Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. Google Cloud (GCP) Classic
  3. API Docs
  4. applicationintegration
  5. AuthConfig
Google Cloud v8.21.0 published on Wednesday, Mar 5, 2025 by Pulumi
pulumi/pulumi-gcp

gcp.applicationintegration.AuthConfig

Explore with Pulumi AI

gcp logo
Google Cloud v8.21.0 published on Wednesday, Mar 5, 2025 by Pulumi
pulumi/pulumi-gcp

    The AuthConfig resource use to hold channels and connection config data.

    To get more information about AuthConfig, see:

    Example Usage

    Integrations Auth Config Basic

    import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const client = new gcp.applicationintegration.Client("client", {location: "us-west1"});
const basicExample = new gcp.applicationintegration.AuthConfig("basic_example", {
    location: "us-west1",
    displayName: "test-authconfig",
    description: "Test auth config created via terraform",
    decryptedCredential: {
        credentialType: "USERNAME_AND_PASSWORD",
        usernameAndPassword: {
            username: "test-username",
            password: "test-password",
        },
    },
}, {
    dependsOn: [client],
});

    import pulumi
import pulumi_gcp as gcp

client = gcp.applicationintegration.Client("client", location="us-west1")
basic_example = gcp.applicationintegration.AuthConfig("basic_example",
    location="us-west1",
    display_name="test-authconfig",
    description="Test auth config created via terraform",
    decrypted_credential={
        "credential_type": "USERNAME_AND_PASSWORD",
        "username_and_password": {
            "username": "test-username",
            "password": "test-password",
        },
    },
    opts = pulumi.ResourceOptions(depends_on=[client]))

    package main

import (
	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/applicationintegration"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		client, err := applicationintegration.NewClient(ctx, "client", &applicationintegration.ClientArgs{
			Location: pulumi.String("us-west1"),
		})
		if err != nil {
			return err
		}
		_, err = applicationintegration.NewAuthConfig(ctx, "basic_example", &applicationintegration.AuthConfigArgs{
			Location:    pulumi.String("us-west1"),
			DisplayName: pulumi.String("test-authconfig"),
			Description: pulumi.String("Test auth config created via terraform"),
			DecryptedCredential: &applicationintegration.AuthConfigDecryptedCredentialArgs{
				CredentialType: pulumi.String("USERNAME_AND_PASSWORD"),
				UsernameAndPassword: &applicationintegration.AuthConfigDecryptedCredentialUsernameAndPasswordArgs{
					Username: pulumi.String("test-username"),
					Password: pulumi.String("test-password"),
				},
			},
		}, pulumi.DependsOn([]pulumi.Resource{
			client,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var client = new Gcp.ApplicationIntegration.Client("client", new()
    {
        Location = "us-west1",
    });

    var basicExample = new Gcp.ApplicationIntegration.AuthConfig("basic_example", new()
    {
        Location = "us-west1",
        DisplayName = "test-authconfig",
        Description = "Test auth config created via terraform",
        DecryptedCredential = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialArgs
        {
            CredentialType = "USERNAME_AND_PASSWORD",
            UsernameAndPassword = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialUsernameAndPasswordArgs
            {
                Username = "test-username",
                Password = "test-password",
            },
        },
    }, new CustomResourceOptions
    {
        DependsOn =
        {
            client,
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.applicationintegration.Client;
import com.pulumi.gcp.applicationintegration.ClientArgs;
import com.pulumi.gcp.applicationintegration.AuthConfig;
import com.pulumi.gcp.applicationintegration.AuthConfigArgs;
import com.pulumi.gcp.applicationintegration.inputs.AuthConfigDecryptedCredentialArgs;
import com.pulumi.gcp.applicationintegration.inputs.AuthConfigDecryptedCredentialUsernameAndPasswordArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var client = new Client("client", ClientArgs.builder()
            .location("us-west1")
            .build());

        var basicExample = new AuthConfig("basicExample", AuthConfigArgs.builder()
            .location("us-west1")
            .displayName("test-authconfig")
            .description("Test auth config created via terraform")
            .decryptedCredential(AuthConfigDecryptedCredentialArgs.builder()
                .credentialType("USERNAME_AND_PASSWORD")
                .usernameAndPassword(AuthConfigDecryptedCredentialUsernameAndPasswordArgs.builder()
                    .username("test-username")
                    .password("test-password")
                    .build())
                .build())
            .build(), CustomResourceOptions.builder()
                .dependsOn(client)
                .build());

    }
}

    resources:
  client:
    type: gcp:applicationintegration:Client
    properties:
      location: us-west1
  basicExample:
    type: gcp:applicationintegration:AuthConfig
    name: basic_example
    properties:
      location: us-west1
      displayName: test-authconfig
      description: Test auth config created via terraform
      decryptedCredential:
        credentialType: USERNAME_AND_PASSWORD
        usernameAndPassword:
          username: test-username
          password: test-password
    options:
      dependsOn:
        - ${client}

    Create AuthConfig Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new AuthConfig(name: string, args: AuthConfigArgs, opts?: CustomResourceOptions);
    @overload
def AuthConfig(resource_name: str,
               args: AuthConfigArgs,
               opts: Optional[ResourceOptions] = None)

@overload
def AuthConfig(resource_name: str,
               opts: Optional[ResourceOptions] = None,
               display_name: Optional[str] = None,
               location: Optional[str] = None,
               client_certificate: Optional[AuthConfigClientCertificateArgs] = None,
               decrypted_credential: Optional[AuthConfigDecryptedCredentialArgs] = None,
               description: Optional[str] = None,
               expiry_notification_durations: Optional[Sequence[str]] = None,
               override_valid_time: Optional[str] = None,
               project: Optional[str] = None,
               visibility: Optional[str] = None)
    func NewAuthConfig(ctx *Context, name string, args AuthConfigArgs, opts ...ResourceOption) (*AuthConfig, error)
    public AuthConfig(string name, AuthConfigArgs args, CustomResourceOptions? opts = null)
    public AuthConfig(String name, AuthConfigArgs args)
public AuthConfig(String name, AuthConfigArgs args, CustomResourceOptions options)

    type: gcp:applicationintegration:AuthConfig
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args AuthConfigArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AuthConfigArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AuthConfigArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AuthConfigArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AuthConfigArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var authConfigResource = new Gcp.ApplicationIntegration.AuthConfig("authConfigResource", new()
{
    DisplayName = "string",
    Location = "string",
    ClientCertificate = new Gcp.ApplicationIntegration.Inputs.AuthConfigClientCertificateArgs
    {
        EncryptedPrivateKey = "string",
        SslCertificate = "string",
        Passphrase = "string",
    },
    DecryptedCredential = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialArgs
    {
        CredentialType = "string",
        AuthToken = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialAuthTokenArgs
        {
            Token = "string",
            Type = "string",
        },
        Jwt = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialJwtArgs
        {
            Jwt = "string",
            JwtHeader = "string",
            JwtPayload = "string",
            Secret = "string",
        },
        Oauth2AuthorizationCode = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialOauth2AuthorizationCodeArgs
        {
            AuthEndpoint = "string",
            ClientId = "string",
            ClientSecret = "string",
            Scope = "string",
            TokenEndpoint = "string",
        },
        Oauth2ClientCredentials = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialOauth2ClientCredentialsArgs
        {
            ClientId = "string",
            ClientSecret = "string",
            RequestType = "string",
            Scope = "string",
            TokenEndpoint = "string",
            TokenParams = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsArgs
            {
                Entries = new[]
                {
                    new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryArgs
                    {
                        Key = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyArgs
                        {
                            LiteralValue = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyLiteralValueArgs
                            {
                                StringValue = "string",
                            },
                        },
                        Value = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueArgs
                        {
                            LiteralValue = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueLiteralValueArgs
                            {
                                StringValue = "string",
                            },
                        },
                    },
                },
            },
        },
        OidcToken = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialOidcTokenArgs
        {
            Audience = "string",
            ServiceAccountEmail = "string",
            Token = "string",
            TokenExpireTime = "string",
        },
        ServiceAccountCredentials = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialServiceAccountCredentialsArgs
        {
            Scope = "string",
            ServiceAccount = "string",
        },
        UsernameAndPassword = new Gcp.ApplicationIntegration.Inputs.AuthConfigDecryptedCredentialUsernameAndPasswordArgs
        {
            Password = "string",
            Username = "string",
        },
    },
    Description = "string",
    ExpiryNotificationDurations = new[]
    {
        "string",
    },
    OverrideValidTime = "string",
    Project = "string",
    Visibility = "string",
});

    example, err := applicationintegration.NewAuthConfig(ctx, "authConfigResource", &applicationintegration.AuthConfigArgs{
	DisplayName: pulumi.String("string"),
	Location:    pulumi.String("string"),
	ClientCertificate: &applicationintegration.AuthConfigClientCertificateArgs{
		EncryptedPrivateKey: pulumi.String("string"),
		SslCertificate:      pulumi.String("string"),
		Passphrase:          pulumi.String("string"),
	},
	DecryptedCredential: &applicationintegration.AuthConfigDecryptedCredentialArgs{
		CredentialType: pulumi.String("string"),
		AuthToken: &applicationintegration.AuthConfigDecryptedCredentialAuthTokenArgs{
			Token: pulumi.String("string"),
			Type:  pulumi.String("string"),
		},
		Jwt: &applicationintegration.AuthConfigDecryptedCredentialJwtArgs{
			Jwt:        pulumi.String("string"),
			JwtHeader:  pulumi.String("string"),
			JwtPayload: pulumi.String("string"),
			Secret:     pulumi.String("string"),
		},
		Oauth2AuthorizationCode: &applicationintegration.AuthConfigDecryptedCredentialOauth2AuthorizationCodeArgs{
			AuthEndpoint:  pulumi.String("string"),
			ClientId:      pulumi.String("string"),
			ClientSecret:  pulumi.String("string"),
			Scope:         pulumi.String("string"),
			TokenEndpoint: pulumi.String("string"),
		},
		Oauth2ClientCredentials: &applicationintegration.AuthConfigDecryptedCredentialOauth2ClientCredentialsArgs{
			ClientId:      pulumi.String("string"),
			ClientSecret:  pulumi.String("string"),
			RequestType:   pulumi.String("string"),
			Scope:         pulumi.String("string"),
			TokenEndpoint: pulumi.String("string"),
			TokenParams: &applicationintegration.AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsArgs{
				Entries: applicationintegration.AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryArray{
					&applicationintegration.AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryArgs{
						Key: &applicationintegration.AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyArgs{
							LiteralValue: &applicationintegration.AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyLiteralValueArgs{
								StringValue: pulumi.String("string"),
							},
						},
						Value: &applicationintegration.AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueArgs{
							LiteralValue: &applicationintegration.AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueLiteralValueArgs{
								StringValue: pulumi.String("string"),
							},
						},
					},
				},
			},
		},
		OidcToken: &applicationintegration.AuthConfigDecryptedCredentialOidcTokenArgs{
			Audience:            pulumi.String("string"),
			ServiceAccountEmail: pulumi.String("string"),
			Token:               pulumi.String("string"),
			TokenExpireTime:     pulumi.String("string"),
		},
		ServiceAccountCredentials: &applicationintegration.AuthConfigDecryptedCredentialServiceAccountCredentialsArgs{
			Scope:          pulumi.String("string"),
			ServiceAccount: pulumi.String("string"),
		},
		UsernameAndPassword: &applicationintegration.AuthConfigDecryptedCredentialUsernameAndPasswordArgs{
			Password: pulumi.String("string"),
			Username: pulumi.String("string"),
		},
	},
	Description: pulumi.String("string"),
	ExpiryNotificationDurations: pulumi.StringArray{
		pulumi.String("string"),
	},
	OverrideValidTime: pulumi.String("string"),
	Project:           pulumi.String("string"),
	Visibility:        pulumi.String("string"),
})

    var authConfigResource = new AuthConfig("authConfigResource", AuthConfigArgs.builder()
    .displayName("string")
    .location("string")
    .clientCertificate(AuthConfigClientCertificateArgs.builder()
        .encryptedPrivateKey("string")
        .sslCertificate("string")
        .passphrase("string")
        .build())
    .decryptedCredential(AuthConfigDecryptedCredentialArgs.builder()
        .credentialType("string")
        .authToken(AuthConfigDecryptedCredentialAuthTokenArgs.builder()
            .token("string")
            .type("string")
            .build())
        .jwt(AuthConfigDecryptedCredentialJwtArgs.builder()
            .jwt("string")
            .jwtHeader("string")
            .jwtPayload("string")
            .secret("string")
            .build())
        .oauth2AuthorizationCode(AuthConfigDecryptedCredentialOauth2AuthorizationCodeArgs.builder()
            .authEndpoint("string")
            .clientId("string")
            .clientSecret("string")
            .scope("string")
            .tokenEndpoint("string")
            .build())
        .oauth2ClientCredentials(AuthConfigDecryptedCredentialOauth2ClientCredentialsArgs.builder()
            .clientId("string")
            .clientSecret("string")
            .requestType("string")
            .scope("string")
            .tokenEndpoint("string")
            .tokenParams(AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsArgs.builder()
                .entries(AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryArgs.builder()
                    .key(AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyArgs.builder()
                        .literalValue(AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyLiteralValueArgs.builder()
                            .stringValue("string")
                            .build())
                        .build())
                    .value(AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueArgs.builder()
                        .literalValue(AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueLiteralValueArgs.builder()
                            .stringValue("string")
                            .build())
                        .build())
                    .build())
                .build())
            .build())
        .oidcToken(AuthConfigDecryptedCredentialOidcTokenArgs.builder()
            .audience("string")
            .serviceAccountEmail("string")
            .token("string")
            .tokenExpireTime("string")
            .build())
        .serviceAccountCredentials(AuthConfigDecryptedCredentialServiceAccountCredentialsArgs.builder()
            .scope("string")
            .serviceAccount("string")
            .build())
        .usernameAndPassword(AuthConfigDecryptedCredentialUsernameAndPasswordArgs.builder()
            .password("string")
            .username("string")
            .build())
        .build())
    .description("string")
    .expiryNotificationDurations("string")
    .overrideValidTime("string")
    .project("string")
    .visibility("string")
    .build());

    auth_config_resource = gcp.applicationintegration.AuthConfig("authConfigResource",
    display_name="string",
    location="string",
    client_certificate={
        "encrypted_private_key": "string",
        "ssl_certificate": "string",
        "passphrase": "string",
    },
    decrypted_credential={
        "credential_type": "string",
        "auth_token": {
            "token": "string",
            "type": "string",
        },
        "jwt": {
            "jwt": "string",
            "jwt_header": "string",
            "jwt_payload": "string",
            "secret": "string",
        },
        "oauth2_authorization_code": {
            "auth_endpoint": "string",
            "client_id": "string",
            "client_secret": "string",
            "scope": "string",
            "token_endpoint": "string",
        },
        "oauth2_client_credentials": {
            "client_id": "string",
            "client_secret": "string",
            "request_type": "string",
            "scope": "string",
            "token_endpoint": "string",
            "token_params": {
                "entries": [{
                    "key": {
                        "literal_value": {
                            "string_value": "string",
                        },
                    },
                    "value": {
                        "literal_value": {
                            "string_value": "string",
                        },
                    },
                }],
            },
        },
        "oidc_token": {
            "audience": "string",
            "service_account_email": "string",
            "token": "string",
            "token_expire_time": "string",
        },
        "service_account_credentials": {
            "scope": "string",
            "service_account": "string",
        },
        "username_and_password": {
            "password": "string",
            "username": "string",
        },
    },
    description="string",
    expiry_notification_durations=["string"],
    override_valid_time="string",
    project="string",
    visibility="string")

    const authConfigResource = new gcp.applicationintegration.AuthConfig("authConfigResource", {
    displayName: "string",
    location: "string",
    clientCertificate: {
        encryptedPrivateKey: "string",
        sslCertificate: "string",
        passphrase: "string",
    },
    decryptedCredential: {
        credentialType: "string",
        authToken: {
            token: "string",
            type: "string",
        },
        jwt: {
            jwt: "string",
            jwtHeader: "string",
            jwtPayload: "string",
            secret: "string",
        },
        oauth2AuthorizationCode: {
            authEndpoint: "string",
            clientId: "string",
            clientSecret: "string",
            scope: "string",
            tokenEndpoint: "string",
        },
        oauth2ClientCredentials: {
            clientId: "string",
            clientSecret: "string",
            requestType: "string",
            scope: "string",
            tokenEndpoint: "string",
            tokenParams: {
                entries: [{
                    key: {
                        literalValue: {
                            stringValue: "string",
                        },
                    },
                    value: {
                        literalValue: {
                            stringValue: "string",
                        },
                    },
                }],
            },
        },
        oidcToken: {
            audience: "string",
            serviceAccountEmail: "string",
            token: "string",
            tokenExpireTime: "string",
        },
        serviceAccountCredentials: {
            scope: "string",
            serviceAccount: "string",
        },
        usernameAndPassword: {
            password: "string",
            username: "string",
        },
    },
    description: "string",
    expiryNotificationDurations: ["string"],
    overrideValidTime: "string",
    project: "string",
    visibility: "string",
});

    type: gcp:applicationintegration:AuthConfig
properties:
    clientCertificate:
        encryptedPrivateKey: string
        passphrase: string
        sslCertificate: string
    decryptedCredential:
        authToken:
            token: string
            type: string
        credentialType: string
        jwt:
            jwt: string
            jwtHeader: string
            jwtPayload: string
            secret: string
        oauth2AuthorizationCode:
            authEndpoint: string
            clientId: string
            clientSecret: string
            scope: string
            tokenEndpoint: string
        oauth2ClientCredentials:
            clientId: string
            clientSecret: string
            requestType: string
            scope: string
            tokenEndpoint: string
            tokenParams:
                entries:
                    - key:
                        literalValue:
                            stringValue: string
                      value:
                        literalValue:
                            stringValue: string
        oidcToken:
            audience: string
            serviceAccountEmail: string
            token: string
            tokenExpireTime: string
        serviceAccountCredentials:
            scope: string
            serviceAccount: string
        usernameAndPassword:
            password: string
            username: string
    description: string
    displayName: string
    expiryNotificationDurations:
        - string
    location: string
    overrideValidTime: string
    project: string
    visibility: string

    AuthConfig Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The AuthConfig resource accepts the following input properties:

    DisplayName string
    The name of the auth config.
    Location string
    Location in which client needs to be provisioned.

    ClientCertificate AuthConfigClientCertificate
    Raw client certificate Structure is documented below.
    DecryptedCredential AuthConfigDecryptedCredential
    Raw auth credentials. Structure is documented below.
    Description string
    A description of the auth config.
    ExpiryNotificationDurations List<string>
    User can define the time to receive notification after which the auth config becomes invalid. Support up to 30 days. Support granularity in hours. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
    OverrideValidTime string
    User provided expiry time to override. For the example of Salesforce, username/password credentials can be valid for 6 months depending on the instance settings. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    Visibility string
    The visibility of the auth config. Possible values are: PRIVATE, CLIENT_VISIBLE.
    DisplayName string
    The name of the auth config.
    Location string
    Location in which client needs to be provisioned.

    ClientCertificate AuthConfigClientCertificateArgs
    Raw client certificate Structure is documented below.
    DecryptedCredential AuthConfigDecryptedCredentialArgs
    Raw auth credentials. Structure is documented below.
    Description string
    A description of the auth config.
    ExpiryNotificationDurations []string
    User can define the time to receive notification after which the auth config becomes invalid. Support up to 30 days. Support granularity in hours. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
    OverrideValidTime string
    User provided expiry time to override. For the example of Salesforce, username/password credentials can be valid for 6 months depending on the instance settings. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    Visibility string
    The visibility of the auth config. Possible values are: PRIVATE, CLIENT_VISIBLE.
    displayName String
    The name of the auth config.
    location String
    Location in which client needs to be provisioned.

    clientCertificate AuthConfigClientCertificate
    Raw client certificate Structure is documented below.
    decryptedCredential AuthConfigDecryptedCredential
    Raw auth credentials. Structure is documented below.
    description String
    A description of the auth config.
    expiryNotificationDurations List<String>
    User can define the time to receive notification after which the auth config becomes invalid. Support up to 30 days. Support granularity in hours. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
    overrideValidTime String
    User provided expiry time to override. For the example of Salesforce, username/password credentials can be valid for 6 months depending on the instance settings. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    visibility String
    The visibility of the auth config. Possible values are: PRIVATE, CLIENT_VISIBLE.
    displayName string
    The name of the auth config.
    location string
    Location in which client needs to be provisioned.

    clientCertificate AuthConfigClientCertificate
    Raw client certificate Structure is documented below.
    decryptedCredential AuthConfigDecryptedCredential
    Raw auth credentials. Structure is documented below.
    description string
    A description of the auth config.
    expiryNotificationDurations string[]
    User can define the time to receive notification after which the auth config becomes invalid. Support up to 30 days. Support granularity in hours. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
    overrideValidTime string
    User provided expiry time to override. For the example of Salesforce, username/password credentials can be valid for 6 months depending on the instance settings. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    visibility string
    The visibility of the auth config. Possible values are: PRIVATE, CLIENT_VISIBLE.
    display_name str
    The name of the auth config.
    location str
    Location in which client needs to be provisioned.

    client_certificate AuthConfigClientCertificateArgs
    Raw client certificate Structure is documented below.
    decrypted_credential AuthConfigDecryptedCredentialArgs
    Raw auth credentials. Structure is documented below.
    description str
    A description of the auth config.
    expiry_notification_durations Sequence[str]
    User can define the time to receive notification after which the auth config becomes invalid. Support up to 30 days. Support granularity in hours. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
    override_valid_time str
    User provided expiry time to override. For the example of Salesforce, username/password credentials can be valid for 6 months depending on the instance settings. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    project str
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    visibility str
    The visibility of the auth config. Possible values are: PRIVATE, CLIENT_VISIBLE.
    displayName String
    The name of the auth config.
    location String
    Location in which client needs to be provisioned.

    clientCertificate Property Map
    Raw client certificate Structure is documented below.
    decryptedCredential Property Map
    Raw auth credentials. Structure is documented below.
    description String
    A description of the auth config.
    expiryNotificationDurations List<String>
    User can define the time to receive notification after which the auth config becomes invalid. Support up to 30 days. Support granularity in hours. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
    overrideValidTime String
    User provided expiry time to override. For the example of Salesforce, username/password credentials can be valid for 6 months depending on the instance settings. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    visibility String
    The visibility of the auth config. Possible values are: PRIVATE, CLIENT_VISIBLE.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the AuthConfig resource produces the following output properties:

    CertificateId string
    Certificate id for client certificate.
    CreateTime string
    The timestamp when the auth config is created. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    CreatorEmail string
    The creator's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
    CredentialType string
    Credential type of the encrypted credential.
    EncryptedCredential string
    Auth credential encrypted by Cloud KMS. Can be decrypted as Credential with proper KMS key. A base64-encoded string.
    Id string
    The provider-assigned unique ID for this managed resource.
    LastModifierEmail string
    The last modifier's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
    Name string
    Resource name of the auth config.
    Reason string
    The reason / details of the current status.
    State string
    The status of the auth config.
    UpdateTime string
    The timestamp when the auth config is modified. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    ValidTime string
    The time until the auth config is valid. Empty or max value is considered the auth config won't expire. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    CertificateId string
    Certificate id for client certificate.
    CreateTime string
    The timestamp when the auth config is created. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    CreatorEmail string
    The creator's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
    CredentialType string
    Credential type of the encrypted credential.
    EncryptedCredential string
    Auth credential encrypted by Cloud KMS. Can be decrypted as Credential with proper KMS key. A base64-encoded string.
    Id string
    The provider-assigned unique ID for this managed resource.
    LastModifierEmail string
    The last modifier's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
    Name string
    Resource name of the auth config.
    Reason string
    The reason / details of the current status.
    State string
    The status of the auth config.
    UpdateTime string
    The timestamp when the auth config is modified. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    ValidTime string
    The time until the auth config is valid. Empty or max value is considered the auth config won't expire. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    certificateId String
    Certificate id for client certificate.
    createTime String
    The timestamp when the auth config is created. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    creatorEmail String
    The creator's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
    credentialType String
    Credential type of the encrypted credential.
    encryptedCredential String
    Auth credential encrypted by Cloud KMS. Can be decrypted as Credential with proper KMS key. A base64-encoded string.
    id String
    The provider-assigned unique ID for this managed resource.
    lastModifierEmail String
    The last modifier's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
    name String
    Resource name of the auth config.
    reason String
    The reason / details of the current status.
    state String
    The status of the auth config.
    updateTime String
    The timestamp when the auth config is modified. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    validTime String
    The time until the auth config is valid. Empty or max value is considered the auth config won't expire. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    certificateId string
    Certificate id for client certificate.
    createTime string
    The timestamp when the auth config is created. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    creatorEmail string
    The creator's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
    credentialType string
    Credential type of the encrypted credential.
    encryptedCredential string
    Auth credential encrypted by Cloud KMS. Can be decrypted as Credential with proper KMS key. A base64-encoded string.
    id string
    The provider-assigned unique ID for this managed resource.
    lastModifierEmail string
    The last modifier's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
    name string
    Resource name of the auth config.
    reason string
    The reason / details of the current status.
    state string
    The status of the auth config.
    updateTime string
    The timestamp when the auth config is modified. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    validTime string
    The time until the auth config is valid. Empty or max value is considered the auth config won't expire. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    certificate_id str
    Certificate id for client certificate.
    create_time str
    The timestamp when the auth config is created. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    creator_email str
    The creator's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
    credential_type str
    Credential type of the encrypted credential.
    encrypted_credential str
    Auth credential encrypted by Cloud KMS. Can be decrypted as Credential with proper KMS key. A base64-encoded string.
    id str
    The provider-assigned unique ID for this managed resource.
    last_modifier_email str
    The last modifier's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
    name str
    Resource name of the auth config.
    reason str
    The reason / details of the current status.
    state str
    The status of the auth config.
    update_time str
    The timestamp when the auth config is modified. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    valid_time str
    The time until the auth config is valid. Empty or max value is considered the auth config won't expire. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    certificateId String
    Certificate id for client certificate.
    createTime String
    The timestamp when the auth config is created. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    creatorEmail String
    The creator's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
    credentialType String
    Credential type of the encrypted credential.
    encryptedCredential String
    Auth credential encrypted by Cloud KMS. Can be decrypted as Credential with proper KMS key. A base64-encoded string.
    id String
    The provider-assigned unique ID for this managed resource.
    lastModifierEmail String
    The last modifier's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
    name String
    Resource name of the auth config.
    reason String
    The reason / details of the current status.
    state String
    The status of the auth config.
    updateTime String
    The timestamp when the auth config is modified. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    validTime String
    The time until the auth config is valid. Empty or max value is considered the auth config won't expire. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".

    Look up Existing AuthConfig Resource

    Get an existing AuthConfig resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: AuthConfigState, opts?: CustomResourceOptions): AuthConfig
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        certificate_id: Optional[str] = None,
        client_certificate: Optional[AuthConfigClientCertificateArgs] = None,
        create_time: Optional[str] = None,
        creator_email: Optional[str] = None,
        credential_type: Optional[str] = None,
        decrypted_credential: Optional[AuthConfigDecryptedCredentialArgs] = None,
        description: Optional[str] = None,
        display_name: Optional[str] = None,
        encrypted_credential: Optional[str] = None,
        expiry_notification_durations: Optional[Sequence[str]] = None,
        last_modifier_email: Optional[str] = None,
        location: Optional[str] = None,
        name: Optional[str] = None,
        override_valid_time: Optional[str] = None,
        project: Optional[str] = None,
        reason: Optional[str] = None,
        state: Optional[str] = None,
        update_time: Optional[str] = None,
        valid_time: Optional[str] = None,
        visibility: Optional[str] = None) -> AuthConfig
    func GetAuthConfig(ctx *Context, name string, id IDInput, state *AuthConfigState, opts ...ResourceOption) (*AuthConfig, error)
    public static AuthConfig Get(string name, Input<string> id, AuthConfigState? state, CustomResourceOptions? opts = null)
    public static AuthConfig get(String name, Output<String> id, AuthConfigState state, CustomResourceOptions options)
    resources:  _:    type: gcp:applicationintegration:AuthConfig    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    CertificateId string
    Certificate id for client certificate.
    ClientCertificate AuthConfigClientCertificate
    Raw client certificate Structure is documented below.
    CreateTime string
    The timestamp when the auth config is created. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    CreatorEmail string
    The creator's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
    CredentialType string
    Credential type of the encrypted credential.
    DecryptedCredential AuthConfigDecryptedCredential
    Raw auth credentials. Structure is documented below.
    Description string
    A description of the auth config.
    DisplayName string
    The name of the auth config.
    EncryptedCredential string
    Auth credential encrypted by Cloud KMS. Can be decrypted as Credential with proper KMS key. A base64-encoded string.
    ExpiryNotificationDurations List<string>
    User can define the time to receive notification after which the auth config becomes invalid. Support up to 30 days. Support granularity in hours. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
    LastModifierEmail string
    The last modifier's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
    Location string
    Location in which client needs to be provisioned.

    Name string
    Resource name of the auth config.
    OverrideValidTime string
    User provided expiry time to override. For the example of Salesforce, username/password credentials can be valid for 6 months depending on the instance settings. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    Reason string
    The reason / details of the current status.
    State string
    The status of the auth config.
    UpdateTime string
    The timestamp when the auth config is modified. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    ValidTime string
    The time until the auth config is valid. Empty or max value is considered the auth config won't expire. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    Visibility string
    The visibility of the auth config. Possible values are: PRIVATE, CLIENT_VISIBLE.
    CertificateId string
    Certificate id for client certificate.
    ClientCertificate AuthConfigClientCertificateArgs
    Raw client certificate Structure is documented below.
    CreateTime string
    The timestamp when the auth config is created. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    CreatorEmail string
    The creator's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
    CredentialType string
    Credential type of the encrypted credential.
    DecryptedCredential AuthConfigDecryptedCredentialArgs
    Raw auth credentials. Structure is documented below.
    Description string
    A description of the auth config.
    DisplayName string
    The name of the auth config.
    EncryptedCredential string
    Auth credential encrypted by Cloud KMS. Can be decrypted as Credential with proper KMS key. A base64-encoded string.
    ExpiryNotificationDurations []string
    User can define the time to receive notification after which the auth config becomes invalid. Support up to 30 days. Support granularity in hours. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
    LastModifierEmail string
    The last modifier's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
    Location string
    Location in which client needs to be provisioned.

    Name string
    Resource name of the auth config.
    OverrideValidTime string
    User provided expiry time to override. For the example of Salesforce, username/password credentials can be valid for 6 months depending on the instance settings. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    Reason string
    The reason / details of the current status.
    State string
    The status of the auth config.
    UpdateTime string
    The timestamp when the auth config is modified. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    ValidTime string
    The time until the auth config is valid. Empty or max value is considered the auth config won't expire. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    Visibility string
    The visibility of the auth config. Possible values are: PRIVATE, CLIENT_VISIBLE.
    certificateId String
    Certificate id for client certificate.
    clientCertificate AuthConfigClientCertificate
    Raw client certificate Structure is documented below.
    createTime String
    The timestamp when the auth config is created. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    creatorEmail String
    The creator's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
    credentialType String
    Credential type of the encrypted credential.
    decryptedCredential AuthConfigDecryptedCredential
    Raw auth credentials. Structure is documented below.
    description String
    A description of the auth config.
    displayName String
    The name of the auth config.
    encryptedCredential String
    Auth credential encrypted by Cloud KMS. Can be decrypted as Credential with proper KMS key. A base64-encoded string.
    expiryNotificationDurations List<String>
    User can define the time to receive notification after which the auth config becomes invalid. Support up to 30 days. Support granularity in hours. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
    lastModifierEmail String
    The last modifier's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
    location String
    Location in which client needs to be provisioned.

    name String
    Resource name of the auth config.
    overrideValidTime String
    User provided expiry time to override. For the example of Salesforce, username/password credentials can be valid for 6 months depending on the instance settings. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    reason String
    The reason / details of the current status.
    state String
    The status of the auth config.
    updateTime String
    The timestamp when the auth config is modified. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    validTime String
    The time until the auth config is valid. Empty or max value is considered the auth config won't expire. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    visibility String
    The visibility of the auth config. Possible values are: PRIVATE, CLIENT_VISIBLE.
    certificateId string
    Certificate id for client certificate.
    clientCertificate AuthConfigClientCertificate
    Raw client certificate Structure is documented below.
    createTime string
    The timestamp when the auth config is created. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    creatorEmail string
    The creator's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
    credentialType string
    Credential type of the encrypted credential.
    decryptedCredential AuthConfigDecryptedCredential
    Raw auth credentials. Structure is documented below.
    description string
    A description of the auth config.
    displayName string
    The name of the auth config.
    encryptedCredential string
    Auth credential encrypted by Cloud KMS. Can be decrypted as Credential with proper KMS key. A base64-encoded string.
    expiryNotificationDurations string[]
    User can define the time to receive notification after which the auth config becomes invalid. Support up to 30 days. Support granularity in hours. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
    lastModifierEmail string
    The last modifier's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
    location string
    Location in which client needs to be provisioned.

    name string
    Resource name of the auth config.
    overrideValidTime string
    User provided expiry time to override. For the example of Salesforce, username/password credentials can be valid for 6 months depending on the instance settings. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    reason string
    The reason / details of the current status.
    state string
    The status of the auth config.
    updateTime string
    The timestamp when the auth config is modified. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    validTime string
    The time until the auth config is valid. Empty or max value is considered the auth config won't expire. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    visibility string
    The visibility of the auth config. Possible values are: PRIVATE, CLIENT_VISIBLE.
    certificate_id str
    Certificate id for client certificate.
    client_certificate AuthConfigClientCertificateArgs
    Raw client certificate Structure is documented below.
    create_time str
    The timestamp when the auth config is created. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    creator_email str
    The creator's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
    credential_type str
    Credential type of the encrypted credential.
    decrypted_credential AuthConfigDecryptedCredentialArgs
    Raw auth credentials. Structure is documented below.
    description str
    A description of the auth config.
    display_name str
    The name of the auth config.
    encrypted_credential str
    Auth credential encrypted by Cloud KMS. Can be decrypted as Credential with proper KMS key. A base64-encoded string.
    expiry_notification_durations Sequence[str]
    User can define the time to receive notification after which the auth config becomes invalid. Support up to 30 days. Support granularity in hours. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
    last_modifier_email str
    The last modifier's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
    location str
    Location in which client needs to be provisioned.

    name str
    Resource name of the auth config.
    override_valid_time str
    User provided expiry time to override. For the example of Salesforce, username/password credentials can be valid for 6 months depending on the instance settings. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    project str
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    reason str
    The reason / details of the current status.
    state str
    The status of the auth config.
    update_time str
    The timestamp when the auth config is modified. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    valid_time str
    The time until the auth config is valid. Empty or max value is considered the auth config won't expire. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    visibility str
    The visibility of the auth config. Possible values are: PRIVATE, CLIENT_VISIBLE.
    certificateId String
    Certificate id for client certificate.
    clientCertificate Property Map
    Raw client certificate Structure is documented below.
    createTime String
    The timestamp when the auth config is created. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    creatorEmail String
    The creator's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
    credentialType String
    Credential type of the encrypted credential.
    decryptedCredential Property Map
    Raw auth credentials. Structure is documented below.
    description String
    A description of the auth config.
    displayName String
    The name of the auth config.
    encryptedCredential String
    Auth credential encrypted by Cloud KMS. Can be decrypted as Credential with proper KMS key. A base64-encoded string.
    expiryNotificationDurations List<String>
    User can define the time to receive notification after which the auth config becomes invalid. Support up to 30 days. Support granularity in hours. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
    lastModifierEmail String
    The last modifier's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
    location String
    Location in which client needs to be provisioned.

    name String
    Resource name of the auth config.
    overrideValidTime String
    User provided expiry time to override. For the example of Salesforce, username/password credentials can be valid for 6 months depending on the instance settings. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    reason String
    The reason / details of the current status.
    state String
    The status of the auth config.
    updateTime String
    The timestamp when the auth config is modified. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    validTime String
    The time until the auth config is valid. Empty or max value is considered the auth config won't expire. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    visibility String
    The visibility of the auth config. Possible values are: PRIVATE, CLIENT_VISIBLE.

    Supporting Types

    AuthConfigClientCertificate, AuthConfigClientCertificateArgs

    EncryptedPrivateKey string
    The ssl certificate encoded in PEM format. This string must include the begin header and end footer lines.
    SslCertificate string
    The ssl certificate encoded in PEM format. This string must include the begin header and end footer lines.
    Passphrase string
    'passphrase' should be left unset if private key is not encrypted. Note that 'passphrase' is not the password for web server, but an extra layer of security to protected private key.
    EncryptedPrivateKey string
    The ssl certificate encoded in PEM format. This string must include the begin header and end footer lines.
    SslCertificate string
    The ssl certificate encoded in PEM format. This string must include the begin header and end footer lines.
    Passphrase string
    'passphrase' should be left unset if private key is not encrypted. Note that 'passphrase' is not the password for web server, but an extra layer of security to protected private key.
    encryptedPrivateKey String
    The ssl certificate encoded in PEM format. This string must include the begin header and end footer lines.
    sslCertificate String
    The ssl certificate encoded in PEM format. This string must include the begin header and end footer lines.
    passphrase String
    'passphrase' should be left unset if private key is not encrypted. Note that 'passphrase' is not the password for web server, but an extra layer of security to protected private key.
    encryptedPrivateKey string
    The ssl certificate encoded in PEM format. This string must include the begin header and end footer lines.
    sslCertificate string
    The ssl certificate encoded in PEM format. This string must include the begin header and end footer lines.
    passphrase string
    'passphrase' should be left unset if private key is not encrypted. Note that 'passphrase' is not the password for web server, but an extra layer of security to protected private key.
    encrypted_private_key str
    The ssl certificate encoded in PEM format. This string must include the begin header and end footer lines.
    ssl_certificate str
    The ssl certificate encoded in PEM format. This string must include the begin header and end footer lines.
    passphrase str
    'passphrase' should be left unset if private key is not encrypted. Note that 'passphrase' is not the password for web server, but an extra layer of security to protected private key.
    encryptedPrivateKey String
    The ssl certificate encoded in PEM format. This string must include the begin header and end footer lines.
    sslCertificate String
    The ssl certificate encoded in PEM format. This string must include the begin header and end footer lines.
    passphrase String
    'passphrase' should be left unset if private key is not encrypted. Note that 'passphrase' is not the password for web server, but an extra layer of security to protected private key.

    AuthConfigDecryptedCredential, AuthConfigDecryptedCredentialArgs

    CredentialType string
    Credential type associated with auth configs.
    AuthToken AuthConfigDecryptedCredentialAuthToken
    Auth token credential. Structure is documented below.
    Jwt AuthConfigDecryptedCredentialJwt
    JWT credential. Structure is documented below.
    Oauth2AuthorizationCode AuthConfigDecryptedCredentialOauth2AuthorizationCode
    OAuth2 authorization code credential. Structure is documented below.
    Oauth2ClientCredentials AuthConfigDecryptedCredentialOauth2ClientCredentials
    OAuth2 client credentials. Structure is documented below.
    OidcToken AuthConfigDecryptedCredentialOidcToken
    Google OIDC ID Token. Structure is documented below.
    ServiceAccountCredentials AuthConfigDecryptedCredentialServiceAccountCredentials
    Service account credential. Structure is documented below.
    UsernameAndPassword AuthConfigDecryptedCredentialUsernameAndPassword
    Username and password credential. Structure is documented below.
    CredentialType string
    Credential type associated with auth configs.
    AuthToken AuthConfigDecryptedCredentialAuthToken
    Auth token credential. Structure is documented below.
    Jwt AuthConfigDecryptedCredentialJwt
    JWT credential. Structure is documented below.
    Oauth2AuthorizationCode AuthConfigDecryptedCredentialOauth2AuthorizationCode
    OAuth2 authorization code credential. Structure is documented below.
    Oauth2ClientCredentials AuthConfigDecryptedCredentialOauth2ClientCredentials
    OAuth2 client credentials. Structure is documented below.
    OidcToken AuthConfigDecryptedCredentialOidcToken
    Google OIDC ID Token. Structure is documented below.
    ServiceAccountCredentials AuthConfigDecryptedCredentialServiceAccountCredentials
    Service account credential. Structure is documented below.
    UsernameAndPassword AuthConfigDecryptedCredentialUsernameAndPassword
    Username and password credential. Structure is documented below.
    credentialType String
    Credential type associated with auth configs.
    authToken AuthConfigDecryptedCredentialAuthToken
    Auth token credential. Structure is documented below.
    jwt AuthConfigDecryptedCredentialJwt
    JWT credential. Structure is documented below.
    oauth2AuthorizationCode AuthConfigDecryptedCredentialOauth2AuthorizationCode
    OAuth2 authorization code credential. Structure is documented below.
    oauth2ClientCredentials AuthConfigDecryptedCredentialOauth2ClientCredentials
    OAuth2 client credentials. Structure is documented below.
    oidcToken AuthConfigDecryptedCredentialOidcToken
    Google OIDC ID Token. Structure is documented below.
    serviceAccountCredentials AuthConfigDecryptedCredentialServiceAccountCredentials
    Service account credential. Structure is documented below.
    usernameAndPassword AuthConfigDecryptedCredentialUsernameAndPassword
    Username and password credential. Structure is documented below.
    credentialType string
    Credential type associated with auth configs.
    authToken AuthConfigDecryptedCredentialAuthToken
    Auth token credential. Structure is documented below.
    jwt AuthConfigDecryptedCredentialJwt
    JWT credential. Structure is documented below.
    oauth2AuthorizationCode AuthConfigDecryptedCredentialOauth2AuthorizationCode
    OAuth2 authorization code credential. Structure is documented below.
    oauth2ClientCredentials AuthConfigDecryptedCredentialOauth2ClientCredentials
    OAuth2 client credentials. Structure is documented below.
    oidcToken AuthConfigDecryptedCredentialOidcToken
    Google OIDC ID Token. Structure is documented below.
    serviceAccountCredentials AuthConfigDecryptedCredentialServiceAccountCredentials
    Service account credential. Structure is documented below.
    usernameAndPassword AuthConfigDecryptedCredentialUsernameAndPassword
    Username and password credential. Structure is documented below.
    credential_type str
    Credential type associated with auth configs.
    auth_token AuthConfigDecryptedCredentialAuthToken
    Auth token credential. Structure is documented below.
    jwt AuthConfigDecryptedCredentialJwt
    JWT credential. Structure is documented below.
    oauth2_authorization_code AuthConfigDecryptedCredentialOauth2AuthorizationCode
    OAuth2 authorization code credential. Structure is documented below.
    oauth2_client_credentials AuthConfigDecryptedCredentialOauth2ClientCredentials
    OAuth2 client credentials. Structure is documented below.
    oidc_token AuthConfigDecryptedCredentialOidcToken
    Google OIDC ID Token. Structure is documented below.
    service_account_credentials AuthConfigDecryptedCredentialServiceAccountCredentials
    Service account credential. Structure is documented below.
    username_and_password AuthConfigDecryptedCredentialUsernameAndPassword
    Username and password credential. Structure is documented below.
    credentialType String
    Credential type associated with auth configs.
    authToken Property Map
    Auth token credential. Structure is documented below.
    jwt Property Map
    JWT credential. Structure is documented below.
    oauth2AuthorizationCode Property Map
    OAuth2 authorization code credential. Structure is documented below.
    oauth2ClientCredentials Property Map
    OAuth2 client credentials. Structure is documented below.
    oidcToken Property Map
    Google OIDC ID Token. Structure is documented below.
    serviceAccountCredentials Property Map
    Service account credential. Structure is documented below.
    usernameAndPassword Property Map
    Username and password credential. Structure is documented below.

    AuthConfigDecryptedCredentialAuthToken, AuthConfigDecryptedCredentialAuthTokenArgs

    Token string
    The token for the auth type.
    Type string
    Authentication type, e.g. "Basic", "Bearer", etc.
    Token string
    The token for the auth type.
    Type string
    Authentication type, e.g. "Basic", "Bearer", etc.
    token String
    The token for the auth type.
    type String
    Authentication type, e.g. "Basic", "Bearer", etc.
    token string
    The token for the auth type.
    type string
    Authentication type, e.g. "Basic", "Bearer", etc.
    token str
    The token for the auth type.
    type str
    Authentication type, e.g. "Basic", "Bearer", etc.
    token String
    The token for the auth type.
    type String
    Authentication type, e.g. "Basic", "Bearer", etc.

    AuthConfigDecryptedCredentialJwt, AuthConfigDecryptedCredentialJwtArgs

    Jwt string
    (Output) The token calculated by the header, payload and signature.
    JwtHeader string
    Identifies which algorithm is used to generate the signature.
    JwtPayload string
    Contains a set of claims. The JWT specification defines seven Registered Claim Names which are the standard fields commonly included in tokens. Custom claims are usually also included, depending on the purpose of the token.
    Secret string
    User's pre-shared secret to sign the token.
    Jwt string
    (Output) The token calculated by the header, payload and signature.
    JwtHeader string
    Identifies which algorithm is used to generate the signature.
    JwtPayload string
    Contains a set of claims. The JWT specification defines seven Registered Claim Names which are the standard fields commonly included in tokens. Custom claims are usually also included, depending on the purpose of the token.
    Secret string
    User's pre-shared secret to sign the token.
    jwt String
    (Output) The token calculated by the header, payload and signature.
    jwtHeader String
    Identifies which algorithm is used to generate the signature.
    jwtPayload String
    Contains a set of claims. The JWT specification defines seven Registered Claim Names which are the standard fields commonly included in tokens. Custom claims are usually also included, depending on the purpose of the token.
    secret String
    User's pre-shared secret to sign the token.
    jwt string
    (Output) The token calculated by the header, payload and signature.
    jwtHeader string
    Identifies which algorithm is used to generate the signature.
    jwtPayload string
    Contains a set of claims. The JWT specification defines seven Registered Claim Names which are the standard fields commonly included in tokens. Custom claims are usually also included, depending on the purpose of the token.
    secret string
    User's pre-shared secret to sign the token.
    jwt str
    (Output) The token calculated by the header, payload and signature.
    jwt_header str
    Identifies which algorithm is used to generate the signature.
    jwt_payload str
    Contains a set of claims. The JWT specification defines seven Registered Claim Names which are the standard fields commonly included in tokens. Custom claims are usually also included, depending on the purpose of the token.
    secret str
    User's pre-shared secret to sign the token.
    jwt String
    (Output) The token calculated by the header, payload and signature.
    jwtHeader String
    Identifies which algorithm is used to generate the signature.
    jwtPayload String
    Contains a set of claims. The JWT specification defines seven Registered Claim Names which are the standard fields commonly included in tokens. Custom claims are usually also included, depending on the purpose of the token.
    secret String
    User's pre-shared secret to sign the token.

    AuthConfigDecryptedCredentialOauth2AuthorizationCode, AuthConfigDecryptedCredentialOauth2AuthorizationCodeArgs

    AuthEndpoint string
    The auth url endpoint to send the auth code request to.
    ClientId string
    The client's id.
    ClientSecret string
    The client's secret.
    Scope string
    A space-delimited list of requested scope permissions.
    TokenEndpoint string
    The token url endpoint to send the token request to.
    AuthEndpoint string
    The auth url endpoint to send the auth code request to.
    ClientId string
    The client's id.
    ClientSecret string
    The client's secret.
    Scope string
    A space-delimited list of requested scope permissions.
    TokenEndpoint string
    The token url endpoint to send the token request to.
    authEndpoint String
    The auth url endpoint to send the auth code request to.
    clientId String
    The client's id.
    clientSecret String
    The client's secret.
    scope String
    A space-delimited list of requested scope permissions.
    tokenEndpoint String
    The token url endpoint to send the token request to.
    authEndpoint string
    The auth url endpoint to send the auth code request to.
    clientId string
    The client's id.
    clientSecret string
    The client's secret.
    scope string
    A space-delimited list of requested scope permissions.
    tokenEndpoint string
    The token url endpoint to send the token request to.
    auth_endpoint str
    The auth url endpoint to send the auth code request to.
    client_id str
    The client's id.
    client_secret str
    The client's secret.
    scope str
    A space-delimited list of requested scope permissions.
    token_endpoint str
    The token url endpoint to send the token request to.
    authEndpoint String
    The auth url endpoint to send the auth code request to.
    clientId String
    The client's id.
    clientSecret String
    The client's secret.
    scope String
    A space-delimited list of requested scope permissions.
    tokenEndpoint String
    The token url endpoint to send the token request to.

    AuthConfigDecryptedCredentialOauth2ClientCredentials, AuthConfigDecryptedCredentialOauth2ClientCredentialsArgs

    ClientId string
    The client's ID.
    ClientSecret string
    The client's secret.
    RequestType string
    Represent how to pass parameters to fetch access token Possible values: ["REQUEST_TYPE_UNSPECIFIED", "REQUEST_BODY", "QUERY_PARAMETERS", "ENCODED_HEADER"]
    Scope string
    A space-delimited list of requested scope permissions.
    TokenEndpoint string
    The token endpoint is used by the client to obtain an access token by presenting its authorization grant or refresh token.
    TokenParams AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParams
    Token parameters for the auth request.
    ClientId string
    The client's ID.
    ClientSecret string
    The client's secret.
    RequestType string
    Represent how to pass parameters to fetch access token Possible values: ["REQUEST_TYPE_UNSPECIFIED", "REQUEST_BODY", "QUERY_PARAMETERS", "ENCODED_HEADER"]
    Scope string
    A space-delimited list of requested scope permissions.
    TokenEndpoint string
    The token endpoint is used by the client to obtain an access token by presenting its authorization grant or refresh token.
    TokenParams AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParams
    Token parameters for the auth request.
    clientId String
    The client's ID.
    clientSecret String
    The client's secret.
    requestType String
    Represent how to pass parameters to fetch access token Possible values: ["REQUEST_TYPE_UNSPECIFIED", "REQUEST_BODY", "QUERY_PARAMETERS", "ENCODED_HEADER"]
    scope String
    A space-delimited list of requested scope permissions.
    tokenEndpoint String
    The token endpoint is used by the client to obtain an access token by presenting its authorization grant or refresh token.
    tokenParams AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParams
    Token parameters for the auth request.
    clientId string
    The client's ID.
    clientSecret string
    The client's secret.
    requestType string
    Represent how to pass parameters to fetch access token Possible values: ["REQUEST_TYPE_UNSPECIFIED", "REQUEST_BODY", "QUERY_PARAMETERS", "ENCODED_HEADER"]
    scope string
    A space-delimited list of requested scope permissions.
    tokenEndpoint string
    The token endpoint is used by the client to obtain an access token by presenting its authorization grant or refresh token.
    tokenParams AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParams
    Token parameters for the auth request.
    client_id str
    The client's ID.
    client_secret str
    The client's secret.
    request_type str
    Represent how to pass parameters to fetch access token Possible values: ["REQUEST_TYPE_UNSPECIFIED", "REQUEST_BODY", "QUERY_PARAMETERS", "ENCODED_HEADER"]
    scope str
    A space-delimited list of requested scope permissions.
    token_endpoint str
    The token endpoint is used by the client to obtain an access token by presenting its authorization grant or refresh token.
    token_params AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParams
    Token parameters for the auth request.
    clientId String
    The client's ID.
    clientSecret String
    The client's secret.
    requestType String
    Represent how to pass parameters to fetch access token Possible values: ["REQUEST_TYPE_UNSPECIFIED", "REQUEST_BODY", "QUERY_PARAMETERS", "ENCODED_HEADER"]
    scope String
    A space-delimited list of requested scope permissions.
    tokenEndpoint String
    The token endpoint is used by the client to obtain an access token by presenting its authorization grant or refresh token.
    tokenParams Property Map
    Token parameters for the auth request.

    AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParams, AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsArgs

    Entries List<AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntry>
    A list of parameter map entries. Structure is documented below.
    Entries []AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntry
    A list of parameter map entries. Structure is documented below.
    entries List<AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntry>
    A list of parameter map entries. Structure is documented below.
    entries AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntry[]
    A list of parameter map entries. Structure is documented below.
    entries Sequence[AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntry]
    A list of parameter map entries. Structure is documented below.
    entries List<Property Map>
    A list of parameter map entries. Structure is documented below.

    AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntry, AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryArgs

    Key AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKey
    Key of the map entry. Structure is documented below.
    Value AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValue
    Value of the map entry. Structure is documented below.
    Key AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKey
    Key of the map entry. Structure is documented below.
    Value AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValue
    Value of the map entry. Structure is documented below.
    key AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKey
    Key of the map entry. Structure is documented below.
    value AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValue
    Value of the map entry. Structure is documented below.
    key AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKey
    Key of the map entry. Structure is documented below.
    value AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValue
    Value of the map entry. Structure is documented below.
    key AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKey
    Key of the map entry. Structure is documented below.
    value AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValue
    Value of the map entry. Structure is documented below.
    key Property Map
    Key of the map entry. Structure is documented below.
    value Property Map
    Value of the map entry. Structure is documented below.

    AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKey, AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyArgs

    literalValue Property Map
    Passing a literal value Structure is documented below.

    AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyLiteralValue, AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyLiteralValueArgs

    StringValue string
    String.
    StringValue string
    String.
    stringValue String
    String.
    stringValue string
    String.
    string_value str
    String.
    stringValue String
    String.

    AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValue, AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueArgs

    literalValue Property Map
    Passing a literal value Structure is documented below.

    AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueLiteralValue, AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueLiteralValueArgs

    StringValue string
    String.
    StringValue string
    String.
    stringValue String
    String.
    stringValue string
    String.
    string_value str
    String.
    stringValue String
    String.

    AuthConfigDecryptedCredentialOidcToken, AuthConfigDecryptedCredentialOidcTokenArgs

    Audience string
    Audience to be used when generating OIDC token. The audience claim identifies the recipients that the JWT is intended for.
    ServiceAccountEmail string
    The service account email to be used as the identity for the token.
    Token string
    (Output) ID token obtained for the service account.
    TokenExpireTime string
    (Output) The approximate time until the token retrieved is valid. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    Audience string
    Audience to be used when generating OIDC token. The audience claim identifies the recipients that the JWT is intended for.
    ServiceAccountEmail string
    The service account email to be used as the identity for the token.
    Token string
    (Output) ID token obtained for the service account.
    TokenExpireTime string
    (Output) The approximate time until the token retrieved is valid. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    audience String
    Audience to be used when generating OIDC token. The audience claim identifies the recipients that the JWT is intended for.
    serviceAccountEmail String
    The service account email to be used as the identity for the token.
    token String
    (Output) ID token obtained for the service account.
    tokenExpireTime String
    (Output) The approximate time until the token retrieved is valid. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    audience string
    Audience to be used when generating OIDC token. The audience claim identifies the recipients that the JWT is intended for.
    serviceAccountEmail string
    The service account email to be used as the identity for the token.
    token string
    (Output) ID token obtained for the service account.
    tokenExpireTime string
    (Output) The approximate time until the token retrieved is valid. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    audience str
    Audience to be used when generating OIDC token. The audience claim identifies the recipients that the JWT is intended for.
    service_account_email str
    The service account email to be used as the identity for the token.
    token str
    (Output) ID token obtained for the service account.
    token_expire_time str
    (Output) The approximate time until the token retrieved is valid. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
    audience String
    Audience to be used when generating OIDC token. The audience claim identifies the recipients that the JWT is intended for.
    serviceAccountEmail String
    The service account email to be used as the identity for the token.
    token String
    (Output) ID token obtained for the service account.
    tokenExpireTime String
    (Output) The approximate time until the token retrieved is valid. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".

    AuthConfigDecryptedCredentialServiceAccountCredentials, AuthConfigDecryptedCredentialServiceAccountCredentialsArgs

    Scope string
    A space-delimited list of requested scope permissions.
    ServiceAccount string
    Name of the service account that has the permission to make the request.
    Scope string
    A space-delimited list of requested scope permissions.
    ServiceAccount string
    Name of the service account that has the permission to make the request.
    scope String
    A space-delimited list of requested scope permissions.
    serviceAccount String
    Name of the service account that has the permission to make the request.
    scope string
    A space-delimited list of requested scope permissions.
    serviceAccount string
    Name of the service account that has the permission to make the request.
    scope str
    A space-delimited list of requested scope permissions.
    service_account str
    Name of the service account that has the permission to make the request.
    scope String
    A space-delimited list of requested scope permissions.
    serviceAccount String
    Name of the service account that has the permission to make the request.

    AuthConfigDecryptedCredentialUsernameAndPassword, AuthConfigDecryptedCredentialUsernameAndPasswordArgs

    Password string

    Password to be used.

    The oauth2_authorization_code block supports:

    Username string
    Username to be used.
    Password string

    Password to be used.

    The oauth2_authorization_code block supports:

    Username string
    Username to be used.
    password String

    Password to be used.

    The oauth2_authorization_code block supports:

    username String
    Username to be used.
    password string

    Password to be used.

    The oauth2_authorization_code block supports:

    username string
    Username to be used.
    password str

    Password to be used.

    The oauth2_authorization_code block supports:

    username str
    Username to be used.
    password String

    Password to be used.

    The oauth2_authorization_code block supports:

    username String
    Username to be used.

    Import

    AuthConfig can be imported using any of these accepted formats:

    • {{project}}/{{name}}

    • {{project}} {{name}}

    • {{name}}

    When using the pulumi import command, AuthConfig can be imported using one of the formats above. For example:

    $ pulumi import gcp:applicationintegration/authConfig:AuthConfig default {{project}}/{{name}}

    $ pulumi import gcp:applicationintegration/authConfig:AuthConfig default "{{project}} {{name}}"

    $ pulumi import gcp:applicationintegration/authConfig:AuthConfig default {{name}}

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Google Cloud (GCP) Classic pulumi/pulumi-gcp
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the google-beta Terraform Provider.
    gcp logo
    Google Cloud v8.21.0 published on Wednesday, Mar 5, 2025 by Pulumi
    pulumi/pulumi-gcp