pulumi-snowflake 0.63.0a1734439451__py3-none-any.whl → 1.0.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of pulumi-snowflake might be problematic. Click here for more details.

Files changed (127) hide show
  1. pulumi_snowflake/__init__.py +82 -74
  2. pulumi_snowflake/_inputs.py +12705 -4876
  3. pulumi_snowflake/account.py +156 -163
  4. pulumi_snowflake/account_parameter.py +16 -16
  5. pulumi_snowflake/account_role.py +9 -9
  6. pulumi_snowflake/api_authentication_integration_with_authorization_code_grant.py +9 -22
  7. pulumi_snowflake/api_authentication_integration_with_client_credentials.py +9 -22
  8. pulumi_snowflake/api_authentication_integration_with_jwt_bearer.py +9 -22
  9. pulumi_snowflake/authentication_policy.py +21 -21
  10. pulumi_snowflake/config/__init__.pyi +8 -86
  11. pulumi_snowflake/config/vars.py +10 -110
  12. pulumi_snowflake/database.py +9 -9
  13. pulumi_snowflake/database_role.py +14 -14
  14. pulumi_snowflake/{unsafe_execute.py → execute.py} +35 -25
  15. pulumi_snowflake/external_oauth_integration.py +27 -27
  16. pulumi_snowflake/external_volume.py +11 -7
  17. pulumi_snowflake/function_java.py +1211 -0
  18. pulumi_snowflake/function_javascript.py +882 -0
  19. pulumi_snowflake/function_python.py +1212 -0
  20. pulumi_snowflake/function_scala.py +1212 -0
  21. pulumi_snowflake/function_sql.py +835 -0
  22. pulumi_snowflake/get_account_roles.py +129 -0
  23. pulumi_snowflake/get_accounts.py +41 -19
  24. pulumi_snowflake/get_alerts.py +4 -0
  25. pulumi_snowflake/get_connections.py +2 -40
  26. pulumi_snowflake/get_cortex_search_services.py +4 -0
  27. pulumi_snowflake/get_current_account.py +4 -0
  28. pulumi_snowflake/get_current_role.py +2 -2
  29. pulumi_snowflake/get_database.py +4 -0
  30. pulumi_snowflake/get_database_role.py +4 -0
  31. pulumi_snowflake/get_database_roles.py +2 -6
  32. pulumi_snowflake/get_databases.py +2 -6
  33. pulumi_snowflake/get_dynamic_tables.py +4 -2
  34. pulumi_snowflake/get_external_functions.py +4 -0
  35. pulumi_snowflake/get_external_tables.py +4 -0
  36. pulumi_snowflake/get_failover_groups.py +4 -2
  37. pulumi_snowflake/get_file_formats.py +4 -0
  38. pulumi_snowflake/get_functions.py +4 -0
  39. pulumi_snowflake/get_grants.py +0 -4
  40. pulumi_snowflake/get_masking_policies.py +2 -6
  41. pulumi_snowflake/get_materialized_views.py +4 -0
  42. pulumi_snowflake/get_network_policies.py +2 -6
  43. pulumi_snowflake/get_parameters.py +4 -0
  44. pulumi_snowflake/get_pipes.py +4 -0
  45. pulumi_snowflake/get_procedures.py +4 -0
  46. pulumi_snowflake/get_resource_monitors.py +2 -6
  47. pulumi_snowflake/get_row_access_policies.py +2 -6
  48. pulumi_snowflake/get_schemas.py +6 -4
  49. pulumi_snowflake/get_secrets.py +2 -6
  50. pulumi_snowflake/get_security_integrations.py +2 -6
  51. pulumi_snowflake/get_sequences.py +4 -0
  52. pulumi_snowflake/get_shares.py +4 -0
  53. pulumi_snowflake/get_stages.py +4 -0
  54. pulumi_snowflake/get_storage_integrations.py +4 -0
  55. pulumi_snowflake/get_streamlits.py +2 -6
  56. pulumi_snowflake/get_streams.py +2 -6
  57. pulumi_snowflake/get_system_generate_scim_access_token.py +4 -0
  58. pulumi_snowflake/get_system_get_private_link_config.py +4 -0
  59. pulumi_snowflake/get_system_get_snowflake_platform_info.py +2 -2
  60. pulumi_snowflake/get_tables.py +4 -0
  61. pulumi_snowflake/get_tags.py +2 -6
  62. pulumi_snowflake/get_tasks.py +0 -4
  63. pulumi_snowflake/get_users.py +2 -6
  64. pulumi_snowflake/get_views.py +2 -6
  65. pulumi_snowflake/get_warehouses.py +2 -6
  66. pulumi_snowflake/grant_account_role.py +21 -21
  67. pulumi_snowflake/grant_application_role.py +7 -7
  68. pulumi_snowflake/grant_database_role.py +28 -28
  69. pulumi_snowflake/grant_ownership.py +14 -14
  70. pulumi_snowflake/grant_privileges_to_account_role.py +14 -14
  71. pulumi_snowflake/grant_privileges_to_database_role.py +14 -14
  72. pulumi_snowflake/grant_privileges_to_share.py +42 -42
  73. pulumi_snowflake/legacy_service_user.py +21 -21
  74. pulumi_snowflake/masking_policy.py +21 -21
  75. pulumi_snowflake/network_policy.py +23 -23
  76. pulumi_snowflake/oauth_integration_for_custom_clients.py +73 -46
  77. pulumi_snowflake/oauth_integration_for_partner_applications.py +57 -30
  78. pulumi_snowflake/outputs.py +10029 -4056
  79. pulumi_snowflake/password_policy.py +12 -2
  80. pulumi_snowflake/primary_connection.py +16 -16
  81. pulumi_snowflake/procedure_java.py +1273 -0
  82. pulumi_snowflake/procedure_javascript.py +895 -0
  83. pulumi_snowflake/procedure_python.py +1226 -0
  84. pulumi_snowflake/procedure_scala.py +1273 -0
  85. pulumi_snowflake/procedure_sql.py +895 -0
  86. pulumi_snowflake/provider.py +40 -527
  87. pulumi_snowflake/pulumi-plugin.json +1 -1
  88. pulumi_snowflake/resource_monitor.py +16 -20
  89. pulumi_snowflake/row_access_policy.py +21 -21
  90. pulumi_snowflake/saml2_integration.py +9 -9
  91. pulumi_snowflake/schema.py +14 -18
  92. pulumi_snowflake/scim_integration.py +16 -16
  93. pulumi_snowflake/secondary_connection.py +16 -16
  94. pulumi_snowflake/secondary_database.py +16 -16
  95. pulumi_snowflake/secret_with_authorization_code_grant.py +28 -28
  96. pulumi_snowflake/secret_with_basic_authentication.py +21 -21
  97. pulumi_snowflake/secret_with_client_credentials.py +28 -28
  98. pulumi_snowflake/secret_with_generic_string.py +21 -21
  99. pulumi_snowflake/service_user.py +21 -21
  100. pulumi_snowflake/shared_database.py +16 -16
  101. pulumi_snowflake/stream_on_directory_table.py +28 -41
  102. pulumi_snowflake/stream_on_external_table.py +28 -41
  103. pulumi_snowflake/stream_on_table.py +28 -41
  104. pulumi_snowflake/stream_on_view.py +28 -41
  105. pulumi_snowflake/streamlit.py +42 -46
  106. pulumi_snowflake/tag.py +28 -28
  107. pulumi_snowflake/tag_association.py +28 -86
  108. pulumi_snowflake/task.py +58 -62
  109. pulumi_snowflake/user.py +21 -21
  110. pulumi_snowflake/view.py +28 -41
  111. pulumi_snowflake/warehouse.py +16 -16
  112. {pulumi_snowflake-0.63.0a1734439451.dist-info → pulumi_snowflake-1.0.0.dist-info}/METADATA +1 -1
  113. pulumi_snowflake-1.0.0.dist-info/RECORD +148 -0
  114. pulumi_snowflake/database_old.py +0 -489
  115. pulumi_snowflake/function.py +0 -901
  116. pulumi_snowflake/get_role.py +0 -126
  117. pulumi_snowflake/get_roles.py +0 -133
  118. pulumi_snowflake/oauth_integration.py +0 -610
  119. pulumi_snowflake/procedure.py +0 -910
  120. pulumi_snowflake/role.py +0 -250
  121. pulumi_snowflake/saml_integration.py +0 -916
  122. pulumi_snowflake/session_parameter.py +0 -301
  123. pulumi_snowflake/stream.py +0 -643
  124. pulumi_snowflake/tag_masking_policy_association.py +0 -211
  125. pulumi_snowflake-0.63.0a1734439451.dist-info/RECORD +0 -148
  126. {pulumi_snowflake-0.63.0a1734439451.dist-info → pulumi_snowflake-1.0.0.dist-info}/WHEEL +0 -0
  127. {pulumi_snowflake-0.63.0a1734439451.dist-info → pulumi_snowflake-1.0.0.dist-info}/top_level.txt +0 -0
pulumi_snowflake/oauth_integration_for_custom_clients.py CHANGED
@@ -21,9 +21,9 @@ __all__ = ['OauthIntegrationForCustomClientsArgs', 'OauthIntegrationForCustomCli
21
21
  @pulumi.input_type
22
22
  class OauthIntegrationForCustomClientsArgs:
23
23
  def __init__(__self__, *,
24
- blocked_roles_lists: pulumi.Input[Sequence[pulumi.Input[str]]],
25
24
  oauth_client_type: pulumi.Input[str],
26
25
  oauth_redirect_uri: pulumi.Input[str],
26
+ blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
27
27
  comment: Optional[pulumi.Input[str]] = None,
28
28
  enabled: Optional[pulumi.Input[str]] = None,
29
29
  name: Optional[pulumi.Input[str]] = None,
@@ -38,23 +38,24 @@ class OauthIntegrationForCustomClientsArgs:
38
38
  pre_authorized_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
39
39
  """
40
40
  The set of arguments for constructing a OauthIntegrationForCustomClients resource.
41
- :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating.
42
41
  :param pulumi.Input[str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
43
42
  :param pulumi.Input[str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
43
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
44
44
  :param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
45
45
  :param pulumi.Input[str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
46
- :param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
47
- :param pulumi.Input[str] network_policy: Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token.
46
+ :param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
47
+ :param pulumi.Input[str] network_policy: Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token. For more information about this resource, see docs.
48
48
  :param pulumi.Input[str] oauth_allow_non_tls_redirect_uri: If true, allows setting oauth*redirect*uri to a URI not protected by TLS. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
49
49
  :param pulumi.Input[str] oauth_enforce_pkce: Boolean that specifies whether Proof Key for Code Exchange (PKCE) should be required for the integration. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
50
50
  :param pulumi.Input[str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
51
51
  :param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
52
52
  :param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
53
- :param pulumi.Input[Sequence[pulumi.Input[str]]] pre_authorized_roles_lists: A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating.
53
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] pre_authorized_roles_lists: A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating. For more information about this resource, see docs.
54
54
  """
55
- pulumi.set(__self__, "blocked_roles_lists", blocked_roles_lists)
56
55
  pulumi.set(__self__, "oauth_client_type", oauth_client_type)
57
56
  pulumi.set(__self__, "oauth_redirect_uri", oauth_redirect_uri)
57
+ if blocked_roles_lists is not None:
58
+ pulumi.set(__self__, "blocked_roles_lists", blocked_roles_lists)
58
59
  if comment is not None:
59
60
  pulumi.set(__self__, "comment", comment)
60
61
  if enabled is not None:
@@ -80,18 +81,6 @@ class OauthIntegrationForCustomClientsArgs:
80
81
  if pre_authorized_roles_lists is not None:
81
82
  pulumi.set(__self__, "pre_authorized_roles_lists", pre_authorized_roles_lists)
82
83
 
83
- @property
84
- @pulumi.getter(name="blockedRolesLists")
85
- def blocked_roles_lists(self) -> pulumi.Input[Sequence[pulumi.Input[str]]]:
86
- """
87
- A set of Snowflake roles that a user cannot explicitly consent to using after authenticating.
88
- """
89
- return pulumi.get(self, "blocked_roles_lists")
90
-
91
- @blocked_roles_lists.setter
92
- def blocked_roles_lists(self, value: pulumi.Input[Sequence[pulumi.Input[str]]]):
93
- pulumi.set(self, "blocked_roles_lists", value)
94
-
95
84
  @property
96
85
  @pulumi.getter(name="oauthClientType")
97
86
  def oauth_client_type(self) -> pulumi.Input[str]:
@@ -116,6 +105,18 @@ class OauthIntegrationForCustomClientsArgs:
116
105
  def oauth_redirect_uri(self, value: pulumi.Input[str]):
117
106
  pulumi.set(self, "oauth_redirect_uri", value)
118
107
 
108
+ @property
109
+ @pulumi.getter(name="blockedRolesLists")
110
+ def blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
111
+ """
112
+ A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
113
+ """
114
+ return pulumi.get(self, "blocked_roles_lists")
115
+
116
+ @blocked_roles_lists.setter
117
+ def blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
118
+ pulumi.set(self, "blocked_roles_lists", value)
119
+
119
120
  @property
120
121
  @pulumi.getter
121
122
  def comment(self) -> Optional[pulumi.Input[str]]:
@@ -144,7 +145,7 @@ class OauthIntegrationForCustomClientsArgs:
144
145
  @pulumi.getter
145
146
  def name(self) -> Optional[pulumi.Input[str]]:
146
147
  """
147
- Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
148
+ Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
148
149
  """
149
150
  return pulumi.get(self, "name")
150
151
 
@@ -156,7 +157,7 @@ class OauthIntegrationForCustomClientsArgs:
156
157
  @pulumi.getter(name="networkPolicy")
157
158
  def network_policy(self) -> Optional[pulumi.Input[str]]:
158
159
  """
159
- Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token.
160
+ Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token. For more information about this resource, see docs.
160
161
  """
161
162
  return pulumi.get(self, "network_policy")
162
163
 
@@ -246,7 +247,7 @@ class OauthIntegrationForCustomClientsArgs:
246
247
  @pulumi.getter(name="preAuthorizedRolesLists")
247
248
  def pre_authorized_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
248
249
  """
249
- A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating.
250
+ A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating. For more information about this resource, see docs.
250
251
  """
251
252
  return pulumi.get(self, "pre_authorized_roles_lists")
252
253
 
@@ -275,16 +276,17 @@ class _OauthIntegrationForCustomClientsState:
275
276
  oauth_refresh_token_validity: Optional[pulumi.Input[int]] = None,
276
277
  oauth_use_secondary_roles: Optional[pulumi.Input[str]] = None,
277
278
  pre_authorized_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
279
+ related_parameters: Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForCustomClientsRelatedParameterArgs']]]] = None,
278
280
  show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForCustomClientsShowOutputArgs']]]] = None):
279
281
  """
280
282
  Input properties used for looking up and filtering OauthIntegrationForCustomClients resources.
281
- :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating.
283
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
282
284
  :param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
283
285
  :param pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForCustomClientsDescribeOutputArgs']]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATION` for the given integration.
284
286
  :param pulumi.Input[str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
285
287
  :param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
286
- :param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
287
- :param pulumi.Input[str] network_policy: Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token.
288
+ :param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
289
+ :param pulumi.Input[str] network_policy: Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token. For more information about this resource, see docs.
288
290
  :param pulumi.Input[str] oauth_allow_non_tls_redirect_uri: If true, allows setting oauth*redirect*uri to a URI not protected by TLS. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
289
291
  :param pulumi.Input[str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
290
292
  :param pulumi.Input[str] oauth_enforce_pkce: Boolean that specifies whether Proof Key for Code Exchange (PKCE) should be required for the integration. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
@@ -292,7 +294,8 @@ class _OauthIntegrationForCustomClientsState:
292
294
  :param pulumi.Input[str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
293
295
  :param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
294
296
  :param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
295
- :param pulumi.Input[Sequence[pulumi.Input[str]]] pre_authorized_roles_lists: A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating.
297
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] pre_authorized_roles_lists: A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating. For more information about this resource, see docs.
298
+ :param pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForCustomClientsRelatedParameterArgs']]] related_parameters: Parameters related to this security integration.
296
299
  :param pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForCustomClientsShowOutputArgs']]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATION` for the given integration.
297
300
  """
298
301
  if blocked_roles_lists is not None:
@@ -329,6 +332,8 @@ class _OauthIntegrationForCustomClientsState:
329
332
  pulumi.set(__self__, "oauth_use_secondary_roles", oauth_use_secondary_roles)
330
333
  if pre_authorized_roles_lists is not None:
331
334
  pulumi.set(__self__, "pre_authorized_roles_lists", pre_authorized_roles_lists)
335
+ if related_parameters is not None:
336
+ pulumi.set(__self__, "related_parameters", related_parameters)
332
337
  if show_outputs is not None:
333
338
  pulumi.set(__self__, "show_outputs", show_outputs)
334
339
 
@@ -336,7 +341,7 @@ class _OauthIntegrationForCustomClientsState:
336
341
  @pulumi.getter(name="blockedRolesLists")
337
342
  def blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
338
343
  """
339
- A set of Snowflake roles that a user cannot explicitly consent to using after authenticating.
344
+ A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
340
345
  """
341
346
  return pulumi.get(self, "blocked_roles_lists")
342
347
 
@@ -396,7 +401,7 @@ class _OauthIntegrationForCustomClientsState:
396
401
  @pulumi.getter
397
402
  def name(self) -> Optional[pulumi.Input[str]]:
398
403
  """
399
- Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
404
+ Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
400
405
  """
401
406
  return pulumi.get(self, "name")
402
407
 
@@ -408,7 +413,7 @@ class _OauthIntegrationForCustomClientsState:
408
413
  @pulumi.getter(name="networkPolicy")
409
414
  def network_policy(self) -> Optional[pulumi.Input[str]]:
410
415
  """
411
- Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token.
416
+ Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token. For more information about this resource, see docs.
412
417
  """
413
418
  return pulumi.get(self, "network_policy")
414
419
 
@@ -522,7 +527,7 @@ class _OauthIntegrationForCustomClientsState:
522
527
  @pulumi.getter(name="preAuthorizedRolesLists")
523
528
  def pre_authorized_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
524
529
  """
525
- A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating.
530
+ A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating. For more information about this resource, see docs.
526
531
  """
527
532
  return pulumi.get(self, "pre_authorized_roles_lists")
528
533
 
@@ -530,6 +535,18 @@ class _OauthIntegrationForCustomClientsState:
530
535
  def pre_authorized_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
531
536
  pulumi.set(self, "pre_authorized_roles_lists", value)
532
537
 
538
+ @property
539
+ @pulumi.getter(name="relatedParameters")
540
+ def related_parameters(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForCustomClientsRelatedParameterArgs']]]]:
541
+ """
542
+ Parameters related to this security integration.
543
+ """
544
+ return pulumi.get(self, "related_parameters")
545
+
546
+ @related_parameters.setter
547
+ def related_parameters(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForCustomClientsRelatedParameterArgs']]]]):
548
+ pulumi.set(self, "related_parameters", value)
549
+
533
550
  @property
534
551
  @pulumi.getter(name="showOutputs")
535
552
  def show_outputs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForCustomClientsShowOutputArgs']]]]:
@@ -568,16 +585,16 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
568
585
  ## Import
569
586
 
570
587
  ```sh
571
- $ pulumi import snowflake:index/oauthIntegrationForCustomClients:OauthIntegrationForCustomClients example "name"
588
+ $ pulumi import snowflake:index/oauthIntegrationForCustomClients:OauthIntegrationForCustomClients example '"<integration_name>"'
572
589
  ```
573
590
 
574
591
  :param str resource_name: The name of the resource.
575
592
  :param pulumi.ResourceOptions opts: Options for the resource.
576
- :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating.
593
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
577
594
  :param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
578
595
  :param pulumi.Input[str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
579
- :param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
580
- :param pulumi.Input[str] network_policy: Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token.
596
+ :param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
597
+ :param pulumi.Input[str] network_policy: Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token. For more information about this resource, see docs.
581
598
  :param pulumi.Input[str] oauth_allow_non_tls_redirect_uri: If true, allows setting oauth*redirect*uri to a URI not protected by TLS. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
582
599
  :param pulumi.Input[str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
583
600
  :param pulumi.Input[str] oauth_enforce_pkce: Boolean that specifies whether Proof Key for Code Exchange (PKCE) should be required for the integration. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
@@ -585,7 +602,7 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
585
602
  :param pulumi.Input[str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
586
603
  :param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
587
604
  :param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
588
- :param pulumi.Input[Sequence[pulumi.Input[str]]] pre_authorized_roles_lists: A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating.
605
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] pre_authorized_roles_lists: A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating. For more information about this resource, see docs.
589
606
  """
590
607
  ...
591
608
  @overload
@@ -597,7 +614,7 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
597
614
  ## Import
598
615
 
599
616
  ```sh
600
- $ pulumi import snowflake:index/oauthIntegrationForCustomClients:OauthIntegrationForCustomClients example "name"
617
+ $ pulumi import snowflake:index/oauthIntegrationForCustomClients:OauthIntegrationForCustomClients example '"<integration_name>"'
601
618
  ```
602
619
 
603
620
  :param str resource_name: The name of the resource.
@@ -639,8 +656,6 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
639
656
  raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
640
657
  __props__ = OauthIntegrationForCustomClientsArgs.__new__(OauthIntegrationForCustomClientsArgs)
641
658
 
642
- if blocked_roles_lists is None and not opts.urn:
643
- raise TypeError("Missing required property 'blocked_roles_lists'")
644
659
  __props__.__dict__["blocked_roles_lists"] = blocked_roles_lists
645
660
  __props__.__dict__["comment"] = comment
646
661
  __props__.__dict__["enabled"] = enabled
@@ -662,6 +677,7 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
662
677
  __props__.__dict__["pre_authorized_roles_lists"] = pre_authorized_roles_lists
663
678
  __props__.__dict__["describe_outputs"] = None
664
679
  __props__.__dict__["fully_qualified_name"] = None
680
+ __props__.__dict__["related_parameters"] = None
665
681
  __props__.__dict__["show_outputs"] = None
666
682
  super(OauthIntegrationForCustomClients, __self__).__init__(
667
683
  'snowflake:index/oauthIntegrationForCustomClients:OauthIntegrationForCustomClients',
@@ -690,6 +706,7 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
690
706
  oauth_refresh_token_validity: Optional[pulumi.Input[int]] = None,
691
707
  oauth_use_secondary_roles: Optional[pulumi.Input[str]] = None,
692
708
  pre_authorized_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
709
+ related_parameters: Optional[pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForCustomClientsRelatedParameterArgs', 'OauthIntegrationForCustomClientsRelatedParameterArgsDict']]]]] = None,
693
710
  show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForCustomClientsShowOutputArgs', 'OauthIntegrationForCustomClientsShowOutputArgsDict']]]]] = None) -> 'OauthIntegrationForCustomClients':
694
711
  """
695
712
  Get an existing OauthIntegrationForCustomClients resource's state with the given name, id, and optional extra
@@ -698,13 +715,13 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
698
715
  :param str resource_name: The unique name of the resulting resource.
699
716
  :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
700
717
  :param pulumi.ResourceOptions opts: Options for the resource.
701
- :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating.
718
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
702
719
  :param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
703
720
  :param pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForCustomClientsDescribeOutputArgs', 'OauthIntegrationForCustomClientsDescribeOutputArgsDict']]]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATION` for the given integration.
704
721
  :param pulumi.Input[str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
705
722
  :param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
706
- :param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
707
- :param pulumi.Input[str] network_policy: Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token.
723
+ :param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
724
+ :param pulumi.Input[str] network_policy: Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token. For more information about this resource, see docs.
708
725
  :param pulumi.Input[str] oauth_allow_non_tls_redirect_uri: If true, allows setting oauth*redirect*uri to a URI not protected by TLS. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
709
726
  :param pulumi.Input[str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
710
727
  :param pulumi.Input[str] oauth_enforce_pkce: Boolean that specifies whether Proof Key for Code Exchange (PKCE) should be required for the integration. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
@@ -712,7 +729,8 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
712
729
  :param pulumi.Input[str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
713
730
  :param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
714
731
  :param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
715
- :param pulumi.Input[Sequence[pulumi.Input[str]]] pre_authorized_roles_lists: A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating.
732
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] pre_authorized_roles_lists: A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating. For more information about this resource, see docs.
733
+ :param pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForCustomClientsRelatedParameterArgs', 'OauthIntegrationForCustomClientsRelatedParameterArgsDict']]]] related_parameters: Parameters related to this security integration.
716
734
  :param pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForCustomClientsShowOutputArgs', 'OauthIntegrationForCustomClientsShowOutputArgsDict']]]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATION` for the given integration.
717
735
  """
718
736
  opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
@@ -736,14 +754,15 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
736
754
  __props__.__dict__["oauth_refresh_token_validity"] = oauth_refresh_token_validity
737
755
  __props__.__dict__["oauth_use_secondary_roles"] = oauth_use_secondary_roles
738
756
  __props__.__dict__["pre_authorized_roles_lists"] = pre_authorized_roles_lists
757
+ __props__.__dict__["related_parameters"] = related_parameters
739
758
  __props__.__dict__["show_outputs"] = show_outputs
740
759
  return OauthIntegrationForCustomClients(resource_name, opts=opts, __props__=__props__)
741
760
 
742
761
  @property
743
762
  @pulumi.getter(name="blockedRolesLists")
744
- def blocked_roles_lists(self) -> pulumi.Output[Sequence[str]]:
763
+ def blocked_roles_lists(self) -> pulumi.Output[Optional[Sequence[str]]]:
745
764
  """
746
- A set of Snowflake roles that a user cannot explicitly consent to using after authenticating.
765
+ A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
747
766
  """
748
767
  return pulumi.get(self, "blocked_roles_lists")
749
768
 
@@ -783,7 +802,7 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
783
802
  @pulumi.getter
784
803
  def name(self) -> pulumi.Output[str]:
785
804
  """
786
- Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
805
+ Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
787
806
  """
788
807
  return pulumi.get(self, "name")
789
808
 
@@ -791,7 +810,7 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
791
810
  @pulumi.getter(name="networkPolicy")
792
811
  def network_policy(self) -> pulumi.Output[Optional[str]]:
793
812
  """
794
- Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token.
813
+ Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token. For more information about this resource, see docs.
795
814
  """
796
815
  return pulumi.get(self, "network_policy")
797
816
 
@@ -865,10 +884,18 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
865
884
  @pulumi.getter(name="preAuthorizedRolesLists")
866
885
  def pre_authorized_roles_lists(self) -> pulumi.Output[Optional[Sequence[str]]]:
867
886
  """
868
- A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating.
887
+ A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating. For more information about this resource, see docs.
869
888
  """
870
889
  return pulumi.get(self, "pre_authorized_roles_lists")
871
890
 
891
+ @property
892
+ @pulumi.getter(name="relatedParameters")
893
+ def related_parameters(self) -> pulumi.Output[Sequence['outputs.OauthIntegrationForCustomClientsRelatedParameter']]:
894
+ """
895
+ Parameters related to this security integration.
896
+ """
897
+ return pulumi.get(self, "related_parameters")
898
+
872
899
  @property
873
900
  @pulumi.getter(name="showOutputs")
874
901
  def show_outputs(self) -> pulumi.Output[Sequence['outputs.OauthIntegrationForCustomClientsShowOutput']]:
pulumi_snowflake/oauth_integration_for_partner_applications.py CHANGED
@@ -21,8 +21,8 @@ __all__ = ['OauthIntegrationForPartnerApplicationsArgs', 'OauthIntegrationForPar
21
21
  @pulumi.input_type
22
22
  class OauthIntegrationForPartnerApplicationsArgs:
23
23
  def __init__(__self__, *,
24
- blocked_roles_lists: pulumi.Input[Sequence[pulumi.Input[str]]],
25
24
  oauth_client: pulumi.Input[str],
25
+ blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
26
26
  comment: Optional[pulumi.Input[str]] = None,
27
27
  enabled: Optional[pulumi.Input[str]] = None,
28
28
  name: Optional[pulumi.Input[str]] = None,
@@ -32,17 +32,18 @@ class OauthIntegrationForPartnerApplicationsArgs:
32
32
  oauth_use_secondary_roles: Optional[pulumi.Input[str]] = None):
33
33
  """
34
34
  The set of arguments for constructing a OauthIntegrationForPartnerApplications resource.
35
- :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating.
36
35
  :param pulumi.Input[str] oauth_client: Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
36
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
37
37
  :param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
38
38
  :param pulumi.Input[str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
39
- :param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
39
+ :param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
40
40
  :param pulumi.Input[str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
41
41
  :param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
42
42
  :param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
43
43
  """
44
- pulumi.set(__self__, "blocked_roles_lists", blocked_roles_lists)
45
44
  pulumi.set(__self__, "oauth_client", oauth_client)
45
+ if blocked_roles_lists is not None:
46
+ pulumi.set(__self__, "blocked_roles_lists", blocked_roles_lists)
46
47
  if comment is not None:
47
48
  pulumi.set(__self__, "comment", comment)
48
49
  if enabled is not None:
@@ -58,18 +59,6 @@ class OauthIntegrationForPartnerApplicationsArgs:
58
59
  if oauth_use_secondary_roles is not None:
59
60
  pulumi.set(__self__, "oauth_use_secondary_roles", oauth_use_secondary_roles)
60
61
 
61
- @property
62
- @pulumi.getter(name="blockedRolesLists")
63
- def blocked_roles_lists(self) -> pulumi.Input[Sequence[pulumi.Input[str]]]:
64
- """
65
- A set of Snowflake roles that a user cannot explicitly consent to using after authenticating.
66
- """
67
- return pulumi.get(self, "blocked_roles_lists")
68
-
69
- @blocked_roles_lists.setter
70
- def blocked_roles_lists(self, value: pulumi.Input[Sequence[pulumi.Input[str]]]):
71
- pulumi.set(self, "blocked_roles_lists", value)
72
-
73
62
  @property
74
63
  @pulumi.getter(name="oauthClient")
75
64
  def oauth_client(self) -> pulumi.Input[str]:
@@ -82,6 +71,18 @@ class OauthIntegrationForPartnerApplicationsArgs:
82
71
  def oauth_client(self, value: pulumi.Input[str]):
83
72
  pulumi.set(self, "oauth_client", value)
84
73
 
74
+ @property
75
+ @pulumi.getter(name="blockedRolesLists")
76
+ def blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
77
+ """
78
+ A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
79
+ """
80
+ return pulumi.get(self, "blocked_roles_lists")
81
+
82
+ @blocked_roles_lists.setter
83
+ def blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
84
+ pulumi.set(self, "blocked_roles_lists", value)
85
+
85
86
  @property
86
87
  @pulumi.getter
87
88
  def comment(self) -> Optional[pulumi.Input[str]]:
@@ -110,7 +111,7 @@ class OauthIntegrationForPartnerApplicationsArgs:
110
111
  @pulumi.getter
111
112
  def name(self) -> Optional[pulumi.Input[str]]:
112
113
  """
113
- Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
114
+ Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
114
115
  """
115
116
  return pulumi.get(self, "name")
116
117
 
@@ -178,19 +179,21 @@ class _OauthIntegrationForPartnerApplicationsState:
178
179
  oauth_redirect_uri: Optional[pulumi.Input[str]] = None,
179
180
  oauth_refresh_token_validity: Optional[pulumi.Input[int]] = None,
180
181
  oauth_use_secondary_roles: Optional[pulumi.Input[str]] = None,
182
+ related_parameters: Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForPartnerApplicationsRelatedParameterArgs']]]] = None,
181
183
  show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForPartnerApplicationsShowOutputArgs']]]] = None):
182
184
  """
183
185
  Input properties used for looking up and filtering OauthIntegrationForPartnerApplications resources.
184
- :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating.
186
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
185
187
  :param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
186
188
  :param pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForPartnerApplicationsDescribeOutputArgs']]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATION` for the given integration.
187
189
  :param pulumi.Input[str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
188
190
  :param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
189
- :param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
191
+ :param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
190
192
  :param pulumi.Input[str] oauth_client: Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
191
193
  :param pulumi.Input[str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
192
194
  :param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
193
195
  :param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
196
+ :param pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForPartnerApplicationsRelatedParameterArgs']]] related_parameters: Parameters related to this security integration.
194
197
  :param pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForPartnerApplicationsShowOutputArgs']]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATION` for the given integration.
195
198
  """
196
199
  if blocked_roles_lists is not None:
@@ -215,6 +218,8 @@ class _OauthIntegrationForPartnerApplicationsState:
215
218
  pulumi.set(__self__, "oauth_refresh_token_validity", oauth_refresh_token_validity)
216
219
  if oauth_use_secondary_roles is not None:
217
220
  pulumi.set(__self__, "oauth_use_secondary_roles", oauth_use_secondary_roles)
221
+ if related_parameters is not None:
222
+ pulumi.set(__self__, "related_parameters", related_parameters)
218
223
  if show_outputs is not None:
219
224
  pulumi.set(__self__, "show_outputs", show_outputs)
220
225
 
@@ -222,7 +227,7 @@ class _OauthIntegrationForPartnerApplicationsState:
222
227
  @pulumi.getter(name="blockedRolesLists")
223
228
  def blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
224
229
  """
225
- A set of Snowflake roles that a user cannot explicitly consent to using after authenticating.
230
+ A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
226
231
  """
227
232
  return pulumi.get(self, "blocked_roles_lists")
228
233
 
@@ -282,7 +287,7 @@ class _OauthIntegrationForPartnerApplicationsState:
282
287
  @pulumi.getter
283
288
  def name(self) -> Optional[pulumi.Input[str]]:
284
289
  """
285
- Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
290
+ Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
286
291
  """
287
292
  return pulumi.get(self, "name")
288
293
 
@@ -347,6 +352,18 @@ class _OauthIntegrationForPartnerApplicationsState:
347
352
  def oauth_use_secondary_roles(self, value: Optional[pulumi.Input[str]]):
348
353
  pulumi.set(self, "oauth_use_secondary_roles", value)
349
354
 
355
+ @property
356
+ @pulumi.getter(name="relatedParameters")
357
+ def related_parameters(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForPartnerApplicationsRelatedParameterArgs']]]]:
358
+ """
359
+ Parameters related to this security integration.
360
+ """
361
+ return pulumi.get(self, "related_parameters")
362
+
363
+ @related_parameters.setter
364
+ def related_parameters(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForPartnerApplicationsRelatedParameterArgs']]]]):
365
+ pulumi.set(self, "related_parameters", value)
366
+
350
367
  @property
351
368
  @pulumi.getter(name="showOutputs")
352
369
  def show_outputs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForPartnerApplicationsShowOutputArgs']]]]:
@@ -384,10 +401,10 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
384
401
 
385
402
  :param str resource_name: The name of the resource.
386
403
  :param pulumi.ResourceOptions opts: Options for the resource.
387
- :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating.
404
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
388
405
  :param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
389
406
  :param pulumi.Input[str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
390
- :param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
407
+ :param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
391
408
  :param pulumi.Input[str] oauth_client: Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
392
409
  :param pulumi.Input[str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
393
410
  :param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
@@ -439,8 +456,6 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
439
456
  raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
440
457
  __props__ = OauthIntegrationForPartnerApplicationsArgs.__new__(OauthIntegrationForPartnerApplicationsArgs)
441
458
 
442
- if blocked_roles_lists is None and not opts.urn:
443
- raise TypeError("Missing required property 'blocked_roles_lists'")
444
459
  __props__.__dict__["blocked_roles_lists"] = blocked_roles_lists
445
460
  __props__.__dict__["comment"] = comment
446
461
  __props__.__dict__["enabled"] = enabled
@@ -454,6 +469,7 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
454
469
  __props__.__dict__["oauth_use_secondary_roles"] = oauth_use_secondary_roles
455
470
  __props__.__dict__["describe_outputs"] = None
456
471
  __props__.__dict__["fully_qualified_name"] = None
472
+ __props__.__dict__["related_parameters"] = None
457
473
  __props__.__dict__["show_outputs"] = None
458
474
  super(OauthIntegrationForPartnerApplications, __self__).__init__(
459
475
  'snowflake:index/oauthIntegrationForPartnerApplications:OauthIntegrationForPartnerApplications',
@@ -476,6 +492,7 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
476
492
  oauth_redirect_uri: Optional[pulumi.Input[str]] = None,
477
493
  oauth_refresh_token_validity: Optional[pulumi.Input[int]] = None,
478
494
  oauth_use_secondary_roles: Optional[pulumi.Input[str]] = None,
495
+ related_parameters: Optional[pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForPartnerApplicationsRelatedParameterArgs', 'OauthIntegrationForPartnerApplicationsRelatedParameterArgsDict']]]]] = None,
479
496
  show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForPartnerApplicationsShowOutputArgs', 'OauthIntegrationForPartnerApplicationsShowOutputArgsDict']]]]] = None) -> 'OauthIntegrationForPartnerApplications':
480
497
  """
481
498
  Get an existing OauthIntegrationForPartnerApplications resource's state with the given name, id, and optional extra
@@ -484,16 +501,17 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
484
501
  :param str resource_name: The unique name of the resulting resource.
485
502
  :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
486
503
  :param pulumi.ResourceOptions opts: Options for the resource.
487
- :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating.
504
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
488
505
  :param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
489
506
  :param pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForPartnerApplicationsDescribeOutputArgs', 'OauthIntegrationForPartnerApplicationsDescribeOutputArgsDict']]]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATION` for the given integration.
490
507
  :param pulumi.Input[str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
491
508
  :param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
492
- :param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
509
+ :param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
493
510
  :param pulumi.Input[str] oauth_client: Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
494
511
  :param pulumi.Input[str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
495
512
  :param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
496
513
  :param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
514
+ :param pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForPartnerApplicationsRelatedParameterArgs', 'OauthIntegrationForPartnerApplicationsRelatedParameterArgsDict']]]] related_parameters: Parameters related to this security integration.
497
515
  :param pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForPartnerApplicationsShowOutputArgs', 'OauthIntegrationForPartnerApplicationsShowOutputArgsDict']]]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATION` for the given integration.
498
516
  """
499
517
  opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
@@ -511,14 +529,15 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
511
529
  __props__.__dict__["oauth_redirect_uri"] = oauth_redirect_uri
512
530
  __props__.__dict__["oauth_refresh_token_validity"] = oauth_refresh_token_validity
513
531
  __props__.__dict__["oauth_use_secondary_roles"] = oauth_use_secondary_roles
532
+ __props__.__dict__["related_parameters"] = related_parameters
514
533
  __props__.__dict__["show_outputs"] = show_outputs
515
534
  return OauthIntegrationForPartnerApplications(resource_name, opts=opts, __props__=__props__)
516
535
 
517
536
  @property
518
537
  @pulumi.getter(name="blockedRolesLists")
519
- def blocked_roles_lists(self) -> pulumi.Output[Sequence[str]]:
538
+ def blocked_roles_lists(self) -> pulumi.Output[Optional[Sequence[str]]]:
520
539
  """
521
- A set of Snowflake roles that a user cannot explicitly consent to using after authenticating.
540
+ A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
522
541
  """
523
542
  return pulumi.get(self, "blocked_roles_lists")
524
543
 
@@ -558,7 +577,7 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
558
577
  @pulumi.getter
559
578
  def name(self) -> pulumi.Output[str]:
560
579
  """
561
- Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`
580
+ Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
562
581
  """
563
582
  return pulumi.get(self, "name")
564
583
 
@@ -599,6 +618,14 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
599
618
  """
600
619
  return pulumi.get(self, "oauth_use_secondary_roles")
601
620
 
621
+ @property
622
+ @pulumi.getter(name="relatedParameters")
623
+ def related_parameters(self) -> pulumi.Output[Sequence['outputs.OauthIntegrationForPartnerApplicationsRelatedParameter']]:
624
+ """
625
+ Parameters related to this security integration.
626
+ """
627
+ return pulumi.get(self, "related_parameters")
628
+
602
629
  @property
603
630
  @pulumi.getter(name="showOutputs")
604
631
  def show_outputs(self) -> pulumi.Output[Sequence['outputs.OauthIntegrationForPartnerApplicationsShowOutput']]: