pulumi-snowflake 0.63.0a1734439451__py3-none-any.whl → 1.0.0a1734440141__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-snowflake might be problematic. Click here for more details.
- pulumi_snowflake/__init__.py +82 -74
- pulumi_snowflake/_inputs.py +12705 -4876
- pulumi_snowflake/account.py +156 -163
- pulumi_snowflake/account_parameter.py +16 -16
- pulumi_snowflake/account_role.py +9 -9
- pulumi_snowflake/api_authentication_integration_with_authorization_code_grant.py +9 -22
- pulumi_snowflake/api_authentication_integration_with_client_credentials.py +9 -22
- pulumi_snowflake/api_authentication_integration_with_jwt_bearer.py +9 -22
- pulumi_snowflake/authentication_policy.py +21 -21
- pulumi_snowflake/config/__init__.pyi +8 -86
- pulumi_snowflake/config/vars.py +10 -110
- pulumi_snowflake/database.py +9 -9
- pulumi_snowflake/database_role.py +14 -14
- pulumi_snowflake/{unsafe_execute.py → execute.py} +35 -25
- pulumi_snowflake/external_oauth_integration.py +27 -27
- pulumi_snowflake/external_volume.py +11 -7
- pulumi_snowflake/function_java.py +1211 -0
- pulumi_snowflake/function_javascript.py +882 -0
- pulumi_snowflake/function_python.py +1212 -0
- pulumi_snowflake/function_scala.py +1212 -0
- pulumi_snowflake/function_sql.py +835 -0
- pulumi_snowflake/get_account_roles.py +129 -0
- pulumi_snowflake/get_accounts.py +41 -19
- pulumi_snowflake/get_alerts.py +4 -0
- pulumi_snowflake/get_connections.py +2 -40
- pulumi_snowflake/get_cortex_search_services.py +4 -0
- pulumi_snowflake/get_current_account.py +4 -0
- pulumi_snowflake/get_current_role.py +2 -2
- pulumi_snowflake/get_database.py +4 -0
- pulumi_snowflake/get_database_role.py +4 -0
- pulumi_snowflake/get_database_roles.py +2 -6
- pulumi_snowflake/get_databases.py +2 -6
- pulumi_snowflake/get_dynamic_tables.py +4 -2
- pulumi_snowflake/get_external_functions.py +4 -0
- pulumi_snowflake/get_external_tables.py +4 -0
- pulumi_snowflake/get_failover_groups.py +4 -2
- pulumi_snowflake/get_file_formats.py +4 -0
- pulumi_snowflake/get_functions.py +4 -0
- pulumi_snowflake/get_grants.py +0 -4
- pulumi_snowflake/get_masking_policies.py +2 -6
- pulumi_snowflake/get_materialized_views.py +4 -0
- pulumi_snowflake/get_network_policies.py +2 -6
- pulumi_snowflake/get_parameters.py +4 -0
- pulumi_snowflake/get_pipes.py +4 -0
- pulumi_snowflake/get_procedures.py +4 -0
- pulumi_snowflake/get_resource_monitors.py +2 -6
- pulumi_snowflake/get_row_access_policies.py +2 -6
- pulumi_snowflake/get_schemas.py +6 -4
- pulumi_snowflake/get_secrets.py +2 -6
- pulumi_snowflake/get_security_integrations.py +2 -6
- pulumi_snowflake/get_sequences.py +4 -0
- pulumi_snowflake/get_shares.py +4 -0
- pulumi_snowflake/get_stages.py +4 -0
- pulumi_snowflake/get_storage_integrations.py +4 -0
- pulumi_snowflake/get_streamlits.py +2 -6
- pulumi_snowflake/get_streams.py +2 -6
- pulumi_snowflake/get_system_generate_scim_access_token.py +4 -0
- pulumi_snowflake/get_system_get_private_link_config.py +4 -0
- pulumi_snowflake/get_system_get_snowflake_platform_info.py +2 -2
- pulumi_snowflake/get_tables.py +4 -0
- pulumi_snowflake/get_tags.py +2 -6
- pulumi_snowflake/get_tasks.py +0 -4
- pulumi_snowflake/get_users.py +2 -6
- pulumi_snowflake/get_views.py +2 -6
- pulumi_snowflake/get_warehouses.py +2 -6
- pulumi_snowflake/grant_account_role.py +21 -21
- pulumi_snowflake/grant_application_role.py +7 -7
- pulumi_snowflake/grant_database_role.py +28 -28
- pulumi_snowflake/grant_ownership.py +14 -14
- pulumi_snowflake/grant_privileges_to_account_role.py +14 -14
- pulumi_snowflake/grant_privileges_to_database_role.py +14 -14
- pulumi_snowflake/grant_privileges_to_share.py +42 -42
- pulumi_snowflake/legacy_service_user.py +21 -21
- pulumi_snowflake/masking_policy.py +21 -21
- pulumi_snowflake/network_policy.py +23 -23
- pulumi_snowflake/oauth_integration_for_custom_clients.py +73 -46
- pulumi_snowflake/oauth_integration_for_partner_applications.py +57 -30
- pulumi_snowflake/outputs.py +10029 -4056
- pulumi_snowflake/password_policy.py +12 -2
- pulumi_snowflake/primary_connection.py +16 -16
- pulumi_snowflake/procedure_java.py +1273 -0
- pulumi_snowflake/procedure_javascript.py +895 -0
- pulumi_snowflake/procedure_python.py +1226 -0
- pulumi_snowflake/procedure_scala.py +1273 -0
- pulumi_snowflake/procedure_sql.py +895 -0
- pulumi_snowflake/provider.py +40 -527
- pulumi_snowflake/pulumi-plugin.json +1 -1
- pulumi_snowflake/resource_monitor.py +16 -20
- pulumi_snowflake/row_access_policy.py +21 -21
- pulumi_snowflake/saml2_integration.py +9 -9
- pulumi_snowflake/schema.py +14 -18
- pulumi_snowflake/scim_integration.py +16 -16
- pulumi_snowflake/secondary_connection.py +16 -16
- pulumi_snowflake/secondary_database.py +16 -16
- pulumi_snowflake/secret_with_authorization_code_grant.py +28 -28
- pulumi_snowflake/secret_with_basic_authentication.py +21 -21
- pulumi_snowflake/secret_with_client_credentials.py +28 -28
- pulumi_snowflake/secret_with_generic_string.py +21 -21
- pulumi_snowflake/service_user.py +21 -21
- pulumi_snowflake/shared_database.py +16 -16
- pulumi_snowflake/stream_on_directory_table.py +28 -41
- pulumi_snowflake/stream_on_external_table.py +28 -41
- pulumi_snowflake/stream_on_table.py +28 -41
- pulumi_snowflake/stream_on_view.py +28 -41
- pulumi_snowflake/streamlit.py +42 -46
- pulumi_snowflake/tag.py +28 -28
- pulumi_snowflake/tag_association.py +28 -86
- pulumi_snowflake/task.py +58 -62
- pulumi_snowflake/user.py +21 -21
- pulumi_snowflake/view.py +28 -41
- pulumi_snowflake/warehouse.py +16 -16
- {pulumi_snowflake-0.63.0a1734439451.dist-info → pulumi_snowflake-1.0.0a1734440141.dist-info}/METADATA +1 -1
- pulumi_snowflake-1.0.0a1734440141.dist-info/RECORD +148 -0
- pulumi_snowflake/database_old.py +0 -489
- pulumi_snowflake/function.py +0 -901
- pulumi_snowflake/get_role.py +0 -126
- pulumi_snowflake/get_roles.py +0 -133
- pulumi_snowflake/oauth_integration.py +0 -610
- pulumi_snowflake/procedure.py +0 -910
- pulumi_snowflake/role.py +0 -250
- pulumi_snowflake/saml_integration.py +0 -916
- pulumi_snowflake/session_parameter.py +0 -301
- pulumi_snowflake/stream.py +0 -643
- pulumi_snowflake/tag_masking_policy_association.py +0 -211
- pulumi_snowflake-0.63.0a1734439451.dist-info/RECORD +0 -148
- {pulumi_snowflake-0.63.0a1734439451.dist-info → pulumi_snowflake-1.0.0a1734440141.dist-info}/WHEEL +0 -0
- {pulumi_snowflake-0.63.0a1734439451.dist-info → pulumi_snowflake-1.0.0a1734440141.dist-info}/top_level.txt +0 -0
|
@@ -1,610 +0,0 @@
|
|
|
1
|
-
# coding=utf-8
|
|
2
|
-
# *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
|
|
3
|
-
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
|
-
|
|
5
|
-
import copy
|
|
6
|
-
import warnings
|
|
7
|
-
import sys
|
|
8
|
-
import pulumi
|
|
9
|
-
import pulumi.runtime
|
|
10
|
-
from typing import Any, Mapping, Optional, Sequence, Union, overload
|
|
11
|
-
if sys.version_info >= (3, 11):
|
|
12
|
-
from typing import NotRequired, TypedDict, TypeAlias
|
|
13
|
-
else:
|
|
14
|
-
from typing_extensions import NotRequired, TypedDict, TypeAlias
|
|
15
|
-
from . import _utilities
|
|
16
|
-
|
|
17
|
-
__all__ = ['OauthIntegrationArgs', 'OauthIntegration']
|
|
18
|
-
|
|
19
|
-
@pulumi.input_type
|
|
20
|
-
class OauthIntegrationArgs:
|
|
21
|
-
def __init__(__self__, *,
|
|
22
|
-
oauth_client: pulumi.Input[str],
|
|
23
|
-
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
24
|
-
comment: Optional[pulumi.Input[str]] = None,
|
|
25
|
-
enabled: Optional[pulumi.Input[bool]] = None,
|
|
26
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
27
|
-
oauth_client_type: Optional[pulumi.Input[str]] = None,
|
|
28
|
-
oauth_issue_refresh_tokens: Optional[pulumi.Input[bool]] = None,
|
|
29
|
-
oauth_redirect_uri: Optional[pulumi.Input[str]] = None,
|
|
30
|
-
oauth_refresh_token_validity: Optional[pulumi.Input[int]] = None,
|
|
31
|
-
oauth_use_secondary_roles: Optional[pulumi.Input[str]] = None):
|
|
32
|
-
"""
|
|
33
|
-
The set of arguments for constructing a OauthIntegration resource.
|
|
34
|
-
:param pulumi.Input[str] oauth_client: Specifies the OAuth client type.
|
|
35
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: List of roles that a user cannot explicitly consent to using after authenticating. Do not include ACCOUNTADMIN, ORGADMIN or SECURITYADMIN as they are already implicitly enforced and will cause in-place updates.
|
|
36
|
-
:param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
|
|
37
|
-
:param pulumi.Input[bool] enabled: Specifies whether this OAuth integration is enabled or disabled.
|
|
38
|
-
:param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
|
|
39
|
-
:param pulumi.Input[str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients.
|
|
40
|
-
:param pulumi.Input[bool] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired.
|
|
41
|
-
:param pulumi.Input[str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
|
|
42
|
-
:param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
43
|
-
:param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened.
|
|
44
|
-
"""
|
|
45
|
-
pulumi.set(__self__, "oauth_client", oauth_client)
|
|
46
|
-
if blocked_roles_lists is not None:
|
|
47
|
-
pulumi.set(__self__, "blocked_roles_lists", blocked_roles_lists)
|
|
48
|
-
if comment is not None:
|
|
49
|
-
pulumi.set(__self__, "comment", comment)
|
|
50
|
-
if enabled is not None:
|
|
51
|
-
pulumi.set(__self__, "enabled", enabled)
|
|
52
|
-
if name is not None:
|
|
53
|
-
pulumi.set(__self__, "name", name)
|
|
54
|
-
if oauth_client_type is not None:
|
|
55
|
-
pulumi.set(__self__, "oauth_client_type", oauth_client_type)
|
|
56
|
-
if oauth_issue_refresh_tokens is not None:
|
|
57
|
-
pulumi.set(__self__, "oauth_issue_refresh_tokens", oauth_issue_refresh_tokens)
|
|
58
|
-
if oauth_redirect_uri is not None:
|
|
59
|
-
pulumi.set(__self__, "oauth_redirect_uri", oauth_redirect_uri)
|
|
60
|
-
if oauth_refresh_token_validity is not None:
|
|
61
|
-
pulumi.set(__self__, "oauth_refresh_token_validity", oauth_refresh_token_validity)
|
|
62
|
-
if oauth_use_secondary_roles is not None:
|
|
63
|
-
pulumi.set(__self__, "oauth_use_secondary_roles", oauth_use_secondary_roles)
|
|
64
|
-
|
|
65
|
-
@property
|
|
66
|
-
@pulumi.getter(name="oauthClient")
|
|
67
|
-
def oauth_client(self) -> pulumi.Input[str]:
|
|
68
|
-
"""
|
|
69
|
-
Specifies the OAuth client type.
|
|
70
|
-
"""
|
|
71
|
-
return pulumi.get(self, "oauth_client")
|
|
72
|
-
|
|
73
|
-
@oauth_client.setter
|
|
74
|
-
def oauth_client(self, value: pulumi.Input[str]):
|
|
75
|
-
pulumi.set(self, "oauth_client", value)
|
|
76
|
-
|
|
77
|
-
@property
|
|
78
|
-
@pulumi.getter(name="blockedRolesLists")
|
|
79
|
-
def blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
80
|
-
"""
|
|
81
|
-
List of roles that a user cannot explicitly consent to using after authenticating. Do not include ACCOUNTADMIN, ORGADMIN or SECURITYADMIN as they are already implicitly enforced and will cause in-place updates.
|
|
82
|
-
"""
|
|
83
|
-
return pulumi.get(self, "blocked_roles_lists")
|
|
84
|
-
|
|
85
|
-
@blocked_roles_lists.setter
|
|
86
|
-
def blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
87
|
-
pulumi.set(self, "blocked_roles_lists", value)
|
|
88
|
-
|
|
89
|
-
@property
|
|
90
|
-
@pulumi.getter
|
|
91
|
-
def comment(self) -> Optional[pulumi.Input[str]]:
|
|
92
|
-
"""
|
|
93
|
-
Specifies a comment for the OAuth integration.
|
|
94
|
-
"""
|
|
95
|
-
return pulumi.get(self, "comment")
|
|
96
|
-
|
|
97
|
-
@comment.setter
|
|
98
|
-
def comment(self, value: Optional[pulumi.Input[str]]):
|
|
99
|
-
pulumi.set(self, "comment", value)
|
|
100
|
-
|
|
101
|
-
@property
|
|
102
|
-
@pulumi.getter
|
|
103
|
-
def enabled(self) -> Optional[pulumi.Input[bool]]:
|
|
104
|
-
"""
|
|
105
|
-
Specifies whether this OAuth integration is enabled or disabled.
|
|
106
|
-
"""
|
|
107
|
-
return pulumi.get(self, "enabled")
|
|
108
|
-
|
|
109
|
-
@enabled.setter
|
|
110
|
-
def enabled(self, value: Optional[pulumi.Input[bool]]):
|
|
111
|
-
pulumi.set(self, "enabled", value)
|
|
112
|
-
|
|
113
|
-
@property
|
|
114
|
-
@pulumi.getter
|
|
115
|
-
def name(self) -> Optional[pulumi.Input[str]]:
|
|
116
|
-
"""
|
|
117
|
-
Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
|
|
118
|
-
"""
|
|
119
|
-
return pulumi.get(self, "name")
|
|
120
|
-
|
|
121
|
-
@name.setter
|
|
122
|
-
def name(self, value: Optional[pulumi.Input[str]]):
|
|
123
|
-
pulumi.set(self, "name", value)
|
|
124
|
-
|
|
125
|
-
@property
|
|
126
|
-
@pulumi.getter(name="oauthClientType")
|
|
127
|
-
def oauth_client_type(self) -> Optional[pulumi.Input[str]]:
|
|
128
|
-
"""
|
|
129
|
-
Specifies the type of client being registered. Snowflake supports both confidential and public clients.
|
|
130
|
-
"""
|
|
131
|
-
return pulumi.get(self, "oauth_client_type")
|
|
132
|
-
|
|
133
|
-
@oauth_client_type.setter
|
|
134
|
-
def oauth_client_type(self, value: Optional[pulumi.Input[str]]):
|
|
135
|
-
pulumi.set(self, "oauth_client_type", value)
|
|
136
|
-
|
|
137
|
-
@property
|
|
138
|
-
@pulumi.getter(name="oauthIssueRefreshTokens")
|
|
139
|
-
def oauth_issue_refresh_tokens(self) -> Optional[pulumi.Input[bool]]:
|
|
140
|
-
"""
|
|
141
|
-
Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired.
|
|
142
|
-
"""
|
|
143
|
-
return pulumi.get(self, "oauth_issue_refresh_tokens")
|
|
144
|
-
|
|
145
|
-
@oauth_issue_refresh_tokens.setter
|
|
146
|
-
def oauth_issue_refresh_tokens(self, value: Optional[pulumi.Input[bool]]):
|
|
147
|
-
pulumi.set(self, "oauth_issue_refresh_tokens", value)
|
|
148
|
-
|
|
149
|
-
@property
|
|
150
|
-
@pulumi.getter(name="oauthRedirectUri")
|
|
151
|
-
def oauth_redirect_uri(self) -> Optional[pulumi.Input[str]]:
|
|
152
|
-
"""
|
|
153
|
-
Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
|
|
154
|
-
"""
|
|
155
|
-
return pulumi.get(self, "oauth_redirect_uri")
|
|
156
|
-
|
|
157
|
-
@oauth_redirect_uri.setter
|
|
158
|
-
def oauth_redirect_uri(self, value: Optional[pulumi.Input[str]]):
|
|
159
|
-
pulumi.set(self, "oauth_redirect_uri", value)
|
|
160
|
-
|
|
161
|
-
@property
|
|
162
|
-
@pulumi.getter(name="oauthRefreshTokenValidity")
|
|
163
|
-
def oauth_refresh_token_validity(self) -> Optional[pulumi.Input[int]]:
|
|
164
|
-
"""
|
|
165
|
-
Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
166
|
-
"""
|
|
167
|
-
return pulumi.get(self, "oauth_refresh_token_validity")
|
|
168
|
-
|
|
169
|
-
@oauth_refresh_token_validity.setter
|
|
170
|
-
def oauth_refresh_token_validity(self, value: Optional[pulumi.Input[int]]):
|
|
171
|
-
pulumi.set(self, "oauth_refresh_token_validity", value)
|
|
172
|
-
|
|
173
|
-
@property
|
|
174
|
-
@pulumi.getter(name="oauthUseSecondaryRoles")
|
|
175
|
-
def oauth_use_secondary_roles(self) -> Optional[pulumi.Input[str]]:
|
|
176
|
-
"""
|
|
177
|
-
Specifies whether default secondary roles set in the user properties are activated by default in the session being opened.
|
|
178
|
-
"""
|
|
179
|
-
return pulumi.get(self, "oauth_use_secondary_roles")
|
|
180
|
-
|
|
181
|
-
@oauth_use_secondary_roles.setter
|
|
182
|
-
def oauth_use_secondary_roles(self, value: Optional[pulumi.Input[str]]):
|
|
183
|
-
pulumi.set(self, "oauth_use_secondary_roles", value)
|
|
184
|
-
|
|
185
|
-
|
|
186
|
-
@pulumi.input_type
|
|
187
|
-
class _OauthIntegrationState:
|
|
188
|
-
def __init__(__self__, *,
|
|
189
|
-
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
190
|
-
comment: Optional[pulumi.Input[str]] = None,
|
|
191
|
-
created_on: Optional[pulumi.Input[str]] = None,
|
|
192
|
-
enabled: Optional[pulumi.Input[bool]] = None,
|
|
193
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
194
|
-
oauth_client: Optional[pulumi.Input[str]] = None,
|
|
195
|
-
oauth_client_type: Optional[pulumi.Input[str]] = None,
|
|
196
|
-
oauth_issue_refresh_tokens: Optional[pulumi.Input[bool]] = None,
|
|
197
|
-
oauth_redirect_uri: Optional[pulumi.Input[str]] = None,
|
|
198
|
-
oauth_refresh_token_validity: Optional[pulumi.Input[int]] = None,
|
|
199
|
-
oauth_use_secondary_roles: Optional[pulumi.Input[str]] = None):
|
|
200
|
-
"""
|
|
201
|
-
Input properties used for looking up and filtering OauthIntegration resources.
|
|
202
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: List of roles that a user cannot explicitly consent to using after authenticating. Do not include ACCOUNTADMIN, ORGADMIN or SECURITYADMIN as they are already implicitly enforced and will cause in-place updates.
|
|
203
|
-
:param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
|
|
204
|
-
:param pulumi.Input[str] created_on: Date and time when the OAuth integration was created.
|
|
205
|
-
:param pulumi.Input[bool] enabled: Specifies whether this OAuth integration is enabled or disabled.
|
|
206
|
-
:param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
|
|
207
|
-
:param pulumi.Input[str] oauth_client: Specifies the OAuth client type.
|
|
208
|
-
:param pulumi.Input[str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients.
|
|
209
|
-
:param pulumi.Input[bool] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired.
|
|
210
|
-
:param pulumi.Input[str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
|
|
211
|
-
:param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
212
|
-
:param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened.
|
|
213
|
-
"""
|
|
214
|
-
if blocked_roles_lists is not None:
|
|
215
|
-
pulumi.set(__self__, "blocked_roles_lists", blocked_roles_lists)
|
|
216
|
-
if comment is not None:
|
|
217
|
-
pulumi.set(__self__, "comment", comment)
|
|
218
|
-
if created_on is not None:
|
|
219
|
-
pulumi.set(__self__, "created_on", created_on)
|
|
220
|
-
if enabled is not None:
|
|
221
|
-
pulumi.set(__self__, "enabled", enabled)
|
|
222
|
-
if name is not None:
|
|
223
|
-
pulumi.set(__self__, "name", name)
|
|
224
|
-
if oauth_client is not None:
|
|
225
|
-
pulumi.set(__self__, "oauth_client", oauth_client)
|
|
226
|
-
if oauth_client_type is not None:
|
|
227
|
-
pulumi.set(__self__, "oauth_client_type", oauth_client_type)
|
|
228
|
-
if oauth_issue_refresh_tokens is not None:
|
|
229
|
-
pulumi.set(__self__, "oauth_issue_refresh_tokens", oauth_issue_refresh_tokens)
|
|
230
|
-
if oauth_redirect_uri is not None:
|
|
231
|
-
pulumi.set(__self__, "oauth_redirect_uri", oauth_redirect_uri)
|
|
232
|
-
if oauth_refresh_token_validity is not None:
|
|
233
|
-
pulumi.set(__self__, "oauth_refresh_token_validity", oauth_refresh_token_validity)
|
|
234
|
-
if oauth_use_secondary_roles is not None:
|
|
235
|
-
pulumi.set(__self__, "oauth_use_secondary_roles", oauth_use_secondary_roles)
|
|
236
|
-
|
|
237
|
-
@property
|
|
238
|
-
@pulumi.getter(name="blockedRolesLists")
|
|
239
|
-
def blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
240
|
-
"""
|
|
241
|
-
List of roles that a user cannot explicitly consent to using after authenticating. Do not include ACCOUNTADMIN, ORGADMIN or SECURITYADMIN as they are already implicitly enforced and will cause in-place updates.
|
|
242
|
-
"""
|
|
243
|
-
return pulumi.get(self, "blocked_roles_lists")
|
|
244
|
-
|
|
245
|
-
@blocked_roles_lists.setter
|
|
246
|
-
def blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
247
|
-
pulumi.set(self, "blocked_roles_lists", value)
|
|
248
|
-
|
|
249
|
-
@property
|
|
250
|
-
@pulumi.getter
|
|
251
|
-
def comment(self) -> Optional[pulumi.Input[str]]:
|
|
252
|
-
"""
|
|
253
|
-
Specifies a comment for the OAuth integration.
|
|
254
|
-
"""
|
|
255
|
-
return pulumi.get(self, "comment")
|
|
256
|
-
|
|
257
|
-
@comment.setter
|
|
258
|
-
def comment(self, value: Optional[pulumi.Input[str]]):
|
|
259
|
-
pulumi.set(self, "comment", value)
|
|
260
|
-
|
|
261
|
-
@property
|
|
262
|
-
@pulumi.getter(name="createdOn")
|
|
263
|
-
def created_on(self) -> Optional[pulumi.Input[str]]:
|
|
264
|
-
"""
|
|
265
|
-
Date and time when the OAuth integration was created.
|
|
266
|
-
"""
|
|
267
|
-
return pulumi.get(self, "created_on")
|
|
268
|
-
|
|
269
|
-
@created_on.setter
|
|
270
|
-
def created_on(self, value: Optional[pulumi.Input[str]]):
|
|
271
|
-
pulumi.set(self, "created_on", value)
|
|
272
|
-
|
|
273
|
-
@property
|
|
274
|
-
@pulumi.getter
|
|
275
|
-
def enabled(self) -> Optional[pulumi.Input[bool]]:
|
|
276
|
-
"""
|
|
277
|
-
Specifies whether this OAuth integration is enabled or disabled.
|
|
278
|
-
"""
|
|
279
|
-
return pulumi.get(self, "enabled")
|
|
280
|
-
|
|
281
|
-
@enabled.setter
|
|
282
|
-
def enabled(self, value: Optional[pulumi.Input[bool]]):
|
|
283
|
-
pulumi.set(self, "enabled", value)
|
|
284
|
-
|
|
285
|
-
@property
|
|
286
|
-
@pulumi.getter
|
|
287
|
-
def name(self) -> Optional[pulumi.Input[str]]:
|
|
288
|
-
"""
|
|
289
|
-
Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
|
|
290
|
-
"""
|
|
291
|
-
return pulumi.get(self, "name")
|
|
292
|
-
|
|
293
|
-
@name.setter
|
|
294
|
-
def name(self, value: Optional[pulumi.Input[str]]):
|
|
295
|
-
pulumi.set(self, "name", value)
|
|
296
|
-
|
|
297
|
-
@property
|
|
298
|
-
@pulumi.getter(name="oauthClient")
|
|
299
|
-
def oauth_client(self) -> Optional[pulumi.Input[str]]:
|
|
300
|
-
"""
|
|
301
|
-
Specifies the OAuth client type.
|
|
302
|
-
"""
|
|
303
|
-
return pulumi.get(self, "oauth_client")
|
|
304
|
-
|
|
305
|
-
@oauth_client.setter
|
|
306
|
-
def oauth_client(self, value: Optional[pulumi.Input[str]]):
|
|
307
|
-
pulumi.set(self, "oauth_client", value)
|
|
308
|
-
|
|
309
|
-
@property
|
|
310
|
-
@pulumi.getter(name="oauthClientType")
|
|
311
|
-
def oauth_client_type(self) -> Optional[pulumi.Input[str]]:
|
|
312
|
-
"""
|
|
313
|
-
Specifies the type of client being registered. Snowflake supports both confidential and public clients.
|
|
314
|
-
"""
|
|
315
|
-
return pulumi.get(self, "oauth_client_type")
|
|
316
|
-
|
|
317
|
-
@oauth_client_type.setter
|
|
318
|
-
def oauth_client_type(self, value: Optional[pulumi.Input[str]]):
|
|
319
|
-
pulumi.set(self, "oauth_client_type", value)
|
|
320
|
-
|
|
321
|
-
@property
|
|
322
|
-
@pulumi.getter(name="oauthIssueRefreshTokens")
|
|
323
|
-
def oauth_issue_refresh_tokens(self) -> Optional[pulumi.Input[bool]]:
|
|
324
|
-
"""
|
|
325
|
-
Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired.
|
|
326
|
-
"""
|
|
327
|
-
return pulumi.get(self, "oauth_issue_refresh_tokens")
|
|
328
|
-
|
|
329
|
-
@oauth_issue_refresh_tokens.setter
|
|
330
|
-
def oauth_issue_refresh_tokens(self, value: Optional[pulumi.Input[bool]]):
|
|
331
|
-
pulumi.set(self, "oauth_issue_refresh_tokens", value)
|
|
332
|
-
|
|
333
|
-
@property
|
|
334
|
-
@pulumi.getter(name="oauthRedirectUri")
|
|
335
|
-
def oauth_redirect_uri(self) -> Optional[pulumi.Input[str]]:
|
|
336
|
-
"""
|
|
337
|
-
Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
|
|
338
|
-
"""
|
|
339
|
-
return pulumi.get(self, "oauth_redirect_uri")
|
|
340
|
-
|
|
341
|
-
@oauth_redirect_uri.setter
|
|
342
|
-
def oauth_redirect_uri(self, value: Optional[pulumi.Input[str]]):
|
|
343
|
-
pulumi.set(self, "oauth_redirect_uri", value)
|
|
344
|
-
|
|
345
|
-
@property
|
|
346
|
-
@pulumi.getter(name="oauthRefreshTokenValidity")
|
|
347
|
-
def oauth_refresh_token_validity(self) -> Optional[pulumi.Input[int]]:
|
|
348
|
-
"""
|
|
349
|
-
Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
350
|
-
"""
|
|
351
|
-
return pulumi.get(self, "oauth_refresh_token_validity")
|
|
352
|
-
|
|
353
|
-
@oauth_refresh_token_validity.setter
|
|
354
|
-
def oauth_refresh_token_validity(self, value: Optional[pulumi.Input[int]]):
|
|
355
|
-
pulumi.set(self, "oauth_refresh_token_validity", value)
|
|
356
|
-
|
|
357
|
-
@property
|
|
358
|
-
@pulumi.getter(name="oauthUseSecondaryRoles")
|
|
359
|
-
def oauth_use_secondary_roles(self) -> Optional[pulumi.Input[str]]:
|
|
360
|
-
"""
|
|
361
|
-
Specifies whether default secondary roles set in the user properties are activated by default in the session being opened.
|
|
362
|
-
"""
|
|
363
|
-
return pulumi.get(self, "oauth_use_secondary_roles")
|
|
364
|
-
|
|
365
|
-
@oauth_use_secondary_roles.setter
|
|
366
|
-
def oauth_use_secondary_roles(self, value: Optional[pulumi.Input[str]]):
|
|
367
|
-
pulumi.set(self, "oauth_use_secondary_roles", value)
|
|
368
|
-
|
|
369
|
-
|
|
370
|
-
class OauthIntegration(pulumi.CustomResource):
|
|
371
|
-
@overload
|
|
372
|
-
def __init__(__self__,
|
|
373
|
-
resource_name: str,
|
|
374
|
-
opts: Optional[pulumi.ResourceOptions] = None,
|
|
375
|
-
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
376
|
-
comment: Optional[pulumi.Input[str]] = None,
|
|
377
|
-
enabled: Optional[pulumi.Input[bool]] = None,
|
|
378
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
379
|
-
oauth_client: Optional[pulumi.Input[str]] = None,
|
|
380
|
-
oauth_client_type: Optional[pulumi.Input[str]] = None,
|
|
381
|
-
oauth_issue_refresh_tokens: Optional[pulumi.Input[bool]] = None,
|
|
382
|
-
oauth_redirect_uri: Optional[pulumi.Input[str]] = None,
|
|
383
|
-
oauth_refresh_token_validity: Optional[pulumi.Input[int]] = None,
|
|
384
|
-
oauth_use_secondary_roles: Optional[pulumi.Input[str]] = None,
|
|
385
|
-
__props__=None):
|
|
386
|
-
"""
|
|
387
|
-
## Import
|
|
388
|
-
|
|
389
|
-
```sh
|
|
390
|
-
$ pulumi import snowflake:index/oauthIntegration:OauthIntegration example name
|
|
391
|
-
```
|
|
392
|
-
|
|
393
|
-
:param str resource_name: The name of the resource.
|
|
394
|
-
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
395
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: List of roles that a user cannot explicitly consent to using after authenticating. Do not include ACCOUNTADMIN, ORGADMIN or SECURITYADMIN as they are already implicitly enforced and will cause in-place updates.
|
|
396
|
-
:param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
|
|
397
|
-
:param pulumi.Input[bool] enabled: Specifies whether this OAuth integration is enabled or disabled.
|
|
398
|
-
:param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
|
|
399
|
-
:param pulumi.Input[str] oauth_client: Specifies the OAuth client type.
|
|
400
|
-
:param pulumi.Input[str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients.
|
|
401
|
-
:param pulumi.Input[bool] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired.
|
|
402
|
-
:param pulumi.Input[str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
|
|
403
|
-
:param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
404
|
-
:param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened.
|
|
405
|
-
"""
|
|
406
|
-
...
|
|
407
|
-
@overload
|
|
408
|
-
def __init__(__self__,
|
|
409
|
-
resource_name: str,
|
|
410
|
-
args: OauthIntegrationArgs,
|
|
411
|
-
opts: Optional[pulumi.ResourceOptions] = None):
|
|
412
|
-
"""
|
|
413
|
-
## Import
|
|
414
|
-
|
|
415
|
-
```sh
|
|
416
|
-
$ pulumi import snowflake:index/oauthIntegration:OauthIntegration example name
|
|
417
|
-
```
|
|
418
|
-
|
|
419
|
-
:param str resource_name: The name of the resource.
|
|
420
|
-
:param OauthIntegrationArgs args: The arguments to use to populate this resource's properties.
|
|
421
|
-
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
422
|
-
"""
|
|
423
|
-
...
|
|
424
|
-
def __init__(__self__, resource_name: str, *args, **kwargs):
|
|
425
|
-
resource_args, opts = _utilities.get_resource_args_opts(OauthIntegrationArgs, pulumi.ResourceOptions, *args, **kwargs)
|
|
426
|
-
if resource_args is not None:
|
|
427
|
-
__self__._internal_init(resource_name, opts, **resource_args.__dict__)
|
|
428
|
-
else:
|
|
429
|
-
__self__._internal_init(resource_name, *args, **kwargs)
|
|
430
|
-
|
|
431
|
-
def _internal_init(__self__,
|
|
432
|
-
resource_name: str,
|
|
433
|
-
opts: Optional[pulumi.ResourceOptions] = None,
|
|
434
|
-
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
435
|
-
comment: Optional[pulumi.Input[str]] = None,
|
|
436
|
-
enabled: Optional[pulumi.Input[bool]] = None,
|
|
437
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
438
|
-
oauth_client: Optional[pulumi.Input[str]] = None,
|
|
439
|
-
oauth_client_type: Optional[pulumi.Input[str]] = None,
|
|
440
|
-
oauth_issue_refresh_tokens: Optional[pulumi.Input[bool]] = None,
|
|
441
|
-
oauth_redirect_uri: Optional[pulumi.Input[str]] = None,
|
|
442
|
-
oauth_refresh_token_validity: Optional[pulumi.Input[int]] = None,
|
|
443
|
-
oauth_use_secondary_roles: Optional[pulumi.Input[str]] = None,
|
|
444
|
-
__props__=None):
|
|
445
|
-
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
446
|
-
if not isinstance(opts, pulumi.ResourceOptions):
|
|
447
|
-
raise TypeError('Expected resource options to be a ResourceOptions instance')
|
|
448
|
-
if opts.id is None:
|
|
449
|
-
if __props__ is not None:
|
|
450
|
-
raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
|
|
451
|
-
__props__ = OauthIntegrationArgs.__new__(OauthIntegrationArgs)
|
|
452
|
-
|
|
453
|
-
__props__.__dict__["blocked_roles_lists"] = blocked_roles_lists
|
|
454
|
-
__props__.__dict__["comment"] = comment
|
|
455
|
-
__props__.__dict__["enabled"] = enabled
|
|
456
|
-
__props__.__dict__["name"] = name
|
|
457
|
-
if oauth_client is None and not opts.urn:
|
|
458
|
-
raise TypeError("Missing required property 'oauth_client'")
|
|
459
|
-
__props__.__dict__["oauth_client"] = oauth_client
|
|
460
|
-
__props__.__dict__["oauth_client_type"] = oauth_client_type
|
|
461
|
-
__props__.__dict__["oauth_issue_refresh_tokens"] = oauth_issue_refresh_tokens
|
|
462
|
-
__props__.__dict__["oauth_redirect_uri"] = oauth_redirect_uri
|
|
463
|
-
__props__.__dict__["oauth_refresh_token_validity"] = oauth_refresh_token_validity
|
|
464
|
-
__props__.__dict__["oauth_use_secondary_roles"] = oauth_use_secondary_roles
|
|
465
|
-
__props__.__dict__["created_on"] = None
|
|
466
|
-
super(OauthIntegration, __self__).__init__(
|
|
467
|
-
'snowflake:index/oauthIntegration:OauthIntegration',
|
|
468
|
-
resource_name,
|
|
469
|
-
__props__,
|
|
470
|
-
opts)
|
|
471
|
-
|
|
472
|
-
@staticmethod
|
|
473
|
-
def get(resource_name: str,
|
|
474
|
-
id: pulumi.Input[str],
|
|
475
|
-
opts: Optional[pulumi.ResourceOptions] = None,
|
|
476
|
-
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
477
|
-
comment: Optional[pulumi.Input[str]] = None,
|
|
478
|
-
created_on: Optional[pulumi.Input[str]] = None,
|
|
479
|
-
enabled: Optional[pulumi.Input[bool]] = None,
|
|
480
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
481
|
-
oauth_client: Optional[pulumi.Input[str]] = None,
|
|
482
|
-
oauth_client_type: Optional[pulumi.Input[str]] = None,
|
|
483
|
-
oauth_issue_refresh_tokens: Optional[pulumi.Input[bool]] = None,
|
|
484
|
-
oauth_redirect_uri: Optional[pulumi.Input[str]] = None,
|
|
485
|
-
oauth_refresh_token_validity: Optional[pulumi.Input[int]] = None,
|
|
486
|
-
oauth_use_secondary_roles: Optional[pulumi.Input[str]] = None) -> 'OauthIntegration':
|
|
487
|
-
"""
|
|
488
|
-
Get an existing OauthIntegration resource's state with the given name, id, and optional extra
|
|
489
|
-
properties used to qualify the lookup.
|
|
490
|
-
|
|
491
|
-
:param str resource_name: The unique name of the resulting resource.
|
|
492
|
-
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
493
|
-
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
494
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: List of roles that a user cannot explicitly consent to using after authenticating. Do not include ACCOUNTADMIN, ORGADMIN or SECURITYADMIN as they are already implicitly enforced and will cause in-place updates.
|
|
495
|
-
:param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
|
|
496
|
-
:param pulumi.Input[str] created_on: Date and time when the OAuth integration was created.
|
|
497
|
-
:param pulumi.Input[bool] enabled: Specifies whether this OAuth integration is enabled or disabled.
|
|
498
|
-
:param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
|
|
499
|
-
:param pulumi.Input[str] oauth_client: Specifies the OAuth client type.
|
|
500
|
-
:param pulumi.Input[str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients.
|
|
501
|
-
:param pulumi.Input[bool] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired.
|
|
502
|
-
:param pulumi.Input[str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
|
|
503
|
-
:param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
504
|
-
:param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened.
|
|
505
|
-
"""
|
|
506
|
-
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
507
|
-
|
|
508
|
-
__props__ = _OauthIntegrationState.__new__(_OauthIntegrationState)
|
|
509
|
-
|
|
510
|
-
__props__.__dict__["blocked_roles_lists"] = blocked_roles_lists
|
|
511
|
-
__props__.__dict__["comment"] = comment
|
|
512
|
-
__props__.__dict__["created_on"] = created_on
|
|
513
|
-
__props__.__dict__["enabled"] = enabled
|
|
514
|
-
__props__.__dict__["name"] = name
|
|
515
|
-
__props__.__dict__["oauth_client"] = oauth_client
|
|
516
|
-
__props__.__dict__["oauth_client_type"] = oauth_client_type
|
|
517
|
-
__props__.__dict__["oauth_issue_refresh_tokens"] = oauth_issue_refresh_tokens
|
|
518
|
-
__props__.__dict__["oauth_redirect_uri"] = oauth_redirect_uri
|
|
519
|
-
__props__.__dict__["oauth_refresh_token_validity"] = oauth_refresh_token_validity
|
|
520
|
-
__props__.__dict__["oauth_use_secondary_roles"] = oauth_use_secondary_roles
|
|
521
|
-
return OauthIntegration(resource_name, opts=opts, __props__=__props__)
|
|
522
|
-
|
|
523
|
-
@property
|
|
524
|
-
@pulumi.getter(name="blockedRolesLists")
|
|
525
|
-
def blocked_roles_lists(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
|
526
|
-
"""
|
|
527
|
-
List of roles that a user cannot explicitly consent to using after authenticating. Do not include ACCOUNTADMIN, ORGADMIN or SECURITYADMIN as they are already implicitly enforced and will cause in-place updates.
|
|
528
|
-
"""
|
|
529
|
-
return pulumi.get(self, "blocked_roles_lists")
|
|
530
|
-
|
|
531
|
-
@property
|
|
532
|
-
@pulumi.getter
|
|
533
|
-
def comment(self) -> pulumi.Output[Optional[str]]:
|
|
534
|
-
"""
|
|
535
|
-
Specifies a comment for the OAuth integration.
|
|
536
|
-
"""
|
|
537
|
-
return pulumi.get(self, "comment")
|
|
538
|
-
|
|
539
|
-
@property
|
|
540
|
-
@pulumi.getter(name="createdOn")
|
|
541
|
-
def created_on(self) -> pulumi.Output[str]:
|
|
542
|
-
"""
|
|
543
|
-
Date and time when the OAuth integration was created.
|
|
544
|
-
"""
|
|
545
|
-
return pulumi.get(self, "created_on")
|
|
546
|
-
|
|
547
|
-
@property
|
|
548
|
-
@pulumi.getter
|
|
549
|
-
def enabled(self) -> pulumi.Output[Optional[bool]]:
|
|
550
|
-
"""
|
|
551
|
-
Specifies whether this OAuth integration is enabled or disabled.
|
|
552
|
-
"""
|
|
553
|
-
return pulumi.get(self, "enabled")
|
|
554
|
-
|
|
555
|
-
@property
|
|
556
|
-
@pulumi.getter
|
|
557
|
-
def name(self) -> pulumi.Output[str]:
|
|
558
|
-
"""
|
|
559
|
-
Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
|
|
560
|
-
"""
|
|
561
|
-
return pulumi.get(self, "name")
|
|
562
|
-
|
|
563
|
-
@property
|
|
564
|
-
@pulumi.getter(name="oauthClient")
|
|
565
|
-
def oauth_client(self) -> pulumi.Output[str]:
|
|
566
|
-
"""
|
|
567
|
-
Specifies the OAuth client type.
|
|
568
|
-
"""
|
|
569
|
-
return pulumi.get(self, "oauth_client")
|
|
570
|
-
|
|
571
|
-
@property
|
|
572
|
-
@pulumi.getter(name="oauthClientType")
|
|
573
|
-
def oauth_client_type(self) -> pulumi.Output[Optional[str]]:
|
|
574
|
-
"""
|
|
575
|
-
Specifies the type of client being registered. Snowflake supports both confidential and public clients.
|
|
576
|
-
"""
|
|
577
|
-
return pulumi.get(self, "oauth_client_type")
|
|
578
|
-
|
|
579
|
-
@property
|
|
580
|
-
@pulumi.getter(name="oauthIssueRefreshTokens")
|
|
581
|
-
def oauth_issue_refresh_tokens(self) -> pulumi.Output[Optional[bool]]:
|
|
582
|
-
"""
|
|
583
|
-
Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired.
|
|
584
|
-
"""
|
|
585
|
-
return pulumi.get(self, "oauth_issue_refresh_tokens")
|
|
586
|
-
|
|
587
|
-
@property
|
|
588
|
-
@pulumi.getter(name="oauthRedirectUri")
|
|
589
|
-
def oauth_redirect_uri(self) -> pulumi.Output[Optional[str]]:
|
|
590
|
-
"""
|
|
591
|
-
Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
|
|
592
|
-
"""
|
|
593
|
-
return pulumi.get(self, "oauth_redirect_uri")
|
|
594
|
-
|
|
595
|
-
@property
|
|
596
|
-
@pulumi.getter(name="oauthRefreshTokenValidity")
|
|
597
|
-
def oauth_refresh_token_validity(self) -> pulumi.Output[Optional[int]]:
|
|
598
|
-
"""
|
|
599
|
-
Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
600
|
-
"""
|
|
601
|
-
return pulumi.get(self, "oauth_refresh_token_validity")
|
|
602
|
-
|
|
603
|
-
@property
|
|
604
|
-
@pulumi.getter(name="oauthUseSecondaryRoles")
|
|
605
|
-
def oauth_use_secondary_roles(self) -> pulumi.Output[Optional[str]]:
|
|
606
|
-
"""
|
|
607
|
-
Specifies whether default secondary roles set in the user properties are activated by default in the session being opened.
|
|
608
|
-
"""
|
|
609
|
-
return pulumi.get(self, "oauth_use_secondary_roles")
|
|
610
|
-
|