Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. AWS
  4. API Docs
  5. grafana
  6. WorkspaceSamlConfiguration
Viewing docs for AWS v7.53.0
published on Monday, Nov 2, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws

aws.grafana.WorkspaceSamlConfiguration

aws logo aws logo
Viewing docs for AWS v7.53.0
published on Monday, Nov 2, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws

    Provides an Amazon Managed Grafana workspace SAML configuration resource.

    Example Usage

    Basic configuration

    import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const assume = new aws.iam.Role("assume", {
    name: "grafana-assume",
    assumeRolePolicy: JSON.stringify({
        Version: "2012-10-17",
        Statement: [{
            Action: "sts:AssumeRole",
            Effect: "Allow",
            Sid: "",
            Principal: {
                Service: "grafana.amazonaws.com",
            },
        }],
    }),
});
const exampleWorkspace = new aws.grafana.Workspace("example", {
    accountAccessType: "CURRENT_ACCOUNT",
    authenticationProviders: ["SAML"],
    permissionType: "SERVICE_MANAGED",
    roleArn: assume.arn,
});
const example = new aws.grafana.WorkspaceSamlConfiguration("example", {
    editorRoleValues: ["editor"],
    idpMetadataUrl: "https://my_idp_metadata.url",
    workspaceId: exampleWorkspace.id,
});

    import pulumi
import json
import pulumi_aws as aws

assume = aws.iam.Role("assume",
    name="grafana-assume",
    assume_role_policy=json.dumps({
        "Version": "2012-10-17",
        "Statement": [{
            "Action": "sts:AssumeRole",
            "Effect": "Allow",
            "Sid": "",
            "Principal": {
                "Service": "grafana.amazonaws.com",
            },
        }],
    }))
example_workspace = aws.grafana.Workspace("example",
    account_access_type="CURRENT_ACCOUNT",
    authentication_providers=["SAML"],
    permission_type="SERVICE_MANAGED",
    role_arn=assume.arn)
example = aws.grafana.WorkspaceSamlConfiguration("example",
    editor_role_values=["editor"],
    idp_metadata_url="https://my_idp_metadata.url",
    workspace_id=example_workspace.id)

    package main

import (
	"encoding/json"

	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/grafana"
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/iam"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		tmpJSON0, err := json.Marshal(map[string]interface{}{
			"Version": "2012-10-17",
			"Statement": []map[string]interface{}{
				map[string]interface{}{
					"Action": "sts:AssumeRole",
					"Effect": "Allow",
					"Sid":    "",
					"Principal": map[string]string{
						"Service": "grafana.amazonaws.com",
					},
				},
			},
		})
		if err != nil {
			return err
		}
		json0 := string(tmpJSON0)
		assume, err := iam.NewRole(ctx, "assume", &iam.RoleArgs{
			Name:             pulumi.String("grafana-assume"),
			AssumeRolePolicy: pulumi.String(json0),
		})
		if err != nil {
			return err
		}
		exampleWorkspace, err := grafana.NewWorkspace(ctx, "example", &grafana.WorkspaceArgs{
			AccountAccessType: pulumi.String("CURRENT_ACCOUNT"),
			AuthenticationProviders: pulumi.StringArray{
				pulumi.String("SAML"),
			},
			PermissionType: pulumi.String("SERVICE_MANAGED"),
			RoleArn:        assume.Arn,
		})
		if err != nil {
			return err
		}
		_, err = grafana.NewWorkspaceSamlConfiguration(ctx, "example", &grafana.WorkspaceSamlConfigurationArgs{
			EditorRoleValues: pulumi.StringArray{
				pulumi.String("editor"),
			},
			IdpMetadataUrl: pulumi.String("https://my_idp_metadata.url"),
			WorkspaceId:    exampleWorkspace.ID(),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using System.Text.Json;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var assume = new Aws.Iam.Role("assume", new()
    {
        Name = "grafana-assume",
        AssumeRolePolicy = JsonSerializer.Serialize(new Dictionary<string, object?>
        {
            ["Version"] = "2012-10-17",
            ["Statement"] = new[]
            {
                new Dictionary<string, object?>
                {
                    ["Action"] = "sts:AssumeRole",
                    ["Effect"] = "Allow",
                    ["Sid"] = "",
                    ["Principal"] = new Dictionary<string, object?>
                    {
                        ["Service"] = "grafana.amazonaws.com",
                    },
                },
            },
        }),
    });

    var exampleWorkspace = new Aws.Grafana.Workspace("example", new()
    {
        AccountAccessType = "CURRENT_ACCOUNT",
        AuthenticationProviders = new[]
        {
            "SAML",
        },
        PermissionType = "SERVICE_MANAGED",
        RoleArn = assume.Arn,
    });

    var example = new Aws.Grafana.WorkspaceSamlConfiguration("example", new()
    {
        EditorRoleValues = new[]
        {
            "editor",
        },
        IdpMetadataUrl = "https://my_idp_metadata.url",
        WorkspaceId = exampleWorkspace.Id,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.iam.Role;
import com.pulumi.aws.iam.RoleArgs;
import com.pulumi.aws.grafana.Workspace;
import com.pulumi.aws.grafana.WorkspaceArgs;
import com.pulumi.aws.grafana.WorkspaceSamlConfiguration;
import com.pulumi.aws.grafana.WorkspaceSamlConfigurationArgs;
import static com.pulumi.codegen.internal.Serialization.*;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var assume = new Role("assume", RoleArgs.builder()
            .name("grafana-assume")
            .assumeRolePolicy(serializeJson(
                jsonObject(
                    jsonProperty("Version", "2012-10-17"),
                    jsonProperty("Statement", jsonArray(jsonObject(
                        jsonProperty("Action", "sts:AssumeRole"),
                        jsonProperty("Effect", "Allow"),
                        jsonProperty("Sid", ""),
                        jsonProperty("Principal", jsonObject(
                            jsonProperty("Service", "grafana.amazonaws.com")
                        ))
                    )))
                )))
            .build());

        var exampleWorkspace = new Workspace("exampleWorkspace", WorkspaceArgs.builder()
            .accountAccessType("CURRENT_ACCOUNT")
            .authenticationProviders("SAML")
            .permissionType("SERVICE_MANAGED")
            .roleArn(assume.arn())
            .build());

        var example = new WorkspaceSamlConfiguration("example", WorkspaceSamlConfigurationArgs.builder()
            .editorRoleValues("editor")
            .idpMetadataUrl("https://my_idp_metadata.url")
            .workspaceId(exampleWorkspace.id())
            .build());

    }
}

    resources:
  example:
    type: aws:grafana:WorkspaceSamlConfiguration
    properties:
      editorRoleValues:
        - editor
      idpMetadataUrl: https://my_idp_metadata.url
      workspaceId: ${exampleWorkspace.id}
  exampleWorkspace:
    type: aws:grafana:Workspace
    name: example
    properties:
      accountAccessType: CURRENT_ACCOUNT
      authenticationProviders:
        - SAML
      permissionType: SERVICE_MANAGED
      roleArn: ${assume.arn}
  assume:
    type: aws:iam:Role
    properties:
      name: grafana-assume
      assumeRolePolicy:
        fn::toJSON:
          Version: 2012-10-17
          Statement:
            - Action: sts:AssumeRole
              Effect: Allow
              Sid: ""
              Principal:
                Service: grafana.amazonaws.com

    terraform {
  required_providers {
    aws = {
      source = "pulumi/aws"
    }
  }
}

resource "aws_grafana_workspace_saml_configuration" "example" {
  lifecycle {
    create_before_destroy = true
  }
  editor_role_values = ["editor"]
  idp_metadata_url   = "https://my_idp_metadata.url"
  workspace_id       = aws_grafana_workspace.example.id
}
resource "aws_grafana_workspace" "example" {
  lifecycle {
    create_before_destroy = true
  }
  account_access_type      = "CURRENT_ACCOUNT"
  authentication_providers = ["SAML"]
  permission_type          = "SERVICE_MANAGED"
  role_arn                 = aws_iam_role.assume.arn
}
resource "aws_iam_role" "assume" {
  lifecycle {
    create_before_destroy = true
  }
  name = "grafana-assume"
  assume_role_policy = jsonencode({
    "Version" = "2012-10-17"
    "Statement" = [{
      "Action" = "sts:AssumeRole"
      "Effect" = "Allow"
      "Sid"    = ""
      "Principal" = {
        "Service" = "grafana.amazonaws.com"
      }
    }]
  })
}

    Create WorkspaceSamlConfiguration Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new WorkspaceSamlConfiguration(name: string, args: WorkspaceSamlConfigurationArgs, opts?: CustomResourceOptions);
    @overload
def WorkspaceSamlConfiguration(resource_name: str,
                               args: WorkspaceSamlConfigurationArgs,
                               opts: Optional[ResourceOptions] = None)

@overload
def WorkspaceSamlConfiguration(resource_name: str,
                               opts: Optional[ResourceOptions] = None,
                               editor_role_values: Optional[Sequence[str]] = None,
                               workspace_id: Optional[str] = None,
                               idp_metadata_xml: Optional[str] = None,
                               email_assertion: Optional[str] = None,
                               groups_assertion: Optional[str] = None,
                               idp_metadata_url: Optional[str] = None,
                               admin_role_values: Optional[Sequence[str]] = None,
                               login_assertion: Optional[str] = None,
                               login_validity_duration: Optional[int] = None,
                               name_assertion: Optional[str] = None,
                               org_assertion: Optional[str] = None,
                               region: Optional[str] = None,
                               role_assertion: Optional[str] = None,
                               allowed_organizations: Optional[Sequence[str]] = None)
    func NewWorkspaceSamlConfiguration(ctx *Context, name string, args WorkspaceSamlConfigurationArgs, opts ...ResourceOption) (*WorkspaceSamlConfiguration, error)
    public WorkspaceSamlConfiguration(string name, WorkspaceSamlConfigurationArgs args, CustomResourceOptions? opts = null)
    public WorkspaceSamlConfiguration(String name, WorkspaceSamlConfigurationArgs args)
public WorkspaceSamlConfiguration(String name, WorkspaceSamlConfigurationArgs args, CustomResourceOptions options)

    type: aws:grafana:WorkspaceSamlConfiguration
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "aws_grafana_workspace_saml_configuration" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args WorkspaceSamlConfigurationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args WorkspaceSamlConfigurationArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args WorkspaceSamlConfigurationArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args WorkspaceSamlConfigurationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args WorkspaceSamlConfigurationArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var workspaceSamlConfigurationResource = new Aws.Grafana.WorkspaceSamlConfiguration("workspaceSamlConfigurationResource", new()
{
    EditorRoleValues = new[]
    {
        "string",
    },
    WorkspaceId = "string",
    IdpMetadataXml = "string",
    EmailAssertion = "string",
    GroupsAssertion = "string",
    IdpMetadataUrl = "string",
    AdminRoleValues = new[]
    {
        "string",
    },
    LoginAssertion = "string",
    LoginValidityDuration = 0,
    NameAssertion = "string",
    OrgAssertion = "string",
    Region = "string",
    RoleAssertion = "string",
    AllowedOrganizations = new[]
    {
        "string",
    },
});

    example, err := grafana.NewWorkspaceSamlConfiguration(ctx, "workspaceSamlConfigurationResource", &grafana.WorkspaceSamlConfigurationArgs{
	EditorRoleValues: pulumi.StringArray{
		pulumi.String("string"),
	},
	WorkspaceId:     pulumi.String("string"),
	IdpMetadataXml:  pulumi.String("string"),
	EmailAssertion:  pulumi.String("string"),
	GroupsAssertion: pulumi.String("string"),
	IdpMetadataUrl:  pulumi.String("string"),
	AdminRoleValues: pulumi.StringArray{
		pulumi.String("string"),
	},
	LoginAssertion:        pulumi.String("string"),
	LoginValidityDuration: pulumi.Int(0),
	NameAssertion:         pulumi.String("string"),
	OrgAssertion:          pulumi.String("string"),
	Region:                pulumi.String("string"),
	RoleAssertion:         pulumi.String("string"),
	AllowedOrganizations: pulumi.StringArray{
		pulumi.String("string"),
	},
})

    resource "aws_grafana_workspace_saml_configuration" "workspaceSamlConfigurationResource" {
  lifecycle {
    create_before_destroy = true
  }
  editor_role_values      = ["string"]
  workspace_id            = "string"
  idp_metadata_xml        = "string"
  email_assertion         = "string"
  groups_assertion        = "string"
  idp_metadata_url        = "string"
  admin_role_values       = ["string"]
  login_assertion         = "string"
  login_validity_duration = 0
  name_assertion          = "string"
  org_assertion           = "string"
  region                  = "string"
  role_assertion          = "string"
  allowed_organizations   = ["string"]
}

    var workspaceSamlConfigurationResource = new WorkspaceSamlConfiguration("workspaceSamlConfigurationResource", WorkspaceSamlConfigurationArgs.builder()
    .editorRoleValues("string")
    .workspaceId("string")
    .idpMetadataXml("string")
    .emailAssertion("string")
    .groupsAssertion("string")
    .idpMetadataUrl("string")
    .adminRoleValues("string")
    .loginAssertion("string")
    .loginValidityDuration(0)
    .nameAssertion("string")
    .orgAssertion("string")
    .region("string")
    .roleAssertion("string")
    .allowedOrganizations("string")
    .build());

    workspace_saml_configuration_resource = aws.grafana.WorkspaceSamlConfiguration("workspaceSamlConfigurationResource",
    editor_role_values=["string"],
    workspace_id="string",
    idp_metadata_xml="string",
    email_assertion="string",
    groups_assertion="string",
    idp_metadata_url="string",
    admin_role_values=["string"],
    login_assertion="string",
    login_validity_duration=0,
    name_assertion="string",
    org_assertion="string",
    region="string",
    role_assertion="string",
    allowed_organizations=["string"])

    const workspaceSamlConfigurationResource = new aws.grafana.WorkspaceSamlConfiguration("workspaceSamlConfigurationResource", {
    editorRoleValues: ["string"],
    workspaceId: "string",
    idpMetadataXml: "string",
    emailAssertion: "string",
    groupsAssertion: "string",
    idpMetadataUrl: "string",
    adminRoleValues: ["string"],
    loginAssertion: "string",
    loginValidityDuration: 0,
    nameAssertion: "string",
    orgAssertion: "string",
    region: "string",
    roleAssertion: "string",
    allowedOrganizations: ["string"],
});

    type: aws:grafana:WorkspaceSamlConfiguration
properties:
    adminRoleValues:
        - string
    allowedOrganizations:
        - string
    editorRoleValues:
        - string
    emailAssertion: string
    groupsAssertion: string
    idpMetadataUrl: string
    idpMetadataXml: string
    loginAssertion: string
    loginValidityDuration: 0
    nameAssertion: string
    orgAssertion: string
    region: string
    roleAssertion: string
    workspaceId: string

    WorkspaceSamlConfiguration Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The WorkspaceSamlConfiguration resource accepts the following input properties:

    EditorRoleValues List<string>
    Editor role values.
    WorkspaceId string

    Workspace ID.

    The following arguments are optional:

    AdminRoleValues List<string>
    Admin role values.
    AllowedOrganizations List<string>
    Allowed organizations.
    EmailAssertion string
    Email assertion.
    GroupsAssertion string
    Groups assertion.
    IdpMetadataUrl string
    IDP Metadata URL. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    IdpMetadataXml string
    IDP Metadata XML. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    LoginAssertion string
    Login assertion.
    LoginValidityDuration int
    Login validity duration.
    NameAssertion string
    Name assertion.
    OrgAssertion string
    Org assertion.
    Region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    RoleAssertion string
    Role assertion.
    EditorRoleValues []string
    Editor role values.
    WorkspaceId string

    Workspace ID.

    The following arguments are optional:

    AdminRoleValues []string
    Admin role values.
    AllowedOrganizations []string
    Allowed organizations.
    EmailAssertion string
    Email assertion.
    GroupsAssertion string
    Groups assertion.
    IdpMetadataUrl string
    IDP Metadata URL. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    IdpMetadataXml string
    IDP Metadata XML. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    LoginAssertion string
    Login assertion.
    LoginValidityDuration int
    Login validity duration.
    NameAssertion string
    Name assertion.
    OrgAssertion string
    Org assertion.
    Region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    RoleAssertion string
    Role assertion.
    editor_role_values list(string)
    Editor role values.
    workspace_id string

    Workspace ID.

    The following arguments are optional:

    admin_role_values list(string)
    Admin role values.
    allowed_organizations list(string)
    Allowed organizations.
    email_assertion string
    Email assertion.
    groups_assertion string
    Groups assertion.
    idp_metadata_url string
    IDP Metadata URL. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    idp_metadata_xml string
    IDP Metadata XML. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    login_assertion string
    Login assertion.
    login_validity_duration number
    Login validity duration.
    name_assertion string
    Name assertion.
    org_assertion string
    Org assertion.
    region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    role_assertion string
    Role assertion.
    editorRoleValues List<String>
    Editor role values.
    workspaceId String

    Workspace ID.

    The following arguments are optional:

    adminRoleValues List<String>
    Admin role values.
    allowedOrganizations List<String>
    Allowed organizations.
    emailAssertion String
    Email assertion.
    groupsAssertion String
    Groups assertion.
    idpMetadataUrl String
    IDP Metadata URL. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    idpMetadataXml String
    IDP Metadata XML. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    loginAssertion String
    Login assertion.
    loginValidityDuration Integer
    Login validity duration.
    nameAssertion String
    Name assertion.
    orgAssertion String
    Org assertion.
    region String
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    roleAssertion String
    Role assertion.
    editorRoleValues string[]
    Editor role values.
    workspaceId string

    Workspace ID.

    The following arguments are optional:

    adminRoleValues string[]
    Admin role values.
    allowedOrganizations string[]
    Allowed organizations.
    emailAssertion string
    Email assertion.
    groupsAssertion string
    Groups assertion.
    idpMetadataUrl string
    IDP Metadata URL. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    idpMetadataXml string
    IDP Metadata XML. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    loginAssertion string
    Login assertion.
    loginValidityDuration number
    Login validity duration.
    nameAssertion string
    Name assertion.
    orgAssertion string
    Org assertion.
    region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    roleAssertion string
    Role assertion.
    editor_role_values Sequence[str]
    Editor role values.
    workspace_id str

    Workspace ID.

    The following arguments are optional:

    admin_role_values Sequence[str]
    Admin role values.
    allowed_organizations Sequence[str]
    Allowed organizations.
    email_assertion str
    Email assertion.
    groups_assertion str
    Groups assertion.
    idp_metadata_url str
    IDP Metadata URL. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    idp_metadata_xml str
    IDP Metadata XML. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    login_assertion str
    Login assertion.
    login_validity_duration int
    Login validity duration.
    name_assertion str
    Name assertion.
    org_assertion str
    Org assertion.
    region str
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    role_assertion str
    Role assertion.
    editorRoleValues List<String>
    Editor role values.
    workspaceId String

    Workspace ID.

    The following arguments are optional:

    adminRoleValues List<String>
    Admin role values.
    allowedOrganizations List<String>
    Allowed organizations.
    emailAssertion String
    Email assertion.
    groupsAssertion String
    Groups assertion.
    idpMetadataUrl String
    IDP Metadata URL. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    idpMetadataXml String
    IDP Metadata XML. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    loginAssertion String
    Login assertion.
    loginValidityDuration Number
    Login validity duration.
    nameAssertion String
    Name assertion.
    orgAssertion String
    Org assertion.
    region String
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    roleAssertion String
    Role assertion.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the WorkspaceSamlConfiguration resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Status string
    Status of the SAML configuration.
    Id string
    The provider-assigned unique ID for this managed resource.
    Status string
    Status of the SAML configuration.
    id string
    The provider-assigned unique ID for this managed resource.
    status string
    Status of the SAML configuration.
    id String
    The provider-assigned unique ID for this managed resource.
    status String
    Status of the SAML configuration.
    id string
    The provider-assigned unique ID for this managed resource.
    status string
    Status of the SAML configuration.
    id str
    The provider-assigned unique ID for this managed resource.
    status str
    Status of the SAML configuration.
    id String
    The provider-assigned unique ID for this managed resource.
    status String
    Status of the SAML configuration.

    Look up Existing WorkspaceSamlConfiguration Resource

    Get an existing WorkspaceSamlConfiguration resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: WorkspaceSamlConfigurationState, opts?: CustomResourceOptions): WorkspaceSamlConfiguration
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        admin_role_values: Optional[Sequence[str]] = None,
        allowed_organizations: Optional[Sequence[str]] = None,
        editor_role_values: Optional[Sequence[str]] = None,
        email_assertion: Optional[str] = None,
        groups_assertion: Optional[str] = None,
        idp_metadata_url: Optional[str] = None,
        idp_metadata_xml: Optional[str] = None,
        login_assertion: Optional[str] = None,
        login_validity_duration: Optional[int] = None,
        name_assertion: Optional[str] = None,
        org_assertion: Optional[str] = None,
        region: Optional[str] = None,
        role_assertion: Optional[str] = None,
        status: Optional[str] = None,
        workspace_id: Optional[str] = None) -> WorkspaceSamlConfiguration
    func GetWorkspaceSamlConfiguration(ctx *Context, name string, id IDInput, state *WorkspaceSamlConfigurationState, opts ...ResourceOption) (*WorkspaceSamlConfiguration, error)
    public static WorkspaceSamlConfiguration Get(string name, Input<string> id, WorkspaceSamlConfigurationState? state, CustomResourceOptions? opts = null)
    public static WorkspaceSamlConfiguration get(String name, Output<String> id, WorkspaceSamlConfigurationState state, CustomResourceOptions options)
    resources:  _:    type: aws:grafana:WorkspaceSamlConfiguration    get:      id: ${id}
    import {
  to = aws_grafana_workspace_saml_configuration.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AdminRoleValues List<string>
    Admin role values.
    AllowedOrganizations List<string>
    Allowed organizations.
    EditorRoleValues List<string>
    Editor role values.
    EmailAssertion string
    Email assertion.
    GroupsAssertion string
    Groups assertion.
    IdpMetadataUrl string
    IDP Metadata URL. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    IdpMetadataXml string
    IDP Metadata XML. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    LoginAssertion string
    Login assertion.
    LoginValidityDuration int
    Login validity duration.
    NameAssertion string
    Name assertion.
    OrgAssertion string
    Org assertion.
    Region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    RoleAssertion string
    Role assertion.
    Status string
    Status of the SAML configuration.
    WorkspaceId string

    Workspace ID.

    The following arguments are optional:

    AdminRoleValues []string
    Admin role values.
    AllowedOrganizations []string
    Allowed organizations.
    EditorRoleValues []string
    Editor role values.
    EmailAssertion string
    Email assertion.
    GroupsAssertion string
    Groups assertion.
    IdpMetadataUrl string
    IDP Metadata URL. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    IdpMetadataXml string
    IDP Metadata XML. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    LoginAssertion string
    Login assertion.
    LoginValidityDuration int
    Login validity duration.
    NameAssertion string
    Name assertion.
    OrgAssertion string
    Org assertion.
    Region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    RoleAssertion string
    Role assertion.
    Status string
    Status of the SAML configuration.
    WorkspaceId string

    Workspace ID.

    The following arguments are optional:

    admin_role_values list(string)
    Admin role values.
    allowed_organizations list(string)
    Allowed organizations.
    editor_role_values list(string)
    Editor role values.
    email_assertion string
    Email assertion.
    groups_assertion string
    Groups assertion.
    idp_metadata_url string
    IDP Metadata URL. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    idp_metadata_xml string
    IDP Metadata XML. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    login_assertion string
    Login assertion.
    login_validity_duration number
    Login validity duration.
    name_assertion string
    Name assertion.
    org_assertion string
    Org assertion.
    region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    role_assertion string
    Role assertion.
    status string
    Status of the SAML configuration.
    workspace_id string

    Workspace ID.

    The following arguments are optional:

    adminRoleValues List<String>
    Admin role values.
    allowedOrganizations List<String>
    Allowed organizations.
    editorRoleValues List<String>
    Editor role values.
    emailAssertion String
    Email assertion.
    groupsAssertion String
    Groups assertion.
    idpMetadataUrl String
    IDP Metadata URL. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    idpMetadataXml String
    IDP Metadata XML. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    loginAssertion String
    Login assertion.
    loginValidityDuration Integer
    Login validity duration.
    nameAssertion String
    Name assertion.
    orgAssertion String
    Org assertion.
    region String
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    roleAssertion String
    Role assertion.
    status String
    Status of the SAML configuration.
    workspaceId String

    Workspace ID.

    The following arguments are optional:

    adminRoleValues string[]
    Admin role values.
    allowedOrganizations string[]
    Allowed organizations.
    editorRoleValues string[]
    Editor role values.
    emailAssertion string
    Email assertion.
    groupsAssertion string
    Groups assertion.
    idpMetadataUrl string
    IDP Metadata URL. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    idpMetadataXml string
    IDP Metadata XML. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    loginAssertion string
    Login assertion.
    loginValidityDuration number
    Login validity duration.
    nameAssertion string
    Name assertion.
    orgAssertion string
    Org assertion.
    region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    roleAssertion string
    Role assertion.
    status string
    Status of the SAML configuration.
    workspaceId string

    Workspace ID.

    The following arguments are optional:

    admin_role_values Sequence[str]
    Admin role values.
    allowed_organizations Sequence[str]
    Allowed organizations.
    editor_role_values Sequence[str]
    Editor role values.
    email_assertion str
    Email assertion.
    groups_assertion str
    Groups assertion.
    idp_metadata_url str
    IDP Metadata URL. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    idp_metadata_xml str
    IDP Metadata XML. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    login_assertion str
    Login assertion.
    login_validity_duration int
    Login validity duration.
    name_assertion str
    Name assertion.
    org_assertion str
    Org assertion.
    region str
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    role_assertion str
    Role assertion.
    status str
    Status of the SAML configuration.
    workspace_id str

    Workspace ID.

    The following arguments are optional:

    adminRoleValues List<String>
    Admin role values.
    allowedOrganizations List<String>
    Allowed organizations.
    editorRoleValues List<String>
    Editor role values.
    emailAssertion String
    Email assertion.
    groupsAssertion String
    Groups assertion.
    idpMetadataUrl String
    IDP Metadata URL. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    idpMetadataXml String
    IDP Metadata XML. Note that either idpMetadataUrl or idpMetadataXml (but not both) must be specified.
    loginAssertion String
    Login assertion.
    loginValidityDuration Number
    Login validity duration.
    nameAssertion String
    Name assertion.
    orgAssertion String
    Org assertion.
    region String
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    roleAssertion String
    Role assertion.
    status String
    Status of the SAML configuration.
    workspaceId String

    Workspace ID.

    The following arguments are optional:

    Import

    Using pulumi import, import Grafana Workspace SAML configuration using the workspace’s id. For example:

    $ pulumi import aws:grafana/workspaceSamlConfiguration:WorkspaceSamlConfiguration example g-2054c75a02

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    AWS Classic pulumi/pulumi-aws
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the aws Terraform Provider.
    aws logo aws logo
    Viewing docs for AWS v7.53.0
    published on Monday, Nov 2, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-aws

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial