pulumi-snowflake 2.3.0a1753339260__py3-none-any.whl → 2.3.0a1753415140__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of pulumi-snowflake might be problematic. Click here for more details.

Files changed (160) hide show
  1. pulumi_snowflake/__init__.py +20 -1
  2. pulumi_snowflake/_inputs.py +17236 -16797
  3. pulumi_snowflake/account.py +252 -253
  4. pulumi_snowflake/account_authentication_policy_attachment.py +18 -19
  5. pulumi_snowflake/account_parameter.py +35 -36
  6. pulumi_snowflake/account_password_policy_attachment.py +18 -19
  7. pulumi_snowflake/account_role.py +42 -43
  8. pulumi_snowflake/alert.py +149 -150
  9. pulumi_snowflake/api_authentication_integration_with_authorization_code_grant.py +197 -198
  10. pulumi_snowflake/api_authentication_integration_with_client_credentials.py +180 -181
  11. pulumi_snowflake/api_authentication_integration_with_jwt_bearer.py +193 -194
  12. pulumi_snowflake/api_integration.py +251 -252
  13. pulumi_snowflake/authentication_policy.py +167 -168
  14. pulumi_snowflake/compute_pool.py +167 -168
  15. pulumi_snowflake/config/__init__.py +1 -1
  16. pulumi_snowflake/config/__init__.pyi +1 -2
  17. pulumi_snowflake/config/outputs.py +21 -22
  18. pulumi_snowflake/config/vars.py +43 -44
  19. pulumi_snowflake/cortex_search_service.py +191 -192
  20. pulumi_snowflake/current_account.py +2096 -2097
  21. pulumi_snowflake/current_organization_account.py +5863 -0
  22. pulumi_snowflake/database.py +353 -354
  23. pulumi_snowflake/database_role.py +63 -64
  24. pulumi_snowflake/dynamic_table.py +274 -275
  25. pulumi_snowflake/email_notification_integration.py +70 -71
  26. pulumi_snowflake/execute.py +61 -62
  27. pulumi_snowflake/external_function.py +280 -281
  28. pulumi_snowflake/external_oauth_integration.py +288 -289
  29. pulumi_snowflake/external_table.py +246 -247
  30. pulumi_snowflake/external_volume.py +68 -69
  31. pulumi_snowflake/failover_group.py +135 -136
  32. pulumi_snowflake/file_format.py +622 -623
  33. pulumi_snowflake/function_java.py +320 -321
  34. pulumi_snowflake/function_javascript.py +243 -244
  35. pulumi_snowflake/function_python.py +334 -335
  36. pulumi_snowflake/function_scala.py +320 -321
  37. pulumi_snowflake/function_sql.py +226 -227
  38. pulumi_snowflake/get_account_roles.py +16 -17
  39. pulumi_snowflake/get_accounts.py +16 -17
  40. pulumi_snowflake/get_alerts.py +22 -23
  41. pulumi_snowflake/get_compute_pools.py +23 -24
  42. pulumi_snowflake/get_connections.py +10 -11
  43. pulumi_snowflake/get_cortex_search_services.py +18 -19
  44. pulumi_snowflake/get_current_account.py +9 -10
  45. pulumi_snowflake/get_current_role.py +5 -6
  46. pulumi_snowflake/get_database.py +25 -26
  47. pulumi_snowflake/get_database_role.py +19 -20
  48. pulumi_snowflake/get_database_roles.py +17 -18
  49. pulumi_snowflake/get_databases.py +29 -30
  50. pulumi_snowflake/get_dynamic_tables.py +13 -14
  51. pulumi_snowflake/get_external_functions.py +16 -17
  52. pulumi_snowflake/get_external_tables.py +16 -17
  53. pulumi_snowflake/get_failover_groups.py +10 -11
  54. pulumi_snowflake/get_file_formats.py +16 -17
  55. pulumi_snowflake/get_functions.py +16 -17
  56. pulumi_snowflake/get_git_repositories.py +18 -19
  57. pulumi_snowflake/get_grants.py +9 -10
  58. pulumi_snowflake/get_image_repositories.py +11 -12
  59. pulumi_snowflake/get_masking_policies.py +18 -19
  60. pulumi_snowflake/get_materialized_views.py +16 -17
  61. pulumi_snowflake/get_network_policies.py +16 -17
  62. pulumi_snowflake/get_parameters.py +34 -35
  63. pulumi_snowflake/get_pipes.py +16 -17
  64. pulumi_snowflake/get_procedures.py +16 -17
  65. pulumi_snowflake/get_resource_monitors.py +10 -11
  66. pulumi_snowflake/get_row_access_policies.py +18 -19
  67. pulumi_snowflake/get_schemas.py +30 -31
  68. pulumi_snowflake/get_secrets.py +17 -18
  69. pulumi_snowflake/get_security_integrations.py +16 -17
  70. pulumi_snowflake/get_sequences.py +16 -17
  71. pulumi_snowflake/get_services.py +30 -31
  72. pulumi_snowflake/get_shares.py +10 -11
  73. pulumi_snowflake/get_stages.py +16 -17
  74. pulumi_snowflake/get_storage_integrations.py +4 -5
  75. pulumi_snowflake/get_streamlits.py +18 -19
  76. pulumi_snowflake/get_streams.py +24 -25
  77. pulumi_snowflake/get_system_generate_scim_access_token.py +11 -12
  78. pulumi_snowflake/get_system_get_aws_sns_iam_policy.py +11 -12
  79. pulumi_snowflake/get_system_get_private_link_config.py +21 -22
  80. pulumi_snowflake/get_system_get_snowflake_platform_info.py +7 -8
  81. pulumi_snowflake/get_tables.py +24 -25
  82. pulumi_snowflake/get_tags.py +11 -12
  83. pulumi_snowflake/get_tasks.py +30 -31
  84. pulumi_snowflake/get_user_programmatic_access_tokens.py +113 -0
  85. pulumi_snowflake/get_users.py +29 -30
  86. pulumi_snowflake/get_views.py +24 -25
  87. pulumi_snowflake/get_warehouses.py +22 -23
  88. pulumi_snowflake/git_repository.py +133 -134
  89. pulumi_snowflake/grant_account_role.py +52 -53
  90. pulumi_snowflake/grant_application_role.py +52 -53
  91. pulumi_snowflake/grant_database_role.py +69 -70
  92. pulumi_snowflake/grant_ownership.py +55 -56
  93. pulumi_snowflake/grant_privileges_to_account_role.py +125 -126
  94. pulumi_snowflake/grant_privileges_to_database_role.py +122 -123
  95. pulumi_snowflake/grant_privileges_to_share.py +154 -155
  96. pulumi_snowflake/image_repository.py +80 -81
  97. pulumi_snowflake/job_service.py +148 -149
  98. pulumi_snowflake/legacy_service_user.py +1269 -1270
  99. pulumi_snowflake/managed_account.py +140 -141
  100. pulumi_snowflake/masking_policy.py +136 -137
  101. pulumi_snowflake/materialized_view.py +149 -150
  102. pulumi_snowflake/network_policy.py +116 -117
  103. pulumi_snowflake/network_policy_attachment.py +52 -53
  104. pulumi_snowflake/network_rule.py +129 -130
  105. pulumi_snowflake/notification_integration.py +298 -299
  106. pulumi_snowflake/oauth_integration_for_custom_clients.py +263 -264
  107. pulumi_snowflake/oauth_integration_for_partner_applications.py +169 -170
  108. pulumi_snowflake/object_parameter.py +72 -73
  109. pulumi_snowflake/outputs.py +15957 -15511
  110. pulumi_snowflake/password_policy.py +299 -300
  111. pulumi_snowflake/pipe.py +181 -182
  112. pulumi_snowflake/primary_connection.py +70 -71
  113. pulumi_snowflake/procedure_java.py +341 -342
  114. pulumi_snowflake/procedure_javascript.py +247 -248
  115. pulumi_snowflake/procedure_python.py +338 -339
  116. pulumi_snowflake/procedure_scala.py +341 -342
  117. pulumi_snowflake/procedure_sql.py +247 -248
  118. pulumi_snowflake/provider.py +377 -378
  119. pulumi_snowflake/pulumi-plugin.json +1 -1
  120. pulumi_snowflake/resource_monitor.py +165 -166
  121. pulumi_snowflake/row_access_policy.py +102 -103
  122. pulumi_snowflake/saml2_integration.py +303 -304
  123. pulumi_snowflake/schema.py +390 -391
  124. pulumi_snowflake/scim_integration.py +133 -134
  125. pulumi_snowflake/secondary_connection.py +72 -73
  126. pulumi_snowflake/secondary_database.py +350 -351
  127. pulumi_snowflake/secret_with_authorization_code_grant.py +138 -139
  128. pulumi_snowflake/secret_with_basic_authentication.py +121 -122
  129. pulumi_snowflake/secret_with_client_credentials.py +125 -126
  130. pulumi_snowflake/secret_with_generic_string.py +104 -105
  131. pulumi_snowflake/sequence.py +121 -122
  132. pulumi_snowflake/service.py +233 -234
  133. pulumi_snowflake/service_user.py +1239 -1240
  134. pulumi_snowflake/share.py +61 -62
  135. pulumi_snowflake/shared_database.py +299 -300
  136. pulumi_snowflake/stage.py +234 -235
  137. pulumi_snowflake/storage_integration.py +230 -231
  138. pulumi_snowflake/stream_on_directory_table.py +128 -129
  139. pulumi_snowflake/stream_on_external_table.py +151 -152
  140. pulumi_snowflake/stream_on_table.py +164 -165
  141. pulumi_snowflake/stream_on_view.py +164 -165
  142. pulumi_snowflake/streamlit.py +184 -185
  143. pulumi_snowflake/table.py +147 -148
  144. pulumi_snowflake/table_column_masking_policy_application.py +52 -53
  145. pulumi_snowflake/table_constraint.py +191 -192
  146. pulumi_snowflake/tag.py +114 -115
  147. pulumi_snowflake/tag_association.py +86 -87
  148. pulumi_snowflake/task.py +1224 -1225
  149. pulumi_snowflake/user.py +1346 -1347
  150. pulumi_snowflake/user_authentication_policy_attachment.py +35 -36
  151. pulumi_snowflake/user_password_policy_attachment.py +35 -36
  152. pulumi_snowflake/user_programmatic_access_token.py +598 -0
  153. pulumi_snowflake/user_public_keys.py +52 -53
  154. pulumi_snowflake/view.py +187 -188
  155. pulumi_snowflake/warehouse.py +286 -287
  156. {pulumi_snowflake-2.3.0a1753339260.dist-info → pulumi_snowflake-2.3.0a1753415140.dist-info}/METADATA +1 -1
  157. pulumi_snowflake-2.3.0a1753415140.dist-info/RECORD +161 -0
  158. pulumi_snowflake-2.3.0a1753339260.dist-info/RECORD +0 -158
  159. {pulumi_snowflake-2.3.0a1753339260.dist-info → pulumi_snowflake-2.3.0a1753415140.dist-info}/WHEEL +0 -0
  160. {pulumi_snowflake-2.3.0a1753339260.dist-info → pulumi_snowflake-2.3.0a1753415140.dist-info}/top_level.txt +0 -0
@@ -2,8 +2,7 @@
2
2
  # *** WARNING: this file was generated by pulumi-language-python. ***
3
3
  # *** Do not edit by hand unless you're certain you know what you are doing! ***
4
4
 
5
- import builtins
6
- import copy
5
+ import builtins as _builtins
7
6
  import warnings
8
7
  import sys
9
8
  import pulumi
@@ -22,26 +21,26 @@ __all__ = ['AuthenticationPolicyArgs', 'AuthenticationPolicy']
22
21
  @pulumi.input_type
23
22
  class AuthenticationPolicyArgs:
24
23
  def __init__(__self__, *,
25
- database: pulumi.Input[builtins.str],
26
- schema: pulumi.Input[builtins.str],
27
- authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
28
- client_types: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
29
- comment: Optional[pulumi.Input[builtins.str]] = None,
30
- mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
31
- mfa_enrollment: Optional[pulumi.Input[builtins.str]] = None,
32
- name: Optional[pulumi.Input[builtins.str]] = None,
33
- security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None):
24
+ database: pulumi.Input[_builtins.str],
25
+ schema: pulumi.Input[_builtins.str],
26
+ authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
27
+ client_types: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
28
+ comment: Optional[pulumi.Input[_builtins.str]] = None,
29
+ mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
30
+ mfa_enrollment: Optional[pulumi.Input[_builtins.str]] = None,
31
+ name: Optional[pulumi.Input[_builtins.str]] = None,
32
+ security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None):
34
33
  """
35
34
  The set of arguments for constructing a AuthenticationPolicy resource.
36
- :param pulumi.Input[builtins.str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
37
- :param pulumi.Input[builtins.str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
38
- :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] authentication_methods: A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
39
- :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] client_types: A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
40
- :param pulumi.Input[builtins.str] comment: Specifies a comment for the authentication policy.
41
- :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] mfa_authentication_methods: A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
42
- :param pulumi.Input[builtins.str] mfa_enrollment: (Default: `OPTIONAL`) Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
43
- :param pulumi.Input[builtins.str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
44
- :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] security_integrations: A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
35
+ :param pulumi.Input[_builtins.str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
36
+ :param pulumi.Input[_builtins.str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
37
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] authentication_methods: A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
38
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] client_types: A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
39
+ :param pulumi.Input[_builtins.str] comment: Specifies a comment for the authentication policy.
40
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] mfa_authentication_methods: A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
41
+ :param pulumi.Input[_builtins.str] mfa_enrollment: (Default: `OPTIONAL`) Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
42
+ :param pulumi.Input[_builtins.str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
43
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] security_integrations: A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
45
44
  """
46
45
  pulumi.set(__self__, "database", database)
47
46
  pulumi.set(__self__, "schema", schema)
@@ -60,143 +59,143 @@ class AuthenticationPolicyArgs:
60
59
  if security_integrations is not None:
61
60
  pulumi.set(__self__, "security_integrations", security_integrations)
62
61
 
63
- @property
62
+ @_builtins.property
64
63
  @pulumi.getter
65
- def database(self) -> pulumi.Input[builtins.str]:
64
+ def database(self) -> pulumi.Input[_builtins.str]:
66
65
  """
67
66
  The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
68
67
  """
69
68
  return pulumi.get(self, "database")
70
69
 
71
70
  @database.setter
72
- def database(self, value: pulumi.Input[builtins.str]):
71
+ def database(self, value: pulumi.Input[_builtins.str]):
73
72
  pulumi.set(self, "database", value)
74
73
 
75
- @property
74
+ @_builtins.property
76
75
  @pulumi.getter
77
- def schema(self) -> pulumi.Input[builtins.str]:
76
+ def schema(self) -> pulumi.Input[_builtins.str]:
78
77
  """
79
78
  The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
80
79
  """
81
80
  return pulumi.get(self, "schema")
82
81
 
83
82
  @schema.setter
84
- def schema(self, value: pulumi.Input[builtins.str]):
83
+ def schema(self, value: pulumi.Input[_builtins.str]):
85
84
  pulumi.set(self, "schema", value)
86
85
 
87
- @property
86
+ @_builtins.property
88
87
  @pulumi.getter(name="authenticationMethods")
89
- def authentication_methods(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
88
+ def authentication_methods(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
90
89
  """
91
90
  A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
92
91
  """
93
92
  return pulumi.get(self, "authentication_methods")
94
93
 
95
94
  @authentication_methods.setter
96
- def authentication_methods(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
95
+ def authentication_methods(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
97
96
  pulumi.set(self, "authentication_methods", value)
98
97
 
99
- @property
98
+ @_builtins.property
100
99
  @pulumi.getter(name="clientTypes")
101
- def client_types(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
100
+ def client_types(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
102
101
  """
103
102
  A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
104
103
  """
105
104
  return pulumi.get(self, "client_types")
106
105
 
107
106
  @client_types.setter
108
- def client_types(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
107
+ def client_types(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
109
108
  pulumi.set(self, "client_types", value)
110
109
 
111
- @property
110
+ @_builtins.property
112
111
  @pulumi.getter
113
- def comment(self) -> Optional[pulumi.Input[builtins.str]]:
112
+ def comment(self) -> Optional[pulumi.Input[_builtins.str]]:
114
113
  """
115
114
  Specifies a comment for the authentication policy.
116
115
  """
117
116
  return pulumi.get(self, "comment")
118
117
 
119
118
  @comment.setter
120
- def comment(self, value: Optional[pulumi.Input[builtins.str]]):
119
+ def comment(self, value: Optional[pulumi.Input[_builtins.str]]):
121
120
  pulumi.set(self, "comment", value)
122
121
 
123
- @property
122
+ @_builtins.property
124
123
  @pulumi.getter(name="mfaAuthenticationMethods")
125
- def mfa_authentication_methods(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
124
+ def mfa_authentication_methods(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
126
125
  """
127
126
  A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
128
127
  """
129
128
  return pulumi.get(self, "mfa_authentication_methods")
130
129
 
131
130
  @mfa_authentication_methods.setter
132
- def mfa_authentication_methods(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
131
+ def mfa_authentication_methods(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
133
132
  pulumi.set(self, "mfa_authentication_methods", value)
134
133
 
135
- @property
134
+ @_builtins.property
136
135
  @pulumi.getter(name="mfaEnrollment")
137
- def mfa_enrollment(self) -> Optional[pulumi.Input[builtins.str]]:
136
+ def mfa_enrollment(self) -> Optional[pulumi.Input[_builtins.str]]:
138
137
  """
139
138
  (Default: `OPTIONAL`) Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
140
139
  """
141
140
  return pulumi.get(self, "mfa_enrollment")
142
141
 
143
142
  @mfa_enrollment.setter
144
- def mfa_enrollment(self, value: Optional[pulumi.Input[builtins.str]]):
143
+ def mfa_enrollment(self, value: Optional[pulumi.Input[_builtins.str]]):
145
144
  pulumi.set(self, "mfa_enrollment", value)
146
145
 
147
- @property
146
+ @_builtins.property
148
147
  @pulumi.getter
149
- def name(self) -> Optional[pulumi.Input[builtins.str]]:
148
+ def name(self) -> Optional[pulumi.Input[_builtins.str]]:
150
149
  """
151
150
  Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
152
151
  """
153
152
  return pulumi.get(self, "name")
154
153
 
155
154
  @name.setter
156
- def name(self, value: Optional[pulumi.Input[builtins.str]]):
155
+ def name(self, value: Optional[pulumi.Input[_builtins.str]]):
157
156
  pulumi.set(self, "name", value)
158
157
 
159
- @property
158
+ @_builtins.property
160
159
  @pulumi.getter(name="securityIntegrations")
161
- def security_integrations(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
160
+ def security_integrations(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
162
161
  """
163
162
  A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
164
163
  """
165
164
  return pulumi.get(self, "security_integrations")
166
165
 
167
166
  @security_integrations.setter
168
- def security_integrations(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
167
+ def security_integrations(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
169
168
  pulumi.set(self, "security_integrations", value)
170
169
 
171
170
 
172
171
  @pulumi.input_type
173
172
  class _AuthenticationPolicyState:
174
173
  def __init__(__self__, *,
175
- authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
176
- client_types: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
177
- comment: Optional[pulumi.Input[builtins.str]] = None,
178
- database: Optional[pulumi.Input[builtins.str]] = None,
174
+ authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
175
+ client_types: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
176
+ comment: Optional[pulumi.Input[_builtins.str]] = None,
177
+ database: Optional[pulumi.Input[_builtins.str]] = None,
179
178
  describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['AuthenticationPolicyDescribeOutputArgs']]]] = None,
180
- fully_qualified_name: Optional[pulumi.Input[builtins.str]] = None,
181
- mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
182
- mfa_enrollment: Optional[pulumi.Input[builtins.str]] = None,
183
- name: Optional[pulumi.Input[builtins.str]] = None,
184
- schema: Optional[pulumi.Input[builtins.str]] = None,
185
- security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
179
+ fully_qualified_name: Optional[pulumi.Input[_builtins.str]] = None,
180
+ mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
181
+ mfa_enrollment: Optional[pulumi.Input[_builtins.str]] = None,
182
+ name: Optional[pulumi.Input[_builtins.str]] = None,
183
+ schema: Optional[pulumi.Input[_builtins.str]] = None,
184
+ security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
186
185
  show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['AuthenticationPolicyShowOutputArgs']]]] = None):
187
186
  """
188
187
  Input properties used for looking up and filtering AuthenticationPolicy resources.
189
- :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] authentication_methods: A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
190
- :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] client_types: A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
191
- :param pulumi.Input[builtins.str] comment: Specifies a comment for the authentication policy.
192
- :param pulumi.Input[builtins.str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
188
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] authentication_methods: A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
189
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] client_types: A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
190
+ :param pulumi.Input[_builtins.str] comment: Specifies a comment for the authentication policy.
191
+ :param pulumi.Input[_builtins.str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
193
192
  :param pulumi.Input[Sequence[pulumi.Input['AuthenticationPolicyDescribeOutputArgs']]] describe_outputs: Outputs the result of `DESCRIBE AUTHENTICATION POLICY` for the given policy.
194
- :param pulumi.Input[builtins.str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
195
- :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] mfa_authentication_methods: A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
196
- :param pulumi.Input[builtins.str] mfa_enrollment: (Default: `OPTIONAL`) Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
197
- :param pulumi.Input[builtins.str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
198
- :param pulumi.Input[builtins.str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
199
- :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] security_integrations: A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
193
+ :param pulumi.Input[_builtins.str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
194
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] mfa_authentication_methods: A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
195
+ :param pulumi.Input[_builtins.str] mfa_enrollment: (Default: `OPTIONAL`) Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
196
+ :param pulumi.Input[_builtins.str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
197
+ :param pulumi.Input[_builtins.str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
198
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] security_integrations: A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
200
199
  :param pulumi.Input[Sequence[pulumi.Input['AuthenticationPolicyShowOutputArgs']]] show_outputs: Outputs the result of `SHOW AUTHENTICATION POLICIES` for the given policy.
201
200
  """
202
201
  if authentication_methods is not None:
@@ -224,55 +223,55 @@ class _AuthenticationPolicyState:
224
223
  if show_outputs is not None:
225
224
  pulumi.set(__self__, "show_outputs", show_outputs)
226
225
 
227
- @property
226
+ @_builtins.property
228
227
  @pulumi.getter(name="authenticationMethods")
229
- def authentication_methods(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
228
+ def authentication_methods(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
230
229
  """
231
230
  A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
232
231
  """
233
232
  return pulumi.get(self, "authentication_methods")
234
233
 
235
234
  @authentication_methods.setter
236
- def authentication_methods(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
235
+ def authentication_methods(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
237
236
  pulumi.set(self, "authentication_methods", value)
238
237
 
239
- @property
238
+ @_builtins.property
240
239
  @pulumi.getter(name="clientTypes")
241
- def client_types(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
240
+ def client_types(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
242
241
  """
243
242
  A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
244
243
  """
245
244
  return pulumi.get(self, "client_types")
246
245
 
247
246
  @client_types.setter
248
- def client_types(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
247
+ def client_types(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
249
248
  pulumi.set(self, "client_types", value)
250
249
 
251
- @property
250
+ @_builtins.property
252
251
  @pulumi.getter
253
- def comment(self) -> Optional[pulumi.Input[builtins.str]]:
252
+ def comment(self) -> Optional[pulumi.Input[_builtins.str]]:
254
253
  """
255
254
  Specifies a comment for the authentication policy.
256
255
  """
257
256
  return pulumi.get(self, "comment")
258
257
 
259
258
  @comment.setter
260
- def comment(self, value: Optional[pulumi.Input[builtins.str]]):
259
+ def comment(self, value: Optional[pulumi.Input[_builtins.str]]):
261
260
  pulumi.set(self, "comment", value)
262
261
 
263
- @property
262
+ @_builtins.property
264
263
  @pulumi.getter
265
- def database(self) -> Optional[pulumi.Input[builtins.str]]:
264
+ def database(self) -> Optional[pulumi.Input[_builtins.str]]:
266
265
  """
267
266
  The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
268
267
  """
269
268
  return pulumi.get(self, "database")
270
269
 
271
270
  @database.setter
272
- def database(self, value: Optional[pulumi.Input[builtins.str]]):
271
+ def database(self, value: Optional[pulumi.Input[_builtins.str]]):
273
272
  pulumi.set(self, "database", value)
274
273
 
275
- @property
274
+ @_builtins.property
276
275
  @pulumi.getter(name="describeOutputs")
277
276
  def describe_outputs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['AuthenticationPolicyDescribeOutputArgs']]]]:
278
277
  """
@@ -284,79 +283,79 @@ class _AuthenticationPolicyState:
284
283
  def describe_outputs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['AuthenticationPolicyDescribeOutputArgs']]]]):
285
284
  pulumi.set(self, "describe_outputs", value)
286
285
 
287
- @property
286
+ @_builtins.property
288
287
  @pulumi.getter(name="fullyQualifiedName")
289
- def fully_qualified_name(self) -> Optional[pulumi.Input[builtins.str]]:
288
+ def fully_qualified_name(self) -> Optional[pulumi.Input[_builtins.str]]:
290
289
  """
291
290
  Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
292
291
  """
293
292
  return pulumi.get(self, "fully_qualified_name")
294
293
 
295
294
  @fully_qualified_name.setter
296
- def fully_qualified_name(self, value: Optional[pulumi.Input[builtins.str]]):
295
+ def fully_qualified_name(self, value: Optional[pulumi.Input[_builtins.str]]):
297
296
  pulumi.set(self, "fully_qualified_name", value)
298
297
 
299
- @property
298
+ @_builtins.property
300
299
  @pulumi.getter(name="mfaAuthenticationMethods")
301
- def mfa_authentication_methods(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
300
+ def mfa_authentication_methods(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
302
301
  """
303
302
  A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
304
303
  """
305
304
  return pulumi.get(self, "mfa_authentication_methods")
306
305
 
307
306
  @mfa_authentication_methods.setter
308
- def mfa_authentication_methods(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
307
+ def mfa_authentication_methods(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
309
308
  pulumi.set(self, "mfa_authentication_methods", value)
310
309
 
311
- @property
310
+ @_builtins.property
312
311
  @pulumi.getter(name="mfaEnrollment")
313
- def mfa_enrollment(self) -> Optional[pulumi.Input[builtins.str]]:
312
+ def mfa_enrollment(self) -> Optional[pulumi.Input[_builtins.str]]:
314
313
  """
315
314
  (Default: `OPTIONAL`) Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
316
315
  """
317
316
  return pulumi.get(self, "mfa_enrollment")
318
317
 
319
318
  @mfa_enrollment.setter
320
- def mfa_enrollment(self, value: Optional[pulumi.Input[builtins.str]]):
319
+ def mfa_enrollment(self, value: Optional[pulumi.Input[_builtins.str]]):
321
320
  pulumi.set(self, "mfa_enrollment", value)
322
321
 
323
- @property
322
+ @_builtins.property
324
323
  @pulumi.getter
325
- def name(self) -> Optional[pulumi.Input[builtins.str]]:
324
+ def name(self) -> Optional[pulumi.Input[_builtins.str]]:
326
325
  """
327
326
  Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
328
327
  """
329
328
  return pulumi.get(self, "name")
330
329
 
331
330
  @name.setter
332
- def name(self, value: Optional[pulumi.Input[builtins.str]]):
331
+ def name(self, value: Optional[pulumi.Input[_builtins.str]]):
333
332
  pulumi.set(self, "name", value)
334
333
 
335
- @property
334
+ @_builtins.property
336
335
  @pulumi.getter
337
- def schema(self) -> Optional[pulumi.Input[builtins.str]]:
336
+ def schema(self) -> Optional[pulumi.Input[_builtins.str]]:
338
337
  """
339
338
  The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
340
339
  """
341
340
  return pulumi.get(self, "schema")
342
341
 
343
342
  @schema.setter
344
- def schema(self, value: Optional[pulumi.Input[builtins.str]]):
343
+ def schema(self, value: Optional[pulumi.Input[_builtins.str]]):
345
344
  pulumi.set(self, "schema", value)
346
345
 
347
- @property
346
+ @_builtins.property
348
347
  @pulumi.getter(name="securityIntegrations")
349
- def security_integrations(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
348
+ def security_integrations(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
350
349
  """
351
350
  A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
352
351
  """
353
352
  return pulumi.get(self, "security_integrations")
354
353
 
355
354
  @security_integrations.setter
356
- def security_integrations(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
355
+ def security_integrations(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
357
356
  pulumi.set(self, "security_integrations", value)
358
357
 
359
- @property
358
+ @_builtins.property
360
359
  @pulumi.getter(name="showOutputs")
361
360
  def show_outputs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['AuthenticationPolicyShowOutputArgs']]]]:
362
361
  """
@@ -375,15 +374,15 @@ class AuthenticationPolicy(pulumi.CustomResource):
375
374
  def __init__(__self__,
376
375
  resource_name: str,
377
376
  opts: Optional[pulumi.ResourceOptions] = None,
378
- authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
379
- client_types: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
380
- comment: Optional[pulumi.Input[builtins.str]] = None,
381
- database: Optional[pulumi.Input[builtins.str]] = None,
382
- mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
383
- mfa_enrollment: Optional[pulumi.Input[builtins.str]] = None,
384
- name: Optional[pulumi.Input[builtins.str]] = None,
385
- schema: Optional[pulumi.Input[builtins.str]] = None,
386
- security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
377
+ authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
378
+ client_types: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
379
+ comment: Optional[pulumi.Input[_builtins.str]] = None,
380
+ database: Optional[pulumi.Input[_builtins.str]] = None,
381
+ mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
382
+ mfa_enrollment: Optional[pulumi.Input[_builtins.str]] = None,
383
+ name: Optional[pulumi.Input[_builtins.str]] = None,
384
+ schema: Optional[pulumi.Input[_builtins.str]] = None,
385
+ security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
387
386
  __props__=None):
388
387
  """
389
388
  ## Import
@@ -394,15 +393,15 @@ class AuthenticationPolicy(pulumi.CustomResource):
394
393
 
395
394
  :param str resource_name: The name of the resource.
396
395
  :param pulumi.ResourceOptions opts: Options for the resource.
397
- :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] authentication_methods: A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
398
- :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] client_types: A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
399
- :param pulumi.Input[builtins.str] comment: Specifies a comment for the authentication policy.
400
- :param pulumi.Input[builtins.str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
401
- :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] mfa_authentication_methods: A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
402
- :param pulumi.Input[builtins.str] mfa_enrollment: (Default: `OPTIONAL`) Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
403
- :param pulumi.Input[builtins.str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
404
- :param pulumi.Input[builtins.str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
405
- :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] security_integrations: A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
396
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] authentication_methods: A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
397
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] client_types: A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
398
+ :param pulumi.Input[_builtins.str] comment: Specifies a comment for the authentication policy.
399
+ :param pulumi.Input[_builtins.str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
400
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] mfa_authentication_methods: A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
401
+ :param pulumi.Input[_builtins.str] mfa_enrollment: (Default: `OPTIONAL`) Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
402
+ :param pulumi.Input[_builtins.str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
403
+ :param pulumi.Input[_builtins.str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
404
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] security_integrations: A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
406
405
  """
407
406
  ...
408
407
  @overload
@@ -432,15 +431,15 @@ class AuthenticationPolicy(pulumi.CustomResource):
432
431
  def _internal_init(__self__,
433
432
  resource_name: str,
434
433
  opts: Optional[pulumi.ResourceOptions] = None,
435
- authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
436
- client_types: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
437
- comment: Optional[pulumi.Input[builtins.str]] = None,
438
- database: Optional[pulumi.Input[builtins.str]] = None,
439
- mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
440
- mfa_enrollment: Optional[pulumi.Input[builtins.str]] = None,
441
- name: Optional[pulumi.Input[builtins.str]] = None,
442
- schema: Optional[pulumi.Input[builtins.str]] = None,
443
- security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
434
+ authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
435
+ client_types: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
436
+ comment: Optional[pulumi.Input[_builtins.str]] = None,
437
+ database: Optional[pulumi.Input[_builtins.str]] = None,
438
+ mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
439
+ mfa_enrollment: Optional[pulumi.Input[_builtins.str]] = None,
440
+ name: Optional[pulumi.Input[_builtins.str]] = None,
441
+ schema: Optional[pulumi.Input[_builtins.str]] = None,
442
+ security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
444
443
  __props__=None):
445
444
  opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
446
445
  if not isinstance(opts, pulumi.ResourceOptions):
@@ -476,17 +475,17 @@ class AuthenticationPolicy(pulumi.CustomResource):
476
475
  def get(resource_name: str,
477
476
  id: pulumi.Input[str],
478
477
  opts: Optional[pulumi.ResourceOptions] = None,
479
- authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
480
- client_types: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
481
- comment: Optional[pulumi.Input[builtins.str]] = None,
482
- database: Optional[pulumi.Input[builtins.str]] = None,
478
+ authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
479
+ client_types: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
480
+ comment: Optional[pulumi.Input[_builtins.str]] = None,
481
+ database: Optional[pulumi.Input[_builtins.str]] = None,
483
482
  describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['AuthenticationPolicyDescribeOutputArgs', 'AuthenticationPolicyDescribeOutputArgsDict']]]]] = None,
484
- fully_qualified_name: Optional[pulumi.Input[builtins.str]] = None,
485
- mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
486
- mfa_enrollment: Optional[pulumi.Input[builtins.str]] = None,
487
- name: Optional[pulumi.Input[builtins.str]] = None,
488
- schema: Optional[pulumi.Input[builtins.str]] = None,
489
- security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
483
+ fully_qualified_name: Optional[pulumi.Input[_builtins.str]] = None,
484
+ mfa_authentication_methods: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
485
+ mfa_enrollment: Optional[pulumi.Input[_builtins.str]] = None,
486
+ name: Optional[pulumi.Input[_builtins.str]] = None,
487
+ schema: Optional[pulumi.Input[_builtins.str]] = None,
488
+ security_integrations: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
490
489
  show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['AuthenticationPolicyShowOutputArgs', 'AuthenticationPolicyShowOutputArgsDict']]]]] = None) -> 'AuthenticationPolicy':
491
490
  """
492
491
  Get an existing AuthenticationPolicy resource's state with the given name, id, and optional extra
@@ -495,17 +494,17 @@ class AuthenticationPolicy(pulumi.CustomResource):
495
494
  :param str resource_name: The unique name of the resulting resource.
496
495
  :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
497
496
  :param pulumi.ResourceOptions opts: Options for the resource.
498
- :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] authentication_methods: A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
499
- :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] client_types: A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
500
- :param pulumi.Input[builtins.str] comment: Specifies a comment for the authentication policy.
501
- :param pulumi.Input[builtins.str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
497
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] authentication_methods: A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
498
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] client_types: A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
499
+ :param pulumi.Input[_builtins.str] comment: Specifies a comment for the authentication policy.
500
+ :param pulumi.Input[_builtins.str] database: The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
502
501
  :param pulumi.Input[Sequence[pulumi.Input[Union['AuthenticationPolicyDescribeOutputArgs', 'AuthenticationPolicyDescribeOutputArgsDict']]]] describe_outputs: Outputs the result of `DESCRIBE AUTHENTICATION POLICY` for the given policy.
503
- :param pulumi.Input[builtins.str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
504
- :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] mfa_authentication_methods: A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
505
- :param pulumi.Input[builtins.str] mfa_enrollment: (Default: `OPTIONAL`) Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
506
- :param pulumi.Input[builtins.str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
507
- :param pulumi.Input[builtins.str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
508
- :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] security_integrations: A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
502
+ :param pulumi.Input[_builtins.str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
503
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] mfa_authentication_methods: A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
504
+ :param pulumi.Input[_builtins.str] mfa_enrollment: (Default: `OPTIONAL`) Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
505
+ :param pulumi.Input[_builtins.str] name: Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
506
+ :param pulumi.Input[_builtins.str] schema: The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
507
+ :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] security_integrations: A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
509
508
  :param pulumi.Input[Sequence[pulumi.Input[Union['AuthenticationPolicyShowOutputArgs', 'AuthenticationPolicyShowOutputArgsDict']]]] show_outputs: Outputs the result of `SHOW AUTHENTICATION POLICIES` for the given policy.
510
509
  """
511
510
  opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
@@ -526,39 +525,39 @@ class AuthenticationPolicy(pulumi.CustomResource):
526
525
  __props__.__dict__["show_outputs"] = show_outputs
527
526
  return AuthenticationPolicy(resource_name, opts=opts, __props__=__props__)
528
527
 
529
- @property
528
+ @_builtins.property
530
529
  @pulumi.getter(name="authenticationMethods")
531
- def authentication_methods(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
530
+ def authentication_methods(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
532
531
  """
533
532
  A list of authentication methods that are allowed during login. This parameter accepts one or more of the following values: `ALL` | `SAML` | `PASSWORD` | `OAUTH` | `KEYPAIR`
534
533
  """
535
534
  return pulumi.get(self, "authentication_methods")
536
535
 
537
- @property
536
+ @_builtins.property
538
537
  @pulumi.getter(name="clientTypes")
539
- def client_types(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
538
+ def client_types(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
540
539
  """
541
540
  A list of clients that can authenticate with Snowflake. If a client tries to connect, and the client is not one of the valid CLIENT*TYPES, then the login attempt fails. Allowed values are `ALL` | `SNOWFLAKE_UI` | `DRIVERS` | `SNOWSQL`. The CLIENT*TYPES property of an authentication policy is a best effort method to block user logins based on specific clients. It should not be used as the sole control to establish a security boundary.
542
541
  """
543
542
  return pulumi.get(self, "client_types")
544
543
 
545
- @property
544
+ @_builtins.property
546
545
  @pulumi.getter
547
- def comment(self) -> pulumi.Output[Optional[builtins.str]]:
546
+ def comment(self) -> pulumi.Output[Optional[_builtins.str]]:
548
547
  """
549
548
  Specifies a comment for the authentication policy.
550
549
  """
551
550
  return pulumi.get(self, "comment")
552
551
 
553
- @property
552
+ @_builtins.property
554
553
  @pulumi.getter
555
- def database(self) -> pulumi.Output[builtins.str]:
554
+ def database(self) -> pulumi.Output[_builtins.str]:
556
555
  """
557
556
  The database in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
558
557
  """
559
558
  return pulumi.get(self, "database")
560
559
 
561
- @property
560
+ @_builtins.property
562
561
  @pulumi.getter(name="describeOutputs")
563
562
  def describe_outputs(self) -> pulumi.Output[Sequence['outputs.AuthenticationPolicyDescribeOutput']]:
564
563
  """
@@ -566,55 +565,55 @@ class AuthenticationPolicy(pulumi.CustomResource):
566
565
  """
567
566
  return pulumi.get(self, "describe_outputs")
568
567
 
569
- @property
568
+ @_builtins.property
570
569
  @pulumi.getter(name="fullyQualifiedName")
571
- def fully_qualified_name(self) -> pulumi.Output[builtins.str]:
570
+ def fully_qualified_name(self) -> pulumi.Output[_builtins.str]:
572
571
  """
573
572
  Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
574
573
  """
575
574
  return pulumi.get(self, "fully_qualified_name")
576
575
 
577
- @property
576
+ @_builtins.property
578
577
  @pulumi.getter(name="mfaAuthenticationMethods")
579
- def mfa_authentication_methods(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
578
+ def mfa_authentication_methods(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
580
579
  """
581
580
  A list of authentication methods that enforce multi-factor authentication (MFA) during login. Authentication methods not listed in this parameter do not prompt for multi-factor authentication. Allowed values are `ALL` | `SAML` | `PASSWORD`.
582
581
  """
583
582
  return pulumi.get(self, "mfa_authentication_methods")
584
583
 
585
- @property
584
+ @_builtins.property
586
585
  @pulumi.getter(name="mfaEnrollment")
587
- def mfa_enrollment(self) -> pulumi.Output[Optional[builtins.str]]:
586
+ def mfa_enrollment(self) -> pulumi.Output[Optional[_builtins.str]]:
588
587
  """
589
588
  (Default: `OPTIONAL`) Determines whether a user must enroll in multi-factor authentication. Allowed values are REQUIRED and OPTIONAL. When REQUIRED is specified, Enforces users to enroll in MFA. If this value is used, then the CLIENT*TYPES parameter must include SNOWFLAKE*UI, because Snowsight is the only place users can enroll in multi-factor authentication (MFA).
590
589
  """
591
590
  return pulumi.get(self, "mfa_enrollment")
592
591
 
593
- @property
592
+ @_builtins.property
594
593
  @pulumi.getter
595
- def name(self) -> pulumi.Output[builtins.str]:
594
+ def name(self) -> pulumi.Output[_builtins.str]:
596
595
  """
597
596
  Specifies the identifier for the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
598
597
  """
599
598
  return pulumi.get(self, "name")
600
599
 
601
- @property
600
+ @_builtins.property
602
601
  @pulumi.getter
603
- def schema(self) -> pulumi.Output[builtins.str]:
602
+ def schema(self) -> pulumi.Output[_builtins.str]:
604
603
  """
605
604
  The schema in which to create the authentication policy. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
606
605
  """
607
606
  return pulumi.get(self, "schema")
608
607
 
609
- @property
608
+ @_builtins.property
610
609
  @pulumi.getter(name="securityIntegrations")
611
- def security_integrations(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
610
+ def security_integrations(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
612
611
  """
613
612
  A list of security integrations the authentication policy is associated with. This parameter has no effect when SAML or OAUTH are not in the AUTHENTICATION*METHODS list. All values in the SECURITY*INTEGRATIONS list must be compatible with the values in the AUTHENTICATION*METHODS list. For example, if SECURITY*INTEGRATIONS contains a SAML security integration, and AUTHENTICATION_METHODS contains OAUTH, then you cannot create the authentication policy. To allow all security integrations use ALL as parameter.
614
613
  """
615
614
  return pulumi.get(self, "security_integrations")
616
615
 
617
- @property
616
+ @_builtins.property
618
617
  @pulumi.getter(name="showOutputs")
619
618
  def show_outputs(self) -> pulumi.Output[Sequence['outputs.AuthenticationPolicyShowOutput']]:
620
619
  """