pulumi-snowflake 2.3.0a1753339260__py3-none-any.whl → 2.3.0a1753415140__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-snowflake might be problematic. Click here for more details.
- pulumi_snowflake/__init__.py +20 -1
- pulumi_snowflake/_inputs.py +17236 -16797
- pulumi_snowflake/account.py +252 -253
- pulumi_snowflake/account_authentication_policy_attachment.py +18 -19
- pulumi_snowflake/account_parameter.py +35 -36
- pulumi_snowflake/account_password_policy_attachment.py +18 -19
- pulumi_snowflake/account_role.py +42 -43
- pulumi_snowflake/alert.py +149 -150
- pulumi_snowflake/api_authentication_integration_with_authorization_code_grant.py +197 -198
- pulumi_snowflake/api_authentication_integration_with_client_credentials.py +180 -181
- pulumi_snowflake/api_authentication_integration_with_jwt_bearer.py +193 -194
- pulumi_snowflake/api_integration.py +251 -252
- pulumi_snowflake/authentication_policy.py +167 -168
- pulumi_snowflake/compute_pool.py +167 -168
- pulumi_snowflake/config/__init__.py +1 -1
- pulumi_snowflake/config/__init__.pyi +1 -2
- pulumi_snowflake/config/outputs.py +21 -22
- pulumi_snowflake/config/vars.py +43 -44
- pulumi_snowflake/cortex_search_service.py +191 -192
- pulumi_snowflake/current_account.py +2096 -2097
- pulumi_snowflake/current_organization_account.py +5863 -0
- pulumi_snowflake/database.py +353 -354
- pulumi_snowflake/database_role.py +63 -64
- pulumi_snowflake/dynamic_table.py +274 -275
- pulumi_snowflake/email_notification_integration.py +70 -71
- pulumi_snowflake/execute.py +61 -62
- pulumi_snowflake/external_function.py +280 -281
- pulumi_snowflake/external_oauth_integration.py +288 -289
- pulumi_snowflake/external_table.py +246 -247
- pulumi_snowflake/external_volume.py +68 -69
- pulumi_snowflake/failover_group.py +135 -136
- pulumi_snowflake/file_format.py +622 -623
- pulumi_snowflake/function_java.py +320 -321
- pulumi_snowflake/function_javascript.py +243 -244
- pulumi_snowflake/function_python.py +334 -335
- pulumi_snowflake/function_scala.py +320 -321
- pulumi_snowflake/function_sql.py +226 -227
- pulumi_snowflake/get_account_roles.py +16 -17
- pulumi_snowflake/get_accounts.py +16 -17
- pulumi_snowflake/get_alerts.py +22 -23
- pulumi_snowflake/get_compute_pools.py +23 -24
- pulumi_snowflake/get_connections.py +10 -11
- pulumi_snowflake/get_cortex_search_services.py +18 -19
- pulumi_snowflake/get_current_account.py +9 -10
- pulumi_snowflake/get_current_role.py +5 -6
- pulumi_snowflake/get_database.py +25 -26
- pulumi_snowflake/get_database_role.py +19 -20
- pulumi_snowflake/get_database_roles.py +17 -18
- pulumi_snowflake/get_databases.py +29 -30
- pulumi_snowflake/get_dynamic_tables.py +13 -14
- pulumi_snowflake/get_external_functions.py +16 -17
- pulumi_snowflake/get_external_tables.py +16 -17
- pulumi_snowflake/get_failover_groups.py +10 -11
- pulumi_snowflake/get_file_formats.py +16 -17
- pulumi_snowflake/get_functions.py +16 -17
- pulumi_snowflake/get_git_repositories.py +18 -19
- pulumi_snowflake/get_grants.py +9 -10
- pulumi_snowflake/get_image_repositories.py +11 -12
- pulumi_snowflake/get_masking_policies.py +18 -19
- pulumi_snowflake/get_materialized_views.py +16 -17
- pulumi_snowflake/get_network_policies.py +16 -17
- pulumi_snowflake/get_parameters.py +34 -35
- pulumi_snowflake/get_pipes.py +16 -17
- pulumi_snowflake/get_procedures.py +16 -17
- pulumi_snowflake/get_resource_monitors.py +10 -11
- pulumi_snowflake/get_row_access_policies.py +18 -19
- pulumi_snowflake/get_schemas.py +30 -31
- pulumi_snowflake/get_secrets.py +17 -18
- pulumi_snowflake/get_security_integrations.py +16 -17
- pulumi_snowflake/get_sequences.py +16 -17
- pulumi_snowflake/get_services.py +30 -31
- pulumi_snowflake/get_shares.py +10 -11
- pulumi_snowflake/get_stages.py +16 -17
- pulumi_snowflake/get_storage_integrations.py +4 -5
- pulumi_snowflake/get_streamlits.py +18 -19
- pulumi_snowflake/get_streams.py +24 -25
- pulumi_snowflake/get_system_generate_scim_access_token.py +11 -12
- pulumi_snowflake/get_system_get_aws_sns_iam_policy.py +11 -12
- pulumi_snowflake/get_system_get_private_link_config.py +21 -22
- pulumi_snowflake/get_system_get_snowflake_platform_info.py +7 -8
- pulumi_snowflake/get_tables.py +24 -25
- pulumi_snowflake/get_tags.py +11 -12
- pulumi_snowflake/get_tasks.py +30 -31
- pulumi_snowflake/get_user_programmatic_access_tokens.py +113 -0
- pulumi_snowflake/get_users.py +29 -30
- pulumi_snowflake/get_views.py +24 -25
- pulumi_snowflake/get_warehouses.py +22 -23
- pulumi_snowflake/git_repository.py +133 -134
- pulumi_snowflake/grant_account_role.py +52 -53
- pulumi_snowflake/grant_application_role.py +52 -53
- pulumi_snowflake/grant_database_role.py +69 -70
- pulumi_snowflake/grant_ownership.py +55 -56
- pulumi_snowflake/grant_privileges_to_account_role.py +125 -126
- pulumi_snowflake/grant_privileges_to_database_role.py +122 -123
- pulumi_snowflake/grant_privileges_to_share.py +154 -155
- pulumi_snowflake/image_repository.py +80 -81
- pulumi_snowflake/job_service.py +148 -149
- pulumi_snowflake/legacy_service_user.py +1269 -1270
- pulumi_snowflake/managed_account.py +140 -141
- pulumi_snowflake/masking_policy.py +136 -137
- pulumi_snowflake/materialized_view.py +149 -150
- pulumi_snowflake/network_policy.py +116 -117
- pulumi_snowflake/network_policy_attachment.py +52 -53
- pulumi_snowflake/network_rule.py +129 -130
- pulumi_snowflake/notification_integration.py +298 -299
- pulumi_snowflake/oauth_integration_for_custom_clients.py +263 -264
- pulumi_snowflake/oauth_integration_for_partner_applications.py +169 -170
- pulumi_snowflake/object_parameter.py +72 -73
- pulumi_snowflake/outputs.py +15957 -15511
- pulumi_snowflake/password_policy.py +299 -300
- pulumi_snowflake/pipe.py +181 -182
- pulumi_snowflake/primary_connection.py +70 -71
- pulumi_snowflake/procedure_java.py +341 -342
- pulumi_snowflake/procedure_javascript.py +247 -248
- pulumi_snowflake/procedure_python.py +338 -339
- pulumi_snowflake/procedure_scala.py +341 -342
- pulumi_snowflake/procedure_sql.py +247 -248
- pulumi_snowflake/provider.py +377 -378
- pulumi_snowflake/pulumi-plugin.json +1 -1
- pulumi_snowflake/resource_monitor.py +165 -166
- pulumi_snowflake/row_access_policy.py +102 -103
- pulumi_snowflake/saml2_integration.py +303 -304
- pulumi_snowflake/schema.py +390 -391
- pulumi_snowflake/scim_integration.py +133 -134
- pulumi_snowflake/secondary_connection.py +72 -73
- pulumi_snowflake/secondary_database.py +350 -351
- pulumi_snowflake/secret_with_authorization_code_grant.py +138 -139
- pulumi_snowflake/secret_with_basic_authentication.py +121 -122
- pulumi_snowflake/secret_with_client_credentials.py +125 -126
- pulumi_snowflake/secret_with_generic_string.py +104 -105
- pulumi_snowflake/sequence.py +121 -122
- pulumi_snowflake/service.py +233 -234
- pulumi_snowflake/service_user.py +1239 -1240
- pulumi_snowflake/share.py +61 -62
- pulumi_snowflake/shared_database.py +299 -300
- pulumi_snowflake/stage.py +234 -235
- pulumi_snowflake/storage_integration.py +230 -231
- pulumi_snowflake/stream_on_directory_table.py +128 -129
- pulumi_snowflake/stream_on_external_table.py +151 -152
- pulumi_snowflake/stream_on_table.py +164 -165
- pulumi_snowflake/stream_on_view.py +164 -165
- pulumi_snowflake/streamlit.py +184 -185
- pulumi_snowflake/table.py +147 -148
- pulumi_snowflake/table_column_masking_policy_application.py +52 -53
- pulumi_snowflake/table_constraint.py +191 -192
- pulumi_snowflake/tag.py +114 -115
- pulumi_snowflake/tag_association.py +86 -87
- pulumi_snowflake/task.py +1224 -1225
- pulumi_snowflake/user.py +1346 -1347
- pulumi_snowflake/user_authentication_policy_attachment.py +35 -36
- pulumi_snowflake/user_password_policy_attachment.py +35 -36
- pulumi_snowflake/user_programmatic_access_token.py +598 -0
- pulumi_snowflake/user_public_keys.py +52 -53
- pulumi_snowflake/view.py +187 -188
- pulumi_snowflake/warehouse.py +286 -287
- {pulumi_snowflake-2.3.0a1753339260.dist-info → pulumi_snowflake-2.3.0a1753415140.dist-info}/METADATA +1 -1
- pulumi_snowflake-2.3.0a1753415140.dist-info/RECORD +161 -0
- pulumi_snowflake-2.3.0a1753339260.dist-info/RECORD +0 -158
- {pulumi_snowflake-2.3.0a1753339260.dist-info → pulumi_snowflake-2.3.0a1753415140.dist-info}/WHEEL +0 -0
- {pulumi_snowflake-2.3.0a1753339260.dist-info → pulumi_snowflake-2.3.0a1753415140.dist-info}/top_level.txt +0 -0
|
@@ -2,8 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import builtins
|
|
6
|
-
import copy
|
|
5
|
+
import builtins as _builtins
|
|
7
6
|
import warnings
|
|
8
7
|
import sys
|
|
9
8
|
import pulumi
|
|
@@ -22,36 +21,36 @@ __all__ = ['OauthIntegrationForCustomClientsArgs', 'OauthIntegrationForCustomCli
|
|
|
22
21
|
@pulumi.input_type
|
|
23
22
|
class OauthIntegrationForCustomClientsArgs:
|
|
24
23
|
def __init__(__self__, *,
|
|
25
|
-
oauth_client_type: pulumi.Input[
|
|
26
|
-
oauth_redirect_uri: pulumi.Input[
|
|
27
|
-
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
28
|
-
comment: Optional[pulumi.Input[
|
|
29
|
-
enabled: Optional[pulumi.Input[
|
|
30
|
-
name: Optional[pulumi.Input[
|
|
31
|
-
network_policy: Optional[pulumi.Input[
|
|
32
|
-
oauth_allow_non_tls_redirect_uri: Optional[pulumi.Input[
|
|
33
|
-
oauth_client_rsa_public_key: Optional[pulumi.Input[
|
|
34
|
-
oauth_client_rsa_public_key2: Optional[pulumi.Input[
|
|
35
|
-
oauth_enforce_pkce: Optional[pulumi.Input[
|
|
36
|
-
oauth_issue_refresh_tokens: Optional[pulumi.Input[
|
|
37
|
-
oauth_refresh_token_validity: Optional[pulumi.Input[
|
|
38
|
-
oauth_use_secondary_roles: Optional[pulumi.Input[
|
|
39
|
-
pre_authorized_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
24
|
+
oauth_client_type: pulumi.Input[_builtins.str],
|
|
25
|
+
oauth_redirect_uri: pulumi.Input[_builtins.str],
|
|
26
|
+
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
27
|
+
comment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
28
|
+
enabled: Optional[pulumi.Input[_builtins.str]] = None,
|
|
29
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
30
|
+
network_policy: Optional[pulumi.Input[_builtins.str]] = None,
|
|
31
|
+
oauth_allow_non_tls_redirect_uri: Optional[pulumi.Input[_builtins.str]] = None,
|
|
32
|
+
oauth_client_rsa_public_key: Optional[pulumi.Input[_builtins.str]] = None,
|
|
33
|
+
oauth_client_rsa_public_key2: Optional[pulumi.Input[_builtins.str]] = None,
|
|
34
|
+
oauth_enforce_pkce: Optional[pulumi.Input[_builtins.str]] = None,
|
|
35
|
+
oauth_issue_refresh_tokens: Optional[pulumi.Input[_builtins.str]] = None,
|
|
36
|
+
oauth_refresh_token_validity: Optional[pulumi.Input[_builtins.int]] = None,
|
|
37
|
+
oauth_use_secondary_roles: Optional[pulumi.Input[_builtins.str]] = None,
|
|
38
|
+
pre_authorized_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None):
|
|
40
39
|
"""
|
|
41
40
|
The set of arguments for constructing a OauthIntegrationForCustomClients resource.
|
|
42
|
-
:param pulumi.Input[
|
|
43
|
-
:param pulumi.Input[
|
|
44
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
45
|
-
:param pulumi.Input[
|
|
46
|
-
:param pulumi.Input[
|
|
47
|
-
:param pulumi.Input[
|
|
48
|
-
:param pulumi.Input[
|
|
49
|
-
:param pulumi.Input[
|
|
50
|
-
:param pulumi.Input[
|
|
51
|
-
:param pulumi.Input[
|
|
52
|
-
:param pulumi.Input[
|
|
53
|
-
:param pulumi.Input[
|
|
54
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
41
|
+
:param pulumi.Input[_builtins.str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
|
|
42
|
+
:param pulumi.Input[_builtins.str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
|
|
43
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
44
|
+
:param pulumi.Input[_builtins.str] comment: Specifies a comment for the OAuth integration.
|
|
45
|
+
:param pulumi.Input[_builtins.str] enabled: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
46
|
+
:param pulumi.Input[_builtins.str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
47
|
+
:param pulumi.Input[_builtins.str] network_policy: Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token. For more information about this resource, see docs.
|
|
48
|
+
:param pulumi.Input[_builtins.str] oauth_allow_non_tls_redirect_uri: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) If true, allows setting oauth*redirect*uri to a URI not protected by TLS. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
49
|
+
:param pulumi.Input[_builtins.str] oauth_enforce_pkce: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Boolean that specifies whether Proof Key for Code Exchange (PKCE) should be required for the integration. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
50
|
+
:param pulumi.Input[_builtins.str] oauth_issue_refresh_tokens: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
51
|
+
:param pulumi.Input[_builtins.int] oauth_refresh_token_validity: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`-1`)) Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
52
|
+
:param pulumi.Input[_builtins.str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
53
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] pre_authorized_roles_lists: A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating. For more information about this resource, see docs.
|
|
55
54
|
"""
|
|
56
55
|
pulumi.set(__self__, "oauth_client_type", oauth_client_type)
|
|
57
56
|
pulumi.set(__self__, "oauth_redirect_uri", oauth_redirect_uri)
|
|
@@ -82,220 +81,220 @@ class OauthIntegrationForCustomClientsArgs:
|
|
|
82
81
|
if pre_authorized_roles_lists is not None:
|
|
83
82
|
pulumi.set(__self__, "pre_authorized_roles_lists", pre_authorized_roles_lists)
|
|
84
83
|
|
|
85
|
-
@property
|
|
84
|
+
@_builtins.property
|
|
86
85
|
@pulumi.getter(name="oauthClientType")
|
|
87
|
-
def oauth_client_type(self) -> pulumi.Input[
|
|
86
|
+
def oauth_client_type(self) -> pulumi.Input[_builtins.str]:
|
|
88
87
|
"""
|
|
89
88
|
Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
|
|
90
89
|
"""
|
|
91
90
|
return pulumi.get(self, "oauth_client_type")
|
|
92
91
|
|
|
93
92
|
@oauth_client_type.setter
|
|
94
|
-
def oauth_client_type(self, value: pulumi.Input[
|
|
93
|
+
def oauth_client_type(self, value: pulumi.Input[_builtins.str]):
|
|
95
94
|
pulumi.set(self, "oauth_client_type", value)
|
|
96
95
|
|
|
97
|
-
@property
|
|
96
|
+
@_builtins.property
|
|
98
97
|
@pulumi.getter(name="oauthRedirectUri")
|
|
99
|
-
def oauth_redirect_uri(self) -> pulumi.Input[
|
|
98
|
+
def oauth_redirect_uri(self) -> pulumi.Input[_builtins.str]:
|
|
100
99
|
"""
|
|
101
100
|
Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
|
|
102
101
|
"""
|
|
103
102
|
return pulumi.get(self, "oauth_redirect_uri")
|
|
104
103
|
|
|
105
104
|
@oauth_redirect_uri.setter
|
|
106
|
-
def oauth_redirect_uri(self, value: pulumi.Input[
|
|
105
|
+
def oauth_redirect_uri(self, value: pulumi.Input[_builtins.str]):
|
|
107
106
|
pulumi.set(self, "oauth_redirect_uri", value)
|
|
108
107
|
|
|
109
|
-
@property
|
|
108
|
+
@_builtins.property
|
|
110
109
|
@pulumi.getter(name="blockedRolesLists")
|
|
111
|
-
def blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
110
|
+
def blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
112
111
|
"""
|
|
113
112
|
A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
114
113
|
"""
|
|
115
114
|
return pulumi.get(self, "blocked_roles_lists")
|
|
116
115
|
|
|
117
116
|
@blocked_roles_lists.setter
|
|
118
|
-
def blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
117
|
+
def blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
119
118
|
pulumi.set(self, "blocked_roles_lists", value)
|
|
120
119
|
|
|
121
|
-
@property
|
|
120
|
+
@_builtins.property
|
|
122
121
|
@pulumi.getter
|
|
123
|
-
def comment(self) -> Optional[pulumi.Input[
|
|
122
|
+
def comment(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
124
123
|
"""
|
|
125
124
|
Specifies a comment for the OAuth integration.
|
|
126
125
|
"""
|
|
127
126
|
return pulumi.get(self, "comment")
|
|
128
127
|
|
|
129
128
|
@comment.setter
|
|
130
|
-
def comment(self, value: Optional[pulumi.Input[
|
|
129
|
+
def comment(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
131
130
|
pulumi.set(self, "comment", value)
|
|
132
131
|
|
|
133
|
-
@property
|
|
132
|
+
@_builtins.property
|
|
134
133
|
@pulumi.getter
|
|
135
|
-
def enabled(self) -> Optional[pulumi.Input[
|
|
134
|
+
def enabled(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
136
135
|
"""
|
|
137
136
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
138
137
|
"""
|
|
139
138
|
return pulumi.get(self, "enabled")
|
|
140
139
|
|
|
141
140
|
@enabled.setter
|
|
142
|
-
def enabled(self, value: Optional[pulumi.Input[
|
|
141
|
+
def enabled(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
143
142
|
pulumi.set(self, "enabled", value)
|
|
144
143
|
|
|
145
|
-
@property
|
|
144
|
+
@_builtins.property
|
|
146
145
|
@pulumi.getter
|
|
147
|
-
def name(self) -> Optional[pulumi.Input[
|
|
146
|
+
def name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
148
147
|
"""
|
|
149
148
|
Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
150
149
|
"""
|
|
151
150
|
return pulumi.get(self, "name")
|
|
152
151
|
|
|
153
152
|
@name.setter
|
|
154
|
-
def name(self, value: Optional[pulumi.Input[
|
|
153
|
+
def name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
155
154
|
pulumi.set(self, "name", value)
|
|
156
155
|
|
|
157
|
-
@property
|
|
156
|
+
@_builtins.property
|
|
158
157
|
@pulumi.getter(name="networkPolicy")
|
|
159
|
-
def network_policy(self) -> Optional[pulumi.Input[
|
|
158
|
+
def network_policy(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
160
159
|
"""
|
|
161
160
|
Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token. For more information about this resource, see docs.
|
|
162
161
|
"""
|
|
163
162
|
return pulumi.get(self, "network_policy")
|
|
164
163
|
|
|
165
164
|
@network_policy.setter
|
|
166
|
-
def network_policy(self, value: Optional[pulumi.Input[
|
|
165
|
+
def network_policy(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
167
166
|
pulumi.set(self, "network_policy", value)
|
|
168
167
|
|
|
169
|
-
@property
|
|
168
|
+
@_builtins.property
|
|
170
169
|
@pulumi.getter(name="oauthAllowNonTlsRedirectUri")
|
|
171
|
-
def oauth_allow_non_tls_redirect_uri(self) -> Optional[pulumi.Input[
|
|
170
|
+
def oauth_allow_non_tls_redirect_uri(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
172
171
|
"""
|
|
173
172
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) If true, allows setting oauth*redirect*uri to a URI not protected by TLS. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
174
173
|
"""
|
|
175
174
|
return pulumi.get(self, "oauth_allow_non_tls_redirect_uri")
|
|
176
175
|
|
|
177
176
|
@oauth_allow_non_tls_redirect_uri.setter
|
|
178
|
-
def oauth_allow_non_tls_redirect_uri(self, value: Optional[pulumi.Input[
|
|
177
|
+
def oauth_allow_non_tls_redirect_uri(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
179
178
|
pulumi.set(self, "oauth_allow_non_tls_redirect_uri", value)
|
|
180
179
|
|
|
181
|
-
@property
|
|
180
|
+
@_builtins.property
|
|
182
181
|
@pulumi.getter(name="oauthClientRsaPublicKey")
|
|
183
|
-
def oauth_client_rsa_public_key(self) -> Optional[pulumi.Input[
|
|
182
|
+
def oauth_client_rsa_public_key(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
184
183
|
return pulumi.get(self, "oauth_client_rsa_public_key")
|
|
185
184
|
|
|
186
185
|
@oauth_client_rsa_public_key.setter
|
|
187
|
-
def oauth_client_rsa_public_key(self, value: Optional[pulumi.Input[
|
|
186
|
+
def oauth_client_rsa_public_key(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
188
187
|
pulumi.set(self, "oauth_client_rsa_public_key", value)
|
|
189
188
|
|
|
190
|
-
@property
|
|
189
|
+
@_builtins.property
|
|
191
190
|
@pulumi.getter(name="oauthClientRsaPublicKey2")
|
|
192
|
-
def oauth_client_rsa_public_key2(self) -> Optional[pulumi.Input[
|
|
191
|
+
def oauth_client_rsa_public_key2(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
193
192
|
return pulumi.get(self, "oauth_client_rsa_public_key2")
|
|
194
193
|
|
|
195
194
|
@oauth_client_rsa_public_key2.setter
|
|
196
|
-
def oauth_client_rsa_public_key2(self, value: Optional[pulumi.Input[
|
|
195
|
+
def oauth_client_rsa_public_key2(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
197
196
|
pulumi.set(self, "oauth_client_rsa_public_key2", value)
|
|
198
197
|
|
|
199
|
-
@property
|
|
198
|
+
@_builtins.property
|
|
200
199
|
@pulumi.getter(name="oauthEnforcePkce")
|
|
201
|
-
def oauth_enforce_pkce(self) -> Optional[pulumi.Input[
|
|
200
|
+
def oauth_enforce_pkce(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
202
201
|
"""
|
|
203
202
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Boolean that specifies whether Proof Key for Code Exchange (PKCE) should be required for the integration. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
204
203
|
"""
|
|
205
204
|
return pulumi.get(self, "oauth_enforce_pkce")
|
|
206
205
|
|
|
207
206
|
@oauth_enforce_pkce.setter
|
|
208
|
-
def oauth_enforce_pkce(self, value: Optional[pulumi.Input[
|
|
207
|
+
def oauth_enforce_pkce(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
209
208
|
pulumi.set(self, "oauth_enforce_pkce", value)
|
|
210
209
|
|
|
211
|
-
@property
|
|
210
|
+
@_builtins.property
|
|
212
211
|
@pulumi.getter(name="oauthIssueRefreshTokens")
|
|
213
|
-
def oauth_issue_refresh_tokens(self) -> Optional[pulumi.Input[
|
|
212
|
+
def oauth_issue_refresh_tokens(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
214
213
|
"""
|
|
215
214
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
216
215
|
"""
|
|
217
216
|
return pulumi.get(self, "oauth_issue_refresh_tokens")
|
|
218
217
|
|
|
219
218
|
@oauth_issue_refresh_tokens.setter
|
|
220
|
-
def oauth_issue_refresh_tokens(self, value: Optional[pulumi.Input[
|
|
219
|
+
def oauth_issue_refresh_tokens(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
221
220
|
pulumi.set(self, "oauth_issue_refresh_tokens", value)
|
|
222
221
|
|
|
223
|
-
@property
|
|
222
|
+
@_builtins.property
|
|
224
223
|
@pulumi.getter(name="oauthRefreshTokenValidity")
|
|
225
|
-
def oauth_refresh_token_validity(self) -> Optional[pulumi.Input[
|
|
224
|
+
def oauth_refresh_token_validity(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
226
225
|
"""
|
|
227
226
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`-1`)) Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
228
227
|
"""
|
|
229
228
|
return pulumi.get(self, "oauth_refresh_token_validity")
|
|
230
229
|
|
|
231
230
|
@oauth_refresh_token_validity.setter
|
|
232
|
-
def oauth_refresh_token_validity(self, value: Optional[pulumi.Input[
|
|
231
|
+
def oauth_refresh_token_validity(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
233
232
|
pulumi.set(self, "oauth_refresh_token_validity", value)
|
|
234
233
|
|
|
235
|
-
@property
|
|
234
|
+
@_builtins.property
|
|
236
235
|
@pulumi.getter(name="oauthUseSecondaryRoles")
|
|
237
|
-
def oauth_use_secondary_roles(self) -> Optional[pulumi.Input[
|
|
236
|
+
def oauth_use_secondary_roles(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
238
237
|
"""
|
|
239
238
|
Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
240
239
|
"""
|
|
241
240
|
return pulumi.get(self, "oauth_use_secondary_roles")
|
|
242
241
|
|
|
243
242
|
@oauth_use_secondary_roles.setter
|
|
244
|
-
def oauth_use_secondary_roles(self, value: Optional[pulumi.Input[
|
|
243
|
+
def oauth_use_secondary_roles(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
245
244
|
pulumi.set(self, "oauth_use_secondary_roles", value)
|
|
246
245
|
|
|
247
|
-
@property
|
|
246
|
+
@_builtins.property
|
|
248
247
|
@pulumi.getter(name="preAuthorizedRolesLists")
|
|
249
|
-
def pre_authorized_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
248
|
+
def pre_authorized_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
250
249
|
"""
|
|
251
250
|
A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating. For more information about this resource, see docs.
|
|
252
251
|
"""
|
|
253
252
|
return pulumi.get(self, "pre_authorized_roles_lists")
|
|
254
253
|
|
|
255
254
|
@pre_authorized_roles_lists.setter
|
|
256
|
-
def pre_authorized_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
255
|
+
def pre_authorized_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
257
256
|
pulumi.set(self, "pre_authorized_roles_lists", value)
|
|
258
257
|
|
|
259
258
|
|
|
260
259
|
@pulumi.input_type
|
|
261
260
|
class _OauthIntegrationForCustomClientsState:
|
|
262
261
|
def __init__(__self__, *,
|
|
263
|
-
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
264
|
-
comment: Optional[pulumi.Input[
|
|
262
|
+
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
263
|
+
comment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
265
264
|
describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForCustomClientsDescribeOutputArgs']]]] = None,
|
|
266
|
-
enabled: Optional[pulumi.Input[
|
|
267
|
-
fully_qualified_name: Optional[pulumi.Input[
|
|
268
|
-
name: Optional[pulumi.Input[
|
|
269
|
-
network_policy: Optional[pulumi.Input[
|
|
270
|
-
oauth_allow_non_tls_redirect_uri: Optional[pulumi.Input[
|
|
271
|
-
oauth_client_rsa_public_key: Optional[pulumi.Input[
|
|
272
|
-
oauth_client_rsa_public_key2: Optional[pulumi.Input[
|
|
273
|
-
oauth_client_type: Optional[pulumi.Input[
|
|
274
|
-
oauth_enforce_pkce: Optional[pulumi.Input[
|
|
275
|
-
oauth_issue_refresh_tokens: Optional[pulumi.Input[
|
|
276
|
-
oauth_redirect_uri: Optional[pulumi.Input[
|
|
277
|
-
oauth_refresh_token_validity: Optional[pulumi.Input[
|
|
278
|
-
oauth_use_secondary_roles: Optional[pulumi.Input[
|
|
279
|
-
pre_authorized_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
265
|
+
enabled: Optional[pulumi.Input[_builtins.str]] = None,
|
|
266
|
+
fully_qualified_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
267
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
268
|
+
network_policy: Optional[pulumi.Input[_builtins.str]] = None,
|
|
269
|
+
oauth_allow_non_tls_redirect_uri: Optional[pulumi.Input[_builtins.str]] = None,
|
|
270
|
+
oauth_client_rsa_public_key: Optional[pulumi.Input[_builtins.str]] = None,
|
|
271
|
+
oauth_client_rsa_public_key2: Optional[pulumi.Input[_builtins.str]] = None,
|
|
272
|
+
oauth_client_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
273
|
+
oauth_enforce_pkce: Optional[pulumi.Input[_builtins.str]] = None,
|
|
274
|
+
oauth_issue_refresh_tokens: Optional[pulumi.Input[_builtins.str]] = None,
|
|
275
|
+
oauth_redirect_uri: Optional[pulumi.Input[_builtins.str]] = None,
|
|
276
|
+
oauth_refresh_token_validity: Optional[pulumi.Input[_builtins.int]] = None,
|
|
277
|
+
oauth_use_secondary_roles: Optional[pulumi.Input[_builtins.str]] = None,
|
|
278
|
+
pre_authorized_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
280
279
|
related_parameters: Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForCustomClientsRelatedParameterArgs']]]] = None,
|
|
281
280
|
show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForCustomClientsShowOutputArgs']]]] = None):
|
|
282
281
|
"""
|
|
283
282
|
Input properties used for looking up and filtering OauthIntegrationForCustomClients resources.
|
|
284
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
285
|
-
:param pulumi.Input[
|
|
283
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
284
|
+
:param pulumi.Input[_builtins.str] comment: Specifies a comment for the OAuth integration.
|
|
286
285
|
:param pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForCustomClientsDescribeOutputArgs']]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATION` for the given integration.
|
|
287
|
-
:param pulumi.Input[
|
|
288
|
-
:param pulumi.Input[
|
|
289
|
-
:param pulumi.Input[
|
|
290
|
-
:param pulumi.Input[
|
|
291
|
-
:param pulumi.Input[
|
|
292
|
-
:param pulumi.Input[
|
|
293
|
-
:param pulumi.Input[
|
|
294
|
-
:param pulumi.Input[
|
|
295
|
-
:param pulumi.Input[
|
|
296
|
-
:param pulumi.Input[
|
|
297
|
-
:param pulumi.Input[
|
|
298
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
286
|
+
:param pulumi.Input[_builtins.str] enabled: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
287
|
+
:param pulumi.Input[_builtins.str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
288
|
+
:param pulumi.Input[_builtins.str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
289
|
+
:param pulumi.Input[_builtins.str] network_policy: Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token. For more information about this resource, see docs.
|
|
290
|
+
:param pulumi.Input[_builtins.str] oauth_allow_non_tls_redirect_uri: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) If true, allows setting oauth*redirect*uri to a URI not protected by TLS. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
291
|
+
:param pulumi.Input[_builtins.str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
|
|
292
|
+
:param pulumi.Input[_builtins.str] oauth_enforce_pkce: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Boolean that specifies whether Proof Key for Code Exchange (PKCE) should be required for the integration. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
293
|
+
:param pulumi.Input[_builtins.str] oauth_issue_refresh_tokens: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
294
|
+
:param pulumi.Input[_builtins.str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
|
|
295
|
+
:param pulumi.Input[_builtins.int] oauth_refresh_token_validity: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`-1`)) Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
296
|
+
:param pulumi.Input[_builtins.str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
297
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] pre_authorized_roles_lists: A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating. For more information about this resource, see docs.
|
|
299
298
|
:param pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForCustomClientsRelatedParameterArgs']]] related_parameters: Parameters related to this security integration.
|
|
300
299
|
:param pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForCustomClientsShowOutputArgs']]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATION` for the given integration.
|
|
301
300
|
"""
|
|
@@ -338,31 +337,31 @@ class _OauthIntegrationForCustomClientsState:
|
|
|
338
337
|
if show_outputs is not None:
|
|
339
338
|
pulumi.set(__self__, "show_outputs", show_outputs)
|
|
340
339
|
|
|
341
|
-
@property
|
|
340
|
+
@_builtins.property
|
|
342
341
|
@pulumi.getter(name="blockedRolesLists")
|
|
343
|
-
def blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
342
|
+
def blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
344
343
|
"""
|
|
345
344
|
A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
346
345
|
"""
|
|
347
346
|
return pulumi.get(self, "blocked_roles_lists")
|
|
348
347
|
|
|
349
348
|
@blocked_roles_lists.setter
|
|
350
|
-
def blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
349
|
+
def blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
351
350
|
pulumi.set(self, "blocked_roles_lists", value)
|
|
352
351
|
|
|
353
|
-
@property
|
|
352
|
+
@_builtins.property
|
|
354
353
|
@pulumi.getter
|
|
355
|
-
def comment(self) -> Optional[pulumi.Input[
|
|
354
|
+
def comment(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
356
355
|
"""
|
|
357
356
|
Specifies a comment for the OAuth integration.
|
|
358
357
|
"""
|
|
359
358
|
return pulumi.get(self, "comment")
|
|
360
359
|
|
|
361
360
|
@comment.setter
|
|
362
|
-
def comment(self, value: Optional[pulumi.Input[
|
|
361
|
+
def comment(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
363
362
|
pulumi.set(self, "comment", value)
|
|
364
363
|
|
|
365
|
-
@property
|
|
364
|
+
@_builtins.property
|
|
366
365
|
@pulumi.getter(name="describeOutputs")
|
|
367
366
|
def describe_outputs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForCustomClientsDescribeOutputArgs']]]]:
|
|
368
367
|
"""
|
|
@@ -374,169 +373,169 @@ class _OauthIntegrationForCustomClientsState:
|
|
|
374
373
|
def describe_outputs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForCustomClientsDescribeOutputArgs']]]]):
|
|
375
374
|
pulumi.set(self, "describe_outputs", value)
|
|
376
375
|
|
|
377
|
-
@property
|
|
376
|
+
@_builtins.property
|
|
378
377
|
@pulumi.getter
|
|
379
|
-
def enabled(self) -> Optional[pulumi.Input[
|
|
378
|
+
def enabled(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
380
379
|
"""
|
|
381
380
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
382
381
|
"""
|
|
383
382
|
return pulumi.get(self, "enabled")
|
|
384
383
|
|
|
385
384
|
@enabled.setter
|
|
386
|
-
def enabled(self, value: Optional[pulumi.Input[
|
|
385
|
+
def enabled(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
387
386
|
pulumi.set(self, "enabled", value)
|
|
388
387
|
|
|
389
|
-
@property
|
|
388
|
+
@_builtins.property
|
|
390
389
|
@pulumi.getter(name="fullyQualifiedName")
|
|
391
|
-
def fully_qualified_name(self) -> Optional[pulumi.Input[
|
|
390
|
+
def fully_qualified_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
392
391
|
"""
|
|
393
392
|
Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
394
393
|
"""
|
|
395
394
|
return pulumi.get(self, "fully_qualified_name")
|
|
396
395
|
|
|
397
396
|
@fully_qualified_name.setter
|
|
398
|
-
def fully_qualified_name(self, value: Optional[pulumi.Input[
|
|
397
|
+
def fully_qualified_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
399
398
|
pulumi.set(self, "fully_qualified_name", value)
|
|
400
399
|
|
|
401
|
-
@property
|
|
400
|
+
@_builtins.property
|
|
402
401
|
@pulumi.getter
|
|
403
|
-
def name(self) -> Optional[pulumi.Input[
|
|
402
|
+
def name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
404
403
|
"""
|
|
405
404
|
Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
406
405
|
"""
|
|
407
406
|
return pulumi.get(self, "name")
|
|
408
407
|
|
|
409
408
|
@name.setter
|
|
410
|
-
def name(self, value: Optional[pulumi.Input[
|
|
409
|
+
def name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
411
410
|
pulumi.set(self, "name", value)
|
|
412
411
|
|
|
413
|
-
@property
|
|
412
|
+
@_builtins.property
|
|
414
413
|
@pulumi.getter(name="networkPolicy")
|
|
415
|
-
def network_policy(self) -> Optional[pulumi.Input[
|
|
414
|
+
def network_policy(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
416
415
|
"""
|
|
417
416
|
Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token. For more information about this resource, see docs.
|
|
418
417
|
"""
|
|
419
418
|
return pulumi.get(self, "network_policy")
|
|
420
419
|
|
|
421
420
|
@network_policy.setter
|
|
422
|
-
def network_policy(self, value: Optional[pulumi.Input[
|
|
421
|
+
def network_policy(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
423
422
|
pulumi.set(self, "network_policy", value)
|
|
424
423
|
|
|
425
|
-
@property
|
|
424
|
+
@_builtins.property
|
|
426
425
|
@pulumi.getter(name="oauthAllowNonTlsRedirectUri")
|
|
427
|
-
def oauth_allow_non_tls_redirect_uri(self) -> Optional[pulumi.Input[
|
|
426
|
+
def oauth_allow_non_tls_redirect_uri(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
428
427
|
"""
|
|
429
428
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) If true, allows setting oauth*redirect*uri to a URI not protected by TLS. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
430
429
|
"""
|
|
431
430
|
return pulumi.get(self, "oauth_allow_non_tls_redirect_uri")
|
|
432
431
|
|
|
433
432
|
@oauth_allow_non_tls_redirect_uri.setter
|
|
434
|
-
def oauth_allow_non_tls_redirect_uri(self, value: Optional[pulumi.Input[
|
|
433
|
+
def oauth_allow_non_tls_redirect_uri(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
435
434
|
pulumi.set(self, "oauth_allow_non_tls_redirect_uri", value)
|
|
436
435
|
|
|
437
|
-
@property
|
|
436
|
+
@_builtins.property
|
|
438
437
|
@pulumi.getter(name="oauthClientRsaPublicKey")
|
|
439
|
-
def oauth_client_rsa_public_key(self) -> Optional[pulumi.Input[
|
|
438
|
+
def oauth_client_rsa_public_key(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
440
439
|
return pulumi.get(self, "oauth_client_rsa_public_key")
|
|
441
440
|
|
|
442
441
|
@oauth_client_rsa_public_key.setter
|
|
443
|
-
def oauth_client_rsa_public_key(self, value: Optional[pulumi.Input[
|
|
442
|
+
def oauth_client_rsa_public_key(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
444
443
|
pulumi.set(self, "oauth_client_rsa_public_key", value)
|
|
445
444
|
|
|
446
|
-
@property
|
|
445
|
+
@_builtins.property
|
|
447
446
|
@pulumi.getter(name="oauthClientRsaPublicKey2")
|
|
448
|
-
def oauth_client_rsa_public_key2(self) -> Optional[pulumi.Input[
|
|
447
|
+
def oauth_client_rsa_public_key2(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
449
448
|
return pulumi.get(self, "oauth_client_rsa_public_key2")
|
|
450
449
|
|
|
451
450
|
@oauth_client_rsa_public_key2.setter
|
|
452
|
-
def oauth_client_rsa_public_key2(self, value: Optional[pulumi.Input[
|
|
451
|
+
def oauth_client_rsa_public_key2(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
453
452
|
pulumi.set(self, "oauth_client_rsa_public_key2", value)
|
|
454
453
|
|
|
455
|
-
@property
|
|
454
|
+
@_builtins.property
|
|
456
455
|
@pulumi.getter(name="oauthClientType")
|
|
457
|
-
def oauth_client_type(self) -> Optional[pulumi.Input[
|
|
456
|
+
def oauth_client_type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
458
457
|
"""
|
|
459
458
|
Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
|
|
460
459
|
"""
|
|
461
460
|
return pulumi.get(self, "oauth_client_type")
|
|
462
461
|
|
|
463
462
|
@oauth_client_type.setter
|
|
464
|
-
def oauth_client_type(self, value: Optional[pulumi.Input[
|
|
463
|
+
def oauth_client_type(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
465
464
|
pulumi.set(self, "oauth_client_type", value)
|
|
466
465
|
|
|
467
|
-
@property
|
|
466
|
+
@_builtins.property
|
|
468
467
|
@pulumi.getter(name="oauthEnforcePkce")
|
|
469
|
-
def oauth_enforce_pkce(self) -> Optional[pulumi.Input[
|
|
468
|
+
def oauth_enforce_pkce(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
470
469
|
"""
|
|
471
470
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Boolean that specifies whether Proof Key for Code Exchange (PKCE) should be required for the integration. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
472
471
|
"""
|
|
473
472
|
return pulumi.get(self, "oauth_enforce_pkce")
|
|
474
473
|
|
|
475
474
|
@oauth_enforce_pkce.setter
|
|
476
|
-
def oauth_enforce_pkce(self, value: Optional[pulumi.Input[
|
|
475
|
+
def oauth_enforce_pkce(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
477
476
|
pulumi.set(self, "oauth_enforce_pkce", value)
|
|
478
477
|
|
|
479
|
-
@property
|
|
478
|
+
@_builtins.property
|
|
480
479
|
@pulumi.getter(name="oauthIssueRefreshTokens")
|
|
481
|
-
def oauth_issue_refresh_tokens(self) -> Optional[pulumi.Input[
|
|
480
|
+
def oauth_issue_refresh_tokens(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
482
481
|
"""
|
|
483
482
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
484
483
|
"""
|
|
485
484
|
return pulumi.get(self, "oauth_issue_refresh_tokens")
|
|
486
485
|
|
|
487
486
|
@oauth_issue_refresh_tokens.setter
|
|
488
|
-
def oauth_issue_refresh_tokens(self, value: Optional[pulumi.Input[
|
|
487
|
+
def oauth_issue_refresh_tokens(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
489
488
|
pulumi.set(self, "oauth_issue_refresh_tokens", value)
|
|
490
489
|
|
|
491
|
-
@property
|
|
490
|
+
@_builtins.property
|
|
492
491
|
@pulumi.getter(name="oauthRedirectUri")
|
|
493
|
-
def oauth_redirect_uri(self) -> Optional[pulumi.Input[
|
|
492
|
+
def oauth_redirect_uri(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
494
493
|
"""
|
|
495
494
|
Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
|
|
496
495
|
"""
|
|
497
496
|
return pulumi.get(self, "oauth_redirect_uri")
|
|
498
497
|
|
|
499
498
|
@oauth_redirect_uri.setter
|
|
500
|
-
def oauth_redirect_uri(self, value: Optional[pulumi.Input[
|
|
499
|
+
def oauth_redirect_uri(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
501
500
|
pulumi.set(self, "oauth_redirect_uri", value)
|
|
502
501
|
|
|
503
|
-
@property
|
|
502
|
+
@_builtins.property
|
|
504
503
|
@pulumi.getter(name="oauthRefreshTokenValidity")
|
|
505
|
-
def oauth_refresh_token_validity(self) -> Optional[pulumi.Input[
|
|
504
|
+
def oauth_refresh_token_validity(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
506
505
|
"""
|
|
507
506
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`-1`)) Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
508
507
|
"""
|
|
509
508
|
return pulumi.get(self, "oauth_refresh_token_validity")
|
|
510
509
|
|
|
511
510
|
@oauth_refresh_token_validity.setter
|
|
512
|
-
def oauth_refresh_token_validity(self, value: Optional[pulumi.Input[
|
|
511
|
+
def oauth_refresh_token_validity(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
513
512
|
pulumi.set(self, "oauth_refresh_token_validity", value)
|
|
514
513
|
|
|
515
|
-
@property
|
|
514
|
+
@_builtins.property
|
|
516
515
|
@pulumi.getter(name="oauthUseSecondaryRoles")
|
|
517
|
-
def oauth_use_secondary_roles(self) -> Optional[pulumi.Input[
|
|
516
|
+
def oauth_use_secondary_roles(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
518
517
|
"""
|
|
519
518
|
Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
520
519
|
"""
|
|
521
520
|
return pulumi.get(self, "oauth_use_secondary_roles")
|
|
522
521
|
|
|
523
522
|
@oauth_use_secondary_roles.setter
|
|
524
|
-
def oauth_use_secondary_roles(self, value: Optional[pulumi.Input[
|
|
523
|
+
def oauth_use_secondary_roles(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
525
524
|
pulumi.set(self, "oauth_use_secondary_roles", value)
|
|
526
525
|
|
|
527
|
-
@property
|
|
526
|
+
@_builtins.property
|
|
528
527
|
@pulumi.getter(name="preAuthorizedRolesLists")
|
|
529
|
-
def pre_authorized_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
528
|
+
def pre_authorized_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
530
529
|
"""
|
|
531
530
|
A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating. For more information about this resource, see docs.
|
|
532
531
|
"""
|
|
533
532
|
return pulumi.get(self, "pre_authorized_roles_lists")
|
|
534
533
|
|
|
535
534
|
@pre_authorized_roles_lists.setter
|
|
536
|
-
def pre_authorized_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
535
|
+
def pre_authorized_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
537
536
|
pulumi.set(self, "pre_authorized_roles_lists", value)
|
|
538
537
|
|
|
539
|
-
@property
|
|
538
|
+
@_builtins.property
|
|
540
539
|
@pulumi.getter(name="relatedParameters")
|
|
541
540
|
def related_parameters(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForCustomClientsRelatedParameterArgs']]]]:
|
|
542
541
|
"""
|
|
@@ -548,7 +547,7 @@ class _OauthIntegrationForCustomClientsState:
|
|
|
548
547
|
def related_parameters(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForCustomClientsRelatedParameterArgs']]]]):
|
|
549
548
|
pulumi.set(self, "related_parameters", value)
|
|
550
549
|
|
|
551
|
-
@property
|
|
550
|
+
@_builtins.property
|
|
552
551
|
@pulumi.getter(name="showOutputs")
|
|
553
552
|
def show_outputs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForCustomClientsShowOutputArgs']]]]:
|
|
554
553
|
"""
|
|
@@ -567,21 +566,21 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
|
|
|
567
566
|
def __init__(__self__,
|
|
568
567
|
resource_name: str,
|
|
569
568
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
570
|
-
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
571
|
-
comment: Optional[pulumi.Input[
|
|
572
|
-
enabled: Optional[pulumi.Input[
|
|
573
|
-
name: Optional[pulumi.Input[
|
|
574
|
-
network_policy: Optional[pulumi.Input[
|
|
575
|
-
oauth_allow_non_tls_redirect_uri: Optional[pulumi.Input[
|
|
576
|
-
oauth_client_rsa_public_key: Optional[pulumi.Input[
|
|
577
|
-
oauth_client_rsa_public_key2: Optional[pulumi.Input[
|
|
578
|
-
oauth_client_type: Optional[pulumi.Input[
|
|
579
|
-
oauth_enforce_pkce: Optional[pulumi.Input[
|
|
580
|
-
oauth_issue_refresh_tokens: Optional[pulumi.Input[
|
|
581
|
-
oauth_redirect_uri: Optional[pulumi.Input[
|
|
582
|
-
oauth_refresh_token_validity: Optional[pulumi.Input[
|
|
583
|
-
oauth_use_secondary_roles: Optional[pulumi.Input[
|
|
584
|
-
pre_authorized_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
569
|
+
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
570
|
+
comment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
571
|
+
enabled: Optional[pulumi.Input[_builtins.str]] = None,
|
|
572
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
573
|
+
network_policy: Optional[pulumi.Input[_builtins.str]] = None,
|
|
574
|
+
oauth_allow_non_tls_redirect_uri: Optional[pulumi.Input[_builtins.str]] = None,
|
|
575
|
+
oauth_client_rsa_public_key: Optional[pulumi.Input[_builtins.str]] = None,
|
|
576
|
+
oauth_client_rsa_public_key2: Optional[pulumi.Input[_builtins.str]] = None,
|
|
577
|
+
oauth_client_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
578
|
+
oauth_enforce_pkce: Optional[pulumi.Input[_builtins.str]] = None,
|
|
579
|
+
oauth_issue_refresh_tokens: Optional[pulumi.Input[_builtins.str]] = None,
|
|
580
|
+
oauth_redirect_uri: Optional[pulumi.Input[_builtins.str]] = None,
|
|
581
|
+
oauth_refresh_token_validity: Optional[pulumi.Input[_builtins.int]] = None,
|
|
582
|
+
oauth_use_secondary_roles: Optional[pulumi.Input[_builtins.str]] = None,
|
|
583
|
+
pre_authorized_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
585
584
|
__props__=None):
|
|
586
585
|
"""
|
|
587
586
|
## Import
|
|
@@ -592,19 +591,19 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
|
|
|
592
591
|
|
|
593
592
|
:param str resource_name: The name of the resource.
|
|
594
593
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
595
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
596
|
-
:param pulumi.Input[
|
|
597
|
-
:param pulumi.Input[
|
|
598
|
-
:param pulumi.Input[
|
|
599
|
-
:param pulumi.Input[
|
|
600
|
-
:param pulumi.Input[
|
|
601
|
-
:param pulumi.Input[
|
|
602
|
-
:param pulumi.Input[
|
|
603
|
-
:param pulumi.Input[
|
|
604
|
-
:param pulumi.Input[
|
|
605
|
-
:param pulumi.Input[
|
|
606
|
-
:param pulumi.Input[
|
|
607
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
594
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
595
|
+
:param pulumi.Input[_builtins.str] comment: Specifies a comment for the OAuth integration.
|
|
596
|
+
:param pulumi.Input[_builtins.str] enabled: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
597
|
+
:param pulumi.Input[_builtins.str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
598
|
+
:param pulumi.Input[_builtins.str] network_policy: Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token. For more information about this resource, see docs.
|
|
599
|
+
:param pulumi.Input[_builtins.str] oauth_allow_non_tls_redirect_uri: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) If true, allows setting oauth*redirect*uri to a URI not protected by TLS. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
600
|
+
:param pulumi.Input[_builtins.str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
|
|
601
|
+
:param pulumi.Input[_builtins.str] oauth_enforce_pkce: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Boolean that specifies whether Proof Key for Code Exchange (PKCE) should be required for the integration. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
602
|
+
:param pulumi.Input[_builtins.str] oauth_issue_refresh_tokens: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
603
|
+
:param pulumi.Input[_builtins.str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
|
|
604
|
+
:param pulumi.Input[_builtins.int] oauth_refresh_token_validity: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`-1`)) Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
605
|
+
:param pulumi.Input[_builtins.str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
606
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] pre_authorized_roles_lists: A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating. For more information about this resource, see docs.
|
|
608
607
|
"""
|
|
609
608
|
...
|
|
610
609
|
@overload
|
|
@@ -634,21 +633,21 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
|
|
|
634
633
|
def _internal_init(__self__,
|
|
635
634
|
resource_name: str,
|
|
636
635
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
637
|
-
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
638
|
-
comment: Optional[pulumi.Input[
|
|
639
|
-
enabled: Optional[pulumi.Input[
|
|
640
|
-
name: Optional[pulumi.Input[
|
|
641
|
-
network_policy: Optional[pulumi.Input[
|
|
642
|
-
oauth_allow_non_tls_redirect_uri: Optional[pulumi.Input[
|
|
643
|
-
oauth_client_rsa_public_key: Optional[pulumi.Input[
|
|
644
|
-
oauth_client_rsa_public_key2: Optional[pulumi.Input[
|
|
645
|
-
oauth_client_type: Optional[pulumi.Input[
|
|
646
|
-
oauth_enforce_pkce: Optional[pulumi.Input[
|
|
647
|
-
oauth_issue_refresh_tokens: Optional[pulumi.Input[
|
|
648
|
-
oauth_redirect_uri: Optional[pulumi.Input[
|
|
649
|
-
oauth_refresh_token_validity: Optional[pulumi.Input[
|
|
650
|
-
oauth_use_secondary_roles: Optional[pulumi.Input[
|
|
651
|
-
pre_authorized_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
636
|
+
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
637
|
+
comment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
638
|
+
enabled: Optional[pulumi.Input[_builtins.str]] = None,
|
|
639
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
640
|
+
network_policy: Optional[pulumi.Input[_builtins.str]] = None,
|
|
641
|
+
oauth_allow_non_tls_redirect_uri: Optional[pulumi.Input[_builtins.str]] = None,
|
|
642
|
+
oauth_client_rsa_public_key: Optional[pulumi.Input[_builtins.str]] = None,
|
|
643
|
+
oauth_client_rsa_public_key2: Optional[pulumi.Input[_builtins.str]] = None,
|
|
644
|
+
oauth_client_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
645
|
+
oauth_enforce_pkce: Optional[pulumi.Input[_builtins.str]] = None,
|
|
646
|
+
oauth_issue_refresh_tokens: Optional[pulumi.Input[_builtins.str]] = None,
|
|
647
|
+
oauth_redirect_uri: Optional[pulumi.Input[_builtins.str]] = None,
|
|
648
|
+
oauth_refresh_token_validity: Optional[pulumi.Input[_builtins.int]] = None,
|
|
649
|
+
oauth_use_secondary_roles: Optional[pulumi.Input[_builtins.str]] = None,
|
|
650
|
+
pre_authorized_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
652
651
|
__props__=None):
|
|
653
652
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
654
653
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -693,23 +692,23 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
|
|
|
693
692
|
def get(resource_name: str,
|
|
694
693
|
id: pulumi.Input[str],
|
|
695
694
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
696
|
-
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
697
|
-
comment: Optional[pulumi.Input[
|
|
695
|
+
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
696
|
+
comment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
698
697
|
describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForCustomClientsDescribeOutputArgs', 'OauthIntegrationForCustomClientsDescribeOutputArgsDict']]]]] = None,
|
|
699
|
-
enabled: Optional[pulumi.Input[
|
|
700
|
-
fully_qualified_name: Optional[pulumi.Input[
|
|
701
|
-
name: Optional[pulumi.Input[
|
|
702
|
-
network_policy: Optional[pulumi.Input[
|
|
703
|
-
oauth_allow_non_tls_redirect_uri: Optional[pulumi.Input[
|
|
704
|
-
oauth_client_rsa_public_key: Optional[pulumi.Input[
|
|
705
|
-
oauth_client_rsa_public_key2: Optional[pulumi.Input[
|
|
706
|
-
oauth_client_type: Optional[pulumi.Input[
|
|
707
|
-
oauth_enforce_pkce: Optional[pulumi.Input[
|
|
708
|
-
oauth_issue_refresh_tokens: Optional[pulumi.Input[
|
|
709
|
-
oauth_redirect_uri: Optional[pulumi.Input[
|
|
710
|
-
oauth_refresh_token_validity: Optional[pulumi.Input[
|
|
711
|
-
oauth_use_secondary_roles: Optional[pulumi.Input[
|
|
712
|
-
pre_authorized_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
698
|
+
enabled: Optional[pulumi.Input[_builtins.str]] = None,
|
|
699
|
+
fully_qualified_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
700
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
701
|
+
network_policy: Optional[pulumi.Input[_builtins.str]] = None,
|
|
702
|
+
oauth_allow_non_tls_redirect_uri: Optional[pulumi.Input[_builtins.str]] = None,
|
|
703
|
+
oauth_client_rsa_public_key: Optional[pulumi.Input[_builtins.str]] = None,
|
|
704
|
+
oauth_client_rsa_public_key2: Optional[pulumi.Input[_builtins.str]] = None,
|
|
705
|
+
oauth_client_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
706
|
+
oauth_enforce_pkce: Optional[pulumi.Input[_builtins.str]] = None,
|
|
707
|
+
oauth_issue_refresh_tokens: Optional[pulumi.Input[_builtins.str]] = None,
|
|
708
|
+
oauth_redirect_uri: Optional[pulumi.Input[_builtins.str]] = None,
|
|
709
|
+
oauth_refresh_token_validity: Optional[pulumi.Input[_builtins.int]] = None,
|
|
710
|
+
oauth_use_secondary_roles: Optional[pulumi.Input[_builtins.str]] = None,
|
|
711
|
+
pre_authorized_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
713
712
|
related_parameters: Optional[pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForCustomClientsRelatedParameterArgs', 'OauthIntegrationForCustomClientsRelatedParameterArgsDict']]]]] = None,
|
|
714
713
|
show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForCustomClientsShowOutputArgs', 'OauthIntegrationForCustomClientsShowOutputArgsDict']]]]] = None) -> 'OauthIntegrationForCustomClients':
|
|
715
714
|
"""
|
|
@@ -719,21 +718,21 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
|
|
|
719
718
|
:param str resource_name: The unique name of the resulting resource.
|
|
720
719
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
721
720
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
722
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
723
|
-
:param pulumi.Input[
|
|
721
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
722
|
+
:param pulumi.Input[_builtins.str] comment: Specifies a comment for the OAuth integration.
|
|
724
723
|
:param pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForCustomClientsDescribeOutputArgs', 'OauthIntegrationForCustomClientsDescribeOutputArgsDict']]]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATION` for the given integration.
|
|
725
|
-
:param pulumi.Input[
|
|
726
|
-
:param pulumi.Input[
|
|
727
|
-
:param pulumi.Input[
|
|
728
|
-
:param pulumi.Input[
|
|
729
|
-
:param pulumi.Input[
|
|
730
|
-
:param pulumi.Input[
|
|
731
|
-
:param pulumi.Input[
|
|
732
|
-
:param pulumi.Input[
|
|
733
|
-
:param pulumi.Input[
|
|
734
|
-
:param pulumi.Input[
|
|
735
|
-
:param pulumi.Input[
|
|
736
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
724
|
+
:param pulumi.Input[_builtins.str] enabled: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
725
|
+
:param pulumi.Input[_builtins.str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
726
|
+
:param pulumi.Input[_builtins.str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
727
|
+
:param pulumi.Input[_builtins.str] network_policy: Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token. For more information about this resource, see docs.
|
|
728
|
+
:param pulumi.Input[_builtins.str] oauth_allow_non_tls_redirect_uri: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) If true, allows setting oauth*redirect*uri to a URI not protected by TLS. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
729
|
+
:param pulumi.Input[_builtins.str] oauth_client_type: Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
|
|
730
|
+
:param pulumi.Input[_builtins.str] oauth_enforce_pkce: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Boolean that specifies whether Proof Key for Code Exchange (PKCE) should be required for the integration. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
731
|
+
:param pulumi.Input[_builtins.str] oauth_issue_refresh_tokens: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
732
|
+
:param pulumi.Input[_builtins.str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
|
|
733
|
+
:param pulumi.Input[_builtins.int] oauth_refresh_token_validity: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`-1`)) Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
734
|
+
:param pulumi.Input[_builtins.str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
735
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] pre_authorized_roles_lists: A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating. For more information about this resource, see docs.
|
|
737
736
|
:param pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForCustomClientsRelatedParameterArgs', 'OauthIntegrationForCustomClientsRelatedParameterArgsDict']]]] related_parameters: Parameters related to this security integration.
|
|
738
737
|
:param pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForCustomClientsShowOutputArgs', 'OauthIntegrationForCustomClientsShowOutputArgsDict']]]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATION` for the given integration.
|
|
739
738
|
"""
|
|
@@ -762,23 +761,23 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
|
|
|
762
761
|
__props__.__dict__["show_outputs"] = show_outputs
|
|
763
762
|
return OauthIntegrationForCustomClients(resource_name, opts=opts, __props__=__props__)
|
|
764
763
|
|
|
765
|
-
@property
|
|
764
|
+
@_builtins.property
|
|
766
765
|
@pulumi.getter(name="blockedRolesLists")
|
|
767
|
-
def blocked_roles_lists(self) -> pulumi.Output[Optional[Sequence[
|
|
766
|
+
def blocked_roles_lists(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
768
767
|
"""
|
|
769
768
|
A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
770
769
|
"""
|
|
771
770
|
return pulumi.get(self, "blocked_roles_lists")
|
|
772
771
|
|
|
773
|
-
@property
|
|
772
|
+
@_builtins.property
|
|
774
773
|
@pulumi.getter
|
|
775
|
-
def comment(self) -> pulumi.Output[Optional[
|
|
774
|
+
def comment(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
776
775
|
"""
|
|
777
776
|
Specifies a comment for the OAuth integration.
|
|
778
777
|
"""
|
|
779
778
|
return pulumi.get(self, "comment")
|
|
780
779
|
|
|
781
|
-
@property
|
|
780
|
+
@_builtins.property
|
|
782
781
|
@pulumi.getter(name="describeOutputs")
|
|
783
782
|
def describe_outputs(self) -> pulumi.Output[Sequence['outputs.OauthIntegrationForCustomClientsDescribeOutput']]:
|
|
784
783
|
"""
|
|
@@ -786,113 +785,113 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
|
|
|
786
785
|
"""
|
|
787
786
|
return pulumi.get(self, "describe_outputs")
|
|
788
787
|
|
|
789
|
-
@property
|
|
788
|
+
@_builtins.property
|
|
790
789
|
@pulumi.getter
|
|
791
|
-
def enabled(self) -> pulumi.Output[Optional[
|
|
790
|
+
def enabled(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
792
791
|
"""
|
|
793
792
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
794
793
|
"""
|
|
795
794
|
return pulumi.get(self, "enabled")
|
|
796
795
|
|
|
797
|
-
@property
|
|
796
|
+
@_builtins.property
|
|
798
797
|
@pulumi.getter(name="fullyQualifiedName")
|
|
799
|
-
def fully_qualified_name(self) -> pulumi.Output[
|
|
798
|
+
def fully_qualified_name(self) -> pulumi.Output[_builtins.str]:
|
|
800
799
|
"""
|
|
801
800
|
Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
802
801
|
"""
|
|
803
802
|
return pulumi.get(self, "fully_qualified_name")
|
|
804
803
|
|
|
805
|
-
@property
|
|
804
|
+
@_builtins.property
|
|
806
805
|
@pulumi.getter
|
|
807
|
-
def name(self) -> pulumi.Output[
|
|
806
|
+
def name(self) -> pulumi.Output[_builtins.str]:
|
|
808
807
|
"""
|
|
809
808
|
Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
810
809
|
"""
|
|
811
810
|
return pulumi.get(self, "name")
|
|
812
811
|
|
|
813
|
-
@property
|
|
812
|
+
@_builtins.property
|
|
814
813
|
@pulumi.getter(name="networkPolicy")
|
|
815
|
-
def network_policy(self) -> pulumi.Output[Optional[
|
|
814
|
+
def network_policy(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
816
815
|
"""
|
|
817
816
|
Specifies an existing network policy. This network policy controls network traffic that is attempting to exchange an authorization code for an access or refresh token or to use a refresh token to obtain a new access token. For more information about this resource, see docs.
|
|
818
817
|
"""
|
|
819
818
|
return pulumi.get(self, "network_policy")
|
|
820
819
|
|
|
821
|
-
@property
|
|
820
|
+
@_builtins.property
|
|
822
821
|
@pulumi.getter(name="oauthAllowNonTlsRedirectUri")
|
|
823
|
-
def oauth_allow_non_tls_redirect_uri(self) -> pulumi.Output[Optional[
|
|
822
|
+
def oauth_allow_non_tls_redirect_uri(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
824
823
|
"""
|
|
825
824
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) If true, allows setting oauth*redirect*uri to a URI not protected by TLS. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
826
825
|
"""
|
|
827
826
|
return pulumi.get(self, "oauth_allow_non_tls_redirect_uri")
|
|
828
827
|
|
|
829
|
-
@property
|
|
828
|
+
@_builtins.property
|
|
830
829
|
@pulumi.getter(name="oauthClientRsaPublicKey")
|
|
831
|
-
def oauth_client_rsa_public_key(self) -> pulumi.Output[Optional[
|
|
830
|
+
def oauth_client_rsa_public_key(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
832
831
|
return pulumi.get(self, "oauth_client_rsa_public_key")
|
|
833
832
|
|
|
834
|
-
@property
|
|
833
|
+
@_builtins.property
|
|
835
834
|
@pulumi.getter(name="oauthClientRsaPublicKey2")
|
|
836
|
-
def oauth_client_rsa_public_key2(self) -> pulumi.Output[Optional[
|
|
835
|
+
def oauth_client_rsa_public_key2(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
837
836
|
return pulumi.get(self, "oauth_client_rsa_public_key2")
|
|
838
837
|
|
|
839
|
-
@property
|
|
838
|
+
@_builtins.property
|
|
840
839
|
@pulumi.getter(name="oauthClientType")
|
|
841
|
-
def oauth_client_type(self) -> pulumi.Output[
|
|
840
|
+
def oauth_client_type(self) -> pulumi.Output[_builtins.str]:
|
|
842
841
|
"""
|
|
843
842
|
Specifies the type of client being registered. Snowflake supports both confidential and public clients. Valid options are: `PUBLIC` | `CONFIDENTIAL`.
|
|
844
843
|
"""
|
|
845
844
|
return pulumi.get(self, "oauth_client_type")
|
|
846
845
|
|
|
847
|
-
@property
|
|
846
|
+
@_builtins.property
|
|
848
847
|
@pulumi.getter(name="oauthEnforcePkce")
|
|
849
|
-
def oauth_enforce_pkce(self) -> pulumi.Output[Optional[
|
|
848
|
+
def oauth_enforce_pkce(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
850
849
|
"""
|
|
851
850
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Boolean that specifies whether Proof Key for Code Exchange (PKCE) should be required for the integration. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
852
851
|
"""
|
|
853
852
|
return pulumi.get(self, "oauth_enforce_pkce")
|
|
854
853
|
|
|
855
|
-
@property
|
|
854
|
+
@_builtins.property
|
|
856
855
|
@pulumi.getter(name="oauthIssueRefreshTokens")
|
|
857
|
-
def oauth_issue_refresh_tokens(self) -> pulumi.Output[Optional[
|
|
856
|
+
def oauth_issue_refresh_tokens(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
858
857
|
"""
|
|
859
858
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
860
859
|
"""
|
|
861
860
|
return pulumi.get(self, "oauth_issue_refresh_tokens")
|
|
862
861
|
|
|
863
|
-
@property
|
|
862
|
+
@_builtins.property
|
|
864
863
|
@pulumi.getter(name="oauthRedirectUri")
|
|
865
|
-
def oauth_redirect_uri(self) -> pulumi.Output[
|
|
864
|
+
def oauth_redirect_uri(self) -> pulumi.Output[_builtins.str]:
|
|
866
865
|
"""
|
|
867
866
|
Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI.
|
|
868
867
|
"""
|
|
869
868
|
return pulumi.get(self, "oauth_redirect_uri")
|
|
870
869
|
|
|
871
|
-
@property
|
|
870
|
+
@_builtins.property
|
|
872
871
|
@pulumi.getter(name="oauthRefreshTokenValidity")
|
|
873
|
-
def oauth_refresh_token_validity(self) -> pulumi.Output[Optional[
|
|
872
|
+
def oauth_refresh_token_validity(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
874
873
|
"""
|
|
875
874
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`-1`)) Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
876
875
|
"""
|
|
877
876
|
return pulumi.get(self, "oauth_refresh_token_validity")
|
|
878
877
|
|
|
879
|
-
@property
|
|
878
|
+
@_builtins.property
|
|
880
879
|
@pulumi.getter(name="oauthUseSecondaryRoles")
|
|
881
|
-
def oauth_use_secondary_roles(self) -> pulumi.Output[Optional[
|
|
880
|
+
def oauth_use_secondary_roles(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
882
881
|
"""
|
|
883
882
|
Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
884
883
|
"""
|
|
885
884
|
return pulumi.get(self, "oauth_use_secondary_roles")
|
|
886
885
|
|
|
887
|
-
@property
|
|
886
|
+
@_builtins.property
|
|
888
887
|
@pulumi.getter(name="preAuthorizedRolesLists")
|
|
889
|
-
def pre_authorized_roles_lists(self) -> pulumi.Output[Optional[Sequence[
|
|
888
|
+
def pre_authorized_roles_lists(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
890
889
|
"""
|
|
891
890
|
A set of Snowflake roles that a user does not need to explicitly consent to using after authenticating. For more information about this resource, see docs.
|
|
892
891
|
"""
|
|
893
892
|
return pulumi.get(self, "pre_authorized_roles_lists")
|
|
894
893
|
|
|
895
|
-
@property
|
|
894
|
+
@_builtins.property
|
|
896
895
|
@pulumi.getter(name="relatedParameters")
|
|
897
896
|
def related_parameters(self) -> pulumi.Output[Sequence['outputs.OauthIntegrationForCustomClientsRelatedParameter']]:
|
|
898
897
|
"""
|
|
@@ -900,7 +899,7 @@ class OauthIntegrationForCustomClients(pulumi.CustomResource):
|
|
|
900
899
|
"""
|
|
901
900
|
return pulumi.get(self, "related_parameters")
|
|
902
901
|
|
|
903
|
-
@property
|
|
902
|
+
@_builtins.property
|
|
904
903
|
@pulumi.getter(name="showOutputs")
|
|
905
904
|
def show_outputs(self) -> pulumi.Output[Sequence['outputs.OauthIntegrationForCustomClientsShowOutput']]:
|
|
906
905
|
"""
|