Skip to content

Latest commit

 

History

History
348 lines (216 loc) · 13.3 KB

resource.md

File metadata and controls

348 lines (216 loc) · 13.3 KB
page_title subcategory description
opal_resource Data Source - terraform-provider-opal
Resource DataSource

opal_resource (Data Source)

Resource DataSource

Example Usage

data "opal_resource" "my_resource" {
  id = "4baf8423-db0a-4037-a4cf-f79c60cb67a5"
}

Schema

Required

  • id (String) The ID of the resource.

Read-Only

  • admin_owner_id (String) The ID of the owner of the resource.
  • app_id (String) The ID of the app.
  • custom_request_notification (String) Custom request notification sent upon request approval.
  • description (String) A description of the resource.
  • name (String) The name of the resource.
  • parent_resource_id (String) The ID of the parent resource.
  • remote_info (Attributes) Information that defines the remote resource. This replaces the deprecated remote_id and metadata fields. (see below for nested schema)
  • request_configurations (Attributes List) A list of configurations for requests to this resource. (see below for nested schema)
  • require_mfa_to_approve (Boolean) A bool representing whether or not to require MFA for reviewers to approve requests for this resource.
  • require_mfa_to_connect (Boolean) A bool representing whether or not to require MFA to connect to this resource.
  • resource_type (String) The type of the resource.
  • risk_sensitivity (String) The risk sensitivity level for the resource. When an override is set, this field will match that.
  • risk_sensitivity_override (String) Indicates the level of potential impact misuse or unauthorized access may incur.
  • ticket_propagation (Attributes) Configuration for ticket propagation, when enabled, a ticket will be created for access changes related to the users in this resource. (see below for nested schema)

Nested Schema for remote_info

Read-Only:

Nested Schema for remote_info.aws_account

Read-Only:

  • account_id (String) The id of the AWS account.

Nested Schema for remote_info.aws_ec2_instance

Read-Only:

  • account_id (String) The id of the AWS account. Required for AWS Organizations.
  • instance_id (String) The instanceId of the EC2 instance.
  • region (String) The region of the EC2 instance.

Nested Schema for remote_info.aws_eks_cluster

Read-Only:

  • account_id (String) The id of the AWS account. Required for AWS Organizations.
  • arn (String) The ARN of the EKS cluster.

Nested Schema for remote_info.aws_iam_role

Read-Only:

  • account_id (String) The id of the AWS account. Required for AWS Organizations.
  • arn (String) The ARN of the IAM role.

Nested Schema for remote_info.aws_permission_set

Read-Only:

  • account_id (String) The ID of an AWS account to which this permission set is provisioned.
  • arn (String) The ARN of the permission set.

Nested Schema for remote_info.aws_rds_instance

Read-Only:

  • account_id (String) The id of the AWS account. Required for AWS Organizations.
  • instance_id (String) The instanceId of the RDS instance.
  • region (String) The region of the RDS instance.
  • resource_id (String) The resourceId of the RDS instance.

Nested Schema for remote_info.gcp_big_query_dataset

Read-Only:

  • dataset_id (String) The id of the dataset.
  • project_id (String) The id of the project the dataset is in.

Nested Schema for remote_info.gcp_big_query_table

Read-Only:

  • dataset_id (String) The id of the dataset the table is in.
  • project_id (String) The id of the project the table is in.
  • table_id (String) The id of the table.

Nested Schema for remote_info.gcp_bucket

Read-Only:

  • bucket_id (String) The id of the bucket.

Nested Schema for remote_info.gcp_compute_instance

Read-Only:

  • instance_id (String) The id of the instance.
  • project_id (String) The id of the project the instance is in.
  • zone (String) The zone the instance is in.

Nested Schema for remote_info.gcp_folder

Read-Only:

  • folder_id (String) The id of the folder.

Nested Schema for remote_info.gcp_gke_cluster

Read-Only:

  • cluster_name (String) The name of the GKE cluster.

Nested Schema for remote_info.gcp_organization

Read-Only:

  • organization_id (String) The id of the organization.

Nested Schema for remote_info.gcp_project

Read-Only:

  • project_id (String) The id of the project.

Nested Schema for remote_info.gcp_service_account

Read-Only:

  • email (String) The email of the service account.
  • project_id (String) The id of the project the service account is in.
  • service_account_id (String) The id of the service account.

Nested Schema for remote_info.gcp_sql_instance

Read-Only:

  • instance_id (String) The id of the SQL instance.
  • project_id (String) The id of the project the instance is in.

Nested Schema for remote_info.github_repo

Read-Only:

  • repo_name (String) The name of the repository.

Nested Schema for remote_info.gitlab_project

Read-Only:

  • project_id (String) The id of the project.

Nested Schema for remote_info.okta_app

Read-Only:

  • app_id (String) The id of the app.

Nested Schema for remote_info.okta_custom_role

Read-Only:

  • role_id (String) The id of the custom role.

Nested Schema for remote_info.okta_standard_role

Read-Only:

  • role_type (String) The type of the standard role.

Nested Schema for remote_info.pagerduty_role

Read-Only:

  • role_name (String) The name of the role.

Nested Schema for remote_info.salesforce_permission_set

Read-Only:

  • permission_set_id (String) The id of the permission set.

Nested Schema for remote_info.salesforce_profile

Read-Only:

  • profile_id (String) The id of the permission set.
  • user_license_id (String) The id of the user license.

Nested Schema for remote_info.salesforce_role

Read-Only:

  • role_id (String) The id of the role.

Nested Schema for remote_info.teleport_role

Read-Only:

  • role_name (String) The name role.

Nested Schema for request_configurations

Read-Only:

  • allow_requests (Boolean) A bool representing whether or not to allow requests for this resource.
  • auto_approval (Boolean) A bool representing whether or not to automatically approve requests for this resource.
  • condition (Attributes) (see below for nested schema)
  • max_duration (Number) The maximum duration for which the resource can be requested (in minutes).
  • priority (Number) The priority of the request configuration.
  • recommended_duration (Number) The recommended duration for which the resource should be requested (in minutes). -1 represents an indefinite duration.
  • request_template_id (String) The ID of the associated request template.
  • require_mfa_to_request (Boolean) A bool representing whether or not to require MFA for requesting access to this resource.
  • require_support_ticket (Boolean) A bool representing whether or not access requests to the resource require an access ticket.
  • reviewer_stages (Attributes List) The list of reviewer stages for the request configuration. (see below for nested schema)

Nested Schema for request_configurations.condition

Read-Only:

  • group_ids (Set of String) The list of group IDs to match.
  • role_remote_ids (Set of String) The list of role remote IDs to match.

Nested Schema for request_configurations.reviewer_stages

Read-Only:

  • operator (String) The operator of the reviewer stage. Admin and manager approval are also treated as reviewers.
  • owner_ids (Set of String)
  • require_admin_approval (Boolean) Whether this reviewer stage should require admin approval.
  • require_manager_approval (Boolean) Whether this reviewer stage should require manager approval.

Nested Schema for ticket_propagation

Read-Only:

  • enabled_on_grant (Boolean)
  • enabled_on_revocation (Boolean)
  • ticket_project_id (String)
  • ticket_provider (String) The third party ticketing platform provider.