pulumi-snowflake 1.2.0a1743489585__py3-none-any.whl → 1.2.0a1744183688__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of pulumi-snowflake might be problematic. Click here for more details.

Files changed (147) hide show
  1. pulumi_snowflake/__init__.py +1 -0
  2. pulumi_snowflake/_inputs.py +12288 -12287
  3. pulumi_snowflake/account.py +186 -185
  4. pulumi_snowflake/account_authentication_policy_attachment.py +15 -14
  5. pulumi_snowflake/account_parameter.py +29 -28
  6. pulumi_snowflake/account_password_policy_attachment.py +15 -14
  7. pulumi_snowflake/account_role.py +32 -31
  8. pulumi_snowflake/alert.py +120 -119
  9. pulumi_snowflake/api_authentication_integration_with_authorization_code_grant.py +158 -157
  10. pulumi_snowflake/api_authentication_integration_with_client_credentials.py +144 -143
  11. pulumi_snowflake/api_authentication_integration_with_jwt_bearer.py +154 -153
  12. pulumi_snowflake/api_integration.py +203 -202
  13. pulumi_snowflake/authentication_policy.py +134 -133
  14. pulumi_snowflake/config/__init__.py +1 -0
  15. pulumi_snowflake/config/__init__.pyi +1 -0
  16. pulumi_snowflake/config/outputs.py +16 -15
  17. pulumi_snowflake/config/vars.py +1 -0
  18. pulumi_snowflake/cortex_search_service.py +141 -140
  19. pulumi_snowflake/database.py +288 -287
  20. pulumi_snowflake/database_role.py +50 -49
  21. pulumi_snowflake/dynamic_table.py +218 -217
  22. pulumi_snowflake/email_notification_integration.py +56 -55
  23. pulumi_snowflake/execute.py +50 -49
  24. pulumi_snowflake/external_function.py +225 -224
  25. pulumi_snowflake/external_oauth_integration.py +232 -231
  26. pulumi_snowflake/external_table.py +197 -196
  27. pulumi_snowflake/external_volume.py +50 -49
  28. pulumi_snowflake/failover_group.py +106 -105
  29. pulumi_snowflake/file_format.py +512 -511
  30. pulumi_snowflake/function_java.py +249 -248
  31. pulumi_snowflake/function_javascript.py +193 -192
  32. pulumi_snowflake/function_python.py +263 -262
  33. pulumi_snowflake/function_scala.py +249 -248
  34. pulumi_snowflake/function_sql.py +179 -178
  35. pulumi_snowflake/get_account_roles.py +12 -11
  36. pulumi_snowflake/get_accounts.py +12 -11
  37. pulumi_snowflake/get_alerts.py +17 -16
  38. pulumi_snowflake/get_connections.py +7 -6
  39. pulumi_snowflake/get_cortex_search_services.py +12 -11
  40. pulumi_snowflake/get_current_account.py +5 -4
  41. pulumi_snowflake/get_current_role.py +3 -2
  42. pulumi_snowflake/get_database.py +15 -14
  43. pulumi_snowflake/get_database_role.py +14 -13
  44. pulumi_snowflake/get_database_roles.py +12 -11
  45. pulumi_snowflake/get_databases.py +22 -21
  46. pulumi_snowflake/get_dynamic_tables.py +7 -6
  47. pulumi_snowflake/get_external_functions.py +12 -11
  48. pulumi_snowflake/get_external_tables.py +12 -11
  49. pulumi_snowflake/get_failover_groups.py +7 -6
  50. pulumi_snowflake/get_file_formats.py +12 -11
  51. pulumi_snowflake/get_functions.py +12 -11
  52. pulumi_snowflake/get_grants.py +2 -1
  53. pulumi_snowflake/get_masking_policies.py +12 -11
  54. pulumi_snowflake/get_materialized_views.py +12 -11
  55. pulumi_snowflake/get_network_policies.py +12 -11
  56. pulumi_snowflake/get_parameters.py +27 -26
  57. pulumi_snowflake/get_pipes.py +12 -11
  58. pulumi_snowflake/get_procedures.py +12 -11
  59. pulumi_snowflake/get_resource_monitors.py +7 -6
  60. pulumi_snowflake/get_row_access_policies.py +12 -11
  61. pulumi_snowflake/get_schemas.py +22 -21
  62. pulumi_snowflake/get_secrets.py +12 -11
  63. pulumi_snowflake/get_security_integrations.py +12 -11
  64. pulumi_snowflake/get_sequences.py +12 -11
  65. pulumi_snowflake/get_shares.py +7 -6
  66. pulumi_snowflake/get_stages.py +12 -11
  67. pulumi_snowflake/get_storage_integrations.py +2 -1
  68. pulumi_snowflake/get_streamlits.py +12 -11
  69. pulumi_snowflake/get_streams.py +17 -16
  70. pulumi_snowflake/get_system_generate_scim_access_token.py +8 -7
  71. pulumi_snowflake/get_system_get_aws_sns_iam_policy.py +8 -7
  72. pulumi_snowflake/get_system_get_private_link_config.py +11 -10
  73. pulumi_snowflake/get_system_get_snowflake_platform_info.py +4 -3
  74. pulumi_snowflake/get_tables.py +12 -11
  75. pulumi_snowflake/get_tags.py +7 -6
  76. pulumi_snowflake/get_tasks.py +22 -21
  77. pulumi_snowflake/get_users.py +22 -21
  78. pulumi_snowflake/get_views.py +17 -16
  79. pulumi_snowflake/get_warehouses.py +17 -16
  80. pulumi_snowflake/grant_account_role.py +43 -42
  81. pulumi_snowflake/grant_application_role.py +43 -42
  82. pulumi_snowflake/grant_database_role.py +57 -56
  83. pulumi_snowflake/grant_ownership.py +43 -42
  84. pulumi_snowflake/grant_privileges_to_account_role.py +95 -94
  85. pulumi_snowflake/grant_privileges_to_database_role.py +95 -94
  86. pulumi_snowflake/grant_privileges_to_share.py +127 -126
  87. pulumi_snowflake/legacy_service_user.py +1039 -1038
  88. pulumi_snowflake/managed_account.py +113 -112
  89. pulumi_snowflake/masking_policy.py +106 -105
  90. pulumi_snowflake/materialized_view.py +120 -119
  91. pulumi_snowflake/network_policy.py +92 -91
  92. pulumi_snowflake/network_policy_attachment.py +43 -42
  93. pulumi_snowflake/network_rule.py +106 -105
  94. pulumi_snowflake/notification_integration.py +238 -237
  95. pulumi_snowflake/oauth_integration_for_custom_clients.py +210 -209
  96. pulumi_snowflake/oauth_integration_for_partner_applications.py +134 -133
  97. pulumi_snowflake/object_parameter.py +57 -56
  98. pulumi_snowflake/outputs.py +9273 -9272
  99. pulumi_snowflake/password_policy.py +246 -245
  100. pulumi_snowflake/pipe.py +148 -147
  101. pulumi_snowflake/primary_connection.py +55 -54
  102. pulumi_snowflake/procedure_java.py +267 -266
  103. pulumi_snowflake/procedure_javascript.py +197 -196
  104. pulumi_snowflake/procedure_python.py +267 -266
  105. pulumi_snowflake/procedure_scala.py +267 -266
  106. pulumi_snowflake/procedure_sql.py +197 -196
  107. pulumi_snowflake/provider.py +303 -302
  108. pulumi_snowflake/pulumi-plugin.json +1 -1
  109. pulumi_snowflake/resource_monitor.py +134 -133
  110. pulumi_snowflake/row_access_policy.py +78 -77
  111. pulumi_snowflake/saml2_integration.py +246 -245
  112. pulumi_snowflake/schema.py +316 -315
  113. pulumi_snowflake/scim_integration.py +106 -105
  114. pulumi_snowflake/secondary_connection.py +57 -56
  115. pulumi_snowflake/secondary_database.py +288 -287
  116. pulumi_snowflake/secret_with_authorization_code_grant.py +109 -108
  117. pulumi_snowflake/secret_with_basic_authentication.py +95 -94
  118. pulumi_snowflake/secret_with_client_credentials.py +99 -98
  119. pulumi_snowflake/secret_with_generic_string.py +81 -80
  120. pulumi_snowflake/sequence.py +99 -98
  121. pulumi_snowflake/service_user.py +1015 -1014
  122. pulumi_snowflake/share.py +50 -49
  123. pulumi_snowflake/shared_database.py +246 -245
  124. pulumi_snowflake/stage.py +190 -189
  125. pulumi_snowflake/storage_integration.py +166 -165
  126. pulumi_snowflake/stream_on_directory_table.py +100 -99
  127. pulumi_snowflake/stream_on_external_table.py +114 -113
  128. pulumi_snowflake/stream_on_table.py +124 -123
  129. pulumi_snowflake/stream_on_view.py +124 -123
  130. pulumi_snowflake/streamlit.py +148 -147
  131. pulumi_snowflake/table.py +113 -112
  132. pulumi_snowflake/table_column_masking_policy_application.py +43 -42
  133. pulumi_snowflake/table_constraint.py +155 -154
  134. pulumi_snowflake/tag.py +92 -91
  135. pulumi_snowflake/tag_association.py +71 -70
  136. pulumi_snowflake/task.py +1002 -1001
  137. pulumi_snowflake/user.py +1101 -1100
  138. pulumi_snowflake/user_authentication_policy_attachment.py +29 -28
  139. pulumi_snowflake/user_password_policy_attachment.py +29 -28
  140. pulumi_snowflake/user_public_keys.py +43 -42
  141. pulumi_snowflake/view.py +136 -135
  142. pulumi_snowflake/warehouse.py +232 -231
  143. {pulumi_snowflake-1.2.0a1743489585.dist-info → pulumi_snowflake-1.2.0a1744183688.dist-info}/METADATA +1 -1
  144. pulumi_snowflake-1.2.0a1744183688.dist-info/RECORD +148 -0
  145. pulumi_snowflake-1.2.0a1743489585.dist-info/RECORD +0 -148
  146. {pulumi_snowflake-1.2.0a1743489585.dist-info → pulumi_snowflake-1.2.0a1744183688.dist-info}/WHEEL +0 -0
  147. {pulumi_snowflake-1.2.0a1743489585.dist-info → pulumi_snowflake-1.2.0a1744183688.dist-info}/top_level.txt +0 -0
pulumi_snowflake/oauth_integration_for_custom_clients.py CHANGED
@@ -2,6 +2,7 @@
2
2
  # *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
3
3
  # *** Do not edit by hand unless you're certain you know what you are doing! ***
4
4
 
5
+ import builtins
5
6
  import copy
6
7
  import warnings
7
8
  import sys
@@ -21,36 +22,36 @@ __all__ = ['OauthIntegrationForCustomClientsArgs', 'OauthIntegrationForCustomCli
21
22
  @pulumi.input_type
22
23
  class OauthIntegrationForCustomClientsArgs:
23
24
  def __init__(__self__, *,
24
- oauth_client_type: pulumi.Input[str],
25
- oauth_redirect_uri: pulumi.Input[str],
26
- blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
27
- comment: Optional[pulumi.Input[str]] = None,
28
- enabled: Optional[pulumi.Input[str]] = None,
29
- name: Optional[pulumi.Input[str]] = None,
30
- network_policy: Optional[pulumi.Input[str]] = None,
31
- oauth_allow_non_tls_redirect_uri: Optional[pulumi.Input[str]] = None,
32
- oauth_client_rsa_public_key: Optional[pulumi.Input[str]] = None,
33
- oauth_client_rsa_public_key2: Optional[pulumi.Input[str]] = None,
34
- oauth_enforce_pkce: Optional[pulumi.Input[str]] = None,
35
- oauth_issue_refresh_tokens: Optional[pulumi.Input[str]] = None,
36
- oauth_refresh_token_validity: Optional[pulumi.Input[int]] = None,
37
- oauth_use_secondary_roles: Optional[pulumi.Input[str]] = None,
38
- pre_authorized_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
25
+ oauth_client_type: pulumi.Input[builtins.str],
26
+ oauth_redirect_uri: pulumi.Input[builtins.str],
27
+ blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
28
+ comment: Optional[pulumi.Input[builtins.str]] = None,
29
+ enabled: Optional[pulumi.Input[builtins.str]] = None,
30
+ name: Optional[pulumi.Input[builtins.str]] = None,
31
+ network_policy: Optional[pulumi.Input[builtins.str]] = None,
32
+ oauth_allow_non_tls_redirect_uri: Optional[pulumi.Input[builtins.str]] = None,
33
+ oauth_client_rsa_public_key: Optional[pulumi.Input[builtins.str]] = None,
34
+ oauth_client_rsa_public_key2: Optional[pulumi.Input[builtins.str]] = None,
35
+ oauth_enforce_pkce: Optional[pulumi.Input[builtins.str]] = None,
36
+ oauth_issue_refresh_tokens: Optional[pulumi.Input[builtins.str]] = None,
37
+ oauth_refresh_token_validity: Optional[pulumi.Input[builtins.int]] = None,
38
+ oauth_use_secondary_roles: Optional[pulumi.Input[builtins.str]] = None,
39
+ pre_authorized_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None):
39
40
  """
40
41
  The set of arguments for constructing a OauthIntegrationForCustomClients resource.
41
- :param pulumi.Input[str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
42
- :param pulumi.Input[str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
43
- :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
44
- :param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
45
- :param pulumi.Input[str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
46
- :param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
47
- :param pulumi.Input[str] network_policy: Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token. For more information about this resource, see docs.
48
- :param pulumi.Input[str] oauth_allow_non_tls_redirect_uri: If true, allows setting oauth*redirect*uri to a URI not protected by TLS. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
49
- :param pulumi.Input[str] oauth_enforce_pkce: Boolean that specifies whether Proof Key for Code Exchange (PKCE) should be required for the integration. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
50
- :param pulumi.Input[str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
51
- :param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
52
- :param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
53
- :param pulumi.Input[Sequence[pulumi.Input[str]]] pre_authorized_roles_lists: A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating. For more information about this resource, see docs.
42
+ :param pulumi.Input[builtins.str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
43
+ :param pulumi.Input[builtins.str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
44
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
45
+ :param pulumi.Input[builtins.str] comment: Specifies a comment for the OAuth integration.
46
+ :param pulumi.Input[builtins.str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
47
+ :param pulumi.Input[builtins.str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
48
+ :param pulumi.Input[builtins.str] network_policy: Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token. For more information about this resource, see docs.
49
+ :param pulumi.Input[builtins.str] oauth_allow_non_tls_redirect_uri: If true, allows setting oauth*redirect*uri to a URI not protected by TLS. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
50
+ :param pulumi.Input[builtins.str] oauth_enforce_pkce: Boolean that specifies whether Proof Key for Code Exchange (PKCE) should be required for the integration. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
51
+ :param pulumi.Input[builtins.str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
52
+ :param pulumi.Input[builtins.int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
53
+ :param pulumi.Input[builtins.str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
54
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] pre_authorized_roles_lists: A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating. For more information about this resource, see docs.
54
55
  """
55
56
  pulumi.set(__self__, "oauth_client_type", oauth_client_type)
56
57
  pulumi.set(__self__, "oauth_redirect_uri", oauth_redirect_uri)
@@ -83,218 +84,218 @@ class OauthIntegrationForCustomClientsArgs:
83
84
 
84
85
  @property
85
86
  @pulumi.getter(name="oauthClientType")
86
- def oauth_client_type(self) -> pulumi.Input[str]:
87
+ def oauth_client_type(self) -> pulumi.Input[builtins.str]:
87
88
  """
88
89
  Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
89
90
  """
90
91
  return pulumi.get(self, "oauth_client_type")
91
92
 
92
93
  @oauth_client_type.setter
93
- def oauth_client_type(self, value: pulumi.Input[str]):
94
+ def oauth_client_type(self, value: pulumi.Input[builtins.str]):
94
95
  pulumi.set(self, "oauth_client_type", value)
95
96
 
96
97
  @property
97
98
  @pulumi.getter(name="oauthRedirectUri")
98
- def oauth_redirect_uri(self) -> pulumi.Input[str]:
99
+ def oauth_redirect_uri(self) -> pulumi.Input[builtins.str]:
99
100
  """
100
101
  Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
101
102
  """
102
103
  return pulumi.get(self, "oauth_redirect_uri")
103
104
 
104
105
  @oauth_redirect_uri.setter
105
- def oauth_redirect_uri(self, value: pulumi.Input[str]):
106
+ def oauth_redirect_uri(self, value: pulumi.Input[builtins.str]):
106
107
  pulumi.set(self, "oauth_redirect_uri", value)
107
108
 
108
109
  @property
109
110
  @pulumi.getter(name="blockedRolesLists")
110
- def blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
111
+ def blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
111
112
  """
112
113
  A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
113
114
  """
114
115
  return pulumi.get(self, "blocked_roles_lists")
115
116
 
116
117
  @blocked_roles_lists.setter
117
- def blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
118
+ def blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
118
119
  pulumi.set(self, "blocked_roles_lists", value)
119
120
 
120
121
  @property
121
122
  @pulumi.getter
122
- def comment(self) -> Optional[pulumi.Input[str]]:
123
+ def comment(self) -> Optional[pulumi.Input[builtins.str]]:
123
124
  """
124
125
  Specifies a comment for the OAuth integration.
125
126
  """
126
127
  return pulumi.get(self, "comment")
127
128
 
128
129
  @comment.setter
129
- def comment(self, value: Optional[pulumi.Input[str]]):
130
+ def comment(self, value: Optional[pulumi.Input[builtins.str]]):
130
131
  pulumi.set(self, "comment", value)
131
132
 
132
133
  @property
133
134
  @pulumi.getter
134
- def enabled(self) -> Optional[pulumi.Input[str]]:
135
+ def enabled(self) -> Optional[pulumi.Input[builtins.str]]:
135
136
  """
136
137
  Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
137
138
  """
138
139
  return pulumi.get(self, "enabled")
139
140
 
140
141
  @enabled.setter
141
- def enabled(self, value: Optional[pulumi.Input[str]]):
142
+ def enabled(self, value: Optional[pulumi.Input[builtins.str]]):
142
143
  pulumi.set(self, "enabled", value)
143
144
 
144
145
  @property
145
146
  @pulumi.getter
146
- def name(self) -> Optional[pulumi.Input[str]]:
147
+ def name(self) -> Optional[pulumi.Input[builtins.str]]:
147
148
  """
148
149
  Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
149
150
  """
150
151
  return pulumi.get(self, "name")
151
152
 
152
153
  @name.setter
153
- def name(self, value: Optional[pulumi.Input[str]]):
154
+ def name(self, value: Optional[pulumi.Input[builtins.str]]):
154
155
  pulumi.set(self, "name", value)
155
156
 
156
157
  @property
157
158
  @pulumi.getter(name="networkPolicy")
158
- def network_policy(self) -> Optional[pulumi.Input[str]]:
159
+ def network_policy(self) -> Optional[pulumi.Input[builtins.str]]:
159
160
  """
160
161
  Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token. For more information about this resource, see docs.
161
162
  """
162
163
  return pulumi.get(self, "network_policy")
163
164
 
164
165
  @network_policy.setter
165
- def network_policy(self, value: Optional[pulumi.Input[str]]):
166
+ def network_policy(self, value: Optional[pulumi.Input[builtins.str]]):
166
167
  pulumi.set(self, "network_policy", value)
167
168
 
168
169
  @property
169
170
  @pulumi.getter(name="oauthAllowNonTlsRedirectUri")
170
- def oauth_allow_non_tls_redirect_uri(self) -> Optional[pulumi.Input[str]]:
171
+ def oauth_allow_non_tls_redirect_uri(self) -> Optional[pulumi.Input[builtins.str]]:
171
172
  """
172
173
  If true, allows setting oauth*redirect*uri to a URI not protected by TLS. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
173
174
  """
174
175
  return pulumi.get(self, "oauth_allow_non_tls_redirect_uri")
175
176
 
176
177
  @oauth_allow_non_tls_redirect_uri.setter
177
- def oauth_allow_non_tls_redirect_uri(self, value: Optional[pulumi.Input[str]]):
178
+ def oauth_allow_non_tls_redirect_uri(self, value: Optional[pulumi.Input[builtins.str]]):
178
179
  pulumi.set(self, "oauth_allow_non_tls_redirect_uri", value)
179
180
 
180
181
  @property
181
182
  @pulumi.getter(name="oauthClientRsaPublicKey")
182
- def oauth_client_rsa_public_key(self) -> Optional[pulumi.Input[str]]:
183
+ def oauth_client_rsa_public_key(self) -> Optional[pulumi.Input[builtins.str]]:
183
184
  return pulumi.get(self, "oauth_client_rsa_public_key")
184
185
 
185
186
  @oauth_client_rsa_public_key.setter
186
- def oauth_client_rsa_public_key(self, value: Optional[pulumi.Input[str]]):
187
+ def oauth_client_rsa_public_key(self, value: Optional[pulumi.Input[builtins.str]]):
187
188
  pulumi.set(self, "oauth_client_rsa_public_key", value)
188
189
 
189
190
  @property
190
191
  @pulumi.getter(name="oauthClientRsaPublicKey2")
191
- def oauth_client_rsa_public_key2(self) -> Optional[pulumi.Input[str]]:
192
+ def oauth_client_rsa_public_key2(self) -> Optional[pulumi.Input[builtins.str]]:
192
193
  return pulumi.get(self, "oauth_client_rsa_public_key2")
193
194
 
194
195
  @oauth_client_rsa_public_key2.setter
195
- def oauth_client_rsa_public_key2(self, value: Optional[pulumi.Input[str]]):
196
+ def oauth_client_rsa_public_key2(self, value: Optional[pulumi.Input[builtins.str]]):
196
197
  pulumi.set(self, "oauth_client_rsa_public_key2", value)
197
198
 
198
199
  @property
199
200
  @pulumi.getter(name="oauthEnforcePkce")
200
- def oauth_enforce_pkce(self) -> Optional[pulumi.Input[str]]:
201
+ def oauth_enforce_pkce(self) -> Optional[pulumi.Input[builtins.str]]:
201
202
  """
202
203
  Boolean that specifies whether Proof Key for Code Exchange (PKCE) should be required for the integration. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
203
204
  """
204
205
  return pulumi.get(self, "oauth_enforce_pkce")
205
206
 
206
207
  @oauth_enforce_pkce.setter
207
- def oauth_enforce_pkce(self, value: Optional[pulumi.Input[str]]):
208
+ def oauth_enforce_pkce(self, value: Optional[pulumi.Input[builtins.str]]):
208
209
  pulumi.set(self, "oauth_enforce_pkce", value)
209
210
 
210
211
  @property
211
212
  @pulumi.getter(name="oauthIssueRefreshTokens")
212
- def oauth_issue_refresh_tokens(self) -> Optional[pulumi.Input[str]]:
213
+ def oauth_issue_refresh_tokens(self) -> Optional[pulumi.Input[builtins.str]]:
213
214
  """
214
215
  Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
215
216
  """
216
217
  return pulumi.get(self, "oauth_issue_refresh_tokens")
217
218
 
218
219
  @oauth_issue_refresh_tokens.setter
219
- def oauth_issue_refresh_tokens(self, value: Optional[pulumi.Input[str]]):
220
+ def oauth_issue_refresh_tokens(self, value: Optional[pulumi.Input[builtins.str]]):
220
221
  pulumi.set(self, "oauth_issue_refresh_tokens", value)
221
222
 
222
223
  @property
223
224
  @pulumi.getter(name="oauthRefreshTokenValidity")
224
- def oauth_refresh_token_validity(self) -> Optional[pulumi.Input[int]]:
225
+ def oauth_refresh_token_validity(self) -> Optional[pulumi.Input[builtins.int]]:
225
226
  """
226
227
  Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
227
228
  """
228
229
  return pulumi.get(self, "oauth_refresh_token_validity")
229
230
 
230
231
  @oauth_refresh_token_validity.setter
231
- def oauth_refresh_token_validity(self, value: Optional[pulumi.Input[int]]):
232
+ def oauth_refresh_token_validity(self, value: Optional[pulumi.Input[builtins.int]]):
232
233
  pulumi.set(self, "oauth_refresh_token_validity", value)
233
234
 
234
235
  @property
235
236
  @pulumi.getter(name="oauthUseSecondaryRoles")
236
- def oauth_use_secondary_roles(self) -> Optional[pulumi.Input[str]]:
237
+ def oauth_use_secondary_roles(self) -> Optional[pulumi.Input[builtins.str]]:
237
238
  """
238
239
  Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
239
240
  """
240
241
  return pulumi.get(self, "oauth_use_secondary_roles")
241
242
 
242
243
  @oauth_use_secondary_roles.setter
243
- def oauth_use_secondary_roles(self, value: Optional[pulumi.Input[str]]):
244
+ def oauth_use_secondary_roles(self, value: Optional[pulumi.Input[builtins.str]]):
244
245
  pulumi.set(self, "oauth_use_secondary_roles", value)
245
246
 
246
247
  @property
247
248
  @pulumi.getter(name="preAuthorizedRolesLists")
248
- def pre_authorized_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
249
+ def pre_authorized_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
249
250
  """
250
251
  A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating. For more information about this resource, see docs.
251
252
  """
252
253
  return pulumi.get(self, "pre_authorized_roles_lists")
253
254
 
254
255
  @pre_authorized_roles_lists.setter
255
- def pre_authorized_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
256
+ def pre_authorized_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
256
257
  pulumi.set(self, "pre_authorized_roles_lists", value)
257
258
 
258
259
 
259
260
  @pulumi.input_type
260
261
  class _OauthIntegrationForCustomClientsState:
261
262
  def __init__(__self__, *,
262
- blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
263
- comment: Optional[pulumi.Input[str]] = None,
263
+ blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
264
+ comment: Optional[pulumi.Input[builtins.str]] = None,
264
265
  describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForCustomClientsDescribeOutputArgs']]]] = None,
265
- enabled: Optional[pulumi.Input[str]] = None,
266
- fully_qualified_name: Optional[pulumi.Input[str]] = None,
267
- name: Optional[pulumi.Input[str]] = None,
268
- network_policy: Optional[pulumi.Input[str]] = None,
269
- oauth_allow_non_tls_redirect_uri: Optional[pulumi.Input[str]] = None,
270
- oauth_client_rsa_public_key: Optional[pulumi.Input[str]] = None,
271
- oauth_client_rsa_public_key2: Optional[pulumi.Input[str]] = None,
272
- oauth_client_type: Optional[pulumi.Input[str]] = None,
273
- oauth_enforce_pkce: Optional[pulumi.Input[str]] = None,
274
- oauth_issue_refresh_tokens: Optional[pulumi.Input[str]] = None,
275
- oauth_redirect_uri: Optional[pulumi.Input[str]] = None,
276
- oauth_refresh_token_validity: Optional[pulumi.Input[int]] = None,
277
- oauth_use_secondary_roles: Optional[pulumi.Input[str]] = None,
278
- pre_authorized_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
266
+ enabled: Optional[pulumi.Input[builtins.str]] = None,
267
+ fully_qualified_name: Optional[pulumi.Input[builtins.str]] = None,
268
+ name: Optional[pulumi.Input[builtins.str]] = None,
269
+ network_policy: Optional[pulumi.Input[builtins.str]] = None,
270
+ oauth_allow_non_tls_redirect_uri: Optional[pulumi.Input[builtins.str]] = None,
271
+ oauth_client_rsa_public_key: Optional[pulumi.Input[builtins.str]] = None,
272
+ oauth_client_rsa_public_key2: Optional[pulumi.Input[builtins.str]] = None,
273
+ oauth_client_type: Optional[pulumi.Input[builtins.str]] = None,
274
+ oauth_enforce_pkce: Optional[pulumi.Input[builtins.str]] = None,
275
+ oauth_issue_refresh_tokens: Optional[pulumi.Input[builtins.str]] = None,
276
+ oauth_redirect_uri: Optional[pulumi.Input[builtins.str]] = None,
277
+ oauth_refresh_token_validity: Optional[pulumi.Input[builtins.int]] = None,
278
+ oauth_use_secondary_roles: Optional[pulumi.Input[builtins.str]] = None,
279
+ pre_authorized_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
279
280
  related_parameters: Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForCustomClientsRelatedParameterArgs']]]] = None,
280
281
  show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForCustomClientsShowOutputArgs']]]] = None):
281
282
  """
282
283
  Input properties used for looking up and filtering OauthIntegrationForCustomClients resources.
283
- :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
284
- :param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
284
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
285
+ :param pulumi.Input[builtins.str] comment: Specifies a comment for the OAuth integration.
285
286
  :param pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForCustomClientsDescribeOutputArgs']]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATION` for the given integration.
286
- :param pulumi.Input[str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
287
- :param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
288
- :param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
289
- :param pulumi.Input[str] network_policy: Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token. For more information about this resource, see docs.
290
- :param pulumi.Input[str] oauth_allow_non_tls_redirect_uri: If true, allows setting oauth*redirect*uri to a URI not protected by TLS. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
291
- :param pulumi.Input[str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
292
- :param pulumi.Input[str] oauth_enforce_pkce: Boolean that specifies whether Proof Key for Code Exchange (PKCE) should be required for the integration. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
293
- :param pulumi.Input[str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
294
- :param pulumi.Input[str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
295
- :param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
296
- :param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
297
- :param pulumi.Input[Sequence[pulumi.Input[str]]] pre_authorized_roles_lists: A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating. For more information about this resource, see docs.
287
+ :param pulumi.Input[builtins.str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
288
+ :param pulumi.Input[builtins.str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
289
+ :param pulumi.Input[builtins.str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
290
+ :param pulumi.Input[builtins.str] network_policy: Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token. For more information about this resource, see docs.
291
+ :param pulumi.Input[builtins.str] oauth_allow_non_tls_redirect_uri: If true, allows setting oauth*redirect*uri to a URI not protected by TLS. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
292
+ :param pulumi.Input[builtins.str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
293
+ :param pulumi.Input[builtins.str] oauth_enforce_pkce: Boolean that specifies whether Proof Key for Code Exchange (PKCE) should be required for the integration. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
294
+ :param pulumi.Input[builtins.str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
295
+ :param pulumi.Input[builtins.str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
296
+ :param pulumi.Input[builtins.int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
297
+ :param pulumi.Input[builtins.str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
298
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] pre_authorized_roles_lists: A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating. For more information about this resource, see docs.
298
299
  :param pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForCustomClientsRelatedParameterArgs']]] related_parameters: Parameters related to this security integration.
299
300
  :param pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForCustomClientsShowOutputArgs']]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATION` for the given integration.
300
301
  """
@@ -339,26 +340,26 @@ class _OauthIntegrationForCustomClientsState:
339
340
 
340
341
  @property
341
342
  @pulumi.getter(name="blockedRolesLists")
342
- def blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
343
+ def blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
343
344
  """
344
345
  A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
345
346
  """
346
347
  return pulumi.get(self, "blocked_roles_lists")
347
348
 
348
349
  @blocked_roles_lists.setter
349
- def blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
350
+ def blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
350
351
  pulumi.set(self, "blocked_roles_lists", value)
351
352
 
352
353
  @property
353
354
  @pulumi.getter
354
- def comment(self) -> Optional[pulumi.Input[str]]:
355
+ def comment(self) -> Optional[pulumi.Input[builtins.str]]:
355
356
  """
356
357
  Specifies a comment for the OAuth integration.
357
358
  """
358
359
  return pulumi.get(self, "comment")
359
360
 
360
361
  @comment.setter
361
- def comment(self, value: Optional[pulumi.Input[str]]):
362
+ def comment(self, value: Optional[pulumi.Input[builtins.str]]):
362
363
  pulumi.set(self, "comment", value)
363
364
 
364
365
  @property
@@ -375,164 +376,164 @@ class _OauthIntegrationForCustomClientsState:
375
376
 
376
377
  @property
377
378
  @pulumi.getter
378
- def enabled(self) -> Optional[pulumi.Input[str]]:
379
+ def enabled(self) -> Optional[pulumi.Input[builtins.str]]:
379
380
  """
380
381
  Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
381
382
  """
382
383
  return pulumi.get(self, "enabled")
383
384
 
384
385
  @enabled.setter
385
- def enabled(self, value: Optional[pulumi.Input[str]]):
386
+ def enabled(self, value: Optional[pulumi.Input[builtins.str]]):
386
387
  pulumi.set(self, "enabled", value)
387
388
 
388
389
  @property
389
390
  @pulumi.getter(name="fullyQualifiedName")
390
- def fully_qualified_name(self) -> Optional[pulumi.Input[str]]:
391
+ def fully_qualified_name(self) -> Optional[pulumi.Input[builtins.str]]:
391
392
  """
392
393
  Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
393
394
  """
394
395
  return pulumi.get(self, "fully_qualified_name")
395
396
 
396
397
  @fully_qualified_name.setter
397
- def fully_qualified_name(self, value: Optional[pulumi.Input[str]]):
398
+ def fully_qualified_name(self, value: Optional[pulumi.Input[builtins.str]]):
398
399
  pulumi.set(self, "fully_qualified_name", value)
399
400
 
400
401
  @property
401
402
  @pulumi.getter
402
- def name(self) -> Optional[pulumi.Input[str]]:
403
+ def name(self) -> Optional[pulumi.Input[builtins.str]]:
403
404
  """
404
405
  Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
405
406
  """
406
407
  return pulumi.get(self, "name")
407
408
 
408
409
  @name.setter
409
- def name(self, value: Optional[pulumi.Input[str]]):
410
+ def name(self, value: Optional[pulumi.Input[builtins.str]]):
410
411
  pulumi.set(self, "name", value)
411
412
 
412
413
  @property
413
414
  @pulumi.getter(name="networkPolicy")
414
- def network_policy(self) -> Optional[pulumi.Input[str]]:
415
+ def network_policy(self) -> Optional[pulumi.Input[builtins.str]]:
415
416
  """
416
417
  Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token. For more information about this resource, see docs.
417
418
  """
418
419
  return pulumi.get(self, "network_policy")
419
420
 
420
421
  @network_policy.setter
421
- def network_policy(self, value: Optional[pulumi.Input[str]]):
422
+ def network_policy(self, value: Optional[pulumi.Input[builtins.str]]):
422
423
  pulumi.set(self, "network_policy", value)
423
424
 
424
425
  @property
425
426
  @pulumi.getter(name="oauthAllowNonTlsRedirectUri")
426
- def oauth_allow_non_tls_redirect_uri(self) -> Optional[pulumi.Input[str]]:
427
+ def oauth_allow_non_tls_redirect_uri(self) -> Optional[pulumi.Input[builtins.str]]:
427
428
  """
428
429
  If true, allows setting oauth*redirect*uri to a URI not protected by TLS. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
429
430
  """
430
431
  return pulumi.get(self, "oauth_allow_non_tls_redirect_uri")
431
432
 
432
433
  @oauth_allow_non_tls_redirect_uri.setter
433
- def oauth_allow_non_tls_redirect_uri(self, value: Optional[pulumi.Input[str]]):
434
+ def oauth_allow_non_tls_redirect_uri(self, value: Optional[pulumi.Input[builtins.str]]):
434
435
  pulumi.set(self, "oauth_allow_non_tls_redirect_uri", value)
435
436
 
436
437
  @property
437
438
  @pulumi.getter(name="oauthClientRsaPublicKey")
438
- def oauth_client_rsa_public_key(self) -> Optional[pulumi.Input[str]]:
439
+ def oauth_client_rsa_public_key(self) -> Optional[pulumi.Input[builtins.str]]:
439
440
  return pulumi.get(self, "oauth_client_rsa_public_key")
440
441
 
441
442
  @oauth_client_rsa_public_key.setter
442
- def oauth_client_rsa_public_key(self, value: Optional[pulumi.Input[str]]):
443
+ def oauth_client_rsa_public_key(self, value: Optional[pulumi.Input[builtins.str]]):
443
444
  pulumi.set(self, "oauth_client_rsa_public_key", value)
444
445
 
445
446
  @property
446
447
  @pulumi.getter(name="oauthClientRsaPublicKey2")
447
- def oauth_client_rsa_public_key2(self) -> Optional[pulumi.Input[str]]:
448
+ def oauth_client_rsa_public_key2(self) -> Optional[pulumi.Input[builtins.str]]:
448
449
  return pulumi.get(self, "oauth_client_rsa_public_key2")
449
450
 
450
451
  @oauth_client_rsa_public_key2.setter
451
- def oauth_client_rsa_public_key2(self, value: Optional[pulumi.Input[str]]):
452
+ def oauth_client_rsa_public_key2(self, value: Optional[pulumi.Input[builtins.str]]):
452
453
  pulumi.set(self, "oauth_client_rsa_public_key2", value)
453
454
 
454
455
  @property
455
456
  @pulumi.getter(name="oauthClientType")
456
- def oauth_client_type(self) -> Optional[pulumi.Input[str]]:
457
+ def oauth_client_type(self) -> Optional[pulumi.Input[builtins.str]]:
457
458
  """
458
459
  Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
459
460
  """
460
461
  return pulumi.get(self, "oauth_client_type")
461
462
 
462
463
  @oauth_client_type.setter
463
- def oauth_client_type(self, value: Optional[pulumi.Input[str]]):
464
+ def oauth_client_type(self, value: Optional[pulumi.Input[builtins.str]]):
464
465
  pulumi.set(self, "oauth_client_type", value)
465
466
 
466
467
  @property
467
468
  @pulumi.getter(name="oauthEnforcePkce")
468
- def oauth_enforce_pkce(self) -> Optional[pulumi.Input[str]]:
469
+ def oauth_enforce_pkce(self) -> Optional[pulumi.Input[builtins.str]]:
469
470
  """
470
471
  Boolean that specifies whether Proof Key for Code Exchange (PKCE) should be required for the integration. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
471
472
  """
472
473
  return pulumi.get(self, "oauth_enforce_pkce")
473
474
 
474
475
  @oauth_enforce_pkce.setter
475
- def oauth_enforce_pkce(self, value: Optional[pulumi.Input[str]]):
476
+ def oauth_enforce_pkce(self, value: Optional[pulumi.Input[builtins.str]]):
476
477
  pulumi.set(self, "oauth_enforce_pkce", value)
477
478
 
478
479
  @property
479
480
  @pulumi.getter(name="oauthIssueRefreshTokens")
480
- def oauth_issue_refresh_tokens(self) -> Optional[pulumi.Input[str]]:
481
+ def oauth_issue_refresh_tokens(self) -> Optional[pulumi.Input[builtins.str]]:
481
482
  """
482
483
  Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
483
484
  """
484
485
  return pulumi.get(self, "oauth_issue_refresh_tokens")
485
486
 
486
487
  @oauth_issue_refresh_tokens.setter
487
- def oauth_issue_refresh_tokens(self, value: Optional[pulumi.Input[str]]):
488
+ def oauth_issue_refresh_tokens(self, value: Optional[pulumi.Input[builtins.str]]):
488
489
  pulumi.set(self, "oauth_issue_refresh_tokens", value)
489
490
 
490
491
  @property
491
492
  @pulumi.getter(name="oauthRedirectUri")
492
- def oauth_redirect_uri(self) -> Optional[pulumi.Input[str]]:
493
+ def oauth_redirect_uri(self) -> Optional[pulumi.Input[builtins.str]]:
493
494
  """
494
495
  Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
495
496
  """
496
497
  return pulumi.get(self, "oauth_redirect_uri")
497
498
 
498
499
  @oauth_redirect_uri.setter
499
- def oauth_redirect_uri(self, value: Optional[pulumi.Input[str]]):
500
+ def oauth_redirect_uri(self, value: Optional[pulumi.Input[builtins.str]]):
500
501
  pulumi.set(self, "oauth_redirect_uri", value)
501
502
 
502
503
  @property
503
504
  @pulumi.getter(name="oauthRefreshTokenValidity")
504
- def oauth_refresh_token_validity(self) -> Optional[pulumi.Input[int]]:
505
+ def oauth_refresh_token_validity(self) -> Optional[pulumi.Input[builtins.int]]:
505
506
  """
506
507
  Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
507
508
  """
508
509
  return pulumi.get(self, "oauth_refresh_token_validity")
509
510
 
510
511
  @oauth_refresh_token_validity.setter
511
- def oauth_refresh_token_validity(self, value: Optional[pulumi.Input[int]]):
512
+ def oauth_refresh_token_validity(self, value: Optional[pulumi.Input[builtins.int]]):
512
513
  pulumi.set(self, "oauth_refresh_token_validity", value)
513
514
 
514
515
  @property
515
516
  @pulumi.getter(name="oauthUseSecondaryRoles")
516
- def oauth_use_secondary_roles(self) -> Optional[pulumi.Input[str]]:
517
+ def oauth_use_secondary_roles(self) -> Optional[pulumi.Input[builtins.str]]:
517
518
  """
518
519
  Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
519
520
  """
520
521
  return pulumi.get(self, "oauth_use_secondary_roles")
521
522
 
522
523
  @oauth_use_secondary_roles.setter
523
- def oauth_use_secondary_roles(self, value: Optional[pulumi.Input[str]]):
524
+ def oauth_use_secondary_roles(self, value: Optional[pulumi.Input[builtins.str]]):
524
525
  pulumi.set(self, "oauth_use_secondary_roles", value)
525
526
 
526
527
  @property
527
528
  @pulumi.getter(name="preAuthorizedRolesLists")
528
- def pre_authorized_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
529
+ def pre_authorized_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
529
530
  """
530
531
  A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating. For more information about this resource, see docs.
531
532
  """
532
533
  return pulumi.get(self, "pre_authorized_roles_lists")
533
534
 
534
535
  @pre_authorized_roles_lists.setter
535
- def pre_authorized_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
536
+ def pre_authorized_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
536
537
  pulumi.set(self, "pre_authorized_roles_lists", value)
537
538
 
538
539
  @property
@@ -565,21 +566,21 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
565
566
  def __init__(__self__,
566
567
  resource_name: str,
567
568
  opts: Optional[pulumi.ResourceOptions] = None,
568
- blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
569
- comment: Optional[pulumi.Input[str]] = None,
570
- enabled: Optional[pulumi.Input[str]] = None,
571
- name: Optional[pulumi.Input[str]] = None,
572
- network_policy: Optional[pulumi.Input[str]] = None,
573
- oauth_allow_non_tls_redirect_uri: Optional[pulumi.Input[str]] = None,
574
- oauth_client_rsa_public_key: Optional[pulumi.Input[str]] = None,
575
- oauth_client_rsa_public_key2: Optional[pulumi.Input[str]] = None,
576
- oauth_client_type: Optional[pulumi.Input[str]] = None,
577
- oauth_enforce_pkce: Optional[pulumi.Input[str]] = None,
578
- oauth_issue_refresh_tokens: Optional[pulumi.Input[str]] = None,
579
- oauth_redirect_uri: Optional[pulumi.Input[str]] = None,
580
- oauth_refresh_token_validity: Optional[pulumi.Input[int]] = None,
581
- oauth_use_secondary_roles: Optional[pulumi.Input[str]] = None,
582
- pre_authorized_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
569
+ blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
570
+ comment: Optional[pulumi.Input[builtins.str]] = None,
571
+ enabled: Optional[pulumi.Input[builtins.str]] = None,
572
+ name: Optional[pulumi.Input[builtins.str]] = None,
573
+ network_policy: Optional[pulumi.Input[builtins.str]] = None,
574
+ oauth_allow_non_tls_redirect_uri: Optional[pulumi.Input[builtins.str]] = None,
575
+ oauth_client_rsa_public_key: Optional[pulumi.Input[builtins.str]] = None,
576
+ oauth_client_rsa_public_key2: Optional[pulumi.Input[builtins.str]] = None,
577
+ oauth_client_type: Optional[pulumi.Input[builtins.str]] = None,
578
+ oauth_enforce_pkce: Optional[pulumi.Input[builtins.str]] = None,
579
+ oauth_issue_refresh_tokens: Optional[pulumi.Input[builtins.str]] = None,
580
+ oauth_redirect_uri: Optional[pulumi.Input[builtins.str]] = None,
581
+ oauth_refresh_token_validity: Optional[pulumi.Input[builtins.int]] = None,
582
+ oauth_use_secondary_roles: Optional[pulumi.Input[builtins.str]] = None,
583
+ pre_authorized_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
583
584
  __props__=None):
584
585
  """
585
586
  ## Import
@@ -590,19 +591,19 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
590
591
 
591
592
  :param str resource_name: The name of the resource.
592
593
  :param pulumi.ResourceOptions opts: Options for the resource.
593
- :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
594
- :param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
595
- :param pulumi.Input[str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
596
- :param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
597
- :param pulumi.Input[str] network_policy: Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token. For more information about this resource, see docs.
598
- :param pulumi.Input[str] oauth_allow_non_tls_redirect_uri: If true, allows setting oauth*redirect*uri to a URI not protected by TLS. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
599
- :param pulumi.Input[str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
600
- :param pulumi.Input[str] oauth_enforce_pkce: Boolean that specifies whether Proof Key for Code Exchange (PKCE) should be required for the integration. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
601
- :param pulumi.Input[str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
602
- :param pulumi.Input[str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
603
- :param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
604
- :param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
605
- :param pulumi.Input[Sequence[pulumi.Input[str]]] pre_authorized_roles_lists: A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating. For more information about this resource, see docs.
594
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
595
+ :param pulumi.Input[builtins.str] comment: Specifies a comment for the OAuth integration.
596
+ :param pulumi.Input[builtins.str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
597
+ :param pulumi.Input[builtins.str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
598
+ :param pulumi.Input[builtins.str] network_policy: Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token. For more information about this resource, see docs.
599
+ :param pulumi.Input[builtins.str] oauth_allow_non_tls_redirect_uri: If true, allows setting oauth*redirect*uri to a URI not protected by TLS. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
600
+ :param pulumi.Input[builtins.str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
601
+ :param pulumi.Input[builtins.str] oauth_enforce_pkce: Boolean that specifies whether Proof Key for Code Exchange (PKCE) should be required for the integration. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
602
+ :param pulumi.Input[builtins.str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
603
+ :param pulumi.Input[builtins.str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
604
+ :param pulumi.Input[builtins.int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
605
+ :param pulumi.Input[builtins.str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
606
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] pre_authorized_roles_lists: A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating. For more information about this resource, see docs.
606
607
  """
607
608
  ...
608
609
  @overload
@@ -632,21 +633,21 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
632
633
  def _internal_init(__self__,
633
634
  resource_name: str,
634
635
  opts: Optional[pulumi.ResourceOptions] = None,
635
- blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
636
- comment: Optional[pulumi.Input[str]] = None,
637
- enabled: Optional[pulumi.Input[str]] = None,
638
- name: Optional[pulumi.Input[str]] = None,
639
- network_policy: Optional[pulumi.Input[str]] = None,
640
- oauth_allow_non_tls_redirect_uri: Optional[pulumi.Input[str]] = None,
641
- oauth_client_rsa_public_key: Optional[pulumi.Input[str]] = None,
642
- oauth_client_rsa_public_key2: Optional[pulumi.Input[str]] = None,
643
- oauth_client_type: Optional[pulumi.Input[str]] = None,
644
- oauth_enforce_pkce: Optional[pulumi.Input[str]] = None,
645
- oauth_issue_refresh_tokens: Optional[pulumi.Input[str]] = None,
646
- oauth_redirect_uri: Optional[pulumi.Input[str]] = None,
647
- oauth_refresh_token_validity: Optional[pulumi.Input[int]] = None,
648
- oauth_use_secondary_roles: Optional[pulumi.Input[str]] = None,
649
- pre_authorized_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
636
+ blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
637
+ comment: Optional[pulumi.Input[builtins.str]] = None,
638
+ enabled: Optional[pulumi.Input[builtins.str]] = None,
639
+ name: Optional[pulumi.Input[builtins.str]] = None,
640
+ network_policy: Optional[pulumi.Input[builtins.str]] = None,
641
+ oauth_allow_non_tls_redirect_uri: Optional[pulumi.Input[builtins.str]] = None,
642
+ oauth_client_rsa_public_key: Optional[pulumi.Input[builtins.str]] = None,
643
+ oauth_client_rsa_public_key2: Optional[pulumi.Input[builtins.str]] = None,
644
+ oauth_client_type: Optional[pulumi.Input[builtins.str]] = None,
645
+ oauth_enforce_pkce: Optional[pulumi.Input[builtins.str]] = None,
646
+ oauth_issue_refresh_tokens: Optional[pulumi.Input[builtins.str]] = None,
647
+ oauth_redirect_uri: Optional[pulumi.Input[builtins.str]] = None,
648
+ oauth_refresh_token_validity: Optional[pulumi.Input[builtins.int]] = None,
649
+ oauth_use_secondary_roles: Optional[pulumi.Input[builtins.str]] = None,
650
+ pre_authorized_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
650
651
  __props__=None):
651
652
  opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
652
653
  if not isinstance(opts, pulumi.ResourceOptions):
@@ -689,23 +690,23 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
689
690
  def get(resource_name: str,
690
691
  id: pulumi.Input[str],
691
692
  opts: Optional[pulumi.ResourceOptions] = None,
692
- blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
693
- comment: Optional[pulumi.Input[str]] = None,
693
+ blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
694
+ comment: Optional[pulumi.Input[builtins.str]] = None,
694
695
  describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForCustomClientsDescribeOutputArgs', 'OauthIntegrationForCustomClientsDescribeOutputArgsDict']]]]] = None,
695
- enabled: Optional[pulumi.Input[str]] = None,
696
- fully_qualified_name: Optional[pulumi.Input[str]] = None,
697
- name: Optional[pulumi.Input[str]] = None,
698
- network_policy: Optional[pulumi.Input[str]] = None,
699
- oauth_allow_non_tls_redirect_uri: Optional[pulumi.Input[str]] = None,
700
- oauth_client_rsa_public_key: Optional[pulumi.Input[str]] = None,
701
- oauth_client_rsa_public_key2: Optional[pulumi.Input[str]] = None,
702
- oauth_client_type: Optional[pulumi.Input[str]] = None,
703
- oauth_enforce_pkce: Optional[pulumi.Input[str]] = None,
704
- oauth_issue_refresh_tokens: Optional[pulumi.Input[str]] = None,
705
- oauth_redirect_uri: Optional[pulumi.Input[str]] = None,
706
- oauth_refresh_token_validity: Optional[pulumi.Input[int]] = None,
707
- oauth_use_secondary_roles: Optional[pulumi.Input[str]] = None,
708
- pre_authorized_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
696
+ enabled: Optional[pulumi.Input[builtins.str]] = None,
697
+ fully_qualified_name: Optional[pulumi.Input[builtins.str]] = None,
698
+ name: Optional[pulumi.Input[builtins.str]] = None,
699
+ network_policy: Optional[pulumi.Input[builtins.str]] = None,
700
+ oauth_allow_non_tls_redirect_uri: Optional[pulumi.Input[builtins.str]] = None,
701
+ oauth_client_rsa_public_key: Optional[pulumi.Input[builtins.str]] = None,
702
+ oauth_client_rsa_public_key2: Optional[pulumi.Input[builtins.str]] = None,
703
+ oauth_client_type: Optional[pulumi.Input[builtins.str]] = None,
704
+ oauth_enforce_pkce: Optional[pulumi.Input[builtins.str]] = None,
705
+ oauth_issue_refresh_tokens: Optional[pulumi.Input[builtins.str]] = None,
706
+ oauth_redirect_uri: Optional[pulumi.Input[builtins.str]] = None,
707
+ oauth_refresh_token_validity: Optional[pulumi.Input[builtins.int]] = None,
708
+ oauth_use_secondary_roles: Optional[pulumi.Input[builtins.str]] = None,
709
+ pre_authorized_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
709
710
  related_parameters: Optional[pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForCustomClientsRelatedParameterArgs', 'OauthIntegrationForCustomClientsRelatedParameterArgsDict']]]]] = None,
710
711
  show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForCustomClientsShowOutputArgs', 'OauthIntegrationForCustomClientsShowOutputArgsDict']]]]] = None) -> 'OauthIntegrationForCustomClients':
711
712
  """
@@ -715,21 +716,21 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
715
716
  :param str resource_name: The unique name of the resulting resource.
716
717
  :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
717
718
  :param pulumi.ResourceOptions opts: Options for the resource.
718
- :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
719
- :param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
719
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
720
+ :param pulumi.Input[builtins.str] comment: Specifies a comment for the OAuth integration.
720
721
  :param pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForCustomClientsDescribeOutputArgs', 'OauthIntegrationForCustomClientsDescribeOutputArgsDict']]]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATION` for the given integration.
721
- :param pulumi.Input[str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
722
- :param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
723
- :param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
724
- :param pulumi.Input[str] network_policy: Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token. For more information about this resource, see docs.
725
- :param pulumi.Input[str] oauth_allow_non_tls_redirect_uri: If true, allows setting oauth*redirect*uri to a URI not protected by TLS. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
726
- :param pulumi.Input[str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
727
- :param pulumi.Input[str] oauth_enforce_pkce: Boolean that specifies whether Proof Key for Code Exchange (PKCE) should be required for the integration. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
728
- :param pulumi.Input[str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
729
- :param pulumi.Input[str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
730
- :param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
731
- :param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
732
- :param pulumi.Input[Sequence[pulumi.Input[str]]] pre_authorized_roles_lists: A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating. For more information about this resource, see docs.
722
+ :param pulumi.Input[builtins.str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
723
+ :param pulumi.Input[builtins.str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
724
+ :param pulumi.Input[builtins.str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
725
+ :param pulumi.Input[builtins.str] network_policy: Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token. For more information about this resource, see docs.
726
+ :param pulumi.Input[builtins.str] oauth_allow_non_tls_redirect_uri: If true, allows setting oauth*redirect*uri to a URI not protected by TLS. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
727
+ :param pulumi.Input[builtins.str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
728
+ :param pulumi.Input[builtins.str] oauth_enforce_pkce: Boolean that specifies whether Proof Key for Code Exchange (PKCE) should be required for the integration. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
729
+ :param pulumi.Input[builtins.str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
730
+ :param pulumi.Input[builtins.str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
731
+ :param pulumi.Input[builtins.int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
732
+ :param pulumi.Input[builtins.str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
733
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] pre_authorized_roles_lists: A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating. For more information about this resource, see docs.
733
734
  :param pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForCustomClientsRelatedParameterArgs', 'OauthIntegrationForCustomClientsRelatedParameterArgsDict']]]] related_parameters: Parameters related to this security integration.
734
735
  :param pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForCustomClientsShowOutputArgs', 'OauthIntegrationForCustomClientsShowOutputArgsDict']]]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATION` for the given integration.
735
736
  """
@@ -760,7 +761,7 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
760
761
 
761
762
  @property
762
763
  @pulumi.getter(name="blockedRolesLists")
763
- def blocked_roles_lists(self) -> pulumi.Output[Optional[Sequence[str]]]:
764
+ def blocked_roles_lists(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
764
765
  """
765
766
  A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
766
767
  """
@@ -768,7 +769,7 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
768
769
 
769
770
  @property
770
771
  @pulumi.getter
771
- def comment(self) -> pulumi.Output[Optional[str]]:
772
+ def comment(self) -> pulumi.Output[Optional[builtins.str]]:
772
773
  """
773
774
  Specifies a comment for the OAuth integration.
774
775
  """
@@ -784,7 +785,7 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
784
785
 
785
786
  @property
786
787
  @pulumi.getter
787
- def enabled(self) -> pulumi.Output[Optional[str]]:
788
+ def enabled(self) -> pulumi.Output[Optional[builtins.str]]:
788
789
  """
789
790
  Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
790
791
  """
@@ -792,7 +793,7 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
792
793
 
793
794
  @property
794
795
  @pulumi.getter(name="fullyQualifiedName")
795
- def fully_qualified_name(self) -> pulumi.Output[str]:
796
+ def fully_qualified_name(self) -> pulumi.Output[builtins.str]:
796
797
  """
797
798
  Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
798
799
  """
@@ -800,7 +801,7 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
800
801
 
801
802
  @property
802
803
  @pulumi.getter
803
- def name(self) -> pulumi.Output[str]:
804
+ def name(self) -> pulumi.Output[builtins.str]:
804
805
  """
805
806
  Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
806
807
  """
@@ -808,7 +809,7 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
808
809
 
809
810
  @property
810
811
  @pulumi.getter(name="networkPolicy")
811
- def network_policy(self) -> pulumi.Output[Optional[str]]:
812
+ def network_policy(self) -> pulumi.Output[Optional[builtins.str]]:
812
813
  """
813
814
  Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token. For more information about this resource, see docs.
814
815
  """
@@ -816,7 +817,7 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
816
817
 
817
818
  @property
818
819
  @pulumi.getter(name="oauthAllowNonTlsRedirectUri")
819
- def oauth_allow_non_tls_redirect_uri(self) -> pulumi.Output[Optional[str]]:
820
+ def oauth_allow_non_tls_redirect_uri(self) -> pulumi.Output[Optional[builtins.str]]:
820
821
  """
821
822
  If true, allows setting oauth*redirect*uri to a URI not protected by TLS. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
822
823
  """
@@ -824,17 +825,17 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
824
825
 
825
826
  @property
826
827
  @pulumi.getter(name="oauthClientRsaPublicKey")
827
- def oauth_client_rsa_public_key(self) -> pulumi.Output[Optional[str]]:
828
+ def oauth_client_rsa_public_key(self) -> pulumi.Output[Optional[builtins.str]]:
828
829
  return pulumi.get(self, "oauth_client_rsa_public_key")
829
830
 
830
831
  @property
831
832
  @pulumi.getter(name="oauthClientRsaPublicKey2")
832
- def oauth_client_rsa_public_key2(self) -> pulumi.Output[Optional[str]]:
833
+ def oauth_client_rsa_public_key2(self) -> pulumi.Output[Optional[builtins.str]]:
833
834
  return pulumi.get(self, "oauth_client_rsa_public_key2")
834
835
 
835
836
  @property
836
837
  @pulumi.getter(name="oauthClientType")
837
- def oauth_client_type(self) -> pulumi.Output[str]:
838
+ def oauth_client_type(self) -> pulumi.Output[builtins.str]:
838
839
  """
839
840
  Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
840
841
  """
@@ -842,7 +843,7 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
842
843
 
843
844
  @property
844
845
  @pulumi.getter(name="oauthEnforcePkce")
845
- def oauth_enforce_pkce(self) -> pulumi.Output[Optional[str]]:
846
+ def oauth_enforce_pkce(self) -> pulumi.Output[Optional[builtins.str]]:
846
847
  """
847
848
  Boolean that specifies whether Proof Key for Code Exchange (PKCE) should be required for the integration. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
848
849
  """
@@ -850,7 +851,7 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
850
851
 
851
852
  @property
852
853
  @pulumi.getter(name="oauthIssueRefreshTokens")
853
- def oauth_issue_refresh_tokens(self) -> pulumi.Output[Optional[str]]:
854
+ def oauth_issue_refresh_tokens(self) -> pulumi.Output[Optional[builtins.str]]:
854
855
  """
855
856
  Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
856
857
  """
@@ -858,7 +859,7 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
858
859
 
859
860
  @property
860
861
  @pulumi.getter(name="oauthRedirectUri")
861
- def oauth_redirect_uri(self) -> pulumi.Output[str]:
862
+ def oauth_redirect_uri(self) -> pulumi.Output[builtins.str]:
862
863
  """
863
864
  Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
864
865
  """
@@ -866,7 +867,7 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
866
867
 
867
868
  @property
868
869
  @pulumi.getter(name="oauthRefreshTokenValidity")
869
- def oauth_refresh_token_validity(self) -> pulumi.Output[Optional[int]]:
870
+ def oauth_refresh_token_validity(self) -> pulumi.Output[Optional[builtins.int]]:
870
871
  """
871
872
  Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
872
873
  """
@@ -874,7 +875,7 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
874
875
 
875
876
  @property
876
877
  @pulumi.getter(name="oauthUseSecondaryRoles")
877
- def oauth_use_secondary_roles(self) -> pulumi.Output[Optional[str]]:
878
+ def oauth_use_secondary_roles(self) -> pulumi.Output[Optional[builtins.str]]:
878
879
  """
879
880
  Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
880
881
  """
@@ -882,7 +883,7 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
882
883
 
883
884
  @property
884
885
  @pulumi.getter(name="preAuthorizedRolesLists")
885
- def pre_authorized_roles_lists(self) -> pulumi.Output[Optional[Sequence[str]]]:
886
+ def pre_authorized_roles_lists(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
886
887
  """
887
888
  A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating. For more information about this resource, see docs.
888
889
  """