pulumi-snowflake 2.3.0a1753339260__py3-none-any.whl → 2.3.0a1753398370__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-snowflake might be problematic. Click here for more details.
- pulumi_snowflake/__init__.py +1 -1
- pulumi_snowflake/_inputs.py +16796 -16797
- pulumi_snowflake/account.py +252 -253
- pulumi_snowflake/account_authentication_policy_attachment.py +18 -19
- pulumi_snowflake/account_parameter.py +35 -36
- pulumi_snowflake/account_password_policy_attachment.py +18 -19
- pulumi_snowflake/account_role.py +42 -43
- pulumi_snowflake/alert.py +149 -150
- pulumi_snowflake/api_authentication_integration_with_authorization_code_grant.py +197 -198
- pulumi_snowflake/api_authentication_integration_with_client_credentials.py +180 -181
- pulumi_snowflake/api_authentication_integration_with_jwt_bearer.py +193 -194
- pulumi_snowflake/api_integration.py +251 -252
- pulumi_snowflake/authentication_policy.py +167 -168
- pulumi_snowflake/compute_pool.py +167 -168
- pulumi_snowflake/config/__init__.py +1 -1
- pulumi_snowflake/config/__init__.pyi +1 -2
- pulumi_snowflake/config/outputs.py +21 -22
- pulumi_snowflake/config/vars.py +43 -44
- pulumi_snowflake/cortex_search_service.py +191 -192
- pulumi_snowflake/current_account.py +2088 -2089
- pulumi_snowflake/database.py +353 -354
- pulumi_snowflake/database_role.py +63 -64
- pulumi_snowflake/dynamic_table.py +274 -275
- pulumi_snowflake/email_notification_integration.py +70 -71
- pulumi_snowflake/execute.py +61 -62
- pulumi_snowflake/external_function.py +280 -281
- pulumi_snowflake/external_oauth_integration.py +288 -289
- pulumi_snowflake/external_table.py +246 -247
- pulumi_snowflake/external_volume.py +68 -69
- pulumi_snowflake/failover_group.py +135 -136
- pulumi_snowflake/file_format.py +622 -623
- pulumi_snowflake/function_java.py +320 -321
- pulumi_snowflake/function_javascript.py +243 -244
- pulumi_snowflake/function_python.py +334 -335
- pulumi_snowflake/function_scala.py +320 -321
- pulumi_snowflake/function_sql.py +226 -227
- pulumi_snowflake/get_account_roles.py +16 -17
- pulumi_snowflake/get_accounts.py +16 -17
- pulumi_snowflake/get_alerts.py +22 -23
- pulumi_snowflake/get_compute_pools.py +23 -24
- pulumi_snowflake/get_connections.py +10 -11
- pulumi_snowflake/get_cortex_search_services.py +18 -19
- pulumi_snowflake/get_current_account.py +9 -10
- pulumi_snowflake/get_current_role.py +5 -6
- pulumi_snowflake/get_database.py +25 -26
- pulumi_snowflake/get_database_role.py +19 -20
- pulumi_snowflake/get_database_roles.py +17 -18
- pulumi_snowflake/get_databases.py +29 -30
- pulumi_snowflake/get_dynamic_tables.py +13 -14
- pulumi_snowflake/get_external_functions.py +16 -17
- pulumi_snowflake/get_external_tables.py +16 -17
- pulumi_snowflake/get_failover_groups.py +10 -11
- pulumi_snowflake/get_file_formats.py +16 -17
- pulumi_snowflake/get_functions.py +16 -17
- pulumi_snowflake/get_git_repositories.py +18 -19
- pulumi_snowflake/get_grants.py +9 -10
- pulumi_snowflake/get_image_repositories.py +11 -12
- pulumi_snowflake/get_masking_policies.py +18 -19
- pulumi_snowflake/get_materialized_views.py +16 -17
- pulumi_snowflake/get_network_policies.py +16 -17
- pulumi_snowflake/get_parameters.py +34 -35
- pulumi_snowflake/get_pipes.py +16 -17
- pulumi_snowflake/get_procedures.py +16 -17
- pulumi_snowflake/get_resource_monitors.py +10 -11
- pulumi_snowflake/get_row_access_policies.py +18 -19
- pulumi_snowflake/get_schemas.py +30 -31
- pulumi_snowflake/get_secrets.py +17 -18
- pulumi_snowflake/get_security_integrations.py +16 -17
- pulumi_snowflake/get_sequences.py +16 -17
- pulumi_snowflake/get_services.py +30 -31
- pulumi_snowflake/get_shares.py +10 -11
- pulumi_snowflake/get_stages.py +16 -17
- pulumi_snowflake/get_storage_integrations.py +4 -5
- pulumi_snowflake/get_streamlits.py +18 -19
- pulumi_snowflake/get_streams.py +24 -25
- pulumi_snowflake/get_system_generate_scim_access_token.py +11 -12
- pulumi_snowflake/get_system_get_aws_sns_iam_policy.py +11 -12
- pulumi_snowflake/get_system_get_private_link_config.py +21 -22
- pulumi_snowflake/get_system_get_snowflake_platform_info.py +7 -8
- pulumi_snowflake/get_tables.py +24 -25
- pulumi_snowflake/get_tags.py +11 -12
- pulumi_snowflake/get_tasks.py +30 -31
- pulumi_snowflake/get_users.py +29 -30
- pulumi_snowflake/get_views.py +24 -25
- pulumi_snowflake/get_warehouses.py +22 -23
- pulumi_snowflake/git_repository.py +133 -134
- pulumi_snowflake/grant_account_role.py +52 -53
- pulumi_snowflake/grant_application_role.py +52 -53
- pulumi_snowflake/grant_database_role.py +69 -70
- pulumi_snowflake/grant_ownership.py +55 -56
- pulumi_snowflake/grant_privileges_to_account_role.py +125 -126
- pulumi_snowflake/grant_privileges_to_database_role.py +122 -123
- pulumi_snowflake/grant_privileges_to_share.py +154 -155
- pulumi_snowflake/image_repository.py +80 -81
- pulumi_snowflake/job_service.py +148 -149
- pulumi_snowflake/legacy_service_user.py +1269 -1270
- pulumi_snowflake/managed_account.py +140 -141
- pulumi_snowflake/masking_policy.py +136 -137
- pulumi_snowflake/materialized_view.py +149 -150
- pulumi_snowflake/network_policy.py +116 -117
- pulumi_snowflake/network_policy_attachment.py +52 -53
- pulumi_snowflake/network_rule.py +129 -130
- pulumi_snowflake/notification_integration.py +298 -299
- pulumi_snowflake/oauth_integration_for_custom_clients.py +263 -264
- pulumi_snowflake/oauth_integration_for_partner_applications.py +169 -170
- pulumi_snowflake/object_parameter.py +72 -73
- pulumi_snowflake/outputs.py +15510 -15511
- pulumi_snowflake/password_policy.py +299 -300
- pulumi_snowflake/pipe.py +181 -182
- pulumi_snowflake/primary_connection.py +70 -71
- pulumi_snowflake/procedure_java.py +341 -342
- pulumi_snowflake/procedure_javascript.py +247 -248
- pulumi_snowflake/procedure_python.py +338 -339
- pulumi_snowflake/procedure_scala.py +341 -342
- pulumi_snowflake/procedure_sql.py +247 -248
- pulumi_snowflake/provider.py +377 -378
- pulumi_snowflake/pulumi-plugin.json +1 -1
- pulumi_snowflake/resource_monitor.py +165 -166
- pulumi_snowflake/row_access_policy.py +102 -103
- pulumi_snowflake/saml2_integration.py +303 -304
- pulumi_snowflake/schema.py +390 -391
- pulumi_snowflake/scim_integration.py +133 -134
- pulumi_snowflake/secondary_connection.py +72 -73
- pulumi_snowflake/secondary_database.py +350 -351
- pulumi_snowflake/secret_with_authorization_code_grant.py +138 -139
- pulumi_snowflake/secret_with_basic_authentication.py +121 -122
- pulumi_snowflake/secret_with_client_credentials.py +125 -126
- pulumi_snowflake/secret_with_generic_string.py +104 -105
- pulumi_snowflake/sequence.py +121 -122
- pulumi_snowflake/service.py +233 -234
- pulumi_snowflake/service_user.py +1239 -1240
- pulumi_snowflake/share.py +61 -62
- pulumi_snowflake/shared_database.py +299 -300
- pulumi_snowflake/stage.py +234 -235
- pulumi_snowflake/storage_integration.py +230 -231
- pulumi_snowflake/stream_on_directory_table.py +128 -129
- pulumi_snowflake/stream_on_external_table.py +151 -152
- pulumi_snowflake/stream_on_table.py +164 -165
- pulumi_snowflake/stream_on_view.py +164 -165
- pulumi_snowflake/streamlit.py +184 -185
- pulumi_snowflake/table.py +147 -148
- pulumi_snowflake/table_column_masking_policy_application.py +52 -53
- pulumi_snowflake/table_constraint.py +191 -192
- pulumi_snowflake/tag.py +114 -115
- pulumi_snowflake/tag_association.py +86 -87
- pulumi_snowflake/task.py +1224 -1225
- pulumi_snowflake/user.py +1346 -1347
- pulumi_snowflake/user_authentication_policy_attachment.py +35 -36
- pulumi_snowflake/user_password_policy_attachment.py +35 -36
- pulumi_snowflake/user_public_keys.py +52 -53
- pulumi_snowflake/view.py +187 -188
- pulumi_snowflake/warehouse.py +286 -287
- {pulumi_snowflake-2.3.0a1753339260.dist-info → pulumi_snowflake-2.3.0a1753398370.dist-info}/METADATA +1 -1
- pulumi_snowflake-2.3.0a1753398370.dist-info/RECORD +158 -0
- pulumi_snowflake-2.3.0a1753339260.dist-info/RECORD +0 -158
- {pulumi_snowflake-2.3.0a1753339260.dist-info → pulumi_snowflake-2.3.0a1753398370.dist-info}/WHEEL +0 -0
- {pulumi_snowflake-2.3.0a1753339260.dist-info → pulumi_snowflake-2.3.0a1753398370.dist-info}/top_level.txt +0 -0
|
@@ -2,8 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import builtins
|
|
6
|
-
import copy
|
|
5
|
+
import builtins as _builtins
|
|
7
6
|
import warnings
|
|
8
7
|
import sys
|
|
9
8
|
import pulumi
|
|
@@ -22,42 +21,42 @@ __all__ = ['Saml2IntegrationArgs', 'Saml2Integration']
|
|
|
22
21
|
@pulumi.input_type
|
|
23
22
|
class Saml2IntegrationArgs:
|
|
24
23
|
def __init__(__self__, *,
|
|
25
|
-
saml2_issuer: pulumi.Input[
|
|
26
|
-
saml2_provider: pulumi.Input[
|
|
27
|
-
saml2_sso_url: pulumi.Input[
|
|
28
|
-
saml2_x509_cert: pulumi.Input[
|
|
29
|
-
allowed_email_patterns: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
30
|
-
allowed_user_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
31
|
-
comment: Optional[pulumi.Input[
|
|
32
|
-
enabled: Optional[pulumi.Input[
|
|
33
|
-
name: Optional[pulumi.Input[
|
|
34
|
-
saml2_enable_sp_initiated: Optional[pulumi.Input[
|
|
35
|
-
saml2_force_authn: Optional[pulumi.Input[
|
|
36
|
-
saml2_post_logout_redirect_url: Optional[pulumi.Input[
|
|
37
|
-
saml2_requested_nameid_format: Optional[pulumi.Input[
|
|
38
|
-
saml2_sign_request: Optional[pulumi.Input[
|
|
39
|
-
saml2_snowflake_acs_url: Optional[pulumi.Input[
|
|
40
|
-
saml2_snowflake_issuer_url: Optional[pulumi.Input[
|
|
41
|
-
saml2_sp_initiated_login_page_label: Optional[pulumi.Input[
|
|
24
|
+
saml2_issuer: pulumi.Input[_builtins.str],
|
|
25
|
+
saml2_provider: pulumi.Input[_builtins.str],
|
|
26
|
+
saml2_sso_url: pulumi.Input[_builtins.str],
|
|
27
|
+
saml2_x509_cert: pulumi.Input[_builtins.str],
|
|
28
|
+
allowed_email_patterns: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
29
|
+
allowed_user_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
30
|
+
comment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
31
|
+
enabled: Optional[pulumi.Input[_builtins.str]] = None,
|
|
32
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
33
|
+
saml2_enable_sp_initiated: Optional[pulumi.Input[_builtins.str]] = None,
|
|
34
|
+
saml2_force_authn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
35
|
+
saml2_post_logout_redirect_url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
36
|
+
saml2_requested_nameid_format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
37
|
+
saml2_sign_request: Optional[pulumi.Input[_builtins.str]] = None,
|
|
38
|
+
saml2_snowflake_acs_url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
39
|
+
saml2_snowflake_issuer_url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
40
|
+
saml2_sp_initiated_login_page_label: Optional[pulumi.Input[_builtins.str]] = None):
|
|
42
41
|
"""
|
|
43
42
|
The set of arguments for constructing a Saml2Integration resource.
|
|
44
|
-
:param pulumi.Input[
|
|
45
|
-
:param pulumi.Input[
|
|
46
|
-
:param pulumi.Input[
|
|
47
|
-
:param pulumi.Input[
|
|
48
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
49
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
50
|
-
:param pulumi.Input[
|
|
51
|
-
:param pulumi.Input[
|
|
52
|
-
:param pulumi.Input[
|
|
53
|
-
:param pulumi.Input[
|
|
54
|
-
:param pulumi.Input[
|
|
55
|
-
:param pulumi.Input[
|
|
56
|
-
:param pulumi.Input[
|
|
57
|
-
:param pulumi.Input[
|
|
58
|
-
:param pulumi.Input[
|
|
59
|
-
:param pulumi.Input[
|
|
60
|
-
:param pulumi.Input[
|
|
43
|
+
:param pulumi.Input[_builtins.str] saml2_issuer: The string containing the IdP EntityID / Issuer.
|
|
44
|
+
:param pulumi.Input[_builtins.str] saml2_provider: The string describing the IdP. Valid options are: `OKTA` | `ADFS` | `CUSTOM`.
|
|
45
|
+
:param pulumi.Input[_builtins.str] saml2_sso_url: The string containing the IdP SSO URL, where the user should be redirected by Snowflake (the Service Provider) with a SAML AuthnRequest message.
|
|
46
|
+
:param pulumi.Input[_builtins.str] saml2_x509_cert: The Base64 encoded IdP signing certificate on a single line without the leading -----BEGIN CERTIFICATE----- and ending -----END CERTIFICATE----- markers.
|
|
47
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_email_patterns: A list of regular expressions that email addresses are matched against to authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
|
|
48
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_user_domains: A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
|
|
49
|
+
:param pulumi.Input[_builtins.str] comment: Specifies a comment for the integration.
|
|
50
|
+
:param pulumi.Input[_builtins.str] enabled: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
51
|
+
:param pulumi.Input[_builtins.str] name: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
52
|
+
:param pulumi.Input[_builtins.str] saml2_enable_sp_initiated: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
53
|
+
:param pulumi.Input[_builtins.str] saml2_force_authn: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
54
|
+
:param pulumi.Input[_builtins.str] saml2_post_logout_redirect_url: The endpoint to which Snowflake redirects users after clicking the Log Out button in the classic Snowflake web interface. Snowflake terminates the Snowflake session upon redirecting to the specified endpoint.
|
|
55
|
+
:param pulumi.Input[_builtins.str] saml2_requested_nameid_format: The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. Valid options are: `urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified` | `urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress` | `urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName` | `urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName` | `urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos` | `urn:oasis:names:tc:SAML:2.0:nameid-format:persistent` | `urn:oasis:names:tc:SAML:2.0:nameid-format:transient`.
|
|
56
|
+
:param pulumi.Input[_builtins.str] saml2_sign_request: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
57
|
+
:param pulumi.Input[_builtins.str] saml2_snowflake_acs_url: The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
|
|
58
|
+
:param pulumi.Input[_builtins.str] saml2_snowflake_issuer_url: The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
|
|
59
|
+
:param pulumi.Input[_builtins.str] saml2_sp_initiated_login_page_label: The string containing the label to display after the Log In With button on the login page. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
|
|
61
60
|
"""
|
|
62
61
|
pulumi.set(__self__, "saml2_issuer", saml2_issuer)
|
|
63
62
|
pulumi.set(__self__, "saml2_provider", saml2_provider)
|
|
@@ -90,255 +89,255 @@ class Saml2IntegrationArgs:
|
|
|
90
89
|
if saml2_sp_initiated_login_page_label is not None:
|
|
91
90
|
pulumi.set(__self__, "saml2_sp_initiated_login_page_label", saml2_sp_initiated_login_page_label)
|
|
92
91
|
|
|
93
|
-
@property
|
|
92
|
+
@_builtins.property
|
|
94
93
|
@pulumi.getter(name="saml2Issuer")
|
|
95
|
-
def saml2_issuer(self) -> pulumi.Input[
|
|
94
|
+
def saml2_issuer(self) -> pulumi.Input[_builtins.str]:
|
|
96
95
|
"""
|
|
97
96
|
The string containing the IdP EntityID / Issuer.
|
|
98
97
|
"""
|
|
99
98
|
return pulumi.get(self, "saml2_issuer")
|
|
100
99
|
|
|
101
100
|
@saml2_issuer.setter
|
|
102
|
-
def saml2_issuer(self, value: pulumi.Input[
|
|
101
|
+
def saml2_issuer(self, value: pulumi.Input[_builtins.str]):
|
|
103
102
|
pulumi.set(self, "saml2_issuer", value)
|
|
104
103
|
|
|
105
|
-
@property
|
|
104
|
+
@_builtins.property
|
|
106
105
|
@pulumi.getter(name="saml2Provider")
|
|
107
|
-
def saml2_provider(self) -> pulumi.Input[
|
|
106
|
+
def saml2_provider(self) -> pulumi.Input[_builtins.str]:
|
|
108
107
|
"""
|
|
109
108
|
The string describing the IdP. Valid options are: `OKTA` | `ADFS` | `CUSTOM`.
|
|
110
109
|
"""
|
|
111
110
|
return pulumi.get(self, "saml2_provider")
|
|
112
111
|
|
|
113
112
|
@saml2_provider.setter
|
|
114
|
-
def saml2_provider(self, value: pulumi.Input[
|
|
113
|
+
def saml2_provider(self, value: pulumi.Input[_builtins.str]):
|
|
115
114
|
pulumi.set(self, "saml2_provider", value)
|
|
116
115
|
|
|
117
|
-
@property
|
|
116
|
+
@_builtins.property
|
|
118
117
|
@pulumi.getter(name="saml2SsoUrl")
|
|
119
|
-
def saml2_sso_url(self) -> pulumi.Input[
|
|
118
|
+
def saml2_sso_url(self) -> pulumi.Input[_builtins.str]:
|
|
120
119
|
"""
|
|
121
120
|
The string containing the IdP SSO URL, where the user should be redirected by Snowflake (the Service Provider) with a SAML AuthnRequest message.
|
|
122
121
|
"""
|
|
123
122
|
return pulumi.get(self, "saml2_sso_url")
|
|
124
123
|
|
|
125
124
|
@saml2_sso_url.setter
|
|
126
|
-
def saml2_sso_url(self, value: pulumi.Input[
|
|
125
|
+
def saml2_sso_url(self, value: pulumi.Input[_builtins.str]):
|
|
127
126
|
pulumi.set(self, "saml2_sso_url", value)
|
|
128
127
|
|
|
129
|
-
@property
|
|
128
|
+
@_builtins.property
|
|
130
129
|
@pulumi.getter(name="saml2X509Cert")
|
|
131
|
-
def saml2_x509_cert(self) -> pulumi.Input[
|
|
130
|
+
def saml2_x509_cert(self) -> pulumi.Input[_builtins.str]:
|
|
132
131
|
"""
|
|
133
132
|
The Base64 encoded IdP signing certificate on a single line without the leading -----BEGIN CERTIFICATE----- and ending -----END CERTIFICATE----- markers.
|
|
134
133
|
"""
|
|
135
134
|
return pulumi.get(self, "saml2_x509_cert")
|
|
136
135
|
|
|
137
136
|
@saml2_x509_cert.setter
|
|
138
|
-
def saml2_x509_cert(self, value: pulumi.Input[
|
|
137
|
+
def saml2_x509_cert(self, value: pulumi.Input[_builtins.str]):
|
|
139
138
|
pulumi.set(self, "saml2_x509_cert", value)
|
|
140
139
|
|
|
141
|
-
@property
|
|
140
|
+
@_builtins.property
|
|
142
141
|
@pulumi.getter(name="allowedEmailPatterns")
|
|
143
|
-
def allowed_email_patterns(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
142
|
+
def allowed_email_patterns(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
144
143
|
"""
|
|
145
144
|
A list of regular expressions that email addresses are matched against to authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
|
|
146
145
|
"""
|
|
147
146
|
return pulumi.get(self, "allowed_email_patterns")
|
|
148
147
|
|
|
149
148
|
@allowed_email_patterns.setter
|
|
150
|
-
def allowed_email_patterns(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
149
|
+
def allowed_email_patterns(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
151
150
|
pulumi.set(self, "allowed_email_patterns", value)
|
|
152
151
|
|
|
153
|
-
@property
|
|
152
|
+
@_builtins.property
|
|
154
153
|
@pulumi.getter(name="allowedUserDomains")
|
|
155
|
-
def allowed_user_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
154
|
+
def allowed_user_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
156
155
|
"""
|
|
157
156
|
A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
|
|
158
157
|
"""
|
|
159
158
|
return pulumi.get(self, "allowed_user_domains")
|
|
160
159
|
|
|
161
160
|
@allowed_user_domains.setter
|
|
162
|
-
def allowed_user_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
161
|
+
def allowed_user_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
163
162
|
pulumi.set(self, "allowed_user_domains", value)
|
|
164
163
|
|
|
165
|
-
@property
|
|
164
|
+
@_builtins.property
|
|
166
165
|
@pulumi.getter
|
|
167
|
-
def comment(self) -> Optional[pulumi.Input[
|
|
166
|
+
def comment(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
168
167
|
"""
|
|
169
168
|
Specifies a comment for the integration.
|
|
170
169
|
"""
|
|
171
170
|
return pulumi.get(self, "comment")
|
|
172
171
|
|
|
173
172
|
@comment.setter
|
|
174
|
-
def comment(self, value: Optional[pulumi.Input[
|
|
173
|
+
def comment(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
175
174
|
pulumi.set(self, "comment", value)
|
|
176
175
|
|
|
177
|
-
@property
|
|
176
|
+
@_builtins.property
|
|
178
177
|
@pulumi.getter
|
|
179
|
-
def enabled(self) -> Optional[pulumi.Input[
|
|
178
|
+
def enabled(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
180
179
|
"""
|
|
181
180
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
182
181
|
"""
|
|
183
182
|
return pulumi.get(self, "enabled")
|
|
184
183
|
|
|
185
184
|
@enabled.setter
|
|
186
|
-
def enabled(self, value: Optional[pulumi.Input[
|
|
185
|
+
def enabled(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
187
186
|
pulumi.set(self, "enabled", value)
|
|
188
187
|
|
|
189
|
-
@property
|
|
188
|
+
@_builtins.property
|
|
190
189
|
@pulumi.getter
|
|
191
|
-
def name(self) -> Optional[pulumi.Input[
|
|
190
|
+
def name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
192
191
|
"""
|
|
193
192
|
Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
194
193
|
"""
|
|
195
194
|
return pulumi.get(self, "name")
|
|
196
195
|
|
|
197
196
|
@name.setter
|
|
198
|
-
def name(self, value: Optional[pulumi.Input[
|
|
197
|
+
def name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
199
198
|
pulumi.set(self, "name", value)
|
|
200
199
|
|
|
201
|
-
@property
|
|
200
|
+
@_builtins.property
|
|
202
201
|
@pulumi.getter(name="saml2EnableSpInitiated")
|
|
203
|
-
def saml2_enable_sp_initiated(self) -> Optional[pulumi.Input[
|
|
202
|
+
def saml2_enable_sp_initiated(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
204
203
|
"""
|
|
205
204
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
206
205
|
"""
|
|
207
206
|
return pulumi.get(self, "saml2_enable_sp_initiated")
|
|
208
207
|
|
|
209
208
|
@saml2_enable_sp_initiated.setter
|
|
210
|
-
def saml2_enable_sp_initiated(self, value: Optional[pulumi.Input[
|
|
209
|
+
def saml2_enable_sp_initiated(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
211
210
|
pulumi.set(self, "saml2_enable_sp_initiated", value)
|
|
212
211
|
|
|
213
|
-
@property
|
|
212
|
+
@_builtins.property
|
|
214
213
|
@pulumi.getter(name="saml2ForceAuthn")
|
|
215
|
-
def saml2_force_authn(self) -> Optional[pulumi.Input[
|
|
214
|
+
def saml2_force_authn(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
216
215
|
"""
|
|
217
216
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
218
217
|
"""
|
|
219
218
|
return pulumi.get(self, "saml2_force_authn")
|
|
220
219
|
|
|
221
220
|
@saml2_force_authn.setter
|
|
222
|
-
def saml2_force_authn(self, value: Optional[pulumi.Input[
|
|
221
|
+
def saml2_force_authn(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
223
222
|
pulumi.set(self, "saml2_force_authn", value)
|
|
224
223
|
|
|
225
|
-
@property
|
|
224
|
+
@_builtins.property
|
|
226
225
|
@pulumi.getter(name="saml2PostLogoutRedirectUrl")
|
|
227
|
-
def saml2_post_logout_redirect_url(self) -> Optional[pulumi.Input[
|
|
226
|
+
def saml2_post_logout_redirect_url(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
228
227
|
"""
|
|
229
228
|
The endpoint to which Snowflake redirects users after clicking the Log Out button in the classic Snowflake web interface. Snowflake terminates the Snowflake session upon redirecting to the specified endpoint.
|
|
230
229
|
"""
|
|
231
230
|
return pulumi.get(self, "saml2_post_logout_redirect_url")
|
|
232
231
|
|
|
233
232
|
@saml2_post_logout_redirect_url.setter
|
|
234
|
-
def saml2_post_logout_redirect_url(self, value: Optional[pulumi.Input[
|
|
233
|
+
def saml2_post_logout_redirect_url(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
235
234
|
pulumi.set(self, "saml2_post_logout_redirect_url", value)
|
|
236
235
|
|
|
237
|
-
@property
|
|
236
|
+
@_builtins.property
|
|
238
237
|
@pulumi.getter(name="saml2RequestedNameidFormat")
|
|
239
|
-
def saml2_requested_nameid_format(self) -> Optional[pulumi.Input[
|
|
238
|
+
def saml2_requested_nameid_format(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
240
239
|
"""
|
|
241
240
|
The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. Valid options are: `urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified` | `urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress` | `urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName` | `urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName` | `urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos` | `urn:oasis:names:tc:SAML:2.0:nameid-format:persistent` | `urn:oasis:names:tc:SAML:2.0:nameid-format:transient`.
|
|
242
241
|
"""
|
|
243
242
|
return pulumi.get(self, "saml2_requested_nameid_format")
|
|
244
243
|
|
|
245
244
|
@saml2_requested_nameid_format.setter
|
|
246
|
-
def saml2_requested_nameid_format(self, value: Optional[pulumi.Input[
|
|
245
|
+
def saml2_requested_nameid_format(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
247
246
|
pulumi.set(self, "saml2_requested_nameid_format", value)
|
|
248
247
|
|
|
249
|
-
@property
|
|
248
|
+
@_builtins.property
|
|
250
249
|
@pulumi.getter(name="saml2SignRequest")
|
|
251
|
-
def saml2_sign_request(self) -> Optional[pulumi.Input[
|
|
250
|
+
def saml2_sign_request(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
252
251
|
"""
|
|
253
252
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
254
253
|
"""
|
|
255
254
|
return pulumi.get(self, "saml2_sign_request")
|
|
256
255
|
|
|
257
256
|
@saml2_sign_request.setter
|
|
258
|
-
def saml2_sign_request(self, value: Optional[pulumi.Input[
|
|
257
|
+
def saml2_sign_request(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
259
258
|
pulumi.set(self, "saml2_sign_request", value)
|
|
260
259
|
|
|
261
|
-
@property
|
|
260
|
+
@_builtins.property
|
|
262
261
|
@pulumi.getter(name="saml2SnowflakeAcsUrl")
|
|
263
|
-
def saml2_snowflake_acs_url(self) -> Optional[pulumi.Input[
|
|
262
|
+
def saml2_snowflake_acs_url(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
264
263
|
"""
|
|
265
264
|
The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
|
|
266
265
|
"""
|
|
267
266
|
return pulumi.get(self, "saml2_snowflake_acs_url")
|
|
268
267
|
|
|
269
268
|
@saml2_snowflake_acs_url.setter
|
|
270
|
-
def saml2_snowflake_acs_url(self, value: Optional[pulumi.Input[
|
|
269
|
+
def saml2_snowflake_acs_url(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
271
270
|
pulumi.set(self, "saml2_snowflake_acs_url", value)
|
|
272
271
|
|
|
273
|
-
@property
|
|
272
|
+
@_builtins.property
|
|
274
273
|
@pulumi.getter(name="saml2SnowflakeIssuerUrl")
|
|
275
|
-
def saml2_snowflake_issuer_url(self) -> Optional[pulumi.Input[
|
|
274
|
+
def saml2_snowflake_issuer_url(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
276
275
|
"""
|
|
277
276
|
The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
|
|
278
277
|
"""
|
|
279
278
|
return pulumi.get(self, "saml2_snowflake_issuer_url")
|
|
280
279
|
|
|
281
280
|
@saml2_snowflake_issuer_url.setter
|
|
282
|
-
def saml2_snowflake_issuer_url(self, value: Optional[pulumi.Input[
|
|
281
|
+
def saml2_snowflake_issuer_url(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
283
282
|
pulumi.set(self, "saml2_snowflake_issuer_url", value)
|
|
284
283
|
|
|
285
|
-
@property
|
|
284
|
+
@_builtins.property
|
|
286
285
|
@pulumi.getter(name="saml2SpInitiatedLoginPageLabel")
|
|
287
|
-
def saml2_sp_initiated_login_page_label(self) -> Optional[pulumi.Input[
|
|
286
|
+
def saml2_sp_initiated_login_page_label(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
288
287
|
"""
|
|
289
288
|
The string containing the label to display after the Log In With button on the login page. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
|
|
290
289
|
"""
|
|
291
290
|
return pulumi.get(self, "saml2_sp_initiated_login_page_label")
|
|
292
291
|
|
|
293
292
|
@saml2_sp_initiated_login_page_label.setter
|
|
294
|
-
def saml2_sp_initiated_login_page_label(self, value: Optional[pulumi.Input[
|
|
293
|
+
def saml2_sp_initiated_login_page_label(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
295
294
|
pulumi.set(self, "saml2_sp_initiated_login_page_label", value)
|
|
296
295
|
|
|
297
296
|
|
|
298
297
|
@pulumi.input_type
|
|
299
298
|
class _Saml2IntegrationState:
|
|
300
299
|
def __init__(__self__, *,
|
|
301
|
-
allowed_email_patterns: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
302
|
-
allowed_user_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
303
|
-
comment: Optional[pulumi.Input[
|
|
300
|
+
allowed_email_patterns: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
301
|
+
allowed_user_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
302
|
+
comment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
304
303
|
describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['Saml2IntegrationDescribeOutputArgs']]]] = None,
|
|
305
|
-
enabled: Optional[pulumi.Input[
|
|
306
|
-
fully_qualified_name: Optional[pulumi.Input[
|
|
307
|
-
name: Optional[pulumi.Input[
|
|
308
|
-
saml2_enable_sp_initiated: Optional[pulumi.Input[
|
|
309
|
-
saml2_force_authn: Optional[pulumi.Input[
|
|
310
|
-
saml2_issuer: Optional[pulumi.Input[
|
|
311
|
-
saml2_post_logout_redirect_url: Optional[pulumi.Input[
|
|
312
|
-
saml2_provider: Optional[pulumi.Input[
|
|
313
|
-
saml2_requested_nameid_format: Optional[pulumi.Input[
|
|
314
|
-
saml2_sign_request: Optional[pulumi.Input[
|
|
315
|
-
saml2_snowflake_acs_url: Optional[pulumi.Input[
|
|
316
|
-
saml2_snowflake_issuer_url: Optional[pulumi.Input[
|
|
317
|
-
saml2_sp_initiated_login_page_label: Optional[pulumi.Input[
|
|
318
|
-
saml2_sso_url: Optional[pulumi.Input[
|
|
319
|
-
saml2_x509_cert: Optional[pulumi.Input[
|
|
304
|
+
enabled: Optional[pulumi.Input[_builtins.str]] = None,
|
|
305
|
+
fully_qualified_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
306
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
307
|
+
saml2_enable_sp_initiated: Optional[pulumi.Input[_builtins.str]] = None,
|
|
308
|
+
saml2_force_authn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
309
|
+
saml2_issuer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
310
|
+
saml2_post_logout_redirect_url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
311
|
+
saml2_provider: Optional[pulumi.Input[_builtins.str]] = None,
|
|
312
|
+
saml2_requested_nameid_format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
313
|
+
saml2_sign_request: Optional[pulumi.Input[_builtins.str]] = None,
|
|
314
|
+
saml2_snowflake_acs_url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
315
|
+
saml2_snowflake_issuer_url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
316
|
+
saml2_sp_initiated_login_page_label: Optional[pulumi.Input[_builtins.str]] = None,
|
|
317
|
+
saml2_sso_url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
318
|
+
saml2_x509_cert: Optional[pulumi.Input[_builtins.str]] = None,
|
|
320
319
|
show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['Saml2IntegrationShowOutputArgs']]]] = None):
|
|
321
320
|
"""
|
|
322
321
|
Input properties used for looking up and filtering Saml2Integration resources.
|
|
323
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
324
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
325
|
-
:param pulumi.Input[
|
|
322
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_email_patterns: A list of regular expressions that email addresses are matched against to authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
|
|
323
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_user_domains: A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
|
|
324
|
+
:param pulumi.Input[_builtins.str] comment: Specifies a comment for the integration.
|
|
326
325
|
:param pulumi.Input[Sequence[pulumi.Input['Saml2IntegrationDescribeOutputArgs']]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATION` for the given integration.
|
|
327
|
-
:param pulumi.Input[
|
|
328
|
-
:param pulumi.Input[
|
|
329
|
-
:param pulumi.Input[
|
|
330
|
-
:param pulumi.Input[
|
|
331
|
-
:param pulumi.Input[
|
|
332
|
-
:param pulumi.Input[
|
|
333
|
-
:param pulumi.Input[
|
|
334
|
-
:param pulumi.Input[
|
|
335
|
-
:param pulumi.Input[
|
|
336
|
-
:param pulumi.Input[
|
|
337
|
-
:param pulumi.Input[
|
|
338
|
-
:param pulumi.Input[
|
|
339
|
-
:param pulumi.Input[
|
|
340
|
-
:param pulumi.Input[
|
|
341
|
-
:param pulumi.Input[
|
|
326
|
+
:param pulumi.Input[_builtins.str] enabled: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
327
|
+
:param pulumi.Input[_builtins.str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
328
|
+
:param pulumi.Input[_builtins.str] name: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
329
|
+
:param pulumi.Input[_builtins.str] saml2_enable_sp_initiated: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
330
|
+
:param pulumi.Input[_builtins.str] saml2_force_authn: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
331
|
+
:param pulumi.Input[_builtins.str] saml2_issuer: The string containing the IdP EntityID / Issuer.
|
|
332
|
+
:param pulumi.Input[_builtins.str] saml2_post_logout_redirect_url: The endpoint to which Snowflake redirects users after clicking the Log Out button in the classic Snowflake web interface. Snowflake terminates the Snowflake session upon redirecting to the specified endpoint.
|
|
333
|
+
:param pulumi.Input[_builtins.str] saml2_provider: The string describing the IdP. Valid options are: `OKTA` | `ADFS` | `CUSTOM`.
|
|
334
|
+
:param pulumi.Input[_builtins.str] saml2_requested_nameid_format: The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. Valid options are: `urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified` | `urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress` | `urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName` | `urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName` | `urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos` | `urn:oasis:names:tc:SAML:2.0:nameid-format:persistent` | `urn:oasis:names:tc:SAML:2.0:nameid-format:transient`.
|
|
335
|
+
:param pulumi.Input[_builtins.str] saml2_sign_request: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
336
|
+
:param pulumi.Input[_builtins.str] saml2_snowflake_acs_url: The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
|
|
337
|
+
:param pulumi.Input[_builtins.str] saml2_snowflake_issuer_url: The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
|
|
338
|
+
:param pulumi.Input[_builtins.str] saml2_sp_initiated_login_page_label: The string containing the label to display after the Log In With button on the login page. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
|
|
339
|
+
:param pulumi.Input[_builtins.str] saml2_sso_url: The string containing the IdP SSO URL, where the user should be redirected by Snowflake (the Service Provider) with a SAML AuthnRequest message.
|
|
340
|
+
:param pulumi.Input[_builtins.str] saml2_x509_cert: The Base64 encoded IdP signing certificate on a single line without the leading -----BEGIN CERTIFICATE----- and ending -----END CERTIFICATE----- markers.
|
|
342
341
|
:param pulumi.Input[Sequence[pulumi.Input['Saml2IntegrationShowOutputArgs']]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATION` for the given integration.
|
|
343
342
|
"""
|
|
344
343
|
if allowed_email_patterns is not None:
|
|
@@ -382,43 +381,43 @@ class _Saml2IntegrationState:
|
|
|
382
381
|
if show_outputs is not None:
|
|
383
382
|
pulumi.set(__self__, "show_outputs", show_outputs)
|
|
384
383
|
|
|
385
|
-
@property
|
|
384
|
+
@_builtins.property
|
|
386
385
|
@pulumi.getter(name="allowedEmailPatterns")
|
|
387
|
-
def allowed_email_patterns(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
386
|
+
def allowed_email_patterns(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
388
387
|
"""
|
|
389
388
|
A list of regular expressions that email addresses are matched against to authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
|
|
390
389
|
"""
|
|
391
390
|
return pulumi.get(self, "allowed_email_patterns")
|
|
392
391
|
|
|
393
392
|
@allowed_email_patterns.setter
|
|
394
|
-
def allowed_email_patterns(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
393
|
+
def allowed_email_patterns(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
395
394
|
pulumi.set(self, "allowed_email_patterns", value)
|
|
396
395
|
|
|
397
|
-
@property
|
|
396
|
+
@_builtins.property
|
|
398
397
|
@pulumi.getter(name="allowedUserDomains")
|
|
399
|
-
def allowed_user_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
398
|
+
def allowed_user_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
400
399
|
"""
|
|
401
400
|
A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
|
|
402
401
|
"""
|
|
403
402
|
return pulumi.get(self, "allowed_user_domains")
|
|
404
403
|
|
|
405
404
|
@allowed_user_domains.setter
|
|
406
|
-
def allowed_user_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
405
|
+
def allowed_user_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
407
406
|
pulumi.set(self, "allowed_user_domains", value)
|
|
408
407
|
|
|
409
|
-
@property
|
|
408
|
+
@_builtins.property
|
|
410
409
|
@pulumi.getter
|
|
411
|
-
def comment(self) -> Optional[pulumi.Input[
|
|
410
|
+
def comment(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
412
411
|
"""
|
|
413
412
|
Specifies a comment for the integration.
|
|
414
413
|
"""
|
|
415
414
|
return pulumi.get(self, "comment")
|
|
416
415
|
|
|
417
416
|
@comment.setter
|
|
418
|
-
def comment(self, value: Optional[pulumi.Input[
|
|
417
|
+
def comment(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
419
418
|
pulumi.set(self, "comment", value)
|
|
420
419
|
|
|
421
|
-
@property
|
|
420
|
+
@_builtins.property
|
|
422
421
|
@pulumi.getter(name="describeOutputs")
|
|
423
422
|
def describe_outputs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['Saml2IntegrationDescribeOutputArgs']]]]:
|
|
424
423
|
"""
|
|
@@ -430,187 +429,187 @@ class _Saml2IntegrationState:
|
|
|
430
429
|
def describe_outputs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['Saml2IntegrationDescribeOutputArgs']]]]):
|
|
431
430
|
pulumi.set(self, "describe_outputs", value)
|
|
432
431
|
|
|
433
|
-
@property
|
|
432
|
+
@_builtins.property
|
|
434
433
|
@pulumi.getter
|
|
435
|
-
def enabled(self) -> Optional[pulumi.Input[
|
|
434
|
+
def enabled(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
436
435
|
"""
|
|
437
436
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
438
437
|
"""
|
|
439
438
|
return pulumi.get(self, "enabled")
|
|
440
439
|
|
|
441
440
|
@enabled.setter
|
|
442
|
-
def enabled(self, value: Optional[pulumi.Input[
|
|
441
|
+
def enabled(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
443
442
|
pulumi.set(self, "enabled", value)
|
|
444
443
|
|
|
445
|
-
@property
|
|
444
|
+
@_builtins.property
|
|
446
445
|
@pulumi.getter(name="fullyQualifiedName")
|
|
447
|
-
def fully_qualified_name(self) -> Optional[pulumi.Input[
|
|
446
|
+
def fully_qualified_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
448
447
|
"""
|
|
449
448
|
Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
450
449
|
"""
|
|
451
450
|
return pulumi.get(self, "fully_qualified_name")
|
|
452
451
|
|
|
453
452
|
@fully_qualified_name.setter
|
|
454
|
-
def fully_qualified_name(self, value: Optional[pulumi.Input[
|
|
453
|
+
def fully_qualified_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
455
454
|
pulumi.set(self, "fully_qualified_name", value)
|
|
456
455
|
|
|
457
|
-
@property
|
|
456
|
+
@_builtins.property
|
|
458
457
|
@pulumi.getter
|
|
459
|
-
def name(self) -> Optional[pulumi.Input[
|
|
458
|
+
def name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
460
459
|
"""
|
|
461
460
|
Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
462
461
|
"""
|
|
463
462
|
return pulumi.get(self, "name")
|
|
464
463
|
|
|
465
464
|
@name.setter
|
|
466
|
-
def name(self, value: Optional[pulumi.Input[
|
|
465
|
+
def name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
467
466
|
pulumi.set(self, "name", value)
|
|
468
467
|
|
|
469
|
-
@property
|
|
468
|
+
@_builtins.property
|
|
470
469
|
@pulumi.getter(name="saml2EnableSpInitiated")
|
|
471
|
-
def saml2_enable_sp_initiated(self) -> Optional[pulumi.Input[
|
|
470
|
+
def saml2_enable_sp_initiated(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
472
471
|
"""
|
|
473
472
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
474
473
|
"""
|
|
475
474
|
return pulumi.get(self, "saml2_enable_sp_initiated")
|
|
476
475
|
|
|
477
476
|
@saml2_enable_sp_initiated.setter
|
|
478
|
-
def saml2_enable_sp_initiated(self, value: Optional[pulumi.Input[
|
|
477
|
+
def saml2_enable_sp_initiated(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
479
478
|
pulumi.set(self, "saml2_enable_sp_initiated", value)
|
|
480
479
|
|
|
481
|
-
@property
|
|
480
|
+
@_builtins.property
|
|
482
481
|
@pulumi.getter(name="saml2ForceAuthn")
|
|
483
|
-
def saml2_force_authn(self) -> Optional[pulumi.Input[
|
|
482
|
+
def saml2_force_authn(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
484
483
|
"""
|
|
485
484
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
486
485
|
"""
|
|
487
486
|
return pulumi.get(self, "saml2_force_authn")
|
|
488
487
|
|
|
489
488
|
@saml2_force_authn.setter
|
|
490
|
-
def saml2_force_authn(self, value: Optional[pulumi.Input[
|
|
489
|
+
def saml2_force_authn(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
491
490
|
pulumi.set(self, "saml2_force_authn", value)
|
|
492
491
|
|
|
493
|
-
@property
|
|
492
|
+
@_builtins.property
|
|
494
493
|
@pulumi.getter(name="saml2Issuer")
|
|
495
|
-
def saml2_issuer(self) -> Optional[pulumi.Input[
|
|
494
|
+
def saml2_issuer(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
496
495
|
"""
|
|
497
496
|
The string containing the IdP EntityID / Issuer.
|
|
498
497
|
"""
|
|
499
498
|
return pulumi.get(self, "saml2_issuer")
|
|
500
499
|
|
|
501
500
|
@saml2_issuer.setter
|
|
502
|
-
def saml2_issuer(self, value: Optional[pulumi.Input[
|
|
501
|
+
def saml2_issuer(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
503
502
|
pulumi.set(self, "saml2_issuer", value)
|
|
504
503
|
|
|
505
|
-
@property
|
|
504
|
+
@_builtins.property
|
|
506
505
|
@pulumi.getter(name="saml2PostLogoutRedirectUrl")
|
|
507
|
-
def saml2_post_logout_redirect_url(self) -> Optional[pulumi.Input[
|
|
506
|
+
def saml2_post_logout_redirect_url(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
508
507
|
"""
|
|
509
508
|
The endpoint to which Snowflake redirects users after clicking the Log Out button in the classic Snowflake web interface. Snowflake terminates the Snowflake session upon redirecting to the specified endpoint.
|
|
510
509
|
"""
|
|
511
510
|
return pulumi.get(self, "saml2_post_logout_redirect_url")
|
|
512
511
|
|
|
513
512
|
@saml2_post_logout_redirect_url.setter
|
|
514
|
-
def saml2_post_logout_redirect_url(self, value: Optional[pulumi.Input[
|
|
513
|
+
def saml2_post_logout_redirect_url(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
515
514
|
pulumi.set(self, "saml2_post_logout_redirect_url", value)
|
|
516
515
|
|
|
517
|
-
@property
|
|
516
|
+
@_builtins.property
|
|
518
517
|
@pulumi.getter(name="saml2Provider")
|
|
519
|
-
def saml2_provider(self) -> Optional[pulumi.Input[
|
|
518
|
+
def saml2_provider(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
520
519
|
"""
|
|
521
520
|
The string describing the IdP. Valid options are: `OKTA` | `ADFS` | `CUSTOM`.
|
|
522
521
|
"""
|
|
523
522
|
return pulumi.get(self, "saml2_provider")
|
|
524
523
|
|
|
525
524
|
@saml2_provider.setter
|
|
526
|
-
def saml2_provider(self, value: Optional[pulumi.Input[
|
|
525
|
+
def saml2_provider(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
527
526
|
pulumi.set(self, "saml2_provider", value)
|
|
528
527
|
|
|
529
|
-
@property
|
|
528
|
+
@_builtins.property
|
|
530
529
|
@pulumi.getter(name="saml2RequestedNameidFormat")
|
|
531
|
-
def saml2_requested_nameid_format(self) -> Optional[pulumi.Input[
|
|
530
|
+
def saml2_requested_nameid_format(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
532
531
|
"""
|
|
533
532
|
The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. Valid options are: `urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified` | `urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress` | `urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName` | `urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName` | `urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos` | `urn:oasis:names:tc:SAML:2.0:nameid-format:persistent` | `urn:oasis:names:tc:SAML:2.0:nameid-format:transient`.
|
|
534
533
|
"""
|
|
535
534
|
return pulumi.get(self, "saml2_requested_nameid_format")
|
|
536
535
|
|
|
537
536
|
@saml2_requested_nameid_format.setter
|
|
538
|
-
def saml2_requested_nameid_format(self, value: Optional[pulumi.Input[
|
|
537
|
+
def saml2_requested_nameid_format(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
539
538
|
pulumi.set(self, "saml2_requested_nameid_format", value)
|
|
540
539
|
|
|
541
|
-
@property
|
|
540
|
+
@_builtins.property
|
|
542
541
|
@pulumi.getter(name="saml2SignRequest")
|
|
543
|
-
def saml2_sign_request(self) -> Optional[pulumi.Input[
|
|
542
|
+
def saml2_sign_request(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
544
543
|
"""
|
|
545
544
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
546
545
|
"""
|
|
547
546
|
return pulumi.get(self, "saml2_sign_request")
|
|
548
547
|
|
|
549
548
|
@saml2_sign_request.setter
|
|
550
|
-
def saml2_sign_request(self, value: Optional[pulumi.Input[
|
|
549
|
+
def saml2_sign_request(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
551
550
|
pulumi.set(self, "saml2_sign_request", value)
|
|
552
551
|
|
|
553
|
-
@property
|
|
552
|
+
@_builtins.property
|
|
554
553
|
@pulumi.getter(name="saml2SnowflakeAcsUrl")
|
|
555
|
-
def saml2_snowflake_acs_url(self) -> Optional[pulumi.Input[
|
|
554
|
+
def saml2_snowflake_acs_url(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
556
555
|
"""
|
|
557
556
|
The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
|
|
558
557
|
"""
|
|
559
558
|
return pulumi.get(self, "saml2_snowflake_acs_url")
|
|
560
559
|
|
|
561
560
|
@saml2_snowflake_acs_url.setter
|
|
562
|
-
def saml2_snowflake_acs_url(self, value: Optional[pulumi.Input[
|
|
561
|
+
def saml2_snowflake_acs_url(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
563
562
|
pulumi.set(self, "saml2_snowflake_acs_url", value)
|
|
564
563
|
|
|
565
|
-
@property
|
|
564
|
+
@_builtins.property
|
|
566
565
|
@pulumi.getter(name="saml2SnowflakeIssuerUrl")
|
|
567
|
-
def saml2_snowflake_issuer_url(self) -> Optional[pulumi.Input[
|
|
566
|
+
def saml2_snowflake_issuer_url(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
568
567
|
"""
|
|
569
568
|
The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
|
|
570
569
|
"""
|
|
571
570
|
return pulumi.get(self, "saml2_snowflake_issuer_url")
|
|
572
571
|
|
|
573
572
|
@saml2_snowflake_issuer_url.setter
|
|
574
|
-
def saml2_snowflake_issuer_url(self, value: Optional[pulumi.Input[
|
|
573
|
+
def saml2_snowflake_issuer_url(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
575
574
|
pulumi.set(self, "saml2_snowflake_issuer_url", value)
|
|
576
575
|
|
|
577
|
-
@property
|
|
576
|
+
@_builtins.property
|
|
578
577
|
@pulumi.getter(name="saml2SpInitiatedLoginPageLabel")
|
|
579
|
-
def saml2_sp_initiated_login_page_label(self) -> Optional[pulumi.Input[
|
|
578
|
+
def saml2_sp_initiated_login_page_label(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
580
579
|
"""
|
|
581
580
|
The string containing the label to display after the Log In With button on the login page. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
|
|
582
581
|
"""
|
|
583
582
|
return pulumi.get(self, "saml2_sp_initiated_login_page_label")
|
|
584
583
|
|
|
585
584
|
@saml2_sp_initiated_login_page_label.setter
|
|
586
|
-
def saml2_sp_initiated_login_page_label(self, value: Optional[pulumi.Input[
|
|
585
|
+
def saml2_sp_initiated_login_page_label(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
587
586
|
pulumi.set(self, "saml2_sp_initiated_login_page_label", value)
|
|
588
587
|
|
|
589
|
-
@property
|
|
588
|
+
@_builtins.property
|
|
590
589
|
@pulumi.getter(name="saml2SsoUrl")
|
|
591
|
-
def saml2_sso_url(self) -> Optional[pulumi.Input[
|
|
590
|
+
def saml2_sso_url(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
592
591
|
"""
|
|
593
592
|
The string containing the IdP SSO URL, where the user should be redirected by Snowflake (the Service Provider) with a SAML AuthnRequest message.
|
|
594
593
|
"""
|
|
595
594
|
return pulumi.get(self, "saml2_sso_url")
|
|
596
595
|
|
|
597
596
|
@saml2_sso_url.setter
|
|
598
|
-
def saml2_sso_url(self, value: Optional[pulumi.Input[
|
|
597
|
+
def saml2_sso_url(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
599
598
|
pulumi.set(self, "saml2_sso_url", value)
|
|
600
599
|
|
|
601
|
-
@property
|
|
600
|
+
@_builtins.property
|
|
602
601
|
@pulumi.getter(name="saml2X509Cert")
|
|
603
|
-
def saml2_x509_cert(self) -> Optional[pulumi.Input[
|
|
602
|
+
def saml2_x509_cert(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
604
603
|
"""
|
|
605
604
|
The Base64 encoded IdP signing certificate on a single line without the leading -----BEGIN CERTIFICATE----- and ending -----END CERTIFICATE----- markers.
|
|
606
605
|
"""
|
|
607
606
|
return pulumi.get(self, "saml2_x509_cert")
|
|
608
607
|
|
|
609
608
|
@saml2_x509_cert.setter
|
|
610
|
-
def saml2_x509_cert(self, value: Optional[pulumi.Input[
|
|
609
|
+
def saml2_x509_cert(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
611
610
|
pulumi.set(self, "saml2_x509_cert", value)
|
|
612
611
|
|
|
613
|
-
@property
|
|
612
|
+
@_builtins.property
|
|
614
613
|
@pulumi.getter(name="showOutputs")
|
|
615
614
|
def show_outputs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['Saml2IntegrationShowOutputArgs']]]]:
|
|
616
615
|
"""
|
|
@@ -629,23 +628,23 @@ class Saml2Integration(pulumi.CustomResource):
|
|
|
629
628
|
def __init__(__self__,
|
|
630
629
|
resource_name: str,
|
|
631
630
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
632
|
-
allowed_email_patterns: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
633
|
-
allowed_user_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
634
|
-
comment: Optional[pulumi.Input[
|
|
635
|
-
enabled: Optional[pulumi.Input[
|
|
636
|
-
name: Optional[pulumi.Input[
|
|
637
|
-
saml2_enable_sp_initiated: Optional[pulumi.Input[
|
|
638
|
-
saml2_force_authn: Optional[pulumi.Input[
|
|
639
|
-
saml2_issuer: Optional[pulumi.Input[
|
|
640
|
-
saml2_post_logout_redirect_url: Optional[pulumi.Input[
|
|
641
|
-
saml2_provider: Optional[pulumi.Input[
|
|
642
|
-
saml2_requested_nameid_format: Optional[pulumi.Input[
|
|
643
|
-
saml2_sign_request: Optional[pulumi.Input[
|
|
644
|
-
saml2_snowflake_acs_url: Optional[pulumi.Input[
|
|
645
|
-
saml2_snowflake_issuer_url: Optional[pulumi.Input[
|
|
646
|
-
saml2_sp_initiated_login_page_label: Optional[pulumi.Input[
|
|
647
|
-
saml2_sso_url: Optional[pulumi.Input[
|
|
648
|
-
saml2_x509_cert: Optional[pulumi.Input[
|
|
631
|
+
allowed_email_patterns: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
632
|
+
allowed_user_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
633
|
+
comment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
634
|
+
enabled: Optional[pulumi.Input[_builtins.str]] = None,
|
|
635
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
636
|
+
saml2_enable_sp_initiated: Optional[pulumi.Input[_builtins.str]] = None,
|
|
637
|
+
saml2_force_authn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
638
|
+
saml2_issuer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
639
|
+
saml2_post_logout_redirect_url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
640
|
+
saml2_provider: Optional[pulumi.Input[_builtins.str]] = None,
|
|
641
|
+
saml2_requested_nameid_format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
642
|
+
saml2_sign_request: Optional[pulumi.Input[_builtins.str]] = None,
|
|
643
|
+
saml2_snowflake_acs_url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
644
|
+
saml2_snowflake_issuer_url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
645
|
+
saml2_sp_initiated_login_page_label: Optional[pulumi.Input[_builtins.str]] = None,
|
|
646
|
+
saml2_sso_url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
647
|
+
saml2_x509_cert: Optional[pulumi.Input[_builtins.str]] = None,
|
|
649
648
|
__props__=None):
|
|
650
649
|
"""
|
|
651
650
|
## Import
|
|
@@ -656,23 +655,23 @@ class Saml2Integration(pulumi.CustomResource):
|
|
|
656
655
|
|
|
657
656
|
:param str resource_name: The name of the resource.
|
|
658
657
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
659
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
660
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
661
|
-
:param pulumi.Input[
|
|
662
|
-
:param pulumi.Input[
|
|
663
|
-
:param pulumi.Input[
|
|
664
|
-
:param pulumi.Input[
|
|
665
|
-
:param pulumi.Input[
|
|
666
|
-
:param pulumi.Input[
|
|
667
|
-
:param pulumi.Input[
|
|
668
|
-
:param pulumi.Input[
|
|
669
|
-
:param pulumi.Input[
|
|
670
|
-
:param pulumi.Input[
|
|
671
|
-
:param pulumi.Input[
|
|
672
|
-
:param pulumi.Input[
|
|
673
|
-
:param pulumi.Input[
|
|
674
|
-
:param pulumi.Input[
|
|
675
|
-
:param pulumi.Input[
|
|
658
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_email_patterns: A list of regular expressions that email addresses are matched against to authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
|
|
659
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_user_domains: A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
|
|
660
|
+
:param pulumi.Input[_builtins.str] comment: Specifies a comment for the integration.
|
|
661
|
+
:param pulumi.Input[_builtins.str] enabled: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
662
|
+
:param pulumi.Input[_builtins.str] name: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
663
|
+
:param pulumi.Input[_builtins.str] saml2_enable_sp_initiated: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
664
|
+
:param pulumi.Input[_builtins.str] saml2_force_authn: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
665
|
+
:param pulumi.Input[_builtins.str] saml2_issuer: The string containing the IdP EntityID / Issuer.
|
|
666
|
+
:param pulumi.Input[_builtins.str] saml2_post_logout_redirect_url: The endpoint to which Snowflake redirects users after clicking the Log Out button in the classic Snowflake web interface. Snowflake terminates the Snowflake session upon redirecting to the specified endpoint.
|
|
667
|
+
:param pulumi.Input[_builtins.str] saml2_provider: The string describing the IdP. Valid options are: `OKTA` | `ADFS` | `CUSTOM`.
|
|
668
|
+
:param pulumi.Input[_builtins.str] saml2_requested_nameid_format: The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. Valid options are: `urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified` | `urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress` | `urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName` | `urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName` | `urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos` | `urn:oasis:names:tc:SAML:2.0:nameid-format:persistent` | `urn:oasis:names:tc:SAML:2.0:nameid-format:transient`.
|
|
669
|
+
:param pulumi.Input[_builtins.str] saml2_sign_request: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
670
|
+
:param pulumi.Input[_builtins.str] saml2_snowflake_acs_url: The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
|
|
671
|
+
:param pulumi.Input[_builtins.str] saml2_snowflake_issuer_url: The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
|
|
672
|
+
:param pulumi.Input[_builtins.str] saml2_sp_initiated_login_page_label: The string containing the label to display after the Log In With button on the login page. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
|
|
673
|
+
:param pulumi.Input[_builtins.str] saml2_sso_url: The string containing the IdP SSO URL, where the user should be redirected by Snowflake (the Service Provider) with a SAML AuthnRequest message.
|
|
674
|
+
:param pulumi.Input[_builtins.str] saml2_x509_cert: The Base64 encoded IdP signing certificate on a single line without the leading -----BEGIN CERTIFICATE----- and ending -----END CERTIFICATE----- markers.
|
|
676
675
|
"""
|
|
677
676
|
...
|
|
678
677
|
@overload
|
|
@@ -702,23 +701,23 @@ class Saml2Integration(pulumi.CustomResource):
|
|
|
702
701
|
def _internal_init(__self__,
|
|
703
702
|
resource_name: str,
|
|
704
703
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
705
|
-
allowed_email_patterns: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
706
|
-
allowed_user_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
707
|
-
comment: Optional[pulumi.Input[
|
|
708
|
-
enabled: Optional[pulumi.Input[
|
|
709
|
-
name: Optional[pulumi.Input[
|
|
710
|
-
saml2_enable_sp_initiated: Optional[pulumi.Input[
|
|
711
|
-
saml2_force_authn: Optional[pulumi.Input[
|
|
712
|
-
saml2_issuer: Optional[pulumi.Input[
|
|
713
|
-
saml2_post_logout_redirect_url: Optional[pulumi.Input[
|
|
714
|
-
saml2_provider: Optional[pulumi.Input[
|
|
715
|
-
saml2_requested_nameid_format: Optional[pulumi.Input[
|
|
716
|
-
saml2_sign_request: Optional[pulumi.Input[
|
|
717
|
-
saml2_snowflake_acs_url: Optional[pulumi.Input[
|
|
718
|
-
saml2_snowflake_issuer_url: Optional[pulumi.Input[
|
|
719
|
-
saml2_sp_initiated_login_page_label: Optional[pulumi.Input[
|
|
720
|
-
saml2_sso_url: Optional[pulumi.Input[
|
|
721
|
-
saml2_x509_cert: Optional[pulumi.Input[
|
|
704
|
+
allowed_email_patterns: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
705
|
+
allowed_user_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
706
|
+
comment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
707
|
+
enabled: Optional[pulumi.Input[_builtins.str]] = None,
|
|
708
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
709
|
+
saml2_enable_sp_initiated: Optional[pulumi.Input[_builtins.str]] = None,
|
|
710
|
+
saml2_force_authn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
711
|
+
saml2_issuer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
712
|
+
saml2_post_logout_redirect_url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
713
|
+
saml2_provider: Optional[pulumi.Input[_builtins.str]] = None,
|
|
714
|
+
saml2_requested_nameid_format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
715
|
+
saml2_sign_request: Optional[pulumi.Input[_builtins.str]] = None,
|
|
716
|
+
saml2_snowflake_acs_url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
717
|
+
saml2_snowflake_issuer_url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
718
|
+
saml2_sp_initiated_login_page_label: Optional[pulumi.Input[_builtins.str]] = None,
|
|
719
|
+
saml2_sso_url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
720
|
+
saml2_x509_cert: Optional[pulumi.Input[_builtins.str]] = None,
|
|
722
721
|
__props__=None):
|
|
723
722
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
724
723
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -768,25 +767,25 @@ class Saml2Integration(pulumi.CustomResource):
|
|
|
768
767
|
def get(resource_name: str,
|
|
769
768
|
id: pulumi.Input[str],
|
|
770
769
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
771
|
-
allowed_email_patterns: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
772
|
-
allowed_user_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
773
|
-
comment: Optional[pulumi.Input[
|
|
770
|
+
allowed_email_patterns: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
771
|
+
allowed_user_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
772
|
+
comment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
774
773
|
describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['Saml2IntegrationDescribeOutputArgs', 'Saml2IntegrationDescribeOutputArgsDict']]]]] = None,
|
|
775
|
-
enabled: Optional[pulumi.Input[
|
|
776
|
-
fully_qualified_name: Optional[pulumi.Input[
|
|
777
|
-
name: Optional[pulumi.Input[
|
|
778
|
-
saml2_enable_sp_initiated: Optional[pulumi.Input[
|
|
779
|
-
saml2_force_authn: Optional[pulumi.Input[
|
|
780
|
-
saml2_issuer: Optional[pulumi.Input[
|
|
781
|
-
saml2_post_logout_redirect_url: Optional[pulumi.Input[
|
|
782
|
-
saml2_provider: Optional[pulumi.Input[
|
|
783
|
-
saml2_requested_nameid_format: Optional[pulumi.Input[
|
|
784
|
-
saml2_sign_request: Optional[pulumi.Input[
|
|
785
|
-
saml2_snowflake_acs_url: Optional[pulumi.Input[
|
|
786
|
-
saml2_snowflake_issuer_url: Optional[pulumi.Input[
|
|
787
|
-
saml2_sp_initiated_login_page_label: Optional[pulumi.Input[
|
|
788
|
-
saml2_sso_url: Optional[pulumi.Input[
|
|
789
|
-
saml2_x509_cert: Optional[pulumi.Input[
|
|
774
|
+
enabled: Optional[pulumi.Input[_builtins.str]] = None,
|
|
775
|
+
fully_qualified_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
776
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
777
|
+
saml2_enable_sp_initiated: Optional[pulumi.Input[_builtins.str]] = None,
|
|
778
|
+
saml2_force_authn: Optional[pulumi.Input[_builtins.str]] = None,
|
|
779
|
+
saml2_issuer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
780
|
+
saml2_post_logout_redirect_url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
781
|
+
saml2_provider: Optional[pulumi.Input[_builtins.str]] = None,
|
|
782
|
+
saml2_requested_nameid_format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
783
|
+
saml2_sign_request: Optional[pulumi.Input[_builtins.str]] = None,
|
|
784
|
+
saml2_snowflake_acs_url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
785
|
+
saml2_snowflake_issuer_url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
786
|
+
saml2_sp_initiated_login_page_label: Optional[pulumi.Input[_builtins.str]] = None,
|
|
787
|
+
saml2_sso_url: Optional[pulumi.Input[_builtins.str]] = None,
|
|
788
|
+
saml2_x509_cert: Optional[pulumi.Input[_builtins.str]] = None,
|
|
790
789
|
show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['Saml2IntegrationShowOutputArgs', 'Saml2IntegrationShowOutputArgsDict']]]]] = None) -> 'Saml2Integration':
|
|
791
790
|
"""
|
|
792
791
|
Get an existing Saml2Integration resource's state with the given name, id, and optional extra
|
|
@@ -795,25 +794,25 @@ class Saml2Integration(pulumi.CustomResource):
|
|
|
795
794
|
:param str resource_name: The unique name of the resulting resource.
|
|
796
795
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
797
796
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
798
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
799
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
800
|
-
:param pulumi.Input[
|
|
797
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_email_patterns: A list of regular expressions that email addresses are matched against to authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
|
|
798
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_user_domains: A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
|
|
799
|
+
:param pulumi.Input[_builtins.str] comment: Specifies a comment for the integration.
|
|
801
800
|
:param pulumi.Input[Sequence[pulumi.Input[Union['Saml2IntegrationDescribeOutputArgs', 'Saml2IntegrationDescribeOutputArgsDict']]]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATION` for the given integration.
|
|
802
|
-
:param pulumi.Input[
|
|
803
|
-
:param pulumi.Input[
|
|
804
|
-
:param pulumi.Input[
|
|
805
|
-
:param pulumi.Input[
|
|
806
|
-
:param pulumi.Input[
|
|
807
|
-
:param pulumi.Input[
|
|
808
|
-
:param pulumi.Input[
|
|
809
|
-
:param pulumi.Input[
|
|
810
|
-
:param pulumi.Input[
|
|
811
|
-
:param pulumi.Input[
|
|
812
|
-
:param pulumi.Input[
|
|
813
|
-
:param pulumi.Input[
|
|
814
|
-
:param pulumi.Input[
|
|
815
|
-
:param pulumi.Input[
|
|
816
|
-
:param pulumi.Input[
|
|
801
|
+
:param pulumi.Input[_builtins.str] enabled: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
802
|
+
:param pulumi.Input[_builtins.str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
803
|
+
:param pulumi.Input[_builtins.str] name: Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
804
|
+
:param pulumi.Input[_builtins.str] saml2_enable_sp_initiated: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
805
|
+
:param pulumi.Input[_builtins.str] saml2_force_authn: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
806
|
+
:param pulumi.Input[_builtins.str] saml2_issuer: The string containing the IdP EntityID / Issuer.
|
|
807
|
+
:param pulumi.Input[_builtins.str] saml2_post_logout_redirect_url: The endpoint to which Snowflake redirects users after clicking the Log Out button in the classic Snowflake web interface. Snowflake terminates the Snowflake session upon redirecting to the specified endpoint.
|
|
808
|
+
:param pulumi.Input[_builtins.str] saml2_provider: The string describing the IdP. Valid options are: `OKTA` | `ADFS` | `CUSTOM`.
|
|
809
|
+
:param pulumi.Input[_builtins.str] saml2_requested_nameid_format: The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. Valid options are: `urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified` | `urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress` | `urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName` | `urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName` | `urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos` | `urn:oasis:names:tc:SAML:2.0:nameid-format:persistent` | `urn:oasis:names:tc:SAML:2.0:nameid-format:transient`.
|
|
810
|
+
:param pulumi.Input[_builtins.str] saml2_sign_request: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
811
|
+
:param pulumi.Input[_builtins.str] saml2_snowflake_acs_url: The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
|
|
812
|
+
:param pulumi.Input[_builtins.str] saml2_snowflake_issuer_url: The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
|
|
813
|
+
:param pulumi.Input[_builtins.str] saml2_sp_initiated_login_page_label: The string containing the label to display after the Log In With button on the login page. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
|
|
814
|
+
:param pulumi.Input[_builtins.str] saml2_sso_url: The string containing the IdP SSO URL, where the user should be redirected by Snowflake (the Service Provider) with a SAML AuthnRequest message.
|
|
815
|
+
:param pulumi.Input[_builtins.str] saml2_x509_cert: The Base64 encoded IdP signing certificate on a single line without the leading -----BEGIN CERTIFICATE----- and ending -----END CERTIFICATE----- markers.
|
|
817
816
|
:param pulumi.Input[Sequence[pulumi.Input[Union['Saml2IntegrationShowOutputArgs', 'Saml2IntegrationShowOutputArgsDict']]]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATION` for the given integration.
|
|
818
817
|
"""
|
|
819
818
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
@@ -842,31 +841,31 @@ class Saml2Integration(pulumi.CustomResource):
|
|
|
842
841
|
__props__.__dict__["show_outputs"] = show_outputs
|
|
843
842
|
return Saml2Integration(resource_name, opts=opts, __props__=__props__)
|
|
844
843
|
|
|
845
|
-
@property
|
|
844
|
+
@_builtins.property
|
|
846
845
|
@pulumi.getter(name="allowedEmailPatterns")
|
|
847
|
-
def allowed_email_patterns(self) -> pulumi.Output[Optional[Sequence[
|
|
846
|
+
def allowed_email_patterns(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
848
847
|
"""
|
|
849
848
|
A list of regular expressions that email addresses are matched against to authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
|
|
850
849
|
"""
|
|
851
850
|
return pulumi.get(self, "allowed_email_patterns")
|
|
852
851
|
|
|
853
|
-
@property
|
|
852
|
+
@_builtins.property
|
|
854
853
|
@pulumi.getter(name="allowedUserDomains")
|
|
855
|
-
def allowed_user_domains(self) -> pulumi.Output[Optional[Sequence[
|
|
854
|
+
def allowed_user_domains(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
856
855
|
"""
|
|
857
856
|
A list of email domains that can authenticate with a SAML2 security integration. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
|
|
858
857
|
"""
|
|
859
858
|
return pulumi.get(self, "allowed_user_domains")
|
|
860
859
|
|
|
861
|
-
@property
|
|
860
|
+
@_builtins.property
|
|
862
861
|
@pulumi.getter
|
|
863
|
-
def comment(self) -> pulumi.Output[Optional[
|
|
862
|
+
def comment(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
864
863
|
"""
|
|
865
864
|
Specifies a comment for the integration.
|
|
866
865
|
"""
|
|
867
866
|
return pulumi.get(self, "comment")
|
|
868
867
|
|
|
869
|
-
@property
|
|
868
|
+
@_builtins.property
|
|
870
869
|
@pulumi.getter(name="describeOutputs")
|
|
871
870
|
def describe_outputs(self) -> pulumi.Output[Sequence['outputs.Saml2IntegrationDescribeOutput']]:
|
|
872
871
|
"""
|
|
@@ -874,127 +873,127 @@ class Saml2Integration(pulumi.CustomResource):
|
|
|
874
873
|
"""
|
|
875
874
|
return pulumi.get(self, "describe_outputs")
|
|
876
875
|
|
|
877
|
-
@property
|
|
876
|
+
@_builtins.property
|
|
878
877
|
@pulumi.getter
|
|
879
|
-
def enabled(self) -> pulumi.Output[Optional[
|
|
878
|
+
def enabled(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
880
879
|
"""
|
|
881
880
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether this security integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
882
881
|
"""
|
|
883
882
|
return pulumi.get(self, "enabled")
|
|
884
883
|
|
|
885
|
-
@property
|
|
884
|
+
@_builtins.property
|
|
886
885
|
@pulumi.getter(name="fullyQualifiedName")
|
|
887
|
-
def fully_qualified_name(self) -> pulumi.Output[
|
|
886
|
+
def fully_qualified_name(self) -> pulumi.Output[_builtins.str]:
|
|
888
887
|
"""
|
|
889
888
|
Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
890
889
|
"""
|
|
891
890
|
return pulumi.get(self, "fully_qualified_name")
|
|
892
891
|
|
|
893
|
-
@property
|
|
892
|
+
@_builtins.property
|
|
894
893
|
@pulumi.getter
|
|
895
|
-
def name(self) -> pulumi.Output[
|
|
894
|
+
def name(self) -> pulumi.Output[_builtins.str]:
|
|
896
895
|
"""
|
|
897
896
|
Specifies the name of the SAML2 integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
898
897
|
"""
|
|
899
898
|
return pulumi.get(self, "name")
|
|
900
899
|
|
|
901
|
-
@property
|
|
900
|
+
@_builtins.property
|
|
902
901
|
@pulumi.getter(name="saml2EnableSpInitiated")
|
|
903
|
-
def saml2_enable_sp_initiated(self) -> pulumi.Output[Optional[
|
|
902
|
+
def saml2_enable_sp_initiated(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
904
903
|
"""
|
|
905
904
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) The Boolean indicating if the Log In With button will be shown on the login page. TRUE: displays the Log in With button on the login page. FALSE: does not display the Log in With button on the login page. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
906
905
|
"""
|
|
907
906
|
return pulumi.get(self, "saml2_enable_sp_initiated")
|
|
908
907
|
|
|
909
|
-
@property
|
|
908
|
+
@_builtins.property
|
|
910
909
|
@pulumi.getter(name="saml2ForceAuthn")
|
|
911
|
-
def saml2_force_authn(self) -> pulumi.Output[Optional[
|
|
910
|
+
def saml2_force_authn(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
912
911
|
"""
|
|
913
912
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) The Boolean indicating whether users, during the initial authentication flow, are forced to authenticate again to access Snowflake. When set to TRUE, Snowflake sets the ForceAuthn SAML parameter to TRUE in the outgoing request from Snowflake to the identity provider. TRUE: forces users to authenticate again to access Snowflake, even if a valid session with the identity provider exists. FALSE: does not force users to authenticate again to access Snowflake. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
914
913
|
"""
|
|
915
914
|
return pulumi.get(self, "saml2_force_authn")
|
|
916
915
|
|
|
917
|
-
@property
|
|
916
|
+
@_builtins.property
|
|
918
917
|
@pulumi.getter(name="saml2Issuer")
|
|
919
|
-
def saml2_issuer(self) -> pulumi.Output[
|
|
918
|
+
def saml2_issuer(self) -> pulumi.Output[_builtins.str]:
|
|
920
919
|
"""
|
|
921
920
|
The string containing the IdP EntityID / Issuer.
|
|
922
921
|
"""
|
|
923
922
|
return pulumi.get(self, "saml2_issuer")
|
|
924
923
|
|
|
925
|
-
@property
|
|
924
|
+
@_builtins.property
|
|
926
925
|
@pulumi.getter(name="saml2PostLogoutRedirectUrl")
|
|
927
|
-
def saml2_post_logout_redirect_url(self) -> pulumi.Output[Optional[
|
|
926
|
+
def saml2_post_logout_redirect_url(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
928
927
|
"""
|
|
929
928
|
The endpoint to which Snowflake redirects users after clicking the Log Out button in the classic Snowflake web interface. Snowflake terminates the Snowflake session upon redirecting to the specified endpoint.
|
|
930
929
|
"""
|
|
931
930
|
return pulumi.get(self, "saml2_post_logout_redirect_url")
|
|
932
931
|
|
|
933
|
-
@property
|
|
932
|
+
@_builtins.property
|
|
934
933
|
@pulumi.getter(name="saml2Provider")
|
|
935
|
-
def saml2_provider(self) -> pulumi.Output[
|
|
934
|
+
def saml2_provider(self) -> pulumi.Output[_builtins.str]:
|
|
936
935
|
"""
|
|
937
936
|
The string describing the IdP. Valid options are: `OKTA` | `ADFS` | `CUSTOM`.
|
|
938
937
|
"""
|
|
939
938
|
return pulumi.get(self, "saml2_provider")
|
|
940
939
|
|
|
941
|
-
@property
|
|
940
|
+
@_builtins.property
|
|
942
941
|
@pulumi.getter(name="saml2RequestedNameidFormat")
|
|
943
|
-
def saml2_requested_nameid_format(self) -> pulumi.Output[Optional[
|
|
942
|
+
def saml2_requested_nameid_format(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
944
943
|
"""
|
|
945
944
|
The SAML NameID format allows Snowflake to set an expectation of the identifying attribute of the user (i.e. SAML Subject) in the SAML assertion from the IdP to ensure a valid authentication to Snowflake. Valid options are: `urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified` | `urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress` | `urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName` | `urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName` | `urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos` | `urn:oasis:names:tc:SAML:2.0:nameid-format:persistent` | `urn:oasis:names:tc:SAML:2.0:nameid-format:transient`.
|
|
946
945
|
"""
|
|
947
946
|
return pulumi.get(self, "saml2_requested_nameid_format")
|
|
948
947
|
|
|
949
|
-
@property
|
|
948
|
+
@_builtins.property
|
|
950
949
|
@pulumi.getter(name="saml2SignRequest")
|
|
951
|
-
def saml2_sign_request(self) -> pulumi.Output[Optional[
|
|
950
|
+
def saml2_sign_request(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
952
951
|
"""
|
|
953
952
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) The Boolean indicating whether SAML requests are signed. TRUE: allows SAML requests to be signed. FALSE: does not allow SAML requests to be signed. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
954
953
|
"""
|
|
955
954
|
return pulumi.get(self, "saml2_sign_request")
|
|
956
955
|
|
|
957
|
-
@property
|
|
956
|
+
@_builtins.property
|
|
958
957
|
@pulumi.getter(name="saml2SnowflakeAcsUrl")
|
|
959
|
-
def saml2_snowflake_acs_url(self) -> pulumi.Output[Optional[
|
|
958
|
+
def saml2_snowflake_acs_url(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
960
959
|
"""
|
|
961
960
|
The string containing the Snowflake Assertion Consumer Service URL to which the IdP will send its SAML authentication response back to Snowflake. This property will be set in the SAML authentication request generated by Snowflake when initiating a SAML SSO operation with the IdP. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
|
|
962
961
|
"""
|
|
963
962
|
return pulumi.get(self, "saml2_snowflake_acs_url")
|
|
964
963
|
|
|
965
|
-
@property
|
|
964
|
+
@_builtins.property
|
|
966
965
|
@pulumi.getter(name="saml2SnowflakeIssuerUrl")
|
|
967
|
-
def saml2_snowflake_issuer_url(self) -> pulumi.Output[Optional[
|
|
966
|
+
def saml2_snowflake_issuer_url(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
968
967
|
"""
|
|
969
968
|
The string containing the EntityID / Issuer for the Snowflake service provider. If an incorrect value is specified, Snowflake returns an error message indicating the acceptable values to use. Because Okta does not support underscores in URLs, the underscore in the account name must be converted to a hyphen. See [docs](https://docs.snowflake.com/en/user-guide/organizations-connect#okta-urls).
|
|
970
969
|
"""
|
|
971
970
|
return pulumi.get(self, "saml2_snowflake_issuer_url")
|
|
972
971
|
|
|
973
|
-
@property
|
|
972
|
+
@_builtins.property
|
|
974
973
|
@pulumi.getter(name="saml2SpInitiatedLoginPageLabel")
|
|
975
|
-
def saml2_sp_initiated_login_page_label(self) -> pulumi.Output[Optional[
|
|
974
|
+
def saml2_sp_initiated_login_page_label(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
976
975
|
"""
|
|
977
976
|
The string containing the label to display after the Log In With button on the login page. If this field changes value from non-empty to empty, the whole resource is recreated because of Snowflake limitations.
|
|
978
977
|
"""
|
|
979
978
|
return pulumi.get(self, "saml2_sp_initiated_login_page_label")
|
|
980
979
|
|
|
981
|
-
@property
|
|
980
|
+
@_builtins.property
|
|
982
981
|
@pulumi.getter(name="saml2SsoUrl")
|
|
983
|
-
def saml2_sso_url(self) -> pulumi.Output[
|
|
982
|
+
def saml2_sso_url(self) -> pulumi.Output[_builtins.str]:
|
|
984
983
|
"""
|
|
985
984
|
The string containing the IdP SSO URL, where the user should be redirected by Snowflake (the Service Provider) with a SAML AuthnRequest message.
|
|
986
985
|
"""
|
|
987
986
|
return pulumi.get(self, "saml2_sso_url")
|
|
988
987
|
|
|
989
|
-
@property
|
|
988
|
+
@_builtins.property
|
|
990
989
|
@pulumi.getter(name="saml2X509Cert")
|
|
991
|
-
def saml2_x509_cert(self) -> pulumi.Output[
|
|
990
|
+
def saml2_x509_cert(self) -> pulumi.Output[_builtins.str]:
|
|
992
991
|
"""
|
|
993
992
|
The Base64 encoded IdP signing certificate on a single line without the leading -----BEGIN CERTIFICATE----- and ending -----END CERTIFICATE----- markers.
|
|
994
993
|
"""
|
|
995
994
|
return pulumi.get(self, "saml2_x509_cert")
|
|
996
995
|
|
|
997
|
-
@property
|
|
996
|
+
@_builtins.property
|
|
998
997
|
@pulumi.getter(name="showOutputs")
|
|
999
998
|
def show_outputs(self) -> pulumi.Output[Sequence['outputs.Saml2IntegrationShowOutput']]:
|
|
1000
999
|
"""
|