1. Packages
  2. Packages
  3. Confluent Provider
  4. API Docs
  5. getFlinkConnection
Viewing docs for Confluent v2.66.0
published on Friday, Apr 24, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-confluentcloud

confluentcloud.getFlinkConnection

confluentcloud logo
Viewing docs for Confluent v2.66.0
published on Friday, Apr 24, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-confluentcloud

    General Availability

    confluentcloud.FlinkConnection describes a Flink Connection data source.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as confluentcloud from "@pulumi/confluentcloud";

const main = confluentcloud.getFlinkConnection({
    organization: {
        id: mainConfluentOrganization.id,
    },
    environment: {
        id: staging.id,
    },
    computePool: {
        id: example.id,
    },
    principal: {
        id: app_manager_flink.id,
    },
    restEndpoint: mainConfluentFlinkRegion.restEndpoint,
    credentials: {
        key: env_admin_flink_api_key.id,
        secret: env_admin_flink_api_key.secret,
    },
    displayName: "connection1",
    type: "OPENAI",
});
export const connectionOutput = main.then(main => main.status);

    import pulumi
import pulumi_confluentcloud as confluentcloud

main = confluentcloud.get_flink_connection(organization={
        "id": main_confluent_organization["id"],
    },
    environment={
        "id": staging["id"],
    },
    compute_pool={
        "id": example["id"],
    },
    principal={
        "id": app_manager_flink["id"],
    },
    rest_endpoint=main_confluent_flink_region["restEndpoint"],
    credentials={
        "key": env_admin_flink_api_key["id"],
        "secret": env_admin_flink_api_key["secret"],
    },
    display_name="connection1",
    type="OPENAI")
pulumi.export("connectionOutput", main.status)

    package main

import (
	"github.com/pulumi/pulumi-confluentcloud/sdk/v2/go/confluentcloud"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		main, err := confluentcloud.GetFlinkConnection(ctx, &confluentcloud.LookupFlinkConnectionArgs{
			Organization: confluentcloud.GetFlinkConnectionOrganization{
				Id: mainConfluentOrganization.Id,
			},
			Environment: confluentcloud.GetFlinkConnectionEnvironment{
				Id: staging.Id,
			},
			ComputePool: confluentcloud.GetFlinkConnectionComputePool{
				Id: example.Id,
			},
			Principal: confluentcloud.GetFlinkConnectionPrincipal{
				Id: app_manager_flink.Id,
			},
			RestEndpoint: pulumi.StringRef(mainConfluentFlinkRegion.RestEndpoint),
			Credentials: confluentcloud.GetFlinkConnectionCredentials{
				Key:    env_admin_flink_api_key.Id,
				Secret: env_admin_flink_api_key.Secret,
			},
			DisplayName: "connection1",
			Type:        pulumi.StringRef("OPENAI"),
		}, nil)
		if err != nil {
			return err
		}
		ctx.Export("connectionOutput", main.Status)
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using ConfluentCloud = Pulumi.ConfluentCloud;

return await Deployment.RunAsync(() => 
{
    var main = ConfluentCloud.Index.GetFlinkConnection.Invoke(new()
    {
        Organization = new ConfluentCloud.Inputs.GetFlinkConnectionOrganizationInputArgs
        {
            Id = mainConfluentOrganization.Id,
        },
        Environment = new ConfluentCloud.Inputs.GetFlinkConnectionEnvironmentInputArgs
        {
            Id = staging.Id,
        },
        ComputePool = new ConfluentCloud.Inputs.GetFlinkConnectionComputePoolInputArgs
        {
            Id = example.Id,
        },
        Principal = new ConfluentCloud.Inputs.GetFlinkConnectionPrincipalInputArgs
        {
            Id = app_manager_flink.Id,
        },
        RestEndpoint = mainConfluentFlinkRegion.RestEndpoint,
        Credentials = new ConfluentCloud.Inputs.GetFlinkConnectionCredentialsInputArgs
        {
            Key = env_admin_flink_api_key.Id,
            Secret = env_admin_flink_api_key.Secret,
        },
        DisplayName = "connection1",
        Type = "OPENAI",
    });

    return new Dictionary<string, object?>
    {
        ["connectionOutput"] = main.Apply(getFlinkConnectionResult => getFlinkConnectionResult.Status),
    };
});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.confluentcloud.ConfluentcloudFunctions;
import com.pulumi.confluentcloud.inputs.GetFlinkConnectionArgs;
import com.pulumi.confluentcloud.inputs.GetFlinkConnectionOrganizationArgs;
import com.pulumi.confluentcloud.inputs.GetFlinkConnectionEnvironmentArgs;
import com.pulumi.confluentcloud.inputs.GetFlinkConnectionComputePoolArgs;
import com.pulumi.confluentcloud.inputs.GetFlinkConnectionPrincipalArgs;
import com.pulumi.confluentcloud.inputs.GetFlinkConnectionCredentialsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var main = ConfluentcloudFunctions.getFlinkConnection(GetFlinkConnectionArgs.builder()
            .organization(GetFlinkConnectionOrganizationArgs.builder()
                .id(mainConfluentOrganization.id())
                .build())
            .environment(GetFlinkConnectionEnvironmentArgs.builder()
                .id(staging.id())
                .build())
            .computePool(GetFlinkConnectionComputePoolArgs.builder()
                .id(example.id())
                .build())
            .principal(GetFlinkConnectionPrincipalArgs.builder()
                .id(app_manager_flink.id())
                .build())
            .restEndpoint(mainConfluentFlinkRegion.restEndpoint())
            .credentials(GetFlinkConnectionCredentialsArgs.builder()
                .key(env_admin_flink_api_key.id())
                .secret(env_admin_flink_api_key.secret())
                .build())
            .displayName("connection1")
            .type("OPENAI")
            .build());

        ctx.export("connectionOutput", main.status());
    }
}

    variables:
  main:
    fn::invoke:
      function: confluentcloud:getFlinkConnection
      arguments:
        organization:
          id: ${mainConfluentOrganization.id}
        environment:
          id: ${staging.id}
        computePool:
          id: ${example.id}
        principal:
          id: ${["app-manager-flink"].id}
        restEndpoint: ${mainConfluentFlinkRegion.restEndpoint}
        credentials:
          key: ${["env-admin-flink-api-key"].id}
          secret: ${["env-admin-flink-api-key"].secret}
        displayName: connection1
        type: OPENAI
outputs:
  connectionOutput: ${main.status}

    import * as pulumi from "@pulumi/pulumi";
import * as confluentcloud from "@pulumi/confluentcloud";

const main = confluentcloud.getFlinkConnection({
    displayName: "connection1",
    type: "OPENAI",
});
export const connectionOutput = main.then(main => main.status);

    import pulumi
import pulumi_confluentcloud as confluentcloud

main = confluentcloud.get_flink_connection(display_name="connection1",
    type="OPENAI")
pulumi.export("connectionOutput", main.status)

    package main

import (
	"github.com/pulumi/pulumi-confluentcloud/sdk/v2/go/confluentcloud"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		main, err := confluentcloud.GetFlinkConnection(ctx, &confluentcloud.LookupFlinkConnectionArgs{
			DisplayName: "connection1",
			Type:        pulumi.StringRef("OPENAI"),
		}, nil)
		if err != nil {
			return err
		}
		ctx.Export("connectionOutput", main.Status)
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using ConfluentCloud = Pulumi.ConfluentCloud;

return await Deployment.RunAsync(() => 
{
    var main = ConfluentCloud.Index.GetFlinkConnection.Invoke(new()
    {
        DisplayName = "connection1",
        Type = "OPENAI",
    });

    return new Dictionary<string, object?>
    {
        ["connectionOutput"] = main.Apply(getFlinkConnectionResult => getFlinkConnectionResult.Status),
    };
});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.confluentcloud.ConfluentcloudFunctions;
import com.pulumi.confluentcloud.inputs.GetFlinkConnectionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var main = ConfluentcloudFunctions.getFlinkConnection(GetFlinkConnectionArgs.builder()
            .displayName("connection1")
            .type("OPENAI")
            .build());

        ctx.export("connectionOutput", main.status());
    }
}

    variables:
  main:
    fn::invoke:
      function: confluentcloud:getFlinkConnection
      arguments:
        displayName: connection1
        type: OPENAI
outputs:
  connectionOutput: ${main.status}

    Using getFlinkConnection

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getFlinkConnection(args: GetFlinkConnectionArgs, opts?: InvokeOptions): Promise<GetFlinkConnectionResult>
function getFlinkConnectionOutput(args: GetFlinkConnectionOutputArgs, opts?: InvokeOptions): Output<GetFlinkConnectionResult>
    def get_flink_connection(compute_pool: Optional[GetFlinkConnectionComputePool] = None,
                         credentials: Optional[GetFlinkConnectionCredentials] = None,
                         display_name: Optional[str] = None,
                         environment: Optional[GetFlinkConnectionEnvironment] = None,
                         organization: Optional[GetFlinkConnectionOrganization] = None,
                         principal: Optional[GetFlinkConnectionPrincipal] = None,
                         rest_endpoint: Optional[str] = None,
                         type: Optional[str] = None,
                         opts: Optional[InvokeOptions] = None) -> GetFlinkConnectionResult
def get_flink_connection_output(compute_pool: Optional[pulumi.Input[GetFlinkConnectionComputePoolArgs]] = None,
                         credentials: Optional[pulumi.Input[GetFlinkConnectionCredentialsArgs]] = None,
                         display_name: Optional[pulumi.Input[str]] = None,
                         environment: Optional[pulumi.Input[GetFlinkConnectionEnvironmentArgs]] = None,
                         organization: Optional[pulumi.Input[GetFlinkConnectionOrganizationArgs]] = None,
                         principal: Optional[pulumi.Input[GetFlinkConnectionPrincipalArgs]] = None,
                         rest_endpoint: Optional[pulumi.Input[str]] = None,
                         type: Optional[pulumi.Input[str]] = None,
                         opts: Optional[InvokeOptions] = None) -> Output[GetFlinkConnectionResult]
    func LookupFlinkConnection(ctx *Context, args *LookupFlinkConnectionArgs, opts ...InvokeOption) (*LookupFlinkConnectionResult, error)
func LookupFlinkConnectionOutput(ctx *Context, args *LookupFlinkConnectionOutputArgs, opts ...InvokeOption) LookupFlinkConnectionResultOutput

    > Note: This function is named LookupFlinkConnection in the Go SDK.

    public static class GetFlinkConnection 
{
    public static Task<GetFlinkConnectionResult> InvokeAsync(GetFlinkConnectionArgs args, InvokeOptions? opts = null)
    public static Output<GetFlinkConnectionResult> Invoke(GetFlinkConnectionInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetFlinkConnectionResult> getFlinkConnection(GetFlinkConnectionArgs args, InvokeOptions options)
public static Output<GetFlinkConnectionResult> getFlinkConnection(GetFlinkConnectionArgs args, InvokeOptions options)

    fn::invoke:
  function: confluentcloud:index/getFlinkConnection:getFlinkConnection
  arguments:
    # arguments dictionary

    The following arguments are supported:

    DisplayName string
    The name of the Flink Connection.
    ComputePool Pulumi.ConfluentCloud.Inputs.GetFlinkConnectionComputePool
    Credentials Pulumi.ConfluentCloud.Inputs.GetFlinkConnectionCredentials
    Environment Pulumi.ConfluentCloud.Inputs.GetFlinkConnectionEnvironment
    Organization Pulumi.ConfluentCloud.Inputs.GetFlinkConnectionOrganization
    Principal Pulumi.ConfluentCloud.Inputs.GetFlinkConnectionPrincipal
    RestEndpoint string
    The REST endpoint of the Flink region, for example, https://flink.us-east-1.aws.confluent.cloud).
    Type string
    The type of the Flink Connection. The accepted values are: OPENAI, AZUREML, AZUREOPENAI, BEDROCK, SAGEMAKER, GOOGLEAI, VERTEXAI, MONGODB, PINECONE, ELASTIC and COUCHBASE.
    DisplayName string
    The name of the Flink Connection.
    ComputePool GetFlinkConnectionComputePool
    Credentials GetFlinkConnectionCredentials
    Environment GetFlinkConnectionEnvironment
    Organization GetFlinkConnectionOrganization
    Principal GetFlinkConnectionPrincipal
    RestEndpoint string
    The REST endpoint of the Flink region, for example, https://flink.us-east-1.aws.confluent.cloud).
    Type string
    The type of the Flink Connection. The accepted values are: OPENAI, AZUREML, AZUREOPENAI, BEDROCK, SAGEMAKER, GOOGLEAI, VERTEXAI, MONGODB, PINECONE, ELASTIC and COUCHBASE.
    displayName String
    The name of the Flink Connection.
    computePool GetFlinkConnectionComputePool
    credentials GetFlinkConnectionCredentials
    environment GetFlinkConnectionEnvironment
    organization GetFlinkConnectionOrganization
    principal GetFlinkConnectionPrincipal
    restEndpoint String
    The REST endpoint of the Flink region, for example, https://flink.us-east-1.aws.confluent.cloud).
    type String
    The type of the Flink Connection. The accepted values are: OPENAI, AZUREML, AZUREOPENAI, BEDROCK, SAGEMAKER, GOOGLEAI, VERTEXAI, MONGODB, PINECONE, ELASTIC and COUCHBASE.
    displayName string
    The name of the Flink Connection.
    computePool GetFlinkConnectionComputePool
    credentials GetFlinkConnectionCredentials
    environment GetFlinkConnectionEnvironment
    organization GetFlinkConnectionOrganization
    principal GetFlinkConnectionPrincipal
    restEndpoint string
    The REST endpoint of the Flink region, for example, https://flink.us-east-1.aws.confluent.cloud).
    type string
    The type of the Flink Connection. The accepted values are: OPENAI, AZUREML, AZUREOPENAI, BEDROCK, SAGEMAKER, GOOGLEAI, VERTEXAI, MONGODB, PINECONE, ELASTIC and COUCHBASE.
    display_name str
    The name of the Flink Connection.
    compute_pool GetFlinkConnectionComputePool
    credentials GetFlinkConnectionCredentials
    environment GetFlinkConnectionEnvironment
    organization GetFlinkConnectionOrganization
    principal GetFlinkConnectionPrincipal
    rest_endpoint str
    The REST endpoint of the Flink region, for example, https://flink.us-east-1.aws.confluent.cloud).
    type str
    The type of the Flink Connection. The accepted values are: OPENAI, AZUREML, AZUREOPENAI, BEDROCK, SAGEMAKER, GOOGLEAI, VERTEXAI, MONGODB, PINECONE, ELASTIC and COUCHBASE.
    displayName String
    The name of the Flink Connection.
    computePool Property Map
    credentials Property Map
    environment Property Map
    organization Property Map
    principal Property Map
    restEndpoint String
    The REST endpoint of the Flink region, for example, https://flink.us-east-1.aws.confluent.cloud).
    type String
    The type of the Flink Connection. The accepted values are: OPENAI, AZUREML, AZUREOPENAI, BEDROCK, SAGEMAKER, GOOGLEAI, VERTEXAI, MONGODB, PINECONE, ELASTIC and COUCHBASE.

    getFlinkConnection Result

    The following output properties are available:

    ComputePool Pulumi.ConfluentCloud.Outputs.GetFlinkConnectionComputePool
    Data string
    (Required String) The authentication data of the Flink Connection.
    DisplayName string
    Endpoint string
    (Required String) The endpoint of the Flink Connection, for example, https://api.openai.com/v1/chat/completions
    Environment Pulumi.ConfluentCloud.Outputs.GetFlinkConnectionEnvironment
    Id string
    The provider-assigned unique ID for this managed resource.
    Organization Pulumi.ConfluentCloud.Outputs.GetFlinkConnectionOrganization
    Principal Pulumi.ConfluentCloud.Outputs.GetFlinkConnectionPrincipal
    Status string
    (Required String) The status of the Flink Connection.
    StatusDetail string
    (Required String) The status details of the Flink Connection.
    Credentials Pulumi.ConfluentCloud.Outputs.GetFlinkConnectionCredentials
    RestEndpoint string
    Type string
    ComputePool GetFlinkConnectionComputePool
    Data string
    (Required String) The authentication data of the Flink Connection.
    DisplayName string
    Endpoint string
    (Required String) The endpoint of the Flink Connection, for example, https://api.openai.com/v1/chat/completions
    Environment GetFlinkConnectionEnvironment
    Id string
    The provider-assigned unique ID for this managed resource.
    Organization GetFlinkConnectionOrganization
    Principal GetFlinkConnectionPrincipal
    Status string
    (Required String) The status of the Flink Connection.
    StatusDetail string
    (Required String) The status details of the Flink Connection.
    Credentials GetFlinkConnectionCredentials
    RestEndpoint string
    Type string
    computePool GetFlinkConnectionComputePool
    data String
    (Required String) The authentication data of the Flink Connection.
    displayName String
    endpoint String
    (Required String) The endpoint of the Flink Connection, for example, https://api.openai.com/v1/chat/completions
    environment GetFlinkConnectionEnvironment
    id String
    The provider-assigned unique ID for this managed resource.
    organization GetFlinkConnectionOrganization
    principal GetFlinkConnectionPrincipal
    status String
    (Required String) The status of the Flink Connection.
    statusDetail String
    (Required String) The status details of the Flink Connection.
    credentials GetFlinkConnectionCredentials
    restEndpoint String
    type String
    computePool GetFlinkConnectionComputePool
    data string
    (Required String) The authentication data of the Flink Connection.
    displayName string
    endpoint string
    (Required String) The endpoint of the Flink Connection, for example, https://api.openai.com/v1/chat/completions
    environment GetFlinkConnectionEnvironment
    id string
    The provider-assigned unique ID for this managed resource.
    organization GetFlinkConnectionOrganization
    principal GetFlinkConnectionPrincipal
    status string
    (Required String) The status of the Flink Connection.
    statusDetail string
    (Required String) The status details of the Flink Connection.
    credentials GetFlinkConnectionCredentials
    restEndpoint string
    type string
    compute_pool GetFlinkConnectionComputePool
    data str
    (Required String) The authentication data of the Flink Connection.
    display_name str
    endpoint str
    (Required String) The endpoint of the Flink Connection, for example, https://api.openai.com/v1/chat/completions
    environment GetFlinkConnectionEnvironment
    id str
    The provider-assigned unique ID for this managed resource.
    organization GetFlinkConnectionOrganization
    principal GetFlinkConnectionPrincipal
    status str
    (Required String) The status of the Flink Connection.
    status_detail str
    (Required String) The status details of the Flink Connection.
    credentials GetFlinkConnectionCredentials
    rest_endpoint str
    type str
    computePool Property Map
    data String
    (Required String) The authentication data of the Flink Connection.
    displayName String
    endpoint String
    (Required String) The endpoint of the Flink Connection, for example, https://api.openai.com/v1/chat/completions
    environment Property Map
    id String
    The provider-assigned unique ID for this managed resource.
    organization Property Map
    principal Property Map
    status String
    (Required String) The status of the Flink Connection.
    statusDetail String
    (Required String) The status details of the Flink Connection.
    credentials Property Map
    restEndpoint String
    type String

    Supporting Types

    GetFlinkConnectionComputePool

    Id string
    The ID of the Flink Compute Pool, for example, lfcp-abc123.
    Id string
    The ID of the Flink Compute Pool, for example, lfcp-abc123.
    id String
    The ID of the Flink Compute Pool, for example, lfcp-abc123.
    id string
    The ID of the Flink Compute Pool, for example, lfcp-abc123.
    id str
    The ID of the Flink Compute Pool, for example, lfcp-abc123.
    id String
    The ID of the Flink Compute Pool, for example, lfcp-abc123.

    GetFlinkConnectionCredentials

    Key string
    The Flink API Key.
    Secret string

    The Flink API Secret.

    Note: A Flink API key consists of a key and a secret. Flink API keys are required to interact with Flink Connections in Confluent Cloud. Each Flink API key is valid for one specific Flink Region.

    Note: Use Option #2 to simplify the key rotation process. When using Option #1, to rotate a Flink API key, create a new Flink API key, update the credentials block in all configuration files to use the new Flink API key, run pulumi up -target="confluent_flink_connection.example", and remove the old Flink API key. Alternatively, in case the old Flink API Key was deleted already, you might need to run pulumi preview -refresh=false -target="confluent_flink_connection.example" -out=rotate-flink-api-key and pulumi up rotate-flink-api-key instead.

    Note: When using OAuth to authenticate a Flink Connection, if the intended principal.id is a service account instead of an Identity Pool, make sure the Identity Pool has an Assigner role binding on the service account. Otherwise, you may encounter a 403 Forbidden error. For example:

    import * as pulumi from "@pulumi/pulumi";
import * as confluentcloud from "@pulumi/confluentcloud";

    const identity_pool_assigner = new confluentcloud.RoleBinding("identity-pool-assigner", {
principal: "User:pool-abc123",
roleName: "Assigner",
crnPattern: ${main.resourceName}/service-account=sa-def456,
});


    import pulumi
import pulumi_confluentcloud as confluentcloud

identity_pool_assigner = confluentcloud.RoleBinding("identity-pool-assigner",
    principal="User:pool-abc123",
    role_name="Assigner",
    crn_pattern=f"{main['resourceName']}/service-account=sa-def456")

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using ConfluentCloud = Pulumi.ConfluentCloud;

return await Deployment.RunAsync(() => 
{
    var identity_pool_assigner = new ConfluentCloud.Index.RoleBinding("identity-pool-assigner", new()
    {
        Principal = "User:pool-abc123",
        RoleName = "Assigner",
        CrnPattern = $"{main.ResourceName}/service-account=sa-def456",
    });

});

    package main

import (
	"github.com/pulumi/pulumi-confluentcloud/sdk/v2/go/confluentcloud"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := confluentcloud.NewRoleBinding(ctx, "identity-pool-assigner", &confluentcloud.RoleBindingArgs{
			Principal:  pulumi.String("User:pool-abc123"),
			RoleName:   pulumi.String("Assigner"),
			CrnPattern: pulumi.Sprintf("%v/service-account=sa-def456", main.ResourceName),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.confluentcloud.RoleBinding;
import com.pulumi.confluentcloud.RoleBindingArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var identity_pool_assigner = new RoleBinding("identity-pool-assigner", RoleBindingArgs.builder()
            .principal("User:pool-abc123")
            .roleName("Assigner")
            .crnPattern(String.format("%s/service-account=sa-def456", main.resourceName()))
            .build());

    }
}

    resources:
  identity-pool-assigner:
    type: confluentcloud:RoleBinding
    properties:
      principal: User:pool-abc123
      roleName: Assigner
      crnPattern: ${main.resourceName}/service-account=sa-def456
    Key string
    The Flink API Key.
    Secret string

    The Flink API Secret.

    Note: A Flink API key consists of a key and a secret. Flink API keys are required to interact with Flink Connections in Confluent Cloud. Each Flink API key is valid for one specific Flink Region.

    Note: Use Option #2 to simplify the key rotation process. When using Option #1, to rotate a Flink API key, create a new Flink API key, update the credentials block in all configuration files to use the new Flink API key, run pulumi up -target="confluent_flink_connection.example", and remove the old Flink API key. Alternatively, in case the old Flink API Key was deleted already, you might need to run pulumi preview -refresh=false -target="confluent_flink_connection.example" -out=rotate-flink-api-key and pulumi up rotate-flink-api-key instead.

    Note: When using OAuth to authenticate a Flink Connection, if the intended principal.id is a service account instead of an Identity Pool, make sure the Identity Pool has an Assigner role binding on the service account. Otherwise, you may encounter a 403 Forbidden error. For example:

    import * as pulumi from "@pulumi/pulumi";
import * as confluentcloud from "@pulumi/confluentcloud";

    const identity_pool_assigner = new confluentcloud.RoleBinding("identity-pool-assigner", {
principal: "User:pool-abc123",
roleName: "Assigner",
crnPattern: ${main.resourceName}/service-account=sa-def456,
});


    import pulumi
import pulumi_confluentcloud as confluentcloud

identity_pool_assigner = confluentcloud.RoleBinding("identity-pool-assigner",
    principal="User:pool-abc123",
    role_name="Assigner",
    crn_pattern=f"{main['resourceName']}/service-account=sa-def456")

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using ConfluentCloud = Pulumi.ConfluentCloud;

return await Deployment.RunAsync(() => 
{
    var identity_pool_assigner = new ConfluentCloud.Index.RoleBinding("identity-pool-assigner", new()
    {
        Principal = "User:pool-abc123",
        RoleName = "Assigner",
        CrnPattern = $"{main.ResourceName}/service-account=sa-def456",
    });

});

    package main

import (
	"github.com/pulumi/pulumi-confluentcloud/sdk/v2/go/confluentcloud"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := confluentcloud.NewRoleBinding(ctx, "identity-pool-assigner", &confluentcloud.RoleBindingArgs{
			Principal:  pulumi.String("User:pool-abc123"),
			RoleName:   pulumi.String("Assigner"),
			CrnPattern: pulumi.Sprintf("%v/service-account=sa-def456", main.ResourceName),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.confluentcloud.RoleBinding;
import com.pulumi.confluentcloud.RoleBindingArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var identity_pool_assigner = new RoleBinding("identity-pool-assigner", RoleBindingArgs.builder()
            .principal("User:pool-abc123")
            .roleName("Assigner")
            .crnPattern(String.format("%s/service-account=sa-def456", main.resourceName()))
            .build());

    }
}

    resources:
  identity-pool-assigner:
    type: confluentcloud:RoleBinding
    properties:
      principal: User:pool-abc123
      roleName: Assigner
      crnPattern: ${main.resourceName}/service-account=sa-def456
    key String
    The Flink API Key.
    secret String

    The Flink API Secret.

    Note: A Flink API key consists of a key and a secret. Flink API keys are required to interact with Flink Connections in Confluent Cloud. Each Flink API key is valid for one specific Flink Region.

    Note: Use Option #2 to simplify the key rotation process. When using Option #1, to rotate a Flink API key, create a new Flink API key, update the credentials block in all configuration files to use the new Flink API key, run pulumi up -target="confluent_flink_connection.example", and remove the old Flink API key. Alternatively, in case the old Flink API Key was deleted already, you might need to run pulumi preview -refresh=false -target="confluent_flink_connection.example" -out=rotate-flink-api-key and pulumi up rotate-flink-api-key instead.

    Note: When using OAuth to authenticate a Flink Connection, if the intended principal.id is a service account instead of an Identity Pool, make sure the Identity Pool has an Assigner role binding on the service account. Otherwise, you may encounter a 403 Forbidden error. For example:

    import * as pulumi from "@pulumi/pulumi";
import * as confluentcloud from "@pulumi/confluentcloud";

    const identity_pool_assigner = new confluentcloud.RoleBinding("identity-pool-assigner", {
principal: "User:pool-abc123",
roleName: "Assigner",
crnPattern: ${main.resourceName}/service-account=sa-def456,
});


    import pulumi
import pulumi_confluentcloud as confluentcloud

identity_pool_assigner = confluentcloud.RoleBinding("identity-pool-assigner",
    principal="User:pool-abc123",
    role_name="Assigner",
    crn_pattern=f"{main['resourceName']}/service-account=sa-def456")

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using ConfluentCloud = Pulumi.ConfluentCloud;

return await Deployment.RunAsync(() => 
{
    var identity_pool_assigner = new ConfluentCloud.Index.RoleBinding("identity-pool-assigner", new()
    {
        Principal = "User:pool-abc123",
        RoleName = "Assigner",
        CrnPattern = $"{main.ResourceName}/service-account=sa-def456",
    });

});

    package main

import (
	"github.com/pulumi/pulumi-confluentcloud/sdk/v2/go/confluentcloud"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := confluentcloud.NewRoleBinding(ctx, "identity-pool-assigner", &confluentcloud.RoleBindingArgs{
			Principal:  pulumi.String("User:pool-abc123"),
			RoleName:   pulumi.String("Assigner"),
			CrnPattern: pulumi.Sprintf("%v/service-account=sa-def456", main.ResourceName),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.confluentcloud.RoleBinding;
import com.pulumi.confluentcloud.RoleBindingArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var identity_pool_assigner = new RoleBinding("identity-pool-assigner", RoleBindingArgs.builder()
            .principal("User:pool-abc123")
            .roleName("Assigner")
            .crnPattern(String.format("%s/service-account=sa-def456", main.resourceName()))
            .build());

    }
}

    resources:
  identity-pool-assigner:
    type: confluentcloud:RoleBinding
    properties:
      principal: User:pool-abc123
      roleName: Assigner
      crnPattern: ${main.resourceName}/service-account=sa-def456
    key string
    The Flink API Key.
    secret string

    The Flink API Secret.

    Note: A Flink API key consists of a key and a secret. Flink API keys are required to interact with Flink Connections in Confluent Cloud. Each Flink API key is valid for one specific Flink Region.

    Note: Use Option #2 to simplify the key rotation process. When using Option #1, to rotate a Flink API key, create a new Flink API key, update the credentials block in all configuration files to use the new Flink API key, run pulumi up -target="confluent_flink_connection.example", and remove the old Flink API key. Alternatively, in case the old Flink API Key was deleted already, you might need to run pulumi preview -refresh=false -target="confluent_flink_connection.example" -out=rotate-flink-api-key and pulumi up rotate-flink-api-key instead.

    Note: When using OAuth to authenticate a Flink Connection, if the intended principal.id is a service account instead of an Identity Pool, make sure the Identity Pool has an Assigner role binding on the service account. Otherwise, you may encounter a 403 Forbidden error. For example:

    import * as pulumi from "@pulumi/pulumi";
import * as confluentcloud from "@pulumi/confluentcloud";

    const identity_pool_assigner = new confluentcloud.RoleBinding("identity-pool-assigner", {
principal: "User:pool-abc123",
roleName: "Assigner",
crnPattern: ${main.resourceName}/service-account=sa-def456,
});


    import pulumi
import pulumi_confluentcloud as confluentcloud

identity_pool_assigner = confluentcloud.RoleBinding("identity-pool-assigner",
    principal="User:pool-abc123",
    role_name="Assigner",
    crn_pattern=f"{main['resourceName']}/service-account=sa-def456")

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using ConfluentCloud = Pulumi.ConfluentCloud;

return await Deployment.RunAsync(() => 
{
    var identity_pool_assigner = new ConfluentCloud.Index.RoleBinding("identity-pool-assigner", new()
    {
        Principal = "User:pool-abc123",
        RoleName = "Assigner",
        CrnPattern = $"{main.ResourceName}/service-account=sa-def456",
    });

});

    package main

import (
	"github.com/pulumi/pulumi-confluentcloud/sdk/v2/go/confluentcloud"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := confluentcloud.NewRoleBinding(ctx, "identity-pool-assigner", &confluentcloud.RoleBindingArgs{
			Principal:  pulumi.String("User:pool-abc123"),
			RoleName:   pulumi.String("Assigner"),
			CrnPattern: pulumi.Sprintf("%v/service-account=sa-def456", main.ResourceName),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.confluentcloud.RoleBinding;
import com.pulumi.confluentcloud.RoleBindingArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var identity_pool_assigner = new RoleBinding("identity-pool-assigner", RoleBindingArgs.builder()
            .principal("User:pool-abc123")
            .roleName("Assigner")
            .crnPattern(String.format("%s/service-account=sa-def456", main.resourceName()))
            .build());

    }
}

    resources:
  identity-pool-assigner:
    type: confluentcloud:RoleBinding
    properties:
      principal: User:pool-abc123
      roleName: Assigner
      crnPattern: ${main.resourceName}/service-account=sa-def456
    key str
    The Flink API Key.
    secret str

    The Flink API Secret.

    Note: A Flink API key consists of a key and a secret. Flink API keys are required to interact with Flink Connections in Confluent Cloud. Each Flink API key is valid for one specific Flink Region.

    Note: Use Option #2 to simplify the key rotation process. When using Option #1, to rotate a Flink API key, create a new Flink API key, update the credentials block in all configuration files to use the new Flink API key, run pulumi up -target="confluent_flink_connection.example", and remove the old Flink API key. Alternatively, in case the old Flink API Key was deleted already, you might need to run pulumi preview -refresh=false -target="confluent_flink_connection.example" -out=rotate-flink-api-key and pulumi up rotate-flink-api-key instead.

    Note: When using OAuth to authenticate a Flink Connection, if the intended principal.id is a service account instead of an Identity Pool, make sure the Identity Pool has an Assigner role binding on the service account. Otherwise, you may encounter a 403 Forbidden error. For example:

    import * as pulumi from "@pulumi/pulumi";
import * as confluentcloud from "@pulumi/confluentcloud";

    const identity_pool_assigner = new confluentcloud.RoleBinding("identity-pool-assigner", {
principal: "User:pool-abc123",
roleName: "Assigner",
crnPattern: ${main.resourceName}/service-account=sa-def456,
});


    import pulumi
import pulumi_confluentcloud as confluentcloud

identity_pool_assigner = confluentcloud.RoleBinding("identity-pool-assigner",
    principal="User:pool-abc123",
    role_name="Assigner",
    crn_pattern=f"{main['resourceName']}/service-account=sa-def456")

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using ConfluentCloud = Pulumi.ConfluentCloud;

return await Deployment.RunAsync(() => 
{
    var identity_pool_assigner = new ConfluentCloud.Index.RoleBinding("identity-pool-assigner", new()
    {
        Principal = "User:pool-abc123",
        RoleName = "Assigner",
        CrnPattern = $"{main.ResourceName}/service-account=sa-def456",
    });

});

    package main

import (
	"github.com/pulumi/pulumi-confluentcloud/sdk/v2/go/confluentcloud"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := confluentcloud.NewRoleBinding(ctx, "identity-pool-assigner", &confluentcloud.RoleBindingArgs{
			Principal:  pulumi.String("User:pool-abc123"),
			RoleName:   pulumi.String("Assigner"),
			CrnPattern: pulumi.Sprintf("%v/service-account=sa-def456", main.ResourceName),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.confluentcloud.RoleBinding;
import com.pulumi.confluentcloud.RoleBindingArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var identity_pool_assigner = new RoleBinding("identity-pool-assigner", RoleBindingArgs.builder()
            .principal("User:pool-abc123")
            .roleName("Assigner")
            .crnPattern(String.format("%s/service-account=sa-def456", main.resourceName()))
            .build());

    }
}

    resources:
  identity-pool-assigner:
    type: confluentcloud:RoleBinding
    properties:
      principal: User:pool-abc123
      roleName: Assigner
      crnPattern: ${main.resourceName}/service-account=sa-def456
    key String
    The Flink API Key.
    secret String

    The Flink API Secret.

    Note: A Flink API key consists of a key and a secret. Flink API keys are required to interact with Flink Connections in Confluent Cloud. Each Flink API key is valid for one specific Flink Region.

    Note: Use Option #2 to simplify the key rotation process. When using Option #1, to rotate a Flink API key, create a new Flink API key, update the credentials block in all configuration files to use the new Flink API key, run pulumi up -target="confluent_flink_connection.example", and remove the old Flink API key. Alternatively, in case the old Flink API Key was deleted already, you might need to run pulumi preview -refresh=false -target="confluent_flink_connection.example" -out=rotate-flink-api-key and pulumi up rotate-flink-api-key instead.

    Note: When using OAuth to authenticate a Flink Connection, if the intended principal.id is a service account instead of an Identity Pool, make sure the Identity Pool has an Assigner role binding on the service account. Otherwise, you may encounter a 403 Forbidden error. For example:

    import * as pulumi from "@pulumi/pulumi";
import * as confluentcloud from "@pulumi/confluentcloud";

    const identity_pool_assigner = new confluentcloud.RoleBinding("identity-pool-assigner", {
principal: "User:pool-abc123",
roleName: "Assigner",
crnPattern: ${main.resourceName}/service-account=sa-def456,
});


    import pulumi
import pulumi_confluentcloud as confluentcloud

identity_pool_assigner = confluentcloud.RoleBinding("identity-pool-assigner",
    principal="User:pool-abc123",
    role_name="Assigner",
    crn_pattern=f"{main['resourceName']}/service-account=sa-def456")

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using ConfluentCloud = Pulumi.ConfluentCloud;

return await Deployment.RunAsync(() => 
{
    var identity_pool_assigner = new ConfluentCloud.Index.RoleBinding("identity-pool-assigner", new()
    {
        Principal = "User:pool-abc123",
        RoleName = "Assigner",
        CrnPattern = $"{main.ResourceName}/service-account=sa-def456",
    });

});

    package main

import (
	"github.com/pulumi/pulumi-confluentcloud/sdk/v2/go/confluentcloud"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := confluentcloud.NewRoleBinding(ctx, "identity-pool-assigner", &confluentcloud.RoleBindingArgs{
			Principal:  pulumi.String("User:pool-abc123"),
			RoleName:   pulumi.String("Assigner"),
			CrnPattern: pulumi.Sprintf("%v/service-account=sa-def456", main.ResourceName),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.confluentcloud.RoleBinding;
import com.pulumi.confluentcloud.RoleBindingArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var identity_pool_assigner = new RoleBinding("identity-pool-assigner", RoleBindingArgs.builder()
            .principal("User:pool-abc123")
            .roleName("Assigner")
            .crnPattern(String.format("%s/service-account=sa-def456", main.resourceName()))
            .build());

    }
}

    resources:
  identity-pool-assigner:
    type: confluentcloud:RoleBinding
    properties:
      principal: User:pool-abc123
      roleName: Assigner
      crnPattern: ${main.resourceName}/service-account=sa-def456

    GetFlinkConnectionEnvironment

    Id string
    The ID of the Environment, for example, env-abc123.
    Id string
    The ID of the Environment, for example, env-abc123.
    id String
    The ID of the Environment, for example, env-abc123.
    id string
    The ID of the Environment, for example, env-abc123.
    id str
    The ID of the Environment, for example, env-abc123.
    id String
    The ID of the Environment, for example, env-abc123.

    GetFlinkConnectionOrganization

    Id string
    The ID of the Organization, for example, 1111aaaa-11aa-11aa-11aa-111111aaaaaa.
    Id string
    The ID of the Organization, for example, 1111aaaa-11aa-11aa-11aa-111111aaaaaa.
    id String
    The ID of the Organization, for example, 1111aaaa-11aa-11aa-11aa-111111aaaaaa.
    id string
    The ID of the Organization, for example, 1111aaaa-11aa-11aa-11aa-111111aaaaaa.
    id str
    The ID of the Organization, for example, 1111aaaa-11aa-11aa-11aa-111111aaaaaa.
    id String
    The ID of the Organization, for example, 1111aaaa-11aa-11aa-11aa-111111aaaaaa.

    GetFlinkConnectionPrincipal

    Id string
    The ID of the Principal the Flink Connection runs as, for example, sa-abc123.
    Id string
    The ID of the Principal the Flink Connection runs as, for example, sa-abc123.
    id String
    The ID of the Principal the Flink Connection runs as, for example, sa-abc123.
    id string
    The ID of the Principal the Flink Connection runs as, for example, sa-abc123.
    id str
    The ID of the Principal the Flink Connection runs as, for example, sa-abc123.
    id String
    The ID of the Principal the Flink Connection runs as, for example, sa-abc123.

    Package Details

    Repository
    Confluent Cloud pulumi/pulumi-confluentcloud
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the confluent Terraform Provider.
    confluentcloud logo
    Viewing docs for Confluent v2.66.0
    published on Friday, Apr 24, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-confluentcloud
      Try Pulumi Cloud free. Your team will thank you.