pulumi-snowflake 2.3.0a1753339260__py3-none-any.whl → 2.3.0a1753415140__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-snowflake might be problematic. Click here for more details.
- pulumi_snowflake/__init__.py +20 -1
- pulumi_snowflake/_inputs.py +17236 -16797
- pulumi_snowflake/account.py +252 -253
- pulumi_snowflake/account_authentication_policy_attachment.py +18 -19
- pulumi_snowflake/account_parameter.py +35 -36
- pulumi_snowflake/account_password_policy_attachment.py +18 -19
- pulumi_snowflake/account_role.py +42 -43
- pulumi_snowflake/alert.py +149 -150
- pulumi_snowflake/api_authentication_integration_with_authorization_code_grant.py +197 -198
- pulumi_snowflake/api_authentication_integration_with_client_credentials.py +180 -181
- pulumi_snowflake/api_authentication_integration_with_jwt_bearer.py +193 -194
- pulumi_snowflake/api_integration.py +251 -252
- pulumi_snowflake/authentication_policy.py +167 -168
- pulumi_snowflake/compute_pool.py +167 -168
- pulumi_snowflake/config/__init__.py +1 -1
- pulumi_snowflake/config/__init__.pyi +1 -2
- pulumi_snowflake/config/outputs.py +21 -22
- pulumi_snowflake/config/vars.py +43 -44
- pulumi_snowflake/cortex_search_service.py +191 -192
- pulumi_snowflake/current_account.py +2096 -2097
- pulumi_snowflake/current_organization_account.py +5863 -0
- pulumi_snowflake/database.py +353 -354
- pulumi_snowflake/database_role.py +63 -64
- pulumi_snowflake/dynamic_table.py +274 -275
- pulumi_snowflake/email_notification_integration.py +70 -71
- pulumi_snowflake/execute.py +61 -62
- pulumi_snowflake/external_function.py +280 -281
- pulumi_snowflake/external_oauth_integration.py +288 -289
- pulumi_snowflake/external_table.py +246 -247
- pulumi_snowflake/external_volume.py +68 -69
- pulumi_snowflake/failover_group.py +135 -136
- pulumi_snowflake/file_format.py +622 -623
- pulumi_snowflake/function_java.py +320 -321
- pulumi_snowflake/function_javascript.py +243 -244
- pulumi_snowflake/function_python.py +334 -335
- pulumi_snowflake/function_scala.py +320 -321
- pulumi_snowflake/function_sql.py +226 -227
- pulumi_snowflake/get_account_roles.py +16 -17
- pulumi_snowflake/get_accounts.py +16 -17
- pulumi_snowflake/get_alerts.py +22 -23
- pulumi_snowflake/get_compute_pools.py +23 -24
- pulumi_snowflake/get_connections.py +10 -11
- pulumi_snowflake/get_cortex_search_services.py +18 -19
- pulumi_snowflake/get_current_account.py +9 -10
- pulumi_snowflake/get_current_role.py +5 -6
- pulumi_snowflake/get_database.py +25 -26
- pulumi_snowflake/get_database_role.py +19 -20
- pulumi_snowflake/get_database_roles.py +17 -18
- pulumi_snowflake/get_databases.py +29 -30
- pulumi_snowflake/get_dynamic_tables.py +13 -14
- pulumi_snowflake/get_external_functions.py +16 -17
- pulumi_snowflake/get_external_tables.py +16 -17
- pulumi_snowflake/get_failover_groups.py +10 -11
- pulumi_snowflake/get_file_formats.py +16 -17
- pulumi_snowflake/get_functions.py +16 -17
- pulumi_snowflake/get_git_repositories.py +18 -19
- pulumi_snowflake/get_grants.py +9 -10
- pulumi_snowflake/get_image_repositories.py +11 -12
- pulumi_snowflake/get_masking_policies.py +18 -19
- pulumi_snowflake/get_materialized_views.py +16 -17
- pulumi_snowflake/get_network_policies.py +16 -17
- pulumi_snowflake/get_parameters.py +34 -35
- pulumi_snowflake/get_pipes.py +16 -17
- pulumi_snowflake/get_procedures.py +16 -17
- pulumi_snowflake/get_resource_monitors.py +10 -11
- pulumi_snowflake/get_row_access_policies.py +18 -19
- pulumi_snowflake/get_schemas.py +30 -31
- pulumi_snowflake/get_secrets.py +17 -18
- pulumi_snowflake/get_security_integrations.py +16 -17
- pulumi_snowflake/get_sequences.py +16 -17
- pulumi_snowflake/get_services.py +30 -31
- pulumi_snowflake/get_shares.py +10 -11
- pulumi_snowflake/get_stages.py +16 -17
- pulumi_snowflake/get_storage_integrations.py +4 -5
- pulumi_snowflake/get_streamlits.py +18 -19
- pulumi_snowflake/get_streams.py +24 -25
- pulumi_snowflake/get_system_generate_scim_access_token.py +11 -12
- pulumi_snowflake/get_system_get_aws_sns_iam_policy.py +11 -12
- pulumi_snowflake/get_system_get_private_link_config.py +21 -22
- pulumi_snowflake/get_system_get_snowflake_platform_info.py +7 -8
- pulumi_snowflake/get_tables.py +24 -25
- pulumi_snowflake/get_tags.py +11 -12
- pulumi_snowflake/get_tasks.py +30 -31
- pulumi_snowflake/get_user_programmatic_access_tokens.py +113 -0
- pulumi_snowflake/get_users.py +29 -30
- pulumi_snowflake/get_views.py +24 -25
- pulumi_snowflake/get_warehouses.py +22 -23
- pulumi_snowflake/git_repository.py +133 -134
- pulumi_snowflake/grant_account_role.py +52 -53
- pulumi_snowflake/grant_application_role.py +52 -53
- pulumi_snowflake/grant_database_role.py +69 -70
- pulumi_snowflake/grant_ownership.py +55 -56
- pulumi_snowflake/grant_privileges_to_account_role.py +125 -126
- pulumi_snowflake/grant_privileges_to_database_role.py +122 -123
- pulumi_snowflake/grant_privileges_to_share.py +154 -155
- pulumi_snowflake/image_repository.py +80 -81
- pulumi_snowflake/job_service.py +148 -149
- pulumi_snowflake/legacy_service_user.py +1269 -1270
- pulumi_snowflake/managed_account.py +140 -141
- pulumi_snowflake/masking_policy.py +136 -137
- pulumi_snowflake/materialized_view.py +149 -150
- pulumi_snowflake/network_policy.py +116 -117
- pulumi_snowflake/network_policy_attachment.py +52 -53
- pulumi_snowflake/network_rule.py +129 -130
- pulumi_snowflake/notification_integration.py +298 -299
- pulumi_snowflake/oauth_integration_for_custom_clients.py +263 -264
- pulumi_snowflake/oauth_integration_for_partner_applications.py +169 -170
- pulumi_snowflake/object_parameter.py +72 -73
- pulumi_snowflake/outputs.py +15957 -15511
- pulumi_snowflake/password_policy.py +299 -300
- pulumi_snowflake/pipe.py +181 -182
- pulumi_snowflake/primary_connection.py +70 -71
- pulumi_snowflake/procedure_java.py +341 -342
- pulumi_snowflake/procedure_javascript.py +247 -248
- pulumi_snowflake/procedure_python.py +338 -339
- pulumi_snowflake/procedure_scala.py +341 -342
- pulumi_snowflake/procedure_sql.py +247 -248
- pulumi_snowflake/provider.py +377 -378
- pulumi_snowflake/pulumi-plugin.json +1 -1
- pulumi_snowflake/resource_monitor.py +165 -166
- pulumi_snowflake/row_access_policy.py +102 -103
- pulumi_snowflake/saml2_integration.py +303 -304
- pulumi_snowflake/schema.py +390 -391
- pulumi_snowflake/scim_integration.py +133 -134
- pulumi_snowflake/secondary_connection.py +72 -73
- pulumi_snowflake/secondary_database.py +350 -351
- pulumi_snowflake/secret_with_authorization_code_grant.py +138 -139
- pulumi_snowflake/secret_with_basic_authentication.py +121 -122
- pulumi_snowflake/secret_with_client_credentials.py +125 -126
- pulumi_snowflake/secret_with_generic_string.py +104 -105
- pulumi_snowflake/sequence.py +121 -122
- pulumi_snowflake/service.py +233 -234
- pulumi_snowflake/service_user.py +1239 -1240
- pulumi_snowflake/share.py +61 -62
- pulumi_snowflake/shared_database.py +299 -300
- pulumi_snowflake/stage.py +234 -235
- pulumi_snowflake/storage_integration.py +230 -231
- pulumi_snowflake/stream_on_directory_table.py +128 -129
- pulumi_snowflake/stream_on_external_table.py +151 -152
- pulumi_snowflake/stream_on_table.py +164 -165
- pulumi_snowflake/stream_on_view.py +164 -165
- pulumi_snowflake/streamlit.py +184 -185
- pulumi_snowflake/table.py +147 -148
- pulumi_snowflake/table_column_masking_policy_application.py +52 -53
- pulumi_snowflake/table_constraint.py +191 -192
- pulumi_snowflake/tag.py +114 -115
- pulumi_snowflake/tag_association.py +86 -87
- pulumi_snowflake/task.py +1224 -1225
- pulumi_snowflake/user.py +1346 -1347
- pulumi_snowflake/user_authentication_policy_attachment.py +35 -36
- pulumi_snowflake/user_password_policy_attachment.py +35 -36
- pulumi_snowflake/user_programmatic_access_token.py +598 -0
- pulumi_snowflake/user_public_keys.py +52 -53
- pulumi_snowflake/view.py +187 -188
- pulumi_snowflake/warehouse.py +286 -287
- {pulumi_snowflake-2.3.0a1753339260.dist-info → pulumi_snowflake-2.3.0a1753415140.dist-info}/METADATA +1 -1
- pulumi_snowflake-2.3.0a1753415140.dist-info/RECORD +161 -0
- pulumi_snowflake-2.3.0a1753339260.dist-info/RECORD +0 -158
- {pulumi_snowflake-2.3.0a1753339260.dist-info → pulumi_snowflake-2.3.0a1753415140.dist-info}/WHEEL +0 -0
- {pulumi_snowflake-2.3.0a1753339260.dist-info → pulumi_snowflake-2.3.0a1753415140.dist-info}/top_level.txt +0 -0
|
@@ -2,8 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import builtins
|
|
6
|
-
import copy
|
|
5
|
+
import builtins as _builtins
|
|
7
6
|
import warnings
|
|
8
7
|
import sys
|
|
9
8
|
import pulumi
|
|
@@ -22,26 +21,26 @@ __all__ = ['OauthIntegrationForPartnerApplicationsArgs', 'OauthIntegrationForPar
|
|
|
22
21
|
@pulumi.input_type
|
|
23
22
|
class OauthIntegrationForPartnerApplicationsArgs:
|
|
24
23
|
def __init__(__self__, *,
|
|
25
|
-
oauth_client: pulumi.Input[
|
|
26
|
-
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
27
|
-
comment: Optional[pulumi.Input[
|
|
28
|
-
enabled: Optional[pulumi.Input[
|
|
29
|
-
name: Optional[pulumi.Input[
|
|
30
|
-
oauth_issue_refresh_tokens: Optional[pulumi.Input[
|
|
31
|
-
oauth_redirect_uri: Optional[pulumi.Input[
|
|
32
|
-
oauth_refresh_token_validity: Optional[pulumi.Input[
|
|
33
|
-
oauth_use_secondary_roles: Optional[pulumi.Input[
|
|
24
|
+
oauth_client: pulumi.Input[_builtins.str],
|
|
25
|
+
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
26
|
+
comment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
27
|
+
enabled: Optional[pulumi.Input[_builtins.str]] = None,
|
|
28
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
29
|
+
oauth_issue_refresh_tokens: Optional[pulumi.Input[_builtins.str]] = None,
|
|
30
|
+
oauth_redirect_uri: Optional[pulumi.Input[_builtins.str]] = None,
|
|
31
|
+
oauth_refresh_token_validity: Optional[pulumi.Input[_builtins.int]] = None,
|
|
32
|
+
oauth_use_secondary_roles: Optional[pulumi.Input[_builtins.str]] = None):
|
|
34
33
|
"""
|
|
35
34
|
The set of arguments for constructing a OauthIntegrationForPartnerApplications resource.
|
|
36
|
-
:param pulumi.Input[
|
|
37
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
38
|
-
:param pulumi.Input[
|
|
39
|
-
:param pulumi.Input[
|
|
40
|
-
:param pulumi.Input[
|
|
41
|
-
:param pulumi.Input[
|
|
42
|
-
:param pulumi.Input[
|
|
43
|
-
:param pulumi.Input[
|
|
44
|
-
:param pulumi.Input[
|
|
35
|
+
:param pulumi.Input[_builtins.str] oauth_client: Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
|
|
36
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
37
|
+
:param pulumi.Input[_builtins.str] comment: Specifies a comment for the OAuth integration.
|
|
38
|
+
:param pulumi.Input[_builtins.str] enabled: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
39
|
+
:param pulumi.Input[_builtins.str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
40
|
+
:param pulumi.Input[_builtins.str] oauth_issue_refresh_tokens: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
41
|
+
:param pulumi.Input[_builtins.str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI. The field should be only set when OAUTH_CLIENT = LOOKER. In any other case the field should be left out empty.
|
|
42
|
+
:param pulumi.Input[_builtins.int] oauth_refresh_token_validity: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`-1`)) Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
43
|
+
:param pulumi.Input[_builtins.str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
45
44
|
"""
|
|
46
45
|
pulumi.set(__self__, "oauth_client", oauth_client)
|
|
47
46
|
if blocked_roles_lists is not None:
|
|
@@ -61,144 +60,144 @@ class OauthIntegrationForPartnerApplicationsArgs:
|
|
|
61
60
|
if oauth_use_secondary_roles is not None:
|
|
62
61
|
pulumi.set(__self__, "oauth_use_secondary_roles", oauth_use_secondary_roles)
|
|
63
62
|
|
|
64
|
-
@property
|
|
63
|
+
@_builtins.property
|
|
65
64
|
@pulumi.getter(name="oauthClient")
|
|
66
|
-
def oauth_client(self) -> pulumi.Input[
|
|
65
|
+
def oauth_client(self) -> pulumi.Input[_builtins.str]:
|
|
67
66
|
"""
|
|
68
67
|
Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
|
|
69
68
|
"""
|
|
70
69
|
return pulumi.get(self, "oauth_client")
|
|
71
70
|
|
|
72
71
|
@oauth_client.setter
|
|
73
|
-
def oauth_client(self, value: pulumi.Input[
|
|
72
|
+
def oauth_client(self, value: pulumi.Input[_builtins.str]):
|
|
74
73
|
pulumi.set(self, "oauth_client", value)
|
|
75
74
|
|
|
76
|
-
@property
|
|
75
|
+
@_builtins.property
|
|
77
76
|
@pulumi.getter(name="blockedRolesLists")
|
|
78
|
-
def blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
77
|
+
def blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
79
78
|
"""
|
|
80
79
|
A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
81
80
|
"""
|
|
82
81
|
return pulumi.get(self, "blocked_roles_lists")
|
|
83
82
|
|
|
84
83
|
@blocked_roles_lists.setter
|
|
85
|
-
def blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
84
|
+
def blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
86
85
|
pulumi.set(self, "blocked_roles_lists", value)
|
|
87
86
|
|
|
88
|
-
@property
|
|
87
|
+
@_builtins.property
|
|
89
88
|
@pulumi.getter
|
|
90
|
-
def comment(self) -> Optional[pulumi.Input[
|
|
89
|
+
def comment(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
91
90
|
"""
|
|
92
91
|
Specifies a comment for the OAuth integration.
|
|
93
92
|
"""
|
|
94
93
|
return pulumi.get(self, "comment")
|
|
95
94
|
|
|
96
95
|
@comment.setter
|
|
97
|
-
def comment(self, value: Optional[pulumi.Input[
|
|
96
|
+
def comment(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
98
97
|
pulumi.set(self, "comment", value)
|
|
99
98
|
|
|
100
|
-
@property
|
|
99
|
+
@_builtins.property
|
|
101
100
|
@pulumi.getter
|
|
102
|
-
def enabled(self) -> Optional[pulumi.Input[
|
|
101
|
+
def enabled(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
103
102
|
"""
|
|
104
103
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
105
104
|
"""
|
|
106
105
|
return pulumi.get(self, "enabled")
|
|
107
106
|
|
|
108
107
|
@enabled.setter
|
|
109
|
-
def enabled(self, value: Optional[pulumi.Input[
|
|
108
|
+
def enabled(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
110
109
|
pulumi.set(self, "enabled", value)
|
|
111
110
|
|
|
112
|
-
@property
|
|
111
|
+
@_builtins.property
|
|
113
112
|
@pulumi.getter
|
|
114
|
-
def name(self) -> Optional[pulumi.Input[
|
|
113
|
+
def name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
115
114
|
"""
|
|
116
115
|
Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
117
116
|
"""
|
|
118
117
|
return pulumi.get(self, "name")
|
|
119
118
|
|
|
120
119
|
@name.setter
|
|
121
|
-
def name(self, value: Optional[pulumi.Input[
|
|
120
|
+
def name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
122
121
|
pulumi.set(self, "name", value)
|
|
123
122
|
|
|
124
|
-
@property
|
|
123
|
+
@_builtins.property
|
|
125
124
|
@pulumi.getter(name="oauthIssueRefreshTokens")
|
|
126
|
-
def oauth_issue_refresh_tokens(self) -> Optional[pulumi.Input[
|
|
125
|
+
def oauth_issue_refresh_tokens(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
127
126
|
"""
|
|
128
127
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
129
128
|
"""
|
|
130
129
|
return pulumi.get(self, "oauth_issue_refresh_tokens")
|
|
131
130
|
|
|
132
131
|
@oauth_issue_refresh_tokens.setter
|
|
133
|
-
def oauth_issue_refresh_tokens(self, value: Optional[pulumi.Input[
|
|
132
|
+
def oauth_issue_refresh_tokens(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
134
133
|
pulumi.set(self, "oauth_issue_refresh_tokens", value)
|
|
135
134
|
|
|
136
|
-
@property
|
|
135
|
+
@_builtins.property
|
|
137
136
|
@pulumi.getter(name="oauthRedirectUri")
|
|
138
|
-
def oauth_redirect_uri(self) -> Optional[pulumi.Input[
|
|
137
|
+
def oauth_redirect_uri(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
139
138
|
"""
|
|
140
139
|
Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI. The field should be only set when OAUTH_CLIENT = LOOKER. In any other case the field should be left out empty.
|
|
141
140
|
"""
|
|
142
141
|
return pulumi.get(self, "oauth_redirect_uri")
|
|
143
142
|
|
|
144
143
|
@oauth_redirect_uri.setter
|
|
145
|
-
def oauth_redirect_uri(self, value: Optional[pulumi.Input[
|
|
144
|
+
def oauth_redirect_uri(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
146
145
|
pulumi.set(self, "oauth_redirect_uri", value)
|
|
147
146
|
|
|
148
|
-
@property
|
|
147
|
+
@_builtins.property
|
|
149
148
|
@pulumi.getter(name="oauthRefreshTokenValidity")
|
|
150
|
-
def oauth_refresh_token_validity(self) -> Optional[pulumi.Input[
|
|
149
|
+
def oauth_refresh_token_validity(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
151
150
|
"""
|
|
152
151
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`-1`)) Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
153
152
|
"""
|
|
154
153
|
return pulumi.get(self, "oauth_refresh_token_validity")
|
|
155
154
|
|
|
156
155
|
@oauth_refresh_token_validity.setter
|
|
157
|
-
def oauth_refresh_token_validity(self, value: Optional[pulumi.Input[
|
|
156
|
+
def oauth_refresh_token_validity(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
158
157
|
pulumi.set(self, "oauth_refresh_token_validity", value)
|
|
159
158
|
|
|
160
|
-
@property
|
|
159
|
+
@_builtins.property
|
|
161
160
|
@pulumi.getter(name="oauthUseSecondaryRoles")
|
|
162
|
-
def oauth_use_secondary_roles(self) -> Optional[pulumi.Input[
|
|
161
|
+
def oauth_use_secondary_roles(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
163
162
|
"""
|
|
164
163
|
Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
165
164
|
"""
|
|
166
165
|
return pulumi.get(self, "oauth_use_secondary_roles")
|
|
167
166
|
|
|
168
167
|
@oauth_use_secondary_roles.setter
|
|
169
|
-
def oauth_use_secondary_roles(self, value: Optional[pulumi.Input[
|
|
168
|
+
def oauth_use_secondary_roles(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
170
169
|
pulumi.set(self, "oauth_use_secondary_roles", value)
|
|
171
170
|
|
|
172
171
|
|
|
173
172
|
@pulumi.input_type
|
|
174
173
|
class _OauthIntegrationForPartnerApplicationsState:
|
|
175
174
|
def __init__(__self__, *,
|
|
176
|
-
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
177
|
-
comment: Optional[pulumi.Input[
|
|
175
|
+
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
176
|
+
comment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
178
177
|
describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForPartnerApplicationsDescribeOutputArgs']]]] = None,
|
|
179
|
-
enabled: Optional[pulumi.Input[
|
|
180
|
-
fully_qualified_name: Optional[pulumi.Input[
|
|
181
|
-
name: Optional[pulumi.Input[
|
|
182
|
-
oauth_client: Optional[pulumi.Input[
|
|
183
|
-
oauth_issue_refresh_tokens: Optional[pulumi.Input[
|
|
184
|
-
oauth_redirect_uri: Optional[pulumi.Input[
|
|
185
|
-
oauth_refresh_token_validity: Optional[pulumi.Input[
|
|
186
|
-
oauth_use_secondary_roles: Optional[pulumi.Input[
|
|
178
|
+
enabled: Optional[pulumi.Input[_builtins.str]] = None,
|
|
179
|
+
fully_qualified_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
180
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
181
|
+
oauth_client: Optional[pulumi.Input[_builtins.str]] = None,
|
|
182
|
+
oauth_issue_refresh_tokens: Optional[pulumi.Input[_builtins.str]] = None,
|
|
183
|
+
oauth_redirect_uri: Optional[pulumi.Input[_builtins.str]] = None,
|
|
184
|
+
oauth_refresh_token_validity: Optional[pulumi.Input[_builtins.int]] = None,
|
|
185
|
+
oauth_use_secondary_roles: Optional[pulumi.Input[_builtins.str]] = None,
|
|
187
186
|
related_parameters: Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForPartnerApplicationsRelatedParameterArgs']]]] = None,
|
|
188
187
|
show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForPartnerApplicationsShowOutputArgs']]]] = None):
|
|
189
188
|
"""
|
|
190
189
|
Input properties used for looking up and filtering OauthIntegrationForPartnerApplications resources.
|
|
191
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
192
|
-
:param pulumi.Input[
|
|
190
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
191
|
+
:param pulumi.Input[_builtins.str] comment: Specifies a comment for the OAuth integration.
|
|
193
192
|
:param pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForPartnerApplicationsDescribeOutputArgs']]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATION` for the given integration.
|
|
194
|
-
:param pulumi.Input[
|
|
195
|
-
:param pulumi.Input[
|
|
196
|
-
:param pulumi.Input[
|
|
197
|
-
:param pulumi.Input[
|
|
198
|
-
:param pulumi.Input[
|
|
199
|
-
:param pulumi.Input[
|
|
200
|
-
:param pulumi.Input[
|
|
201
|
-
:param pulumi.Input[
|
|
193
|
+
:param pulumi.Input[_builtins.str] enabled: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
194
|
+
:param pulumi.Input[_builtins.str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
195
|
+
:param pulumi.Input[_builtins.str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
196
|
+
:param pulumi.Input[_builtins.str] oauth_client: Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
|
|
197
|
+
:param pulumi.Input[_builtins.str] oauth_issue_refresh_tokens: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
198
|
+
:param pulumi.Input[_builtins.str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI. The field should be only set when OAUTH_CLIENT = LOOKER. In any other case the field should be left out empty.
|
|
199
|
+
:param pulumi.Input[_builtins.int] oauth_refresh_token_validity: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`-1`)) Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
200
|
+
:param pulumi.Input[_builtins.str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
202
201
|
:param pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForPartnerApplicationsRelatedParameterArgs']]] related_parameters: Parameters related to this security integration.
|
|
203
202
|
:param pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForPartnerApplicationsShowOutputArgs']]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATION` for the given integration.
|
|
204
203
|
"""
|
|
@@ -229,31 +228,31 @@ class _OauthIntegrationForPartnerApplicationsState:
|
|
|
229
228
|
if show_outputs is not None:
|
|
230
229
|
pulumi.set(__self__, "show_outputs", show_outputs)
|
|
231
230
|
|
|
232
|
-
@property
|
|
231
|
+
@_builtins.property
|
|
233
232
|
@pulumi.getter(name="blockedRolesLists")
|
|
234
|
-
def blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
233
|
+
def blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
235
234
|
"""
|
|
236
235
|
A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
237
236
|
"""
|
|
238
237
|
return pulumi.get(self, "blocked_roles_lists")
|
|
239
238
|
|
|
240
239
|
@blocked_roles_lists.setter
|
|
241
|
-
def blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
240
|
+
def blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
242
241
|
pulumi.set(self, "blocked_roles_lists", value)
|
|
243
242
|
|
|
244
|
-
@property
|
|
243
|
+
@_builtins.property
|
|
245
244
|
@pulumi.getter
|
|
246
|
-
def comment(self) -> Optional[pulumi.Input[
|
|
245
|
+
def comment(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
247
246
|
"""
|
|
248
247
|
Specifies a comment for the OAuth integration.
|
|
249
248
|
"""
|
|
250
249
|
return pulumi.get(self, "comment")
|
|
251
250
|
|
|
252
251
|
@comment.setter
|
|
253
|
-
def comment(self, value: Optional[pulumi.Input[
|
|
252
|
+
def comment(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
254
253
|
pulumi.set(self, "comment", value)
|
|
255
254
|
|
|
256
|
-
@property
|
|
255
|
+
@_builtins.property
|
|
257
256
|
@pulumi.getter(name="describeOutputs")
|
|
258
257
|
def describe_outputs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForPartnerApplicationsDescribeOutputArgs']]]]:
|
|
259
258
|
"""
|
|
@@ -265,103 +264,103 @@ class _OauthIntegrationForPartnerApplicationsState:
|
|
|
265
264
|
def describe_outputs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForPartnerApplicationsDescribeOutputArgs']]]]):
|
|
266
265
|
pulumi.set(self, "describe_outputs", value)
|
|
267
266
|
|
|
268
|
-
@property
|
|
267
|
+
@_builtins.property
|
|
269
268
|
@pulumi.getter
|
|
270
|
-
def enabled(self) -> Optional[pulumi.Input[
|
|
269
|
+
def enabled(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
271
270
|
"""
|
|
272
271
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
273
272
|
"""
|
|
274
273
|
return pulumi.get(self, "enabled")
|
|
275
274
|
|
|
276
275
|
@enabled.setter
|
|
277
|
-
def enabled(self, value: Optional[pulumi.Input[
|
|
276
|
+
def enabled(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
278
277
|
pulumi.set(self, "enabled", value)
|
|
279
278
|
|
|
280
|
-
@property
|
|
279
|
+
@_builtins.property
|
|
281
280
|
@pulumi.getter(name="fullyQualifiedName")
|
|
282
|
-
def fully_qualified_name(self) -> Optional[pulumi.Input[
|
|
281
|
+
def fully_qualified_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
283
282
|
"""
|
|
284
283
|
Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
285
284
|
"""
|
|
286
285
|
return pulumi.get(self, "fully_qualified_name")
|
|
287
286
|
|
|
288
287
|
@fully_qualified_name.setter
|
|
289
|
-
def fully_qualified_name(self, value: Optional[pulumi.Input[
|
|
288
|
+
def fully_qualified_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
290
289
|
pulumi.set(self, "fully_qualified_name", value)
|
|
291
290
|
|
|
292
|
-
@property
|
|
291
|
+
@_builtins.property
|
|
293
292
|
@pulumi.getter
|
|
294
|
-
def name(self) -> Optional[pulumi.Input[
|
|
293
|
+
def name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
295
294
|
"""
|
|
296
295
|
Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
297
296
|
"""
|
|
298
297
|
return pulumi.get(self, "name")
|
|
299
298
|
|
|
300
299
|
@name.setter
|
|
301
|
-
def name(self, value: Optional[pulumi.Input[
|
|
300
|
+
def name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
302
301
|
pulumi.set(self, "name", value)
|
|
303
302
|
|
|
304
|
-
@property
|
|
303
|
+
@_builtins.property
|
|
305
304
|
@pulumi.getter(name="oauthClient")
|
|
306
|
-
def oauth_client(self) -> Optional[pulumi.Input[
|
|
305
|
+
def oauth_client(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
307
306
|
"""
|
|
308
307
|
Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
|
|
309
308
|
"""
|
|
310
309
|
return pulumi.get(self, "oauth_client")
|
|
311
310
|
|
|
312
311
|
@oauth_client.setter
|
|
313
|
-
def oauth_client(self, value: Optional[pulumi.Input[
|
|
312
|
+
def oauth_client(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
314
313
|
pulumi.set(self, "oauth_client", value)
|
|
315
314
|
|
|
316
|
-
@property
|
|
315
|
+
@_builtins.property
|
|
317
316
|
@pulumi.getter(name="oauthIssueRefreshTokens")
|
|
318
|
-
def oauth_issue_refresh_tokens(self) -> Optional[pulumi.Input[
|
|
317
|
+
def oauth_issue_refresh_tokens(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
319
318
|
"""
|
|
320
319
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
321
320
|
"""
|
|
322
321
|
return pulumi.get(self, "oauth_issue_refresh_tokens")
|
|
323
322
|
|
|
324
323
|
@oauth_issue_refresh_tokens.setter
|
|
325
|
-
def oauth_issue_refresh_tokens(self, value: Optional[pulumi.Input[
|
|
324
|
+
def oauth_issue_refresh_tokens(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
326
325
|
pulumi.set(self, "oauth_issue_refresh_tokens", value)
|
|
327
326
|
|
|
328
|
-
@property
|
|
327
|
+
@_builtins.property
|
|
329
328
|
@pulumi.getter(name="oauthRedirectUri")
|
|
330
|
-
def oauth_redirect_uri(self) -> Optional[pulumi.Input[
|
|
329
|
+
def oauth_redirect_uri(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
331
330
|
"""
|
|
332
331
|
Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI. The field should be only set when OAUTH_CLIENT = LOOKER. In any other case the field should be left out empty.
|
|
333
332
|
"""
|
|
334
333
|
return pulumi.get(self, "oauth_redirect_uri")
|
|
335
334
|
|
|
336
335
|
@oauth_redirect_uri.setter
|
|
337
|
-
def oauth_redirect_uri(self, value: Optional[pulumi.Input[
|
|
336
|
+
def oauth_redirect_uri(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
338
337
|
pulumi.set(self, "oauth_redirect_uri", value)
|
|
339
338
|
|
|
340
|
-
@property
|
|
339
|
+
@_builtins.property
|
|
341
340
|
@pulumi.getter(name="oauthRefreshTokenValidity")
|
|
342
|
-
def oauth_refresh_token_validity(self) -> Optional[pulumi.Input[
|
|
341
|
+
def oauth_refresh_token_validity(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
343
342
|
"""
|
|
344
343
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`-1`)) Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
345
344
|
"""
|
|
346
345
|
return pulumi.get(self, "oauth_refresh_token_validity")
|
|
347
346
|
|
|
348
347
|
@oauth_refresh_token_validity.setter
|
|
349
|
-
def oauth_refresh_token_validity(self, value: Optional[pulumi.Input[
|
|
348
|
+
def oauth_refresh_token_validity(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
350
349
|
pulumi.set(self, "oauth_refresh_token_validity", value)
|
|
351
350
|
|
|
352
|
-
@property
|
|
351
|
+
@_builtins.property
|
|
353
352
|
@pulumi.getter(name="oauthUseSecondaryRoles")
|
|
354
|
-
def oauth_use_secondary_roles(self) -> Optional[pulumi.Input[
|
|
353
|
+
def oauth_use_secondary_roles(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
355
354
|
"""
|
|
356
355
|
Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
357
356
|
"""
|
|
358
357
|
return pulumi.get(self, "oauth_use_secondary_roles")
|
|
359
358
|
|
|
360
359
|
@oauth_use_secondary_roles.setter
|
|
361
|
-
def oauth_use_secondary_roles(self, value: Optional[pulumi.Input[
|
|
360
|
+
def oauth_use_secondary_roles(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
362
361
|
pulumi.set(self, "oauth_use_secondary_roles", value)
|
|
363
362
|
|
|
364
|
-
@property
|
|
363
|
+
@_builtins.property
|
|
365
364
|
@pulumi.getter(name="relatedParameters")
|
|
366
365
|
def related_parameters(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForPartnerApplicationsRelatedParameterArgs']]]]:
|
|
367
366
|
"""
|
|
@@ -373,7 +372,7 @@ class _OauthIntegrationForPartnerApplicationsState:
|
|
|
373
372
|
def related_parameters(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForPartnerApplicationsRelatedParameterArgs']]]]):
|
|
374
373
|
pulumi.set(self, "related_parameters", value)
|
|
375
374
|
|
|
376
|
-
@property
|
|
375
|
+
@_builtins.property
|
|
377
376
|
@pulumi.getter(name="showOutputs")
|
|
378
377
|
def show_outputs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['OauthIntegrationForPartnerApplicationsShowOutputArgs']]]]:
|
|
379
378
|
"""
|
|
@@ -392,15 +391,15 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
392
391
|
def __init__(__self__,
|
|
393
392
|
resource_name: str,
|
|
394
393
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
395
|
-
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
396
|
-
comment: Optional[pulumi.Input[
|
|
397
|
-
enabled: Optional[pulumi.Input[
|
|
398
|
-
name: Optional[pulumi.Input[
|
|
399
|
-
oauth_client: Optional[pulumi.Input[
|
|
400
|
-
oauth_issue_refresh_tokens: Optional[pulumi.Input[
|
|
401
|
-
oauth_redirect_uri: Optional[pulumi.Input[
|
|
402
|
-
oauth_refresh_token_validity: Optional[pulumi.Input[
|
|
403
|
-
oauth_use_secondary_roles: Optional[pulumi.Input[
|
|
394
|
+
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
395
|
+
comment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
396
|
+
enabled: Optional[pulumi.Input[_builtins.str]] = None,
|
|
397
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
398
|
+
oauth_client: Optional[pulumi.Input[_builtins.str]] = None,
|
|
399
|
+
oauth_issue_refresh_tokens: Optional[pulumi.Input[_builtins.str]] = None,
|
|
400
|
+
oauth_redirect_uri: Optional[pulumi.Input[_builtins.str]] = None,
|
|
401
|
+
oauth_refresh_token_validity: Optional[pulumi.Input[_builtins.int]] = None,
|
|
402
|
+
oauth_use_secondary_roles: Optional[pulumi.Input[_builtins.str]] = None,
|
|
404
403
|
__props__=None):
|
|
405
404
|
"""
|
|
406
405
|
## Import
|
|
@@ -411,15 +410,15 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
411
410
|
|
|
412
411
|
:param str resource_name: The name of the resource.
|
|
413
412
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
414
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
415
|
-
:param pulumi.Input[
|
|
416
|
-
:param pulumi.Input[
|
|
417
|
-
:param pulumi.Input[
|
|
418
|
-
:param pulumi.Input[
|
|
419
|
-
:param pulumi.Input[
|
|
420
|
-
:param pulumi.Input[
|
|
421
|
-
:param pulumi.Input[
|
|
422
|
-
:param pulumi.Input[
|
|
413
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
414
|
+
:param pulumi.Input[_builtins.str] comment: Specifies a comment for the OAuth integration.
|
|
415
|
+
:param pulumi.Input[_builtins.str] enabled: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
416
|
+
:param pulumi.Input[_builtins.str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
417
|
+
:param pulumi.Input[_builtins.str] oauth_client: Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
|
|
418
|
+
:param pulumi.Input[_builtins.str] oauth_issue_refresh_tokens: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
419
|
+
:param pulumi.Input[_builtins.str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI. The field should be only set when OAUTH_CLIENT = LOOKER. In any other case the field should be left out empty.
|
|
420
|
+
:param pulumi.Input[_builtins.int] oauth_refresh_token_validity: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`-1`)) Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
421
|
+
:param pulumi.Input[_builtins.str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
423
422
|
"""
|
|
424
423
|
...
|
|
425
424
|
@overload
|
|
@@ -449,15 +448,15 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
449
448
|
def _internal_init(__self__,
|
|
450
449
|
resource_name: str,
|
|
451
450
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
452
|
-
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
453
|
-
comment: Optional[pulumi.Input[
|
|
454
|
-
enabled: Optional[pulumi.Input[
|
|
455
|
-
name: Optional[pulumi.Input[
|
|
456
|
-
oauth_client: Optional[pulumi.Input[
|
|
457
|
-
oauth_issue_refresh_tokens: Optional[pulumi.Input[
|
|
458
|
-
oauth_redirect_uri: Optional[pulumi.Input[
|
|
459
|
-
oauth_refresh_token_validity: Optional[pulumi.Input[
|
|
460
|
-
oauth_use_secondary_roles: Optional[pulumi.Input[
|
|
451
|
+
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
452
|
+
comment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
453
|
+
enabled: Optional[pulumi.Input[_builtins.str]] = None,
|
|
454
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
455
|
+
oauth_client: Optional[pulumi.Input[_builtins.str]] = None,
|
|
456
|
+
oauth_issue_refresh_tokens: Optional[pulumi.Input[_builtins.str]] = None,
|
|
457
|
+
oauth_redirect_uri: Optional[pulumi.Input[_builtins.str]] = None,
|
|
458
|
+
oauth_refresh_token_validity: Optional[pulumi.Input[_builtins.int]] = None,
|
|
459
|
+
oauth_use_secondary_roles: Optional[pulumi.Input[_builtins.str]] = None,
|
|
461
460
|
__props__=None):
|
|
462
461
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
463
462
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -494,17 +493,17 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
494
493
|
def get(resource_name: str,
|
|
495
494
|
id: pulumi.Input[str],
|
|
496
495
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
497
|
-
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
498
|
-
comment: Optional[pulumi.Input[
|
|
496
|
+
blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
497
|
+
comment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
499
498
|
describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForPartnerApplicationsDescribeOutputArgs', 'OauthIntegrationForPartnerApplicationsDescribeOutputArgsDict']]]]] = None,
|
|
500
|
-
enabled: Optional[pulumi.Input[
|
|
501
|
-
fully_qualified_name: Optional[pulumi.Input[
|
|
502
|
-
name: Optional[pulumi.Input[
|
|
503
|
-
oauth_client: Optional[pulumi.Input[
|
|
504
|
-
oauth_issue_refresh_tokens: Optional[pulumi.Input[
|
|
505
|
-
oauth_redirect_uri: Optional[pulumi.Input[
|
|
506
|
-
oauth_refresh_token_validity: Optional[pulumi.Input[
|
|
507
|
-
oauth_use_secondary_roles: Optional[pulumi.Input[
|
|
499
|
+
enabled: Optional[pulumi.Input[_builtins.str]] = None,
|
|
500
|
+
fully_qualified_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
501
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
502
|
+
oauth_client: Optional[pulumi.Input[_builtins.str]] = None,
|
|
503
|
+
oauth_issue_refresh_tokens: Optional[pulumi.Input[_builtins.str]] = None,
|
|
504
|
+
oauth_redirect_uri: Optional[pulumi.Input[_builtins.str]] = None,
|
|
505
|
+
oauth_refresh_token_validity: Optional[pulumi.Input[_builtins.int]] = None,
|
|
506
|
+
oauth_use_secondary_roles: Optional[pulumi.Input[_builtins.str]] = None,
|
|
508
507
|
related_parameters: Optional[pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForPartnerApplicationsRelatedParameterArgs', 'OauthIntegrationForPartnerApplicationsRelatedParameterArgsDict']]]]] = None,
|
|
509
508
|
show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForPartnerApplicationsShowOutputArgs', 'OauthIntegrationForPartnerApplicationsShowOutputArgsDict']]]]] = None) -> 'OauthIntegrationForPartnerApplications':
|
|
510
509
|
"""
|
|
@@ -514,17 +513,17 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
514
513
|
:param str resource_name: The unique name of the resulting resource.
|
|
515
514
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
516
515
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
517
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
518
|
-
:param pulumi.Input[
|
|
516
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] blocked_roles_lists: A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
517
|
+
:param pulumi.Input[_builtins.str] comment: Specifies a comment for the OAuth integration.
|
|
519
518
|
:param pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForPartnerApplicationsDescribeOutputArgs', 'OauthIntegrationForPartnerApplicationsDescribeOutputArgsDict']]]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATION` for the given integration.
|
|
520
|
-
:param pulumi.Input[
|
|
521
|
-
:param pulumi.Input[
|
|
522
|
-
:param pulumi.Input[
|
|
523
|
-
:param pulumi.Input[
|
|
524
|
-
:param pulumi.Input[
|
|
525
|
-
:param pulumi.Input[
|
|
526
|
-
:param pulumi.Input[
|
|
527
|
-
:param pulumi.Input[
|
|
519
|
+
:param pulumi.Input[_builtins.str] enabled: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
520
|
+
:param pulumi.Input[_builtins.str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
521
|
+
:param pulumi.Input[_builtins.str] name: Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
522
|
+
:param pulumi.Input[_builtins.str] oauth_client: Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
|
|
523
|
+
:param pulumi.Input[_builtins.str] oauth_issue_refresh_tokens: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
524
|
+
:param pulumi.Input[_builtins.str] oauth_redirect_uri: Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI. The field should be only set when OAUTH_CLIENT = LOOKER. In any other case the field should be left out empty.
|
|
525
|
+
:param pulumi.Input[_builtins.int] oauth_refresh_token_validity: (Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`-1`)) Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
526
|
+
:param pulumi.Input[_builtins.str] oauth_use_secondary_roles: Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
528
527
|
:param pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForPartnerApplicationsRelatedParameterArgs', 'OauthIntegrationForPartnerApplicationsRelatedParameterArgsDict']]]] related_parameters: Parameters related to this security integration.
|
|
529
528
|
:param pulumi.Input[Sequence[pulumi.Input[Union['OauthIntegrationForPartnerApplicationsShowOutputArgs', 'OauthIntegrationForPartnerApplicationsShowOutputArgsDict']]]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATION` for the given integration.
|
|
530
529
|
"""
|
|
@@ -547,23 +546,23 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
547
546
|
__props__.__dict__["show_outputs"] = show_outputs
|
|
548
547
|
return OauthIntegrationForPartnerApplications(resource_name, opts=opts, __props__=__props__)
|
|
549
548
|
|
|
550
|
-
@property
|
|
549
|
+
@_builtins.property
|
|
551
550
|
@pulumi.getter(name="blockedRolesLists")
|
|
552
|
-
def blocked_roles_lists(self) -> pulumi.Output[Optional[Sequence[
|
|
551
|
+
def blocked_roles_lists(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
553
552
|
"""
|
|
554
553
|
A set of Snowflake roles that a user cannot explicitly consent to using after authenticating. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
555
554
|
"""
|
|
556
555
|
return pulumi.get(self, "blocked_roles_lists")
|
|
557
556
|
|
|
558
|
-
@property
|
|
557
|
+
@_builtins.property
|
|
559
558
|
@pulumi.getter
|
|
560
|
-
def comment(self) -> pulumi.Output[Optional[
|
|
559
|
+
def comment(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
561
560
|
"""
|
|
562
561
|
Specifies a comment for the OAuth integration.
|
|
563
562
|
"""
|
|
564
563
|
return pulumi.get(self, "comment")
|
|
565
564
|
|
|
566
|
-
@property
|
|
565
|
+
@_builtins.property
|
|
567
566
|
@pulumi.getter(name="describeOutputs")
|
|
568
567
|
def describe_outputs(self) -> pulumi.Output[Sequence['outputs.OauthIntegrationForPartnerApplicationsDescribeOutput']]:
|
|
569
568
|
"""
|
|
@@ -571,71 +570,71 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
571
570
|
"""
|
|
572
571
|
return pulumi.get(self, "describe_outputs")
|
|
573
572
|
|
|
574
|
-
@property
|
|
573
|
+
@_builtins.property
|
|
575
574
|
@pulumi.getter
|
|
576
|
-
def enabled(self) -> pulumi.Output[Optional[
|
|
575
|
+
def enabled(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
577
576
|
"""
|
|
578
577
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether this OAuth integration is enabled or disabled. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
579
578
|
"""
|
|
580
579
|
return pulumi.get(self, "enabled")
|
|
581
580
|
|
|
582
|
-
@property
|
|
581
|
+
@_builtins.property
|
|
583
582
|
@pulumi.getter(name="fullyQualifiedName")
|
|
584
|
-
def fully_qualified_name(self) -> pulumi.Output[
|
|
583
|
+
def fully_qualified_name(self) -> pulumi.Output[_builtins.str]:
|
|
585
584
|
"""
|
|
586
585
|
Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
587
586
|
"""
|
|
588
587
|
return pulumi.get(self, "fully_qualified_name")
|
|
589
588
|
|
|
590
|
-
@property
|
|
589
|
+
@_builtins.property
|
|
591
590
|
@pulumi.getter
|
|
592
|
-
def name(self) -> pulumi.Output[
|
|
591
|
+
def name(self) -> pulumi.Output[_builtins.str]:
|
|
593
592
|
"""
|
|
594
593
|
Specifies the name of the OAuth integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
595
594
|
"""
|
|
596
595
|
return pulumi.get(self, "name")
|
|
597
596
|
|
|
598
|
-
@property
|
|
597
|
+
@_builtins.property
|
|
599
598
|
@pulumi.getter(name="oauthClient")
|
|
600
|
-
def oauth_client(self) -> pulumi.Output[
|
|
599
|
+
def oauth_client(self) -> pulumi.Output[_builtins.str]:
|
|
601
600
|
"""
|
|
602
601
|
Creates an OAuth interface between Snowflake and a partner application. Valid options are: `LOOKER` | `TABLEAU_DESKTOP` | `TABLEAU_SERVER`.
|
|
603
602
|
"""
|
|
604
603
|
return pulumi.get(self, "oauth_client")
|
|
605
604
|
|
|
606
|
-
@property
|
|
605
|
+
@_builtins.property
|
|
607
606
|
@pulumi.getter(name="oauthIssueRefreshTokens")
|
|
608
|
-
def oauth_issue_refresh_tokens(self) -> pulumi.Output[Optional[
|
|
607
|
+
def oauth_issue_refresh_tokens(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
609
608
|
"""
|
|
610
609
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`default`)) Specifies whether to allow the client to exchange a refresh token for an access token when the current access token has expired. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
|
|
611
610
|
"""
|
|
612
611
|
return pulumi.get(self, "oauth_issue_refresh_tokens")
|
|
613
612
|
|
|
614
|
-
@property
|
|
613
|
+
@_builtins.property
|
|
615
614
|
@pulumi.getter(name="oauthRedirectUri")
|
|
616
|
-
def oauth_redirect_uri(self) -> pulumi.Output[Optional[
|
|
615
|
+
def oauth_redirect_uri(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
617
616
|
"""
|
|
618
617
|
Specifies the client URI. After a user is authenticated, the web browser is redirected to this URI. The field should be only set when OAUTH_CLIENT = LOOKER. In any other case the field should be left out empty.
|
|
619
618
|
"""
|
|
620
619
|
return pulumi.get(self, "oauth_redirect_uri")
|
|
621
620
|
|
|
622
|
-
@property
|
|
621
|
+
@_builtins.property
|
|
623
622
|
@pulumi.getter(name="oauthRefreshTokenValidity")
|
|
624
|
-
def oauth_refresh_token_validity(self) -> pulumi.Output[Optional[
|
|
623
|
+
def oauth_refresh_token_validity(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
625
624
|
"""
|
|
626
625
|
(Default: fallback to Snowflake default - uses special value that cannot be set in the configuration manually (`-1`)) Specifies how long refresh tokens should be valid (in seconds). OAUTH*ISSUE*REFRESH_TOKENS must be set to TRUE.
|
|
627
626
|
"""
|
|
628
627
|
return pulumi.get(self, "oauth_refresh_token_validity")
|
|
629
628
|
|
|
630
|
-
@property
|
|
629
|
+
@_builtins.property
|
|
631
630
|
@pulumi.getter(name="oauthUseSecondaryRoles")
|
|
632
|
-
def oauth_use_secondary_roles(self) -> pulumi.Output[Optional[
|
|
631
|
+
def oauth_use_secondary_roles(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
633
632
|
"""
|
|
634
633
|
Specifies whether default secondary roles set in the user properties are activated by default in the session being opened. Valid options are: `IMPLICIT` | `NONE`.
|
|
635
634
|
"""
|
|
636
635
|
return pulumi.get(self, "oauth_use_secondary_roles")
|
|
637
636
|
|
|
638
|
-
@property
|
|
637
|
+
@_builtins.property
|
|
639
638
|
@pulumi.getter(name="relatedParameters")
|
|
640
639
|
def related_parameters(self) -> pulumi.Output[Sequence['outputs.OauthIntegrationForPartnerApplicationsRelatedParameter']]:
|
|
641
640
|
"""
|
|
@@ -643,7 +642,7 @@ class OauthIntegrationForPartnerApplications(pulumi.CustomResource):
|
|
|
643
642
|
"""
|
|
644
643
|
return pulumi.get(self, "related_parameters")
|
|
645
644
|
|
|
646
|
-
@property
|
|
645
|
+
@_builtins.property
|
|
647
646
|
@pulumi.getter(name="showOutputs")
|
|
648
647
|
def show_outputs(self) -> pulumi.Output[Sequence['outputs.OauthIntegrationForPartnerApplicationsShowOutput']]:
|
|
649
648
|
"""
|