pulumi-snowflake 1.2.0a1743575514__py3-none-any.whl → 1.2.0a1744266763__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of pulumi-snowflake might be problematic. Click here for more details.

Files changed (147) hide show
  1. pulumi_snowflake/__init__.py +1 -0
  2. pulumi_snowflake/_inputs.py +12288 -12287
  3. pulumi_snowflake/account.py +186 -185
  4. pulumi_snowflake/account_authentication_policy_attachment.py +15 -14
  5. pulumi_snowflake/account_parameter.py +29 -28
  6. pulumi_snowflake/account_password_policy_attachment.py +15 -14
  7. pulumi_snowflake/account_role.py +32 -31
  8. pulumi_snowflake/alert.py +120 -119
  9. pulumi_snowflake/api_authentication_integration_with_authorization_code_grant.py +158 -157
  10. pulumi_snowflake/api_authentication_integration_with_client_credentials.py +144 -143
  11. pulumi_snowflake/api_authentication_integration_with_jwt_bearer.py +154 -153
  12. pulumi_snowflake/api_integration.py +203 -202
  13. pulumi_snowflake/authentication_policy.py +134 -133
  14. pulumi_snowflake/config/__init__.py +1 -0
  15. pulumi_snowflake/config/__init__.pyi +1 -0
  16. pulumi_snowflake/config/outputs.py +16 -15
  17. pulumi_snowflake/config/vars.py +1 -0
  18. pulumi_snowflake/cortex_search_service.py +141 -140
  19. pulumi_snowflake/database.py +288 -287
  20. pulumi_snowflake/database_role.py +50 -49
  21. pulumi_snowflake/dynamic_table.py +218 -217
  22. pulumi_snowflake/email_notification_integration.py +56 -55
  23. pulumi_snowflake/execute.py +50 -49
  24. pulumi_snowflake/external_function.py +225 -224
  25. pulumi_snowflake/external_oauth_integration.py +232 -231
  26. pulumi_snowflake/external_table.py +197 -196
  27. pulumi_snowflake/external_volume.py +50 -49
  28. pulumi_snowflake/failover_group.py +106 -105
  29. pulumi_snowflake/file_format.py +512 -511
  30. pulumi_snowflake/function_java.py +249 -248
  31. pulumi_snowflake/function_javascript.py +193 -192
  32. pulumi_snowflake/function_python.py +263 -262
  33. pulumi_snowflake/function_scala.py +249 -248
  34. pulumi_snowflake/function_sql.py +179 -178
  35. pulumi_snowflake/get_account_roles.py +12 -11
  36. pulumi_snowflake/get_accounts.py +12 -11
  37. pulumi_snowflake/get_alerts.py +17 -16
  38. pulumi_snowflake/get_connections.py +7 -6
  39. pulumi_snowflake/get_cortex_search_services.py +12 -11
  40. pulumi_snowflake/get_current_account.py +5 -4
  41. pulumi_snowflake/get_current_role.py +3 -2
  42. pulumi_snowflake/get_database.py +15 -14
  43. pulumi_snowflake/get_database_role.py +14 -13
  44. pulumi_snowflake/get_database_roles.py +12 -11
  45. pulumi_snowflake/get_databases.py +22 -21
  46. pulumi_snowflake/get_dynamic_tables.py +7 -6
  47. pulumi_snowflake/get_external_functions.py +12 -11
  48. pulumi_snowflake/get_external_tables.py +12 -11
  49. pulumi_snowflake/get_failover_groups.py +7 -6
  50. pulumi_snowflake/get_file_formats.py +12 -11
  51. pulumi_snowflake/get_functions.py +12 -11
  52. pulumi_snowflake/get_grants.py +2 -1
  53. pulumi_snowflake/get_masking_policies.py +12 -11
  54. pulumi_snowflake/get_materialized_views.py +12 -11
  55. pulumi_snowflake/get_network_policies.py +12 -11
  56. pulumi_snowflake/get_parameters.py +27 -26
  57. pulumi_snowflake/get_pipes.py +12 -11
  58. pulumi_snowflake/get_procedures.py +12 -11
  59. pulumi_snowflake/get_resource_monitors.py +7 -6
  60. pulumi_snowflake/get_row_access_policies.py +12 -11
  61. pulumi_snowflake/get_schemas.py +22 -21
  62. pulumi_snowflake/get_secrets.py +12 -11
  63. pulumi_snowflake/get_security_integrations.py +12 -11
  64. pulumi_snowflake/get_sequences.py +12 -11
  65. pulumi_snowflake/get_shares.py +7 -6
  66. pulumi_snowflake/get_stages.py +12 -11
  67. pulumi_snowflake/get_storage_integrations.py +2 -1
  68. pulumi_snowflake/get_streamlits.py +12 -11
  69. pulumi_snowflake/get_streams.py +17 -16
  70. pulumi_snowflake/get_system_generate_scim_access_token.py +8 -7
  71. pulumi_snowflake/get_system_get_aws_sns_iam_policy.py +8 -7
  72. pulumi_snowflake/get_system_get_private_link_config.py +11 -10
  73. pulumi_snowflake/get_system_get_snowflake_platform_info.py +4 -3
  74. pulumi_snowflake/get_tables.py +12 -11
  75. pulumi_snowflake/get_tags.py +7 -6
  76. pulumi_snowflake/get_tasks.py +22 -21
  77. pulumi_snowflake/get_users.py +22 -21
  78. pulumi_snowflake/get_views.py +17 -16
  79. pulumi_snowflake/get_warehouses.py +17 -16
  80. pulumi_snowflake/grant_account_role.py +43 -42
  81. pulumi_snowflake/grant_application_role.py +43 -42
  82. pulumi_snowflake/grant_database_role.py +57 -56
  83. pulumi_snowflake/grant_ownership.py +43 -42
  84. pulumi_snowflake/grant_privileges_to_account_role.py +95 -94
  85. pulumi_snowflake/grant_privileges_to_database_role.py +95 -94
  86. pulumi_snowflake/grant_privileges_to_share.py +127 -126
  87. pulumi_snowflake/legacy_service_user.py +1039 -1038
  88. pulumi_snowflake/managed_account.py +113 -112
  89. pulumi_snowflake/masking_policy.py +106 -105
  90. pulumi_snowflake/materialized_view.py +120 -119
  91. pulumi_snowflake/network_policy.py +92 -91
  92. pulumi_snowflake/network_policy_attachment.py +43 -42
  93. pulumi_snowflake/network_rule.py +106 -105
  94. pulumi_snowflake/notification_integration.py +238 -237
  95. pulumi_snowflake/oauth_integration_for_custom_clients.py +210 -209
  96. pulumi_snowflake/oauth_integration_for_partner_applications.py +134 -133
  97. pulumi_snowflake/object_parameter.py +57 -56
  98. pulumi_snowflake/outputs.py +9273 -9272
  99. pulumi_snowflake/password_policy.py +246 -245
  100. pulumi_snowflake/pipe.py +148 -147
  101. pulumi_snowflake/primary_connection.py +55 -54
  102. pulumi_snowflake/procedure_java.py +267 -266
  103. pulumi_snowflake/procedure_javascript.py +197 -196
  104. pulumi_snowflake/procedure_python.py +267 -266
  105. pulumi_snowflake/procedure_scala.py +267 -266
  106. pulumi_snowflake/procedure_sql.py +197 -196
  107. pulumi_snowflake/provider.py +303 -302
  108. pulumi_snowflake/pulumi-plugin.json +1 -1
  109. pulumi_snowflake/resource_monitor.py +134 -133
  110. pulumi_snowflake/row_access_policy.py +78 -77
  111. pulumi_snowflake/saml2_integration.py +246 -245
  112. pulumi_snowflake/schema.py +316 -315
  113. pulumi_snowflake/scim_integration.py +106 -105
  114. pulumi_snowflake/secondary_connection.py +57 -56
  115. pulumi_snowflake/secondary_database.py +288 -287
  116. pulumi_snowflake/secret_with_authorization_code_grant.py +109 -108
  117. pulumi_snowflake/secret_with_basic_authentication.py +95 -94
  118. pulumi_snowflake/secret_with_client_credentials.py +99 -98
  119. pulumi_snowflake/secret_with_generic_string.py +81 -80
  120. pulumi_snowflake/sequence.py +99 -98
  121. pulumi_snowflake/service_user.py +1015 -1014
  122. pulumi_snowflake/share.py +50 -49
  123. pulumi_snowflake/shared_database.py +246 -245
  124. pulumi_snowflake/stage.py +190 -189
  125. pulumi_snowflake/storage_integration.py +166 -165
  126. pulumi_snowflake/stream_on_directory_table.py +100 -99
  127. pulumi_snowflake/stream_on_external_table.py +114 -113
  128. pulumi_snowflake/stream_on_table.py +124 -123
  129. pulumi_snowflake/stream_on_view.py +124 -123
  130. pulumi_snowflake/streamlit.py +148 -147
  131. pulumi_snowflake/table.py +113 -112
  132. pulumi_snowflake/table_column_masking_policy_application.py +43 -42
  133. pulumi_snowflake/table_constraint.py +155 -154
  134. pulumi_snowflake/tag.py +92 -91
  135. pulumi_snowflake/tag_association.py +71 -70
  136. pulumi_snowflake/task.py +1002 -1001
  137. pulumi_snowflake/user.py +1101 -1100
  138. pulumi_snowflake/user_authentication_policy_attachment.py +29 -28
  139. pulumi_snowflake/user_password_policy_attachment.py +29 -28
  140. pulumi_snowflake/user_public_keys.py +43 -42
  141. pulumi_snowflake/view.py +136 -135
  142. pulumi_snowflake/warehouse.py +232 -231
  143. {pulumi_snowflake-1.2.0a1743575514.dist-info → pulumi_snowflake-1.2.0a1744266763.dist-info}/METADATA +1 -1
  144. pulumi_snowflake-1.2.0a1744266763.dist-info/RECORD +148 -0
  145. pulumi_snowflake-1.2.0a1743575514.dist-info/RECORD +0 -148
  146. {pulumi_snowflake-1.2.0a1743575514.dist-info → pulumi_snowflake-1.2.0a1744266763.dist-info}/WHEEL +0 -0
  147. {pulumi_snowflake-1.2.0a1743575514.dist-info → pulumi_snowflake-1.2.0a1744266763.dist-info}/top_level.txt +0 -0
pulumi_snowflake/external_oauth_integration.py CHANGED
@@ -2,6 +2,7 @@
2
2
  # *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
3
3
  # *** Do not edit by hand unless you're certain you know what you are doing! ***
4
4
 
5
+ import builtins
5
6
  import copy
6
7
  import warnings
7
8
  import sys
@@ -21,40 +22,40 @@ __all__ = ['ExternalOauthIntegrationArgs', 'ExternalOauthIntegration']
21
22
  @pulumi.input_type
22
23
  class ExternalOauthIntegrationArgs:
23
24
  def __init__(__self__, *,
24
- enabled: pulumi.Input[bool],
25
- external_oauth_issuer: pulumi.Input[str],
26
- external_oauth_snowflake_user_mapping_attribute: pulumi.Input[str],
27
- external_oauth_token_user_mapping_claims: pulumi.Input[Sequence[pulumi.Input[str]]],
28
- external_oauth_type: pulumi.Input[str],
29
- comment: Optional[pulumi.Input[str]] = None,
30
- external_oauth_allowed_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
31
- external_oauth_any_role_mode: Optional[pulumi.Input[str]] = None,
32
- external_oauth_audience_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
33
- external_oauth_blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
34
- external_oauth_jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
35
- external_oauth_rsa_public_key: Optional[pulumi.Input[str]] = None,
36
- external_oauth_rsa_public_key2: Optional[pulumi.Input[str]] = None,
37
- external_oauth_scope_delimiter: Optional[pulumi.Input[str]] = None,
38
- external_oauth_scope_mapping_attribute: Optional[pulumi.Input[str]] = None,
39
- name: Optional[pulumi.Input[str]] = None):
25
+ enabled: pulumi.Input[builtins.bool],
26
+ external_oauth_issuer: pulumi.Input[builtins.str],
27
+ external_oauth_snowflake_user_mapping_attribute: pulumi.Input[builtins.str],
28
+ external_oauth_token_user_mapping_claims: pulumi.Input[Sequence[pulumi.Input[builtins.str]]],
29
+ external_oauth_type: pulumi.Input[builtins.str],
30
+ comment: Optional[pulumi.Input[builtins.str]] = None,
31
+ external_oauth_allowed_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
32
+ external_oauth_any_role_mode: Optional[pulumi.Input[builtins.str]] = None,
33
+ external_oauth_audience_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
34
+ external_oauth_blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
35
+ external_oauth_jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
36
+ external_oauth_rsa_public_key: Optional[pulumi.Input[builtins.str]] = None,
37
+ external_oauth_rsa_public_key2: Optional[pulumi.Input[builtins.str]] = None,
38
+ external_oauth_scope_delimiter: Optional[pulumi.Input[builtins.str]] = None,
39
+ external_oauth_scope_mapping_attribute: Optional[pulumi.Input[builtins.str]] = None,
40
+ name: Optional[pulumi.Input[builtins.str]] = None):
40
41
  """
41
42
  The set of arguments for constructing a ExternalOauthIntegration resource.
42
- :param pulumi.Input[bool] enabled: Specifies whether to initiate operation of the integration or suspend it.
43
- :param pulumi.Input[str] external_oauth_issuer: Specifies the URL to define the OAuth 2.0 authorization server.
44
- :param pulumi.Input[str] external_oauth_snowflake_user_mapping_attribute: Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record. Valid values are (case-insensitive): `LOGIN_NAME` | `EMAIL_ADDRESS`.
45
- :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_token_user_mapping_claims: Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
46
- :param pulumi.Input[str] external_oauth_type: Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
47
- :param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
48
- :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_allowed_roles_lists: Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
49
- :param pulumi.Input[str] external_oauth_any_role_mode: Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
50
- :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_audience_lists: Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
51
- :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_blocked_roles_lists: Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
52
- :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_jws_keys_urls: Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
53
- :param pulumi.Input[str] external_oauth_rsa_public_key: Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
54
- :param pulumi.Input[str] external_oauth_rsa_public_key2: Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation. If removed from the config, the resource is recreated.
55
- :param pulumi.Input[str] external_oauth_scope_delimiter: Specifies the scope delimiter in the authorization token.
56
- :param pulumi.Input[str] external_oauth_scope_mapping_attribute: Specifies the access token claim to map the access token to an account role. If removed from the config, the resource is recreated.
57
- :param pulumi.Input[str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
43
+ :param pulumi.Input[builtins.bool] enabled: Specifies whether to initiate operation of the integration or suspend it.
44
+ :param pulumi.Input[builtins.str] external_oauth_issuer: Specifies the URL to define the OAuth 2.0 authorization server.
45
+ :param pulumi.Input[builtins.str] external_oauth_snowflake_user_mapping_attribute: Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record. Valid values are (case-insensitive): `LOGIN_NAME` | `EMAIL_ADDRESS`.
46
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] external_oauth_token_user_mapping_claims: Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
47
+ :param pulumi.Input[builtins.str] external_oauth_type: Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
48
+ :param pulumi.Input[builtins.str] comment: Specifies a comment for the OAuth integration.
49
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] external_oauth_allowed_roles_lists: Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
50
+ :param pulumi.Input[builtins.str] external_oauth_any_role_mode: Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
51
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] external_oauth_audience_lists: Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
52
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] external_oauth_blocked_roles_lists: Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
53
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] external_oauth_jws_keys_urls: Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
54
+ :param pulumi.Input[builtins.str] external_oauth_rsa_public_key: Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
55
+ :param pulumi.Input[builtins.str] external_oauth_rsa_public_key2: Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation. If removed from the config, the resource is recreated.
56
+ :param pulumi.Input[builtins.str] external_oauth_scope_delimiter: Specifies the scope delimiter in the authorization token.
57
+ :param pulumi.Input[builtins.str] external_oauth_scope_mapping_attribute: Specifies the access token claim to map the access token to an account role. If removed from the config, the resource is recreated.
58
+ :param pulumi.Input[builtins.str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
58
59
  """
59
60
  pulumi.set(__self__, "enabled", enabled)
60
61
  pulumi.set(__self__, "external_oauth_issuer", external_oauth_issuer)
@@ -86,240 +87,240 @@ class ExternalOauthIntegrationArgs:
86
87
 
87
88
  @property
88
89
  @pulumi.getter
89
- def enabled(self) -> pulumi.Input[bool]:
90
+ def enabled(self) -> pulumi.Input[builtins.bool]:
90
91
  """
91
92
  Specifies whether to initiate operation of the integration or suspend it.
92
93
  """
93
94
  return pulumi.get(self, "enabled")
94
95
 
95
96
  @enabled.setter
96
- def enabled(self, value: pulumi.Input[bool]):
97
+ def enabled(self, value: pulumi.Input[builtins.bool]):
97
98
  pulumi.set(self, "enabled", value)
98
99
 
99
100
  @property
100
101
  @pulumi.getter(name="externalOauthIssuer")
101
- def external_oauth_issuer(self) -> pulumi.Input[str]:
102
+ def external_oauth_issuer(self) -> pulumi.Input[builtins.str]:
102
103
  """
103
104
  Specifies the URL to define the OAuth 2.0 authorization server.
104
105
  """
105
106
  return pulumi.get(self, "external_oauth_issuer")
106
107
 
107
108
  @external_oauth_issuer.setter
108
- def external_oauth_issuer(self, value: pulumi.Input[str]):
109
+ def external_oauth_issuer(self, value: pulumi.Input[builtins.str]):
109
110
  pulumi.set(self, "external_oauth_issuer", value)
110
111
 
111
112
  @property
112
113
  @pulumi.getter(name="externalOauthSnowflakeUserMappingAttribute")
113
- def external_oauth_snowflake_user_mapping_attribute(self) -> pulumi.Input[str]:
114
+ def external_oauth_snowflake_user_mapping_attribute(self) -> pulumi.Input[builtins.str]:
114
115
  """
115
116
  Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record. Valid values are (case-insensitive): `LOGIN_NAME` | `EMAIL_ADDRESS`.
116
117
  """
117
118
  return pulumi.get(self, "external_oauth_snowflake_user_mapping_attribute")
118
119
 
119
120
  @external_oauth_snowflake_user_mapping_attribute.setter
120
- def external_oauth_snowflake_user_mapping_attribute(self, value: pulumi.Input[str]):
121
+ def external_oauth_snowflake_user_mapping_attribute(self, value: pulumi.Input[builtins.str]):
121
122
  pulumi.set(self, "external_oauth_snowflake_user_mapping_attribute", value)
122
123
 
123
124
  @property
124
125
  @pulumi.getter(name="externalOauthTokenUserMappingClaims")
125
- def external_oauth_token_user_mapping_claims(self) -> pulumi.Input[Sequence[pulumi.Input[str]]]:
126
+ def external_oauth_token_user_mapping_claims(self) -> pulumi.Input[Sequence[pulumi.Input[builtins.str]]]:
126
127
  """
127
128
  Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
128
129
  """
129
130
  return pulumi.get(self, "external_oauth_token_user_mapping_claims")
130
131
 
131
132
  @external_oauth_token_user_mapping_claims.setter
132
- def external_oauth_token_user_mapping_claims(self, value: pulumi.Input[Sequence[pulumi.Input[str]]]):
133
+ def external_oauth_token_user_mapping_claims(self, value: pulumi.Input[Sequence[pulumi.Input[builtins.str]]]):
133
134
  pulumi.set(self, "external_oauth_token_user_mapping_claims", value)
134
135
 
135
136
  @property
136
137
  @pulumi.getter(name="externalOauthType")
137
- def external_oauth_type(self) -> pulumi.Input[str]:
138
+ def external_oauth_type(self) -> pulumi.Input[builtins.str]:
138
139
  """
139
140
  Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
140
141
  """
141
142
  return pulumi.get(self, "external_oauth_type")
142
143
 
143
144
  @external_oauth_type.setter
144
- def external_oauth_type(self, value: pulumi.Input[str]):
145
+ def external_oauth_type(self, value: pulumi.Input[builtins.str]):
145
146
  pulumi.set(self, "external_oauth_type", value)
146
147
 
147
148
  @property
148
149
  @pulumi.getter
149
- def comment(self) -> Optional[pulumi.Input[str]]:
150
+ def comment(self) -> Optional[pulumi.Input[builtins.str]]:
150
151
  """
151
152
  Specifies a comment for the OAuth integration.
152
153
  """
153
154
  return pulumi.get(self, "comment")
154
155
 
155
156
  @comment.setter
156
- def comment(self, value: Optional[pulumi.Input[str]]):
157
+ def comment(self, value: Optional[pulumi.Input[builtins.str]]):
157
158
  pulumi.set(self, "comment", value)
158
159
 
159
160
  @property
160
161
  @pulumi.getter(name="externalOauthAllowedRolesLists")
161
- def external_oauth_allowed_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
162
+ def external_oauth_allowed_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
162
163
  """
163
164
  Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
164
165
  """
165
166
  return pulumi.get(self, "external_oauth_allowed_roles_lists")
166
167
 
167
168
  @external_oauth_allowed_roles_lists.setter
168
- def external_oauth_allowed_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
169
+ def external_oauth_allowed_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
169
170
  pulumi.set(self, "external_oauth_allowed_roles_lists", value)
170
171
 
171
172
  @property
172
173
  @pulumi.getter(name="externalOauthAnyRoleMode")
173
- def external_oauth_any_role_mode(self) -> Optional[pulumi.Input[str]]:
174
+ def external_oauth_any_role_mode(self) -> Optional[pulumi.Input[builtins.str]]:
174
175
  """
175
176
  Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
176
177
  """
177
178
  return pulumi.get(self, "external_oauth_any_role_mode")
178
179
 
179
180
  @external_oauth_any_role_mode.setter
180
- def external_oauth_any_role_mode(self, value: Optional[pulumi.Input[str]]):
181
+ def external_oauth_any_role_mode(self, value: Optional[pulumi.Input[builtins.str]]):
181
182
  pulumi.set(self, "external_oauth_any_role_mode", value)
182
183
 
183
184
  @property
184
185
  @pulumi.getter(name="externalOauthAudienceLists")
185
- def external_oauth_audience_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
186
+ def external_oauth_audience_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
186
187
  """
187
188
  Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
188
189
  """
189
190
  return pulumi.get(self, "external_oauth_audience_lists")
190
191
 
191
192
  @external_oauth_audience_lists.setter
192
- def external_oauth_audience_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
193
+ def external_oauth_audience_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
193
194
  pulumi.set(self, "external_oauth_audience_lists", value)
194
195
 
195
196
  @property
196
197
  @pulumi.getter(name="externalOauthBlockedRolesLists")
197
- def external_oauth_blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
198
+ def external_oauth_blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
198
199
  """
199
200
  Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
200
201
  """
201
202
  return pulumi.get(self, "external_oauth_blocked_roles_lists")
202
203
 
203
204
  @external_oauth_blocked_roles_lists.setter
204
- def external_oauth_blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
205
+ def external_oauth_blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
205
206
  pulumi.set(self, "external_oauth_blocked_roles_lists", value)
206
207
 
207
208
  @property
208
209
  @pulumi.getter(name="externalOauthJwsKeysUrls")
209
- def external_oauth_jws_keys_urls(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
210
+ def external_oauth_jws_keys_urls(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
210
211
  """
211
212
  Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
212
213
  """
213
214
  return pulumi.get(self, "external_oauth_jws_keys_urls")
214
215
 
215
216
  @external_oauth_jws_keys_urls.setter
216
- def external_oauth_jws_keys_urls(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
217
+ def external_oauth_jws_keys_urls(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
217
218
  pulumi.set(self, "external_oauth_jws_keys_urls", value)
218
219
 
219
220
  @property
220
221
  @pulumi.getter(name="externalOauthRsaPublicKey")
221
- def external_oauth_rsa_public_key(self) -> Optional[pulumi.Input[str]]:
222
+ def external_oauth_rsa_public_key(self) -> Optional[pulumi.Input[builtins.str]]:
222
223
  """
223
224
  Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
224
225
  """
225
226
  return pulumi.get(self, "external_oauth_rsa_public_key")
226
227
 
227
228
  @external_oauth_rsa_public_key.setter
228
- def external_oauth_rsa_public_key(self, value: Optional[pulumi.Input[str]]):
229
+ def external_oauth_rsa_public_key(self, value: Optional[pulumi.Input[builtins.str]]):
229
230
  pulumi.set(self, "external_oauth_rsa_public_key", value)
230
231
 
231
232
  @property
232
233
  @pulumi.getter(name="externalOauthRsaPublicKey2")
233
- def external_oauth_rsa_public_key2(self) -> Optional[pulumi.Input[str]]:
234
+ def external_oauth_rsa_public_key2(self) -> Optional[pulumi.Input[builtins.str]]:
234
235
  """
235
236
  Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation. If removed from the config, the resource is recreated.
236
237
  """
237
238
  return pulumi.get(self, "external_oauth_rsa_public_key2")
238
239
 
239
240
  @external_oauth_rsa_public_key2.setter
240
- def external_oauth_rsa_public_key2(self, value: Optional[pulumi.Input[str]]):
241
+ def external_oauth_rsa_public_key2(self, value: Optional[pulumi.Input[builtins.str]]):
241
242
  pulumi.set(self, "external_oauth_rsa_public_key2", value)
242
243
 
243
244
  @property
244
245
  @pulumi.getter(name="externalOauthScopeDelimiter")
245
- def external_oauth_scope_delimiter(self) -> Optional[pulumi.Input[str]]:
246
+ def external_oauth_scope_delimiter(self) -> Optional[pulumi.Input[builtins.str]]:
246
247
  """
247
248
  Specifies the scope delimiter in the authorization token.
248
249
  """
249
250
  return pulumi.get(self, "external_oauth_scope_delimiter")
250
251
 
251
252
  @external_oauth_scope_delimiter.setter
252
- def external_oauth_scope_delimiter(self, value: Optional[pulumi.Input[str]]):
253
+ def external_oauth_scope_delimiter(self, value: Optional[pulumi.Input[builtins.str]]):
253
254
  pulumi.set(self, "external_oauth_scope_delimiter", value)
254
255
 
255
256
  @property
256
257
  @pulumi.getter(name="externalOauthScopeMappingAttribute")
257
- def external_oauth_scope_mapping_attribute(self) -> Optional[pulumi.Input[str]]:
258
+ def external_oauth_scope_mapping_attribute(self) -> Optional[pulumi.Input[builtins.str]]:
258
259
  """
259
260
  Specifies the access token claim to map the access token to an account role. If removed from the config, the resource is recreated.
260
261
  """
261
262
  return pulumi.get(self, "external_oauth_scope_mapping_attribute")
262
263
 
263
264
  @external_oauth_scope_mapping_attribute.setter
264
- def external_oauth_scope_mapping_attribute(self, value: Optional[pulumi.Input[str]]):
265
+ def external_oauth_scope_mapping_attribute(self, value: Optional[pulumi.Input[builtins.str]]):
265
266
  pulumi.set(self, "external_oauth_scope_mapping_attribute", value)
266
267
 
267
268
  @property
268
269
  @pulumi.getter
269
- def name(self) -> Optional[pulumi.Input[str]]:
270
+ def name(self) -> Optional[pulumi.Input[builtins.str]]:
270
271
  """
271
272
  Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
272
273
  """
273
274
  return pulumi.get(self, "name")
274
275
 
275
276
  @name.setter
276
- def name(self, value: Optional[pulumi.Input[str]]):
277
+ def name(self, value: Optional[pulumi.Input[builtins.str]]):
277
278
  pulumi.set(self, "name", value)
278
279
 
279
280
 
280
281
  @pulumi.input_type
281
282
  class _ExternalOauthIntegrationState:
282
283
  def __init__(__self__, *,
283
- comment: Optional[pulumi.Input[str]] = None,
284
+ comment: Optional[pulumi.Input[builtins.str]] = None,
284
285
  describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationDescribeOutputArgs']]]] = None,
285
- enabled: Optional[pulumi.Input[bool]] = None,
286
- external_oauth_allowed_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
287
- external_oauth_any_role_mode: Optional[pulumi.Input[str]] = None,
288
- external_oauth_audience_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
289
- external_oauth_blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
290
- external_oauth_issuer: Optional[pulumi.Input[str]] = None,
291
- external_oauth_jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
292
- external_oauth_rsa_public_key: Optional[pulumi.Input[str]] = None,
293
- external_oauth_rsa_public_key2: Optional[pulumi.Input[str]] = None,
294
- external_oauth_scope_delimiter: Optional[pulumi.Input[str]] = None,
295
- external_oauth_scope_mapping_attribute: Optional[pulumi.Input[str]] = None,
296
- external_oauth_snowflake_user_mapping_attribute: Optional[pulumi.Input[str]] = None,
297
- external_oauth_token_user_mapping_claims: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
298
- external_oauth_type: Optional[pulumi.Input[str]] = None,
299
- fully_qualified_name: Optional[pulumi.Input[str]] = None,
300
- name: Optional[pulumi.Input[str]] = None,
286
+ enabled: Optional[pulumi.Input[builtins.bool]] = None,
287
+ external_oauth_allowed_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
288
+ external_oauth_any_role_mode: Optional[pulumi.Input[builtins.str]] = None,
289
+ external_oauth_audience_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
290
+ external_oauth_blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
291
+ external_oauth_issuer: Optional[pulumi.Input[builtins.str]] = None,
292
+ external_oauth_jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
293
+ external_oauth_rsa_public_key: Optional[pulumi.Input[builtins.str]] = None,
294
+ external_oauth_rsa_public_key2: Optional[pulumi.Input[builtins.str]] = None,
295
+ external_oauth_scope_delimiter: Optional[pulumi.Input[builtins.str]] = None,
296
+ external_oauth_scope_mapping_attribute: Optional[pulumi.Input[builtins.str]] = None,
297
+ external_oauth_snowflake_user_mapping_attribute: Optional[pulumi.Input[builtins.str]] = None,
298
+ external_oauth_token_user_mapping_claims: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
299
+ external_oauth_type: Optional[pulumi.Input[builtins.str]] = None,
300
+ fully_qualified_name: Optional[pulumi.Input[builtins.str]] = None,
301
+ name: Optional[pulumi.Input[builtins.str]] = None,
301
302
  related_parameters: Optional[pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationRelatedParameterArgs']]]] = None,
302
303
  show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationShowOutputArgs']]]] = None):
303
304
  """
304
305
  Input properties used for looking up and filtering ExternalOauthIntegration resources.
305
- :param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
306
+ :param pulumi.Input[builtins.str] comment: Specifies a comment for the OAuth integration.
306
307
  :param pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationDescribeOutputArgs']]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATIONS` for the given security integration.
307
- :param pulumi.Input[bool] enabled: Specifies whether to initiate operation of the integration or suspend it.
308
- :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_allowed_roles_lists: Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
309
- :param pulumi.Input[str] external_oauth_any_role_mode: Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
310
- :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_audience_lists: Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
311
- :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_blocked_roles_lists: Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
312
- :param pulumi.Input[str] external_oauth_issuer: Specifies the URL to define the OAuth 2.0 authorization server.
313
- :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_jws_keys_urls: Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
314
- :param pulumi.Input[str] external_oauth_rsa_public_key: Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
315
- :param pulumi.Input[str] external_oauth_rsa_public_key2: Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation. If removed from the config, the resource is recreated.
316
- :param pulumi.Input[str] external_oauth_scope_delimiter: Specifies the scope delimiter in the authorization token.
317
- :param pulumi.Input[str] external_oauth_scope_mapping_attribute: Specifies the access token claim to map the access token to an account role. If removed from the config, the resource is recreated.
318
- :param pulumi.Input[str] external_oauth_snowflake_user_mapping_attribute: Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record. Valid values are (case-insensitive): `LOGIN_NAME` | `EMAIL_ADDRESS`.
319
- :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_token_user_mapping_claims: Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
320
- :param pulumi.Input[str] external_oauth_type: Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
321
- :param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
322
- :param pulumi.Input[str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
308
+ :param pulumi.Input[builtins.bool] enabled: Specifies whether to initiate operation of the integration or suspend it.
309
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] external_oauth_allowed_roles_lists: Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
310
+ :param pulumi.Input[builtins.str] external_oauth_any_role_mode: Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
311
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] external_oauth_audience_lists: Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
312
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] external_oauth_blocked_roles_lists: Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
313
+ :param pulumi.Input[builtins.str] external_oauth_issuer: Specifies the URL to define the OAuth 2.0 authorization server.
314
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] external_oauth_jws_keys_urls: Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
315
+ :param pulumi.Input[builtins.str] external_oauth_rsa_public_key: Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
316
+ :param pulumi.Input[builtins.str] external_oauth_rsa_public_key2: Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation. If removed from the config, the resource is recreated.
317
+ :param pulumi.Input[builtins.str] external_oauth_scope_delimiter: Specifies the scope delimiter in the authorization token.
318
+ :param pulumi.Input[builtins.str] external_oauth_scope_mapping_attribute: Specifies the access token claim to map the access token to an account role. If removed from the config, the resource is recreated.
319
+ :param pulumi.Input[builtins.str] external_oauth_snowflake_user_mapping_attribute: Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record. Valid values are (case-insensitive): `LOGIN_NAME` | `EMAIL_ADDRESS`.
320
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] external_oauth_token_user_mapping_claims: Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
321
+ :param pulumi.Input[builtins.str] external_oauth_type: Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
322
+ :param pulumi.Input[builtins.str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
323
+ :param pulumi.Input[builtins.str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
323
324
  :param pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationRelatedParameterArgs']]] related_parameters: Parameters related to this security integration.
324
325
  :param pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationShowOutputArgs']]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATIONS` for the given security integration.
325
326
  """
@@ -366,14 +367,14 @@ class _ExternalOauthIntegrationState:
366
367
 
367
368
  @property
368
369
  @pulumi.getter
369
- def comment(self) -> Optional[pulumi.Input[str]]:
370
+ def comment(self) -> Optional[pulumi.Input[builtins.str]]:
370
371
  """
371
372
  Specifies a comment for the OAuth integration.
372
373
  """
373
374
  return pulumi.get(self, "comment")
374
375
 
375
376
  @comment.setter
376
- def comment(self, value: Optional[pulumi.Input[str]]):
377
+ def comment(self, value: Optional[pulumi.Input[builtins.str]]):
377
378
  pulumi.set(self, "comment", value)
378
379
 
379
380
  @property
@@ -390,194 +391,194 @@ class _ExternalOauthIntegrationState:
390
391
 
391
392
  @property
392
393
  @pulumi.getter
393
- def enabled(self) -> Optional[pulumi.Input[bool]]:
394
+ def enabled(self) -> Optional[pulumi.Input[builtins.bool]]:
394
395
  """
395
396
  Specifies whether to initiate operation of the integration or suspend it.
396
397
  """
397
398
  return pulumi.get(self, "enabled")
398
399
 
399
400
  @enabled.setter
400
- def enabled(self, value: Optional[pulumi.Input[bool]]):
401
+ def enabled(self, value: Optional[pulumi.Input[builtins.bool]]):
401
402
  pulumi.set(self, "enabled", value)
402
403
 
403
404
  @property
404
405
  @pulumi.getter(name="externalOauthAllowedRolesLists")
405
- def external_oauth_allowed_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
406
+ def external_oauth_allowed_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
406
407
  """
407
408
  Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
408
409
  """
409
410
  return pulumi.get(self, "external_oauth_allowed_roles_lists")
410
411
 
411
412
  @external_oauth_allowed_roles_lists.setter
412
- def external_oauth_allowed_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
413
+ def external_oauth_allowed_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
413
414
  pulumi.set(self, "external_oauth_allowed_roles_lists", value)
414
415
 
415
416
  @property
416
417
  @pulumi.getter(name="externalOauthAnyRoleMode")
417
- def external_oauth_any_role_mode(self) -> Optional[pulumi.Input[str]]:
418
+ def external_oauth_any_role_mode(self) -> Optional[pulumi.Input[builtins.str]]:
418
419
  """
419
420
  Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
420
421
  """
421
422
  return pulumi.get(self, "external_oauth_any_role_mode")
422
423
 
423
424
  @external_oauth_any_role_mode.setter
424
- def external_oauth_any_role_mode(self, value: Optional[pulumi.Input[str]]):
425
+ def external_oauth_any_role_mode(self, value: Optional[pulumi.Input[builtins.str]]):
425
426
  pulumi.set(self, "external_oauth_any_role_mode", value)
426
427
 
427
428
  @property
428
429
  @pulumi.getter(name="externalOauthAudienceLists")
429
- def external_oauth_audience_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
430
+ def external_oauth_audience_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
430
431
  """
431
432
  Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
432
433
  """
433
434
  return pulumi.get(self, "external_oauth_audience_lists")
434
435
 
435
436
  @external_oauth_audience_lists.setter
436
- def external_oauth_audience_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
437
+ def external_oauth_audience_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
437
438
  pulumi.set(self, "external_oauth_audience_lists", value)
438
439
 
439
440
  @property
440
441
  @pulumi.getter(name="externalOauthBlockedRolesLists")
441
- def external_oauth_blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
442
+ def external_oauth_blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
442
443
  """
443
444
  Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
444
445
  """
445
446
  return pulumi.get(self, "external_oauth_blocked_roles_lists")
446
447
 
447
448
  @external_oauth_blocked_roles_lists.setter
448
- def external_oauth_blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
449
+ def external_oauth_blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
449
450
  pulumi.set(self, "external_oauth_blocked_roles_lists", value)
450
451
 
451
452
  @property
452
453
  @pulumi.getter(name="externalOauthIssuer")
453
- def external_oauth_issuer(self) -> Optional[pulumi.Input[str]]:
454
+ def external_oauth_issuer(self) -> Optional[pulumi.Input[builtins.str]]:
454
455
  """
455
456
  Specifies the URL to define the OAuth 2.0 authorization server.
456
457
  """
457
458
  return pulumi.get(self, "external_oauth_issuer")
458
459
 
459
460
  @external_oauth_issuer.setter
460
- def external_oauth_issuer(self, value: Optional[pulumi.Input[str]]):
461
+ def external_oauth_issuer(self, value: Optional[pulumi.Input[builtins.str]]):
461
462
  pulumi.set(self, "external_oauth_issuer", value)
462
463
 
463
464
  @property
464
465
  @pulumi.getter(name="externalOauthJwsKeysUrls")
465
- def external_oauth_jws_keys_urls(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
466
+ def external_oauth_jws_keys_urls(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
466
467
  """
467
468
  Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
468
469
  """
469
470
  return pulumi.get(self, "external_oauth_jws_keys_urls")
470
471
 
471
472
  @external_oauth_jws_keys_urls.setter
472
- def external_oauth_jws_keys_urls(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
473
+ def external_oauth_jws_keys_urls(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
473
474
  pulumi.set(self, "external_oauth_jws_keys_urls", value)
474
475
 
475
476
  @property
476
477
  @pulumi.getter(name="externalOauthRsaPublicKey")
477
- def external_oauth_rsa_public_key(self) -> Optional[pulumi.Input[str]]:
478
+ def external_oauth_rsa_public_key(self) -> Optional[pulumi.Input[builtins.str]]:
478
479
  """
479
480
  Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
480
481
  """
481
482
  return pulumi.get(self, "external_oauth_rsa_public_key")
482
483
 
483
484
  @external_oauth_rsa_public_key.setter
484
- def external_oauth_rsa_public_key(self, value: Optional[pulumi.Input[str]]):
485
+ def external_oauth_rsa_public_key(self, value: Optional[pulumi.Input[builtins.str]]):
485
486
  pulumi.set(self, "external_oauth_rsa_public_key", value)
486
487
 
487
488
  @property
488
489
  @pulumi.getter(name="externalOauthRsaPublicKey2")
489
- def external_oauth_rsa_public_key2(self) -> Optional[pulumi.Input[str]]:
490
+ def external_oauth_rsa_public_key2(self) -> Optional[pulumi.Input[builtins.str]]:
490
491
  """
491
492
  Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation. If removed from the config, the resource is recreated.
492
493
  """
493
494
  return pulumi.get(self, "external_oauth_rsa_public_key2")
494
495
 
495
496
  @external_oauth_rsa_public_key2.setter
496
- def external_oauth_rsa_public_key2(self, value: Optional[pulumi.Input[str]]):
497
+ def external_oauth_rsa_public_key2(self, value: Optional[pulumi.Input[builtins.str]]):
497
498
  pulumi.set(self, "external_oauth_rsa_public_key2", value)
498
499
 
499
500
  @property
500
501
  @pulumi.getter(name="externalOauthScopeDelimiter")
501
- def external_oauth_scope_delimiter(self) -> Optional[pulumi.Input[str]]:
502
+ def external_oauth_scope_delimiter(self) -> Optional[pulumi.Input[builtins.str]]:
502
503
  """
503
504
  Specifies the scope delimiter in the authorization token.
504
505
  """
505
506
  return pulumi.get(self, "external_oauth_scope_delimiter")
506
507
 
507
508
  @external_oauth_scope_delimiter.setter
508
- def external_oauth_scope_delimiter(self, value: Optional[pulumi.Input[str]]):
509
+ def external_oauth_scope_delimiter(self, value: Optional[pulumi.Input[builtins.str]]):
509
510
  pulumi.set(self, "external_oauth_scope_delimiter", value)
510
511
 
511
512
  @property
512
513
  @pulumi.getter(name="externalOauthScopeMappingAttribute")
513
- def external_oauth_scope_mapping_attribute(self) -> Optional[pulumi.Input[str]]:
514
+ def external_oauth_scope_mapping_attribute(self) -> Optional[pulumi.Input[builtins.str]]:
514
515
  """
515
516
  Specifies the access token claim to map the access token to an account role. If removed from the config, the resource is recreated.
516
517
  """
517
518
  return pulumi.get(self, "external_oauth_scope_mapping_attribute")
518
519
 
519
520
  @external_oauth_scope_mapping_attribute.setter
520
- def external_oauth_scope_mapping_attribute(self, value: Optional[pulumi.Input[str]]):
521
+ def external_oauth_scope_mapping_attribute(self, value: Optional[pulumi.Input[builtins.str]]):
521
522
  pulumi.set(self, "external_oauth_scope_mapping_attribute", value)
522
523
 
523
524
  @property
524
525
  @pulumi.getter(name="externalOauthSnowflakeUserMappingAttribute")
525
- def external_oauth_snowflake_user_mapping_attribute(self) -> Optional[pulumi.Input[str]]:
526
+ def external_oauth_snowflake_user_mapping_attribute(self) -> Optional[pulumi.Input[builtins.str]]:
526
527
  """
527
528
  Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record. Valid values are (case-insensitive): `LOGIN_NAME` | `EMAIL_ADDRESS`.
528
529
  """
529
530
  return pulumi.get(self, "external_oauth_snowflake_user_mapping_attribute")
530
531
 
531
532
  @external_oauth_snowflake_user_mapping_attribute.setter
532
- def external_oauth_snowflake_user_mapping_attribute(self, value: Optional[pulumi.Input[str]]):
533
+ def external_oauth_snowflake_user_mapping_attribute(self, value: Optional[pulumi.Input[builtins.str]]):
533
534
  pulumi.set(self, "external_oauth_snowflake_user_mapping_attribute", value)
534
535
 
535
536
  @property
536
537
  @pulumi.getter(name="externalOauthTokenUserMappingClaims")
537
- def external_oauth_token_user_mapping_claims(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
538
+ def external_oauth_token_user_mapping_claims(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
538
539
  """
539
540
  Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
540
541
  """
541
542
  return pulumi.get(self, "external_oauth_token_user_mapping_claims")
542
543
 
543
544
  @external_oauth_token_user_mapping_claims.setter
544
- def external_oauth_token_user_mapping_claims(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
545
+ def external_oauth_token_user_mapping_claims(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
545
546
  pulumi.set(self, "external_oauth_token_user_mapping_claims", value)
546
547
 
547
548
  @property
548
549
  @pulumi.getter(name="externalOauthType")
549
- def external_oauth_type(self) -> Optional[pulumi.Input[str]]:
550
+ def external_oauth_type(self) -> Optional[pulumi.Input[builtins.str]]:
550
551
  """
551
552
  Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
552
553
  """
553
554
  return pulumi.get(self, "external_oauth_type")
554
555
 
555
556
  @external_oauth_type.setter
556
- def external_oauth_type(self, value: Optional[pulumi.Input[str]]):
557
+ def external_oauth_type(self, value: Optional[pulumi.Input[builtins.str]]):
557
558
  pulumi.set(self, "external_oauth_type", value)
558
559
 
559
560
  @property
560
561
  @pulumi.getter(name="fullyQualifiedName")
561
- def fully_qualified_name(self) -> Optional[pulumi.Input[str]]:
562
+ def fully_qualified_name(self) -> Optional[pulumi.Input[builtins.str]]:
562
563
  """
563
564
  Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
564
565
  """
565
566
  return pulumi.get(self, "fully_qualified_name")
566
567
 
567
568
  @fully_qualified_name.setter
568
- def fully_qualified_name(self, value: Optional[pulumi.Input[str]]):
569
+ def fully_qualified_name(self, value: Optional[pulumi.Input[builtins.str]]):
569
570
  pulumi.set(self, "fully_qualified_name", value)
570
571
 
571
572
  @property
572
573
  @pulumi.getter
573
- def name(self) -> Optional[pulumi.Input[str]]:
574
+ def name(self) -> Optional[pulumi.Input[builtins.str]]:
574
575
  """
575
576
  Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
576
577
  """
577
578
  return pulumi.get(self, "name")
578
579
 
579
580
  @name.setter
580
- def name(self, value: Optional[pulumi.Input[str]]):
581
+ def name(self, value: Optional[pulumi.Input[builtins.str]]):
581
582
  pulumi.set(self, "name", value)
582
583
 
583
584
  @property
@@ -610,22 +611,22 @@ class ExternalOauthIntegration(pulumi.CustomResource):
610
611
  def __init__(__self__,
611
612
  resource_name: str,
612
613
  opts: Optional[pulumi.ResourceOptions] = None,
613
- comment: Optional[pulumi.Input[str]] = None,
614
- enabled: Optional[pulumi.Input[bool]] = None,
615
- external_oauth_allowed_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
616
- external_oauth_any_role_mode: Optional[pulumi.Input[str]] = None,
617
- external_oauth_audience_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
618
- external_oauth_blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
619
- external_oauth_issuer: Optional[pulumi.Input[str]] = None,
620
- external_oauth_jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
621
- external_oauth_rsa_public_key: Optional[pulumi.Input[str]] = None,
622
- external_oauth_rsa_public_key2: Optional[pulumi.Input[str]] = None,
623
- external_oauth_scope_delimiter: Optional[pulumi.Input[str]] = None,
624
- external_oauth_scope_mapping_attribute: Optional[pulumi.Input[str]] = None,
625
- external_oauth_snowflake_user_mapping_attribute: Optional[pulumi.Input[str]] = None,
626
- external_oauth_token_user_mapping_claims: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
627
- external_oauth_type: Optional[pulumi.Input[str]] = None,
628
- name: Optional[pulumi.Input[str]] = None,
614
+ comment: Optional[pulumi.Input[builtins.str]] = None,
615
+ enabled: Optional[pulumi.Input[builtins.bool]] = None,
616
+ external_oauth_allowed_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
617
+ external_oauth_any_role_mode: Optional[pulumi.Input[builtins.str]] = None,
618
+ external_oauth_audience_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
619
+ external_oauth_blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
620
+ external_oauth_issuer: Optional[pulumi.Input[builtins.str]] = None,
621
+ external_oauth_jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
622
+ external_oauth_rsa_public_key: Optional[pulumi.Input[builtins.str]] = None,
623
+ external_oauth_rsa_public_key2: Optional[pulumi.Input[builtins.str]] = None,
624
+ external_oauth_scope_delimiter: Optional[pulumi.Input[builtins.str]] = None,
625
+ external_oauth_scope_mapping_attribute: Optional[pulumi.Input[builtins.str]] = None,
626
+ external_oauth_snowflake_user_mapping_attribute: Optional[pulumi.Input[builtins.str]] = None,
627
+ external_oauth_token_user_mapping_claims: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
628
+ external_oauth_type: Optional[pulumi.Input[builtins.str]] = None,
629
+ name: Optional[pulumi.Input[builtins.str]] = None,
629
630
  __props__=None):
630
631
  """
631
632
  ## Import
@@ -636,22 +637,22 @@ class ExternalOauthIntegration(pulumi.CustomResource):
636
637
 
637
638
  :param str resource_name: The name of the resource.
638
639
  :param pulumi.ResourceOptions opts: Options for the resource.
639
- :param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
640
- :param pulumi.Input[bool] enabled: Specifies whether to initiate operation of the integration or suspend it.
641
- :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_allowed_roles_lists: Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
642
- :param pulumi.Input[str] external_oauth_any_role_mode: Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
643
- :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_audience_lists: Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
644
- :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_blocked_roles_lists: Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
645
- :param pulumi.Input[str] external_oauth_issuer: Specifies the URL to define the OAuth 2.0 authorization server.
646
- :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_jws_keys_urls: Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
647
- :param pulumi.Input[str] external_oauth_rsa_public_key: Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
648
- :param pulumi.Input[str] external_oauth_rsa_public_key2: Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation. If removed from the config, the resource is recreated.
649
- :param pulumi.Input[str] external_oauth_scope_delimiter: Specifies the scope delimiter in the authorization token.
650
- :param pulumi.Input[str] external_oauth_scope_mapping_attribute: Specifies the access token claim to map the access token to an account role. If removed from the config, the resource is recreated.
651
- :param pulumi.Input[str] external_oauth_snowflake_user_mapping_attribute: Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record. Valid values are (case-insensitive): `LOGIN_NAME` | `EMAIL_ADDRESS`.
652
- :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_token_user_mapping_claims: Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
653
- :param pulumi.Input[str] external_oauth_type: Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
654
- :param pulumi.Input[str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
640
+ :param pulumi.Input[builtins.str] comment: Specifies a comment for the OAuth integration.
641
+ :param pulumi.Input[builtins.bool] enabled: Specifies whether to initiate operation of the integration or suspend it.
642
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] external_oauth_allowed_roles_lists: Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
643
+ :param pulumi.Input[builtins.str] external_oauth_any_role_mode: Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
644
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] external_oauth_audience_lists: Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
645
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] external_oauth_blocked_roles_lists: Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
646
+ :param pulumi.Input[builtins.str] external_oauth_issuer: Specifies the URL to define the OAuth 2.0 authorization server.
647
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] external_oauth_jws_keys_urls: Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
648
+ :param pulumi.Input[builtins.str] external_oauth_rsa_public_key: Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
649
+ :param pulumi.Input[builtins.str] external_oauth_rsa_public_key2: Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation. If removed from the config, the resource is recreated.
650
+ :param pulumi.Input[builtins.str] external_oauth_scope_delimiter: Specifies the scope delimiter in the authorization token.
651
+ :param pulumi.Input[builtins.str] external_oauth_scope_mapping_attribute: Specifies the access token claim to map the access token to an account role. If removed from the config, the resource is recreated.
652
+ :param pulumi.Input[builtins.str] external_oauth_snowflake_user_mapping_attribute: Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record. Valid values are (case-insensitive): `LOGIN_NAME` | `EMAIL_ADDRESS`.
653
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] external_oauth_token_user_mapping_claims: Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
654
+ :param pulumi.Input[builtins.str] external_oauth_type: Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
655
+ :param pulumi.Input[builtins.str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
655
656
  """
656
657
  ...
657
658
  @overload
@@ -681,22 +682,22 @@ class ExternalOauthIntegration(pulumi.CustomResource):
681
682
  def _internal_init(__self__,
682
683
  resource_name: str,
683
684
  opts: Optional[pulumi.ResourceOptions] = None,
684
- comment: Optional[pulumi.Input[str]] = None,
685
- enabled: Optional[pulumi.Input[bool]] = None,
686
- external_oauth_allowed_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
687
- external_oauth_any_role_mode: Optional[pulumi.Input[str]] = None,
688
- external_oauth_audience_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
689
- external_oauth_blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
690
- external_oauth_issuer: Optional[pulumi.Input[str]] = None,
691
- external_oauth_jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
692
- external_oauth_rsa_public_key: Optional[pulumi.Input[str]] = None,
693
- external_oauth_rsa_public_key2: Optional[pulumi.Input[str]] = None,
694
- external_oauth_scope_delimiter: Optional[pulumi.Input[str]] = None,
695
- external_oauth_scope_mapping_attribute: Optional[pulumi.Input[str]] = None,
696
- external_oauth_snowflake_user_mapping_attribute: Optional[pulumi.Input[str]] = None,
697
- external_oauth_token_user_mapping_claims: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
698
- external_oauth_type: Optional[pulumi.Input[str]] = None,
699
- name: Optional[pulumi.Input[str]] = None,
685
+ comment: Optional[pulumi.Input[builtins.str]] = None,
686
+ enabled: Optional[pulumi.Input[builtins.bool]] = None,
687
+ external_oauth_allowed_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
688
+ external_oauth_any_role_mode: Optional[pulumi.Input[builtins.str]] = None,
689
+ external_oauth_audience_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
690
+ external_oauth_blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
691
+ external_oauth_issuer: Optional[pulumi.Input[builtins.str]] = None,
692
+ external_oauth_jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
693
+ external_oauth_rsa_public_key: Optional[pulumi.Input[builtins.str]] = None,
694
+ external_oauth_rsa_public_key2: Optional[pulumi.Input[builtins.str]] = None,
695
+ external_oauth_scope_delimiter: Optional[pulumi.Input[builtins.str]] = None,
696
+ external_oauth_scope_mapping_attribute: Optional[pulumi.Input[builtins.str]] = None,
697
+ external_oauth_snowflake_user_mapping_attribute: Optional[pulumi.Input[builtins.str]] = None,
698
+ external_oauth_token_user_mapping_claims: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
699
+ external_oauth_type: Optional[pulumi.Input[builtins.str]] = None,
700
+ name: Optional[pulumi.Input[builtins.str]] = None,
700
701
  __props__=None):
701
702
  opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
702
703
  if not isinstance(opts, pulumi.ResourceOptions):
@@ -746,24 +747,24 @@ class ExternalOauthIntegration(pulumi.CustomResource):
746
747
  def get(resource_name: str,
747
748
  id: pulumi.Input[str],
748
749
  opts: Optional[pulumi.ResourceOptions] = None,
749
- comment: Optional[pulumi.Input[str]] = None,
750
+ comment: Optional[pulumi.Input[builtins.str]] = None,
750
751
  describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['ExternalOauthIntegrationDescribeOutputArgs', 'ExternalOauthIntegrationDescribeOutputArgsDict']]]]] = None,
751
- enabled: Optional[pulumi.Input[bool]] = None,
752
- external_oauth_allowed_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
753
- external_oauth_any_role_mode: Optional[pulumi.Input[str]] = None,
754
- external_oauth_audience_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
755
- external_oauth_blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
756
- external_oauth_issuer: Optional[pulumi.Input[str]] = None,
757
- external_oauth_jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
758
- external_oauth_rsa_public_key: Optional[pulumi.Input[str]] = None,
759
- external_oauth_rsa_public_key2: Optional[pulumi.Input[str]] = None,
760
- external_oauth_scope_delimiter: Optional[pulumi.Input[str]] = None,
761
- external_oauth_scope_mapping_attribute: Optional[pulumi.Input[str]] = None,
762
- external_oauth_snowflake_user_mapping_attribute: Optional[pulumi.Input[str]] = None,
763
- external_oauth_token_user_mapping_claims: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
764
- external_oauth_type: Optional[pulumi.Input[str]] = None,
765
- fully_qualified_name: Optional[pulumi.Input[str]] = None,
766
- name: Optional[pulumi.Input[str]] = None,
752
+ enabled: Optional[pulumi.Input[builtins.bool]] = None,
753
+ external_oauth_allowed_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
754
+ external_oauth_any_role_mode: Optional[pulumi.Input[builtins.str]] = None,
755
+ external_oauth_audience_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
756
+ external_oauth_blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
757
+ external_oauth_issuer: Optional[pulumi.Input[builtins.str]] = None,
758
+ external_oauth_jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
759
+ external_oauth_rsa_public_key: Optional[pulumi.Input[builtins.str]] = None,
760
+ external_oauth_rsa_public_key2: Optional[pulumi.Input[builtins.str]] = None,
761
+ external_oauth_scope_delimiter: Optional[pulumi.Input[builtins.str]] = None,
762
+ external_oauth_scope_mapping_attribute: Optional[pulumi.Input[builtins.str]] = None,
763
+ external_oauth_snowflake_user_mapping_attribute: Optional[pulumi.Input[builtins.str]] = None,
764
+ external_oauth_token_user_mapping_claims: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
765
+ external_oauth_type: Optional[pulumi.Input[builtins.str]] = None,
766
+ fully_qualified_name: Optional[pulumi.Input[builtins.str]] = None,
767
+ name: Optional[pulumi.Input[builtins.str]] = None,
767
768
  related_parameters: Optional[pulumi.Input[Sequence[pulumi.Input[Union['ExternalOauthIntegrationRelatedParameterArgs', 'ExternalOauthIntegrationRelatedParameterArgsDict']]]]] = None,
768
769
  show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['ExternalOauthIntegrationShowOutputArgs', 'ExternalOauthIntegrationShowOutputArgsDict']]]]] = None) -> 'ExternalOauthIntegration':
769
770
  """
@@ -773,24 +774,24 @@ class ExternalOauthIntegration(pulumi.CustomResource):
773
774
  :param str resource_name: The unique name of the resulting resource.
774
775
  :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
775
776
  :param pulumi.ResourceOptions opts: Options for the resource.
776
- :param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
777
+ :param pulumi.Input[builtins.str] comment: Specifies a comment for the OAuth integration.
777
778
  :param pulumi.Input[Sequence[pulumi.Input[Union['ExternalOauthIntegrationDescribeOutputArgs', 'ExternalOauthIntegrationDescribeOutputArgsDict']]]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATIONS` for the given security integration.
778
- :param pulumi.Input[bool] enabled: Specifies whether to initiate operation of the integration or suspend it.
779
- :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_allowed_roles_lists: Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
780
- :param pulumi.Input[str] external_oauth_any_role_mode: Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
781
- :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_audience_lists: Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
782
- :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_blocked_roles_lists: Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
783
- :param pulumi.Input[str] external_oauth_issuer: Specifies the URL to define the OAuth 2.0 authorization server.
784
- :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_jws_keys_urls: Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
785
- :param pulumi.Input[str] external_oauth_rsa_public_key: Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
786
- :param pulumi.Input[str] external_oauth_rsa_public_key2: Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation. If removed from the config, the resource is recreated.
787
- :param pulumi.Input[str] external_oauth_scope_delimiter: Specifies the scope delimiter in the authorization token.
788
- :param pulumi.Input[str] external_oauth_scope_mapping_attribute: Specifies the access token claim to map the access token to an account role. If removed from the config, the resource is recreated.
789
- :param pulumi.Input[str] external_oauth_snowflake_user_mapping_attribute: Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record. Valid values are (case-insensitive): `LOGIN_NAME` | `EMAIL_ADDRESS`.
790
- :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_token_user_mapping_claims: Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
791
- :param pulumi.Input[str] external_oauth_type: Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
792
- :param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
793
- :param pulumi.Input[str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
779
+ :param pulumi.Input[builtins.bool] enabled: Specifies whether to initiate operation of the integration or suspend it.
780
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] external_oauth_allowed_roles_lists: Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
781
+ :param pulumi.Input[builtins.str] external_oauth_any_role_mode: Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
782
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] external_oauth_audience_lists: Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
783
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] external_oauth_blocked_roles_lists: Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
784
+ :param pulumi.Input[builtins.str] external_oauth_issuer: Specifies the URL to define the OAuth 2.0 authorization server.
785
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] external_oauth_jws_keys_urls: Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
786
+ :param pulumi.Input[builtins.str] external_oauth_rsa_public_key: Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
787
+ :param pulumi.Input[builtins.str] external_oauth_rsa_public_key2: Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation. If removed from the config, the resource is recreated.
788
+ :param pulumi.Input[builtins.str] external_oauth_scope_delimiter: Specifies the scope delimiter in the authorization token.
789
+ :param pulumi.Input[builtins.str] external_oauth_scope_mapping_attribute: Specifies the access token claim to map the access token to an account role. If removed from the config, the resource is recreated.
790
+ :param pulumi.Input[builtins.str] external_oauth_snowflake_user_mapping_attribute: Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record. Valid values are (case-insensitive): `LOGIN_NAME` | `EMAIL_ADDRESS`.
791
+ :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] external_oauth_token_user_mapping_claims: Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
792
+ :param pulumi.Input[builtins.str] external_oauth_type: Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
793
+ :param pulumi.Input[builtins.str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
794
+ :param pulumi.Input[builtins.str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
794
795
  :param pulumi.Input[Sequence[pulumi.Input[Union['ExternalOauthIntegrationRelatedParameterArgs', 'ExternalOauthIntegrationRelatedParameterArgsDict']]]] related_parameters: Parameters related to this security integration.
795
796
  :param pulumi.Input[Sequence[pulumi.Input[Union['ExternalOauthIntegrationShowOutputArgs', 'ExternalOauthIntegrationShowOutputArgsDict']]]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATIONS` for the given security integration.
796
797
  """
@@ -822,7 +823,7 @@ class ExternalOauthIntegration(pulumi.CustomResource):
822
823
 
823
824
  @property
824
825
  @pulumi.getter
825
- def comment(self) -> pulumi.Output[Optional[str]]:
826
+ def comment(self) -> pulumi.Output[Optional[builtins.str]]:
826
827
  """
827
828
  Specifies a comment for the OAuth integration.
828
829
  """
@@ -838,7 +839,7 @@ class ExternalOauthIntegration(pulumi.CustomResource):
838
839
 
839
840
  @property
840
841
  @pulumi.getter
841
- def enabled(self) -> pulumi.Output[bool]:
842
+ def enabled(self) -> pulumi.Output[builtins.bool]:
842
843
  """
843
844
  Specifies whether to initiate operation of the integration or suspend it.
844
845
  """
@@ -846,7 +847,7 @@ class ExternalOauthIntegration(pulumi.CustomResource):
846
847
 
847
848
  @property
848
849
  @pulumi.getter(name="externalOauthAllowedRolesLists")
849
- def external_oauth_allowed_roles_lists(self) -> pulumi.Output[Optional[Sequence[str]]]:
850
+ def external_oauth_allowed_roles_lists(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
850
851
  """
851
852
  Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
852
853
  """
@@ -854,7 +855,7 @@ class ExternalOauthIntegration(pulumi.CustomResource):
854
855
 
855
856
  @property
856
857
  @pulumi.getter(name="externalOauthAnyRoleMode")
857
- def external_oauth_any_role_mode(self) -> pulumi.Output[Optional[str]]:
858
+ def external_oauth_any_role_mode(self) -> pulumi.Output[Optional[builtins.str]]:
858
859
  """
859
860
  Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
860
861
  """
@@ -862,7 +863,7 @@ class ExternalOauthIntegration(pulumi.CustomResource):
862
863
 
863
864
  @property
864
865
  @pulumi.getter(name="externalOauthAudienceLists")
865
- def external_oauth_audience_lists(self) -> pulumi.Output[Optional[Sequence[str]]]:
866
+ def external_oauth_audience_lists(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
866
867
  """
867
868
  Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
868
869
  """
@@ -870,7 +871,7 @@ class ExternalOauthIntegration(pulumi.CustomResource):
870
871
 
871
872
  @property
872
873
  @pulumi.getter(name="externalOauthBlockedRolesLists")
873
- def external_oauth_blocked_roles_lists(self) -> pulumi.Output[Optional[Sequence[str]]]:
874
+ def external_oauth_blocked_roles_lists(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
874
875
  """
875
876
  Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
876
877
  """
@@ -878,7 +879,7 @@ class ExternalOauthIntegration(pulumi.CustomResource):
878
879
 
879
880
  @property
880
881
  @pulumi.getter(name="externalOauthIssuer")
881
- def external_oauth_issuer(self) -> pulumi.Output[str]:
882
+ def external_oauth_issuer(self) -> pulumi.Output[builtins.str]:
882
883
  """
883
884
  Specifies the URL to define the OAuth 2.0 authorization server.
884
885
  """
@@ -886,7 +887,7 @@ class ExternalOauthIntegration(pulumi.CustomResource):
886
887
 
887
888
  @property
888
889
  @pulumi.getter(name="externalOauthJwsKeysUrls")
889
- def external_oauth_jws_keys_urls(self) -> pulumi.Output[Optional[Sequence[str]]]:
890
+ def external_oauth_jws_keys_urls(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
890
891
  """
891
892
  Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
892
893
  """
@@ -894,7 +895,7 @@ class ExternalOauthIntegration(pulumi.CustomResource):
894
895
 
895
896
  @property
896
897
  @pulumi.getter(name="externalOauthRsaPublicKey")
897
- def external_oauth_rsa_public_key(self) -> pulumi.Output[Optional[str]]:
898
+ def external_oauth_rsa_public_key(self) -> pulumi.Output[Optional[builtins.str]]:
898
899
  """
899
900
  Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
900
901
  """
@@ -902,7 +903,7 @@ class ExternalOauthIntegration(pulumi.CustomResource):
902
903
 
903
904
  @property
904
905
  @pulumi.getter(name="externalOauthRsaPublicKey2")
905
- def external_oauth_rsa_public_key2(self) -> pulumi.Output[Optional[str]]:
906
+ def external_oauth_rsa_public_key2(self) -> pulumi.Output[Optional[builtins.str]]:
906
907
  """
907
908
  Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation. If removed from the config, the resource is recreated.
908
909
  """
@@ -910,7 +911,7 @@ class ExternalOauthIntegration(pulumi.CustomResource):
910
911
 
911
912
  @property
912
913
  @pulumi.getter(name="externalOauthScopeDelimiter")
913
- def external_oauth_scope_delimiter(self) -> pulumi.Output[Optional[str]]:
914
+ def external_oauth_scope_delimiter(self) -> pulumi.Output[Optional[builtins.str]]:
914
915
  """
915
916
  Specifies the scope delimiter in the authorization token.
916
917
  """
@@ -918,7 +919,7 @@ class ExternalOauthIntegration(pulumi.CustomResource):
918
919
 
919
920
  @property
920
921
  @pulumi.getter(name="externalOauthScopeMappingAttribute")
921
- def external_oauth_scope_mapping_attribute(self) -> pulumi.Output[Optional[str]]:
922
+ def external_oauth_scope_mapping_attribute(self) -> pulumi.Output[Optional[builtins.str]]:
922
923
  """
923
924
  Specifies the access token claim to map the access token to an account role. If removed from the config, the resource is recreated.
924
925
  """
@@ -926,7 +927,7 @@ class ExternalOauthIntegration(pulumi.CustomResource):
926
927
 
927
928
  @property
928
929
  @pulumi.getter(name="externalOauthSnowflakeUserMappingAttribute")
929
- def external_oauth_snowflake_user_mapping_attribute(self) -> pulumi.Output[str]:
930
+ def external_oauth_snowflake_user_mapping_attribute(self) -> pulumi.Output[builtins.str]:
930
931
  """
931
932
  Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record. Valid values are (case-insensitive): `LOGIN_NAME` | `EMAIL_ADDRESS`.
932
933
  """
@@ -934,7 +935,7 @@ class ExternalOauthIntegration(pulumi.CustomResource):
934
935
 
935
936
  @property
936
937
  @pulumi.getter(name="externalOauthTokenUserMappingClaims")
937
- def external_oauth_token_user_mapping_claims(self) -> pulumi.Output[Sequence[str]]:
938
+ def external_oauth_token_user_mapping_claims(self) -> pulumi.Output[Sequence[builtins.str]]:
938
939
  """
939
940
  Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
940
941
  """
@@ -942,7 +943,7 @@ class ExternalOauthIntegration(pulumi.CustomResource):
942
943
 
943
944
  @property
944
945
  @pulumi.getter(name="externalOauthType")
945
- def external_oauth_type(self) -> pulumi.Output[str]:
946
+ def external_oauth_type(self) -> pulumi.Output[builtins.str]:
946
947
  """
947
948
  Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
948
949
  """
@@ -950,7 +951,7 @@ class ExternalOauthIntegration(pulumi.CustomResource):
950
951
 
951
952
  @property
952
953
  @pulumi.getter(name="fullyQualifiedName")
953
- def fully_qualified_name(self) -> pulumi.Output[str]:
954
+ def fully_qualified_name(self) -> pulumi.Output[builtins.str]:
954
955
  """
955
956
  Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
956
957
  """
@@ -958,7 +959,7 @@ class ExternalOauthIntegration(pulumi.CustomResource):
958
959
 
959
960
  @property
960
961
  @pulumi.getter
961
- def name(self) -> pulumi.Output[str]:
962
+ def name(self) -> pulumi.Output[builtins.str]:
962
963
  """
963
964
  Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
964
965
  """