pulumi-snowflake 1.1.4a1742960027__py3-none-any.whl → 1.2.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-snowflake might be problematic. Click here for more details.
- pulumi_snowflake/__init__.py +1 -0
- pulumi_snowflake/_inputs.py +12306 -12305
- pulumi_snowflake/account.py +189 -188
- pulumi_snowflake/account_authentication_policy_attachment.py +15 -14
- pulumi_snowflake/account_parameter.py +29 -28
- pulumi_snowflake/account_password_policy_attachment.py +15 -14
- pulumi_snowflake/account_role.py +32 -31
- pulumi_snowflake/alert.py +123 -122
- pulumi_snowflake/api_authentication_integration_with_authorization_code_grant.py +161 -160
- pulumi_snowflake/api_authentication_integration_with_client_credentials.py +147 -146
- pulumi_snowflake/api_authentication_integration_with_jwt_bearer.py +157 -156
- pulumi_snowflake/api_integration.py +218 -217
- pulumi_snowflake/authentication_policy.py +137 -136
- pulumi_snowflake/config/__init__.py +1 -0
- pulumi_snowflake/config/__init__.pyi +1 -0
- pulumi_snowflake/config/outputs.py +16 -15
- pulumi_snowflake/config/vars.py +1 -0
- pulumi_snowflake/cortex_search_service.py +141 -140
- pulumi_snowflake/database.py +288 -287
- pulumi_snowflake/database_role.py +50 -49
- pulumi_snowflake/dynamic_table.py +227 -226
- pulumi_snowflake/email_notification_integration.py +56 -55
- pulumi_snowflake/execute.py +50 -49
- pulumi_snowflake/external_function.py +237 -236
- pulumi_snowflake/external_oauth_integration.py +232 -231
- pulumi_snowflake/external_table.py +206 -205
- pulumi_snowflake/external_volume.py +59 -54
- pulumi_snowflake/failover_group.py +109 -108
- pulumi_snowflake/file_format.py +512 -511
- pulumi_snowflake/function_java.py +255 -254
- pulumi_snowflake/function_javascript.py +199 -198
- pulumi_snowflake/function_python.py +272 -271
- pulumi_snowflake/function_scala.py +255 -254
- pulumi_snowflake/function_sql.py +185 -184
- pulumi_snowflake/get_account_roles.py +12 -11
- pulumi_snowflake/get_accounts.py +12 -11
- pulumi_snowflake/get_alerts.py +23 -18
- pulumi_snowflake/get_connections.py +7 -6
- pulumi_snowflake/get_cortex_search_services.py +18 -13
- pulumi_snowflake/get_current_account.py +11 -6
- pulumi_snowflake/get_current_role.py +9 -4
- pulumi_snowflake/get_database.py +21 -16
- pulumi_snowflake/get_database_role.py +20 -15
- pulumi_snowflake/get_database_roles.py +12 -11
- pulumi_snowflake/get_databases.py +24 -23
- pulumi_snowflake/get_dynamic_tables.py +13 -8
- pulumi_snowflake/get_external_functions.py +18 -13
- pulumi_snowflake/get_external_tables.py +18 -13
- pulumi_snowflake/get_failover_groups.py +13 -8
- pulumi_snowflake/get_file_formats.py +18 -13
- pulumi_snowflake/get_functions.py +18 -13
- pulumi_snowflake/get_grants.py +6 -1
- pulumi_snowflake/get_masking_policies.py +13 -12
- pulumi_snowflake/get_materialized_views.py +18 -13
- pulumi_snowflake/get_network_policies.py +13 -12
- pulumi_snowflake/get_parameters.py +34 -29
- pulumi_snowflake/get_pipes.py +18 -13
- pulumi_snowflake/get_procedures.py +18 -13
- pulumi_snowflake/get_resource_monitors.py +7 -6
- pulumi_snowflake/get_row_access_policies.py +13 -12
- pulumi_snowflake/get_schemas.py +24 -23
- pulumi_snowflake/get_secrets.py +17 -12
- pulumi_snowflake/get_security_integrations.py +13 -12
- pulumi_snowflake/get_sequences.py +18 -13
- pulumi_snowflake/get_shares.py +13 -8
- pulumi_snowflake/get_stages.py +18 -13
- pulumi_snowflake/get_storage_integrations.py +8 -3
- pulumi_snowflake/get_streamlits.py +13 -12
- pulumi_snowflake/get_streams.py +18 -17
- pulumi_snowflake/get_system_generate_scim_access_token.py +14 -9
- pulumi_snowflake/get_system_get_aws_sns_iam_policy.py +12 -7
- pulumi_snowflake/get_system_get_private_link_config.py +17 -12
- pulumi_snowflake/get_system_get_snowflake_platform_info.py +10 -5
- pulumi_snowflake/get_tables.py +18 -13
- pulumi_snowflake/get_tags.py +7 -6
- pulumi_snowflake/get_tasks.py +23 -22
- pulumi_snowflake/get_users.py +24 -23
- pulumi_snowflake/get_views.py +18 -17
- pulumi_snowflake/get_warehouses.py +19 -18
- pulumi_snowflake/grant_account_role.py +43 -42
- pulumi_snowflake/grant_application_role.py +43 -42
- pulumi_snowflake/grant_database_role.py +57 -56
- pulumi_snowflake/grant_ownership.py +43 -42
- pulumi_snowflake/grant_privileges_to_account_role.py +107 -106
- pulumi_snowflake/grant_privileges_to_database_role.py +104 -103
- pulumi_snowflake/grant_privileges_to_share.py +127 -126
- pulumi_snowflake/legacy_service_user.py +1048 -1047
- pulumi_snowflake/managed_account.py +116 -115
- pulumi_snowflake/masking_policy.py +109 -108
- pulumi_snowflake/materialized_view.py +126 -125
- pulumi_snowflake/network_policy.py +92 -91
- pulumi_snowflake/network_policy_attachment.py +46 -45
- pulumi_snowflake/network_rule.py +106 -105
- pulumi_snowflake/notification_integration.py +254 -240
- pulumi_snowflake/oauth_integration_for_custom_clients.py +225 -224
- pulumi_snowflake/oauth_integration_for_partner_applications.py +143 -142
- pulumi_snowflake/object_parameter.py +60 -59
- pulumi_snowflake/outputs.py +9282 -9281
- pulumi_snowflake/password_policy.py +291 -286
- pulumi_snowflake/pipe.py +151 -150
- pulumi_snowflake/primary_connection.py +55 -54
- pulumi_snowflake/procedure_java.py +273 -272
- pulumi_snowflake/procedure_javascript.py +203 -202
- pulumi_snowflake/procedure_python.py +273 -272
- pulumi_snowflake/procedure_scala.py +273 -272
- pulumi_snowflake/procedure_sql.py +203 -202
- pulumi_snowflake/provider.py +303 -302
- pulumi_snowflake/pulumi-plugin.json +1 -1
- pulumi_snowflake/resource_monitor.py +134 -133
- pulumi_snowflake/row_access_policy.py +78 -77
- pulumi_snowflake/saml2_integration.py +258 -257
- pulumi_snowflake/schema.py +322 -321
- pulumi_snowflake/scim_integration.py +109 -108
- pulumi_snowflake/secondary_connection.py +57 -56
- pulumi_snowflake/secondary_database.py +288 -287
- pulumi_snowflake/secret_with_authorization_code_grant.py +109 -108
- pulumi_snowflake/secret_with_basic_authentication.py +95 -94
- pulumi_snowflake/secret_with_client_credentials.py +99 -98
- pulumi_snowflake/secret_with_generic_string.py +81 -80
- pulumi_snowflake/sequence.py +108 -107
- pulumi_snowflake/service_user.py +1021 -1020
- pulumi_snowflake/share.py +50 -49
- pulumi_snowflake/shared_database.py +246 -245
- pulumi_snowflake/stage.py +190 -189
- pulumi_snowflake/storage_integration.py +231 -165
- pulumi_snowflake/stream_on_directory_table.py +100 -99
- pulumi_snowflake/stream_on_external_table.py +117 -116
- pulumi_snowflake/stream_on_table.py +127 -126
- pulumi_snowflake/stream_on_view.py +127 -126
- pulumi_snowflake/streamlit.py +148 -147
- pulumi_snowflake/table.py +119 -118
- pulumi_snowflake/table_column_masking_policy_application.py +43 -42
- pulumi_snowflake/table_constraint.py +173 -172
- pulumi_snowflake/tag.py +92 -91
- pulumi_snowflake/tag_association.py +74 -73
- pulumi_snowflake/task.py +1005 -1004
- pulumi_snowflake/user.py +1110 -1109
- pulumi_snowflake/user_authentication_policy_attachment.py +29 -28
- pulumi_snowflake/user_password_policy_attachment.py +29 -28
- pulumi_snowflake/user_public_keys.py +43 -42
- pulumi_snowflake/view.py +142 -141
- pulumi_snowflake/warehouse.py +244 -243
- {pulumi_snowflake-1.1.4a1742960027.dist-info → pulumi_snowflake-1.2.0.dist-info}/METADATA +1 -1
- pulumi_snowflake-1.2.0.dist-info/RECORD +148 -0
- pulumi_snowflake-1.1.4a1742960027.dist-info/RECORD +0 -148
- {pulumi_snowflake-1.1.4a1742960027.dist-info → pulumi_snowflake-1.2.0.dist-info}/WHEEL +0 -0
- {pulumi_snowflake-1.1.4a1742960027.dist-info → pulumi_snowflake-1.2.0.dist-info}/top_level.txt +0 -0
|
@@ -2,6 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
+
import builtins
|
|
5
6
|
import copy
|
|
6
7
|
import warnings
|
|
7
8
|
import sys
|
|
@@ -19,42 +20,42 @@ __all__ = ['PasswordPolicyArgs', 'PasswordPolicy']
|
|
|
19
20
|
@pulumi.input_type
|
|
20
21
|
class PasswordPolicyArgs:
|
|
21
22
|
def __init__(__self__, *,
|
|
22
|
-
database: pulumi.Input[str],
|
|
23
|
-
schema: pulumi.Input[str],
|
|
24
|
-
comment: Optional[pulumi.Input[str]] = None,
|
|
25
|
-
history: Optional[pulumi.Input[int]] = None,
|
|
26
|
-
if_not_exists: Optional[pulumi.Input[bool]] = None,
|
|
27
|
-
lockout_time_mins: Optional[pulumi.Input[int]] = None,
|
|
28
|
-
max_age_days: Optional[pulumi.Input[int]] = None,
|
|
29
|
-
max_length: Optional[pulumi.Input[int]] = None,
|
|
30
|
-
max_retries: Optional[pulumi.Input[int]] = None,
|
|
31
|
-
min_age_days: Optional[pulumi.Input[int]] = None,
|
|
32
|
-
min_length: Optional[pulumi.Input[int]] = None,
|
|
33
|
-
min_lower_case_chars: Optional[pulumi.Input[int]] = None,
|
|
34
|
-
min_numeric_chars: Optional[pulumi.Input[int]] = None,
|
|
35
|
-
min_special_chars: Optional[pulumi.Input[int]] = None,
|
|
36
|
-
min_upper_case_chars: Optional[pulumi.Input[int]] = None,
|
|
37
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
38
|
-
or_replace: Optional[pulumi.Input[bool]] = None):
|
|
23
|
+
database: pulumi.Input[builtins.str],
|
|
24
|
+
schema: pulumi.Input[builtins.str],
|
|
25
|
+
comment: Optional[pulumi.Input[builtins.str]] = None,
|
|
26
|
+
history: Optional[pulumi.Input[builtins.int]] = None,
|
|
27
|
+
if_not_exists: Optional[pulumi.Input[builtins.bool]] = None,
|
|
28
|
+
lockout_time_mins: Optional[pulumi.Input[builtins.int]] = None,
|
|
29
|
+
max_age_days: Optional[pulumi.Input[builtins.int]] = None,
|
|
30
|
+
max_length: Optional[pulumi.Input[builtins.int]] = None,
|
|
31
|
+
max_retries: Optional[pulumi.Input[builtins.int]] = None,
|
|
32
|
+
min_age_days: Optional[pulumi.Input[builtins.int]] = None,
|
|
33
|
+
min_length: Optional[pulumi.Input[builtins.int]] = None,
|
|
34
|
+
min_lower_case_chars: Optional[pulumi.Input[builtins.int]] = None,
|
|
35
|
+
min_numeric_chars: Optional[pulumi.Input[builtins.int]] = None,
|
|
36
|
+
min_special_chars: Optional[pulumi.Input[builtins.int]] = None,
|
|
37
|
+
min_upper_case_chars: Optional[pulumi.Input[builtins.int]] = None,
|
|
38
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
39
|
+
or_replace: Optional[pulumi.Input[builtins.bool]] = None):
|
|
39
40
|
"""
|
|
40
41
|
The set of arguments for constructing a PasswordPolicy resource.
|
|
41
|
-
:param pulumi.Input[str] database: The database this password policy belongs to.
|
|
42
|
-
:param pulumi.Input[str] schema: The schema this password policy belongs to.
|
|
43
|
-
:param pulumi.Input[str] comment: Adds a comment or overwrites an existing comment for the password policy.
|
|
44
|
-
:param pulumi.Input[int] history: Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history. Default: 0 Max: 24
|
|
45
|
-
:param pulumi.Input[bool] if_not_exists: Prevent overwriting a previous password policy with the same name.
|
|
46
|
-
:param pulumi.Input[int] lockout_time_mins: Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORD*MAX*RETRIES). Supported range: 1 to 999, inclusive. Default: 15
|
|
47
|
-
:param pulumi.Input[int] max_age_days: Specifies the maximum number of days before the password must be changed. Supported range: 0 to 999, inclusive. A value of zero (i.e. 0) indicates that the password does not need to be changed. Snowflake does not recommend choosing this value for a default account-level password policy or for any user-level policy. Instead, choose a value that meets your internal security guidelines. Default: 90, which means the password must be changed every 90 days.
|
|
48
|
-
:param pulumi.Input[int] max_length: Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORD*MIN*LENGTH, PASSWORD*MIN*UPPER*CASE*CHARS, and PASSWORD*MIN*LOWER*CASE*CHARS. Supported range: 8 to 256, inclusive. Default: 256
|
|
49
|
-
:param pulumi.Input[int] max_retries: Specifies the maximum number of attempts to enter a password before being locked out. Supported range: 1 to 10, inclusive. Default: 5
|
|
50
|
-
:param pulumi.Input[int] min_age_days: Specifies the number of days the user must wait before a recently changed password can be changed again. Supported range: 0 to 999, inclusive. Default: 0
|
|
51
|
-
:param pulumi.Input[int] min_length: Specifies the minimum number of characters the password must contain. Supported range: 8 to 256, inclusive. Default: 8
|
|
52
|
-
:param pulumi.Input[int] min_lower_case_chars: Specifies the minimum number of lowercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
53
|
-
:param pulumi.Input[int] min_numeric_chars: Specifies the minimum number of numeric characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
54
|
-
:param pulumi.Input[int] min_special_chars: Specifies the minimum number of special characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
55
|
-
:param pulumi.Input[int] min_upper_case_chars: Specifies the minimum number of uppercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
56
|
-
:param pulumi.Input[str] name: Identifier for the password policy; must be unique for your account.
|
|
57
|
-
:param pulumi.Input[bool] or_replace: Whether to override a previous password policy with the same name.
|
|
42
|
+
:param pulumi.Input[builtins.str] database: The database this password policy belongs to.
|
|
43
|
+
:param pulumi.Input[builtins.str] schema: The schema this password policy belongs to.
|
|
44
|
+
:param pulumi.Input[builtins.str] comment: Adds a comment or overwrites an existing comment for the password policy.
|
|
45
|
+
:param pulumi.Input[builtins.int] history: (Default: `0`) Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history. Default: 0 Max: 24
|
|
46
|
+
:param pulumi.Input[builtins.bool] if_not_exists: (Default: `false`) Prevent overwriting a previous password policy with the same name.
|
|
47
|
+
:param pulumi.Input[builtins.int] lockout_time_mins: (Default: `15`) Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORD*MAX*RETRIES). Supported range: 1 to 999, inclusive. Default: 15
|
|
48
|
+
:param pulumi.Input[builtins.int] max_age_days: (Default: `90`) Specifies the maximum number of days before the password must be changed. Supported range: 0 to 999, inclusive. A value of zero (i.e. 0) indicates that the password does not need to be changed. Snowflake does not recommend choosing this value for a default account-level password policy or for any user-level policy. Instead, choose a value that meets your internal security guidelines. Default: 90, which means the password must be changed every 90 days.
|
|
49
|
+
:param pulumi.Input[builtins.int] max_length: (Default: `256`) Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORD*MIN*LENGTH, PASSWORD*MIN*UPPER*CASE*CHARS, and PASSWORD*MIN*LOWER*CASE*CHARS. Supported range: 8 to 256, inclusive. Default: 256
|
|
50
|
+
:param pulumi.Input[builtins.int] max_retries: (Default: `5`) Specifies the maximum number of attempts to enter a password before being locked out. Supported range: 1 to 10, inclusive. Default: 5
|
|
51
|
+
:param pulumi.Input[builtins.int] min_age_days: (Default: `0`) Specifies the number of days the user must wait before a recently changed password can be changed again. Supported range: 0 to 999, inclusive. Default: 0
|
|
52
|
+
:param pulumi.Input[builtins.int] min_length: (Default: `8`) Specifies the minimum number of characters the password must contain. Supported range: 8 to 256, inclusive. Default: 8
|
|
53
|
+
:param pulumi.Input[builtins.int] min_lower_case_chars: (Default: `1`) Specifies the minimum number of lowercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
54
|
+
:param pulumi.Input[builtins.int] min_numeric_chars: (Default: `1`) Specifies the minimum number of numeric characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
55
|
+
:param pulumi.Input[builtins.int] min_special_chars: (Default: `1`) Specifies the minimum number of special characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
56
|
+
:param pulumi.Input[builtins.int] min_upper_case_chars: (Default: `1`) Specifies the minimum number of uppercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
57
|
+
:param pulumi.Input[builtins.str] name: Identifier for the password policy; must be unique for your account.
|
|
58
|
+
:param pulumi.Input[builtins.bool] or_replace: (Default: `false`) Whether to override a previous password policy with the same name.
|
|
58
59
|
"""
|
|
59
60
|
pulumi.set(__self__, "database", database)
|
|
60
61
|
pulumi.set(__self__, "schema", schema)
|
|
@@ -91,250 +92,250 @@ class PasswordPolicyArgs:
|
|
|
91
92
|
|
|
92
93
|
@property
|
|
93
94
|
@pulumi.getter
|
|
94
|
-
def database(self) -> pulumi.Input[str]:
|
|
95
|
+
def database(self) -> pulumi.Input[builtins.str]:
|
|
95
96
|
"""
|
|
96
97
|
The database this password policy belongs to.
|
|
97
98
|
"""
|
|
98
99
|
return pulumi.get(self, "database")
|
|
99
100
|
|
|
100
101
|
@database.setter
|
|
101
|
-
def database(self, value: pulumi.Input[str]):
|
|
102
|
+
def database(self, value: pulumi.Input[builtins.str]):
|
|
102
103
|
pulumi.set(self, "database", value)
|
|
103
104
|
|
|
104
105
|
@property
|
|
105
106
|
@pulumi.getter
|
|
106
|
-
def schema(self) -> pulumi.Input[str]:
|
|
107
|
+
def schema(self) -> pulumi.Input[builtins.str]:
|
|
107
108
|
"""
|
|
108
109
|
The schema this password policy belongs to.
|
|
109
110
|
"""
|
|
110
111
|
return pulumi.get(self, "schema")
|
|
111
112
|
|
|
112
113
|
@schema.setter
|
|
113
|
-
def schema(self, value: pulumi.Input[str]):
|
|
114
|
+
def schema(self, value: pulumi.Input[builtins.str]):
|
|
114
115
|
pulumi.set(self, "schema", value)
|
|
115
116
|
|
|
116
117
|
@property
|
|
117
118
|
@pulumi.getter
|
|
118
|
-
def comment(self) -> Optional[pulumi.Input[str]]:
|
|
119
|
+
def comment(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
119
120
|
"""
|
|
120
121
|
Adds a comment or overwrites an existing comment for the password policy.
|
|
121
122
|
"""
|
|
122
123
|
return pulumi.get(self, "comment")
|
|
123
124
|
|
|
124
125
|
@comment.setter
|
|
125
|
-
def comment(self, value: Optional[pulumi.Input[str]]):
|
|
126
|
+
def comment(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
126
127
|
pulumi.set(self, "comment", value)
|
|
127
128
|
|
|
128
129
|
@property
|
|
129
130
|
@pulumi.getter
|
|
130
|
-
def history(self) -> Optional[pulumi.Input[int]]:
|
|
131
|
+
def history(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
131
132
|
"""
|
|
132
|
-
Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history. Default: 0 Max: 24
|
|
133
|
+
(Default: `0`) Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history. Default: 0 Max: 24
|
|
133
134
|
"""
|
|
134
135
|
return pulumi.get(self, "history")
|
|
135
136
|
|
|
136
137
|
@history.setter
|
|
137
|
-
def history(self, value: Optional[pulumi.Input[int]]):
|
|
138
|
+
def history(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
138
139
|
pulumi.set(self, "history", value)
|
|
139
140
|
|
|
140
141
|
@property
|
|
141
142
|
@pulumi.getter(name="ifNotExists")
|
|
142
|
-
def if_not_exists(self) -> Optional[pulumi.Input[bool]]:
|
|
143
|
+
def if_not_exists(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
143
144
|
"""
|
|
144
|
-
Prevent overwriting a previous password policy with the same name.
|
|
145
|
+
(Default: `false`) Prevent overwriting a previous password policy with the same name.
|
|
145
146
|
"""
|
|
146
147
|
return pulumi.get(self, "if_not_exists")
|
|
147
148
|
|
|
148
149
|
@if_not_exists.setter
|
|
149
|
-
def if_not_exists(self, value: Optional[pulumi.Input[bool]]):
|
|
150
|
+
def if_not_exists(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
150
151
|
pulumi.set(self, "if_not_exists", value)
|
|
151
152
|
|
|
152
153
|
@property
|
|
153
154
|
@pulumi.getter(name="lockoutTimeMins")
|
|
154
|
-
def lockout_time_mins(self) -> Optional[pulumi.Input[int]]:
|
|
155
|
+
def lockout_time_mins(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
155
156
|
"""
|
|
156
|
-
Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORD*MAX*RETRIES). Supported range: 1 to 999, inclusive. Default: 15
|
|
157
|
+
(Default: `15`) Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORD*MAX*RETRIES). Supported range: 1 to 999, inclusive. Default: 15
|
|
157
158
|
"""
|
|
158
159
|
return pulumi.get(self, "lockout_time_mins")
|
|
159
160
|
|
|
160
161
|
@lockout_time_mins.setter
|
|
161
|
-
def lockout_time_mins(self, value: Optional[pulumi.Input[int]]):
|
|
162
|
+
def lockout_time_mins(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
162
163
|
pulumi.set(self, "lockout_time_mins", value)
|
|
163
164
|
|
|
164
165
|
@property
|
|
165
166
|
@pulumi.getter(name="maxAgeDays")
|
|
166
|
-
def max_age_days(self) -> Optional[pulumi.Input[int]]:
|
|
167
|
+
def max_age_days(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
167
168
|
"""
|
|
168
|
-
Specifies the maximum number of days before the password must be changed. Supported range: 0 to 999, inclusive. A value of zero (i.e. 0) indicates that the password does not need to be changed. Snowflake does not recommend choosing this value for a default account-level password policy or for any user-level policy. Instead, choose a value that meets your internal security guidelines. Default: 90, which means the password must be changed every 90 days.
|
|
169
|
+
(Default: `90`) Specifies the maximum number of days before the password must be changed. Supported range: 0 to 999, inclusive. A value of zero (i.e. 0) indicates that the password does not need to be changed. Snowflake does not recommend choosing this value for a default account-level password policy or for any user-level policy. Instead, choose a value that meets your internal security guidelines. Default: 90, which means the password must be changed every 90 days.
|
|
169
170
|
"""
|
|
170
171
|
return pulumi.get(self, "max_age_days")
|
|
171
172
|
|
|
172
173
|
@max_age_days.setter
|
|
173
|
-
def max_age_days(self, value: Optional[pulumi.Input[int]]):
|
|
174
|
+
def max_age_days(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
174
175
|
pulumi.set(self, "max_age_days", value)
|
|
175
176
|
|
|
176
177
|
@property
|
|
177
178
|
@pulumi.getter(name="maxLength")
|
|
178
|
-
def max_length(self) -> Optional[pulumi.Input[int]]:
|
|
179
|
+
def max_length(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
179
180
|
"""
|
|
180
|
-
Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORD*MIN*LENGTH, PASSWORD*MIN*UPPER*CASE*CHARS, and PASSWORD*MIN*LOWER*CASE*CHARS. Supported range: 8 to 256, inclusive. Default: 256
|
|
181
|
+
(Default: `256`) Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORD*MIN*LENGTH, PASSWORD*MIN*UPPER*CASE*CHARS, and PASSWORD*MIN*LOWER*CASE*CHARS. Supported range: 8 to 256, inclusive. Default: 256
|
|
181
182
|
"""
|
|
182
183
|
return pulumi.get(self, "max_length")
|
|
183
184
|
|
|
184
185
|
@max_length.setter
|
|
185
|
-
def max_length(self, value: Optional[pulumi.Input[int]]):
|
|
186
|
+
def max_length(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
186
187
|
pulumi.set(self, "max_length", value)
|
|
187
188
|
|
|
188
189
|
@property
|
|
189
190
|
@pulumi.getter(name="maxRetries")
|
|
190
|
-
def max_retries(self) -> Optional[pulumi.Input[int]]:
|
|
191
|
+
def max_retries(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
191
192
|
"""
|
|
192
|
-
Specifies the maximum number of attempts to enter a password before being locked out. Supported range: 1 to 10, inclusive. Default: 5
|
|
193
|
+
(Default: `5`) Specifies the maximum number of attempts to enter a password before being locked out. Supported range: 1 to 10, inclusive. Default: 5
|
|
193
194
|
"""
|
|
194
195
|
return pulumi.get(self, "max_retries")
|
|
195
196
|
|
|
196
197
|
@max_retries.setter
|
|
197
|
-
def max_retries(self, value: Optional[pulumi.Input[int]]):
|
|
198
|
+
def max_retries(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
198
199
|
pulumi.set(self, "max_retries", value)
|
|
199
200
|
|
|
200
201
|
@property
|
|
201
202
|
@pulumi.getter(name="minAgeDays")
|
|
202
|
-
def min_age_days(self) -> Optional[pulumi.Input[int]]:
|
|
203
|
+
def min_age_days(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
203
204
|
"""
|
|
204
|
-
Specifies the number of days the user must wait before a recently changed password can be changed again. Supported range: 0 to 999, inclusive. Default: 0
|
|
205
|
+
(Default: `0`) Specifies the number of days the user must wait before a recently changed password can be changed again. Supported range: 0 to 999, inclusive. Default: 0
|
|
205
206
|
"""
|
|
206
207
|
return pulumi.get(self, "min_age_days")
|
|
207
208
|
|
|
208
209
|
@min_age_days.setter
|
|
209
|
-
def min_age_days(self, value: Optional[pulumi.Input[int]]):
|
|
210
|
+
def min_age_days(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
210
211
|
pulumi.set(self, "min_age_days", value)
|
|
211
212
|
|
|
212
213
|
@property
|
|
213
214
|
@pulumi.getter(name="minLength")
|
|
214
|
-
def min_length(self) -> Optional[pulumi.Input[int]]:
|
|
215
|
+
def min_length(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
215
216
|
"""
|
|
216
|
-
Specifies the minimum number of characters the password must contain. Supported range: 8 to 256, inclusive. Default: 8
|
|
217
|
+
(Default: `8`) Specifies the minimum number of characters the password must contain. Supported range: 8 to 256, inclusive. Default: 8
|
|
217
218
|
"""
|
|
218
219
|
return pulumi.get(self, "min_length")
|
|
219
220
|
|
|
220
221
|
@min_length.setter
|
|
221
|
-
def min_length(self, value: Optional[pulumi.Input[int]]):
|
|
222
|
+
def min_length(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
222
223
|
pulumi.set(self, "min_length", value)
|
|
223
224
|
|
|
224
225
|
@property
|
|
225
226
|
@pulumi.getter(name="minLowerCaseChars")
|
|
226
|
-
def min_lower_case_chars(self) -> Optional[pulumi.Input[int]]:
|
|
227
|
+
def min_lower_case_chars(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
227
228
|
"""
|
|
228
|
-
Specifies the minimum number of lowercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
229
|
+
(Default: `1`) Specifies the minimum number of lowercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
229
230
|
"""
|
|
230
231
|
return pulumi.get(self, "min_lower_case_chars")
|
|
231
232
|
|
|
232
233
|
@min_lower_case_chars.setter
|
|
233
|
-
def min_lower_case_chars(self, value: Optional[pulumi.Input[int]]):
|
|
234
|
+
def min_lower_case_chars(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
234
235
|
pulumi.set(self, "min_lower_case_chars", value)
|
|
235
236
|
|
|
236
237
|
@property
|
|
237
238
|
@pulumi.getter(name="minNumericChars")
|
|
238
|
-
def min_numeric_chars(self) -> Optional[pulumi.Input[int]]:
|
|
239
|
+
def min_numeric_chars(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
239
240
|
"""
|
|
240
|
-
Specifies the minimum number of numeric characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
241
|
+
(Default: `1`) Specifies the minimum number of numeric characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
241
242
|
"""
|
|
242
243
|
return pulumi.get(self, "min_numeric_chars")
|
|
243
244
|
|
|
244
245
|
@min_numeric_chars.setter
|
|
245
|
-
def min_numeric_chars(self, value: Optional[pulumi.Input[int]]):
|
|
246
|
+
def min_numeric_chars(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
246
247
|
pulumi.set(self, "min_numeric_chars", value)
|
|
247
248
|
|
|
248
249
|
@property
|
|
249
250
|
@pulumi.getter(name="minSpecialChars")
|
|
250
|
-
def min_special_chars(self) -> Optional[pulumi.Input[int]]:
|
|
251
|
+
def min_special_chars(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
251
252
|
"""
|
|
252
|
-
Specifies the minimum number of special characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
253
|
+
(Default: `1`) Specifies the minimum number of special characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
253
254
|
"""
|
|
254
255
|
return pulumi.get(self, "min_special_chars")
|
|
255
256
|
|
|
256
257
|
@min_special_chars.setter
|
|
257
|
-
def min_special_chars(self, value: Optional[pulumi.Input[int]]):
|
|
258
|
+
def min_special_chars(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
258
259
|
pulumi.set(self, "min_special_chars", value)
|
|
259
260
|
|
|
260
261
|
@property
|
|
261
262
|
@pulumi.getter(name="minUpperCaseChars")
|
|
262
|
-
def min_upper_case_chars(self) -> Optional[pulumi.Input[int]]:
|
|
263
|
+
def min_upper_case_chars(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
263
264
|
"""
|
|
264
|
-
Specifies the minimum number of uppercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
265
|
+
(Default: `1`) Specifies the minimum number of uppercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
265
266
|
"""
|
|
266
267
|
return pulumi.get(self, "min_upper_case_chars")
|
|
267
268
|
|
|
268
269
|
@min_upper_case_chars.setter
|
|
269
|
-
def min_upper_case_chars(self, value: Optional[pulumi.Input[int]]):
|
|
270
|
+
def min_upper_case_chars(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
270
271
|
pulumi.set(self, "min_upper_case_chars", value)
|
|
271
272
|
|
|
272
273
|
@property
|
|
273
274
|
@pulumi.getter
|
|
274
|
-
def name(self) -> Optional[pulumi.Input[str]]:
|
|
275
|
+
def name(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
275
276
|
"""
|
|
276
277
|
Identifier for the password policy; must be unique for your account.
|
|
277
278
|
"""
|
|
278
279
|
return pulumi.get(self, "name")
|
|
279
280
|
|
|
280
281
|
@name.setter
|
|
281
|
-
def name(self, value: Optional[pulumi.Input[str]]):
|
|
282
|
+
def name(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
282
283
|
pulumi.set(self, "name", value)
|
|
283
284
|
|
|
284
285
|
@property
|
|
285
286
|
@pulumi.getter(name="orReplace")
|
|
286
|
-
def or_replace(self) -> Optional[pulumi.Input[bool]]:
|
|
287
|
+
def or_replace(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
287
288
|
"""
|
|
288
|
-
Whether to override a previous password policy with the same name.
|
|
289
|
+
(Default: `false`) Whether to override a previous password policy with the same name.
|
|
289
290
|
"""
|
|
290
291
|
return pulumi.get(self, "or_replace")
|
|
291
292
|
|
|
292
293
|
@or_replace.setter
|
|
293
|
-
def or_replace(self, value: Optional[pulumi.Input[bool]]):
|
|
294
|
+
def or_replace(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
294
295
|
pulumi.set(self, "or_replace", value)
|
|
295
296
|
|
|
296
297
|
|
|
297
298
|
@pulumi.input_type
|
|
298
299
|
class _PasswordPolicyState:
|
|
299
300
|
def __init__(__self__, *,
|
|
300
|
-
comment: Optional[pulumi.Input[str]] = None,
|
|
301
|
-
database: Optional[pulumi.Input[str]] = None,
|
|
302
|
-
fully_qualified_name: Optional[pulumi.Input[str]] = None,
|
|
303
|
-
history: Optional[pulumi.Input[int]] = None,
|
|
304
|
-
if_not_exists: Optional[pulumi.Input[bool]] = None,
|
|
305
|
-
lockout_time_mins: Optional[pulumi.Input[int]] = None,
|
|
306
|
-
max_age_days: Optional[pulumi.Input[int]] = None,
|
|
307
|
-
max_length: Optional[pulumi.Input[int]] = None,
|
|
308
|
-
max_retries: Optional[pulumi.Input[int]] = None,
|
|
309
|
-
min_age_days: Optional[pulumi.Input[int]] = None,
|
|
310
|
-
min_length: Optional[pulumi.Input[int]] = None,
|
|
311
|
-
min_lower_case_chars: Optional[pulumi.Input[int]] = None,
|
|
312
|
-
min_numeric_chars: Optional[pulumi.Input[int]] = None,
|
|
313
|
-
min_special_chars: Optional[pulumi.Input[int]] = None,
|
|
314
|
-
min_upper_case_chars: Optional[pulumi.Input[int]] = None,
|
|
315
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
316
|
-
or_replace: Optional[pulumi.Input[bool]] = None,
|
|
317
|
-
schema: Optional[pulumi.Input[str]] = None):
|
|
301
|
+
comment: Optional[pulumi.Input[builtins.str]] = None,
|
|
302
|
+
database: Optional[pulumi.Input[builtins.str]] = None,
|
|
303
|
+
fully_qualified_name: Optional[pulumi.Input[builtins.str]] = None,
|
|
304
|
+
history: Optional[pulumi.Input[builtins.int]] = None,
|
|
305
|
+
if_not_exists: Optional[pulumi.Input[builtins.bool]] = None,
|
|
306
|
+
lockout_time_mins: Optional[pulumi.Input[builtins.int]] = None,
|
|
307
|
+
max_age_days: Optional[pulumi.Input[builtins.int]] = None,
|
|
308
|
+
max_length: Optional[pulumi.Input[builtins.int]] = None,
|
|
309
|
+
max_retries: Optional[pulumi.Input[builtins.int]] = None,
|
|
310
|
+
min_age_days: Optional[pulumi.Input[builtins.int]] = None,
|
|
311
|
+
min_length: Optional[pulumi.Input[builtins.int]] = None,
|
|
312
|
+
min_lower_case_chars: Optional[pulumi.Input[builtins.int]] = None,
|
|
313
|
+
min_numeric_chars: Optional[pulumi.Input[builtins.int]] = None,
|
|
314
|
+
min_special_chars: Optional[pulumi.Input[builtins.int]] = None,
|
|
315
|
+
min_upper_case_chars: Optional[pulumi.Input[builtins.int]] = None,
|
|
316
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
317
|
+
or_replace: Optional[pulumi.Input[builtins.bool]] = None,
|
|
318
|
+
schema: Optional[pulumi.Input[builtins.str]] = None):
|
|
318
319
|
"""
|
|
319
320
|
Input properties used for looking up and filtering PasswordPolicy resources.
|
|
320
|
-
:param pulumi.Input[str] comment: Adds a comment or overwrites an existing comment for the password policy.
|
|
321
|
-
:param pulumi.Input[str] database: The database this password policy belongs to.
|
|
322
|
-
:param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
323
|
-
:param pulumi.Input[int] history: Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history. Default: 0 Max: 24
|
|
324
|
-
:param pulumi.Input[bool] if_not_exists: Prevent overwriting a previous password policy with the same name.
|
|
325
|
-
:param pulumi.Input[int] lockout_time_mins: Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORD*MAX*RETRIES). Supported range: 1 to 999, inclusive. Default: 15
|
|
326
|
-
:param pulumi.Input[int] max_age_days: Specifies the maximum number of days before the password must be changed. Supported range: 0 to 999, inclusive. A value of zero (i.e. 0) indicates that the password does not need to be changed. Snowflake does not recommend choosing this value for a default account-level password policy or for any user-level policy. Instead, choose a value that meets your internal security guidelines. Default: 90, which means the password must be changed every 90 days.
|
|
327
|
-
:param pulumi.Input[int] max_length: Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORD*MIN*LENGTH, PASSWORD*MIN*UPPER*CASE*CHARS, and PASSWORD*MIN*LOWER*CASE*CHARS. Supported range: 8 to 256, inclusive. Default: 256
|
|
328
|
-
:param pulumi.Input[int] max_retries: Specifies the maximum number of attempts to enter a password before being locked out. Supported range: 1 to 10, inclusive. Default: 5
|
|
329
|
-
:param pulumi.Input[int] min_age_days: Specifies the number of days the user must wait before a recently changed password can be changed again. Supported range: 0 to 999, inclusive. Default: 0
|
|
330
|
-
:param pulumi.Input[int] min_length: Specifies the minimum number of characters the password must contain. Supported range: 8 to 256, inclusive. Default: 8
|
|
331
|
-
:param pulumi.Input[int] min_lower_case_chars: Specifies the minimum number of lowercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
332
|
-
:param pulumi.Input[int] min_numeric_chars: Specifies the minimum number of numeric characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
333
|
-
:param pulumi.Input[int] min_special_chars: Specifies the minimum number of special characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
334
|
-
:param pulumi.Input[int] min_upper_case_chars: Specifies the minimum number of uppercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
335
|
-
:param pulumi.Input[str] name: Identifier for the password policy; must be unique for your account.
|
|
336
|
-
:param pulumi.Input[bool] or_replace: Whether to override a previous password policy with the same name.
|
|
337
|
-
:param pulumi.Input[str] schema: The schema this password policy belongs to.
|
|
321
|
+
:param pulumi.Input[builtins.str] comment: Adds a comment or overwrites an existing comment for the password policy.
|
|
322
|
+
:param pulumi.Input[builtins.str] database: The database this password policy belongs to.
|
|
323
|
+
:param pulumi.Input[builtins.str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
324
|
+
:param pulumi.Input[builtins.int] history: (Default: `0`) Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history. Default: 0 Max: 24
|
|
325
|
+
:param pulumi.Input[builtins.bool] if_not_exists: (Default: `false`) Prevent overwriting a previous password policy with the same name.
|
|
326
|
+
:param pulumi.Input[builtins.int] lockout_time_mins: (Default: `15`) Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORD*MAX*RETRIES). Supported range: 1 to 999, inclusive. Default: 15
|
|
327
|
+
:param pulumi.Input[builtins.int] max_age_days: (Default: `90`) Specifies the maximum number of days before the password must be changed. Supported range: 0 to 999, inclusive. A value of zero (i.e. 0) indicates that the password does not need to be changed. Snowflake does not recommend choosing this value for a default account-level password policy or for any user-level policy. Instead, choose a value that meets your internal security guidelines. Default: 90, which means the password must be changed every 90 days.
|
|
328
|
+
:param pulumi.Input[builtins.int] max_length: (Default: `256`) Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORD*MIN*LENGTH, PASSWORD*MIN*UPPER*CASE*CHARS, and PASSWORD*MIN*LOWER*CASE*CHARS. Supported range: 8 to 256, inclusive. Default: 256
|
|
329
|
+
:param pulumi.Input[builtins.int] max_retries: (Default: `5`) Specifies the maximum number of attempts to enter a password before being locked out. Supported range: 1 to 10, inclusive. Default: 5
|
|
330
|
+
:param pulumi.Input[builtins.int] min_age_days: (Default: `0`) Specifies the number of days the user must wait before a recently changed password can be changed again. Supported range: 0 to 999, inclusive. Default: 0
|
|
331
|
+
:param pulumi.Input[builtins.int] min_length: (Default: `8`) Specifies the minimum number of characters the password must contain. Supported range: 8 to 256, inclusive. Default: 8
|
|
332
|
+
:param pulumi.Input[builtins.int] min_lower_case_chars: (Default: `1`) Specifies the minimum number of lowercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
333
|
+
:param pulumi.Input[builtins.int] min_numeric_chars: (Default: `1`) Specifies the minimum number of numeric characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
334
|
+
:param pulumi.Input[builtins.int] min_special_chars: (Default: `1`) Specifies the minimum number of special characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
335
|
+
:param pulumi.Input[builtins.int] min_upper_case_chars: (Default: `1`) Specifies the minimum number of uppercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
336
|
+
:param pulumi.Input[builtins.str] name: Identifier for the password policy; must be unique for your account.
|
|
337
|
+
:param pulumi.Input[builtins.bool] or_replace: (Default: `false`) Whether to override a previous password policy with the same name.
|
|
338
|
+
:param pulumi.Input[builtins.str] schema: The schema this password policy belongs to.
|
|
338
339
|
"""
|
|
339
340
|
if comment is not None:
|
|
340
341
|
pulumi.set(__self__, "comment", comment)
|
|
@@ -375,218 +376,218 @@ class _PasswordPolicyState:
|
|
|
375
376
|
|
|
376
377
|
@property
|
|
377
378
|
@pulumi.getter
|
|
378
|
-
def comment(self) -> Optional[pulumi.Input[str]]:
|
|
379
|
+
def comment(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
379
380
|
"""
|
|
380
381
|
Adds a comment or overwrites an existing comment for the password policy.
|
|
381
382
|
"""
|
|
382
383
|
return pulumi.get(self, "comment")
|
|
383
384
|
|
|
384
385
|
@comment.setter
|
|
385
|
-
def comment(self, value: Optional[pulumi.Input[str]]):
|
|
386
|
+
def comment(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
386
387
|
pulumi.set(self, "comment", value)
|
|
387
388
|
|
|
388
389
|
@property
|
|
389
390
|
@pulumi.getter
|
|
390
|
-
def database(self) -> Optional[pulumi.Input[str]]:
|
|
391
|
+
def database(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
391
392
|
"""
|
|
392
393
|
The database this password policy belongs to.
|
|
393
394
|
"""
|
|
394
395
|
return pulumi.get(self, "database")
|
|
395
396
|
|
|
396
397
|
@database.setter
|
|
397
|
-
def database(self, value: Optional[pulumi.Input[str]]):
|
|
398
|
+
def database(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
398
399
|
pulumi.set(self, "database", value)
|
|
399
400
|
|
|
400
401
|
@property
|
|
401
402
|
@pulumi.getter(name="fullyQualifiedName")
|
|
402
|
-
def fully_qualified_name(self) -> Optional[pulumi.Input[str]]:
|
|
403
|
+
def fully_qualified_name(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
403
404
|
"""
|
|
404
405
|
Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
405
406
|
"""
|
|
406
407
|
return pulumi.get(self, "fully_qualified_name")
|
|
407
408
|
|
|
408
409
|
@fully_qualified_name.setter
|
|
409
|
-
def fully_qualified_name(self, value: Optional[pulumi.Input[str]]):
|
|
410
|
+
def fully_qualified_name(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
410
411
|
pulumi.set(self, "fully_qualified_name", value)
|
|
411
412
|
|
|
412
413
|
@property
|
|
413
414
|
@pulumi.getter
|
|
414
|
-
def history(self) -> Optional[pulumi.Input[int]]:
|
|
415
|
+
def history(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
415
416
|
"""
|
|
416
|
-
Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history. Default: 0 Max: 24
|
|
417
|
+
(Default: `0`) Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history. Default: 0 Max: 24
|
|
417
418
|
"""
|
|
418
419
|
return pulumi.get(self, "history")
|
|
419
420
|
|
|
420
421
|
@history.setter
|
|
421
|
-
def history(self, value: Optional[pulumi.Input[int]]):
|
|
422
|
+
def history(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
422
423
|
pulumi.set(self, "history", value)
|
|
423
424
|
|
|
424
425
|
@property
|
|
425
426
|
@pulumi.getter(name="ifNotExists")
|
|
426
|
-
def if_not_exists(self) -> Optional[pulumi.Input[bool]]:
|
|
427
|
+
def if_not_exists(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
427
428
|
"""
|
|
428
|
-
Prevent overwriting a previous password policy with the same name.
|
|
429
|
+
(Default: `false`) Prevent overwriting a previous password policy with the same name.
|
|
429
430
|
"""
|
|
430
431
|
return pulumi.get(self, "if_not_exists")
|
|
431
432
|
|
|
432
433
|
@if_not_exists.setter
|
|
433
|
-
def if_not_exists(self, value: Optional[pulumi.Input[bool]]):
|
|
434
|
+
def if_not_exists(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
434
435
|
pulumi.set(self, "if_not_exists", value)
|
|
435
436
|
|
|
436
437
|
@property
|
|
437
438
|
@pulumi.getter(name="lockoutTimeMins")
|
|
438
|
-
def lockout_time_mins(self) -> Optional[pulumi.Input[int]]:
|
|
439
|
+
def lockout_time_mins(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
439
440
|
"""
|
|
440
|
-
Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORD*MAX*RETRIES). Supported range: 1 to 999, inclusive. Default: 15
|
|
441
|
+
(Default: `15`) Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORD*MAX*RETRIES). Supported range: 1 to 999, inclusive. Default: 15
|
|
441
442
|
"""
|
|
442
443
|
return pulumi.get(self, "lockout_time_mins")
|
|
443
444
|
|
|
444
445
|
@lockout_time_mins.setter
|
|
445
|
-
def lockout_time_mins(self, value: Optional[pulumi.Input[int]]):
|
|
446
|
+
def lockout_time_mins(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
446
447
|
pulumi.set(self, "lockout_time_mins", value)
|
|
447
448
|
|
|
448
449
|
@property
|
|
449
450
|
@pulumi.getter(name="maxAgeDays")
|
|
450
|
-
def max_age_days(self) -> Optional[pulumi.Input[int]]:
|
|
451
|
+
def max_age_days(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
451
452
|
"""
|
|
452
|
-
Specifies the maximum number of days before the password must be changed. Supported range: 0 to 999, inclusive. A value of zero (i.e. 0) indicates that the password does not need to be changed. Snowflake does not recommend choosing this value for a default account-level password policy or for any user-level policy. Instead, choose a value that meets your internal security guidelines. Default: 90, which means the password must be changed every 90 days.
|
|
453
|
+
(Default: `90`) Specifies the maximum number of days before the password must be changed. Supported range: 0 to 999, inclusive. A value of zero (i.e. 0) indicates that the password does not need to be changed. Snowflake does not recommend choosing this value for a default account-level password policy or for any user-level policy. Instead, choose a value that meets your internal security guidelines. Default: 90, which means the password must be changed every 90 days.
|
|
453
454
|
"""
|
|
454
455
|
return pulumi.get(self, "max_age_days")
|
|
455
456
|
|
|
456
457
|
@max_age_days.setter
|
|
457
|
-
def max_age_days(self, value: Optional[pulumi.Input[int]]):
|
|
458
|
+
def max_age_days(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
458
459
|
pulumi.set(self, "max_age_days", value)
|
|
459
460
|
|
|
460
461
|
@property
|
|
461
462
|
@pulumi.getter(name="maxLength")
|
|
462
|
-
def max_length(self) -> Optional[pulumi.Input[int]]:
|
|
463
|
+
def max_length(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
463
464
|
"""
|
|
464
|
-
Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORD*MIN*LENGTH, PASSWORD*MIN*UPPER*CASE*CHARS, and PASSWORD*MIN*LOWER*CASE*CHARS. Supported range: 8 to 256, inclusive. Default: 256
|
|
465
|
+
(Default: `256`) Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORD*MIN*LENGTH, PASSWORD*MIN*UPPER*CASE*CHARS, and PASSWORD*MIN*LOWER*CASE*CHARS. Supported range: 8 to 256, inclusive. Default: 256
|
|
465
466
|
"""
|
|
466
467
|
return pulumi.get(self, "max_length")
|
|
467
468
|
|
|
468
469
|
@max_length.setter
|
|
469
|
-
def max_length(self, value: Optional[pulumi.Input[int]]):
|
|
470
|
+
def max_length(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
470
471
|
pulumi.set(self, "max_length", value)
|
|
471
472
|
|
|
472
473
|
@property
|
|
473
474
|
@pulumi.getter(name="maxRetries")
|
|
474
|
-
def max_retries(self) -> Optional[pulumi.Input[int]]:
|
|
475
|
+
def max_retries(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
475
476
|
"""
|
|
476
|
-
Specifies the maximum number of attempts to enter a password before being locked out. Supported range: 1 to 10, inclusive. Default: 5
|
|
477
|
+
(Default: `5`) Specifies the maximum number of attempts to enter a password before being locked out. Supported range: 1 to 10, inclusive. Default: 5
|
|
477
478
|
"""
|
|
478
479
|
return pulumi.get(self, "max_retries")
|
|
479
480
|
|
|
480
481
|
@max_retries.setter
|
|
481
|
-
def max_retries(self, value: Optional[pulumi.Input[int]]):
|
|
482
|
+
def max_retries(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
482
483
|
pulumi.set(self, "max_retries", value)
|
|
483
484
|
|
|
484
485
|
@property
|
|
485
486
|
@pulumi.getter(name="minAgeDays")
|
|
486
|
-
def min_age_days(self) -> Optional[pulumi.Input[int]]:
|
|
487
|
+
def min_age_days(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
487
488
|
"""
|
|
488
|
-
Specifies the number of days the user must wait before a recently changed password can be changed again. Supported range: 0 to 999, inclusive. Default: 0
|
|
489
|
+
(Default: `0`) Specifies the number of days the user must wait before a recently changed password can be changed again. Supported range: 0 to 999, inclusive. Default: 0
|
|
489
490
|
"""
|
|
490
491
|
return pulumi.get(self, "min_age_days")
|
|
491
492
|
|
|
492
493
|
@min_age_days.setter
|
|
493
|
-
def min_age_days(self, value: Optional[pulumi.Input[int]]):
|
|
494
|
+
def min_age_days(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
494
495
|
pulumi.set(self, "min_age_days", value)
|
|
495
496
|
|
|
496
497
|
@property
|
|
497
498
|
@pulumi.getter(name="minLength")
|
|
498
|
-
def min_length(self) -> Optional[pulumi.Input[int]]:
|
|
499
|
+
def min_length(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
499
500
|
"""
|
|
500
|
-
Specifies the minimum number of characters the password must contain. Supported range: 8 to 256, inclusive. Default: 8
|
|
501
|
+
(Default: `8`) Specifies the minimum number of characters the password must contain. Supported range: 8 to 256, inclusive. Default: 8
|
|
501
502
|
"""
|
|
502
503
|
return pulumi.get(self, "min_length")
|
|
503
504
|
|
|
504
505
|
@min_length.setter
|
|
505
|
-
def min_length(self, value: Optional[pulumi.Input[int]]):
|
|
506
|
+
def min_length(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
506
507
|
pulumi.set(self, "min_length", value)
|
|
507
508
|
|
|
508
509
|
@property
|
|
509
510
|
@pulumi.getter(name="minLowerCaseChars")
|
|
510
|
-
def min_lower_case_chars(self) -> Optional[pulumi.Input[int]]:
|
|
511
|
+
def min_lower_case_chars(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
511
512
|
"""
|
|
512
|
-
Specifies the minimum number of lowercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
513
|
+
(Default: `1`) Specifies the minimum number of lowercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
513
514
|
"""
|
|
514
515
|
return pulumi.get(self, "min_lower_case_chars")
|
|
515
516
|
|
|
516
517
|
@min_lower_case_chars.setter
|
|
517
|
-
def min_lower_case_chars(self, value: Optional[pulumi.Input[int]]):
|
|
518
|
+
def min_lower_case_chars(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
518
519
|
pulumi.set(self, "min_lower_case_chars", value)
|
|
519
520
|
|
|
520
521
|
@property
|
|
521
522
|
@pulumi.getter(name="minNumericChars")
|
|
522
|
-
def min_numeric_chars(self) -> Optional[pulumi.Input[int]]:
|
|
523
|
+
def min_numeric_chars(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
523
524
|
"""
|
|
524
|
-
Specifies the minimum number of numeric characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
525
|
+
(Default: `1`) Specifies the minimum number of numeric characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
525
526
|
"""
|
|
526
527
|
return pulumi.get(self, "min_numeric_chars")
|
|
527
528
|
|
|
528
529
|
@min_numeric_chars.setter
|
|
529
|
-
def min_numeric_chars(self, value: Optional[pulumi.Input[int]]):
|
|
530
|
+
def min_numeric_chars(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
530
531
|
pulumi.set(self, "min_numeric_chars", value)
|
|
531
532
|
|
|
532
533
|
@property
|
|
533
534
|
@pulumi.getter(name="minSpecialChars")
|
|
534
|
-
def min_special_chars(self) -> Optional[pulumi.Input[int]]:
|
|
535
|
+
def min_special_chars(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
535
536
|
"""
|
|
536
|
-
Specifies the minimum number of special characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
537
|
+
(Default: `1`) Specifies the minimum number of special characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
537
538
|
"""
|
|
538
539
|
return pulumi.get(self, "min_special_chars")
|
|
539
540
|
|
|
540
541
|
@min_special_chars.setter
|
|
541
|
-
def min_special_chars(self, value: Optional[pulumi.Input[int]]):
|
|
542
|
+
def min_special_chars(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
542
543
|
pulumi.set(self, "min_special_chars", value)
|
|
543
544
|
|
|
544
545
|
@property
|
|
545
546
|
@pulumi.getter(name="minUpperCaseChars")
|
|
546
|
-
def min_upper_case_chars(self) -> Optional[pulumi.Input[int]]:
|
|
547
|
+
def min_upper_case_chars(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
547
548
|
"""
|
|
548
|
-
Specifies the minimum number of uppercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
549
|
+
(Default: `1`) Specifies the minimum number of uppercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
549
550
|
"""
|
|
550
551
|
return pulumi.get(self, "min_upper_case_chars")
|
|
551
552
|
|
|
552
553
|
@min_upper_case_chars.setter
|
|
553
|
-
def min_upper_case_chars(self, value: Optional[pulumi.Input[int]]):
|
|
554
|
+
def min_upper_case_chars(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
554
555
|
pulumi.set(self, "min_upper_case_chars", value)
|
|
555
556
|
|
|
556
557
|
@property
|
|
557
558
|
@pulumi.getter
|
|
558
|
-
def name(self) -> Optional[pulumi.Input[str]]:
|
|
559
|
+
def name(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
559
560
|
"""
|
|
560
561
|
Identifier for the password policy; must be unique for your account.
|
|
561
562
|
"""
|
|
562
563
|
return pulumi.get(self, "name")
|
|
563
564
|
|
|
564
565
|
@name.setter
|
|
565
|
-
def name(self, value: Optional[pulumi.Input[str]]):
|
|
566
|
+
def name(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
566
567
|
pulumi.set(self, "name", value)
|
|
567
568
|
|
|
568
569
|
@property
|
|
569
570
|
@pulumi.getter(name="orReplace")
|
|
570
|
-
def or_replace(self) -> Optional[pulumi.Input[bool]]:
|
|
571
|
+
def or_replace(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
571
572
|
"""
|
|
572
|
-
Whether to override a previous password policy with the same name.
|
|
573
|
+
(Default: `false`) Whether to override a previous password policy with the same name.
|
|
573
574
|
"""
|
|
574
575
|
return pulumi.get(self, "or_replace")
|
|
575
576
|
|
|
576
577
|
@or_replace.setter
|
|
577
|
-
def or_replace(self, value: Optional[pulumi.Input[bool]]):
|
|
578
|
+
def or_replace(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
578
579
|
pulumi.set(self, "or_replace", value)
|
|
579
580
|
|
|
580
581
|
@property
|
|
581
582
|
@pulumi.getter
|
|
582
|
-
def schema(self) -> Optional[pulumi.Input[str]]:
|
|
583
|
+
def schema(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
583
584
|
"""
|
|
584
585
|
The schema this password policy belongs to.
|
|
585
586
|
"""
|
|
586
587
|
return pulumi.get(self, "schema")
|
|
587
588
|
|
|
588
589
|
@schema.setter
|
|
589
|
-
def schema(self, value: Optional[pulumi.Input[str]]):
|
|
590
|
+
def schema(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
590
591
|
pulumi.set(self, "schema", value)
|
|
591
592
|
|
|
592
593
|
|
|
@@ -595,50 +596,52 @@ class PasswordPolicy(pulumi.CustomResource):
|
|
|
595
596
|
def __init__(__self__,
|
|
596
597
|
resource_name: str,
|
|
597
598
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
598
|
-
comment: Optional[pulumi.Input[str]] = None,
|
|
599
|
-
database: Optional[pulumi.Input[str]] = None,
|
|
600
|
-
history: Optional[pulumi.Input[int]] = None,
|
|
601
|
-
if_not_exists: Optional[pulumi.Input[bool]] = None,
|
|
602
|
-
lockout_time_mins: Optional[pulumi.Input[int]] = None,
|
|
603
|
-
max_age_days: Optional[pulumi.Input[int]] = None,
|
|
604
|
-
max_length: Optional[pulumi.Input[int]] = None,
|
|
605
|
-
max_retries: Optional[pulumi.Input[int]] = None,
|
|
606
|
-
min_age_days: Optional[pulumi.Input[int]] = None,
|
|
607
|
-
min_length: Optional[pulumi.Input[int]] = None,
|
|
608
|
-
min_lower_case_chars: Optional[pulumi.Input[int]] = None,
|
|
609
|
-
min_numeric_chars: Optional[pulumi.Input[int]] = None,
|
|
610
|
-
min_special_chars: Optional[pulumi.Input[int]] = None,
|
|
611
|
-
min_upper_case_chars: Optional[pulumi.Input[int]] = None,
|
|
612
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
613
|
-
or_replace: Optional[pulumi.Input[bool]] = None,
|
|
614
|
-
schema: Optional[pulumi.Input[str]] = None,
|
|
599
|
+
comment: Optional[pulumi.Input[builtins.str]] = None,
|
|
600
|
+
database: Optional[pulumi.Input[builtins.str]] = None,
|
|
601
|
+
history: Optional[pulumi.Input[builtins.int]] = None,
|
|
602
|
+
if_not_exists: Optional[pulumi.Input[builtins.bool]] = None,
|
|
603
|
+
lockout_time_mins: Optional[pulumi.Input[builtins.int]] = None,
|
|
604
|
+
max_age_days: Optional[pulumi.Input[builtins.int]] = None,
|
|
605
|
+
max_length: Optional[pulumi.Input[builtins.int]] = None,
|
|
606
|
+
max_retries: Optional[pulumi.Input[builtins.int]] = None,
|
|
607
|
+
min_age_days: Optional[pulumi.Input[builtins.int]] = None,
|
|
608
|
+
min_length: Optional[pulumi.Input[builtins.int]] = None,
|
|
609
|
+
min_lower_case_chars: Optional[pulumi.Input[builtins.int]] = None,
|
|
610
|
+
min_numeric_chars: Optional[pulumi.Input[builtins.int]] = None,
|
|
611
|
+
min_special_chars: Optional[pulumi.Input[builtins.int]] = None,
|
|
612
|
+
min_upper_case_chars: Optional[pulumi.Input[builtins.int]] = None,
|
|
613
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
614
|
+
or_replace: Optional[pulumi.Input[builtins.bool]] = None,
|
|
615
|
+
schema: Optional[pulumi.Input[builtins.str]] = None,
|
|
615
616
|
__props__=None):
|
|
616
617
|
"""
|
|
617
|
-
!> **Caution: Preview Feature** This feature is considered a preview feature in the provider, regardless of the state of the resource in Snowflake. We do not guarantee its stability. It will be reworked and marked as a stable feature in future releases. Breaking changes are expected, even without bumping the major version. To use this feature, add the relevant feature name to `preview_features_enabled field
|
|
618
|
+
!> **Caution: Preview Feature** This feature is considered a preview feature in the provider, regardless of the state of the resource in Snowflake. We do not guarantee its stability. It will be reworked and marked as a stable feature in future releases. Breaking changes are expected, even without bumping the major version. To use this feature, add the relevant feature name to `preview_features_enabled` field in the provider configuration. Please always refer to the Getting Help section in our Github repo to best determine how to get help for your questions.
|
|
618
619
|
|
|
619
620
|
!> **Note** According to Snowflake [docs](https://docs.snowflake.com/en/sql-reference/sql/drop-password-policy#usage-notes), a password policy cannot be dropped successfully if it is currently assigned to another object. Currently, the provider does not unassign such objects automatically. Before dropping the resource, first unassign the policy from the relevant objects. See guide for more details.
|
|
620
621
|
|
|
621
622
|
A password policy specifies the requirements that must be met to create and reset a password to authenticate to Snowflake.
|
|
622
623
|
|
|
624
|
+
> **Note** If a field has a default value, it is shown next to the type in the schema.
|
|
625
|
+
|
|
623
626
|
:param str resource_name: The name of the resource.
|
|
624
627
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
625
|
-
:param pulumi.Input[str] comment: Adds a comment or overwrites an existing comment for the password policy.
|
|
626
|
-
:param pulumi.Input[str] database: The database this password policy belongs to.
|
|
627
|
-
:param pulumi.Input[int] history: Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history. Default: 0 Max: 24
|
|
628
|
-
:param pulumi.Input[bool] if_not_exists: Prevent overwriting a previous password policy with the same name.
|
|
629
|
-
:param pulumi.Input[int] lockout_time_mins: Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORD*MAX*RETRIES). Supported range: 1 to 999, inclusive. Default: 15
|
|
630
|
-
:param pulumi.Input[int] max_age_days: Specifies the maximum number of days before the password must be changed. Supported range: 0 to 999, inclusive. A value of zero (i.e. 0) indicates that the password does not need to be changed. Snowflake does not recommend choosing this value for a default account-level password policy or for any user-level policy. Instead, choose a value that meets your internal security guidelines. Default: 90, which means the password must be changed every 90 days.
|
|
631
|
-
:param pulumi.Input[int] max_length: Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORD*MIN*LENGTH, PASSWORD*MIN*UPPER*CASE*CHARS, and PASSWORD*MIN*LOWER*CASE*CHARS. Supported range: 8 to 256, inclusive. Default: 256
|
|
632
|
-
:param pulumi.Input[int] max_retries: Specifies the maximum number of attempts to enter a password before being locked out. Supported range: 1 to 10, inclusive. Default: 5
|
|
633
|
-
:param pulumi.Input[int] min_age_days: Specifies the number of days the user must wait before a recently changed password can be changed again. Supported range: 0 to 999, inclusive. Default: 0
|
|
634
|
-
:param pulumi.Input[int] min_length: Specifies the minimum number of characters the password must contain. Supported range: 8 to 256, inclusive. Default: 8
|
|
635
|
-
:param pulumi.Input[int] min_lower_case_chars: Specifies the minimum number of lowercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
636
|
-
:param pulumi.Input[int] min_numeric_chars: Specifies the minimum number of numeric characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
637
|
-
:param pulumi.Input[int] min_special_chars: Specifies the minimum number of special characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
638
|
-
:param pulumi.Input[int] min_upper_case_chars: Specifies the minimum number of uppercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
639
|
-
:param pulumi.Input[str] name: Identifier for the password policy; must be unique for your account.
|
|
640
|
-
:param pulumi.Input[bool] or_replace: Whether to override a previous password policy with the same name.
|
|
641
|
-
:param pulumi.Input[str] schema: The schema this password policy belongs to.
|
|
628
|
+
:param pulumi.Input[builtins.str] comment: Adds a comment or overwrites an existing comment for the password policy.
|
|
629
|
+
:param pulumi.Input[builtins.str] database: The database this password policy belongs to.
|
|
630
|
+
:param pulumi.Input[builtins.int] history: (Default: `0`) Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history. Default: 0 Max: 24
|
|
631
|
+
:param pulumi.Input[builtins.bool] if_not_exists: (Default: `false`) Prevent overwriting a previous password policy with the same name.
|
|
632
|
+
:param pulumi.Input[builtins.int] lockout_time_mins: (Default: `15`) Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORD*MAX*RETRIES). Supported range: 1 to 999, inclusive. Default: 15
|
|
633
|
+
:param pulumi.Input[builtins.int] max_age_days: (Default: `90`) Specifies the maximum number of days before the password must be changed. Supported range: 0 to 999, inclusive. A value of zero (i.e. 0) indicates that the password does not need to be changed. Snowflake does not recommend choosing this value for a default account-level password policy or for any user-level policy. Instead, choose a value that meets your internal security guidelines. Default: 90, which means the password must be changed every 90 days.
|
|
634
|
+
:param pulumi.Input[builtins.int] max_length: (Default: `256`) Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORD*MIN*LENGTH, PASSWORD*MIN*UPPER*CASE*CHARS, and PASSWORD*MIN*LOWER*CASE*CHARS. Supported range: 8 to 256, inclusive. Default: 256
|
|
635
|
+
:param pulumi.Input[builtins.int] max_retries: (Default: `5`) Specifies the maximum number of attempts to enter a password before being locked out. Supported range: 1 to 10, inclusive. Default: 5
|
|
636
|
+
:param pulumi.Input[builtins.int] min_age_days: (Default: `0`) Specifies the number of days the user must wait before a recently changed password can be changed again. Supported range: 0 to 999, inclusive. Default: 0
|
|
637
|
+
:param pulumi.Input[builtins.int] min_length: (Default: `8`) Specifies the minimum number of characters the password must contain. Supported range: 8 to 256, inclusive. Default: 8
|
|
638
|
+
:param pulumi.Input[builtins.int] min_lower_case_chars: (Default: `1`) Specifies the minimum number of lowercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
639
|
+
:param pulumi.Input[builtins.int] min_numeric_chars: (Default: `1`) Specifies the minimum number of numeric characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
640
|
+
:param pulumi.Input[builtins.int] min_special_chars: (Default: `1`) Specifies the minimum number of special characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
641
|
+
:param pulumi.Input[builtins.int] min_upper_case_chars: (Default: `1`) Specifies the minimum number of uppercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
642
|
+
:param pulumi.Input[builtins.str] name: Identifier for the password policy; must be unique for your account.
|
|
643
|
+
:param pulumi.Input[builtins.bool] or_replace: (Default: `false`) Whether to override a previous password policy with the same name.
|
|
644
|
+
:param pulumi.Input[builtins.str] schema: The schema this password policy belongs to.
|
|
642
645
|
"""
|
|
643
646
|
...
|
|
644
647
|
@overload
|
|
@@ -647,12 +650,14 @@ class PasswordPolicy(pulumi.CustomResource):
|
|
|
647
650
|
args: PasswordPolicyArgs,
|
|
648
651
|
opts: Optional[pulumi.ResourceOptions] = None):
|
|
649
652
|
"""
|
|
650
|
-
!> **Caution: Preview Feature** This feature is considered a preview feature in the provider, regardless of the state of the resource in Snowflake. We do not guarantee its stability. It will be reworked and marked as a stable feature in future releases. Breaking changes are expected, even without bumping the major version. To use this feature, add the relevant feature name to `preview_features_enabled field
|
|
653
|
+
!> **Caution: Preview Feature** This feature is considered a preview feature in the provider, regardless of the state of the resource in Snowflake. We do not guarantee its stability. It will be reworked and marked as a stable feature in future releases. Breaking changes are expected, even without bumping the major version. To use this feature, add the relevant feature name to `preview_features_enabled` field in the provider configuration. Please always refer to the Getting Help section in our Github repo to best determine how to get help for your questions.
|
|
651
654
|
|
|
652
655
|
!> **Note** According to Snowflake [docs](https://docs.snowflake.com/en/sql-reference/sql/drop-password-policy#usage-notes), a password policy cannot be dropped successfully if it is currently assigned to another object. Currently, the provider does not unassign such objects automatically. Before dropping the resource, first unassign the policy from the relevant objects. See guide for more details.
|
|
653
656
|
|
|
654
657
|
A password policy specifies the requirements that must be met to create and reset a password to authenticate to Snowflake.
|
|
655
658
|
|
|
659
|
+
> **Note** If a field has a default value, it is shown next to the type in the schema.
|
|
660
|
+
|
|
656
661
|
:param str resource_name: The name of the resource.
|
|
657
662
|
:param PasswordPolicyArgs args: The arguments to use to populate this resource's properties.
|
|
658
663
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
@@ -668,23 +673,23 @@ class PasswordPolicy(pulumi.CustomResource):
|
|
|
668
673
|
def _internal_init(__self__,
|
|
669
674
|
resource_name: str,
|
|
670
675
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
671
|
-
comment: Optional[pulumi.Input[str]] = None,
|
|
672
|
-
database: Optional[pulumi.Input[str]] = None,
|
|
673
|
-
history: Optional[pulumi.Input[int]] = None,
|
|
674
|
-
if_not_exists: Optional[pulumi.Input[bool]] = None,
|
|
675
|
-
lockout_time_mins: Optional[pulumi.Input[int]] = None,
|
|
676
|
-
max_age_days: Optional[pulumi.Input[int]] = None,
|
|
677
|
-
max_length: Optional[pulumi.Input[int]] = None,
|
|
678
|
-
max_retries: Optional[pulumi.Input[int]] = None,
|
|
679
|
-
min_age_days: Optional[pulumi.Input[int]] = None,
|
|
680
|
-
min_length: Optional[pulumi.Input[int]] = None,
|
|
681
|
-
min_lower_case_chars: Optional[pulumi.Input[int]] = None,
|
|
682
|
-
min_numeric_chars: Optional[pulumi.Input[int]] = None,
|
|
683
|
-
min_special_chars: Optional[pulumi.Input[int]] = None,
|
|
684
|
-
min_upper_case_chars: Optional[pulumi.Input[int]] = None,
|
|
685
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
686
|
-
or_replace: Optional[pulumi.Input[bool]] = None,
|
|
687
|
-
schema: Optional[pulumi.Input[str]] = None,
|
|
676
|
+
comment: Optional[pulumi.Input[builtins.str]] = None,
|
|
677
|
+
database: Optional[pulumi.Input[builtins.str]] = None,
|
|
678
|
+
history: Optional[pulumi.Input[builtins.int]] = None,
|
|
679
|
+
if_not_exists: Optional[pulumi.Input[builtins.bool]] = None,
|
|
680
|
+
lockout_time_mins: Optional[pulumi.Input[builtins.int]] = None,
|
|
681
|
+
max_age_days: Optional[pulumi.Input[builtins.int]] = None,
|
|
682
|
+
max_length: Optional[pulumi.Input[builtins.int]] = None,
|
|
683
|
+
max_retries: Optional[pulumi.Input[builtins.int]] = None,
|
|
684
|
+
min_age_days: Optional[pulumi.Input[builtins.int]] = None,
|
|
685
|
+
min_length: Optional[pulumi.Input[builtins.int]] = None,
|
|
686
|
+
min_lower_case_chars: Optional[pulumi.Input[builtins.int]] = None,
|
|
687
|
+
min_numeric_chars: Optional[pulumi.Input[builtins.int]] = None,
|
|
688
|
+
min_special_chars: Optional[pulumi.Input[builtins.int]] = None,
|
|
689
|
+
min_upper_case_chars: Optional[pulumi.Input[builtins.int]] = None,
|
|
690
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
691
|
+
or_replace: Optional[pulumi.Input[builtins.bool]] = None,
|
|
692
|
+
schema: Optional[pulumi.Input[builtins.str]] = None,
|
|
688
693
|
__props__=None):
|
|
689
694
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
690
695
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -726,24 +731,24 @@ class PasswordPolicy(pulumi.CustomResource):
|
|
|
726
731
|
def get(resource_name: str,
|
|
727
732
|
id: pulumi.Input[str],
|
|
728
733
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
729
|
-
comment: Optional[pulumi.Input[str]] = None,
|
|
730
|
-
database: Optional[pulumi.Input[str]] = None,
|
|
731
|
-
fully_qualified_name: Optional[pulumi.Input[str]] = None,
|
|
732
|
-
history: Optional[pulumi.Input[int]] = None,
|
|
733
|
-
if_not_exists: Optional[pulumi.Input[bool]] = None,
|
|
734
|
-
lockout_time_mins: Optional[pulumi.Input[int]] = None,
|
|
735
|
-
max_age_days: Optional[pulumi.Input[int]] = None,
|
|
736
|
-
max_length: Optional[pulumi.Input[int]] = None,
|
|
737
|
-
max_retries: Optional[pulumi.Input[int]] = None,
|
|
738
|
-
min_age_days: Optional[pulumi.Input[int]] = None,
|
|
739
|
-
min_length: Optional[pulumi.Input[int]] = None,
|
|
740
|
-
min_lower_case_chars: Optional[pulumi.Input[int]] = None,
|
|
741
|
-
min_numeric_chars: Optional[pulumi.Input[int]] = None,
|
|
742
|
-
min_special_chars: Optional[pulumi.Input[int]] = None,
|
|
743
|
-
min_upper_case_chars: Optional[pulumi.Input[int]] = None,
|
|
744
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
745
|
-
or_replace: Optional[pulumi.Input[bool]] = None,
|
|
746
|
-
schema: Optional[pulumi.Input[str]] = None) -> 'PasswordPolicy':
|
|
734
|
+
comment: Optional[pulumi.Input[builtins.str]] = None,
|
|
735
|
+
database: Optional[pulumi.Input[builtins.str]] = None,
|
|
736
|
+
fully_qualified_name: Optional[pulumi.Input[builtins.str]] = None,
|
|
737
|
+
history: Optional[pulumi.Input[builtins.int]] = None,
|
|
738
|
+
if_not_exists: Optional[pulumi.Input[builtins.bool]] = None,
|
|
739
|
+
lockout_time_mins: Optional[pulumi.Input[builtins.int]] = None,
|
|
740
|
+
max_age_days: Optional[pulumi.Input[builtins.int]] = None,
|
|
741
|
+
max_length: Optional[pulumi.Input[builtins.int]] = None,
|
|
742
|
+
max_retries: Optional[pulumi.Input[builtins.int]] = None,
|
|
743
|
+
min_age_days: Optional[pulumi.Input[builtins.int]] = None,
|
|
744
|
+
min_length: Optional[pulumi.Input[builtins.int]] = None,
|
|
745
|
+
min_lower_case_chars: Optional[pulumi.Input[builtins.int]] = None,
|
|
746
|
+
min_numeric_chars: Optional[pulumi.Input[builtins.int]] = None,
|
|
747
|
+
min_special_chars: Optional[pulumi.Input[builtins.int]] = None,
|
|
748
|
+
min_upper_case_chars: Optional[pulumi.Input[builtins.int]] = None,
|
|
749
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
750
|
+
or_replace: Optional[pulumi.Input[builtins.bool]] = None,
|
|
751
|
+
schema: Optional[pulumi.Input[builtins.str]] = None) -> 'PasswordPolicy':
|
|
747
752
|
"""
|
|
748
753
|
Get an existing PasswordPolicy resource's state with the given name, id, and optional extra
|
|
749
754
|
properties used to qualify the lookup.
|
|
@@ -751,24 +756,24 @@ class PasswordPolicy(pulumi.CustomResource):
|
|
|
751
756
|
:param str resource_name: The unique name of the resulting resource.
|
|
752
757
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
753
758
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
754
|
-
:param pulumi.Input[str] comment: Adds a comment or overwrites an existing comment for the password policy.
|
|
755
|
-
:param pulumi.Input[str] database: The database this password policy belongs to.
|
|
756
|
-
:param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
757
|
-
:param pulumi.Input[int] history: Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history. Default: 0 Max: 24
|
|
758
|
-
:param pulumi.Input[bool] if_not_exists: Prevent overwriting a previous password policy with the same name.
|
|
759
|
-
:param pulumi.Input[int] lockout_time_mins: Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORD*MAX*RETRIES). Supported range: 1 to 999, inclusive. Default: 15
|
|
760
|
-
:param pulumi.Input[int] max_age_days: Specifies the maximum number of days before the password must be changed. Supported range: 0 to 999, inclusive. A value of zero (i.e. 0) indicates that the password does not need to be changed. Snowflake does not recommend choosing this value for a default account-level password policy or for any user-level policy. Instead, choose a value that meets your internal security guidelines. Default: 90, which means the password must be changed every 90 days.
|
|
761
|
-
:param pulumi.Input[int] max_length: Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORD*MIN*LENGTH, PASSWORD*MIN*UPPER*CASE*CHARS, and PASSWORD*MIN*LOWER*CASE*CHARS. Supported range: 8 to 256, inclusive. Default: 256
|
|
762
|
-
:param pulumi.Input[int] max_retries: Specifies the maximum number of attempts to enter a password before being locked out. Supported range: 1 to 10, inclusive. Default: 5
|
|
763
|
-
:param pulumi.Input[int] min_age_days: Specifies the number of days the user must wait before a recently changed password can be changed again. Supported range: 0 to 999, inclusive. Default: 0
|
|
764
|
-
:param pulumi.Input[int] min_length: Specifies the minimum number of characters the password must contain. Supported range: 8 to 256, inclusive. Default: 8
|
|
765
|
-
:param pulumi.Input[int] min_lower_case_chars: Specifies the minimum number of lowercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
766
|
-
:param pulumi.Input[int] min_numeric_chars: Specifies the minimum number of numeric characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
767
|
-
:param pulumi.Input[int] min_special_chars: Specifies the minimum number of special characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
768
|
-
:param pulumi.Input[int] min_upper_case_chars: Specifies the minimum number of uppercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
769
|
-
:param pulumi.Input[str] name: Identifier for the password policy; must be unique for your account.
|
|
770
|
-
:param pulumi.Input[bool] or_replace: Whether to override a previous password policy with the same name.
|
|
771
|
-
:param pulumi.Input[str] schema: The schema this password policy belongs to.
|
|
759
|
+
:param pulumi.Input[builtins.str] comment: Adds a comment or overwrites an existing comment for the password policy.
|
|
760
|
+
:param pulumi.Input[builtins.str] database: The database this password policy belongs to.
|
|
761
|
+
:param pulumi.Input[builtins.str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
762
|
+
:param pulumi.Input[builtins.int] history: (Default: `0`) Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history. Default: 0 Max: 24
|
|
763
|
+
:param pulumi.Input[builtins.bool] if_not_exists: (Default: `false`) Prevent overwriting a previous password policy with the same name.
|
|
764
|
+
:param pulumi.Input[builtins.int] lockout_time_mins: (Default: `15`) Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORD*MAX*RETRIES). Supported range: 1 to 999, inclusive. Default: 15
|
|
765
|
+
:param pulumi.Input[builtins.int] max_age_days: (Default: `90`) Specifies the maximum number of days before the password must be changed. Supported range: 0 to 999, inclusive. A value of zero (i.e. 0) indicates that the password does not need to be changed. Snowflake does not recommend choosing this value for a default account-level password policy or for any user-level policy. Instead, choose a value that meets your internal security guidelines. Default: 90, which means the password must be changed every 90 days.
|
|
766
|
+
:param pulumi.Input[builtins.int] max_length: (Default: `256`) Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORD*MIN*LENGTH, PASSWORD*MIN*UPPER*CASE*CHARS, and PASSWORD*MIN*LOWER*CASE*CHARS. Supported range: 8 to 256, inclusive. Default: 256
|
|
767
|
+
:param pulumi.Input[builtins.int] max_retries: (Default: `5`) Specifies the maximum number of attempts to enter a password before being locked out. Supported range: 1 to 10, inclusive. Default: 5
|
|
768
|
+
:param pulumi.Input[builtins.int] min_age_days: (Default: `0`) Specifies the number of days the user must wait before a recently changed password can be changed again. Supported range: 0 to 999, inclusive. Default: 0
|
|
769
|
+
:param pulumi.Input[builtins.int] min_length: (Default: `8`) Specifies the minimum number of characters the password must contain. Supported range: 8 to 256, inclusive. Default: 8
|
|
770
|
+
:param pulumi.Input[builtins.int] min_lower_case_chars: (Default: `1`) Specifies the minimum number of lowercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
771
|
+
:param pulumi.Input[builtins.int] min_numeric_chars: (Default: `1`) Specifies the minimum number of numeric characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
772
|
+
:param pulumi.Input[builtins.int] min_special_chars: (Default: `1`) Specifies the minimum number of special characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
773
|
+
:param pulumi.Input[builtins.int] min_upper_case_chars: (Default: `1`) Specifies the minimum number of uppercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
774
|
+
:param pulumi.Input[builtins.str] name: Identifier for the password policy; must be unique for your account.
|
|
775
|
+
:param pulumi.Input[builtins.bool] or_replace: (Default: `false`) Whether to override a previous password policy with the same name.
|
|
776
|
+
:param pulumi.Input[builtins.str] schema: The schema this password policy belongs to.
|
|
772
777
|
"""
|
|
773
778
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
774
779
|
|
|
@@ -796,7 +801,7 @@ class PasswordPolicy(pulumi.CustomResource):
|
|
|
796
801
|
|
|
797
802
|
@property
|
|
798
803
|
@pulumi.getter
|
|
799
|
-
def comment(self) -> pulumi.Output[Optional[str]]:
|
|
804
|
+
def comment(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
800
805
|
"""
|
|
801
806
|
Adds a comment or overwrites an existing comment for the password policy.
|
|
802
807
|
"""
|
|
@@ -804,7 +809,7 @@ class PasswordPolicy(pulumi.CustomResource):
|
|
|
804
809
|
|
|
805
810
|
@property
|
|
806
811
|
@pulumi.getter
|
|
807
|
-
def database(self) -> pulumi.Output[str]:
|
|
812
|
+
def database(self) -> pulumi.Output[builtins.str]:
|
|
808
813
|
"""
|
|
809
814
|
The database this password policy belongs to.
|
|
810
815
|
"""
|
|
@@ -812,7 +817,7 @@ class PasswordPolicy(pulumi.CustomResource):
|
|
|
812
817
|
|
|
813
818
|
@property
|
|
814
819
|
@pulumi.getter(name="fullyQualifiedName")
|
|
815
|
-
def fully_qualified_name(self) -> pulumi.Output[str]:
|
|
820
|
+
def fully_qualified_name(self) -> pulumi.Output[builtins.str]:
|
|
816
821
|
"""
|
|
817
822
|
Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
818
823
|
"""
|
|
@@ -820,103 +825,103 @@ class PasswordPolicy(pulumi.CustomResource):
|
|
|
820
825
|
|
|
821
826
|
@property
|
|
822
827
|
@pulumi.getter
|
|
823
|
-
def history(self) -> pulumi.Output[Optional[int]]:
|
|
828
|
+
def history(self) -> pulumi.Output[Optional[builtins.int]]:
|
|
824
829
|
"""
|
|
825
|
-
Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history. Default: 0 Max: 24
|
|
830
|
+
(Default: `0`) Specifies the number of the most recent passwords that Snowflake stores. These stored passwords cannot be repeated when a user updates their password value. The current password value does not count towards the history. When you increase the history value, Snowflake saves the previous values. When you decrease the value, Snowflake saves the stored values up to that value that is set. For example, if the history value is 8 and you change the history value to 3, Snowflake stores the most recent 3 passwords and deletes the 5 older password values from the history. Default: 0 Max: 24
|
|
826
831
|
"""
|
|
827
832
|
return pulumi.get(self, "history")
|
|
828
833
|
|
|
829
834
|
@property
|
|
830
835
|
@pulumi.getter(name="ifNotExists")
|
|
831
|
-
def if_not_exists(self) -> pulumi.Output[Optional[bool]]:
|
|
836
|
+
def if_not_exists(self) -> pulumi.Output[Optional[builtins.bool]]:
|
|
832
837
|
"""
|
|
833
|
-
Prevent overwriting a previous password policy with the same name.
|
|
838
|
+
(Default: `false`) Prevent overwriting a previous password policy with the same name.
|
|
834
839
|
"""
|
|
835
840
|
return pulumi.get(self, "if_not_exists")
|
|
836
841
|
|
|
837
842
|
@property
|
|
838
843
|
@pulumi.getter(name="lockoutTimeMins")
|
|
839
|
-
def lockout_time_mins(self) -> pulumi.Output[Optional[int]]:
|
|
844
|
+
def lockout_time_mins(self) -> pulumi.Output[Optional[builtins.int]]:
|
|
840
845
|
"""
|
|
841
|
-
Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORD*MAX*RETRIES). Supported range: 1 to 999, inclusive. Default: 15
|
|
846
|
+
(Default: `15`) Specifies the number of minutes the user account will be locked after exhausting the designated number of password retries (i.e. PASSWORD*MAX*RETRIES). Supported range: 1 to 999, inclusive. Default: 15
|
|
842
847
|
"""
|
|
843
848
|
return pulumi.get(self, "lockout_time_mins")
|
|
844
849
|
|
|
845
850
|
@property
|
|
846
851
|
@pulumi.getter(name="maxAgeDays")
|
|
847
|
-
def max_age_days(self) -> pulumi.Output[Optional[int]]:
|
|
852
|
+
def max_age_days(self) -> pulumi.Output[Optional[builtins.int]]:
|
|
848
853
|
"""
|
|
849
|
-
Specifies the maximum number of days before the password must be changed. Supported range: 0 to 999, inclusive. A value of zero (i.e. 0) indicates that the password does not need to be changed. Snowflake does not recommend choosing this value for a default account-level password policy or for any user-level policy. Instead, choose a value that meets your internal security guidelines. Default: 90, which means the password must be changed every 90 days.
|
|
854
|
+
(Default: `90`) Specifies the maximum number of days before the password must be changed. Supported range: 0 to 999, inclusive. A value of zero (i.e. 0) indicates that the password does not need to be changed. Snowflake does not recommend choosing this value for a default account-level password policy or for any user-level policy. Instead, choose a value that meets your internal security guidelines. Default: 90, which means the password must be changed every 90 days.
|
|
850
855
|
"""
|
|
851
856
|
return pulumi.get(self, "max_age_days")
|
|
852
857
|
|
|
853
858
|
@property
|
|
854
859
|
@pulumi.getter(name="maxLength")
|
|
855
|
-
def max_length(self) -> pulumi.Output[Optional[int]]:
|
|
860
|
+
def max_length(self) -> pulumi.Output[Optional[builtins.int]]:
|
|
856
861
|
"""
|
|
857
|
-
Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORD*MIN*LENGTH, PASSWORD*MIN*UPPER*CASE*CHARS, and PASSWORD*MIN*LOWER*CASE*CHARS. Supported range: 8 to 256, inclusive. Default: 256
|
|
862
|
+
(Default: `256`) Specifies the maximum number of characters the password must contain. This number must be greater than or equal to the sum of PASSWORD*MIN*LENGTH, PASSWORD*MIN*UPPER*CASE*CHARS, and PASSWORD*MIN*LOWER*CASE*CHARS. Supported range: 8 to 256, inclusive. Default: 256
|
|
858
863
|
"""
|
|
859
864
|
return pulumi.get(self, "max_length")
|
|
860
865
|
|
|
861
866
|
@property
|
|
862
867
|
@pulumi.getter(name="maxRetries")
|
|
863
|
-
def max_retries(self) -> pulumi.Output[Optional[int]]:
|
|
868
|
+
def max_retries(self) -> pulumi.Output[Optional[builtins.int]]:
|
|
864
869
|
"""
|
|
865
|
-
Specifies the maximum number of attempts to enter a password before being locked out. Supported range: 1 to 10, inclusive. Default: 5
|
|
870
|
+
(Default: `5`) Specifies the maximum number of attempts to enter a password before being locked out. Supported range: 1 to 10, inclusive. Default: 5
|
|
866
871
|
"""
|
|
867
872
|
return pulumi.get(self, "max_retries")
|
|
868
873
|
|
|
869
874
|
@property
|
|
870
875
|
@pulumi.getter(name="minAgeDays")
|
|
871
|
-
def min_age_days(self) -> pulumi.Output[Optional[int]]:
|
|
876
|
+
def min_age_days(self) -> pulumi.Output[Optional[builtins.int]]:
|
|
872
877
|
"""
|
|
873
|
-
Specifies the number of days the user must wait before a recently changed password can be changed again. Supported range: 0 to 999, inclusive. Default: 0
|
|
878
|
+
(Default: `0`) Specifies the number of days the user must wait before a recently changed password can be changed again. Supported range: 0 to 999, inclusive. Default: 0
|
|
874
879
|
"""
|
|
875
880
|
return pulumi.get(self, "min_age_days")
|
|
876
881
|
|
|
877
882
|
@property
|
|
878
883
|
@pulumi.getter(name="minLength")
|
|
879
|
-
def min_length(self) -> pulumi.Output[Optional[int]]:
|
|
884
|
+
def min_length(self) -> pulumi.Output[Optional[builtins.int]]:
|
|
880
885
|
"""
|
|
881
|
-
Specifies the minimum number of characters the password must contain. Supported range: 8 to 256, inclusive. Default: 8
|
|
886
|
+
(Default: `8`) Specifies the minimum number of characters the password must contain. Supported range: 8 to 256, inclusive. Default: 8
|
|
882
887
|
"""
|
|
883
888
|
return pulumi.get(self, "min_length")
|
|
884
889
|
|
|
885
890
|
@property
|
|
886
891
|
@pulumi.getter(name="minLowerCaseChars")
|
|
887
|
-
def min_lower_case_chars(self) -> pulumi.Output[Optional[int]]:
|
|
892
|
+
def min_lower_case_chars(self) -> pulumi.Output[Optional[builtins.int]]:
|
|
888
893
|
"""
|
|
889
|
-
Specifies the minimum number of lowercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
894
|
+
(Default: `1`) Specifies the minimum number of lowercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
890
895
|
"""
|
|
891
896
|
return pulumi.get(self, "min_lower_case_chars")
|
|
892
897
|
|
|
893
898
|
@property
|
|
894
899
|
@pulumi.getter(name="minNumericChars")
|
|
895
|
-
def min_numeric_chars(self) -> pulumi.Output[Optional[int]]:
|
|
900
|
+
def min_numeric_chars(self) -> pulumi.Output[Optional[builtins.int]]:
|
|
896
901
|
"""
|
|
897
|
-
Specifies the minimum number of numeric characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
902
|
+
(Default: `1`) Specifies the minimum number of numeric characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
898
903
|
"""
|
|
899
904
|
return pulumi.get(self, "min_numeric_chars")
|
|
900
905
|
|
|
901
906
|
@property
|
|
902
907
|
@pulumi.getter(name="minSpecialChars")
|
|
903
|
-
def min_special_chars(self) -> pulumi.Output[Optional[int]]:
|
|
908
|
+
def min_special_chars(self) -> pulumi.Output[Optional[builtins.int]]:
|
|
904
909
|
"""
|
|
905
|
-
Specifies the minimum number of special characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
910
|
+
(Default: `1`) Specifies the minimum number of special characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
906
911
|
"""
|
|
907
912
|
return pulumi.get(self, "min_special_chars")
|
|
908
913
|
|
|
909
914
|
@property
|
|
910
915
|
@pulumi.getter(name="minUpperCaseChars")
|
|
911
|
-
def min_upper_case_chars(self) -> pulumi.Output[Optional[int]]:
|
|
916
|
+
def min_upper_case_chars(self) -> pulumi.Output[Optional[builtins.int]]:
|
|
912
917
|
"""
|
|
913
|
-
Specifies the minimum number of uppercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
918
|
+
(Default: `1`) Specifies the minimum number of uppercase characters the password must contain. Supported range: 0 to 256, inclusive. Default: 1
|
|
914
919
|
"""
|
|
915
920
|
return pulumi.get(self, "min_upper_case_chars")
|
|
916
921
|
|
|
917
922
|
@property
|
|
918
923
|
@pulumi.getter
|
|
919
|
-
def name(self) -> pulumi.Output[str]:
|
|
924
|
+
def name(self) -> pulumi.Output[builtins.str]:
|
|
920
925
|
"""
|
|
921
926
|
Identifier for the password policy; must be unique for your account.
|
|
922
927
|
"""
|
|
@@ -924,15 +929,15 @@ class PasswordPolicy(pulumi.CustomResource):
|
|
|
924
929
|
|
|
925
930
|
@property
|
|
926
931
|
@pulumi.getter(name="orReplace")
|
|
927
|
-
def or_replace(self) -> pulumi.Output[Optional[bool]]:
|
|
932
|
+
def or_replace(self) -> pulumi.Output[Optional[builtins.bool]]:
|
|
928
933
|
"""
|
|
929
|
-
Whether to override a previous password policy with the same name.
|
|
934
|
+
(Default: `false`) Whether to override a previous password policy with the same name.
|
|
930
935
|
"""
|
|
931
936
|
return pulumi.get(self, "or_replace")
|
|
932
937
|
|
|
933
938
|
@property
|
|
934
939
|
@pulumi.getter
|
|
935
|
-
def schema(self) -> pulumi.Output[str]:
|
|
940
|
+
def schema(self) -> pulumi.Output[builtins.str]:
|
|
936
941
|
"""
|
|
937
942
|
The schema this password policy belongs to.
|
|
938
943
|
"""
|