pulumi-snowflake 0.63.0a1734439451__py3-none-any.whl → 1.0.0a1734440141__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-snowflake might be problematic. Click here for more details.
- pulumi_snowflake/__init__.py +82 -74
- pulumi_snowflake/_inputs.py +12705 -4876
- pulumi_snowflake/account.py +156 -163
- pulumi_snowflake/account_parameter.py +16 -16
- pulumi_snowflake/account_role.py +9 -9
- pulumi_snowflake/api_authentication_integration_with_authorization_code_grant.py +9 -22
- pulumi_snowflake/api_authentication_integration_with_client_credentials.py +9 -22
- pulumi_snowflake/api_authentication_integration_with_jwt_bearer.py +9 -22
- pulumi_snowflake/authentication_policy.py +21 -21
- pulumi_snowflake/config/__init__.pyi +8 -86
- pulumi_snowflake/config/vars.py +10 -110
- pulumi_snowflake/database.py +9 -9
- pulumi_snowflake/database_role.py +14 -14
- pulumi_snowflake/{unsafe_execute.py → execute.py} +35 -25
- pulumi_snowflake/external_oauth_integration.py +27 -27
- pulumi_snowflake/external_volume.py +11 -7
- pulumi_snowflake/function_java.py +1211 -0
- pulumi_snowflake/function_javascript.py +882 -0
- pulumi_snowflake/function_python.py +1212 -0
- pulumi_snowflake/function_scala.py +1212 -0
- pulumi_snowflake/function_sql.py +835 -0
- pulumi_snowflake/get_account_roles.py +129 -0
- pulumi_snowflake/get_accounts.py +41 -19
- pulumi_snowflake/get_alerts.py +4 -0
- pulumi_snowflake/get_connections.py +2 -40
- pulumi_snowflake/get_cortex_search_services.py +4 -0
- pulumi_snowflake/get_current_account.py +4 -0
- pulumi_snowflake/get_current_role.py +2 -2
- pulumi_snowflake/get_database.py +4 -0
- pulumi_snowflake/get_database_role.py +4 -0
- pulumi_snowflake/get_database_roles.py +2 -6
- pulumi_snowflake/get_databases.py +2 -6
- pulumi_snowflake/get_dynamic_tables.py +4 -2
- pulumi_snowflake/get_external_functions.py +4 -0
- pulumi_snowflake/get_external_tables.py +4 -0
- pulumi_snowflake/get_failover_groups.py +4 -2
- pulumi_snowflake/get_file_formats.py +4 -0
- pulumi_snowflake/get_functions.py +4 -0
- pulumi_snowflake/get_grants.py +0 -4
- pulumi_snowflake/get_masking_policies.py +2 -6
- pulumi_snowflake/get_materialized_views.py +4 -0
- pulumi_snowflake/get_network_policies.py +2 -6
- pulumi_snowflake/get_parameters.py +4 -0
- pulumi_snowflake/get_pipes.py +4 -0
- pulumi_snowflake/get_procedures.py +4 -0
- pulumi_snowflake/get_resource_monitors.py +2 -6
- pulumi_snowflake/get_row_access_policies.py +2 -6
- pulumi_snowflake/get_schemas.py +6 -4
- pulumi_snowflake/get_secrets.py +2 -6
- pulumi_snowflake/get_security_integrations.py +2 -6
- pulumi_snowflake/get_sequences.py +4 -0
- pulumi_snowflake/get_shares.py +4 -0
- pulumi_snowflake/get_stages.py +4 -0
- pulumi_snowflake/get_storage_integrations.py +4 -0
- pulumi_snowflake/get_streamlits.py +2 -6
- pulumi_snowflake/get_streams.py +2 -6
- pulumi_snowflake/get_system_generate_scim_access_token.py +4 -0
- pulumi_snowflake/get_system_get_private_link_config.py +4 -0
- pulumi_snowflake/get_system_get_snowflake_platform_info.py +2 -2
- pulumi_snowflake/get_tables.py +4 -0
- pulumi_snowflake/get_tags.py +2 -6
- pulumi_snowflake/get_tasks.py +0 -4
- pulumi_snowflake/get_users.py +2 -6
- pulumi_snowflake/get_views.py +2 -6
- pulumi_snowflake/get_warehouses.py +2 -6
- pulumi_snowflake/grant_account_role.py +21 -21
- pulumi_snowflake/grant_application_role.py +7 -7
- pulumi_snowflake/grant_database_role.py +28 -28
- pulumi_snowflake/grant_ownership.py +14 -14
- pulumi_snowflake/grant_privileges_to_account_role.py +14 -14
- pulumi_snowflake/grant_privileges_to_database_role.py +14 -14
- pulumi_snowflake/grant_privileges_to_share.py +42 -42
- pulumi_snowflake/legacy_service_user.py +21 -21
- pulumi_snowflake/masking_policy.py +21 -21
- pulumi_snowflake/network_policy.py +23 -23
- pulumi_snowflake/oauth_integration_for_custom_clients.py +73 -46
- pulumi_snowflake/oauth_integration_for_partner_applications.py +57 -30
- pulumi_snowflake/outputs.py +10029 -4056
- pulumi_snowflake/password_policy.py +12 -2
- pulumi_snowflake/primary_connection.py +16 -16
- pulumi_snowflake/procedure_java.py +1273 -0
- pulumi_snowflake/procedure_javascript.py +895 -0
- pulumi_snowflake/procedure_python.py +1226 -0
- pulumi_snowflake/procedure_scala.py +1273 -0
- pulumi_snowflake/procedure_sql.py +895 -0
- pulumi_snowflake/provider.py +40 -527
- pulumi_snowflake/pulumi-plugin.json +1 -1
- pulumi_snowflake/resource_monitor.py +16 -20
- pulumi_snowflake/row_access_policy.py +21 -21
- pulumi_snowflake/saml2_integration.py +9 -9
- pulumi_snowflake/schema.py +14 -18
- pulumi_snowflake/scim_integration.py +16 -16
- pulumi_snowflake/secondary_connection.py +16 -16
- pulumi_snowflake/secondary_database.py +16 -16
- pulumi_snowflake/secret_with_authorization_code_grant.py +28 -28
- pulumi_snowflake/secret_with_basic_authentication.py +21 -21
- pulumi_snowflake/secret_with_client_credentials.py +28 -28
- pulumi_snowflake/secret_with_generic_string.py +21 -21
- pulumi_snowflake/service_user.py +21 -21
- pulumi_snowflake/shared_database.py +16 -16
- pulumi_snowflake/stream_on_directory_table.py +28 -41
- pulumi_snowflake/stream_on_external_table.py +28 -41
- pulumi_snowflake/stream_on_table.py +28 -41
- pulumi_snowflake/stream_on_view.py +28 -41
- pulumi_snowflake/streamlit.py +42 -46
- pulumi_snowflake/tag.py +28 -28
- pulumi_snowflake/tag_association.py +28 -86
- pulumi_snowflake/task.py +58 -62
- pulumi_snowflake/user.py +21 -21
- pulumi_snowflake/view.py +28 -41
- pulumi_snowflake/warehouse.py +16 -16
- {pulumi_snowflake-0.63.0a1734439451.dist-info → pulumi_snowflake-1.0.0a1734440141.dist-info}/METADATA +1 -1
- pulumi_snowflake-1.0.0a1734440141.dist-info/RECORD +148 -0
- pulumi_snowflake/database_old.py +0 -489
- pulumi_snowflake/function.py +0 -901
- pulumi_snowflake/get_role.py +0 -126
- pulumi_snowflake/get_roles.py +0 -133
- pulumi_snowflake/oauth_integration.py +0 -610
- pulumi_snowflake/procedure.py +0 -910
- pulumi_snowflake/role.py +0 -250
- pulumi_snowflake/saml_integration.py +0 -916
- pulumi_snowflake/session_parameter.py +0 -301
- pulumi_snowflake/stream.py +0 -643
- pulumi_snowflake/tag_masking_policy_association.py +0 -211
- pulumi_snowflake-0.63.0a1734439451.dist-info/RECORD +0 -148
- {pulumi_snowflake-0.63.0a1734439451.dist-info → pulumi_snowflake-1.0.0a1734440141.dist-info}/WHEEL +0 -0
- {pulumi_snowflake-0.63.0a1734439451.dist-info → pulumi_snowflake-1.0.0a1734440141.dist-info}/top_level.txt +0 -0
pulumi_snowflake/database.py
CHANGED
|
@@ -54,7 +54,7 @@ class DatabaseArgs:
|
|
|
54
54
|
:param pulumi.Input[bool] is_transient: Specifies the database as transient. Transient databases do not have a Fail-safe period so they do not incur additional storage costs once they leave Time Travel; however, this means they are also not protected by Fail-safe in the event of a data loss.
|
|
55
55
|
:param pulumi.Input[str] log_level: Specifies the severity level of messages that should be ingested and made available in the active event table. Valid options are: [TRACE DEBUG INFO WARN ERROR FATAL OFF]. Messages at the specified level (and at more severe levels) are ingested. For more information, see [LOG_LEVEL](https://docs.snowflake.com/en/sql-reference/parameters.html#label-log-level).
|
|
56
56
|
:param pulumi.Input[int] max_data_extension_time_in_days: Object parameter that specifies the maximum number of days for which Snowflake can extend the data retention period for tables in the database to prevent streams on the tables from becoming stale. For a detailed description of this parameter, see [MAX*DATA*EXTENSION*TIME*IN_DAYS](https://docs.snowflake.com/en/sql-reference/parameters.html#label-max-data-extension-time-in-days).
|
|
57
|
-
:param pulumi.Input[str] name: Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
57
|
+
:param pulumi.Input[str] name: Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
58
58
|
:param pulumi.Input[bool] quoted_identifiers_ignore_case: If true, the case of quoted identifiers is ignored. For more information, see [QUOTED*IDENTIFIERS*IGNORE_CASE](https://docs.snowflake.com/en/sql-reference/parameters#quoted-identifiers-ignore-case).
|
|
59
59
|
:param pulumi.Input[bool] replace_invalid_characters: Specifies whether to replace invalid UTF-8 characters with the Unicode replacement character (�) in query results for an Iceberg table. You can only set this parameter for tables that use an external Iceberg catalog. For more information, see [REPLACE*INVALID*CHARACTERS](https://docs.snowflake.com/en/sql-reference/parameters#replace-invalid-characters).
|
|
60
60
|
:param pulumi.Input['DatabaseReplicationArgs'] replication: Configures replication for a given database. When specified, this database will be promoted to serve as a primary database for replication. A primary database can be replicated in one or more accounts, allowing users in those accounts to query objects in each secondary (i.e. replica) database.
|
|
@@ -233,7 +233,7 @@ class DatabaseArgs:
|
|
|
233
233
|
@pulumi.getter
|
|
234
234
|
def name(self) -> Optional[pulumi.Input[str]]:
|
|
235
235
|
"""
|
|
236
|
-
Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
236
|
+
Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
237
237
|
"""
|
|
238
238
|
return pulumi.get(self, "name")
|
|
239
239
|
|
|
@@ -400,7 +400,7 @@ class _DatabaseState:
|
|
|
400
400
|
:param pulumi.Input[bool] is_transient: Specifies the database as transient. Transient databases do not have a Fail-safe period so they do not incur additional storage costs once they leave Time Travel; however, this means they are also not protected by Fail-safe in the event of a data loss.
|
|
401
401
|
:param pulumi.Input[str] log_level: Specifies the severity level of messages that should be ingested and made available in the active event table. Valid options are: [TRACE DEBUG INFO WARN ERROR FATAL OFF]. Messages at the specified level (and at more severe levels) are ingested. For more information, see [LOG_LEVEL](https://docs.snowflake.com/en/sql-reference/parameters.html#label-log-level).
|
|
402
402
|
:param pulumi.Input[int] max_data_extension_time_in_days: Object parameter that specifies the maximum number of days for which Snowflake can extend the data retention period for tables in the database to prevent streams on the tables from becoming stale. For a detailed description of this parameter, see [MAX*DATA*EXTENSION*TIME*IN_DAYS](https://docs.snowflake.com/en/sql-reference/parameters.html#label-max-data-extension-time-in-days).
|
|
403
|
-
:param pulumi.Input[str] name: Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
403
|
+
:param pulumi.Input[str] name: Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
404
404
|
:param pulumi.Input[bool] quoted_identifiers_ignore_case: If true, the case of quoted identifiers is ignored. For more information, see [QUOTED*IDENTIFIERS*IGNORE_CASE](https://docs.snowflake.com/en/sql-reference/parameters#quoted-identifiers-ignore-case).
|
|
405
405
|
:param pulumi.Input[bool] replace_invalid_characters: Specifies whether to replace invalid UTF-8 characters with the Unicode replacement character (�) in query results for an Iceberg table. You can only set this parameter for tables that use an external Iceberg catalog. For more information, see [REPLACE*INVALID*CHARACTERS](https://docs.snowflake.com/en/sql-reference/parameters#replace-invalid-characters).
|
|
406
406
|
:param pulumi.Input['DatabaseReplicationArgs'] replication: Configures replication for a given database. When specified, this database will be promoted to serve as a primary database for replication. A primary database can be replicated in one or more accounts, allowing users in those accounts to query objects in each secondary (i.e. replica) database.
|
|
@@ -593,7 +593,7 @@ class _DatabaseState:
|
|
|
593
593
|
@pulumi.getter
|
|
594
594
|
def name(self) -> Optional[pulumi.Input[str]]:
|
|
595
595
|
"""
|
|
596
|
-
Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
596
|
+
Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
597
597
|
"""
|
|
598
598
|
return pulumi.get(self, "name")
|
|
599
599
|
|
|
@@ -753,7 +753,7 @@ class Database(pulumi.CustomResource):
|
|
|
753
753
|
## Import
|
|
754
754
|
|
|
755
755
|
```sh
|
|
756
|
-
$ pulumi import snowflake:index/database:Database example 'database_name'
|
|
756
|
+
$ pulumi import snowflake:index/database:Database example '"<database_name>"'
|
|
757
757
|
```
|
|
758
758
|
|
|
759
759
|
:param str resource_name: The name of the resource.
|
|
@@ -768,7 +768,7 @@ class Database(pulumi.CustomResource):
|
|
|
768
768
|
:param pulumi.Input[bool] is_transient: Specifies the database as transient. Transient databases do not have a Fail-safe period so they do not incur additional storage costs once they leave Time Travel; however, this means they are also not protected by Fail-safe in the event of a data loss.
|
|
769
769
|
:param pulumi.Input[str] log_level: Specifies the severity level of messages that should be ingested and made available in the active event table. Valid options are: [TRACE DEBUG INFO WARN ERROR FATAL OFF]. Messages at the specified level (and at more severe levels) are ingested. For more information, see [LOG_LEVEL](https://docs.snowflake.com/en/sql-reference/parameters.html#label-log-level).
|
|
770
770
|
:param pulumi.Input[int] max_data_extension_time_in_days: Object parameter that specifies the maximum number of days for which Snowflake can extend the data retention period for tables in the database to prevent streams on the tables from becoming stale. For a detailed description of this parameter, see [MAX*DATA*EXTENSION*TIME*IN_DAYS](https://docs.snowflake.com/en/sql-reference/parameters.html#label-max-data-extension-time-in-days).
|
|
771
|
-
:param pulumi.Input[str] name: Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
771
|
+
:param pulumi.Input[str] name: Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
772
772
|
:param pulumi.Input[bool] quoted_identifiers_ignore_case: If true, the case of quoted identifiers is ignored. For more information, see [QUOTED*IDENTIFIERS*IGNORE_CASE](https://docs.snowflake.com/en/sql-reference/parameters#quoted-identifiers-ignore-case).
|
|
773
773
|
:param pulumi.Input[bool] replace_invalid_characters: Specifies whether to replace invalid UTF-8 characters with the Unicode replacement character (�) in query results for an Iceberg table. You can only set this parameter for tables that use an external Iceberg catalog. For more information, see [REPLACE*INVALID*CHARACTERS](https://docs.snowflake.com/en/sql-reference/parameters#replace-invalid-characters).
|
|
774
774
|
:param pulumi.Input[Union['DatabaseReplicationArgs', 'DatabaseReplicationArgsDict']] replication: Configures replication for a given database. When specified, this database will be promoted to serve as a primary database for replication. A primary database can be replicated in one or more accounts, allowing users in those accounts to query objects in each secondary (i.e. replica) database.
|
|
@@ -790,7 +790,7 @@ class Database(pulumi.CustomResource):
|
|
|
790
790
|
## Import
|
|
791
791
|
|
|
792
792
|
```sh
|
|
793
|
-
$ pulumi import snowflake:index/database:Database example 'database_name'
|
|
793
|
+
$ pulumi import snowflake:index/database:Database example '"<database_name>"'
|
|
794
794
|
```
|
|
795
795
|
|
|
796
796
|
:param str resource_name: The name of the resource.
|
|
@@ -910,7 +910,7 @@ class Database(pulumi.CustomResource):
|
|
|
910
910
|
:param pulumi.Input[bool] is_transient: Specifies the database as transient. Transient databases do not have a Fail-safe period so they do not incur additional storage costs once they leave Time Travel; however, this means they are also not protected by Fail-safe in the event of a data loss.
|
|
911
911
|
:param pulumi.Input[str] log_level: Specifies the severity level of messages that should be ingested and made available in the active event table. Valid options are: [TRACE DEBUG INFO WARN ERROR FATAL OFF]. Messages at the specified level (and at more severe levels) are ingested. For more information, see [LOG_LEVEL](https://docs.snowflake.com/en/sql-reference/parameters.html#label-log-level).
|
|
912
912
|
:param pulumi.Input[int] max_data_extension_time_in_days: Object parameter that specifies the maximum number of days for which Snowflake can extend the data retention period for tables in the database to prevent streams on the tables from becoming stale. For a detailed description of this parameter, see [MAX*DATA*EXTENSION*TIME*IN_DAYS](https://docs.snowflake.com/en/sql-reference/parameters.html#label-max-data-extension-time-in-days).
|
|
913
|
-
:param pulumi.Input[str] name: Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
913
|
+
:param pulumi.Input[str] name: Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
914
914
|
:param pulumi.Input[bool] quoted_identifiers_ignore_case: If true, the case of quoted identifiers is ignored. For more information, see [QUOTED*IDENTIFIERS*IGNORE_CASE](https://docs.snowflake.com/en/sql-reference/parameters#quoted-identifiers-ignore-case).
|
|
915
915
|
:param pulumi.Input[bool] replace_invalid_characters: Specifies whether to replace invalid UTF-8 characters with the Unicode replacement character (�) in query results for an Iceberg table. You can only set this parameter for tables that use an external Iceberg catalog. For more information, see [REPLACE*INVALID*CHARACTERS](https://docs.snowflake.com/en/sql-reference/parameters#replace-invalid-characters).
|
|
916
916
|
:param pulumi.Input[Union['DatabaseReplicationArgs', 'DatabaseReplicationArgsDict']] replication: Configures replication for a given database. When specified, this database will be promoted to serve as a primary database for replication. A primary database can be replicated in one or more accounts, allowing users in those accounts to query objects in each secondary (i.e. replica) database.
|
|
@@ -1042,7 +1042,7 @@ class Database(pulumi.CustomResource):
|
|
|
1042
1042
|
@pulumi.getter
|
|
1043
1043
|
def name(self) -> pulumi.Output[str]:
|
|
1044
1044
|
"""
|
|
1045
|
-
Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
1045
|
+
Specifies the identifier for the database; must be unique for your account. As a best practice for [Database Replication and Failover](https://docs.snowflake.com/en/user-guide/db-replication-intro), it is recommended to give each secondary database the same name as its primary database. This practice supports referencing fully-qualified objects (i.e. '\\n\\n.\\n\\n.\\n\\n') by other objects in the same database, such as querying a fully-qualified table name in a view. If a secondary database has a different name from the primary database, then these object references would break in the secondary database. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
1046
1046
|
"""
|
|
1047
1047
|
return pulumi.get(self, "name")
|
|
1048
1048
|
|
|
@@ -26,9 +26,9 @@ class DatabaseRoleArgs:
|
|
|
26
26
|
name: Optional[pulumi.Input[str]] = None):
|
|
27
27
|
"""
|
|
28
28
|
The set of arguments for constructing a DatabaseRole resource.
|
|
29
|
-
:param pulumi.Input[str] database: The database in which to create the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
29
|
+
:param pulumi.Input[str] database: The database in which to create the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
30
30
|
:param pulumi.Input[str] comment: Specifies a comment for the database role.
|
|
31
|
-
:param pulumi.Input[str] name: Specifies the identifier for the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
31
|
+
:param pulumi.Input[str] name: Specifies the identifier for the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
32
32
|
"""
|
|
33
33
|
pulumi.set(__self__, "database", database)
|
|
34
34
|
if comment is not None:
|
|
@@ -40,7 +40,7 @@ class DatabaseRoleArgs:
|
|
|
40
40
|
@pulumi.getter
|
|
41
41
|
def database(self) -> pulumi.Input[str]:
|
|
42
42
|
"""
|
|
43
|
-
The database in which to create the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
43
|
+
The database in which to create the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
44
44
|
"""
|
|
45
45
|
return pulumi.get(self, "database")
|
|
46
46
|
|
|
@@ -64,7 +64,7 @@ class DatabaseRoleArgs:
|
|
|
64
64
|
@pulumi.getter
|
|
65
65
|
def name(self) -> Optional[pulumi.Input[str]]:
|
|
66
66
|
"""
|
|
67
|
-
Specifies the identifier for the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
67
|
+
Specifies the identifier for the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
68
68
|
"""
|
|
69
69
|
return pulumi.get(self, "name")
|
|
70
70
|
|
|
@@ -84,9 +84,9 @@ class _DatabaseRoleState:
|
|
|
84
84
|
"""
|
|
85
85
|
Input properties used for looking up and filtering DatabaseRole resources.
|
|
86
86
|
:param pulumi.Input[str] comment: Specifies a comment for the database role.
|
|
87
|
-
:param pulumi.Input[str] database: The database in which to create the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
87
|
+
:param pulumi.Input[str] database: The database in which to create the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
88
88
|
:param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
89
|
-
:param pulumi.Input[str] name: Specifies the identifier for the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
89
|
+
:param pulumi.Input[str] name: Specifies the identifier for the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
90
90
|
:param pulumi.Input[Sequence[pulumi.Input['DatabaseRoleShowOutputArgs']]] show_outputs: Outputs the result of `SHOW DATABASE ROLES` for the given database role. Note that this value will be only recomputed whenever comment field changes.
|
|
91
91
|
"""
|
|
92
92
|
if comment is not None:
|
|
@@ -116,7 +116,7 @@ class _DatabaseRoleState:
|
|
|
116
116
|
@pulumi.getter
|
|
117
117
|
def database(self) -> Optional[pulumi.Input[str]]:
|
|
118
118
|
"""
|
|
119
|
-
The database in which to create the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
119
|
+
The database in which to create the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
120
120
|
"""
|
|
121
121
|
return pulumi.get(self, "database")
|
|
122
122
|
|
|
@@ -140,7 +140,7 @@ class _DatabaseRoleState:
|
|
|
140
140
|
@pulumi.getter
|
|
141
141
|
def name(self) -> Optional[pulumi.Input[str]]:
|
|
142
142
|
"""
|
|
143
|
-
Specifies the identifier for the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
143
|
+
Specifies the identifier for the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
144
144
|
"""
|
|
145
145
|
return pulumi.get(self, "name")
|
|
146
146
|
|
|
@@ -180,8 +180,8 @@ class DatabaseRole(pulumi.CustomResource):
|
|
|
180
180
|
:param str resource_name: The name of the resource.
|
|
181
181
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
182
182
|
:param pulumi.Input[str] comment: Specifies a comment for the database role.
|
|
183
|
-
:param pulumi.Input[str] database: The database in which to create the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
184
|
-
:param pulumi.Input[str] name: Specifies the identifier for the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
183
|
+
:param pulumi.Input[str] database: The database in which to create the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
184
|
+
:param pulumi.Input[str] name: Specifies the identifier for the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
185
185
|
"""
|
|
186
186
|
...
|
|
187
187
|
@overload
|
|
@@ -253,9 +253,9 @@ class DatabaseRole(pulumi.CustomResource):
|
|
|
253
253
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
254
254
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
255
255
|
:param pulumi.Input[str] comment: Specifies a comment for the database role.
|
|
256
|
-
:param pulumi.Input[str] database: The database in which to create the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
256
|
+
:param pulumi.Input[str] database: The database in which to create the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
257
257
|
:param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
258
|
-
:param pulumi.Input[str] name: Specifies the identifier for the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
258
|
+
:param pulumi.Input[str] name: Specifies the identifier for the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
259
259
|
:param pulumi.Input[Sequence[pulumi.Input[Union['DatabaseRoleShowOutputArgs', 'DatabaseRoleShowOutputArgsDict']]]] show_outputs: Outputs the result of `SHOW DATABASE ROLES` for the given database role. Note that this value will be only recomputed whenever comment field changes.
|
|
260
260
|
"""
|
|
261
261
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
@@ -281,7 +281,7 @@ class DatabaseRole(pulumi.CustomResource):
|
|
|
281
281
|
@pulumi.getter
|
|
282
282
|
def database(self) -> pulumi.Output[str]:
|
|
283
283
|
"""
|
|
284
|
-
The database in which to create the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
284
|
+
The database in which to create the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
285
285
|
"""
|
|
286
286
|
return pulumi.get(self, "database")
|
|
287
287
|
|
|
@@ -297,7 +297,7 @@ class DatabaseRole(pulumi.CustomResource):
|
|
|
297
297
|
@pulumi.getter
|
|
298
298
|
def name(self) -> pulumi.Output[str]:
|
|
299
299
|
"""
|
|
300
|
-
Specifies the identifier for the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
300
|
+
Specifies the identifier for the database role. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
301
301
|
"""
|
|
302
302
|
return pulumi.get(self, "name")
|
|
303
303
|
|
|
@@ -14,19 +14,19 @@ else:
|
|
|
14
14
|
from typing_extensions import NotRequired, TypedDict, TypeAlias
|
|
15
15
|
from . import _utilities
|
|
16
16
|
|
|
17
|
-
__all__ = ['
|
|
17
|
+
__all__ = ['ExecuteArgs', 'Execute']
|
|
18
18
|
|
|
19
19
|
@pulumi.input_type
|
|
20
|
-
class
|
|
20
|
+
class ExecuteArgs:
|
|
21
21
|
def __init__(__self__, *,
|
|
22
22
|
execute: pulumi.Input[str],
|
|
23
23
|
revert: pulumi.Input[str],
|
|
24
24
|
query: Optional[pulumi.Input[str]] = None):
|
|
25
25
|
"""
|
|
26
|
-
The set of arguments for constructing a
|
|
26
|
+
The set of arguments for constructing a Execute resource.
|
|
27
27
|
:param pulumi.Input[str] execute: SQL statement to execute. Forces recreation of resource on change.
|
|
28
28
|
:param pulumi.Input[str] revert: SQL statement to revert the execute statement. Invoked when resource is being destroyed.
|
|
29
|
-
:param pulumi.Input[str] query: Optional SQL statement to do a read. Invoked
|
|
29
|
+
:param pulumi.Input[str] query: Optional SQL statement to do a read. Invoked on every resource refresh and every time it is changed.
|
|
30
30
|
"""
|
|
31
31
|
pulumi.set(__self__, "execute", execute)
|
|
32
32
|
pulumi.set(__self__, "revert", revert)
|
|
@@ -61,7 +61,7 @@ class UnsafeExecuteArgs:
|
|
|
61
61
|
@pulumi.getter
|
|
62
62
|
def query(self) -> Optional[pulumi.Input[str]]:
|
|
63
63
|
"""
|
|
64
|
-
Optional SQL statement to do a read. Invoked
|
|
64
|
+
Optional SQL statement to do a read. Invoked on every resource refresh and every time it is changed.
|
|
65
65
|
"""
|
|
66
66
|
return pulumi.get(self, "query")
|
|
67
67
|
|
|
@@ -71,16 +71,16 @@ class UnsafeExecuteArgs:
|
|
|
71
71
|
|
|
72
72
|
|
|
73
73
|
@pulumi.input_type
|
|
74
|
-
class
|
|
74
|
+
class _ExecuteState:
|
|
75
75
|
def __init__(__self__, *,
|
|
76
76
|
execute: Optional[pulumi.Input[str]] = None,
|
|
77
77
|
query: Optional[pulumi.Input[str]] = None,
|
|
78
78
|
query_results: Optional[pulumi.Input[Sequence[pulumi.Input[Mapping[str, pulumi.Input[str]]]]]] = None,
|
|
79
79
|
revert: Optional[pulumi.Input[str]] = None):
|
|
80
80
|
"""
|
|
81
|
-
Input properties used for looking up and filtering
|
|
81
|
+
Input properties used for looking up and filtering Execute resources.
|
|
82
82
|
:param pulumi.Input[str] execute: SQL statement to execute. Forces recreation of resource on change.
|
|
83
|
-
:param pulumi.Input[str] query: Optional SQL statement to do a read. Invoked
|
|
83
|
+
:param pulumi.Input[str] query: Optional SQL statement to do a read. Invoked on every resource refresh and every time it is changed.
|
|
84
84
|
:param pulumi.Input[Sequence[pulumi.Input[Mapping[str, pulumi.Input[str]]]]] query_results: List of key-value maps (text to text) retrieved after executing read query. Will be empty if the query results in an error.
|
|
85
85
|
:param pulumi.Input[str] revert: SQL statement to revert the execute statement. Invoked when resource is being destroyed.
|
|
86
86
|
"""
|
|
@@ -109,7 +109,7 @@ class _UnsafeExecuteState:
|
|
|
109
109
|
@pulumi.getter
|
|
110
110
|
def query(self) -> Optional[pulumi.Input[str]]:
|
|
111
111
|
"""
|
|
112
|
-
Optional SQL statement to do a read. Invoked
|
|
112
|
+
Optional SQL statement to do a read. Invoked on every resource refresh and every time it is changed.
|
|
113
113
|
"""
|
|
114
114
|
return pulumi.get(self, "query")
|
|
115
115
|
|
|
@@ -142,7 +142,7 @@ class _UnsafeExecuteState:
|
|
|
142
142
|
pulumi.set(self, "revert", value)
|
|
143
143
|
|
|
144
144
|
|
|
145
|
-
class
|
|
145
|
+
class Execute(pulumi.CustomResource):
|
|
146
146
|
@overload
|
|
147
147
|
def __init__(__self__,
|
|
148
148
|
resource_name: str,
|
|
@@ -152,28 +152,38 @@ class UnsafeExecute(pulumi.CustomResource):
|
|
|
152
152
|
revert: Optional[pulumi.Input[str]] = None,
|
|
153
153
|
__props__=None):
|
|
154
154
|
"""
|
|
155
|
-
|
|
155
|
+
## Import
|
|
156
|
+
|
|
157
|
+
```sh
|
|
158
|
+
$ pulumi import snowflake:index/execute:Execute example '<random_uuid>'
|
|
159
|
+
```
|
|
160
|
+
|
|
156
161
|
:param str resource_name: The name of the resource.
|
|
157
162
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
158
163
|
:param pulumi.Input[str] execute: SQL statement to execute. Forces recreation of resource on change.
|
|
159
|
-
:param pulumi.Input[str] query: Optional SQL statement to do a read. Invoked
|
|
164
|
+
:param pulumi.Input[str] query: Optional SQL statement to do a read. Invoked on every resource refresh and every time it is changed.
|
|
160
165
|
:param pulumi.Input[str] revert: SQL statement to revert the execute statement. Invoked when resource is being destroyed.
|
|
161
166
|
"""
|
|
162
167
|
...
|
|
163
168
|
@overload
|
|
164
169
|
def __init__(__self__,
|
|
165
170
|
resource_name: str,
|
|
166
|
-
args:
|
|
171
|
+
args: ExecuteArgs,
|
|
167
172
|
opts: Optional[pulumi.ResourceOptions] = None):
|
|
168
173
|
"""
|
|
169
|
-
|
|
174
|
+
## Import
|
|
175
|
+
|
|
176
|
+
```sh
|
|
177
|
+
$ pulumi import snowflake:index/execute:Execute example '<random_uuid>'
|
|
178
|
+
```
|
|
179
|
+
|
|
170
180
|
:param str resource_name: The name of the resource.
|
|
171
|
-
:param
|
|
181
|
+
:param ExecuteArgs args: The arguments to use to populate this resource's properties.
|
|
172
182
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
173
183
|
"""
|
|
174
184
|
...
|
|
175
185
|
def __init__(__self__, resource_name: str, *args, **kwargs):
|
|
176
|
-
resource_args, opts = _utilities.get_resource_args_opts(
|
|
186
|
+
resource_args, opts = _utilities.get_resource_args_opts(ExecuteArgs, pulumi.ResourceOptions, *args, **kwargs)
|
|
177
187
|
if resource_args is not None:
|
|
178
188
|
__self__._internal_init(resource_name, opts, **resource_args.__dict__)
|
|
179
189
|
else:
|
|
@@ -192,7 +202,7 @@ class UnsafeExecute(pulumi.CustomResource):
|
|
|
192
202
|
if opts.id is None:
|
|
193
203
|
if __props__ is not None:
|
|
194
204
|
raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
|
|
195
|
-
__props__ =
|
|
205
|
+
__props__ = ExecuteArgs.__new__(ExecuteArgs)
|
|
196
206
|
|
|
197
207
|
if execute is None and not opts.urn:
|
|
198
208
|
raise TypeError("Missing required property 'execute'")
|
|
@@ -202,8 +212,8 @@ class UnsafeExecute(pulumi.CustomResource):
|
|
|
202
212
|
raise TypeError("Missing required property 'revert'")
|
|
203
213
|
__props__.__dict__["revert"] = revert
|
|
204
214
|
__props__.__dict__["query_results"] = None
|
|
205
|
-
super(
|
|
206
|
-
'snowflake:index/
|
|
215
|
+
super(Execute, __self__).__init__(
|
|
216
|
+
'snowflake:index/execute:Execute',
|
|
207
217
|
resource_name,
|
|
208
218
|
__props__,
|
|
209
219
|
opts)
|
|
@@ -215,28 +225,28 @@ class UnsafeExecute(pulumi.CustomResource):
|
|
|
215
225
|
execute: Optional[pulumi.Input[str]] = None,
|
|
216
226
|
query: Optional[pulumi.Input[str]] = None,
|
|
217
227
|
query_results: Optional[pulumi.Input[Sequence[pulumi.Input[Mapping[str, pulumi.Input[str]]]]]] = None,
|
|
218
|
-
revert: Optional[pulumi.Input[str]] = None) -> '
|
|
228
|
+
revert: Optional[pulumi.Input[str]] = None) -> 'Execute':
|
|
219
229
|
"""
|
|
220
|
-
Get an existing
|
|
230
|
+
Get an existing Execute resource's state with the given name, id, and optional extra
|
|
221
231
|
properties used to qualify the lookup.
|
|
222
232
|
|
|
223
233
|
:param str resource_name: The unique name of the resulting resource.
|
|
224
234
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
225
235
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
226
236
|
:param pulumi.Input[str] execute: SQL statement to execute. Forces recreation of resource on change.
|
|
227
|
-
:param pulumi.Input[str] query: Optional SQL statement to do a read. Invoked
|
|
237
|
+
:param pulumi.Input[str] query: Optional SQL statement to do a read. Invoked on every resource refresh and every time it is changed.
|
|
228
238
|
:param pulumi.Input[Sequence[pulumi.Input[Mapping[str, pulumi.Input[str]]]]] query_results: List of key-value maps (text to text) retrieved after executing read query. Will be empty if the query results in an error.
|
|
229
239
|
:param pulumi.Input[str] revert: SQL statement to revert the execute statement. Invoked when resource is being destroyed.
|
|
230
240
|
"""
|
|
231
241
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
232
242
|
|
|
233
|
-
__props__ =
|
|
243
|
+
__props__ = _ExecuteState.__new__(_ExecuteState)
|
|
234
244
|
|
|
235
245
|
__props__.__dict__["execute"] = execute
|
|
236
246
|
__props__.__dict__["query"] = query
|
|
237
247
|
__props__.__dict__["query_results"] = query_results
|
|
238
248
|
__props__.__dict__["revert"] = revert
|
|
239
|
-
return
|
|
249
|
+
return Execute(resource_name, opts=opts, __props__=__props__)
|
|
240
250
|
|
|
241
251
|
@property
|
|
242
252
|
@pulumi.getter
|
|
@@ -250,7 +260,7 @@ class UnsafeExecute(pulumi.CustomResource):
|
|
|
250
260
|
@pulumi.getter
|
|
251
261
|
def query(self) -> pulumi.Output[Optional[str]]:
|
|
252
262
|
"""
|
|
253
|
-
Optional SQL statement to do a read. Invoked
|
|
263
|
+
Optional SQL statement to do a read. Invoked on every resource refresh and every time it is changed.
|
|
254
264
|
"""
|
|
255
265
|
return pulumi.get(self, "query")
|
|
256
266
|
|
|
@@ -45,16 +45,16 @@ class ExternalOauthIntegrationArgs:
|
|
|
45
45
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_token_user_mapping_claims: Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
|
|
46
46
|
:param pulumi.Input[str] external_oauth_type: Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
|
|
47
47
|
:param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
|
|
48
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_allowed_roles_lists: Specifies the list of roles that the client can set as the primary role.
|
|
48
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_allowed_roles_lists: Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
|
|
49
49
|
:param pulumi.Input[str] external_oauth_any_role_mode: Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
|
|
50
50
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_audience_lists: Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
|
|
51
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_blocked_roles_lists: Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*
|
|
51
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_blocked_roles_lists: Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
52
52
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_jws_keys_urls: Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
|
|
53
53
|
:param pulumi.Input[str] external_oauth_rsa_public_key: Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
|
|
54
54
|
:param pulumi.Input[str] external_oauth_rsa_public_key2: Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation. If removed from the config, the resource is recreated.
|
|
55
55
|
:param pulumi.Input[str] external_oauth_scope_delimiter: Specifies the scope delimiter in the authorization token.
|
|
56
56
|
:param pulumi.Input[str] external_oauth_scope_mapping_attribute: Specifies the access token claim to map the access token to an account role. If removed from the config, the resource is recreated.
|
|
57
|
-
:param pulumi.Input[str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
57
|
+
:param pulumi.Input[str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
58
58
|
"""
|
|
59
59
|
pulumi.set(__self__, "enabled", enabled)
|
|
60
60
|
pulumi.set(__self__, "external_oauth_issuer", external_oauth_issuer)
|
|
@@ -160,7 +160,7 @@ class ExternalOauthIntegrationArgs:
|
|
|
160
160
|
@pulumi.getter(name="externalOauthAllowedRolesLists")
|
|
161
161
|
def external_oauth_allowed_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
162
162
|
"""
|
|
163
|
-
Specifies the list of roles that the client can set as the primary role.
|
|
163
|
+
Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
|
|
164
164
|
"""
|
|
165
165
|
return pulumi.get(self, "external_oauth_allowed_roles_lists")
|
|
166
166
|
|
|
@@ -196,7 +196,7 @@ class ExternalOauthIntegrationArgs:
|
|
|
196
196
|
@pulumi.getter(name="externalOauthBlockedRolesLists")
|
|
197
197
|
def external_oauth_blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
198
198
|
"""
|
|
199
|
-
Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*
|
|
199
|
+
Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
200
200
|
"""
|
|
201
201
|
return pulumi.get(self, "external_oauth_blocked_roles_lists")
|
|
202
202
|
|
|
@@ -268,7 +268,7 @@ class ExternalOauthIntegrationArgs:
|
|
|
268
268
|
@pulumi.getter
|
|
269
269
|
def name(self) -> Optional[pulumi.Input[str]]:
|
|
270
270
|
"""
|
|
271
|
-
Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
271
|
+
Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
272
272
|
"""
|
|
273
273
|
return pulumi.get(self, "name")
|
|
274
274
|
|
|
@@ -305,10 +305,10 @@ class _ExternalOauthIntegrationState:
|
|
|
305
305
|
:param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
|
|
306
306
|
:param pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationDescribeOutputArgs']]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATIONS` for the given security integration.
|
|
307
307
|
:param pulumi.Input[bool] enabled: Specifies whether to initiate operation of the integration or suspend it.
|
|
308
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_allowed_roles_lists: Specifies the list of roles that the client can set as the primary role.
|
|
308
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_allowed_roles_lists: Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
|
|
309
309
|
:param pulumi.Input[str] external_oauth_any_role_mode: Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
|
|
310
310
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_audience_lists: Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
|
|
311
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_blocked_roles_lists: Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*
|
|
311
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_blocked_roles_lists: Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
312
312
|
:param pulumi.Input[str] external_oauth_issuer: Specifies the URL to define the OAuth 2.0 authorization server.
|
|
313
313
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_jws_keys_urls: Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
|
|
314
314
|
:param pulumi.Input[str] external_oauth_rsa_public_key: Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
|
|
@@ -319,8 +319,8 @@ class _ExternalOauthIntegrationState:
|
|
|
319
319
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_token_user_mapping_claims: Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
|
|
320
320
|
:param pulumi.Input[str] external_oauth_type: Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
|
|
321
321
|
:param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
322
|
-
:param pulumi.Input[str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
323
|
-
:param pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationRelatedParameterArgs']]] related_parameters:
|
|
322
|
+
:param pulumi.Input[str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
323
|
+
:param pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationRelatedParameterArgs']]] related_parameters: Parameters related to this security integration.
|
|
324
324
|
:param pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationShowOutputArgs']]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATIONS` for the given security integration.
|
|
325
325
|
"""
|
|
326
326
|
if comment is not None:
|
|
@@ -404,7 +404,7 @@ class _ExternalOauthIntegrationState:
|
|
|
404
404
|
@pulumi.getter(name="externalOauthAllowedRolesLists")
|
|
405
405
|
def external_oauth_allowed_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
406
406
|
"""
|
|
407
|
-
Specifies the list of roles that the client can set as the primary role.
|
|
407
|
+
Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
|
|
408
408
|
"""
|
|
409
409
|
return pulumi.get(self, "external_oauth_allowed_roles_lists")
|
|
410
410
|
|
|
@@ -440,7 +440,7 @@ class _ExternalOauthIntegrationState:
|
|
|
440
440
|
@pulumi.getter(name="externalOauthBlockedRolesLists")
|
|
441
441
|
def external_oauth_blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
442
442
|
"""
|
|
443
|
-
Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*
|
|
443
|
+
Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
444
444
|
"""
|
|
445
445
|
return pulumi.get(self, "external_oauth_blocked_roles_lists")
|
|
446
446
|
|
|
@@ -572,7 +572,7 @@ class _ExternalOauthIntegrationState:
|
|
|
572
572
|
@pulumi.getter
|
|
573
573
|
def name(self) -> Optional[pulumi.Input[str]]:
|
|
574
574
|
"""
|
|
575
|
-
Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
575
|
+
Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
576
576
|
"""
|
|
577
577
|
return pulumi.get(self, "name")
|
|
578
578
|
|
|
@@ -584,7 +584,7 @@ class _ExternalOauthIntegrationState:
|
|
|
584
584
|
@pulumi.getter(name="relatedParameters")
|
|
585
585
|
def related_parameters(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationRelatedParameterArgs']]]]:
|
|
586
586
|
"""
|
|
587
|
-
|
|
587
|
+
Parameters related to this security integration.
|
|
588
588
|
"""
|
|
589
589
|
return pulumi.get(self, "related_parameters")
|
|
590
590
|
|
|
@@ -631,17 +631,17 @@ class ExternalOauthIntegration(pulumi.CustomResource):
|
|
|
631
631
|
## Import
|
|
632
632
|
|
|
633
633
|
```sh
|
|
634
|
-
$ pulumi import snowflake:index/externalOauthIntegration:ExternalOauthIntegration example "
|
|
634
|
+
$ pulumi import snowflake:index/externalOauthIntegration:ExternalOauthIntegration example '"<integration_name>"'
|
|
635
635
|
```
|
|
636
636
|
|
|
637
637
|
:param str resource_name: The name of the resource.
|
|
638
638
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
639
639
|
:param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
|
|
640
640
|
:param pulumi.Input[bool] enabled: Specifies whether to initiate operation of the integration or suspend it.
|
|
641
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_allowed_roles_lists: Specifies the list of roles that the client can set as the primary role.
|
|
641
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_allowed_roles_lists: Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
|
|
642
642
|
:param pulumi.Input[str] external_oauth_any_role_mode: Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
|
|
643
643
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_audience_lists: Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
|
|
644
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_blocked_roles_lists: Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*
|
|
644
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_blocked_roles_lists: Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
645
645
|
:param pulumi.Input[str] external_oauth_issuer: Specifies the URL to define the OAuth 2.0 authorization server.
|
|
646
646
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_jws_keys_urls: Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
|
|
647
647
|
:param pulumi.Input[str] external_oauth_rsa_public_key: Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
|
|
@@ -651,7 +651,7 @@ class ExternalOauthIntegration(pulumi.CustomResource):
|
|
|
651
651
|
:param pulumi.Input[str] external_oauth_snowflake_user_mapping_attribute: Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record. Valid values are (case-insensitive): `LOGIN_NAME` | `EMAIL_ADDRESS`.
|
|
652
652
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_token_user_mapping_claims: Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
|
|
653
653
|
:param pulumi.Input[str] external_oauth_type: Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
|
|
654
|
-
:param pulumi.Input[str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
654
|
+
:param pulumi.Input[str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
655
655
|
"""
|
|
656
656
|
...
|
|
657
657
|
@overload
|
|
@@ -663,7 +663,7 @@ class ExternalOauthIntegration(pulumi.CustomResource):
|
|
|
663
663
|
## Import
|
|
664
664
|
|
|
665
665
|
```sh
|
|
666
|
-
$ pulumi import snowflake:index/externalOauthIntegration:ExternalOauthIntegration example "
|
|
666
|
+
$ pulumi import snowflake:index/externalOauthIntegration:ExternalOauthIntegration example '"<integration_name>"'
|
|
667
667
|
```
|
|
668
668
|
|
|
669
669
|
:param str resource_name: The name of the resource.
|
|
@@ -776,10 +776,10 @@ class ExternalOauthIntegration(pulumi.CustomResource):
|
|
|
776
776
|
:param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
|
|
777
777
|
:param pulumi.Input[Sequence[pulumi.Input[Union['ExternalOauthIntegrationDescribeOutputArgs', 'ExternalOauthIntegrationDescribeOutputArgsDict']]]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATIONS` for the given security integration.
|
|
778
778
|
:param pulumi.Input[bool] enabled: Specifies whether to initiate operation of the integration or suspend it.
|
|
779
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_allowed_roles_lists: Specifies the list of roles that the client can set as the primary role.
|
|
779
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_allowed_roles_lists: Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
|
|
780
780
|
:param pulumi.Input[str] external_oauth_any_role_mode: Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
|
|
781
781
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_audience_lists: Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
|
|
782
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_blocked_roles_lists: Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*
|
|
782
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_blocked_roles_lists: Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
783
783
|
:param pulumi.Input[str] external_oauth_issuer: Specifies the URL to define the OAuth 2.0 authorization server.
|
|
784
784
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_jws_keys_urls: Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
|
|
785
785
|
:param pulumi.Input[str] external_oauth_rsa_public_key: Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
|
|
@@ -790,8 +790,8 @@ class ExternalOauthIntegration(pulumi.CustomResource):
|
|
|
790
790
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_token_user_mapping_claims: Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
|
|
791
791
|
:param pulumi.Input[str] external_oauth_type: Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
|
|
792
792
|
:param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
793
|
-
:param pulumi.Input[str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
794
|
-
:param pulumi.Input[Sequence[pulumi.Input[Union['ExternalOauthIntegrationRelatedParameterArgs', 'ExternalOauthIntegrationRelatedParameterArgsDict']]]] related_parameters:
|
|
793
|
+
:param pulumi.Input[str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
794
|
+
:param pulumi.Input[Sequence[pulumi.Input[Union['ExternalOauthIntegrationRelatedParameterArgs', 'ExternalOauthIntegrationRelatedParameterArgsDict']]]] related_parameters: Parameters related to this security integration.
|
|
795
795
|
:param pulumi.Input[Sequence[pulumi.Input[Union['ExternalOauthIntegrationShowOutputArgs', 'ExternalOauthIntegrationShowOutputArgsDict']]]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATIONS` for the given security integration.
|
|
796
796
|
"""
|
|
797
797
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
@@ -848,7 +848,7 @@ class ExternalOauthIntegration(pulumi.CustomResource):
|
|
|
848
848
|
@pulumi.getter(name="externalOauthAllowedRolesLists")
|
|
849
849
|
def external_oauth_allowed_roles_lists(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
|
850
850
|
"""
|
|
851
|
-
Specifies the list of roles that the client can set as the primary role.
|
|
851
|
+
Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
|
|
852
852
|
"""
|
|
853
853
|
return pulumi.get(self, "external_oauth_allowed_roles_lists")
|
|
854
854
|
|
|
@@ -872,7 +872,7 @@ class ExternalOauthIntegration(pulumi.CustomResource):
|
|
|
872
872
|
@pulumi.getter(name="externalOauthBlockedRolesLists")
|
|
873
873
|
def external_oauth_blocked_roles_lists(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
|
874
874
|
"""
|
|
875
|
-
Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*
|
|
875
|
+
Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
876
876
|
"""
|
|
877
877
|
return pulumi.get(self, "external_oauth_blocked_roles_lists")
|
|
878
878
|
|
|
@@ -960,7 +960,7 @@ class ExternalOauthIntegration(pulumi.CustomResource):
|
|
|
960
960
|
@pulumi.getter
|
|
961
961
|
def name(self) -> pulumi.Output[str]:
|
|
962
962
|
"""
|
|
963
|
-
Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"
|
|
963
|
+
Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
964
964
|
"""
|
|
965
965
|
return pulumi.get(self, "name")
|
|
966
966
|
|
|
@@ -968,7 +968,7 @@ class ExternalOauthIntegration(pulumi.CustomResource):
|
|
|
968
968
|
@pulumi.getter(name="relatedParameters")
|
|
969
969
|
def related_parameters(self) -> pulumi.Output[Sequence['outputs.ExternalOauthIntegrationRelatedParameter']]:
|
|
970
970
|
"""
|
|
971
|
-
|
|
971
|
+
Parameters related to this security integration.
|
|
972
972
|
"""
|
|
973
973
|
return pulumi.get(self, "related_parameters")
|
|
974
974
|
|