import * as pulumi from "@pulumi/pulumi"; /** * Enables access control for an Aiven for OpenSearch® service. * * By default, service users are granted full access rights. To limit their access, you can enable access control and create ACLs * that define permissions and patterns. Alternatively, you can enable OpenSearch Security management * to manage users and permissions with the OpenSearch Security dashboard. * * ## Example Usage * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as aiven from "@pulumi/aiven"; * * const main = new aiven.OpenSearchAclConfig("main", { * project: exampleProject.project, * serviceName: exampleOpensearch.serviceName, * enabled: true, * extendedAcl: false, * }); * ``` * * ## Import * * ```sh * $ pulumi import aiven:index/openSearchAclConfig:OpenSearchAclConfig main PROJECT/SERVICE_NAME * ``` */ export declare class OpenSearchAclConfig extends pulumi.CustomResource { /** * Get an existing OpenSearchAclConfig resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: OpenSearchAclConfigState, opts?: pulumi.CustomResourceOptions): OpenSearchAclConfig; /** * Returns true if the given object is an instance of OpenSearchAclConfig. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is OpenSearchAclConfig; /** * Enable OpenSearch ACLs. When disabled, authenticated service users have unrestricted access. The default value is `true`. */ readonly enabled: pulumi.Output; /** * Index rules can be applied in a limited fashion to the _mget, _msearch and _bulk APIs (and only those) by enabling the ExtendedAcl option for the service. When it is enabled, users can use these APIs as long as all operations only target indexes they have been granted access to. The default value is `true`. */ readonly extendedAcl: pulumi.Output; /** * The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource. */ readonly project: pulumi.Output; /** * The name of the service that this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource. */ readonly serviceName: pulumi.Output; /** * Create a OpenSearchAclConfig resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: OpenSearchAclConfigArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering OpenSearchAclConfig resources. */ export interface OpenSearchAclConfigState { /** * Enable OpenSearch ACLs. When disabled, authenticated service users have unrestricted access. The default value is `true`. */ enabled?: pulumi.Input; /** * Index rules can be applied in a limited fashion to the _mget, _msearch and _bulk APIs (and only those) by enabling the ExtendedAcl option for the service. When it is enabled, users can use these APIs as long as all operations only target indexes they have been granted access to. The default value is `true`. */ extendedAcl?: pulumi.Input; /** * The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource. */ project?: pulumi.Input; /** * The name of the service that this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource. */ serviceName?: pulumi.Input; } /** * The set of arguments for constructing a OpenSearchAclConfig resource. */ export interface OpenSearchAclConfigArgs { /** * Enable OpenSearch ACLs. When disabled, authenticated service users have unrestricted access. The default value is `true`. */ enabled?: pulumi.Input; /** * Index rules can be applied in a limited fashion to the _mget, _msearch and _bulk APIs (and only those) by enabling the ExtendedAcl option for the service. When it is enabled, users can use these APIs as long as all operations only target indexes they have been granted access to. The default value is `true`. */ extendedAcl?: pulumi.Input; /** * The name of the project this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource. */ project: pulumi.Input; /** * The name of the service that this resource belongs to. To set up proper dependencies please refer to this variable as a reference. Changing this property forces recreation of the resource. */ serviceName: pulumi.Input; } //# sourceMappingURL=openSearchAclConfig.d.ts.map