pulumi-snowflake 1.2.0a1743489585__py3-none-any.whl → 1.2.0a1744183688__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-snowflake might be problematic. Click here for more details.
- pulumi_snowflake/__init__.py +1 -0
- pulumi_snowflake/_inputs.py +12288 -12287
- pulumi_snowflake/account.py +186 -185
- pulumi_snowflake/account_authentication_policy_attachment.py +15 -14
- pulumi_snowflake/account_parameter.py +29 -28
- pulumi_snowflake/account_password_policy_attachment.py +15 -14
- pulumi_snowflake/account_role.py +32 -31
- pulumi_snowflake/alert.py +120 -119
- pulumi_snowflake/api_authentication_integration_with_authorization_code_grant.py +158 -157
- pulumi_snowflake/api_authentication_integration_with_client_credentials.py +144 -143
- pulumi_snowflake/api_authentication_integration_with_jwt_bearer.py +154 -153
- pulumi_snowflake/api_integration.py +203 -202
- pulumi_snowflake/authentication_policy.py +134 -133
- pulumi_snowflake/config/__init__.py +1 -0
- pulumi_snowflake/config/__init__.pyi +1 -0
- pulumi_snowflake/config/outputs.py +16 -15
- pulumi_snowflake/config/vars.py +1 -0
- pulumi_snowflake/cortex_search_service.py +141 -140
- pulumi_snowflake/database.py +288 -287
- pulumi_snowflake/database_role.py +50 -49
- pulumi_snowflake/dynamic_table.py +218 -217
- pulumi_snowflake/email_notification_integration.py +56 -55
- pulumi_snowflake/execute.py +50 -49
- pulumi_snowflake/external_function.py +225 -224
- pulumi_snowflake/external_oauth_integration.py +232 -231
- pulumi_snowflake/external_table.py +197 -196
- pulumi_snowflake/external_volume.py +50 -49
- pulumi_snowflake/failover_group.py +106 -105
- pulumi_snowflake/file_format.py +512 -511
- pulumi_snowflake/function_java.py +249 -248
- pulumi_snowflake/function_javascript.py +193 -192
- pulumi_snowflake/function_python.py +263 -262
- pulumi_snowflake/function_scala.py +249 -248
- pulumi_snowflake/function_sql.py +179 -178
- pulumi_snowflake/get_account_roles.py +12 -11
- pulumi_snowflake/get_accounts.py +12 -11
- pulumi_snowflake/get_alerts.py +17 -16
- pulumi_snowflake/get_connections.py +7 -6
- pulumi_snowflake/get_cortex_search_services.py +12 -11
- pulumi_snowflake/get_current_account.py +5 -4
- pulumi_snowflake/get_current_role.py +3 -2
- pulumi_snowflake/get_database.py +15 -14
- pulumi_snowflake/get_database_role.py +14 -13
- pulumi_snowflake/get_database_roles.py +12 -11
- pulumi_snowflake/get_databases.py +22 -21
- pulumi_snowflake/get_dynamic_tables.py +7 -6
- pulumi_snowflake/get_external_functions.py +12 -11
- pulumi_snowflake/get_external_tables.py +12 -11
- pulumi_snowflake/get_failover_groups.py +7 -6
- pulumi_snowflake/get_file_formats.py +12 -11
- pulumi_snowflake/get_functions.py +12 -11
- pulumi_snowflake/get_grants.py +2 -1
- pulumi_snowflake/get_masking_policies.py +12 -11
- pulumi_snowflake/get_materialized_views.py +12 -11
- pulumi_snowflake/get_network_policies.py +12 -11
- pulumi_snowflake/get_parameters.py +27 -26
- pulumi_snowflake/get_pipes.py +12 -11
- pulumi_snowflake/get_procedures.py +12 -11
- pulumi_snowflake/get_resource_monitors.py +7 -6
- pulumi_snowflake/get_row_access_policies.py +12 -11
- pulumi_snowflake/get_schemas.py +22 -21
- pulumi_snowflake/get_secrets.py +12 -11
- pulumi_snowflake/get_security_integrations.py +12 -11
- pulumi_snowflake/get_sequences.py +12 -11
- pulumi_snowflake/get_shares.py +7 -6
- pulumi_snowflake/get_stages.py +12 -11
- pulumi_snowflake/get_storage_integrations.py +2 -1
- pulumi_snowflake/get_streamlits.py +12 -11
- pulumi_snowflake/get_streams.py +17 -16
- pulumi_snowflake/get_system_generate_scim_access_token.py +8 -7
- pulumi_snowflake/get_system_get_aws_sns_iam_policy.py +8 -7
- pulumi_snowflake/get_system_get_private_link_config.py +11 -10
- pulumi_snowflake/get_system_get_snowflake_platform_info.py +4 -3
- pulumi_snowflake/get_tables.py +12 -11
- pulumi_snowflake/get_tags.py +7 -6
- pulumi_snowflake/get_tasks.py +22 -21
- pulumi_snowflake/get_users.py +22 -21
- pulumi_snowflake/get_views.py +17 -16
- pulumi_snowflake/get_warehouses.py +17 -16
- pulumi_snowflake/grant_account_role.py +43 -42
- pulumi_snowflake/grant_application_role.py +43 -42
- pulumi_snowflake/grant_database_role.py +57 -56
- pulumi_snowflake/grant_ownership.py +43 -42
- pulumi_snowflake/grant_privileges_to_account_role.py +95 -94
- pulumi_snowflake/grant_privileges_to_database_role.py +95 -94
- pulumi_snowflake/grant_privileges_to_share.py +127 -126
- pulumi_snowflake/legacy_service_user.py +1039 -1038
- pulumi_snowflake/managed_account.py +113 -112
- pulumi_snowflake/masking_policy.py +106 -105
- pulumi_snowflake/materialized_view.py +120 -119
- pulumi_snowflake/network_policy.py +92 -91
- pulumi_snowflake/network_policy_attachment.py +43 -42
- pulumi_snowflake/network_rule.py +106 -105
- pulumi_snowflake/notification_integration.py +238 -237
- pulumi_snowflake/oauth_integration_for_custom_clients.py +210 -209
- pulumi_snowflake/oauth_integration_for_partner_applications.py +134 -133
- pulumi_snowflake/object_parameter.py +57 -56
- pulumi_snowflake/outputs.py +9273 -9272
- pulumi_snowflake/password_policy.py +246 -245
- pulumi_snowflake/pipe.py +148 -147
- pulumi_snowflake/primary_connection.py +55 -54
- pulumi_snowflake/procedure_java.py +267 -266
- pulumi_snowflake/procedure_javascript.py +197 -196
- pulumi_snowflake/procedure_python.py +267 -266
- pulumi_snowflake/procedure_scala.py +267 -266
- pulumi_snowflake/procedure_sql.py +197 -196
- pulumi_snowflake/provider.py +303 -302
- pulumi_snowflake/pulumi-plugin.json +1 -1
- pulumi_snowflake/resource_monitor.py +134 -133
- pulumi_snowflake/row_access_policy.py +78 -77
- pulumi_snowflake/saml2_integration.py +246 -245
- pulumi_snowflake/schema.py +316 -315
- pulumi_snowflake/scim_integration.py +106 -105
- pulumi_snowflake/secondary_connection.py +57 -56
- pulumi_snowflake/secondary_database.py +288 -287
- pulumi_snowflake/secret_with_authorization_code_grant.py +109 -108
- pulumi_snowflake/secret_with_basic_authentication.py +95 -94
- pulumi_snowflake/secret_with_client_credentials.py +99 -98
- pulumi_snowflake/secret_with_generic_string.py +81 -80
- pulumi_snowflake/sequence.py +99 -98
- pulumi_snowflake/service_user.py +1015 -1014
- pulumi_snowflake/share.py +50 -49
- pulumi_snowflake/shared_database.py +246 -245
- pulumi_snowflake/stage.py +190 -189
- pulumi_snowflake/storage_integration.py +166 -165
- pulumi_snowflake/stream_on_directory_table.py +100 -99
- pulumi_snowflake/stream_on_external_table.py +114 -113
- pulumi_snowflake/stream_on_table.py +124 -123
- pulumi_snowflake/stream_on_view.py +124 -123
- pulumi_snowflake/streamlit.py +148 -147
- pulumi_snowflake/table.py +113 -112
- pulumi_snowflake/table_column_masking_policy_application.py +43 -42
- pulumi_snowflake/table_constraint.py +155 -154
- pulumi_snowflake/tag.py +92 -91
- pulumi_snowflake/tag_association.py +71 -70
- pulumi_snowflake/task.py +1002 -1001
- pulumi_snowflake/user.py +1101 -1100
- pulumi_snowflake/user_authentication_policy_attachment.py +29 -28
- pulumi_snowflake/user_password_policy_attachment.py +29 -28
- pulumi_snowflake/user_public_keys.py +43 -42
- pulumi_snowflake/view.py +136 -135
- pulumi_snowflake/warehouse.py +232 -231
- {pulumi_snowflake-1.2.0a1743489585.dist-info → pulumi_snowflake-1.2.0a1744183688.dist-info}/METADATA +1 -1
- pulumi_snowflake-1.2.0a1744183688.dist-info/RECORD +148 -0
- pulumi_snowflake-1.2.0a1743489585.dist-info/RECORD +0 -148
- {pulumi_snowflake-1.2.0a1743489585.dist-info → pulumi_snowflake-1.2.0a1744183688.dist-info}/WHEEL +0 -0
- {pulumi_snowflake-1.2.0a1743489585.dist-info → pulumi_snowflake-1.2.0a1744183688.dist-info}/top_level.txt +0 -0
|
@@ -2,6 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
+
import builtins
|
|
5
6
|
import copy
|
|
6
7
|
import warnings
|
|
7
8
|
import sys
|
|
@@ -21,26 +22,26 @@ __all__ = ['AuthenticationPolicyArgs', 'AuthenticationPolicy']
|
|
|
21
22
|
@pulumi.input_type
|
|
22
23
|
class AuthenticationPolicyArgs:
|
|
23
24
|
def __init__(__self__, *,
|
|
24
|
-
database: pulumi.Input[str],
|
|
25
|
-
schema: pulumi.Input[str],
|
|
26
|
-
authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
27
|
-
client_types: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
28
|
-
comment: Optional[pulumi.Input[str]] = None,
|
|
29
|
-
mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
30
|
-
mfa_enrollment: Optional[pulumi.Input[str]] = None,
|
|
31
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
32
|
-
security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
|
|
25
|
+
database: pulumi.Input[builtins.str],
|
|
26
|
+
schema: pulumi.Input[builtins.str],
|
|
27
|
+
authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
28
|
+
client_types: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
29
|
+
comment: Optional[pulumi.Input[builtins.str]] = None,
|
|
30
|
+
mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
31
|
+
mfa_enrollment: Optional[pulumi.Input[builtins.str]] = None,
|
|
32
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
33
|
+
security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None):
|
|
33
34
|
"""
|
|
34
35
|
The set of arguments for constructing a AuthenticationPolicy resource.
|
|
35
|
-
:param pulumi.Input[str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
36
|
-
:param pulumi.Input[str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
37
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] authentication_methods: A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
|
|
38
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] client_types: A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
|
|
39
|
-
:param pulumi.Input[str] comment: Specifies a comment for the authentication policy.
|
|
40
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] mfa_authentication_methods: A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
|
|
41
|
-
:param pulumi.Input[str] mfa_enrollment: Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
|
|
42
|
-
:param pulumi.Input[str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
43
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] security_integrations: A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
|
|
36
|
+
:param pulumi.Input[builtins.str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
37
|
+
:param pulumi.Input[builtins.str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
38
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] authentication_methods: A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
|
|
39
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] client_types: A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
|
|
40
|
+
:param pulumi.Input[builtins.str] comment: Specifies a comment for the authentication policy.
|
|
41
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] mfa_authentication_methods: A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
|
|
42
|
+
:param pulumi.Input[builtins.str] mfa_enrollment: Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
|
|
43
|
+
:param pulumi.Input[builtins.str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
44
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] security_integrations: A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
|
|
44
45
|
"""
|
|
45
46
|
pulumi.set(__self__, "database", database)
|
|
46
47
|
pulumi.set(__self__, "schema", schema)
|
|
@@ -61,141 +62,141 @@ class AuthenticationPolicyArgs:
|
|
|
61
62
|
|
|
62
63
|
@property
|
|
63
64
|
@pulumi.getter
|
|
64
|
-
def database(self) -> pulumi.Input[str]:
|
|
65
|
+
def database(self) -> pulumi.Input[builtins.str]:
|
|
65
66
|
"""
|
|
66
67
|
The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
67
68
|
"""
|
|
68
69
|
return pulumi.get(self, "database")
|
|
69
70
|
|
|
70
71
|
@database.setter
|
|
71
|
-
def database(self, value: pulumi.Input[str]):
|
|
72
|
+
def database(self, value: pulumi.Input[builtins.str]):
|
|
72
73
|
pulumi.set(self, "database", value)
|
|
73
74
|
|
|
74
75
|
@property
|
|
75
76
|
@pulumi.getter
|
|
76
|
-
def schema(self) -> pulumi.Input[str]:
|
|
77
|
+
def schema(self) -> pulumi.Input[builtins.str]:
|
|
77
78
|
"""
|
|
78
79
|
The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
79
80
|
"""
|
|
80
81
|
return pulumi.get(self, "schema")
|
|
81
82
|
|
|
82
83
|
@schema.setter
|
|
83
|
-
def schema(self, value: pulumi.Input[str]):
|
|
84
|
+
def schema(self, value: pulumi.Input[builtins.str]):
|
|
84
85
|
pulumi.set(self, "schema", value)
|
|
85
86
|
|
|
86
87
|
@property
|
|
87
88
|
@pulumi.getter(name="authenticationMethods")
|
|
88
|
-
def authentication_methods(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
89
|
+
def authentication_methods(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
|
89
90
|
"""
|
|
90
91
|
A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
|
|
91
92
|
"""
|
|
92
93
|
return pulumi.get(self, "authentication_methods")
|
|
93
94
|
|
|
94
95
|
@authentication_methods.setter
|
|
95
|
-
def authentication_methods(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
96
|
+
def authentication_methods(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
|
96
97
|
pulumi.set(self, "authentication_methods", value)
|
|
97
98
|
|
|
98
99
|
@property
|
|
99
100
|
@pulumi.getter(name="clientTypes")
|
|
100
|
-
def client_types(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
101
|
+
def client_types(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
|
101
102
|
"""
|
|
102
103
|
A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
|
|
103
104
|
"""
|
|
104
105
|
return pulumi.get(self, "client_types")
|
|
105
106
|
|
|
106
107
|
@client_types.setter
|
|
107
|
-
def client_types(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
108
|
+
def client_types(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
|
108
109
|
pulumi.set(self, "client_types", value)
|
|
109
110
|
|
|
110
111
|
@property
|
|
111
112
|
@pulumi.getter
|
|
112
|
-
def comment(self) -> Optional[pulumi.Input[str]]:
|
|
113
|
+
def comment(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
113
114
|
"""
|
|
114
115
|
Specifies a comment for the authentication policy.
|
|
115
116
|
"""
|
|
116
117
|
return pulumi.get(self, "comment")
|
|
117
118
|
|
|
118
119
|
@comment.setter
|
|
119
|
-
def comment(self, value: Optional[pulumi.Input[str]]):
|
|
120
|
+
def comment(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
120
121
|
pulumi.set(self, "comment", value)
|
|
121
122
|
|
|
122
123
|
@property
|
|
123
124
|
@pulumi.getter(name="mfaAuthenticationMethods")
|
|
124
|
-
def mfa_authentication_methods(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
125
|
+
def mfa_authentication_methods(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
|
125
126
|
"""
|
|
126
127
|
A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
|
|
127
128
|
"""
|
|
128
129
|
return pulumi.get(self, "mfa_authentication_methods")
|
|
129
130
|
|
|
130
131
|
@mfa_authentication_methods.setter
|
|
131
|
-
def mfa_authentication_methods(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
132
|
+
def mfa_authentication_methods(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
|
132
133
|
pulumi.set(self, "mfa_authentication_methods", value)
|
|
133
134
|
|
|
134
135
|
@property
|
|
135
136
|
@pulumi.getter(name="mfaEnrollment")
|
|
136
|
-
def mfa_enrollment(self) -> Optional[pulumi.Input[str]]:
|
|
137
|
+
def mfa_enrollment(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
137
138
|
"""
|
|
138
139
|
Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
|
|
139
140
|
"""
|
|
140
141
|
return pulumi.get(self, "mfa_enrollment")
|
|
141
142
|
|
|
142
143
|
@mfa_enrollment.setter
|
|
143
|
-
def mfa_enrollment(self, value: Optional[pulumi.Input[str]]):
|
|
144
|
+
def mfa_enrollment(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
144
145
|
pulumi.set(self, "mfa_enrollment", value)
|
|
145
146
|
|
|
146
147
|
@property
|
|
147
148
|
@pulumi.getter
|
|
148
|
-
def name(self) -> Optional[pulumi.Input[str]]:
|
|
149
|
+
def name(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
149
150
|
"""
|
|
150
151
|
Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
151
152
|
"""
|
|
152
153
|
return pulumi.get(self, "name")
|
|
153
154
|
|
|
154
155
|
@name.setter
|
|
155
|
-
def name(self, value: Optional[pulumi.Input[str]]):
|
|
156
|
+
def name(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
156
157
|
pulumi.set(self, "name", value)
|
|
157
158
|
|
|
158
159
|
@property
|
|
159
160
|
@pulumi.getter(name="securityIntegrations")
|
|
160
|
-
def security_integrations(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
161
|
+
def security_integrations(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
|
161
162
|
"""
|
|
162
163
|
A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
|
|
163
164
|
"""
|
|
164
165
|
return pulumi.get(self, "security_integrations")
|
|
165
166
|
|
|
166
167
|
@security_integrations.setter
|
|
167
|
-
def security_integrations(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
168
|
+
def security_integrations(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
|
168
169
|
pulumi.set(self, "security_integrations", value)
|
|
169
170
|
|
|
170
171
|
|
|
171
172
|
@pulumi.input_type
|
|
172
173
|
class _AuthenticationPolicyState:
|
|
173
174
|
def __init__(__self__, *,
|
|
174
|
-
authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
175
|
-
client_types: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
176
|
-
comment: Optional[pulumi.Input[str]] = None,
|
|
177
|
-
database: Optional[pulumi.Input[str]] = None,
|
|
175
|
+
authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
176
|
+
client_types: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
177
|
+
comment: Optional[pulumi.Input[builtins.str]] = None,
|
|
178
|
+
database: Optional[pulumi.Input[builtins.str]] = None,
|
|
178
179
|
describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['AuthenticationPolicyDescribeOutputArgs']]]] = None,
|
|
179
|
-
fully_qualified_name: Optional[pulumi.Input[str]] = None,
|
|
180
|
-
mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
181
|
-
mfa_enrollment: Optional[pulumi.Input[str]] = None,
|
|
182
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
183
|
-
schema: Optional[pulumi.Input[str]] = None,
|
|
184
|
-
security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
180
|
+
fully_qualified_name: Optional[pulumi.Input[builtins.str]] = None,
|
|
181
|
+
mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
182
|
+
mfa_enrollment: Optional[pulumi.Input[builtins.str]] = None,
|
|
183
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
184
|
+
schema: Optional[pulumi.Input[builtins.str]] = None,
|
|
185
|
+
security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
185
186
|
show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['AuthenticationPolicyShowOutputArgs']]]] = None):
|
|
186
187
|
"""
|
|
187
188
|
Input properties used for looking up and filtering AuthenticationPolicy resources.
|
|
188
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] authentication_methods: A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
|
|
189
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] client_types: A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
|
|
190
|
-
:param pulumi.Input[str] comment: Specifies a comment for the authentication policy.
|
|
191
|
-
:param pulumi.Input[str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
189
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] authentication_methods: A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
|
|
190
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] client_types: A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
|
|
191
|
+
:param pulumi.Input[builtins.str] comment: Specifies a comment for the authentication policy.
|
|
192
|
+
:param pulumi.Input[builtins.str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
192
193
|
:param pulumi.Input[Sequence[pulumi.Input['AuthenticationPolicyDescribeOutputArgs']]] describe_outputs: Outputs the result of `DESCRIBE AUTHENTICATION POLICY` for the given policy.
|
|
193
|
-
:param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
194
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] mfa_authentication_methods: A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
|
|
195
|
-
:param pulumi.Input[str] mfa_enrollment: Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
|
|
196
|
-
:param pulumi.Input[str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
197
|
-
:param pulumi.Input[str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
198
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] security_integrations: A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
|
|
194
|
+
:param pulumi.Input[builtins.str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
195
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] mfa_authentication_methods: A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
|
|
196
|
+
:param pulumi.Input[builtins.str] mfa_enrollment: Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
|
|
197
|
+
:param pulumi.Input[builtins.str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
198
|
+
:param pulumi.Input[builtins.str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
199
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] security_integrations: A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
|
|
199
200
|
:param pulumi.Input[Sequence[pulumi.Input['AuthenticationPolicyShowOutputArgs']]] show_outputs: Outputs the result of `SHOW AUTHENTICATION POLICIES` for the given policy.
|
|
200
201
|
"""
|
|
201
202
|
if authentication_methods is not None:
|
|
@@ -225,50 +226,50 @@ class _AuthenticationPolicyState:
|
|
|
225
226
|
|
|
226
227
|
@property
|
|
227
228
|
@pulumi.getter(name="authenticationMethods")
|
|
228
|
-
def authentication_methods(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
229
|
+
def authentication_methods(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
|
229
230
|
"""
|
|
230
231
|
A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
|
|
231
232
|
"""
|
|
232
233
|
return pulumi.get(self, "authentication_methods")
|
|
233
234
|
|
|
234
235
|
@authentication_methods.setter
|
|
235
|
-
def authentication_methods(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
236
|
+
def authentication_methods(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
|
236
237
|
pulumi.set(self, "authentication_methods", value)
|
|
237
238
|
|
|
238
239
|
@property
|
|
239
240
|
@pulumi.getter(name="clientTypes")
|
|
240
|
-
def client_types(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
241
|
+
def client_types(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
|
241
242
|
"""
|
|
242
243
|
A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
|
|
243
244
|
"""
|
|
244
245
|
return pulumi.get(self, "client_types")
|
|
245
246
|
|
|
246
247
|
@client_types.setter
|
|
247
|
-
def client_types(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
248
|
+
def client_types(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
|
248
249
|
pulumi.set(self, "client_types", value)
|
|
249
250
|
|
|
250
251
|
@property
|
|
251
252
|
@pulumi.getter
|
|
252
|
-
def comment(self) -> Optional[pulumi.Input[str]]:
|
|
253
|
+
def comment(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
253
254
|
"""
|
|
254
255
|
Specifies a comment for the authentication policy.
|
|
255
256
|
"""
|
|
256
257
|
return pulumi.get(self, "comment")
|
|
257
258
|
|
|
258
259
|
@comment.setter
|
|
259
|
-
def comment(self, value: Optional[pulumi.Input[str]]):
|
|
260
|
+
def comment(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
260
261
|
pulumi.set(self, "comment", value)
|
|
261
262
|
|
|
262
263
|
@property
|
|
263
264
|
@pulumi.getter
|
|
264
|
-
def database(self) -> Optional[pulumi.Input[str]]:
|
|
265
|
+
def database(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
265
266
|
"""
|
|
266
267
|
The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
267
268
|
"""
|
|
268
269
|
return pulumi.get(self, "database")
|
|
269
270
|
|
|
270
271
|
@database.setter
|
|
271
|
-
def database(self, value: Optional[pulumi.Input[str]]):
|
|
272
|
+
def database(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
272
273
|
pulumi.set(self, "database", value)
|
|
273
274
|
|
|
274
275
|
@property
|
|
@@ -285,74 +286,74 @@ class _AuthenticationPolicyState:
|
|
|
285
286
|
|
|
286
287
|
@property
|
|
287
288
|
@pulumi.getter(name="fullyQualifiedName")
|
|
288
|
-
def fully_qualified_name(self) -> Optional[pulumi.Input[str]]:
|
|
289
|
+
def fully_qualified_name(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
289
290
|
"""
|
|
290
291
|
Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
291
292
|
"""
|
|
292
293
|
return pulumi.get(self, "fully_qualified_name")
|
|
293
294
|
|
|
294
295
|
@fully_qualified_name.setter
|
|
295
|
-
def fully_qualified_name(self, value: Optional[pulumi.Input[str]]):
|
|
296
|
+
def fully_qualified_name(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
296
297
|
pulumi.set(self, "fully_qualified_name", value)
|
|
297
298
|
|
|
298
299
|
@property
|
|
299
300
|
@pulumi.getter(name="mfaAuthenticationMethods")
|
|
300
|
-
def mfa_authentication_methods(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
301
|
+
def mfa_authentication_methods(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
|
301
302
|
"""
|
|
302
303
|
A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
|
|
303
304
|
"""
|
|
304
305
|
return pulumi.get(self, "mfa_authentication_methods")
|
|
305
306
|
|
|
306
307
|
@mfa_authentication_methods.setter
|
|
307
|
-
def mfa_authentication_methods(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
308
|
+
def mfa_authentication_methods(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
|
308
309
|
pulumi.set(self, "mfa_authentication_methods", value)
|
|
309
310
|
|
|
310
311
|
@property
|
|
311
312
|
@pulumi.getter(name="mfaEnrollment")
|
|
312
|
-
def mfa_enrollment(self) -> Optional[pulumi.Input[str]]:
|
|
313
|
+
def mfa_enrollment(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
313
314
|
"""
|
|
314
315
|
Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
|
|
315
316
|
"""
|
|
316
317
|
return pulumi.get(self, "mfa_enrollment")
|
|
317
318
|
|
|
318
319
|
@mfa_enrollment.setter
|
|
319
|
-
def mfa_enrollment(self, value: Optional[pulumi.Input[str]]):
|
|
320
|
+
def mfa_enrollment(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
320
321
|
pulumi.set(self, "mfa_enrollment", value)
|
|
321
322
|
|
|
322
323
|
@property
|
|
323
324
|
@pulumi.getter
|
|
324
|
-
def name(self) -> Optional[pulumi.Input[str]]:
|
|
325
|
+
def name(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
325
326
|
"""
|
|
326
327
|
Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
327
328
|
"""
|
|
328
329
|
return pulumi.get(self, "name")
|
|
329
330
|
|
|
330
331
|
@name.setter
|
|
331
|
-
def name(self, value: Optional[pulumi.Input[str]]):
|
|
332
|
+
def name(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
332
333
|
pulumi.set(self, "name", value)
|
|
333
334
|
|
|
334
335
|
@property
|
|
335
336
|
@pulumi.getter
|
|
336
|
-
def schema(self) -> Optional[pulumi.Input[str]]:
|
|
337
|
+
def schema(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
337
338
|
"""
|
|
338
339
|
The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
339
340
|
"""
|
|
340
341
|
return pulumi.get(self, "schema")
|
|
341
342
|
|
|
342
343
|
@schema.setter
|
|
343
|
-
def schema(self, value: Optional[pulumi.Input[str]]):
|
|
344
|
+
def schema(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
344
345
|
pulumi.set(self, "schema", value)
|
|
345
346
|
|
|
346
347
|
@property
|
|
347
348
|
@pulumi.getter(name="securityIntegrations")
|
|
348
|
-
def security_integrations(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
349
|
+
def security_integrations(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
|
349
350
|
"""
|
|
350
351
|
A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
|
|
351
352
|
"""
|
|
352
353
|
return pulumi.get(self, "security_integrations")
|
|
353
354
|
|
|
354
355
|
@security_integrations.setter
|
|
355
|
-
def security_integrations(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
356
|
+
def security_integrations(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
|
356
357
|
pulumi.set(self, "security_integrations", value)
|
|
357
358
|
|
|
358
359
|
@property
|
|
@@ -373,15 +374,15 @@ class AuthenticationPolicy(pulumi.CustomResource):
|
|
|
373
374
|
def __init__(__self__,
|
|
374
375
|
resource_name: str,
|
|
375
376
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
376
|
-
authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
377
|
-
client_types: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
378
|
-
comment: Optional[pulumi.Input[str]] = None,
|
|
379
|
-
database: Optional[pulumi.Input[str]] = None,
|
|
380
|
-
mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
381
|
-
mfa_enrollment: Optional[pulumi.Input[str]] = None,
|
|
382
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
383
|
-
schema: Optional[pulumi.Input[str]] = None,
|
|
384
|
-
security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
377
|
+
authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
378
|
+
client_types: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
379
|
+
comment: Optional[pulumi.Input[builtins.str]] = None,
|
|
380
|
+
database: Optional[pulumi.Input[builtins.str]] = None,
|
|
381
|
+
mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
382
|
+
mfa_enrollment: Optional[pulumi.Input[builtins.str]] = None,
|
|
383
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
384
|
+
schema: Optional[pulumi.Input[builtins.str]] = None,
|
|
385
|
+
security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
385
386
|
__props__=None):
|
|
386
387
|
"""
|
|
387
388
|
## Import
|
|
@@ -392,15 +393,15 @@ class AuthenticationPolicy(pulumi.CustomResource):
|
|
|
392
393
|
|
|
393
394
|
:param str resource_name: The name of the resource.
|
|
394
395
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
395
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] authentication_methods: A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
|
|
396
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] client_types: A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
|
|
397
|
-
:param pulumi.Input[str] comment: Specifies a comment for the authentication policy.
|
|
398
|
-
:param pulumi.Input[str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
399
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] mfa_authentication_methods: A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
|
|
400
|
-
:param pulumi.Input[str] mfa_enrollment: Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
|
|
401
|
-
:param pulumi.Input[str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
402
|
-
:param pulumi.Input[str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
403
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] security_integrations: A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
|
|
396
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] authentication_methods: A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
|
|
397
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] client_types: A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
|
|
398
|
+
:param pulumi.Input[builtins.str] comment: Specifies a comment for the authentication policy.
|
|
399
|
+
:param pulumi.Input[builtins.str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
400
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] mfa_authentication_methods: A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
|
|
401
|
+
:param pulumi.Input[builtins.str] mfa_enrollment: Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
|
|
402
|
+
:param pulumi.Input[builtins.str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
403
|
+
:param pulumi.Input[builtins.str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
404
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] security_integrations: A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
|
|
404
405
|
"""
|
|
405
406
|
...
|
|
406
407
|
@overload
|
|
@@ -430,15 +431,15 @@ class AuthenticationPolicy(pulumi.CustomResource):
|
|
|
430
431
|
def _internal_init(__self__,
|
|
431
432
|
resource_name: str,
|
|
432
433
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
433
|
-
authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
434
|
-
client_types: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
435
|
-
comment: Optional[pulumi.Input[str]] = None,
|
|
436
|
-
database: Optional[pulumi.Input[str]] = None,
|
|
437
|
-
mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
438
|
-
mfa_enrollment: Optional[pulumi.Input[str]] = None,
|
|
439
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
440
|
-
schema: Optional[pulumi.Input[str]] = None,
|
|
441
|
-
security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
434
|
+
authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
435
|
+
client_types: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
436
|
+
comment: Optional[pulumi.Input[builtins.str]] = None,
|
|
437
|
+
database: Optional[pulumi.Input[builtins.str]] = None,
|
|
438
|
+
mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
439
|
+
mfa_enrollment: Optional[pulumi.Input[builtins.str]] = None,
|
|
440
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
441
|
+
schema: Optional[pulumi.Input[builtins.str]] = None,
|
|
442
|
+
security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
442
443
|
__props__=None):
|
|
443
444
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
444
445
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -474,17 +475,17 @@ class AuthenticationPolicy(pulumi.CustomResource):
|
|
|
474
475
|
def get(resource_name: str,
|
|
475
476
|
id: pulumi.Input[str],
|
|
476
477
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
477
|
-
authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
478
|
-
client_types: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
479
|
-
comment: Optional[pulumi.Input[str]] = None,
|
|
480
|
-
database: Optional[pulumi.Input[str]] = None,
|
|
478
|
+
authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
479
|
+
client_types: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
480
|
+
comment: Optional[pulumi.Input[builtins.str]] = None,
|
|
481
|
+
database: Optional[pulumi.Input[builtins.str]] = None,
|
|
481
482
|
describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['AuthenticationPolicyDescribeOutputArgs', 'AuthenticationPolicyDescribeOutputArgsDict']]]]] = None,
|
|
482
|
-
fully_qualified_name: Optional[pulumi.Input[str]] = None,
|
|
483
|
-
mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
484
|
-
mfa_enrollment: Optional[pulumi.Input[str]] = None,
|
|
485
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
486
|
-
schema: Optional[pulumi.Input[str]] = None,
|
|
487
|
-
security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
483
|
+
fully_qualified_name: Optional[pulumi.Input[builtins.str]] = None,
|
|
484
|
+
mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
485
|
+
mfa_enrollment: Optional[pulumi.Input[builtins.str]] = None,
|
|
486
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
487
|
+
schema: Optional[pulumi.Input[builtins.str]] = None,
|
|
488
|
+
security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
488
489
|
show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['AuthenticationPolicyShowOutputArgs', 'AuthenticationPolicyShowOutputArgsDict']]]]] = None) -> 'AuthenticationPolicy':
|
|
489
490
|
"""
|
|
490
491
|
Get an existing AuthenticationPolicy resource's state with the given name, id, and optional extra
|
|
@@ -493,17 +494,17 @@ class AuthenticationPolicy(pulumi.CustomResource):
|
|
|
493
494
|
:param str resource_name: The unique name of the resulting resource.
|
|
494
495
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
495
496
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
496
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] authentication_methods: A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
|
|
497
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] client_types: A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
|
|
498
|
-
:param pulumi.Input[str] comment: Specifies a comment for the authentication policy.
|
|
499
|
-
:param pulumi.Input[str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
497
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] authentication_methods: A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
|
|
498
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] client_types: A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
|
|
499
|
+
:param pulumi.Input[builtins.str] comment: Specifies a comment for the authentication policy.
|
|
500
|
+
:param pulumi.Input[builtins.str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
500
501
|
:param pulumi.Input[Sequence[pulumi.Input[Union['AuthenticationPolicyDescribeOutputArgs', 'AuthenticationPolicyDescribeOutputArgsDict']]]] describe_outputs: Outputs the result of `DESCRIBE AUTHENTICATION POLICY` for the given policy.
|
|
501
|
-
:param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
502
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] mfa_authentication_methods: A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
|
|
503
|
-
:param pulumi.Input[str] mfa_enrollment: Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
|
|
504
|
-
:param pulumi.Input[str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
505
|
-
:param pulumi.Input[str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
506
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] security_integrations: A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
|
|
502
|
+
:param pulumi.Input[builtins.str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
503
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] mfa_authentication_methods: A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
|
|
504
|
+
:param pulumi.Input[builtins.str] mfa_enrollment: Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
|
|
505
|
+
:param pulumi.Input[builtins.str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
506
|
+
:param pulumi.Input[builtins.str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
507
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] security_integrations: A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
|
|
507
508
|
:param pulumi.Input[Sequence[pulumi.Input[Union['AuthenticationPolicyShowOutputArgs', 'AuthenticationPolicyShowOutputArgsDict']]]] show_outputs: Outputs the result of `SHOW AUTHENTICATION POLICIES` for the given policy.
|
|
508
509
|
"""
|
|
509
510
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
@@ -526,7 +527,7 @@ class AuthenticationPolicy(pulumi.CustomResource):
|
|
|
526
527
|
|
|
527
528
|
@property
|
|
528
529
|
@pulumi.getter(name="authenticationMethods")
|
|
529
|
-
def authentication_methods(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
|
530
|
+
def authentication_methods(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
|
|
530
531
|
"""
|
|
531
532
|
A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
|
|
532
533
|
"""
|
|
@@ -534,7 +535,7 @@ class AuthenticationPolicy(pulumi.CustomResource):
|
|
|
534
535
|
|
|
535
536
|
@property
|
|
536
537
|
@pulumi.getter(name="clientTypes")
|
|
537
|
-
def client_types(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
|
538
|
+
def client_types(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
|
|
538
539
|
"""
|
|
539
540
|
A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
|
|
540
541
|
"""
|
|
@@ -542,7 +543,7 @@ class AuthenticationPolicy(pulumi.CustomResource):
|
|
|
542
543
|
|
|
543
544
|
@property
|
|
544
545
|
@pulumi.getter
|
|
545
|
-
def comment(self) -> pulumi.Output[Optional[str]]:
|
|
546
|
+
def comment(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
546
547
|
"""
|
|
547
548
|
Specifies a comment for the authentication policy.
|
|
548
549
|
"""
|
|
@@ -550,7 +551,7 @@ class AuthenticationPolicy(pulumi.CustomResource):
|
|
|
550
551
|
|
|
551
552
|
@property
|
|
552
553
|
@pulumi.getter
|
|
553
|
-
def database(self) -> pulumi.Output[str]:
|
|
554
|
+
def database(self) -> pulumi.Output[builtins.str]:
|
|
554
555
|
"""
|
|
555
556
|
The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
556
557
|
"""
|
|
@@ -566,7 +567,7 @@ class AuthenticationPolicy(pulumi.CustomResource):
|
|
|
566
567
|
|
|
567
568
|
@property
|
|
568
569
|
@pulumi.getter(name="fullyQualifiedName")
|
|
569
|
-
def fully_qualified_name(self) -> pulumi.Output[str]:
|
|
570
|
+
def fully_qualified_name(self) -> pulumi.Output[builtins.str]:
|
|
570
571
|
"""
|
|
571
572
|
Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
572
573
|
"""
|
|
@@ -574,7 +575,7 @@ class AuthenticationPolicy(pulumi.CustomResource):
|
|
|
574
575
|
|
|
575
576
|
@property
|
|
576
577
|
@pulumi.getter(name="mfaAuthenticationMethods")
|
|
577
|
-
def mfa_authentication_methods(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
|
578
|
+
def mfa_authentication_methods(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
|
|
578
579
|
"""
|
|
579
580
|
A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
|
|
580
581
|
"""
|
|
@@ -582,7 +583,7 @@ class AuthenticationPolicy(pulumi.CustomResource):
|
|
|
582
583
|
|
|
583
584
|
@property
|
|
584
585
|
@pulumi.getter(name="mfaEnrollment")
|
|
585
|
-
def mfa_enrollment(self) -> pulumi.Output[Optional[str]]:
|
|
586
|
+
def mfa_enrollment(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
586
587
|
"""
|
|
587
588
|
Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
|
|
588
589
|
"""
|
|
@@ -590,7 +591,7 @@ class AuthenticationPolicy(pulumi.CustomResource):
|
|
|
590
591
|
|
|
591
592
|
@property
|
|
592
593
|
@pulumi.getter
|
|
593
|
-
def name(self) -> pulumi.Output[str]:
|
|
594
|
+
def name(self) -> pulumi.Output[builtins.str]:
|
|
594
595
|
"""
|
|
595
596
|
Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
596
597
|
"""
|
|
@@ -598,7 +599,7 @@ class AuthenticationPolicy(pulumi.CustomResource):
|
|
|
598
599
|
|
|
599
600
|
@property
|
|
600
601
|
@pulumi.getter
|
|
601
|
-
def schema(self) -> pulumi.Output[str]:
|
|
602
|
+
def schema(self) -> pulumi.Output[builtins.str]:
|
|
602
603
|
"""
|
|
603
604
|
The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
604
605
|
"""
|
|
@@ -606,7 +607,7 @@ class AuthenticationPolicy(pulumi.CustomResource):
|
|
|
606
607
|
|
|
607
608
|
@property
|
|
608
609
|
@pulumi.getter(name="securityIntegrations")
|
|
609
|
-
def security_integrations(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
|
610
|
+
def security_integrations(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
|
|
610
611
|
"""
|
|
611
612
|
A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
|
|
612
613
|
"""
|