import * as pulumi from "@pulumi/pulumi"; import * as inputs from "./types/input"; import * as outputs from "./types/output"; /** * Creates and manages an application user token. Review the [best practices](https://aiven.io/docs/platform/concepts/application-users#security-best-practices) for securing application users and their tokens. * * ## Example Usage * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as aiven from "@pulumi/aiven"; * * const example = new aiven.OrganizationApplicationUserToken("example", { * organizationId: "org1a23f456789", * userId: "foo", * description: "Integration client Alpha", * extendWhenUsed: false, * ipAllowlists: [ * "192.168.0.0/24", * "2001:db8::/32", * ], * maxAgeSeconds: 600, * scopes: ["user:read"], * }); * ``` * * ## Import * * ```sh * $ pulumi import aiven:index/organizationApplicationUserToken:OrganizationApplicationUserToken example ORGANIZATION_ID/USER_ID/TOKEN_PREFIX * ``` */ export declare class OrganizationApplicationUserToken extends pulumi.CustomResource { /** * Get an existing OrganizationApplicationUserToken resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: OrganizationApplicationUserTokenState, opts?: pulumi.CustomResourceOptions): OrganizationApplicationUserToken; /** * Returns true if the given object is an instance of OrganizationApplicationUserToken. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is OrganizationApplicationUserToken; /** * Create Time. */ readonly createTime: pulumi.Output; /** * True for tokens explicitly created via the accessTokens API, false for tokens created via login. */ readonly createdManually: pulumi.Output; /** * true if API request was made with this access token. */ readonly currentlyActive: pulumi.Output; /** * Description. Maximum length: `1000`. Changing this property forces recreation of the resource. */ readonly description: pulumi.Output; /** * Timestamp when the access token will expire unless extended, if ever. */ readonly expiryTime: pulumi.Output; /** * Extend token expiration time when token is used. Only applicable if max*age*seconds is specified. The default value is `false`. Changing this property forces recreation of the resource. */ readonly extendWhenUsed: pulumi.Output; /** * Full Token. */ readonly fullToken: pulumi.Output; /** * List of allowed IP ranges. Changing this property forces recreation of the resource. */ readonly ipAllowlists: pulumi.Output; /** * IP address the access token was last used from in case it has ever been used. */ readonly lastIp: pulumi.Output; /** * Timestamp when the access token was last used, if ever. */ readonly lastUsedTime: pulumi.Output; /** * User agent string of the client that last used the token in case it has ever been used. */ readonly lastUserAgent: pulumi.Output; /** * Human readable user agent string of the client that last used the token in case user agent is known. */ readonly lastUserAgentHumanReadable: pulumi.Output; /** * Time the token remains valid since creation (or since last use if extend*when*used is true). Value must be between `600` and `315360000`. Changing this property forces recreation of the resource. */ readonly maxAgeSeconds: pulumi.Output; /** * ID of an organization. Changing this property forces recreation of the resource. */ readonly organizationId: pulumi.Output; /** * Scopes this token is restricted to if specified. Changing this property forces recreation of the resource. */ readonly scopes: pulumi.Output; readonly timeouts: pulumi.Output; /** * First characters of the actual token value. Full value is only exposed after creation. This value is used when updating or revoking tokens. Note that the value may contain /, + and = characters and must be URL encoded when used (/ => %2F, + => %2B, = => %3D). */ readonly tokenPrefix: pulumi.Output; /** * User ID. Changing this property forces recreation of the resource. */ readonly userId: pulumi.Output; /** * Create a OrganizationApplicationUserToken resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: OrganizationApplicationUserTokenArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering OrganizationApplicationUserToken resources. */ export interface OrganizationApplicationUserTokenState { /** * Create Time. */ createTime?: pulumi.Input; /** * True for tokens explicitly created via the accessTokens API, false for tokens created via login. */ createdManually?: pulumi.Input; /** * true if API request was made with this access token. */ currentlyActive?: pulumi.Input; /** * Description. Maximum length: `1000`. Changing this property forces recreation of the resource. */ description?: pulumi.Input; /** * Timestamp when the access token will expire unless extended, if ever. */ expiryTime?: pulumi.Input; /** * Extend token expiration time when token is used. Only applicable if max*age*seconds is specified. The default value is `false`. Changing this property forces recreation of the resource. */ extendWhenUsed?: pulumi.Input; /** * Full Token. */ fullToken?: pulumi.Input; /** * List of allowed IP ranges. Changing this property forces recreation of the resource. */ ipAllowlists?: pulumi.Input[] | undefined>; /** * IP address the access token was last used from in case it has ever been used. */ lastIp?: pulumi.Input; /** * Timestamp when the access token was last used, if ever. */ lastUsedTime?: pulumi.Input; /** * User agent string of the client that last used the token in case it has ever been used. */ lastUserAgent?: pulumi.Input; /** * Human readable user agent string of the client that last used the token in case user agent is known. */ lastUserAgentHumanReadable?: pulumi.Input; /** * Time the token remains valid since creation (or since last use if extend*when*used is true). Value must be between `600` and `315360000`. Changing this property forces recreation of the resource. */ maxAgeSeconds?: pulumi.Input; /** * ID of an organization. Changing this property forces recreation of the resource. */ organizationId?: pulumi.Input; /** * Scopes this token is restricted to if specified. Changing this property forces recreation of the resource. */ scopes?: pulumi.Input[] | undefined>; timeouts?: pulumi.Input; /** * First characters of the actual token value. Full value is only exposed after creation. This value is used when updating or revoking tokens. Note that the value may contain /, + and = characters and must be URL encoded when used (/ => %2F, + => %2B, = => %3D). */ tokenPrefix?: pulumi.Input; /** * User ID. Changing this property forces recreation of the resource. */ userId?: pulumi.Input; } /** * The set of arguments for constructing a OrganizationApplicationUserToken resource. */ export interface OrganizationApplicationUserTokenArgs { /** * Description. Maximum length: `1000`. Changing this property forces recreation of the resource. */ description?: pulumi.Input; /** * Extend token expiration time when token is used. Only applicable if max*age*seconds is specified. The default value is `false`. Changing this property forces recreation of the resource. */ extendWhenUsed?: pulumi.Input; /** * List of allowed IP ranges. Changing this property forces recreation of the resource. */ ipAllowlists?: pulumi.Input[] | undefined>; /** * Time the token remains valid since creation (or since last use if extend*when*used is true). Value must be between `600` and `315360000`. Changing this property forces recreation of the resource. */ maxAgeSeconds?: pulumi.Input; /** * ID of an organization. Changing this property forces recreation of the resource. */ organizationId: pulumi.Input; /** * Scopes this token is restricted to if specified. Changing this property forces recreation of the resource. */ scopes?: pulumi.Input[] | undefined>; timeouts?: pulumi.Input; /** * User ID. Changing this property forces recreation of the resource. */ userId: pulumi.Input; } //# sourceMappingURL=organizationApplicationUserToken.d.ts.map