pulumi-snowflake 1.2.0a1743575514__py3-none-any.whl → 1.2.0a1744266763__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-snowflake might be problematic. Click here for more details.
- pulumi_snowflake/__init__.py +1 -0
- pulumi_snowflake/_inputs.py +12288 -12287
- pulumi_snowflake/account.py +186 -185
- pulumi_snowflake/account_authentication_policy_attachment.py +15 -14
- pulumi_snowflake/account_parameter.py +29 -28
- pulumi_snowflake/account_password_policy_attachment.py +15 -14
- pulumi_snowflake/account_role.py +32 -31
- pulumi_snowflake/alert.py +120 -119
- pulumi_snowflake/api_authentication_integration_with_authorization_code_grant.py +158 -157
- pulumi_snowflake/api_authentication_integration_with_client_credentials.py +144 -143
- pulumi_snowflake/api_authentication_integration_with_jwt_bearer.py +154 -153
- pulumi_snowflake/api_integration.py +203 -202
- pulumi_snowflake/authentication_policy.py +134 -133
- pulumi_snowflake/config/__init__.py +1 -0
- pulumi_snowflake/config/__init__.pyi +1 -0
- pulumi_snowflake/config/outputs.py +16 -15
- pulumi_snowflake/config/vars.py +1 -0
- pulumi_snowflake/cortex_search_service.py +141 -140
- pulumi_snowflake/database.py +288 -287
- pulumi_snowflake/database_role.py +50 -49
- pulumi_snowflake/dynamic_table.py +218 -217
- pulumi_snowflake/email_notification_integration.py +56 -55
- pulumi_snowflake/execute.py +50 -49
- pulumi_snowflake/external_function.py +225 -224
- pulumi_snowflake/external_oauth_integration.py +232 -231
- pulumi_snowflake/external_table.py +197 -196
- pulumi_snowflake/external_volume.py +50 -49
- pulumi_snowflake/failover_group.py +106 -105
- pulumi_snowflake/file_format.py +512 -511
- pulumi_snowflake/function_java.py +249 -248
- pulumi_snowflake/function_javascript.py +193 -192
- pulumi_snowflake/function_python.py +263 -262
- pulumi_snowflake/function_scala.py +249 -248
- pulumi_snowflake/function_sql.py +179 -178
- pulumi_snowflake/get_account_roles.py +12 -11
- pulumi_snowflake/get_accounts.py +12 -11
- pulumi_snowflake/get_alerts.py +17 -16
- pulumi_snowflake/get_connections.py +7 -6
- pulumi_snowflake/get_cortex_search_services.py +12 -11
- pulumi_snowflake/get_current_account.py +5 -4
- pulumi_snowflake/get_current_role.py +3 -2
- pulumi_snowflake/get_database.py +15 -14
- pulumi_snowflake/get_database_role.py +14 -13
- pulumi_snowflake/get_database_roles.py +12 -11
- pulumi_snowflake/get_databases.py +22 -21
- pulumi_snowflake/get_dynamic_tables.py +7 -6
- pulumi_snowflake/get_external_functions.py +12 -11
- pulumi_snowflake/get_external_tables.py +12 -11
- pulumi_snowflake/get_failover_groups.py +7 -6
- pulumi_snowflake/get_file_formats.py +12 -11
- pulumi_snowflake/get_functions.py +12 -11
- pulumi_snowflake/get_grants.py +2 -1
- pulumi_snowflake/get_masking_policies.py +12 -11
- pulumi_snowflake/get_materialized_views.py +12 -11
- pulumi_snowflake/get_network_policies.py +12 -11
- pulumi_snowflake/get_parameters.py +27 -26
- pulumi_snowflake/get_pipes.py +12 -11
- pulumi_snowflake/get_procedures.py +12 -11
- pulumi_snowflake/get_resource_monitors.py +7 -6
- pulumi_snowflake/get_row_access_policies.py +12 -11
- pulumi_snowflake/get_schemas.py +22 -21
- pulumi_snowflake/get_secrets.py +12 -11
- pulumi_snowflake/get_security_integrations.py +12 -11
- pulumi_snowflake/get_sequences.py +12 -11
- pulumi_snowflake/get_shares.py +7 -6
- pulumi_snowflake/get_stages.py +12 -11
- pulumi_snowflake/get_storage_integrations.py +2 -1
- pulumi_snowflake/get_streamlits.py +12 -11
- pulumi_snowflake/get_streams.py +17 -16
- pulumi_snowflake/get_system_generate_scim_access_token.py +8 -7
- pulumi_snowflake/get_system_get_aws_sns_iam_policy.py +8 -7
- pulumi_snowflake/get_system_get_private_link_config.py +11 -10
- pulumi_snowflake/get_system_get_snowflake_platform_info.py +4 -3
- pulumi_snowflake/get_tables.py +12 -11
- pulumi_snowflake/get_tags.py +7 -6
- pulumi_snowflake/get_tasks.py +22 -21
- pulumi_snowflake/get_users.py +22 -21
- pulumi_snowflake/get_views.py +17 -16
- pulumi_snowflake/get_warehouses.py +17 -16
- pulumi_snowflake/grant_account_role.py +43 -42
- pulumi_snowflake/grant_application_role.py +43 -42
- pulumi_snowflake/grant_database_role.py +57 -56
- pulumi_snowflake/grant_ownership.py +43 -42
- pulumi_snowflake/grant_privileges_to_account_role.py +95 -94
- pulumi_snowflake/grant_privileges_to_database_role.py +95 -94
- pulumi_snowflake/grant_privileges_to_share.py +127 -126
- pulumi_snowflake/legacy_service_user.py +1039 -1038
- pulumi_snowflake/managed_account.py +113 -112
- pulumi_snowflake/masking_policy.py +106 -105
- pulumi_snowflake/materialized_view.py +120 -119
- pulumi_snowflake/network_policy.py +92 -91
- pulumi_snowflake/network_policy_attachment.py +43 -42
- pulumi_snowflake/network_rule.py +106 -105
- pulumi_snowflake/notification_integration.py +238 -237
- pulumi_snowflake/oauth_integration_for_custom_clients.py +210 -209
- pulumi_snowflake/oauth_integration_for_partner_applications.py +134 -133
- pulumi_snowflake/object_parameter.py +57 -56
- pulumi_snowflake/outputs.py +9273 -9272
- pulumi_snowflake/password_policy.py +246 -245
- pulumi_snowflake/pipe.py +148 -147
- pulumi_snowflake/primary_connection.py +55 -54
- pulumi_snowflake/procedure_java.py +267 -266
- pulumi_snowflake/procedure_javascript.py +197 -196
- pulumi_snowflake/procedure_python.py +267 -266
- pulumi_snowflake/procedure_scala.py +267 -266
- pulumi_snowflake/procedure_sql.py +197 -196
- pulumi_snowflake/provider.py +303 -302
- pulumi_snowflake/pulumi-plugin.json +1 -1
- pulumi_snowflake/resource_monitor.py +134 -133
- pulumi_snowflake/row_access_policy.py +78 -77
- pulumi_snowflake/saml2_integration.py +246 -245
- pulumi_snowflake/schema.py +316 -315
- pulumi_snowflake/scim_integration.py +106 -105
- pulumi_snowflake/secondary_connection.py +57 -56
- pulumi_snowflake/secondary_database.py +288 -287
- pulumi_snowflake/secret_with_authorization_code_grant.py +109 -108
- pulumi_snowflake/secret_with_basic_authentication.py +95 -94
- pulumi_snowflake/secret_with_client_credentials.py +99 -98
- pulumi_snowflake/secret_with_generic_string.py +81 -80
- pulumi_snowflake/sequence.py +99 -98
- pulumi_snowflake/service_user.py +1015 -1014
- pulumi_snowflake/share.py +50 -49
- pulumi_snowflake/shared_database.py +246 -245
- pulumi_snowflake/stage.py +190 -189
- pulumi_snowflake/storage_integration.py +166 -165
- pulumi_snowflake/stream_on_directory_table.py +100 -99
- pulumi_snowflake/stream_on_external_table.py +114 -113
- pulumi_snowflake/stream_on_table.py +124 -123
- pulumi_snowflake/stream_on_view.py +124 -123
- pulumi_snowflake/streamlit.py +148 -147
- pulumi_snowflake/table.py +113 -112
- pulumi_snowflake/table_column_masking_policy_application.py +43 -42
- pulumi_snowflake/table_constraint.py +155 -154
- pulumi_snowflake/tag.py +92 -91
- pulumi_snowflake/tag_association.py +71 -70
- pulumi_snowflake/task.py +1002 -1001
- pulumi_snowflake/user.py +1101 -1100
- pulumi_snowflake/user_authentication_policy_attachment.py +29 -28
- pulumi_snowflake/user_password_policy_attachment.py +29 -28
- pulumi_snowflake/user_public_keys.py +43 -42
- pulumi_snowflake/view.py +136 -135
- pulumi_snowflake/warehouse.py +232 -231
- {pulumi_snowflake-1.2.0a1743575514.dist-info → pulumi_snowflake-1.2.0a1744266763.dist-info}/METADATA +1 -1
- pulumi_snowflake-1.2.0a1744266763.dist-info/RECORD +148 -0
- pulumi_snowflake-1.2.0a1743575514.dist-info/RECORD +0 -148
- {pulumi_snowflake-1.2.0a1743575514.dist-info → pulumi_snowflake-1.2.0a1744266763.dist-info}/WHEEL +0 -0
- {pulumi_snowflake-1.2.0a1743575514.dist-info → pulumi_snowflake-1.2.0a1744266763.dist-info}/top_level.txt +0 -0
|
@@ -2,6 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
+
import builtins
|
|
5
6
|
import copy
|
|
6
7
|
import warnings
|
|
7
8
|
import sys
|
|
@@ -21,26 +22,26 @@ __all__ = ['OauthIntegrationForPartnerApplicationsArgs', 'OauthIntegrationForPar
|
|
|
21
22
|
@pulumi.input_type
|
|
22
23
|
class OauthIntegrationForPartnerApplicationsArgs:
|
|
23
24
|
def __init__(__self__, *,
|
|
24
|
-
oauth_client: pulumi.Input[str],
|
|
25
|
-
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
26
|
-
comment: Optional[pulumi.Input[str]] = None,
|
|
27
|
-
enabled: Optional[pulumi.Input[str]] = None,
|
|
28
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
29
|
-
oauth_issue_refresh_tokens: Optional[pulumi.Input[str]] = None,
|
|
30
|
-
oauth_redirect_uri: Optional[pulumi.Input[str]] = None,
|
|
31
|
-
oauth_refresh_token_validity: Optional[pulumi.Input[int]] = None,
|
|
32
|
-
oauth_use_secondary_roles: Optional[pulumi.Input[str]] = None):
|
|
25
|
+
oauth_client: pulumi.Input[builtins.str],
|
|
26
|
+
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
27
|
+
comment: Optional[pulumi.Input[builtins.str]] = None,
|
|
28
|
+
enabled: Optional[pulumi.Input[builtins.str]] = None,
|
|
29
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
30
|
+
oauth_issue_refresh_tokens: Optional[pulumi.Input[builtins.str]] = None,
|
|
31
|
+
oauth_redirect_uri: Optional[pulumi.Input[builtins.str]] = None,
|
|
32
|
+
oauth_refresh_token_validity: Optional[pulumi.Input[builtins.int]] = None,
|
|
33
|
+
oauth_use_secondary_roles: Optional[pulumi.Input[builtins.str]] = None):
|
|
33
34
|
"""
|
|
34
35
|
The set of arguments for constructing a OauthIntegrationForPartnerApplications resource.
|
|
35
|
-
:param pulumi.Input[str] oauth_client: Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
|
|
36
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
37
|
-
:param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
|
|
38
|
-
:param pulumi.Input[str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
39
|
-
:param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
40
|
-
:param pulumi.Input[str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
41
|
-
:param pulumi.Input[str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI. The field should be only set when OAUTH_CLIENT = LOOKER. In any other case the field should be left out empty.
|
|
42
|
-
:param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
43
|
-
:param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
36
|
+
:param pulumi.Input[builtins.str] oauth_client: Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
|
|
37
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
38
|
+
:param pulumi.Input[builtins.str] comment: Specifies a comment for the OAuth integration.
|
|
39
|
+
:param pulumi.Input[builtins.str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
40
|
+
:param pulumi.Input[builtins.str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
41
|
+
:param pulumi.Input[builtins.str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
42
|
+
:param pulumi.Input[builtins.str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI. The field should be only set when OAUTH_CLIENT = LOOKER. In any other case the field should be left out empty.
|
|
43
|
+
:param pulumi.Input[builtins.int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
44
|
+
:param pulumi.Input[builtins.str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
44
45
|
"""
|
|
45
46
|
pulumi.set(__self__, "oauth_client", oauth_client)
|
|
46
47
|
if blocked_roles_lists is not None:
|
|
@@ -62,142 +63,142 @@ class OauthIntegrationForPartnerApplicationsArgs:
|
|
|
62
63
|
|
|
63
64
|
@property
|
|
64
65
|
@pulumi.getter(name="oauthClient")
|
|
65
|
-
def oauth_client(self) -> pulumi.Input[str]:
|
|
66
|
+
def oauth_client(self) -> pulumi.Input[builtins.str]:
|
|
66
67
|
"""
|
|
67
68
|
Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
|
|
68
69
|
"""
|
|
69
70
|
return pulumi.get(self, "oauth_client")
|
|
70
71
|
|
|
71
72
|
@oauth_client.setter
|
|
72
|
-
def oauth_client(self, value: pulumi.Input[str]):
|
|
73
|
+
def oauth_client(self, value: pulumi.Input[builtins.str]):
|
|
73
74
|
pulumi.set(self, "oauth_client", value)
|
|
74
75
|
|
|
75
76
|
@property
|
|
76
77
|
@pulumi.getter(name="blockedRolesLists")
|
|
77
|
-
def blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
78
|
+
def blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
|
78
79
|
"""
|
|
79
80
|
A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
80
81
|
"""
|
|
81
82
|
return pulumi.get(self, "blocked_roles_lists")
|
|
82
83
|
|
|
83
84
|
@blocked_roles_lists.setter
|
|
84
|
-
def blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
85
|
+
def blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
|
85
86
|
pulumi.set(self, "blocked_roles_lists", value)
|
|
86
87
|
|
|
87
88
|
@property
|
|
88
89
|
@pulumi.getter
|
|
89
|
-
def comment(self) -> Optional[pulumi.Input[str]]:
|
|
90
|
+
def comment(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
90
91
|
"""
|
|
91
92
|
Specifies a comment for the OAuth integration.
|
|
92
93
|
"""
|
|
93
94
|
return pulumi.get(self, "comment")
|
|
94
95
|
|
|
95
96
|
@comment.setter
|
|
96
|
-
def comment(self, value: Optional[pulumi.Input[str]]):
|
|
97
|
+
def comment(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
97
98
|
pulumi.set(self, "comment", value)
|
|
98
99
|
|
|
99
100
|
@property
|
|
100
101
|
@pulumi.getter
|
|
101
|
-
def enabled(self) -> Optional[pulumi.Input[str]]:
|
|
102
|
+
def enabled(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
102
103
|
"""
|
|
103
104
|
Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
104
105
|
"""
|
|
105
106
|
return pulumi.get(self, "enabled")
|
|
106
107
|
|
|
107
108
|
@enabled.setter
|
|
108
|
-
def enabled(self, value: Optional[pulumi.Input[str]]):
|
|
109
|
+
def enabled(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
109
110
|
pulumi.set(self, "enabled", value)
|
|
110
111
|
|
|
111
112
|
@property
|
|
112
113
|
@pulumi.getter
|
|
113
|
-
def name(self) -> Optional[pulumi.Input[str]]:
|
|
114
|
+
def name(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
114
115
|
"""
|
|
115
116
|
Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
116
117
|
"""
|
|
117
118
|
return pulumi.get(self, "name")
|
|
118
119
|
|
|
119
120
|
@name.setter
|
|
120
|
-
def name(self, value: Optional[pulumi.Input[str]]):
|
|
121
|
+
def name(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
121
122
|
pulumi.set(self, "name", value)
|
|
122
123
|
|
|
123
124
|
@property
|
|
124
125
|
@pulumi.getter(name="oauthIssueRefreshTokens")
|
|
125
|
-
def oauth_issue_refresh_tokens(self) -> Optional[pulumi.Input[str]]:
|
|
126
|
+
def oauth_issue_refresh_tokens(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
126
127
|
"""
|
|
127
128
|
Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
128
129
|
"""
|
|
129
130
|
return pulumi.get(self, "oauth_issue_refresh_tokens")
|
|
130
131
|
|
|
131
132
|
@oauth_issue_refresh_tokens.setter
|
|
132
|
-
def oauth_issue_refresh_tokens(self, value: Optional[pulumi.Input[str]]):
|
|
133
|
+
def oauth_issue_refresh_tokens(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
133
134
|
pulumi.set(self, "oauth_issue_refresh_tokens", value)
|
|
134
135
|
|
|
135
136
|
@property
|
|
136
137
|
@pulumi.getter(name="oauthRedirectUri")
|
|
137
|
-
def oauth_redirect_uri(self) -> Optional[pulumi.Input[str]]:
|
|
138
|
+
def oauth_redirect_uri(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
138
139
|
"""
|
|
139
140
|
Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI. The field should be only set when OAUTH_CLIENT = LOOKER. In any other case the field should be left out empty.
|
|
140
141
|
"""
|
|
141
142
|
return pulumi.get(self, "oauth_redirect_uri")
|
|
142
143
|
|
|
143
144
|
@oauth_redirect_uri.setter
|
|
144
|
-
def oauth_redirect_uri(self, value: Optional[pulumi.Input[str]]):
|
|
145
|
+
def oauth_redirect_uri(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
145
146
|
pulumi.set(self, "oauth_redirect_uri", value)
|
|
146
147
|
|
|
147
148
|
@property
|
|
148
149
|
@pulumi.getter(name="oauthRefreshTokenValidity")
|
|
149
|
-
def oauth_refresh_token_validity(self) -> Optional[pulumi.Input[int]]:
|
|
150
|
+
def oauth_refresh_token_validity(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
150
151
|
"""
|
|
151
152
|
Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
152
153
|
"""
|
|
153
154
|
return pulumi.get(self, "oauth_refresh_token_validity")
|
|
154
155
|
|
|
155
156
|
@oauth_refresh_token_validity.setter
|
|
156
|
-
def oauth_refresh_token_validity(self, value: Optional[pulumi.Input[int]]):
|
|
157
|
+
def oauth_refresh_token_validity(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
157
158
|
pulumi.set(self, "oauth_refresh_token_validity", value)
|
|
158
159
|
|
|
159
160
|
@property
|
|
160
161
|
@pulumi.getter(name="oauthUseSecondaryRoles")
|
|
161
|
-
def oauth_use_secondary_roles(self) -> Optional[pulumi.Input[str]]:
|
|
162
|
+
def oauth_use_secondary_roles(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
162
163
|
"""
|
|
163
164
|
Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
164
165
|
"""
|
|
165
166
|
return pulumi.get(self, "oauth_use_secondary_roles")
|
|
166
167
|
|
|
167
168
|
@oauth_use_secondary_roles.setter
|
|
168
|
-
def oauth_use_secondary_roles(self, value: Optional[pulumi.Input[str]]):
|
|
169
|
+
def oauth_use_secondary_roles(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
169
170
|
pulumi.set(self, "oauth_use_secondary_roles", value)
|
|
170
171
|
|
|
171
172
|
|
|
172
173
|
@pulumi.input_type
|
|
173
174
|
class _OauthIntegrationForPartnerApplicationsState:
|
|
174
175
|
def __init__(__self__, *,
|
|
175
|
-
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
176
|
-
comment: Optional[pulumi.Input[str]] = None,
|
|
176
|
+
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
177
|
+
comment: Optional[pulumi.Input[builtins.str]] = None,
|
|
177
178
|
describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForPartnerApplicationsDescribeOutputArgs']]]] = None,
|
|
178
|
-
enabled: Optional[pulumi.Input[str]] = None,
|
|
179
|
-
fully_qualified_name: Optional[pulumi.Input[str]] = None,
|
|
180
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
181
|
-
oauth_client: Optional[pulumi.Input[str]] = None,
|
|
182
|
-
oauth_issue_refresh_tokens: Optional[pulumi.Input[str]] = None,
|
|
183
|
-
oauth_redirect_uri: Optional[pulumi.Input[str]] = None,
|
|
184
|
-
oauth_refresh_token_validity: Optional[pulumi.Input[int]] = None,
|
|
185
|
-
oauth_use_secondary_roles: Optional[pulumi.Input[str]] = None,
|
|
179
|
+
enabled: Optional[pulumi.Input[builtins.str]] = None,
|
|
180
|
+
fully_qualified_name: Optional[pulumi.Input[builtins.str]] = None,
|
|
181
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
182
|
+
oauth_client: Optional[pulumi.Input[builtins.str]] = None,
|
|
183
|
+
oauth_issue_refresh_tokens: Optional[pulumi.Input[builtins.str]] = None,
|
|
184
|
+
oauth_redirect_uri: Optional[pulumi.Input[builtins.str]] = None,
|
|
185
|
+
oauth_refresh_token_validity: Optional[pulumi.Input[builtins.int]] = None,
|
|
186
|
+
oauth_use_secondary_roles: Optional[pulumi.Input[builtins.str]] = None,
|
|
186
187
|
related_parameters: Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForPartnerApplicationsRelatedParameterArgs']]]] = None,
|
|
187
188
|
show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForPartnerApplicationsShowOutputArgs']]]] = None):
|
|
188
189
|
"""
|
|
189
190
|
Input properties used for looking up and filtering OauthIntegrationForPartnerApplications resources.
|
|
190
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
191
|
-
:param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
|
|
191
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
192
|
+
:param pulumi.Input[builtins.str] comment: Specifies a comment for the OAuth integration.
|
|
192
193
|
:param pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForPartnerApplicationsDescribeOutputArgs']]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATION` for the given integration.
|
|
193
|
-
:param pulumi.Input[str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
194
|
-
:param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
195
|
-
:param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
196
|
-
:param pulumi.Input[str] oauth_client: Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
|
|
197
|
-
:param pulumi.Input[str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
198
|
-
:param pulumi.Input[str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI. The field should be only set when OAUTH_CLIENT = LOOKER. In any other case the field should be left out empty.
|
|
199
|
-
:param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
200
|
-
:param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
194
|
+
:param pulumi.Input[builtins.str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
195
|
+
:param pulumi.Input[builtins.str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
196
|
+
:param pulumi.Input[builtins.str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
197
|
+
:param pulumi.Input[builtins.str] oauth_client: Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
|
|
198
|
+
:param pulumi.Input[builtins.str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
199
|
+
:param pulumi.Input[builtins.str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI. The field should be only set when OAUTH_CLIENT = LOOKER. In any other case the field should be left out empty.
|
|
200
|
+
:param pulumi.Input[builtins.int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
201
|
+
:param pulumi.Input[builtins.str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
201
202
|
:param pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForPartnerApplicationsRelatedParameterArgs']]] related_parameters: Parameters related to this security integration.
|
|
202
203
|
:param pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForPartnerApplicationsShowOutputArgs']]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATION` for the given integration.
|
|
203
204
|
"""
|
|
@@ -230,26 +231,26 @@ class _OauthIntegrationForPartnerApplicationsState:
|
|
|
230
231
|
|
|
231
232
|
@property
|
|
232
233
|
@pulumi.getter(name="blockedRolesLists")
|
|
233
|
-
def blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
234
|
+
def blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
|
234
235
|
"""
|
|
235
236
|
A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
236
237
|
"""
|
|
237
238
|
return pulumi.get(self, "blocked_roles_lists")
|
|
238
239
|
|
|
239
240
|
@blocked_roles_lists.setter
|
|
240
|
-
def blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
241
|
+
def blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
|
241
242
|
pulumi.set(self, "blocked_roles_lists", value)
|
|
242
243
|
|
|
243
244
|
@property
|
|
244
245
|
@pulumi.getter
|
|
245
|
-
def comment(self) -> Optional[pulumi.Input[str]]:
|
|
246
|
+
def comment(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
246
247
|
"""
|
|
247
248
|
Specifies a comment for the OAuth integration.
|
|
248
249
|
"""
|
|
249
250
|
return pulumi.get(self, "comment")
|
|
250
251
|
|
|
251
252
|
@comment.setter
|
|
252
|
-
def comment(self, value: Optional[pulumi.Input[str]]):
|
|
253
|
+
def comment(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
253
254
|
pulumi.set(self, "comment", value)
|
|
254
255
|
|
|
255
256
|
@property
|
|
@@ -266,98 +267,98 @@ class _OauthIntegrationForPartnerApplicationsState:
|
|
|
266
267
|
|
|
267
268
|
@property
|
|
268
269
|
@pulumi.getter
|
|
269
|
-
def enabled(self) -> Optional[pulumi.Input[str]]:
|
|
270
|
+
def enabled(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
270
271
|
"""
|
|
271
272
|
Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
272
273
|
"""
|
|
273
274
|
return pulumi.get(self, "enabled")
|
|
274
275
|
|
|
275
276
|
@enabled.setter
|
|
276
|
-
def enabled(self, value: Optional[pulumi.Input[str]]):
|
|
277
|
+
def enabled(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
277
278
|
pulumi.set(self, "enabled", value)
|
|
278
279
|
|
|
279
280
|
@property
|
|
280
281
|
@pulumi.getter(name="fullyQualifiedName")
|
|
281
|
-
def fully_qualified_name(self) -> Optional[pulumi.Input[str]]:
|
|
282
|
+
def fully_qualified_name(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
282
283
|
"""
|
|
283
284
|
Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
284
285
|
"""
|
|
285
286
|
return pulumi.get(self, "fully_qualified_name")
|
|
286
287
|
|
|
287
288
|
@fully_qualified_name.setter
|
|
288
|
-
def fully_qualified_name(self, value: Optional[pulumi.Input[str]]):
|
|
289
|
+
def fully_qualified_name(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
289
290
|
pulumi.set(self, "fully_qualified_name", value)
|
|
290
291
|
|
|
291
292
|
@property
|
|
292
293
|
@pulumi.getter
|
|
293
|
-
def name(self) -> Optional[pulumi.Input[str]]:
|
|
294
|
+
def name(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
294
295
|
"""
|
|
295
296
|
Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
296
297
|
"""
|
|
297
298
|
return pulumi.get(self, "name")
|
|
298
299
|
|
|
299
300
|
@name.setter
|
|
300
|
-
def name(self, value: Optional[pulumi.Input[str]]):
|
|
301
|
+
def name(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
301
302
|
pulumi.set(self, "name", value)
|
|
302
303
|
|
|
303
304
|
@property
|
|
304
305
|
@pulumi.getter(name="oauthClient")
|
|
305
|
-
def oauth_client(self) -> Optional[pulumi.Input[str]]:
|
|
306
|
+
def oauth_client(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
306
307
|
"""
|
|
307
308
|
Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
|
|
308
309
|
"""
|
|
309
310
|
return pulumi.get(self, "oauth_client")
|
|
310
311
|
|
|
311
312
|
@oauth_client.setter
|
|
312
|
-
def oauth_client(self, value: Optional[pulumi.Input[str]]):
|
|
313
|
+
def oauth_client(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
313
314
|
pulumi.set(self, "oauth_client", value)
|
|
314
315
|
|
|
315
316
|
@property
|
|
316
317
|
@pulumi.getter(name="oauthIssueRefreshTokens")
|
|
317
|
-
def oauth_issue_refresh_tokens(self) -> Optional[pulumi.Input[str]]:
|
|
318
|
+
def oauth_issue_refresh_tokens(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
318
319
|
"""
|
|
319
320
|
Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
320
321
|
"""
|
|
321
322
|
return pulumi.get(self, "oauth_issue_refresh_tokens")
|
|
322
323
|
|
|
323
324
|
@oauth_issue_refresh_tokens.setter
|
|
324
|
-
def oauth_issue_refresh_tokens(self, value: Optional[pulumi.Input[str]]):
|
|
325
|
+
def oauth_issue_refresh_tokens(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
325
326
|
pulumi.set(self, "oauth_issue_refresh_tokens", value)
|
|
326
327
|
|
|
327
328
|
@property
|
|
328
329
|
@pulumi.getter(name="oauthRedirectUri")
|
|
329
|
-
def oauth_redirect_uri(self) -> Optional[pulumi.Input[str]]:
|
|
330
|
+
def oauth_redirect_uri(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
330
331
|
"""
|
|
331
332
|
Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI. The field should be only set when OAUTH_CLIENT = LOOKER. In any other case the field should be left out empty.
|
|
332
333
|
"""
|
|
333
334
|
return pulumi.get(self, "oauth_redirect_uri")
|
|
334
335
|
|
|
335
336
|
@oauth_redirect_uri.setter
|
|
336
|
-
def oauth_redirect_uri(self, value: Optional[pulumi.Input[str]]):
|
|
337
|
+
def oauth_redirect_uri(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
337
338
|
pulumi.set(self, "oauth_redirect_uri", value)
|
|
338
339
|
|
|
339
340
|
@property
|
|
340
341
|
@pulumi.getter(name="oauthRefreshTokenValidity")
|
|
341
|
-
def oauth_refresh_token_validity(self) -> Optional[pulumi.Input[int]]:
|
|
342
|
+
def oauth_refresh_token_validity(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
342
343
|
"""
|
|
343
344
|
Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
344
345
|
"""
|
|
345
346
|
return pulumi.get(self, "oauth_refresh_token_validity")
|
|
346
347
|
|
|
347
348
|
@oauth_refresh_token_validity.setter
|
|
348
|
-
def oauth_refresh_token_validity(self, value: Optional[pulumi.Input[int]]):
|
|
349
|
+
def oauth_refresh_token_validity(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
349
350
|
pulumi.set(self, "oauth_refresh_token_validity", value)
|
|
350
351
|
|
|
351
352
|
@property
|
|
352
353
|
@pulumi.getter(name="oauthUseSecondaryRoles")
|
|
353
|
-
def oauth_use_secondary_roles(self) -> Optional[pulumi.Input[str]]:
|
|
354
|
+
def oauth_use_secondary_roles(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
354
355
|
"""
|
|
355
356
|
Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
356
357
|
"""
|
|
357
358
|
return pulumi.get(self, "oauth_use_secondary_roles")
|
|
358
359
|
|
|
359
360
|
@oauth_use_secondary_roles.setter
|
|
360
|
-
def oauth_use_secondary_roles(self, value: Optional[pulumi.Input[str]]):
|
|
361
|
+
def oauth_use_secondary_roles(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
361
362
|
pulumi.set(self, "oauth_use_secondary_roles", value)
|
|
362
363
|
|
|
363
364
|
@property
|
|
@@ -390,15 +391,15 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
390
391
|
def __init__(__self__,
|
|
391
392
|
resource_name: str,
|
|
392
393
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
393
|
-
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
394
|
-
comment: Optional[pulumi.Input[str]] = None,
|
|
395
|
-
enabled: Optional[pulumi.Input[str]] = None,
|
|
396
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
397
|
-
oauth_client: Optional[pulumi.Input[str]] = None,
|
|
398
|
-
oauth_issue_refresh_tokens: Optional[pulumi.Input[str]] = None,
|
|
399
|
-
oauth_redirect_uri: Optional[pulumi.Input[str]] = None,
|
|
400
|
-
oauth_refresh_token_validity: Optional[pulumi.Input[int]] = None,
|
|
401
|
-
oauth_use_secondary_roles: Optional[pulumi.Input[str]] = None,
|
|
394
|
+
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
395
|
+
comment: Optional[pulumi.Input[builtins.str]] = None,
|
|
396
|
+
enabled: Optional[pulumi.Input[builtins.str]] = None,
|
|
397
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
398
|
+
oauth_client: Optional[pulumi.Input[builtins.str]] = None,
|
|
399
|
+
oauth_issue_refresh_tokens: Optional[pulumi.Input[builtins.str]] = None,
|
|
400
|
+
oauth_redirect_uri: Optional[pulumi.Input[builtins.str]] = None,
|
|
401
|
+
oauth_refresh_token_validity: Optional[pulumi.Input[builtins.int]] = None,
|
|
402
|
+
oauth_use_secondary_roles: Optional[pulumi.Input[builtins.str]] = None,
|
|
402
403
|
__props__=None):
|
|
403
404
|
"""
|
|
404
405
|
## Import
|
|
@@ -409,15 +410,15 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
409
410
|
|
|
410
411
|
:param str resource_name: The name of the resource.
|
|
411
412
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
412
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
413
|
-
:param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
|
|
414
|
-
:param pulumi.Input[str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
415
|
-
:param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
416
|
-
:param pulumi.Input[str] oauth_client: Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
|
|
417
|
-
:param pulumi.Input[str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
418
|
-
:param pulumi.Input[str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI. The field should be only set when OAUTH_CLIENT = LOOKER. In any other case the field should be left out empty.
|
|
419
|
-
:param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
420
|
-
:param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
413
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
414
|
+
:param pulumi.Input[builtins.str] comment: Specifies a comment for the OAuth integration.
|
|
415
|
+
:param pulumi.Input[builtins.str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
416
|
+
:param pulumi.Input[builtins.str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
417
|
+
:param pulumi.Input[builtins.str] oauth_client: Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
|
|
418
|
+
:param pulumi.Input[builtins.str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
419
|
+
:param pulumi.Input[builtins.str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI. The field should be only set when OAUTH_CLIENT = LOOKER. In any other case the field should be left out empty.
|
|
420
|
+
:param pulumi.Input[builtins.int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
421
|
+
:param pulumi.Input[builtins.str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
421
422
|
"""
|
|
422
423
|
...
|
|
423
424
|
@overload
|
|
@@ -447,15 +448,15 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
447
448
|
def _internal_init(__self__,
|
|
448
449
|
resource_name: str,
|
|
449
450
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
450
|
-
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
451
|
-
comment: Optional[pulumi.Input[str]] = None,
|
|
452
|
-
enabled: Optional[pulumi.Input[str]] = None,
|
|
453
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
454
|
-
oauth_client: Optional[pulumi.Input[str]] = None,
|
|
455
|
-
oauth_issue_refresh_tokens: Optional[pulumi.Input[str]] = None,
|
|
456
|
-
oauth_redirect_uri: Optional[pulumi.Input[str]] = None,
|
|
457
|
-
oauth_refresh_token_validity: Optional[pulumi.Input[int]] = None,
|
|
458
|
-
oauth_use_secondary_roles: Optional[pulumi.Input[str]] = None,
|
|
451
|
+
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
452
|
+
comment: Optional[pulumi.Input[builtins.str]] = None,
|
|
453
|
+
enabled: Optional[pulumi.Input[builtins.str]] = None,
|
|
454
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
455
|
+
oauth_client: Optional[pulumi.Input[builtins.str]] = None,
|
|
456
|
+
oauth_issue_refresh_tokens: Optional[pulumi.Input[builtins.str]] = None,
|
|
457
|
+
oauth_redirect_uri: Optional[pulumi.Input[builtins.str]] = None,
|
|
458
|
+
oauth_refresh_token_validity: Optional[pulumi.Input[builtins.int]] = None,
|
|
459
|
+
oauth_use_secondary_roles: Optional[pulumi.Input[builtins.str]] = None,
|
|
459
460
|
__props__=None):
|
|
460
461
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
461
462
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -490,17 +491,17 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
490
491
|
def get(resource_name: str,
|
|
491
492
|
id: pulumi.Input[str],
|
|
492
493
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
493
|
-
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
494
|
-
comment: Optional[pulumi.Input[str]] = None,
|
|
494
|
+
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
495
|
+
comment: Optional[pulumi.Input[builtins.str]] = None,
|
|
495
496
|
describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForPartnerApplicationsDescribeOutputArgs', 'OauthIntegrationForPartnerApplicationsDescribeOutputArgsDict']]]]] = None,
|
|
496
|
-
enabled: Optional[pulumi.Input[str]] = None,
|
|
497
|
-
fully_qualified_name: Optional[pulumi.Input[str]] = None,
|
|
498
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
499
|
-
oauth_client: Optional[pulumi.Input[str]] = None,
|
|
500
|
-
oauth_issue_refresh_tokens: Optional[pulumi.Input[str]] = None,
|
|
501
|
-
oauth_redirect_uri: Optional[pulumi.Input[str]] = None,
|
|
502
|
-
oauth_refresh_token_validity: Optional[pulumi.Input[int]] = None,
|
|
503
|
-
oauth_use_secondary_roles: Optional[pulumi.Input[str]] = None,
|
|
497
|
+
enabled: Optional[pulumi.Input[builtins.str]] = None,
|
|
498
|
+
fully_qualified_name: Optional[pulumi.Input[builtins.str]] = None,
|
|
499
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
500
|
+
oauth_client: Optional[pulumi.Input[builtins.str]] = None,
|
|
501
|
+
oauth_issue_refresh_tokens: Optional[pulumi.Input[builtins.str]] = None,
|
|
502
|
+
oauth_redirect_uri: Optional[pulumi.Input[builtins.str]] = None,
|
|
503
|
+
oauth_refresh_token_validity: Optional[pulumi.Input[builtins.int]] = None,
|
|
504
|
+
oauth_use_secondary_roles: Optional[pulumi.Input[builtins.str]] = None,
|
|
504
505
|
related_parameters: Optional[pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForPartnerApplicationsRelatedParameterArgs', 'OauthIntegrationForPartnerApplicationsRelatedParameterArgsDict']]]]] = None,
|
|
505
506
|
show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForPartnerApplicationsShowOutputArgs', 'OauthIntegrationForPartnerApplicationsShowOutputArgsDict']]]]] = None) -> 'OauthIntegrationForPartnerApplications':
|
|
506
507
|
"""
|
|
@@ -510,17 +511,17 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
510
511
|
:param str resource_name: The unique name of the resulting resource.
|
|
511
512
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
512
513
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
513
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
514
|
-
:param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
|
|
514
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
515
|
+
:param pulumi.Input[builtins.str] comment: Specifies a comment for the OAuth integration.
|
|
515
516
|
:param pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForPartnerApplicationsDescribeOutputArgs', 'OauthIntegrationForPartnerApplicationsDescribeOutputArgsDict']]]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATION` for the given integration.
|
|
516
|
-
:param pulumi.Input[str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
517
|
-
:param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
518
|
-
:param pulumi.Input[str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
519
|
-
:param pulumi.Input[str] oauth_client: Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
|
|
520
|
-
:param pulumi.Input[str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
521
|
-
:param pulumi.Input[str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI. The field should be only set when OAUTH_CLIENT = LOOKER. In any other case the field should be left out empty.
|
|
522
|
-
:param pulumi.Input[int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
523
|
-
:param pulumi.Input[str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
517
|
+
:param pulumi.Input[builtins.str] enabled: Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
518
|
+
:param pulumi.Input[builtins.str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
519
|
+
:param pulumi.Input[builtins.str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
520
|
+
:param pulumi.Input[builtins.str] oauth_client: Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
|
|
521
|
+
:param pulumi.Input[builtins.str] oauth_issue_refresh_tokens: Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
522
|
+
:param pulumi.Input[builtins.str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI. The field should be only set when OAUTH_CLIENT = LOOKER. In any other case the field should be left out empty.
|
|
523
|
+
:param pulumi.Input[builtins.int] oauth_refresh_token_validity: Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
524
|
+
:param pulumi.Input[builtins.str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
524
525
|
:param pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForPartnerApplicationsRelatedParameterArgs', 'OauthIntegrationForPartnerApplicationsRelatedParameterArgsDict']]]] related_parameters: Parameters related to this security integration.
|
|
525
526
|
:param pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForPartnerApplicationsShowOutputArgs', 'OauthIntegrationForPartnerApplicationsShowOutputArgsDict']]]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATION` for the given integration.
|
|
526
527
|
"""
|
|
@@ -545,7 +546,7 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
545
546
|
|
|
546
547
|
@property
|
|
547
548
|
@pulumi.getter(name="blockedRolesLists")
|
|
548
|
-
def blocked_roles_lists(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
|
549
|
+
def blocked_roles_lists(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
|
|
549
550
|
"""
|
|
550
551
|
A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
551
552
|
"""
|
|
@@ -553,7 +554,7 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
553
554
|
|
|
554
555
|
@property
|
|
555
556
|
@pulumi.getter
|
|
556
|
-
def comment(self) -> pulumi.Output[Optional[str]]:
|
|
557
|
+
def comment(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
557
558
|
"""
|
|
558
559
|
Specifies a comment for the OAuth integration.
|
|
559
560
|
"""
|
|
@@ -569,7 +570,7 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
569
570
|
|
|
570
571
|
@property
|
|
571
572
|
@pulumi.getter
|
|
572
|
-
def enabled(self) -> pulumi.Output[Optional[str]]:
|
|
573
|
+
def enabled(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
573
574
|
"""
|
|
574
575
|
Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
575
576
|
"""
|
|
@@ -577,7 +578,7 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
577
578
|
|
|
578
579
|
@property
|
|
579
580
|
@pulumi.getter(name="fullyQualifiedName")
|
|
580
|
-
def fully_qualified_name(self) -> pulumi.Output[str]:
|
|
581
|
+
def fully_qualified_name(self) -> pulumi.Output[builtins.str]:
|
|
581
582
|
"""
|
|
582
583
|
Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
583
584
|
"""
|
|
@@ -585,7 +586,7 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
585
586
|
|
|
586
587
|
@property
|
|
587
588
|
@pulumi.getter
|
|
588
|
-
def name(self) -> pulumi.Output[str]:
|
|
589
|
+
def name(self) -> pulumi.Output[builtins.str]:
|
|
589
590
|
"""
|
|
590
591
|
Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
591
592
|
"""
|
|
@@ -593,7 +594,7 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
593
594
|
|
|
594
595
|
@property
|
|
595
596
|
@pulumi.getter(name="oauthClient")
|
|
596
|
-
def oauth_client(self) -> pulumi.Output[str]:
|
|
597
|
+
def oauth_client(self) -> pulumi.Output[builtins.str]:
|
|
597
598
|
"""
|
|
598
599
|
Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
|
|
599
600
|
"""
|
|
@@ -601,7 +602,7 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
601
602
|
|
|
602
603
|
@property
|
|
603
604
|
@pulumi.getter(name="oauthIssueRefreshTokens")
|
|
604
|
-
def oauth_issue_refresh_tokens(self) -> pulumi.Output[Optional[str]]:
|
|
605
|
+
def oauth_issue_refresh_tokens(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
605
606
|
"""
|
|
606
607
|
Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
607
608
|
"""
|
|
@@ -609,7 +610,7 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
609
610
|
|
|
610
611
|
@property
|
|
611
612
|
@pulumi.getter(name="oauthRedirectUri")
|
|
612
|
-
def oauth_redirect_uri(self) -> pulumi.Output[Optional[str]]:
|
|
613
|
+
def oauth_redirect_uri(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
613
614
|
"""
|
|
614
615
|
Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI. The field should be only set when OAUTH_CLIENT = LOOKER. In any other case the field should be left out empty.
|
|
615
616
|
"""
|
|
@@ -617,7 +618,7 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
617
618
|
|
|
618
619
|
@property
|
|
619
620
|
@pulumi.getter(name="oauthRefreshTokenValidity")
|
|
620
|
-
def oauth_refresh_token_validity(self) -> pulumi.Output[Optional[int]]:
|
|
621
|
+
def oauth_refresh_token_validity(self) -> pulumi.Output[Optional[builtins.int]]:
|
|
621
622
|
"""
|
|
622
623
|
Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
623
624
|
"""
|
|
@@ -625,7 +626,7 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
625
626
|
|
|
626
627
|
@property
|
|
627
628
|
@pulumi.getter(name="oauthUseSecondaryRoles")
|
|
628
|
-
def oauth_use_secondary_roles(self) -> pulumi.Output[Optional[str]]:
|
|
629
|
+
def oauth_use_secondary_roles(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
629
630
|
"""
|
|
630
631
|
Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
631
632
|
"""
|