WARN ERROR FATAL OFF]. Messages at the specified level (and at more severe levels) are ingested. For more information, see [LOG_LEVEL](https://docs.snowflake.com/en/sql-reference/parameters.html#label-log-level).
|
|
56
56
|
:param pulumi.Input[int] max_data_extension_time_in_days: Object parameter that specifies the maximum number of days for which Snowflake can extend the data retention period for tables in the database to prevent streams on the tables from becoming stale. For a detailed description of this parameter, see [MAX*DATA*EXTENSION*TIME*IN_DAYS](https://docs.snowflake.com/en/sql-reference/parameters.html#label-max-data-extension-time-in-days).
|
|
57
|
-
:param pulumi.Input[str] name: Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
57
|
+
:param pulumi.Input[str] name: Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
58
58
|
:param pulumi.Input[bool] quoted_identifiers_ignore_case: If true, the case of quoted identifiers is ignored. For more information, see [QUOTED*IDENTIFIERS*IGNORE_CASE](https://docs.snowflake.com/en/sql-reference/parameters#quoted-identifiers-ignore-case).
|
|
59
59
|
:param pulumi.Input[bool] replace_invalid_characters: Specifies whether to replace invalid UTF-8 characters with the Unicode replacement character (�) in query results for an Iceberg table. You can only set this parameter for tables that use an external Iceberg catalog. For more information, see [REPLACE*INVALID*CHARACTERS](https://docs.snowflake.com/en/sql-reference/parameters#replace-invalid-characters).
|
|
60
60
|
:param pulumi.Input['DatabaseReplicationArgs'] replication: Configures replication for a given database. When specified, this database will be promoted to serve as a primary database for replication. A primary database can be replicated in one or more accounts, allowing users in those accounts to query objects in each secondary (i.e. replica) database.
|
|
@@ -233,7 +233,7 @@ class DatabaseArgs:
|
|
|
233
233
|
@pulumi.getter
|
|
234
234
|
def name(self) -> Optional[pulumi.Input[str]]:
|
|
235
235
|
"""
|
|
236
|
-
Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
236
|
+
Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
237
237
|
"""
|
|
238
238
|
return pulumi.get(self, "name")
|
|
239
239
|
|
|
@@ -400,7 +400,7 @@ class _DatabaseState:
|
|
|
400
400
|
:param pulumi.Input[bool] is_transient: Specifies the database as transient. Transient databases do not have a Fail-safe period so they do not incur additional storage costs once they leave Time Travel; however, this means they are also not protected by Fail-safe in the event of a data loss.
|
|
401
401
|
:param pulumi.Input[str] log_level: Specifies the severity level of messages that should be ingested and made available in the active event table. Valid options are: [TRACE DEBUG INFO WARN ERROR FATAL OFF]. Messages at the specified level (and at more severe levels) are ingested. For more information, see [LOG_LEVEL](https://docs.snowflake.com/en/sql-reference/parameters.html#label-log-level).
|
|
402
402
|
:param pulumi.Input[int] max_data_extension_time_in_days: Object parameter that specifies the maximum number of days for which Snowflake can extend the data retention period for tables in the database to prevent streams on the tables from becoming stale. For a detailed description of this parameter, see [MAX*DATA*EXTENSION*TIME*IN_DAYS](https://docs.snowflake.com/en/sql-reference/parameters.html#label-max-data-extension-time-in-days).
|
|
403
|
-
:param pulumi.Input[str] name: Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
403
|
+
:param pulumi.Input[str] name: Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
404
404
|
:param pulumi.Input[bool] quoted_identifiers_ignore_case: If true, the case of quoted identifiers is ignored. For more information, see [QUOTED*IDENTIFIERS*IGNORE_CASE](https://docs.snowflake.com/en/sql-reference/parameters#quoted-identifiers-ignore-case).
|
|
405
405
|
:param pulumi.Input[bool] replace_invalid_characters: Specifies whether to replace invalid UTF-8 characters with the Unicode replacement character (�) in query results for an Iceberg table. You can only set this parameter for tables that use an external Iceberg catalog. For more information, see [REPLACE*INVALID*CHARACTERS](https://docs.snowflake.com/en/sql-reference/parameters#replace-invalid-characters).
|
|
406
406
|
:param pulumi.Input['DatabaseReplicationArgs'] replication: Configures replication for a given database. When specified, this database will be promoted to serve as a primary database for replication. A primary database can be replicated in one or more accounts, allowing users in those accounts to query objects in each secondary (i.e. replica) database.
|
|
@@ -593,7 +593,7 @@ class _DatabaseState:
|
|
|
593
593
|
@pulumi.getter
|
|
594
594
|
def name(self) -> Optional[pulumi.Input[str]]:
|
|
595
595
|
"""
|
|
596
|
-
Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
596
|
+
Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
597
597
|
"""
|
|
598
598
|
return pulumi.get(self, "name")
|
|
599
599
|
|
|
@@ -768,7 +768,7 @@ class Database(pulumi.CustomResource):
|
|
|
768
768
|
:param pulumi.Input[bool] is_transient: Specifies the database as transient. Transient databases do not have a Fail-safe period so they do not incur additional storage costs once they leave Time Travel; however, this means they are also not protected by Fail-safe in the event of a data loss.
|
|
769
769
|
:param pulumi.Input[str] log_level: Specifies the severity level of messages that should be ingested and made available in the active event table. Valid options are: [TRACE DEBUG INFO WARN ERROR FATAL OFF]. Messages at the specified level (and at more severe levels) are ingested. For more information, see [LOG_LEVEL](https://docs.snowflake.com/en/sql-reference/parameters.html#label-log-level).
|
|
770
770
|
:param pulumi.Input[int] max_data_extension_time_in_days: Object parameter that specifies the maximum number of days for which Snowflake can extend the data retention period for tables in the database to prevent streams on the tables from becoming stale. For a detailed description of this parameter, see [MAX*DATA*EXTENSION*TIME*IN_DAYS](https://docs.snowflake.com/en/sql-reference/parameters.html#label-max-data-extension-time-in-days).
|
|
771
|
-
:param pulumi.Input[str] name: Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
771
|
+
:param pulumi.Input[str] name: Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
772
772
|
:param pulumi.Input[bool] quoted_identifiers_ignore_case: If true, the case of quoted identifiers is ignored. For more information, see [QUOTED*IDENTIFIERS*IGNORE_CASE](https://docs.snowflake.com/en/sql-reference/parameters#quoted-identifiers-ignore-case).
|
|
773
773
|
:param pulumi.Input[bool] replace_invalid_characters: Specifies whether to replace invalid UTF-8 characters with the Unicode replacement character (�) in query results for an Iceberg table. You can only set this parameter for tables that use an external Iceberg catalog. For more information, see [REPLACE*INVALID*CHARACTERS](https://docs.snowflake.com/en/sql-reference/parameters#replace-invalid-characters).
|
|
774
774
|
:param pulumi.Input[Union['DatabaseReplicationArgs', 'DatabaseReplicationArgsDict']] replication: Configures replication for a given database. When specified, this database will be promoted to serve as a primary database for replication. A primary database can be replicated in one or more accounts, allowing users in those accounts to query objects in each secondary (i.e. replica) database.
|
|
@@ -910,7 +910,7 @@ class Database(pulumi.CustomResource):
|
|
|
910
910
|
:param pulumi.Input[bool] is_transient: Specifies the database as transient. Transient databases do not have a Fail-safe period so they do not incur additional storage costs once they leave Time Travel; however, this means they are also not protected by Fail-safe in the event of a data loss.
|
|
911
911
|
:param pulumi.Input[str] log_level: Specifies the severity level of messages that should be ingested and made available in the active event table. Valid options are: [TRACE DEBUG INFO WARN ERROR FATAL OFF]. Messages at the specified level (and at more severe levels) are ingested. For more information, see [LOG_LEVEL](https://docs.snowflake.com/en/sql-reference/parameters.html#label-log-level).
|
|
912
912
|
:param pulumi.Input[int] max_data_extension_time_in_days: Object parameter that specifies the maximum number of days for which Snowflake can extend the data retention period for tables in the database to prevent streams on the tables from becoming stale. For a detailed description of this parameter, see [MAX*DATA*EXTENSION*TIME*IN_DAYS](https://docs.snowflake.com/en/sql-reference/parameters.html#label-max-data-extension-time-in-days).
|
|
913
|
-
:param pulumi.Input[str] name: Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
913
|
+
:param pulumi.Input[str] name: Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
914
914
|
:param pulumi.Input[bool] quoted_identifiers_ignore_case: If true, the case of quoted identifiers is ignored. For more information, see [QUOTED*IDENTIFIERS*IGNORE_CASE](https://docs.snowflake.com/en/sql-reference/parameters#quoted-identifiers-ignore-case).
|
|
915
915
|
:param pulumi.Input[bool] replace_invalid_characters: Specifies whether to replace invalid UTF-8 characters with the Unicode replacement character (�) in query results for an Iceberg table. You can only set this parameter for tables that use an external Iceberg catalog. For more information, see [REPLACE*INVALID*CHARACTERS](https://docs.snowflake.com/en/sql-reference/parameters#replace-invalid-characters).
|
|
916
916
|
:param pulumi.Input[Union['DatabaseReplicationArgs', 'DatabaseReplicationArgsDict']] replication: Configures replication for a given database. When specified, this database will be promoted to serve as a primary database for replication. A primary database can be replicated in one or more accounts, allowing users in those accounts to query objects in each secondary (i.e. replica) database.
|
|
@@ -1042,7 +1042,7 @@ class Database(pulumi.CustomResource):
|
|
|
1042
1042
|
@pulumi.getter
|
|
1043
1043
|
def name(self) -> pulumi.Output[str]:
|
|
1044
1044
|
"""
|
|
1045
|
-
Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `
|
|
1045
|
+
Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
|
|
1046
1046
|
"""
|
|
1047
1047
|
return pulumi.get(self, "name")
|
|
1048
1048
|
|