pulumi-snowflake 0.63.0a1734439451__py3-none-any.whl → 1.0.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of pulumi-snowflake might be problematic. Click here for more details.

Files changed (127) hide show
  1. pulumi_snowflake/__init__.py +82 -74
  2. pulumi_snowflake/_inputs.py +12705 -4876
  3. pulumi_snowflake/account.py +156 -163
  4. pulumi_snowflake/account_parameter.py +16 -16
  5. pulumi_snowflake/account_role.py +9 -9
  6. pulumi_snowflake/api_authentication_integration_with_authorization_code_grant.py +9 -22
  7. pulumi_snowflake/api_authentication_integration_with_client_credentials.py +9 -22
  8. pulumi_snowflake/api_authentication_integration_with_jwt_bearer.py +9 -22
  9. pulumi_snowflake/authentication_policy.py +21 -21
  10. pulumi_snowflake/config/__init__.pyi +8 -86
  11. pulumi_snowflake/config/vars.py +10 -110
  12. pulumi_snowflake/database.py +9 -9
  13. pulumi_snowflake/database_role.py +14 -14
  14. pulumi_snowflake/{unsafe_execute.py → execute.py} +35 -25
  15. pulumi_snowflake/external_oauth_integration.py +27 -27
  16. pulumi_snowflake/external_volume.py +11 -7
  17. pulumi_snowflake/function_java.py +1211 -0
  18. pulumi_snowflake/function_javascript.py +882 -0
  19. pulumi_snowflake/function_python.py +1212 -0
  20. pulumi_snowflake/function_scala.py +1212 -0
  21. pulumi_snowflake/function_sql.py +835 -0
  22. pulumi_snowflake/get_account_roles.py +129 -0
  23. pulumi_snowflake/get_accounts.py +41 -19
  24. pulumi_snowflake/get_alerts.py +4 -0
  25. pulumi_snowflake/get_connections.py +2 -40
  26. pulumi_snowflake/get_cortex_search_services.py +4 -0
  27. pulumi_snowflake/get_current_account.py +4 -0
  28. pulumi_snowflake/get_current_role.py +2 -2
  29. pulumi_snowflake/get_database.py +4 -0
  30. pulumi_snowflake/get_database_role.py +4 -0
  31. pulumi_snowflake/get_database_roles.py +2 -6
  32. pulumi_snowflake/get_databases.py +2 -6
  33. pulumi_snowflake/get_dynamic_tables.py +4 -2
  34. pulumi_snowflake/get_external_functions.py +4 -0
  35. pulumi_snowflake/get_external_tables.py +4 -0
  36. pulumi_snowflake/get_failover_groups.py +4 -2
  37. pulumi_snowflake/get_file_formats.py +4 -0
  38. pulumi_snowflake/get_functions.py +4 -0
  39. pulumi_snowflake/get_grants.py +0 -4
  40. pulumi_snowflake/get_masking_policies.py +2 -6
  41. pulumi_snowflake/get_materialized_views.py +4 -0
  42. pulumi_snowflake/get_network_policies.py +2 -6
  43. pulumi_snowflake/get_parameters.py +4 -0
  44. pulumi_snowflake/get_pipes.py +4 -0
  45. pulumi_snowflake/get_procedures.py +4 -0
  46. pulumi_snowflake/get_resource_monitors.py +2 -6
  47. pulumi_snowflake/get_row_access_policies.py +2 -6
  48. pulumi_snowflake/get_schemas.py +6 -4
  49. pulumi_snowflake/get_secrets.py +2 -6
  50. pulumi_snowflake/get_security_integrations.py +2 -6
  51. pulumi_snowflake/get_sequences.py +4 -0
  52. pulumi_snowflake/get_shares.py +4 -0
  53. pulumi_snowflake/get_stages.py +4 -0
  54. pulumi_snowflake/get_storage_integrations.py +4 -0
  55. pulumi_snowflake/get_streamlits.py +2 -6
  56. pulumi_snowflake/get_streams.py +2 -6
  57. pulumi_snowflake/get_system_generate_scim_access_token.py +4 -0
  58. pulumi_snowflake/get_system_get_private_link_config.py +4 -0
  59. pulumi_snowflake/get_system_get_snowflake_platform_info.py +2 -2
  60. pulumi_snowflake/get_tables.py +4 -0
  61. pulumi_snowflake/get_tags.py +2 -6
  62. pulumi_snowflake/get_tasks.py +0 -4
  63. pulumi_snowflake/get_users.py +2 -6
  64. pulumi_snowflake/get_views.py +2 -6
  65. pulumi_snowflake/get_warehouses.py +2 -6
  66. pulumi_snowflake/grant_account_role.py +21 -21
  67. pulumi_snowflake/grant_application_role.py +7 -7
  68. pulumi_snowflake/grant_database_role.py +28 -28
  69. pulumi_snowflake/grant_ownership.py +14 -14
  70. pulumi_snowflake/grant_privileges_to_account_role.py +14 -14
  71. pulumi_snowflake/grant_privileges_to_database_role.py +14 -14
  72. pulumi_snowflake/grant_privileges_to_share.py +42 -42
  73. pulumi_snowflake/legacy_service_user.py +21 -21
  74. pulumi_snowflake/masking_policy.py +21 -21
  75. pulumi_snowflake/network_policy.py +23 -23
  76. pulumi_snowflake/oauth_integration_for_custom_clients.py +73 -46
  77. pulumi_snowflake/oauth_integration_for_partner_applications.py +57 -30
  78. pulumi_snowflake/outputs.py +10029 -4056
  79. pulumi_snowflake/password_policy.py +12 -2
  80. pulumi_snowflake/primary_connection.py +16 -16
  81. pulumi_snowflake/procedure_java.py +1273 -0
  82. pulumi_snowflake/procedure_javascript.py +895 -0
  83. pulumi_snowflake/procedure_python.py +1226 -0
  84. pulumi_snowflake/procedure_scala.py +1273 -0
  85. pulumi_snowflake/procedure_sql.py +895 -0
  86. pulumi_snowflake/provider.py +40 -527
  87. pulumi_snowflake/pulumi-plugin.json +1 -1
  88. pulumi_snowflake/resource_monitor.py +16 -20
  89. pulumi_snowflake/row_access_policy.py +21 -21
  90. pulumi_snowflake/saml2_integration.py +9 -9
  91. pulumi_snowflake/schema.py +14 -18
  92. pulumi_snowflake/scim_integration.py +16 -16
  93. pulumi_snowflake/secondary_connection.py +16 -16
  94. pulumi_snowflake/secondary_database.py +16 -16
  95. pulumi_snowflake/secret_with_authorization_code_grant.py +28 -28
  96. pulumi_snowflake/secret_with_basic_authentication.py +21 -21
  97. pulumi_snowflake/secret_with_client_credentials.py +28 -28
  98. pulumi_snowflake/secret_with_generic_string.py +21 -21
  99. pulumi_snowflake/service_user.py +21 -21
  100. pulumi_snowflake/shared_database.py +16 -16
  101. pulumi_snowflake/stream_on_directory_table.py +28 -41
  102. pulumi_snowflake/stream_on_external_table.py +28 -41
  103. pulumi_snowflake/stream_on_table.py +28 -41
  104. pulumi_snowflake/stream_on_view.py +28 -41
  105. pulumi_snowflake/streamlit.py +42 -46
  106. pulumi_snowflake/tag.py +28 -28
  107. pulumi_snowflake/tag_association.py +28 -86
  108. pulumi_snowflake/task.py +58 -62
  109. pulumi_snowflake/user.py +21 -21
  110. pulumi_snowflake/view.py +28 -41
  111. pulumi_snowflake/warehouse.py +16 -16
  112. {pulumi_snowflake-0.63.0a1734439451.dist-info → pulumi_snowflake-1.0.0.dist-info}/METADATA +1 -1
  113. pulumi_snowflake-1.0.0.dist-info/RECORD +148 -0
  114. pulumi_snowflake/database_old.py +0 -489
  115. pulumi_snowflake/function.py +0 -901
  116. pulumi_snowflake/get_role.py +0 -126
  117. pulumi_snowflake/get_roles.py +0 -133
  118. pulumi_snowflake/oauth_integration.py +0 -610
  119. pulumi_snowflake/procedure.py +0 -910
  120. pulumi_snowflake/role.py +0 -250
  121. pulumi_snowflake/saml_integration.py +0 -916
  122. pulumi_snowflake/session_parameter.py +0 -301
  123. pulumi_snowflake/stream.py +0 -643
  124. pulumi_snowflake/tag_masking_policy_association.py +0 -211
  125. pulumi_snowflake-0.63.0a1734439451.dist-info/RECORD +0 -148
  126. {pulumi_snowflake-0.63.0a1734439451.dist-info → pulumi_snowflake-1.0.0.dist-info}/WHEEL +0 -0
  127. {pulumi_snowflake-0.63.0a1734439451.dist-info → pulumi_snowflake-1.0.0.dist-info}/top_level.txt +0 -0
@@ -1,610 +0,0 @@
1
- # coding=utf-8
2
- # *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
3
- # *** Do not edit by hand unless you're certain you know what you are doing! ***
4
-
5
- import copy
6
- import warnings
7
- import sys
8
- import pulumi
9
- import pulumi.runtime
10
- from typing import Any, Mapping, Optional, Sequence, Union, overload
11
- if sys.version_info >= (3, 11):
12
- from typing import NotRequired, TypedDict, TypeAlias
13
- else:
14
- from typing_extensions import NotRequired, TypedDict, TypeAlias
15
- from . import _utilities
16
-
17
- __all__ = ['OauthIntegrationArgs', 'OauthIntegration']
18
-
19
- @pulumi.input_type
20
- class OauthIntegrationArgs:
21
- def __init__(__self__, *,
22
- oauth_client: pulumi.Input[str],
23
- blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
24
- comment: Optional[pulumi.Input[str]] = None,
25
- enabled: Optional[pulumi.Input[bool]] = None,
26
- name: Optional[pulumi.Input[str]] = None,
27
- oauth_client_type: Optional[pulumi.Input[str]] = None,
28
- oauth_issue_refresh_tokens: Optional[pulumi.Input[bool]] = None,
29
- oauth_redirect_uri: Optional[pulumi.Input[str]] = None,
30
- oauth_refresh_token_validity: Optional[pulumi.Input[int]] = None,
31
- oauth_use_secondary_roles: Optional[pulumi.Input[str]] = None):
32
- """
33
- The set of arguments for constructing a OauthIntegration resource.
34
- :param pulumi.Input[str] oauth_client: Specifies the OAuth client type.
35
- :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: List of roles that a user cannot explicitly consent to using after authenticating. Do not include ACCOUNTADMIN, ORGADMIN or SECURITYADMIN as they are already implicitly enforced and will cause in-place updates.
36
- :param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
37
- :param pulumi.Input[bool] enabled: Specifies whether this OAuth integration is enabled or disabled.
38
- :param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
39
- :param pulumi.Input[str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients.
40
- :param pulumi.Input[bool] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired.
41
- :param pulumi.Input[str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
42
- :param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
43
- :param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened.
44
- """
45
- pulumi.set(__self__, "oauth_client", oauth_client)
46
- if blocked_roles_lists is not None:
47
- pulumi.set(__self__, "blocked_roles_lists", blocked_roles_lists)
48
- if comment is not None:
49
- pulumi.set(__self__, "comment", comment)
50
- if enabled is not None:
51
- pulumi.set(__self__, "enabled", enabled)
52
- if name is not None:
53
- pulumi.set(__self__, "name", name)
54
- if oauth_client_type is not None:
55
- pulumi.set(__self__, "oauth_client_type", oauth_client_type)
56
- if oauth_issue_refresh_tokens is not None:
57
- pulumi.set(__self__, "oauth_issue_refresh_tokens", oauth_issue_refresh_tokens)
58
- if oauth_redirect_uri is not None:
59
- pulumi.set(__self__, "oauth_redirect_uri", oauth_redirect_uri)
60
- if oauth_refresh_token_validity is not None:
61
- pulumi.set(__self__, "oauth_refresh_token_validity", oauth_refresh_token_validity)
62
- if oauth_use_secondary_roles is not None:
63
- pulumi.set(__self__, "oauth_use_secondary_roles", oauth_use_secondary_roles)
64
-
65
- @property
66
- @pulumi.getter(name="oauthClient")
67
- def oauth_client(self) -> pulumi.Input[str]:
68
- """
69
- Specifies the OAuth client type.
70
- """
71
- return pulumi.get(self, "oauth_client")
72
-
73
- @oauth_client.setter
74
- def oauth_client(self, value: pulumi.Input[str]):
75
- pulumi.set(self, "oauth_client", value)
76
-
77
- @property
78
- @pulumi.getter(name="blockedRolesLists")
79
- def blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
80
- """
81
- List of roles that a user cannot explicitly consent to using after authenticating. Do not include ACCOUNTADMIN, ORGADMIN or SECURITYADMIN as they are already implicitly enforced and will cause in-place updates.
82
- """
83
- return pulumi.get(self, "blocked_roles_lists")
84
-
85
- @blocked_roles_lists.setter
86
- def blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
87
- pulumi.set(self, "blocked_roles_lists", value)
88
-
89
- @property
90
- @pulumi.getter
91
- def comment(self) -> Optional[pulumi.Input[str]]:
92
- """
93
- Specifies a comment for the OAuth integration.
94
- """
95
- return pulumi.get(self, "comment")
96
-
97
- @comment.setter
98
- def comment(self, value: Optional[pulumi.Input[str]]):
99
- pulumi.set(self, "comment", value)
100
-
101
- @property
102
- @pulumi.getter
103
- def enabled(self) -> Optional[pulumi.Input[bool]]:
104
- """
105
- Specifies whether this OAuth integration is enabled or disabled.
106
- """
107
- return pulumi.get(self, "enabled")
108
-
109
- @enabled.setter
110
- def enabled(self, value: Optional[pulumi.Input[bool]]):
111
- pulumi.set(self, "enabled", value)
112
-
113
- @property
114
- @pulumi.getter
115
- def name(self) -> Optional[pulumi.Input[str]]:
116
- """
117
- Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
118
- """
119
- return pulumi.get(self, "name")
120
-
121
- @name.setter
122
- def name(self, value: Optional[pulumi.Input[str]]):
123
- pulumi.set(self, "name", value)
124
-
125
- @property
126
- @pulumi.getter(name="oauthClientType")
127
- def oauth_client_type(self) -> Optional[pulumi.Input[str]]:
128
- """
129
- Specifies the type of client being registered. Snowflake supports both confidential and public clients.
130
- """
131
- return pulumi.get(self, "oauth_client_type")
132
-
133
- @oauth_client_type.setter
134
- def oauth_client_type(self, value: Optional[pulumi.Input[str]]):
135
- pulumi.set(self, "oauth_client_type", value)
136
-
137
- @property
138
- @pulumi.getter(name="oauthIssueRefreshTokens")
139
- def oauth_issue_refresh_tokens(self) -> Optional[pulumi.Input[bool]]:
140
- """
141
- Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired.
142
- """
143
- return pulumi.get(self, "oauth_issue_refresh_tokens")
144
-
145
- @oauth_issue_refresh_tokens.setter
146
- def oauth_issue_refresh_tokens(self, value: Optional[pulumi.Input[bool]]):
147
- pulumi.set(self, "oauth_issue_refresh_tokens", value)
148
-
149
- @property
150
- @pulumi.getter(name="oauthRedirectUri")
151
- def oauth_redirect_uri(self) -> Optional[pulumi.Input[str]]:
152
- """
153
- Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
154
- """
155
- return pulumi.get(self, "oauth_redirect_uri")
156
-
157
- @oauth_redirect_uri.setter
158
- def oauth_redirect_uri(self, value: Optional[pulumi.Input[str]]):
159
- pulumi.set(self, "oauth_redirect_uri", value)
160
-
161
- @property
162
- @pulumi.getter(name="oauthRefreshTokenValidity")
163
- def oauth_refresh_token_validity(self) -> Optional[pulumi.Input[int]]:
164
- """
165
- Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
166
- """
167
- return pulumi.get(self, "oauth_refresh_token_validity")
168
-
169
- @oauth_refresh_token_validity.setter
170
- def oauth_refresh_token_validity(self, value: Optional[pulumi.Input[int]]):
171
- pulumi.set(self, "oauth_refresh_token_validity", value)
172
-
173
- @property
174
- @pulumi.getter(name="oauthUseSecondaryRoles")
175
- def oauth_use_secondary_roles(self) -> Optional[pulumi.Input[str]]:
176
- """
177
- Specifies whether default secondary roles set in the user properties are activated by default in the session being opened.
178
- """
179
- return pulumi.get(self, "oauth_use_secondary_roles")
180
-
181
- @oauth_use_secondary_roles.setter
182
- def oauth_use_secondary_roles(self, value: Optional[pulumi.Input[str]]):
183
- pulumi.set(self, "oauth_use_secondary_roles", value)
184
-
185
-
186
- @pulumi.input_type
187
- class _OauthIntegrationState:
188
- def __init__(__self__, *,
189
- blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
190
- comment: Optional[pulumi.Input[str]] = None,
191
- created_on: Optional[pulumi.Input[str]] = None,
192
- enabled: Optional[pulumi.Input[bool]] = None,
193
- name: Optional[pulumi.Input[str]] = None,
194
- oauth_client: Optional[pulumi.Input[str]] = None,
195
- oauth_client_type: Optional[pulumi.Input[str]] = None,
196
- oauth_issue_refresh_tokens: Optional[pulumi.Input[bool]] = None,
197
- oauth_redirect_uri: Optional[pulumi.Input[str]] = None,
198
- oauth_refresh_token_validity: Optional[pulumi.Input[int]] = None,
199
- oauth_use_secondary_roles: Optional[pulumi.Input[str]] = None):
200
- """
201
- Input properties used for looking up and filtering OauthIntegration resources.
202
- :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: List of roles that a user cannot explicitly consent to using after authenticating. Do not include ACCOUNTADMIN, ORGADMIN or SECURITYADMIN as they are already implicitly enforced and will cause in-place updates.
203
- :param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
204
- :param pulumi.Input[str] created_on: Date and time when the OAuth integration was created.
205
- :param pulumi.Input[bool] enabled: Specifies whether this OAuth integration is enabled or disabled.
206
- :param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
207
- :param pulumi.Input[str] oauth_client: Specifies the OAuth client type.
208
- :param pulumi.Input[str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients.
209
- :param pulumi.Input[bool] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired.
210
- :param pulumi.Input[str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
211
- :param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
212
- :param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened.
213
- """
214
- if blocked_roles_lists is not None:
215
- pulumi.set(__self__, "blocked_roles_lists", blocked_roles_lists)
216
- if comment is not None:
217
- pulumi.set(__self__, "comment", comment)
218
- if created_on is not None:
219
- pulumi.set(__self__, "created_on", created_on)
220
- if enabled is not None:
221
- pulumi.set(__self__, "enabled", enabled)
222
- if name is not None:
223
- pulumi.set(__self__, "name", name)
224
- if oauth_client is not None:
225
- pulumi.set(__self__, "oauth_client", oauth_client)
226
- if oauth_client_type is not None:
227
- pulumi.set(__self__, "oauth_client_type", oauth_client_type)
228
- if oauth_issue_refresh_tokens is not None:
229
- pulumi.set(__self__, "oauth_issue_refresh_tokens", oauth_issue_refresh_tokens)
230
- if oauth_redirect_uri is not None:
231
- pulumi.set(__self__, "oauth_redirect_uri", oauth_redirect_uri)
232
- if oauth_refresh_token_validity is not None:
233
- pulumi.set(__self__, "oauth_refresh_token_validity", oauth_refresh_token_validity)
234
- if oauth_use_secondary_roles is not None:
235
- pulumi.set(__self__, "oauth_use_secondary_roles", oauth_use_secondary_roles)
236
-
237
- @property
238
- @pulumi.getter(name="blockedRolesLists")
239
- def blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
240
- """
241
- List of roles that a user cannot explicitly consent to using after authenticating. Do not include ACCOUNTADMIN, ORGADMIN or SECURITYADMIN as they are already implicitly enforced and will cause in-place updates.
242
- """
243
- return pulumi.get(self, "blocked_roles_lists")
244
-
245
- @blocked_roles_lists.setter
246
- def blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
247
- pulumi.set(self, "blocked_roles_lists", value)
248
-
249
- @property
250
- @pulumi.getter
251
- def comment(self) -> Optional[pulumi.Input[str]]:
252
- """
253
- Specifies a comment for the OAuth integration.
254
- """
255
- return pulumi.get(self, "comment")
256
-
257
- @comment.setter
258
- def comment(self, value: Optional[pulumi.Input[str]]):
259
- pulumi.set(self, "comment", value)
260
-
261
- @property
262
- @pulumi.getter(name="createdOn")
263
- def created_on(self) -> Optional[pulumi.Input[str]]:
264
- """
265
- Date and time when the OAuth integration was created.
266
- """
267
- return pulumi.get(self, "created_on")
268
-
269
- @created_on.setter
270
- def created_on(self, value: Optional[pulumi.Input[str]]):
271
- pulumi.set(self, "created_on", value)
272
-
273
- @property
274
- @pulumi.getter
275
- def enabled(self) -> Optional[pulumi.Input[bool]]:
276
- """
277
- Specifies whether this OAuth integration is enabled or disabled.
278
- """
279
- return pulumi.get(self, "enabled")
280
-
281
- @enabled.setter
282
- def enabled(self, value: Optional[pulumi.Input[bool]]):
283
- pulumi.set(self, "enabled", value)
284
-
285
- @property
286
- @pulumi.getter
287
- def name(self) -> Optional[pulumi.Input[str]]:
288
- """
289
- Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
290
- """
291
- return pulumi.get(self, "name")
292
-
293
- @name.setter
294
- def name(self, value: Optional[pulumi.Input[str]]):
295
- pulumi.set(self, "name", value)
296
-
297
- @property
298
- @pulumi.getter(name="oauthClient")
299
- def oauth_client(self) -> Optional[pulumi.Input[str]]:
300
- """
301
- Specifies the OAuth client type.
302
- """
303
- return pulumi.get(self, "oauth_client")
304
-
305
- @oauth_client.setter
306
- def oauth_client(self, value: Optional[pulumi.Input[str]]):
307
- pulumi.set(self, "oauth_client", value)
308
-
309
- @property
310
- @pulumi.getter(name="oauthClientType")
311
- def oauth_client_type(self) -> Optional[pulumi.Input[str]]:
312
- """
313
- Specifies the type of client being registered. Snowflake supports both confidential and public clients.
314
- """
315
- return pulumi.get(self, "oauth_client_type")
316
-
317
- @oauth_client_type.setter
318
- def oauth_client_type(self, value: Optional[pulumi.Input[str]]):
319
- pulumi.set(self, "oauth_client_type", value)
320
-
321
- @property
322
- @pulumi.getter(name="oauthIssueRefreshTokens")
323
- def oauth_issue_refresh_tokens(self) -> Optional[pulumi.Input[bool]]:
324
- """
325
- Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired.
326
- """
327
- return pulumi.get(self, "oauth_issue_refresh_tokens")
328
-
329
- @oauth_issue_refresh_tokens.setter
330
- def oauth_issue_refresh_tokens(self, value: Optional[pulumi.Input[bool]]):
331
- pulumi.set(self, "oauth_issue_refresh_tokens", value)
332
-
333
- @property
334
- @pulumi.getter(name="oauthRedirectUri")
335
- def oauth_redirect_uri(self) -> Optional[pulumi.Input[str]]:
336
- """
337
- Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
338
- """
339
- return pulumi.get(self, "oauth_redirect_uri")
340
-
341
- @oauth_redirect_uri.setter
342
- def oauth_redirect_uri(self, value: Optional[pulumi.Input[str]]):
343
- pulumi.set(self, "oauth_redirect_uri", value)
344
-
345
- @property
346
- @pulumi.getter(name="oauthRefreshTokenValidity")
347
- def oauth_refresh_token_validity(self) -> Optional[pulumi.Input[int]]:
348
- """
349
- Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
350
- """
351
- return pulumi.get(self, "oauth_refresh_token_validity")
352
-
353
- @oauth_refresh_token_validity.setter
354
- def oauth_refresh_token_validity(self, value: Optional[pulumi.Input[int]]):
355
- pulumi.set(self, "oauth_refresh_token_validity", value)
356
-
357
- @property
358
- @pulumi.getter(name="oauthUseSecondaryRoles")
359
- def oauth_use_secondary_roles(self) -> Optional[pulumi.Input[str]]:
360
- """
361
- Specifies whether default secondary roles set in the user properties are activated by default in the session being opened.
362
- """
363
- return pulumi.get(self, "oauth_use_secondary_roles")
364
-
365
- @oauth_use_secondary_roles.setter
366
- def oauth_use_secondary_roles(self, value: Optional[pulumi.Input[str]]):
367
- pulumi.set(self, "oauth_use_secondary_roles", value)
368
-
369
-
370
- class OauthIntegration(pulumi.CustomResource):
371
- @overload
372
- def __init__(__self__,
373
- resource_name: str,
374
- opts: Optional[pulumi.ResourceOptions] = None,
375
- blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
376
- comment: Optional[pulumi.Input[str]] = None,
377
- enabled: Optional[pulumi.Input[bool]] = None,
378
- name: Optional[pulumi.Input[str]] = None,
379
- oauth_client: Optional[pulumi.Input[str]] = None,
380
- oauth_client_type: Optional[pulumi.Input[str]] = None,
381
- oauth_issue_refresh_tokens: Optional[pulumi.Input[bool]] = None,
382
- oauth_redirect_uri: Optional[pulumi.Input[str]] = None,
383
- oauth_refresh_token_validity: Optional[pulumi.Input[int]] = None,
384
- oauth_use_secondary_roles: Optional[pulumi.Input[str]] = None,
385
- __props__=None):
386
- """
387
- ## Import
388
-
389
- ```sh
390
- $ pulumi import snowflake:index/oauthIntegration:OauthIntegration example name
391
- ```
392
-
393
- :param str resource_name: The name of the resource.
394
- :param pulumi.ResourceOptions opts: Options for the resource.
395
- :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: List of roles that a user cannot explicitly consent to using after authenticating. Do not include ACCOUNTADMIN, ORGADMIN or SECURITYADMIN as they are already implicitly enforced and will cause in-place updates.
396
- :param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
397
- :param pulumi.Input[bool] enabled: Specifies whether this OAuth integration is enabled or disabled.
398
- :param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
399
- :param pulumi.Input[str] oauth_client: Specifies the OAuth client type.
400
- :param pulumi.Input[str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients.
401
- :param pulumi.Input[bool] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired.
402
- :param pulumi.Input[str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
403
- :param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
404
- :param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened.
405
- """
406
- ...
407
- @overload
408
- def __init__(__self__,
409
- resource_name: str,
410
- args: OauthIntegrationArgs,
411
- opts: Optional[pulumi.ResourceOptions] = None):
412
- """
413
- ## Import
414
-
415
- ```sh
416
- $ pulumi import snowflake:index/oauthIntegration:OauthIntegration example name
417
- ```
418
-
419
- :param str resource_name: The name of the resource.
420
- :param OauthIntegrationArgs args: The arguments to use to populate this resource's properties.
421
- :param pulumi.ResourceOptions opts: Options for the resource.
422
- """
423
- ...
424
- def __init__(__self__, resource_name: str, *args, **kwargs):
425
- resource_args, opts = _utilities.get_resource_args_opts(OauthIntegrationArgs, pulumi.ResourceOptions, *args, **kwargs)
426
- if resource_args is not None:
427
- __self__._internal_init(resource_name, opts, **resource_args.__dict__)
428
- else:
429
- __self__._internal_init(resource_name, *args, **kwargs)
430
-
431
- def _internal_init(__self__,
432
- resource_name: str,
433
- opts: Optional[pulumi.ResourceOptions] = None,
434
- blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
435
- comment: Optional[pulumi.Input[str]] = None,
436
- enabled: Optional[pulumi.Input[bool]] = None,
437
- name: Optional[pulumi.Input[str]] = None,
438
- oauth_client: Optional[pulumi.Input[str]] = None,
439
- oauth_client_type: Optional[pulumi.Input[str]] = None,
440
- oauth_issue_refresh_tokens: Optional[pulumi.Input[bool]] = None,
441
- oauth_redirect_uri: Optional[pulumi.Input[str]] = None,
442
- oauth_refresh_token_validity: Optional[pulumi.Input[int]] = None,
443
- oauth_use_secondary_roles: Optional[pulumi.Input[str]] = None,
444
- __props__=None):
445
- opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
446
- if not isinstance(opts, pulumi.ResourceOptions):
447
- raise TypeError('Expected resource options to be a ResourceOptions instance')
448
- if opts.id is None:
449
- if __props__ is not None:
450
- raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
451
- __props__ = OauthIntegrationArgs.__new__(OauthIntegrationArgs)
452
-
453
- __props__.__dict__["blocked_roles_lists"] = blocked_roles_lists
454
- __props__.__dict__["comment"] = comment
455
- __props__.__dict__["enabled"] = enabled
456
- __props__.__dict__["name"] = name
457
- if oauth_client is None and not opts.urn:
458
- raise TypeError("Missing required property 'oauth_client'")
459
- __props__.__dict__["oauth_client"] = oauth_client
460
- __props__.__dict__["oauth_client_type"] = oauth_client_type
461
- __props__.__dict__["oauth_issue_refresh_tokens"] = oauth_issue_refresh_tokens
462
- __props__.__dict__["oauth_redirect_uri"] = oauth_redirect_uri
463
- __props__.__dict__["oauth_refresh_token_validity"] = oauth_refresh_token_validity
464
- __props__.__dict__["oauth_use_secondary_roles"] = oauth_use_secondary_roles
465
- __props__.__dict__["created_on"] = None
466
- super(OauthIntegration, __self__).__init__(
467
- 'snowflake:index/oauthIntegration:OauthIntegration',
468
- resource_name,
469
- __props__,
470
- opts)
471
-
472
- @staticmethod
473
- def get(resource_name: str,
474
- id: pulumi.Input[str],
475
- opts: Optional[pulumi.ResourceOptions] = None,
476
- blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
477
- comment: Optional[pulumi.Input[str]] = None,
478
- created_on: Optional[pulumi.Input[str]] = None,
479
- enabled: Optional[pulumi.Input[bool]] = None,
480
- name: Optional[pulumi.Input[str]] = None,
481
- oauth_client: Optional[pulumi.Input[str]] = None,
482
- oauth_client_type: Optional[pulumi.Input[str]] = None,
483
- oauth_issue_refresh_tokens: Optional[pulumi.Input[bool]] = None,
484
- oauth_redirect_uri: Optional[pulumi.Input[str]] = None,
485
- oauth_refresh_token_validity: Optional[pulumi.Input[int]] = None,
486
- oauth_use_secondary_roles: Optional[pulumi.Input[str]] = None) -> 'OauthIntegration':
487
- """
488
- Get an existing OauthIntegration resource's state with the given name, id, and optional extra
489
- properties used to qualify the lookup.
490
-
491
- :param str resource_name: The unique name of the resulting resource.
492
- :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
493
- :param pulumi.ResourceOptions opts: Options for the resource.
494
- :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: List of roles that a user cannot explicitly consent to using after authenticating. Do not include ACCOUNTADMIN, ORGADMIN or SECURITYADMIN as they are already implicitly enforced and will cause in-place updates.
495
- :param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
496
- :param pulumi.Input[str] created_on: Date and time when the OAuth integration was created.
497
- :param pulumi.Input[bool] enabled: Specifies whether this OAuth integration is enabled or disabled.
498
- :param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
499
- :param pulumi.Input[str] oauth_client: Specifies the OAuth client type.
500
- :param pulumi.Input[str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients.
501
- :param pulumi.Input[bool] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired.
502
- :param pulumi.Input[str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
503
- :param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
504
- :param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened.
505
- """
506
- opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
507
-
508
- __props__ = _OauthIntegrationState.__new__(_OauthIntegrationState)
509
-
510
- __props__.__dict__["blocked_roles_lists"] = blocked_roles_lists
511
- __props__.__dict__["comment"] = comment
512
- __props__.__dict__["created_on"] = created_on
513
- __props__.__dict__["enabled"] = enabled
514
- __props__.__dict__["name"] = name
515
- __props__.__dict__["oauth_client"] = oauth_client
516
- __props__.__dict__["oauth_client_type"] = oauth_client_type
517
- __props__.__dict__["oauth_issue_refresh_tokens"] = oauth_issue_refresh_tokens
518
- __props__.__dict__["oauth_redirect_uri"] = oauth_redirect_uri
519
- __props__.__dict__["oauth_refresh_token_validity"] = oauth_refresh_token_validity
520
- __props__.__dict__["oauth_use_secondary_roles"] = oauth_use_secondary_roles
521
- return OauthIntegration(resource_name, opts=opts, __props__=__props__)
522
-
523
- @property
524
- @pulumi.getter(name="blockedRolesLists")
525
- def blocked_roles_lists(self) -> pulumi.Output[Optional[Sequence[str]]]:
526
- """
527
- List of roles that a user cannot explicitly consent to using after authenticating. Do not include ACCOUNTADMIN, ORGADMIN or SECURITYADMIN as they are already implicitly enforced and will cause in-place updates.
528
- """
529
- return pulumi.get(self, "blocked_roles_lists")
530
-
531
- @property
532
- @pulumi.getter
533
- def comment(self) -> pulumi.Output[Optional[str]]:
534
- """
535
- Specifies a comment for the OAuth integration.
536
- """
537
- return pulumi.get(self, "comment")
538
-
539
- @property
540
- @pulumi.getter(name="createdOn")
541
- def created_on(self) -> pulumi.Output[str]:
542
- """
543
- Date and time when the OAuth integration was created.
544
- """
545
- return pulumi.get(self, "created_on")
546
-
547
- @property
548
- @pulumi.getter
549
- def enabled(self) -> pulumi.Output[Optional[bool]]:
550
- """
551
- Specifies whether this OAuth integration is enabled or disabled.
552
- """
553
- return pulumi.get(self, "enabled")
554
-
555
- @property
556
- @pulumi.getter
557
- def name(self) -> pulumi.Output[str]:
558
- """
559
- Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
560
- """
561
- return pulumi.get(self, "name")
562
-
563
- @property
564
- @pulumi.getter(name="oauthClient")
565
- def oauth_client(self) -> pulumi.Output[str]:
566
- """
567
- Specifies the OAuth client type.
568
- """
569
- return pulumi.get(self, "oauth_client")
570
-
571
- @property
572
- @pulumi.getter(name="oauthClientType")
573
- def oauth_client_type(self) -> pulumi.Output[Optional[str]]:
574
- """
575
- Specifies the type of client being registered. Snowflake supports both confidential and public clients.
576
- """
577
- return pulumi.get(self, "oauth_client_type")
578
-
579
- @property
580
- @pulumi.getter(name="oauthIssueRefreshTokens")
581
- def oauth_issue_refresh_tokens(self) -> pulumi.Output[Optional[bool]]:
582
- """
583
- Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired.
584
- """
585
- return pulumi.get(self, "oauth_issue_refresh_tokens")
586
-
587
- @property
588
- @pulumi.getter(name="oauthRedirectUri")
589
- def oauth_redirect_uri(self) -> pulumi.Output[Optional[str]]:
590
- """
591
- Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
592
- """
593
- return pulumi.get(self, "oauth_redirect_uri")
594
-
595
- @property
596
- @pulumi.getter(name="oauthRefreshTokenValidity")
597
- def oauth_refresh_token_validity(self) -> pulumi.Output[Optional[int]]:
598
- """
599
- Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
600
- """
601
- return pulumi.get(self, "oauth_refresh_token_validity")
602
-
603
- @property
604
- @pulumi.getter(name="oauthUseSecondaryRoles")
605
- def oauth_use_secondary_roles(self) -> pulumi.Output[Optional[str]]:
606
- """
607
- Specifies whether default secondary roles set in the user properties are activated by default in the session being opened.
608
- """
609
- return pulumi.get(self, "oauth_use_secondary_roles")
610
-