pulumi-snowflake 2.3.0a1753339260__py3-none-any.whl → 2.3.0a1753415140__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-snowflake might be problematic. Click here for more details.
- pulumi_snowflake/__init__.py +20 -1
- pulumi_snowflake/_inputs.py +17236 -16797
- pulumi_snowflake/account.py +252 -253
- pulumi_snowflake/account_authentication_policy_attachment.py +18 -19
- pulumi_snowflake/account_parameter.py +35 -36
- pulumi_snowflake/account_password_policy_attachment.py +18 -19
- pulumi_snowflake/account_role.py +42 -43
- pulumi_snowflake/alert.py +149 -150
- pulumi_snowflake/api_authentication_integration_with_authorization_code_grant.py +197 -198
- pulumi_snowflake/api_authentication_integration_with_client_credentials.py +180 -181
- pulumi_snowflake/api_authentication_integration_with_jwt_bearer.py +193 -194
- pulumi_snowflake/api_integration.py +251 -252
- pulumi_snowflake/authentication_policy.py +167 -168
- pulumi_snowflake/compute_pool.py +167 -168
- pulumi_snowflake/config/__init__.py +1 -1
- pulumi_snowflake/config/__init__.pyi +1 -2
- pulumi_snowflake/config/outputs.py +21 -22
- pulumi_snowflake/config/vars.py +43 -44
- pulumi_snowflake/cortex_search_service.py +191 -192
- pulumi_snowflake/current_account.py +2096 -2097
- pulumi_snowflake/current_organization_account.py +5863 -0
- pulumi_snowflake/database.py +353 -354
- pulumi_snowflake/database_role.py +63 -64
- pulumi_snowflake/dynamic_table.py +274 -275
- pulumi_snowflake/email_notification_integration.py +70 -71
- pulumi_snowflake/execute.py +61 -62
- pulumi_snowflake/external_function.py +280 -281
- pulumi_snowflake/external_oauth_integration.py +288 -289
- pulumi_snowflake/external_table.py +246 -247
- pulumi_snowflake/external_volume.py +68 -69
- pulumi_snowflake/failover_group.py +135 -136
- pulumi_snowflake/file_format.py +622 -623
- pulumi_snowflake/function_java.py +320 -321
- pulumi_snowflake/function_javascript.py +243 -244
- pulumi_snowflake/function_python.py +334 -335
- pulumi_snowflake/function_scala.py +320 -321
- pulumi_snowflake/function_sql.py +226 -227
- pulumi_snowflake/get_account_roles.py +16 -17
- pulumi_snowflake/get_accounts.py +16 -17
- pulumi_snowflake/get_alerts.py +22 -23
- pulumi_snowflake/get_compute_pools.py +23 -24
- pulumi_snowflake/get_connections.py +10 -11
- pulumi_snowflake/get_cortex_search_services.py +18 -19
- pulumi_snowflake/get_current_account.py +9 -10
- pulumi_snowflake/get_current_role.py +5 -6
- pulumi_snowflake/get_database.py +25 -26
- pulumi_snowflake/get_database_role.py +19 -20
- pulumi_snowflake/get_database_roles.py +17 -18
- pulumi_snowflake/get_databases.py +29 -30
- pulumi_snowflake/get_dynamic_tables.py +13 -14
- pulumi_snowflake/get_external_functions.py +16 -17
- pulumi_snowflake/get_external_tables.py +16 -17
- pulumi_snowflake/get_failover_groups.py +10 -11
- pulumi_snowflake/get_file_formats.py +16 -17
- pulumi_snowflake/get_functions.py +16 -17
- pulumi_snowflake/get_git_repositories.py +18 -19
- pulumi_snowflake/get_grants.py +9 -10
- pulumi_snowflake/get_image_repositories.py +11 -12
- pulumi_snowflake/get_masking_policies.py +18 -19
- pulumi_snowflake/get_materialized_views.py +16 -17
- pulumi_snowflake/get_network_policies.py +16 -17
- pulumi_snowflake/get_parameters.py +34 -35
- pulumi_snowflake/get_pipes.py +16 -17
- pulumi_snowflake/get_procedures.py +16 -17
- pulumi_snowflake/get_resource_monitors.py +10 -11
- pulumi_snowflake/get_row_access_policies.py +18 -19
- pulumi_snowflake/get_schemas.py +30 -31
- pulumi_snowflake/get_secrets.py +17 -18
- pulumi_snowflake/get_security_integrations.py +16 -17
- pulumi_snowflake/get_sequences.py +16 -17
- pulumi_snowflake/get_services.py +30 -31
- pulumi_snowflake/get_shares.py +10 -11
- pulumi_snowflake/get_stages.py +16 -17
- pulumi_snowflake/get_storage_integrations.py +4 -5
- pulumi_snowflake/get_streamlits.py +18 -19
- pulumi_snowflake/get_streams.py +24 -25
- pulumi_snowflake/get_system_generate_scim_access_token.py +11 -12
- pulumi_snowflake/get_system_get_aws_sns_iam_policy.py +11 -12
- pulumi_snowflake/get_system_get_private_link_config.py +21 -22
- pulumi_snowflake/get_system_get_snowflake_platform_info.py +7 -8
- pulumi_snowflake/get_tables.py +24 -25
- pulumi_snowflake/get_tags.py +11 -12
- pulumi_snowflake/get_tasks.py +30 -31
- pulumi_snowflake/get_user_programmatic_access_tokens.py +113 -0
- pulumi_snowflake/get_users.py +29 -30
- pulumi_snowflake/get_views.py +24 -25
- pulumi_snowflake/get_warehouses.py +22 -23
- pulumi_snowflake/git_repository.py +133 -134
- pulumi_snowflake/grant_account_role.py +52 -53
- pulumi_snowflake/grant_application_role.py +52 -53
- pulumi_snowflake/grant_database_role.py +69 -70
- pulumi_snowflake/grant_ownership.py +55 -56
- pulumi_snowflake/grant_privileges_to_account_role.py +125 -126
- pulumi_snowflake/grant_privileges_to_database_role.py +122 -123
- pulumi_snowflake/grant_privileges_to_share.py +154 -155
- pulumi_snowflake/image_repository.py +80 -81
- pulumi_snowflake/job_service.py +148 -149
- pulumi_snowflake/legacy_service_user.py +1269 -1270
- pulumi_snowflake/managed_account.py +140 -141
- pulumi_snowflake/masking_policy.py +136 -137
- pulumi_snowflake/materialized_view.py +149 -150
- pulumi_snowflake/network_policy.py +116 -117
- pulumi_snowflake/network_policy_attachment.py +52 -53
- pulumi_snowflake/network_rule.py +129 -130
- pulumi_snowflake/notification_integration.py +298 -299
- pulumi_snowflake/oauth_integration_for_custom_clients.py +263 -264
- pulumi_snowflake/oauth_integration_for_partner_applications.py +169 -170
- pulumi_snowflake/object_parameter.py +72 -73
- pulumi_snowflake/outputs.py +15957 -15511
- pulumi_snowflake/password_policy.py +299 -300
- pulumi_snowflake/pipe.py +181 -182
- pulumi_snowflake/primary_connection.py +70 -71
- pulumi_snowflake/procedure_java.py +341 -342
- pulumi_snowflake/procedure_javascript.py +247 -248
- pulumi_snowflake/procedure_python.py +338 -339
- pulumi_snowflake/procedure_scala.py +341 -342
- pulumi_snowflake/procedure_sql.py +247 -248
- pulumi_snowflake/provider.py +377 -378
- pulumi_snowflake/pulumi-plugin.json +1 -1
- pulumi_snowflake/resource_monitor.py +165 -166
- pulumi_snowflake/row_access_policy.py +102 -103
- pulumi_snowflake/saml2_integration.py +303 -304
- pulumi_snowflake/schema.py +390 -391
- pulumi_snowflake/scim_integration.py +133 -134
- pulumi_snowflake/secondary_connection.py +72 -73
- pulumi_snowflake/secondary_database.py +350 -351
- pulumi_snowflake/secret_with_authorization_code_grant.py +138 -139
- pulumi_snowflake/secret_with_basic_authentication.py +121 -122
- pulumi_snowflake/secret_with_client_credentials.py +125 -126
- pulumi_snowflake/secret_with_generic_string.py +104 -105
- pulumi_snowflake/sequence.py +121 -122
- pulumi_snowflake/service.py +233 -234
- pulumi_snowflake/service_user.py +1239 -1240
- pulumi_snowflake/share.py +61 -62
- pulumi_snowflake/shared_database.py +299 -300
- pulumi_snowflake/stage.py +234 -235
- pulumi_snowflake/storage_integration.py +230 -231
- pulumi_snowflake/stream_on_directory_table.py +128 -129
- pulumi_snowflake/stream_on_external_table.py +151 -152
- pulumi_snowflake/stream_on_table.py +164 -165
- pulumi_snowflake/stream_on_view.py +164 -165
- pulumi_snowflake/streamlit.py +184 -185
- pulumi_snowflake/table.py +147 -148
- pulumi_snowflake/table_column_masking_policy_application.py +52 -53
- pulumi_snowflake/table_constraint.py +191 -192
- pulumi_snowflake/tag.py +114 -115
- pulumi_snowflake/tag_association.py +86 -87
- pulumi_snowflake/task.py +1224 -1225
- pulumi_snowflake/user.py +1346 -1347
- pulumi_snowflake/user_authentication_policy_attachment.py +35 -36
- pulumi_snowflake/user_password_policy_attachment.py +35 -36
- pulumi_snowflake/user_programmatic_access_token.py +598 -0
- pulumi_snowflake/user_public_keys.py +52 -53
- pulumi_snowflake/view.py +187 -188
- pulumi_snowflake/warehouse.py +286 -287
- {pulumi_snowflake-2.3.0a1753339260.dist-info → pulumi_snowflake-2.3.0a1753415140.dist-info}/METADATA +1 -1
- pulumi_snowflake-2.3.0a1753415140.dist-info/RECORD +161 -0
- pulumi_snowflake-2.3.0a1753339260.dist-info/RECORD +0 -158
- {pulumi_snowflake-2.3.0a1753339260.dist-info → pulumi_snowflake-2.3.0a1753415140.dist-info}/WHEEL +0 -0
- {pulumi_snowflake-2.3.0a1753339260.dist-info → pulumi_snowflake-2.3.0a1753415140.dist-info}/top_level.txt +0 -0
|
@@ -2,8 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import builtins
|
|
6
|
-
import copy
|
|
5
|
+
import builtins as _builtins
|
|
7
6
|
import warnings
|
|
8
7
|
import sys
|
|
9
8
|
import pulumi
|
|
@@ -22,26 +21,26 @@ __all__ = ['AuthenticationPolicyArgs', 'AuthenticationPolicy']
|
|
|
22
21
|
@pulumi.input_type
|
|
23
22
|
class AuthenticationPolicyArgs:
|
|
24
23
|
def __init__(__self__, *,
|
|
25
|
-
database: pulumi.Input[
|
|
26
|
-
schema: pulumi.Input[
|
|
27
|
-
authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
28
|
-
client_types: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
29
|
-
comment: Optional[pulumi.Input[
|
|
30
|
-
mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
31
|
-
mfa_enrollment: Optional[pulumi.Input[
|
|
32
|
-
name: Optional[pulumi.Input[
|
|
33
|
-
security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
24
|
+
database: pulumi.Input[_builtins.str],
|
|
25
|
+
schema: pulumi.Input[_builtins.str],
|
|
26
|
+
authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
27
|
+
client_types: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
28
|
+
comment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
29
|
+
mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
30
|
+
mfa_enrollment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
31
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
32
|
+
security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None):
|
|
34
33
|
"""
|
|
35
34
|
The set of arguments for constructing a AuthenticationPolicy resource.
|
|
36
|
-
:param pulumi.Input[
|
|
37
|
-
:param pulumi.Input[
|
|
38
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
39
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
40
|
-
:param pulumi.Input[
|
|
41
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
42
|
-
:param pulumi.Input[
|
|
43
|
-
:param pulumi.Input[
|
|
44
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
35
|
+
:param pulumi.Input[_builtins.str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
36
|
+
:param pulumi.Input[_builtins.str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
37
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] authentication_methods: A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
|
|
38
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] client_types: A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
|
|
39
|
+
:param pulumi.Input[_builtins.str] comment: Specifies a comment for the authentication policy.
|
|
40
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] mfa_authentication_methods: A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
|
|
41
|
+
:param pulumi.Input[_builtins.str] mfa_enrollment: (Default: `OPTIONAL`) Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
|
|
42
|
+
:param pulumi.Input[_builtins.str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
43
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] security_integrations: A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
|
|
45
44
|
"""
|
|
46
45
|
pulumi.set(__self__, "database", database)
|
|
47
46
|
pulumi.set(__self__, "schema", schema)
|
|
@@ -60,143 +59,143 @@ class AuthenticationPolicyArgs:
|
|
|
60
59
|
if security_integrations is not None:
|
|
61
60
|
pulumi.set(__self__, "security_integrations", security_integrations)
|
|
62
61
|
|
|
63
|
-
@property
|
|
62
|
+
@_builtins.property
|
|
64
63
|
@pulumi.getter
|
|
65
|
-
def database(self) -> pulumi.Input[
|
|
64
|
+
def database(self) -> pulumi.Input[_builtins.str]:
|
|
66
65
|
"""
|
|
67
66
|
The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
68
67
|
"""
|
|
69
68
|
return pulumi.get(self, "database")
|
|
70
69
|
|
|
71
70
|
@database.setter
|
|
72
|
-
def database(self, value: pulumi.Input[
|
|
71
|
+
def database(self, value: pulumi.Input[_builtins.str]):
|
|
73
72
|
pulumi.set(self, "database", value)
|
|
74
73
|
|
|
75
|
-
@property
|
|
74
|
+
@_builtins.property
|
|
76
75
|
@pulumi.getter
|
|
77
|
-
def schema(self) -> pulumi.Input[
|
|
76
|
+
def schema(self) -> pulumi.Input[_builtins.str]:
|
|
78
77
|
"""
|
|
79
78
|
The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
80
79
|
"""
|
|
81
80
|
return pulumi.get(self, "schema")
|
|
82
81
|
|
|
83
82
|
@schema.setter
|
|
84
|
-
def schema(self, value: pulumi.Input[
|
|
83
|
+
def schema(self, value: pulumi.Input[_builtins.str]):
|
|
85
84
|
pulumi.set(self, "schema", value)
|
|
86
85
|
|
|
87
|
-
@property
|
|
86
|
+
@_builtins.property
|
|
88
87
|
@pulumi.getter(name="authenticationMethods")
|
|
89
|
-
def authentication_methods(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
88
|
+
def authentication_methods(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
90
89
|
"""
|
|
91
90
|
A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
|
|
92
91
|
"""
|
|
93
92
|
return pulumi.get(self, "authentication_methods")
|
|
94
93
|
|
|
95
94
|
@authentication_methods.setter
|
|
96
|
-
def authentication_methods(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
95
|
+
def authentication_methods(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
97
96
|
pulumi.set(self, "authentication_methods", value)
|
|
98
97
|
|
|
99
|
-
@property
|
|
98
|
+
@_builtins.property
|
|
100
99
|
@pulumi.getter(name="clientTypes")
|
|
101
|
-
def client_types(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
100
|
+
def client_types(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
102
101
|
"""
|
|
103
102
|
A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
|
|
104
103
|
"""
|
|
105
104
|
return pulumi.get(self, "client_types")
|
|
106
105
|
|
|
107
106
|
@client_types.setter
|
|
108
|
-
def client_types(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
107
|
+
def client_types(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
109
108
|
pulumi.set(self, "client_types", value)
|
|
110
109
|
|
|
111
|
-
@property
|
|
110
|
+
@_builtins.property
|
|
112
111
|
@pulumi.getter
|
|
113
|
-
def comment(self) -> Optional[pulumi.Input[
|
|
112
|
+
def comment(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
114
113
|
"""
|
|
115
114
|
Specifies a comment for the authentication policy.
|
|
116
115
|
"""
|
|
117
116
|
return pulumi.get(self, "comment")
|
|
118
117
|
|
|
119
118
|
@comment.setter
|
|
120
|
-
def comment(self, value: Optional[pulumi.Input[
|
|
119
|
+
def comment(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
121
120
|
pulumi.set(self, "comment", value)
|
|
122
121
|
|
|
123
|
-
@property
|
|
122
|
+
@_builtins.property
|
|
124
123
|
@pulumi.getter(name="mfaAuthenticationMethods")
|
|
125
|
-
def mfa_authentication_methods(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
124
|
+
def mfa_authentication_methods(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
126
125
|
"""
|
|
127
126
|
A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
|
|
128
127
|
"""
|
|
129
128
|
return pulumi.get(self, "mfa_authentication_methods")
|
|
130
129
|
|
|
131
130
|
@mfa_authentication_methods.setter
|
|
132
|
-
def mfa_authentication_methods(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
131
|
+
def mfa_authentication_methods(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
133
132
|
pulumi.set(self, "mfa_authentication_methods", value)
|
|
134
133
|
|
|
135
|
-
@property
|
|
134
|
+
@_builtins.property
|
|
136
135
|
@pulumi.getter(name="mfaEnrollment")
|
|
137
|
-
def mfa_enrollment(self) -> Optional[pulumi.Input[
|
|
136
|
+
def mfa_enrollment(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
138
137
|
"""
|
|
139
138
|
(Default: `OPTIONAL`) Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
|
|
140
139
|
"""
|
|
141
140
|
return pulumi.get(self, "mfa_enrollment")
|
|
142
141
|
|
|
143
142
|
@mfa_enrollment.setter
|
|
144
|
-
def mfa_enrollment(self, value: Optional[pulumi.Input[
|
|
143
|
+
def mfa_enrollment(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
145
144
|
pulumi.set(self, "mfa_enrollment", value)
|
|
146
145
|
|
|
147
|
-
@property
|
|
146
|
+
@_builtins.property
|
|
148
147
|
@pulumi.getter
|
|
149
|
-
def name(self) -> Optional[pulumi.Input[
|
|
148
|
+
def name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
150
149
|
"""
|
|
151
150
|
Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
152
151
|
"""
|
|
153
152
|
return pulumi.get(self, "name")
|
|
154
153
|
|
|
155
154
|
@name.setter
|
|
156
|
-
def name(self, value: Optional[pulumi.Input[
|
|
155
|
+
def name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
157
156
|
pulumi.set(self, "name", value)
|
|
158
157
|
|
|
159
|
-
@property
|
|
158
|
+
@_builtins.property
|
|
160
159
|
@pulumi.getter(name="securityIntegrations")
|
|
161
|
-
def security_integrations(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
160
|
+
def security_integrations(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
162
161
|
"""
|
|
163
162
|
A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
|
|
164
163
|
"""
|
|
165
164
|
return pulumi.get(self, "security_integrations")
|
|
166
165
|
|
|
167
166
|
@security_integrations.setter
|
|
168
|
-
def security_integrations(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
167
|
+
def security_integrations(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
169
168
|
pulumi.set(self, "security_integrations", value)
|
|
170
169
|
|
|
171
170
|
|
|
172
171
|
@pulumi.input_type
|
|
173
172
|
class _AuthenticationPolicyState:
|
|
174
173
|
def __init__(__self__, *,
|
|
175
|
-
authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
176
|
-
client_types: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
177
|
-
comment: Optional[pulumi.Input[
|
|
178
|
-
database: Optional[pulumi.Input[
|
|
174
|
+
authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
175
|
+
client_types: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
176
|
+
comment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
177
|
+
database: Optional[pulumi.Input[_builtins.str]] = None,
|
|
179
178
|
describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['AuthenticationPolicyDescribeOutputArgs']]]] = None,
|
|
180
|
-
fully_qualified_name: Optional[pulumi.Input[
|
|
181
|
-
mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
182
|
-
mfa_enrollment: Optional[pulumi.Input[
|
|
183
|
-
name: Optional[pulumi.Input[
|
|
184
|
-
schema: Optional[pulumi.Input[
|
|
185
|
-
security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
179
|
+
fully_qualified_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
180
|
+
mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
181
|
+
mfa_enrollment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
182
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
183
|
+
schema: Optional[pulumi.Input[_builtins.str]] = None,
|
|
184
|
+
security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
186
185
|
show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['AuthenticationPolicyShowOutputArgs']]]] = None):
|
|
187
186
|
"""
|
|
188
187
|
Input properties used for looking up and filtering AuthenticationPolicy resources.
|
|
189
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
190
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
191
|
-
:param pulumi.Input[
|
|
192
|
-
:param pulumi.Input[
|
|
188
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] authentication_methods: A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
|
|
189
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] client_types: A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
|
|
190
|
+
:param pulumi.Input[_builtins.str] comment: Specifies a comment for the authentication policy.
|
|
191
|
+
:param pulumi.Input[_builtins.str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
193
192
|
:param pulumi.Input[Sequence[pulumi.Input['AuthenticationPolicyDescribeOutputArgs']]] describe_outputs: Outputs the result of `DESCRIBE AUTHENTICATION POLICY` for the given policy.
|
|
194
|
-
:param pulumi.Input[
|
|
195
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
196
|
-
:param pulumi.Input[
|
|
197
|
-
:param pulumi.Input[
|
|
198
|
-
:param pulumi.Input[
|
|
199
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
193
|
+
:param pulumi.Input[_builtins.str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
194
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] mfa_authentication_methods: A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
|
|
195
|
+
:param pulumi.Input[_builtins.str] mfa_enrollment: (Default: `OPTIONAL`) Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
|
|
196
|
+
:param pulumi.Input[_builtins.str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
197
|
+
:param pulumi.Input[_builtins.str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
198
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] security_integrations: A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
|
|
200
199
|
:param pulumi.Input[Sequence[pulumi.Input['AuthenticationPolicyShowOutputArgs']]] show_outputs: Outputs the result of `SHOW AUTHENTICATION POLICIES` for the given policy.
|
|
201
200
|
"""
|
|
202
201
|
if authentication_methods is not None:
|
|
@@ -224,55 +223,55 @@ class _AuthenticationPolicyState:
|
|
|
224
223
|
if show_outputs is not None:
|
|
225
224
|
pulumi.set(__self__, "show_outputs", show_outputs)
|
|
226
225
|
|
|
227
|
-
@property
|
|
226
|
+
@_builtins.property
|
|
228
227
|
@pulumi.getter(name="authenticationMethods")
|
|
229
|
-
def authentication_methods(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
228
|
+
def authentication_methods(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
230
229
|
"""
|
|
231
230
|
A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
|
|
232
231
|
"""
|
|
233
232
|
return pulumi.get(self, "authentication_methods")
|
|
234
233
|
|
|
235
234
|
@authentication_methods.setter
|
|
236
|
-
def authentication_methods(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
235
|
+
def authentication_methods(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
237
236
|
pulumi.set(self, "authentication_methods", value)
|
|
238
237
|
|
|
239
|
-
@property
|
|
238
|
+
@_builtins.property
|
|
240
239
|
@pulumi.getter(name="clientTypes")
|
|
241
|
-
def client_types(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
240
|
+
def client_types(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
242
241
|
"""
|
|
243
242
|
A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
|
|
244
243
|
"""
|
|
245
244
|
return pulumi.get(self, "client_types")
|
|
246
245
|
|
|
247
246
|
@client_types.setter
|
|
248
|
-
def client_types(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
247
|
+
def client_types(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
249
248
|
pulumi.set(self, "client_types", value)
|
|
250
249
|
|
|
251
|
-
@property
|
|
250
|
+
@_builtins.property
|
|
252
251
|
@pulumi.getter
|
|
253
|
-
def comment(self) -> Optional[pulumi.Input[
|
|
252
|
+
def comment(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
254
253
|
"""
|
|
255
254
|
Specifies a comment for the authentication policy.
|
|
256
255
|
"""
|
|
257
256
|
return pulumi.get(self, "comment")
|
|
258
257
|
|
|
259
258
|
@comment.setter
|
|
260
|
-
def comment(self, value: Optional[pulumi.Input[
|
|
259
|
+
def comment(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
261
260
|
pulumi.set(self, "comment", value)
|
|
262
261
|
|
|
263
|
-
@property
|
|
262
|
+
@_builtins.property
|
|
264
263
|
@pulumi.getter
|
|
265
|
-
def database(self) -> Optional[pulumi.Input[
|
|
264
|
+
def database(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
266
265
|
"""
|
|
267
266
|
The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
268
267
|
"""
|
|
269
268
|
return pulumi.get(self, "database")
|
|
270
269
|
|
|
271
270
|
@database.setter
|
|
272
|
-
def database(self, value: Optional[pulumi.Input[
|
|
271
|
+
def database(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
273
272
|
pulumi.set(self, "database", value)
|
|
274
273
|
|
|
275
|
-
@property
|
|
274
|
+
@_builtins.property
|
|
276
275
|
@pulumi.getter(name="describeOutputs")
|
|
277
276
|
def describe_outputs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['AuthenticationPolicyDescribeOutputArgs']]]]:
|
|
278
277
|
"""
|
|
@@ -284,79 +283,79 @@ class _AuthenticationPolicyState:
|
|
|
284
283
|
def describe_outputs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['AuthenticationPolicyDescribeOutputArgs']]]]):
|
|
285
284
|
pulumi.set(self, "describe_outputs", value)
|
|
286
285
|
|
|
287
|
-
@property
|
|
286
|
+
@_builtins.property
|
|
288
287
|
@pulumi.getter(name="fullyQualifiedName")
|
|
289
|
-
def fully_qualified_name(self) -> Optional[pulumi.Input[
|
|
288
|
+
def fully_qualified_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
290
289
|
"""
|
|
291
290
|
Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
292
291
|
"""
|
|
293
292
|
return pulumi.get(self, "fully_qualified_name")
|
|
294
293
|
|
|
295
294
|
@fully_qualified_name.setter
|
|
296
|
-
def fully_qualified_name(self, value: Optional[pulumi.Input[
|
|
295
|
+
def fully_qualified_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
297
296
|
pulumi.set(self, "fully_qualified_name", value)
|
|
298
297
|
|
|
299
|
-
@property
|
|
298
|
+
@_builtins.property
|
|
300
299
|
@pulumi.getter(name="mfaAuthenticationMethods")
|
|
301
|
-
def mfa_authentication_methods(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
300
|
+
def mfa_authentication_methods(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
302
301
|
"""
|
|
303
302
|
A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
|
|
304
303
|
"""
|
|
305
304
|
return pulumi.get(self, "mfa_authentication_methods")
|
|
306
305
|
|
|
307
306
|
@mfa_authentication_methods.setter
|
|
308
|
-
def mfa_authentication_methods(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
307
|
+
def mfa_authentication_methods(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
309
308
|
pulumi.set(self, "mfa_authentication_methods", value)
|
|
310
309
|
|
|
311
|
-
@property
|
|
310
|
+
@_builtins.property
|
|
312
311
|
@pulumi.getter(name="mfaEnrollment")
|
|
313
|
-
def mfa_enrollment(self) -> Optional[pulumi.Input[
|
|
312
|
+
def mfa_enrollment(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
314
313
|
"""
|
|
315
314
|
(Default: `OPTIONAL`) Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
|
|
316
315
|
"""
|
|
317
316
|
return pulumi.get(self, "mfa_enrollment")
|
|
318
317
|
|
|
319
318
|
@mfa_enrollment.setter
|
|
320
|
-
def mfa_enrollment(self, value: Optional[pulumi.Input[
|
|
319
|
+
def mfa_enrollment(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
321
320
|
pulumi.set(self, "mfa_enrollment", value)
|
|
322
321
|
|
|
323
|
-
@property
|
|
322
|
+
@_builtins.property
|
|
324
323
|
@pulumi.getter
|
|
325
|
-
def name(self) -> Optional[pulumi.Input[
|
|
324
|
+
def name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
326
325
|
"""
|
|
327
326
|
Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
328
327
|
"""
|
|
329
328
|
return pulumi.get(self, "name")
|
|
330
329
|
|
|
331
330
|
@name.setter
|
|
332
|
-
def name(self, value: Optional[pulumi.Input[
|
|
331
|
+
def name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
333
332
|
pulumi.set(self, "name", value)
|
|
334
333
|
|
|
335
|
-
@property
|
|
334
|
+
@_builtins.property
|
|
336
335
|
@pulumi.getter
|
|
337
|
-
def schema(self) -> Optional[pulumi.Input[
|
|
336
|
+
def schema(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
338
337
|
"""
|
|
339
338
|
The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
340
339
|
"""
|
|
341
340
|
return pulumi.get(self, "schema")
|
|
342
341
|
|
|
343
342
|
@schema.setter
|
|
344
|
-
def schema(self, value: Optional[pulumi.Input[
|
|
343
|
+
def schema(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
345
344
|
pulumi.set(self, "schema", value)
|
|
346
345
|
|
|
347
|
-
@property
|
|
346
|
+
@_builtins.property
|
|
348
347
|
@pulumi.getter(name="securityIntegrations")
|
|
349
|
-
def security_integrations(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
348
|
+
def security_integrations(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
350
349
|
"""
|
|
351
350
|
A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
|
|
352
351
|
"""
|
|
353
352
|
return pulumi.get(self, "security_integrations")
|
|
354
353
|
|
|
355
354
|
@security_integrations.setter
|
|
356
|
-
def security_integrations(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
355
|
+
def security_integrations(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
357
356
|
pulumi.set(self, "security_integrations", value)
|
|
358
357
|
|
|
359
|
-
@property
|
|
358
|
+
@_builtins.property
|
|
360
359
|
@pulumi.getter(name="showOutputs")
|
|
361
360
|
def show_outputs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['AuthenticationPolicyShowOutputArgs']]]]:
|
|
362
361
|
"""
|
|
@@ -375,15 +374,15 @@ class AuthenticationPolicy(pulumi.CustomResource):
|
|
|
375
374
|
def __init__(__self__,
|
|
376
375
|
resource_name: str,
|
|
377
376
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
378
|
-
authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
379
|
-
client_types: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
380
|
-
comment: Optional[pulumi.Input[
|
|
381
|
-
database: Optional[pulumi.Input[
|
|
382
|
-
mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
383
|
-
mfa_enrollment: Optional[pulumi.Input[
|
|
384
|
-
name: Optional[pulumi.Input[
|
|
385
|
-
schema: Optional[pulumi.Input[
|
|
386
|
-
security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
377
|
+
authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
378
|
+
client_types: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
379
|
+
comment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
380
|
+
database: Optional[pulumi.Input[_builtins.str]] = None,
|
|
381
|
+
mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
382
|
+
mfa_enrollment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
383
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
384
|
+
schema: Optional[pulumi.Input[_builtins.str]] = None,
|
|
385
|
+
security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
387
386
|
__props__=None):
|
|
388
387
|
"""
|
|
389
388
|
## Import
|
|
@@ -394,15 +393,15 @@ class AuthenticationPolicy(pulumi.CustomResource):
|
|
|
394
393
|
|
|
395
394
|
:param str resource_name: The name of the resource.
|
|
396
395
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
397
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
398
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
399
|
-
:param pulumi.Input[
|
|
400
|
-
:param pulumi.Input[
|
|
401
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
402
|
-
:param pulumi.Input[
|
|
403
|
-
:param pulumi.Input[
|
|
404
|
-
:param pulumi.Input[
|
|
405
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
396
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] authentication_methods: A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
|
|
397
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] client_types: A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
|
|
398
|
+
:param pulumi.Input[_builtins.str] comment: Specifies a comment for the authentication policy.
|
|
399
|
+
:param pulumi.Input[_builtins.str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
400
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] mfa_authentication_methods: A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
|
|
401
|
+
:param pulumi.Input[_builtins.str] mfa_enrollment: (Default: `OPTIONAL`) Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
|
|
402
|
+
:param pulumi.Input[_builtins.str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
403
|
+
:param pulumi.Input[_builtins.str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
404
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] security_integrations: A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
|
|
406
405
|
"""
|
|
407
406
|
...
|
|
408
407
|
@overload
|
|
@@ -432,15 +431,15 @@ class AuthenticationPolicy(pulumi.CustomResource):
|
|
|
432
431
|
def _internal_init(__self__,
|
|
433
432
|
resource_name: str,
|
|
434
433
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
435
|
-
authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
436
|
-
client_types: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
437
|
-
comment: Optional[pulumi.Input[
|
|
438
|
-
database: Optional[pulumi.Input[
|
|
439
|
-
mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
440
|
-
mfa_enrollment: Optional[pulumi.Input[
|
|
441
|
-
name: Optional[pulumi.Input[
|
|
442
|
-
schema: Optional[pulumi.Input[
|
|
443
|
-
security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
434
|
+
authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
435
|
+
client_types: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
436
|
+
comment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
437
|
+
database: Optional[pulumi.Input[_builtins.str]] = None,
|
|
438
|
+
mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
439
|
+
mfa_enrollment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
440
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
441
|
+
schema: Optional[pulumi.Input[_builtins.str]] = None,
|
|
442
|
+
security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
444
443
|
__props__=None):
|
|
445
444
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
446
445
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -476,17 +475,17 @@ class AuthenticationPolicy(pulumi.CustomResource):
|
|
|
476
475
|
def get(resource_name: str,
|
|
477
476
|
id: pulumi.Input[str],
|
|
478
477
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
479
|
-
authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
480
|
-
client_types: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
481
|
-
comment: Optional[pulumi.Input[
|
|
482
|
-
database: Optional[pulumi.Input[
|
|
478
|
+
authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
479
|
+
client_types: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
480
|
+
comment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
481
|
+
database: Optional[pulumi.Input[_builtins.str]] = None,
|
|
483
482
|
describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['AuthenticationPolicyDescribeOutputArgs', 'AuthenticationPolicyDescribeOutputArgsDict']]]]] = None,
|
|
484
|
-
fully_qualified_name: Optional[pulumi.Input[
|
|
485
|
-
mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
486
|
-
mfa_enrollment: Optional[pulumi.Input[
|
|
487
|
-
name: Optional[pulumi.Input[
|
|
488
|
-
schema: Optional[pulumi.Input[
|
|
489
|
-
security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
483
|
+
fully_qualified_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
484
|
+
mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
485
|
+
mfa_enrollment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
486
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
487
|
+
schema: Optional[pulumi.Input[_builtins.str]] = None,
|
|
488
|
+
security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
490
489
|
show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['AuthenticationPolicyShowOutputArgs', 'AuthenticationPolicyShowOutputArgsDict']]]]] = None) -> 'AuthenticationPolicy':
|
|
491
490
|
"""
|
|
492
491
|
Get an existing AuthenticationPolicy resource's state with the given name, id, and optional extra
|
|
@@ -495,17 +494,17 @@ class AuthenticationPolicy(pulumi.CustomResource):
|
|
|
495
494
|
:param str resource_name: The unique name of the resulting resource.
|
|
496
495
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
497
496
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
498
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
499
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
500
|
-
:param pulumi.Input[
|
|
501
|
-
:param pulumi.Input[
|
|
497
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] authentication_methods: A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
|
|
498
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] client_types: A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
|
|
499
|
+
:param pulumi.Input[_builtins.str] comment: Specifies a comment for the authentication policy.
|
|
500
|
+
:param pulumi.Input[_builtins.str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
502
501
|
:param pulumi.Input[Sequence[pulumi.Input[Union['AuthenticationPolicyDescribeOutputArgs', 'AuthenticationPolicyDescribeOutputArgsDict']]]] describe_outputs: Outputs the result of `DESCRIBE AUTHENTICATION POLICY` for the given policy.
|
|
503
|
-
:param pulumi.Input[
|
|
504
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
505
|
-
:param pulumi.Input[
|
|
506
|
-
:param pulumi.Input[
|
|
507
|
-
:param pulumi.Input[
|
|
508
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
502
|
+
:param pulumi.Input[_builtins.str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
503
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] mfa_authentication_methods: A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
|
|
504
|
+
:param pulumi.Input[_builtins.str] mfa_enrollment: (Default: `OPTIONAL`) Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
|
|
505
|
+
:param pulumi.Input[_builtins.str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
506
|
+
:param pulumi.Input[_builtins.str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
507
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] security_integrations: A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
|
|
509
508
|
:param pulumi.Input[Sequence[pulumi.Input[Union['AuthenticationPolicyShowOutputArgs', 'AuthenticationPolicyShowOutputArgsDict']]]] show_outputs: Outputs the result of `SHOW AUTHENTICATION POLICIES` for the given policy.
|
|
510
509
|
"""
|
|
511
510
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
@@ -526,39 +525,39 @@ class AuthenticationPolicy(pulumi.CustomResource):
|
|
|
526
525
|
__props__.__dict__["show_outputs"] = show_outputs
|
|
527
526
|
return AuthenticationPolicy(resource_name, opts=opts, __props__=__props__)
|
|
528
527
|
|
|
529
|
-
@property
|
|
528
|
+
@_builtins.property
|
|
530
529
|
@pulumi.getter(name="authenticationMethods")
|
|
531
|
-
def authentication_methods(self) -> pulumi.Output[Optional[Sequence[
|
|
530
|
+
def authentication_methods(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
532
531
|
"""
|
|
533
532
|
A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
|
|
534
533
|
"""
|
|
535
534
|
return pulumi.get(self, "authentication_methods")
|
|
536
535
|
|
|
537
|
-
@property
|
|
536
|
+
@_builtins.property
|
|
538
537
|
@pulumi.getter(name="clientTypes")
|
|
539
|
-
def client_types(self) -> pulumi.Output[Optional[Sequence[
|
|
538
|
+
def client_types(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
540
539
|
"""
|
|
541
540
|
A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
|
|
542
541
|
"""
|
|
543
542
|
return pulumi.get(self, "client_types")
|
|
544
543
|
|
|
545
|
-
@property
|
|
544
|
+
@_builtins.property
|
|
546
545
|
@pulumi.getter
|
|
547
|
-
def comment(self) -> pulumi.Output[Optional[
|
|
546
|
+
def comment(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
548
547
|
"""
|
|
549
548
|
Specifies a comment for the authentication policy.
|
|
550
549
|
"""
|
|
551
550
|
return pulumi.get(self, "comment")
|
|
552
551
|
|
|
553
|
-
@property
|
|
552
|
+
@_builtins.property
|
|
554
553
|
@pulumi.getter
|
|
555
|
-
def database(self) -> pulumi.Output[
|
|
554
|
+
def database(self) -> pulumi.Output[_builtins.str]:
|
|
556
555
|
"""
|
|
557
556
|
The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
558
557
|
"""
|
|
559
558
|
return pulumi.get(self, "database")
|
|
560
559
|
|
|
561
|
-
@property
|
|
560
|
+
@_builtins.property
|
|
562
561
|
@pulumi.getter(name="describeOutputs")
|
|
563
562
|
def describe_outputs(self) -> pulumi.Output[Sequence['outputs.AuthenticationPolicyDescribeOutput']]:
|
|
564
563
|
"""
|
|
@@ -566,55 +565,55 @@ class AuthenticationPolicy(pulumi.CustomResource):
|
|
|
566
565
|
"""
|
|
567
566
|
return pulumi.get(self, "describe_outputs")
|
|
568
567
|
|
|
569
|
-
@property
|
|
568
|
+
@_builtins.property
|
|
570
569
|
@pulumi.getter(name="fullyQualifiedName")
|
|
571
|
-
def fully_qualified_name(self) -> pulumi.Output[
|
|
570
|
+
def fully_qualified_name(self) -> pulumi.Output[_builtins.str]:
|
|
572
571
|
"""
|
|
573
572
|
Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
574
573
|
"""
|
|
575
574
|
return pulumi.get(self, "fully_qualified_name")
|
|
576
575
|
|
|
577
|
-
@property
|
|
576
|
+
@_builtins.property
|
|
578
577
|
@pulumi.getter(name="mfaAuthenticationMethods")
|
|
579
|
-
def mfa_authentication_methods(self) -> pulumi.Output[Optional[Sequence[
|
|
578
|
+
def mfa_authentication_methods(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
580
579
|
"""
|
|
581
580
|
A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
|
|
582
581
|
"""
|
|
583
582
|
return pulumi.get(self, "mfa_authentication_methods")
|
|
584
583
|
|
|
585
|
-
@property
|
|
584
|
+
@_builtins.property
|
|
586
585
|
@pulumi.getter(name="mfaEnrollment")
|
|
587
|
-
def mfa_enrollment(self) -> pulumi.Output[Optional[
|
|
586
|
+
def mfa_enrollment(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
588
587
|
"""
|
|
589
588
|
(Default: `OPTIONAL`) Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
|
|
590
589
|
"""
|
|
591
590
|
return pulumi.get(self, "mfa_enrollment")
|
|
592
591
|
|
|
593
|
-
@property
|
|
592
|
+
@_builtins.property
|
|
594
593
|
@pulumi.getter
|
|
595
|
-
def name(self) -> pulumi.Output[
|
|
594
|
+
def name(self) -> pulumi.Output[_builtins.str]:
|
|
596
595
|
"""
|
|
597
596
|
Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
598
597
|
"""
|
|
599
598
|
return pulumi.get(self, "name")
|
|
600
599
|
|
|
601
|
-
@property
|
|
600
|
+
@_builtins.property
|
|
602
601
|
@pulumi.getter
|
|
603
|
-
def schema(self) -> pulumi.Output[
|
|
602
|
+
def schema(self) -> pulumi.Output[_builtins.str]:
|
|
604
603
|
"""
|
|
605
604
|
The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
606
605
|
"""
|
|
607
606
|
return pulumi.get(self, "schema")
|
|
608
607
|
|
|
609
|
-
@property
|
|
608
|
+
@_builtins.property
|
|
610
609
|
@pulumi.getter(name="securityIntegrations")
|
|
611
|
-
def security_integrations(self) -> pulumi.Output[Optional[Sequence[
|
|
610
|
+
def security_integrations(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
612
611
|
"""
|
|
613
612
|
A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
|
|
614
613
|
"""
|
|
615
614
|
return pulumi.get(self, "security_integrations")
|
|
616
615
|
|
|
617
|
-
@property
|
|
616
|
+
@_builtins.property
|
|
618
617
|
@pulumi.getter(name="showOutputs")
|
|
619
618
|
def show_outputs(self) -> pulumi.Output[Sequence['outputs.AuthenticationPolicyShowOutput']]:
|
|
620
619
|
"""
|