1. Packages
  2. Confluent Provider
  3. API Docs
  4. ProviderIntegrationAuthorization
Viewing docs for Confluent v2.59.0
published on Friday, Mar 6, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-confluentcloud

confluentcloud.ProviderIntegrationAuthorization

confluentcloud logo
Viewing docs for Confluent v2.59.0
published on Friday, Mar 6, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-confluentcloud

    General Availability

    confluentcloud.ProviderIntegrationAuthorization configures and validates a Cloud Service Provider (CSP) integration created by confluentcloud.ProviderIntegrationSetup. This resource transitions the integration from DRAFT to CREATED status and validates the cloud provider setup.

    Note: This resource will show persistent warnings until the cloud provider setup is complete. For Azure, you must grant admin consent and create a service principal. For GCP, you must configure IAM permissions.

    Example Usage

    Azure Provider Integration Authorization

    You have two options to complete the Azure setup after creating the authorization resource:

    import * as pulumi from "@pulumi/pulumi";
import * as azuread from "@pulumi/azuread";
import * as confluentcloud from "@pulumi/confluentcloud";

const azure = new confluentcloud.ProviderIntegrationSetup("azure", {
    environment: {
        id: environmentId,
    },
    displayName: "azure-integration",
    cloud: "AZURE",
});
const azureProviderIntegrationAuthorization = new confluentcloud.ProviderIntegrationAuthorization("azure", {
    providerIntegrationId: azure.id,
    environment: {
        id: environmentId,
    },
    azure: {
        customerAzureTenantId: azureTenantId,
    },
});
// Automatically create the service principal using Azure Terraform Provider
const confluent = new azuread.index.ServicePrincipal("confluent", {clientId: azureProviderIntegrationAuthorization.azure?.confluentMultiTenantAppId});
export const azureAppId = azureProviderIntegrationAuthorization.azure.apply(azure => azure?.confluentMultiTenantAppId);
export const servicePrincipalObjectId = confluent.objectId;

    import pulumi
import pulumi_azuread as azuread
import pulumi_confluentcloud as confluentcloud

azure = confluentcloud.ProviderIntegrationSetup("azure",
    environment={
        "id": environment_id,
    },
    display_name="azure-integration",
    cloud="AZURE")
azure_provider_integration_authorization = confluentcloud.ProviderIntegrationAuthorization("azure",
    provider_integration_id=azure.id,
    environment={
        "id": environment_id,
    },
    azure={
        "customer_azure_tenant_id": azure_tenant_id,
    })
# Automatically create the service principal using Azure Terraform Provider
confluent = azuread.index.ServicePrincipal("confluent", client_id=azure_provider_integration_authorization.azure.confluent_multi_tenant_app_id)
pulumi.export("azureAppId", azure_provider_integration_authorization.azure.confluent_multi_tenant_app_id)
pulumi.export("servicePrincipalObjectId", confluent["objectId"])

    package main

import (
	"github.com/pulumi/pulumi-azuread/sdk/go/azuread"
	"github.com/pulumi/pulumi-confluentcloud/sdk/v2/go/confluentcloud"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		azure, err := confluentcloud.NewProviderIntegrationSetup(ctx, "azure", &confluentcloud.ProviderIntegrationSetupArgs{
			Environment: &confluentcloud.ProviderIntegrationSetupEnvironmentArgs{
				Id: pulumi.Any(environmentId),
			},
			DisplayName: pulumi.String("azure-integration"),
			Cloud:       pulumi.String("AZURE"),
		})
		if err != nil {
			return err
		}
		azureProviderIntegrationAuthorization, err := confluentcloud.NewProviderIntegrationAuthorization(ctx, "azure", &confluentcloud.ProviderIntegrationAuthorizationArgs{
			ProviderIntegrationId: azure.ID(),
			Environment: &confluentcloud.ProviderIntegrationAuthorizationEnvironmentArgs{
				Id: pulumi.Any(environmentId),
			},
			Azure: &confluentcloud.ProviderIntegrationAuthorizationAzureArgs{
				CustomerAzureTenantId: pulumi.Any(azureTenantId),
			},
		})
		if err != nil {
			return err
		}
		// Automatically create the service principal using Azure Terraform Provider
		confluent, err := azuread.NewServicePrincipal(ctx, "confluent", &azuread.ServicePrincipalArgs{
			ClientId: azureProviderIntegrationAuthorization.Azure.ConfluentMultiTenantAppId,
		})
		if err != nil {
			return err
		}
		ctx.Export("azureAppId", azureProviderIntegrationAuthorization.Azure.ApplyT(func(azure confluentcloud.ProviderIntegrationAuthorizationAzure) (*string, error) {
			return &azure.ConfluentMultiTenantAppId, nil
		}).(pulumi.StringPtrOutput))
		ctx.Export("servicePrincipalObjectId", confluent.ObjectId)
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azuread = Pulumi.Azuread;
using ConfluentCloud = Pulumi.ConfluentCloud;

return await Deployment.RunAsync(() => 
{
    var azure = new ConfluentCloud.ProviderIntegrationSetup("azure", new()
    {
        Environment = new ConfluentCloud.Inputs.ProviderIntegrationSetupEnvironmentArgs
        {
            Id = environmentId,
        },
        DisplayName = "azure-integration",
        Cloud = "AZURE",
    });

    var azureProviderIntegrationAuthorization = new ConfluentCloud.ProviderIntegrationAuthorization("azure", new()
    {
        ProviderIntegrationId = azure.Id,
        Environment = new ConfluentCloud.Inputs.ProviderIntegrationAuthorizationEnvironmentArgs
        {
            Id = environmentId,
        },
        Azure = new ConfluentCloud.Inputs.ProviderIntegrationAuthorizationAzureArgs
        {
            CustomerAzureTenantId = azureTenantId,
        },
    });

    // Automatically create the service principal using Azure Terraform Provider
    var confluent = new Azuread.Index.ServicePrincipal("confluent", new()
    {
        ClientId = azureProviderIntegrationAuthorization.Azure?.ConfluentMultiTenantAppId,
    });

    return new Dictionary<string, object?>
    {
        ["azureAppId"] = azureProviderIntegrationAuthorization.Azure.Apply(azure => azure?.ConfluentMultiTenantAppId),
        ["servicePrincipalObjectId"] = confluent.ObjectId,
    };
});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.confluentcloud.ProviderIntegrationSetup;
import com.pulumi.confluentcloud.ProviderIntegrationSetupArgs;
import com.pulumi.confluentcloud.inputs.ProviderIntegrationSetupEnvironmentArgs;
import com.pulumi.confluentcloud.ProviderIntegrationAuthorization;
import com.pulumi.confluentcloud.ProviderIntegrationAuthorizationArgs;
import com.pulumi.confluentcloud.inputs.ProviderIntegrationAuthorizationEnvironmentArgs;
import com.pulumi.confluentcloud.inputs.ProviderIntegrationAuthorizationAzureArgs;
import com.pulumi.azuread.ServicePrincipal;
import com.pulumi.azuread.ServicePrincipalArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var azure = new ProviderIntegrationSetup("azure", ProviderIntegrationSetupArgs.builder()
            .environment(ProviderIntegrationSetupEnvironmentArgs.builder()
                .id(environmentId)
                .build())
            .displayName("azure-integration")
            .cloud("AZURE")
            .build());

        var azureProviderIntegrationAuthorization = new ProviderIntegrationAuthorization("azureProviderIntegrationAuthorization", ProviderIntegrationAuthorizationArgs.builder()
            .providerIntegrationId(azure.id())
            .environment(ProviderIntegrationAuthorizationEnvironmentArgs.builder()
                .id(environmentId)
                .build())
            .azure(ProviderIntegrationAuthorizationAzureArgs.builder()
                .customerAzureTenantId(azureTenantId)
                .build())
            .build());

        // Automatically create the service principal using Azure Terraform Provider
        var confluent = new ServicePrincipal("confluent", ServicePrincipalArgs.builder()
            .clientId(azureProviderIntegrationAuthorization.azure().confluentMultiTenantAppId())
            .build());

        ctx.export("azureAppId", azureProviderIntegrationAuthorization.azure().applyValue(_azure -> _azure.confluentMultiTenantAppId()));
        ctx.export("servicePrincipalObjectId", confluent.objectId());
    }
}

    resources:
  azure:
    type: confluentcloud:ProviderIntegrationSetup
    properties:
      environment:
        id: ${environmentId}
      displayName: azure-integration
      cloud: AZURE
  azureProviderIntegrationAuthorization:
    type: confluentcloud:ProviderIntegrationAuthorization
    name: azure
    properties:
      providerIntegrationId: ${azure.id}
      environment:
        id: ${environmentId}
      azure:
        customerAzureTenantId: ${azureTenantId}
  # Automatically create the service principal using Azure Terraform Provider
  confluent:
    type: azuread:ServicePrincipal
    properties:
      clientId: ${azureProviderIntegrationAuthorization.azure.confluentMultiTenantAppId}
outputs:
  # Output the setup information
  azureAppId: ${azureProviderIntegrationAuthorization.azure.confluentMultiTenantAppId}
  servicePrincipalObjectId: ${confluent.objectId}

    Option 2: Using Azure CLI Commands

    import * as pulumi from "@pulumi/pulumi";
import * as confluentcloud from "@pulumi/confluentcloud";

const azure = new confluentcloud.ProviderIntegrationSetup("azure", {
    environment: {
        id: environmentId,
    },
    displayName: "azure-integration",
    cloud: "AZURE",
});
const azureProviderIntegrationAuthorization = new confluentcloud.ProviderIntegrationAuthorization("azure", {
    providerIntegrationId: azure.id,
    environment: {
        id: environmentId,
    },
    azure: {
        customerAzureTenantId: azureTenantId,
    },
});
export const azureSetupCommand = azureProviderIntegrationAuthorization.azure.apply(azure => `az ad sp create --id ${azure?.confluentMultiTenantAppId}`);

    import pulumi
import pulumi_confluentcloud as confluentcloud

azure = confluentcloud.ProviderIntegrationSetup("azure",
    environment={
        "id": environment_id,
    },
    display_name="azure-integration",
    cloud="AZURE")
azure_provider_integration_authorization = confluentcloud.ProviderIntegrationAuthorization("azure",
    provider_integration_id=azure.id,
    environment={
        "id": environment_id,
    },
    azure={
        "customer_azure_tenant_id": azure_tenant_id,
    })
pulumi.export("azureSetupCommand", azure_provider_integration_authorization.azure.apply(lambda azure: f"az ad sp create --id {azure.confluent_multi_tenant_app_id}"))

    package main

import (
	"fmt"

	"github.com/pulumi/pulumi-confluentcloud/sdk/v2/go/confluentcloud"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		azure, err := confluentcloud.NewProviderIntegrationSetup(ctx, "azure", &confluentcloud.ProviderIntegrationSetupArgs{
			Environment: &confluentcloud.ProviderIntegrationSetupEnvironmentArgs{
				Id: pulumi.Any(environmentId),
			},
			DisplayName: pulumi.String("azure-integration"),
			Cloud:       pulumi.String("AZURE"),
		})
		if err != nil {
			return err
		}
		azureProviderIntegrationAuthorization, err := confluentcloud.NewProviderIntegrationAuthorization(ctx, "azure", &confluentcloud.ProviderIntegrationAuthorizationArgs{
			ProviderIntegrationId: azure.ID(),
			Environment: &confluentcloud.ProviderIntegrationAuthorizationEnvironmentArgs{
				Id: pulumi.Any(environmentId),
			},
			Azure: &confluentcloud.ProviderIntegrationAuthorizationAzureArgs{
				CustomerAzureTenantId: pulumi.Any(azureTenantId),
			},
		})
		if err != nil {
			return err
		}
		ctx.Export("azureSetupCommand", azureProviderIntegrationAuthorization.Azure.ApplyT(func(azure confluentcloud.ProviderIntegrationAuthorizationAzure) (string, error) {
			return fmt.Sprintf("az ad sp create --id %v", azure.ConfluentMultiTenantAppId), nil
		}).(pulumi.StringOutput))
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using ConfluentCloud = Pulumi.ConfluentCloud;

return await Deployment.RunAsync(() => 
{
    var azure = new ConfluentCloud.ProviderIntegrationSetup("azure", new()
    {
        Environment = new ConfluentCloud.Inputs.ProviderIntegrationSetupEnvironmentArgs
        {
            Id = environmentId,
        },
        DisplayName = "azure-integration",
        Cloud = "AZURE",
    });

    var azureProviderIntegrationAuthorization = new ConfluentCloud.ProviderIntegrationAuthorization("azure", new()
    {
        ProviderIntegrationId = azure.Id,
        Environment = new ConfluentCloud.Inputs.ProviderIntegrationAuthorizationEnvironmentArgs
        {
            Id = environmentId,
        },
        Azure = new ConfluentCloud.Inputs.ProviderIntegrationAuthorizationAzureArgs
        {
            CustomerAzureTenantId = azureTenantId,
        },
    });

    return new Dictionary<string, object?>
    {
        ["azureSetupCommand"] = azureProviderIntegrationAuthorization.Azure.Apply(azure => $"az ad sp create --id {azure?.ConfluentMultiTenantAppId}"),
    };
});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.confluentcloud.ProviderIntegrationSetup;
import com.pulumi.confluentcloud.ProviderIntegrationSetupArgs;
import com.pulumi.confluentcloud.inputs.ProviderIntegrationSetupEnvironmentArgs;
import com.pulumi.confluentcloud.ProviderIntegrationAuthorization;
import com.pulumi.confluentcloud.ProviderIntegrationAuthorizationArgs;
import com.pulumi.confluentcloud.inputs.ProviderIntegrationAuthorizationEnvironmentArgs;
import com.pulumi.confluentcloud.inputs.ProviderIntegrationAuthorizationAzureArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var azure = new ProviderIntegrationSetup("azure", ProviderIntegrationSetupArgs.builder()
            .environment(ProviderIntegrationSetupEnvironmentArgs.builder()
                .id(environmentId)
                .build())
            .displayName("azure-integration")
            .cloud("AZURE")
            .build());

        var azureProviderIntegrationAuthorization = new ProviderIntegrationAuthorization("azureProviderIntegrationAuthorization", ProviderIntegrationAuthorizationArgs.builder()
            .providerIntegrationId(azure.id())
            .environment(ProviderIntegrationAuthorizationEnvironmentArgs.builder()
                .id(environmentId)
                .build())
            .azure(ProviderIntegrationAuthorizationAzureArgs.builder()
                .customerAzureTenantId(azureTenantId)
                .build())
            .build());

        ctx.export("azureSetupCommand", azureProviderIntegrationAuthorization.azure().applyValue(_azure -> String.format("az ad sp create --id %s", _azure.confluentMultiTenantAppId())));
    }
}

    resources:
  azure:
    type: confluentcloud:ProviderIntegrationSetup
    properties:
      environment:
        id: ${environmentId}
      displayName: azure-integration
      cloud: AZURE
  azureProviderIntegrationAuthorization:
    type: confluentcloud:ProviderIntegrationAuthorization
    name: azure
    properties:
      providerIntegrationId: ${azure.id}
      environment:
        id: ${environmentId}
      azure:
        customerAzureTenantId: ${azureTenantId}
outputs:
  # Output CLI commands for manual setup
  azureSetupCommand: az ad sp create --id ${azureProviderIntegrationAuthorization.azure.confluentMultiTenantAppId}

    GCP Provider Integration Authorization

    You have two options to complete the GCP setup after creating the authorization resource:

    import * as pulumi from "@pulumi/pulumi";
import * as confluentcloud from "@pulumi/confluentcloud";
import * as google from "@pulumi/google";

const gcp = new confluentcloud.ProviderIntegrationSetup("gcp", {
    environment: {
        id: environmentId,
    },
    displayName: "gcp-integration",
    cloud: "GCP",
});
const gcpProviderIntegrationAuthorization = new confluentcloud.ProviderIntegrationAuthorization("gcp", {
    providerIntegrationId: gcp.id,
    environment: {
        id: environmentId,
    },
    gcp: {
        customerGoogleServiceAccount: gcpServiceAccount,
    },
});
// Grant IAM permissions using Google Terraform Provider
const confluentTokenCreator = new google.index.ProjectIamMember("confluent_token_creator", {
    project: gcpProjectId,
    role: "roles/iam.serviceAccountTokenCreator",
    member: `serviceAccount:${gcpProviderIntegrationAuthorization.gcp?.googleServiceAccount}`,
    condition: [{
        title: "Confluent Cloud Access",
        description: "Allow Confluent Cloud to impersonate the customer service account",
        expression: `request.auth.claims.sub == '${gcpProviderIntegrationAuthorization.gcp?.googleServiceAccount}'`,
    }],
});
export const confluentServiceAccount = gcpProviderIntegrationAuthorization.gcp.apply(gcp => gcp?.googleServiceAccount);

    import pulumi
import pulumi_confluentcloud as confluentcloud
import pulumi_google as google

gcp = confluentcloud.ProviderIntegrationSetup("gcp",
    environment={
        "id": environment_id,
    },
    display_name="gcp-integration",
    cloud="GCP")
gcp_provider_integration_authorization = confluentcloud.ProviderIntegrationAuthorization("gcp",
    provider_integration_id=gcp.id,
    environment={
        "id": environment_id,
    },
    gcp={
        "customer_google_service_account": gcp_service_account,
    })
# Grant IAM permissions using Google Terraform Provider
confluent_token_creator = google.index.ProjectIamMember("confluent_token_creator",
    project=gcp_project_id,
    role=roles/iam.serviceAccountTokenCreator,
    member=fserviceAccount:{gcp_provider_integration_authorization.gcp.google_service_account},
    condition=[{
        title: Confluent Cloud Access,
        description: Allow Confluent Cloud to impersonate the customer service account,
        expression: frequest.auth.claims.sub == '{gcp_provider_integration_authorization.gcp.google_service_account}',
    }])
pulumi.export("confluentServiceAccount", gcp_provider_integration_authorization.gcp.google_service_account)

    package main

import (
	"github.com/pulumi/pulumi-confluentcloud/sdk/v2/go/confluentcloud"
	"github.com/pulumi/pulumi-google/sdk/go/google"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		gcp, err := confluentcloud.NewProviderIntegrationSetup(ctx, "gcp", &confluentcloud.ProviderIntegrationSetupArgs{
			Environment: &confluentcloud.ProviderIntegrationSetupEnvironmentArgs{
				Id: pulumi.Any(environmentId),
			},
			DisplayName: pulumi.String("gcp-integration"),
			Cloud:       pulumi.String("GCP"),
		})
		if err != nil {
			return err
		}
		gcpProviderIntegrationAuthorization, err := confluentcloud.NewProviderIntegrationAuthorization(ctx, "gcp", &confluentcloud.ProviderIntegrationAuthorizationArgs{
			ProviderIntegrationId: gcp.ID(),
			Environment: &confluentcloud.ProviderIntegrationAuthorizationEnvironmentArgs{
				Id: pulumi.Any(environmentId),
			},
			Gcp: &confluentcloud.ProviderIntegrationAuthorizationGcpArgs{
				CustomerGoogleServiceAccount: pulumi.Any(gcpServiceAccount),
			},
		})
		if err != nil {
			return err
		}
		// Grant IAM permissions using Google Terraform Provider
		_, err = google.NewProjectIamMember(ctx, "confluent_token_creator", &google.ProjectIamMemberArgs{
			Project: gcpProjectId,
			Role:    "roles/iam.serviceAccountTokenCreator",
			Member:  pulumi.Sprintf("serviceAccount:%v", gcpProviderIntegrationAuthorization.Gcp.GoogleServiceAccount),
			Condition: []map[string]interface{}{
				map[string]interface{}{
					"title":       "Confluent Cloud Access",
					"description": "Allow Confluent Cloud to impersonate the customer service account",
					"expression":  pulumi.Sprintf("request.auth.claims.sub == '%v'", gcpProviderIntegrationAuthorization.Gcp.GoogleServiceAccount),
				},
			},
		})
		if err != nil {
			return err
		}
		ctx.Export("confluentServiceAccount", gcpProviderIntegrationAuthorization.Gcp.ApplyT(func(gcp confluentcloud.ProviderIntegrationAuthorizationGcp) (*string, error) {
			return &gcp.GoogleServiceAccount, nil
		}).(pulumi.StringPtrOutput))
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using ConfluentCloud = Pulumi.ConfluentCloud;
using Google = Pulumi.Google;

return await Deployment.RunAsync(() => 
{
    var gcp = new ConfluentCloud.ProviderIntegrationSetup("gcp", new()
    {
        Environment = new ConfluentCloud.Inputs.ProviderIntegrationSetupEnvironmentArgs
        {
            Id = environmentId,
        },
        DisplayName = "gcp-integration",
        Cloud = "GCP",
    });

    var gcpProviderIntegrationAuthorization = new ConfluentCloud.ProviderIntegrationAuthorization("gcp", new()
    {
        ProviderIntegrationId = gcp.Id,
        Environment = new ConfluentCloud.Inputs.ProviderIntegrationAuthorizationEnvironmentArgs
        {
            Id = environmentId,
        },
        Gcp = new ConfluentCloud.Inputs.ProviderIntegrationAuthorizationGcpArgs
        {
            CustomerGoogleServiceAccount = gcpServiceAccount,
        },
    });

    // Grant IAM permissions using Google Terraform Provider
    var confluentTokenCreator = new Google.Index.ProjectIamMember("confluent_token_creator", new()
    {
        Project = gcpProjectId,
        Role = "roles/iam.serviceAccountTokenCreator",
        Member = $"serviceAccount:{gcpProviderIntegrationAuthorization.Gcp?.GoogleServiceAccount}",
        Condition = new[]
        {
            
            {
                { "title", "Confluent Cloud Access" },
                { "description", "Allow Confluent Cloud to impersonate the customer service account" },
                { "expression", $"request.auth.claims.sub == '{gcpProviderIntegrationAuthorization.Gcp?.GoogleServiceAccount}'" },
            },
        },
    });

    return new Dictionary<string, object?>
    {
        ["confluentServiceAccount"] = gcpProviderIntegrationAuthorization.Gcp.Apply(gcp => gcp?.GoogleServiceAccount),
    };
});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.confluentcloud.ProviderIntegrationSetup;
import com.pulumi.confluentcloud.ProviderIntegrationSetupArgs;
import com.pulumi.confluentcloud.inputs.ProviderIntegrationSetupEnvironmentArgs;
import com.pulumi.confluentcloud.ProviderIntegrationAuthorization;
import com.pulumi.confluentcloud.ProviderIntegrationAuthorizationArgs;
import com.pulumi.confluentcloud.inputs.ProviderIntegrationAuthorizationEnvironmentArgs;
import com.pulumi.confluentcloud.inputs.ProviderIntegrationAuthorizationGcpArgs;
import com.pulumi.google.ProjectIamMember;
import com.pulumi.google.ProjectIamMemberArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var gcp = new ProviderIntegrationSetup("gcp", ProviderIntegrationSetupArgs.builder()
            .environment(ProviderIntegrationSetupEnvironmentArgs.builder()
                .id(environmentId)
                .build())
            .displayName("gcp-integration")
            .cloud("GCP")
            .build());

        var gcpProviderIntegrationAuthorization = new ProviderIntegrationAuthorization("gcpProviderIntegrationAuthorization", ProviderIntegrationAuthorizationArgs.builder()
            .providerIntegrationId(gcp.id())
            .environment(ProviderIntegrationAuthorizationEnvironmentArgs.builder()
                .id(environmentId)
                .build())
            .gcp(ProviderIntegrationAuthorizationGcpArgs.builder()
                .customerGoogleServiceAccount(gcpServiceAccount)
                .build())
            .build());

        // Grant IAM permissions using Google Terraform Provider
        var confluentTokenCreator = new ProjectIamMember("confluentTokenCreator", ProjectIamMemberArgs.builder()
            .project(gcpProjectId)
            .role("roles/iam.serviceAccountTokenCreator")
            .member(String.format("serviceAccount:%s", gcpProviderIntegrationAuthorization.gcp().googleServiceAccount()))
            .condition(List.of(Map.ofEntries(
                Map.entry("title", "Confluent Cloud Access"),
                Map.entry("description", "Allow Confluent Cloud to impersonate the customer service account"),
                Map.entry("expression", String.format("request.auth.claims.sub == '%s'", gcpProviderIntegrationAuthorization.gcp().googleServiceAccount()))
            )))
            .build());

        ctx.export("confluentServiceAccount", gcpProviderIntegrationAuthorization.gcp().applyValue(_gcp -> _gcp.googleServiceAccount()));
    }
}

    resources:
  gcp:
    type: confluentcloud:ProviderIntegrationSetup
    properties:
      environment:
        id: ${environmentId}
      displayName: gcp-integration
      cloud: GCP
  gcpProviderIntegrationAuthorization:
    type: confluentcloud:ProviderIntegrationAuthorization
    name: gcp
    properties:
      providerIntegrationId: ${gcp.id}
      environment:
        id: ${environmentId}
      gcp:
        customerGoogleServiceAccount: ${gcpServiceAccount}
  # Grant IAM permissions using Google Terraform Provider
  confluentTokenCreator:
    type: google:ProjectIamMember
    name: confluent_token_creator
    properties:
      project: ${gcpProjectId}
      role: roles/iam.serviceAccountTokenCreator
      member: serviceAccount:${gcpProviderIntegrationAuthorization.gcp.googleServiceAccount}
      condition:
        - title: Confluent Cloud Access
          description: Allow Confluent Cloud to impersonate the customer service account
          expression: request.auth.claims.sub == '${gcpProviderIntegrationAuthorization.gcp.googleServiceAccount}'
outputs:
  # Output the setup information
  confluentServiceAccount: ${gcpProviderIntegrationAuthorization.gcp.googleServiceAccount}

    Option 2: Using gcloud CLI Commands

    import * as pulumi from "@pulumi/pulumi";
import * as confluentcloud from "@pulumi/confluentcloud";

const gcp = new confluentcloud.ProviderIntegrationSetup("gcp", {
    environment: {
        id: environmentId,
    },
    displayName: "gcp-integration",
    cloud: "GCP",
});
const gcpProviderIntegrationAuthorization = new confluentcloud.ProviderIntegrationAuthorization("gcp", {
    providerIntegrationId: gcp.id,
    environment: {
        id: environmentId,
    },
    gcp: {
        customerGoogleServiceAccount: gcpServiceAccount,
    },
});
export const gcpIamCommand = pulumi.all([gcpProviderIntegrationAuthorization.gcp, gcpProviderIntegrationAuthorization.gcp]).apply(([gcpProviderIntegrationAuthorizationGcp, gcpProviderIntegrationAuthorizationGcp1]) => `gcloud projects add-iam-policy-binding YOUR_PROJECT_ID --member="serviceAccount:${gcpProviderIntegrationAuthorizationGcp?.googleServiceAccount}" --role="roles/iam.serviceAccountTokenCreator" --condition="expression=request.auth.claims.sub=='${gcpProviderIntegrationAuthorizationGcp1?.googleServiceAccount}'"`);
export const confluentServiceAccount = gcpProviderIntegrationAuthorization.gcp.apply(gcp => gcp?.googleServiceAccount);

    import pulumi
import pulumi_confluentcloud as confluentcloud

gcp = confluentcloud.ProviderIntegrationSetup("gcp",
    environment={
        "id": environment_id,
    },
    display_name="gcp-integration",
    cloud="GCP")
gcp_provider_integration_authorization = confluentcloud.ProviderIntegrationAuthorization("gcp",
    provider_integration_id=gcp.id,
    environment={
        "id": environment_id,
    },
    gcp={
        "customer_google_service_account": gcp_service_account,
    })
pulumi.export("gcpIamCommand", pulumi.Output.all(
    gcpProviderIntegrationAuthorizationGcp=gcp_provider_integration_authorization.gcp,
    gcpProviderIntegrationAuthorizationGcp1=gcp_provider_integration_authorization.gcp
).apply(lambda resolved_outputs: f"gcloud projects add-iam-policy-binding YOUR_PROJECT_ID --member=\"serviceAccount:{gcp_provider_integration_authorization_gcp.google_service_account}\" --role=\"roles/iam.serviceAccountTokenCreator\" --condition=\"expression=request.auth.claims.sub=='{gcp_provider_integration_authorization_gcp1.google_service_account}'\"")
)
pulumi.export("confluentServiceAccount", gcp_provider_integration_authorization.gcp.google_service_account)

    package main

import (
	"fmt"

	"github.com/pulumi/pulumi-confluentcloud/sdk/v2/go/confluentcloud"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		gcp, err := confluentcloud.NewProviderIntegrationSetup(ctx, "gcp", &confluentcloud.ProviderIntegrationSetupArgs{
			Environment: &confluentcloud.ProviderIntegrationSetupEnvironmentArgs{
				Id: pulumi.Any(environmentId),
			},
			DisplayName: pulumi.String("gcp-integration"),
			Cloud:       pulumi.String("GCP"),
		})
		if err != nil {
			return err
		}
		gcpProviderIntegrationAuthorization, err := confluentcloud.NewProviderIntegrationAuthorization(ctx, "gcp", &confluentcloud.ProviderIntegrationAuthorizationArgs{
			ProviderIntegrationId: gcp.ID(),
			Environment: &confluentcloud.ProviderIntegrationAuthorizationEnvironmentArgs{
				Id: pulumi.Any(environmentId),
			},
			Gcp: &confluentcloud.ProviderIntegrationAuthorizationGcpArgs{
				CustomerGoogleServiceAccount: pulumi.Any(gcpServiceAccount),
			},
		})
		if err != nil {
			return err
		}
		ctx.Export("gcpIamCommand", pulumi.All(gcpProviderIntegrationAuthorization.Gcp, gcpProviderIntegrationAuthorization.Gcp).ApplyT(func(_args []interface{}) (string, error) {
			gcpProviderIntegrationAuthorizationGcp := _args[0].(confluentcloud.ProviderIntegrationAuthorizationGcp)
			gcpProviderIntegrationAuthorizationGcp1 := _args[1].(confluentcloud.ProviderIntegrationAuthorizationGcp)
			return fmt.Sprintf("gcloud projects add-iam-policy-binding YOUR_PROJECT_ID --member=\"serviceAccount:%v\" --role=\"roles/iam.serviceAccountTokenCreator\" --condition=\"expression=request.auth.claims.sub=='%v'\"", gcpProviderIntegrationAuthorizationGcp.GoogleServiceAccount, gcpProviderIntegrationAuthorizationGcp1.GoogleServiceAccount), nil
		}).(pulumi.StringOutput))
		ctx.Export("confluentServiceAccount", gcpProviderIntegrationAuthorization.Gcp.ApplyT(func(gcp confluentcloud.ProviderIntegrationAuthorizationGcp) (*string, error) {
			return &gcp.GoogleServiceAccount, nil
		}).(pulumi.StringPtrOutput))
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using ConfluentCloud = Pulumi.ConfluentCloud;

return await Deployment.RunAsync(() => 
{
    var gcp = new ConfluentCloud.ProviderIntegrationSetup("gcp", new()
    {
        Environment = new ConfluentCloud.Inputs.ProviderIntegrationSetupEnvironmentArgs
        {
            Id = environmentId,
        },
        DisplayName = "gcp-integration",
        Cloud = "GCP",
    });

    var gcpProviderIntegrationAuthorization = new ConfluentCloud.ProviderIntegrationAuthorization("gcp", new()
    {
        ProviderIntegrationId = gcp.Id,
        Environment = new ConfluentCloud.Inputs.ProviderIntegrationAuthorizationEnvironmentArgs
        {
            Id = environmentId,
        },
        Gcp = new ConfluentCloud.Inputs.ProviderIntegrationAuthorizationGcpArgs
        {
            CustomerGoogleServiceAccount = gcpServiceAccount,
        },
    });

    return new Dictionary<string, object?>
    {
        ["gcpIamCommand"] = Output.Tuple(gcpProviderIntegrationAuthorization.Gcp, gcpProviderIntegrationAuthorization.Gcp).Apply(values =>
        {
            var gcpProviderIntegrationAuthorizationGcp = values.Item1;
            var gcpProviderIntegrationAuthorizationGcp1 = values.Item2;
            return $"gcloud projects add-iam-policy-binding YOUR_PROJECT_ID --member=\"serviceAccount:{gcpProviderIntegrationAuthorizationGcp?.GoogleServiceAccount}\" --role=\"roles/iam.serviceAccountTokenCreator\" --condition=\"expression=request.auth.claims.sub=='{gcpProviderIntegrationAuthorizationGcp1?.GoogleServiceAccount}'\"";
        }),
        ["confluentServiceAccount"] = gcpProviderIntegrationAuthorization.Gcp.Apply(gcp => gcp?.GoogleServiceAccount),
    };
});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.confluentcloud.ProviderIntegrationSetup;
import com.pulumi.confluentcloud.ProviderIntegrationSetupArgs;
import com.pulumi.confluentcloud.inputs.ProviderIntegrationSetupEnvironmentArgs;
import com.pulumi.confluentcloud.ProviderIntegrationAuthorization;
import com.pulumi.confluentcloud.ProviderIntegrationAuthorizationArgs;
import com.pulumi.confluentcloud.inputs.ProviderIntegrationAuthorizationEnvironmentArgs;
import com.pulumi.confluentcloud.inputs.ProviderIntegrationAuthorizationGcpArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var gcp = new ProviderIntegrationSetup("gcp", ProviderIntegrationSetupArgs.builder()
            .environment(ProviderIntegrationSetupEnvironmentArgs.builder()
                .id(environmentId)
                .build())
            .displayName("gcp-integration")
            .cloud("GCP")
            .build());

        var gcpProviderIntegrationAuthorization = new ProviderIntegrationAuthorization("gcpProviderIntegrationAuthorization", ProviderIntegrationAuthorizationArgs.builder()
            .providerIntegrationId(gcp.id())
            .environment(ProviderIntegrationAuthorizationEnvironmentArgs.builder()
                .id(environmentId)
                .build())
            .gcp(ProviderIntegrationAuthorizationGcpArgs.builder()
                .customerGoogleServiceAccount(gcpServiceAccount)
                .build())
            .build());

        ctx.export("gcpIamCommand", Output.tuple(gcpProviderIntegrationAuthorization.gcp(), gcpProviderIntegrationAuthorization.gcp()).applyValue(values -> {
            var gcpProviderIntegrationAuthorizationGcp = values.t1;
            var gcpProviderIntegrationAuthorizationGcp1 = values.t2;
            return String.format("gcloud projects add-iam-policy-binding YOUR_PROJECT_ID --member=\"serviceAccount:%s\" --role=\"roles/iam.serviceAccountTokenCreator\" --condition=\"expression=request.auth.claims.sub=='%s'\"", gcpProviderIntegrationAuthorizationGcp.googleServiceAccount(),gcpProviderIntegrationAuthorizationGcp1.googleServiceAccount());
        }));
        ctx.export("confluentServiceAccount", gcpProviderIntegrationAuthorization.gcp().applyValue(_gcp -> _gcp.googleServiceAccount()));
    }
}

    resources:
  gcp:
    type: confluentcloud:ProviderIntegrationSetup
    properties:
      environment:
        id: ${environmentId}
      displayName: gcp-integration
      cloud: GCP
  gcpProviderIntegrationAuthorization:
    type: confluentcloud:ProviderIntegrationAuthorization
    name: gcp
    properties:
      providerIntegrationId: ${gcp.id}
      environment:
        id: ${environmentId}
      gcp:
        customerGoogleServiceAccount: ${gcpServiceAccount}
outputs:
  # Output gcloud commands for manual setup
  gcpIamCommand: gcloud projects add-iam-policy-binding YOUR_PROJECT_ID --member="serviceAccount:${gcpProviderIntegrationAuthorization.gcp.googleServiceAccount}" --role="roles/iam.serviceAccountTokenCreator" --condition="expression=request.auth.claims.sub=='${gcpProviderIntegrationAuthorization.gcp.googleServiceAccount}'"
  confluentServiceAccount: ${gcpProviderIntegrationAuthorization.gcp.googleServiceAccount}

    Azure Setup Process

    After applying the Terraform configuration, complete the Azure setup:

    1. Get the multi-tenant app ID from the Terraform outputs
    2. Grant admin consent (if you have Global Admin rights):
      https://login.microsoftonline.com/{tenant-id}/adminconsent?client_id={app-id}

    3. **Create the service principal**:
   ```bash
   az ad sp create --id {app-id}
    1. Grant permissions in Azure Portal → Enterprise Applications
    2. Re-run pulumi up to validate the connection

    GCP Setup Process

    After applying the Terraform configuration, complete the GCP setup:

    1. Get the Confluent service account from the Terraform outputs
    2. Grant IAM permissions in GCP Console:
      • Grant the Confluent service account “Service Account Token Creator” role on your service account
      • Grant your service account the necessary permissions (e.g., BigQuery Data Editor)
    3. Re-run pulumi up to validate the connection

    Getting Started

    The following end-to-end examples might help to get started with confluentcloud.ProviderIntegrationAuthorization resource:

    • provider-integration-azure: Complete Azure Provider Integration setup
    • provider-integration-gcp: Complete GCP Provider Integration setup

    Create ProviderIntegrationAuthorization Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ProviderIntegrationAuthorization(name: string, args: ProviderIntegrationAuthorizationArgs, opts?: CustomResourceOptions);
    @overload
def ProviderIntegrationAuthorization(resource_name: str,
                                     args: ProviderIntegrationAuthorizationArgs,
                                     opts: Optional[ResourceOptions] = None)

@overload
def ProviderIntegrationAuthorization(resource_name: str,
                                     opts: Optional[ResourceOptions] = None,
                                     environment: Optional[ProviderIntegrationAuthorizationEnvironmentArgs] = None,
                                     provider_integration_id: Optional[str] = None,
                                     azure: Optional[ProviderIntegrationAuthorizationAzureArgs] = None,
                                     gcp: Optional[ProviderIntegrationAuthorizationGcpArgs] = None)
    func NewProviderIntegrationAuthorization(ctx *Context, name string, args ProviderIntegrationAuthorizationArgs, opts ...ResourceOption) (*ProviderIntegrationAuthorization, error)
    public ProviderIntegrationAuthorization(string name, ProviderIntegrationAuthorizationArgs args, CustomResourceOptions? opts = null)
    public ProviderIntegrationAuthorization(String name, ProviderIntegrationAuthorizationArgs args)
public ProviderIntegrationAuthorization(String name, ProviderIntegrationAuthorizationArgs args, CustomResourceOptions options)

    type: confluentcloud:ProviderIntegrationAuthorization
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ProviderIntegrationAuthorizationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ProviderIntegrationAuthorizationArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ProviderIntegrationAuthorizationArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ProviderIntegrationAuthorizationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ProviderIntegrationAuthorizationArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var providerIntegrationAuthorizationResource = new ConfluentCloud.ProviderIntegrationAuthorization("providerIntegrationAuthorizationResource", new()
{
    Environment = new ConfluentCloud.Inputs.ProviderIntegrationAuthorizationEnvironmentArgs
    {
        Id = "string",
    },
    ProviderIntegrationId = "string",
    Azure = new ConfluentCloud.Inputs.ProviderIntegrationAuthorizationAzureArgs
    {
        CustomerAzureTenantId = "string",
        ConfluentMultiTenantAppId = "string",
    },
    Gcp = new ConfluentCloud.Inputs.ProviderIntegrationAuthorizationGcpArgs
    {
        CustomerGoogleServiceAccount = "string",
        GoogleServiceAccount = "string",
    },
});

    example, err := confluentcloud.NewProviderIntegrationAuthorization(ctx, "providerIntegrationAuthorizationResource", &confluentcloud.ProviderIntegrationAuthorizationArgs{
	Environment: &confluentcloud.ProviderIntegrationAuthorizationEnvironmentArgs{
		Id: pulumi.String("string"),
	},
	ProviderIntegrationId: pulumi.String("string"),
	Azure: &confluentcloud.ProviderIntegrationAuthorizationAzureArgs{
		CustomerAzureTenantId:     pulumi.String("string"),
		ConfluentMultiTenantAppId: pulumi.String("string"),
	},
	Gcp: &confluentcloud.ProviderIntegrationAuthorizationGcpArgs{
		CustomerGoogleServiceAccount: pulumi.String("string"),
		GoogleServiceAccount:         pulumi.String("string"),
	},
})

    var providerIntegrationAuthorizationResource = new ProviderIntegrationAuthorization("providerIntegrationAuthorizationResource", ProviderIntegrationAuthorizationArgs.builder()
    .environment(ProviderIntegrationAuthorizationEnvironmentArgs.builder()
        .id("string")
        .build())
    .providerIntegrationId("string")
    .azure(ProviderIntegrationAuthorizationAzureArgs.builder()
        .customerAzureTenantId("string")
        .confluentMultiTenantAppId("string")
        .build())
    .gcp(ProviderIntegrationAuthorizationGcpArgs.builder()
        .customerGoogleServiceAccount("string")
        .googleServiceAccount("string")
        .build())
    .build());

    provider_integration_authorization_resource = confluentcloud.ProviderIntegrationAuthorization("providerIntegrationAuthorizationResource",
    environment={
        "id": "string",
    },
    provider_integration_id="string",
    azure={
        "customer_azure_tenant_id": "string",
        "confluent_multi_tenant_app_id": "string",
    },
    gcp={
        "customer_google_service_account": "string",
        "google_service_account": "string",
    })

    const providerIntegrationAuthorizationResource = new confluentcloud.ProviderIntegrationAuthorization("providerIntegrationAuthorizationResource", {
    environment: {
        id: "string",
    },
    providerIntegrationId: "string",
    azure: {
        customerAzureTenantId: "string",
        confluentMultiTenantAppId: "string",
    },
    gcp: {
        customerGoogleServiceAccount: "string",
        googleServiceAccount: "string",
    },
});

    type: confluentcloud:ProviderIntegrationAuthorization
properties:
    azure:
        confluentMultiTenantAppId: string
        customerAzureTenantId: string
    environment:
        id: string
    gcp:
        customerGoogleServiceAccount: string
        googleServiceAccount: string
    providerIntegrationId: string

    ProviderIntegrationAuthorization Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ProviderIntegrationAuthorization resource accepts the following input properties:

    Environment Pulumi.ConfluentCloud.Inputs.ProviderIntegrationAuthorizationEnvironment
    Environment objects represent an isolated namespace for your Confluent resources for organizational purposes.
    ProviderIntegrationId string
    The ID of the provider integration to authorize.
    Azure Pulumi.ConfluentCloud.Inputs.ProviderIntegrationAuthorizationAzure
    (Optional Configuration Block) Azure-specific configuration details. It supports the following:
    Gcp Pulumi.ConfluentCloud.Inputs.ProviderIntegrationAuthorizationGcp
    (Optional Configuration Block) GCP-specific configuration details. It supports the following:
    Environment ProviderIntegrationAuthorizationEnvironmentArgs
    Environment objects represent an isolated namespace for your Confluent resources for organizational purposes.
    ProviderIntegrationId string
    The ID of the provider integration to authorize.
    Azure ProviderIntegrationAuthorizationAzureArgs
    (Optional Configuration Block) Azure-specific configuration details. It supports the following:
    Gcp ProviderIntegrationAuthorizationGcpArgs
    (Optional Configuration Block) GCP-specific configuration details. It supports the following:
    environment ProviderIntegrationAuthorizationEnvironment
    Environment objects represent an isolated namespace for your Confluent resources for organizational purposes.
    providerIntegrationId String
    The ID of the provider integration to authorize.
    azure ProviderIntegrationAuthorizationAzure
    (Optional Configuration Block) Azure-specific configuration details. It supports the following:
    gcp ProviderIntegrationAuthorizationGcp
    (Optional Configuration Block) GCP-specific configuration details. It supports the following:
    environment ProviderIntegrationAuthorizationEnvironment
    Environment objects represent an isolated namespace for your Confluent resources for organizational purposes.
    providerIntegrationId string
    The ID of the provider integration to authorize.
    azure ProviderIntegrationAuthorizationAzure
    (Optional Configuration Block) Azure-specific configuration details. It supports the following:
    gcp ProviderIntegrationAuthorizationGcp
    (Optional Configuration Block) GCP-specific configuration details. It supports the following:
    environment ProviderIntegrationAuthorizationEnvironmentArgs
    Environment objects represent an isolated namespace for your Confluent resources for organizational purposes.
    provider_integration_id str
    The ID of the provider integration to authorize.
    azure ProviderIntegrationAuthorizationAzureArgs
    (Optional Configuration Block) Azure-specific configuration details. It supports the following:
    gcp ProviderIntegrationAuthorizationGcpArgs
    (Optional Configuration Block) GCP-specific configuration details. It supports the following:
    environment Property Map
    Environment objects represent an isolated namespace for your Confluent resources for organizational purposes.
    providerIntegrationId String
    The ID of the provider integration to authorize.
    azure Property Map
    (Optional Configuration Block) Azure-specific configuration details. It supports the following:
    gcp Property Map
    (Optional Configuration Block) GCP-specific configuration details. It supports the following:

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ProviderIntegrationAuthorization resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing ProviderIntegrationAuthorization Resource

    Get an existing ProviderIntegrationAuthorization resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ProviderIntegrationAuthorizationState, opts?: CustomResourceOptions): ProviderIntegrationAuthorization
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        azure: Optional[ProviderIntegrationAuthorizationAzureArgs] = None,
        environment: Optional[ProviderIntegrationAuthorizationEnvironmentArgs] = None,
        gcp: Optional[ProviderIntegrationAuthorizationGcpArgs] = None,
        provider_integration_id: Optional[str] = None) -> ProviderIntegrationAuthorization
    func GetProviderIntegrationAuthorization(ctx *Context, name string, id IDInput, state *ProviderIntegrationAuthorizationState, opts ...ResourceOption) (*ProviderIntegrationAuthorization, error)
    public static ProviderIntegrationAuthorization Get(string name, Input<string> id, ProviderIntegrationAuthorizationState? state, CustomResourceOptions? opts = null)
    public static ProviderIntegrationAuthorization get(String name, Output<String> id, ProviderIntegrationAuthorizationState state, CustomResourceOptions options)
    resources:  _:    type: confluentcloud:ProviderIntegrationAuthorization    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Azure Pulumi.ConfluentCloud.Inputs.ProviderIntegrationAuthorizationAzure
    (Optional Configuration Block) Azure-specific configuration details. It supports the following:
    Environment Pulumi.ConfluentCloud.Inputs.ProviderIntegrationAuthorizationEnvironment
    Environment objects represent an isolated namespace for your Confluent resources for organizational purposes.
    Gcp Pulumi.ConfluentCloud.Inputs.ProviderIntegrationAuthorizationGcp
    (Optional Configuration Block) GCP-specific configuration details. It supports the following:
    ProviderIntegrationId string
    The ID of the provider integration to authorize.
    Azure ProviderIntegrationAuthorizationAzureArgs
    (Optional Configuration Block) Azure-specific configuration details. It supports the following:
    Environment ProviderIntegrationAuthorizationEnvironmentArgs
    Environment objects represent an isolated namespace for your Confluent resources for organizational purposes.
    Gcp ProviderIntegrationAuthorizationGcpArgs
    (Optional Configuration Block) GCP-specific configuration details. It supports the following:
    ProviderIntegrationId string
    The ID of the provider integration to authorize.
    azure ProviderIntegrationAuthorizationAzure
    (Optional Configuration Block) Azure-specific configuration details. It supports the following:
    environment ProviderIntegrationAuthorizationEnvironment
    Environment objects represent an isolated namespace for your Confluent resources for organizational purposes.
    gcp ProviderIntegrationAuthorizationGcp
    (Optional Configuration Block) GCP-specific configuration details. It supports the following:
    providerIntegrationId String
    The ID of the provider integration to authorize.
    azure ProviderIntegrationAuthorizationAzure
    (Optional Configuration Block) Azure-specific configuration details. It supports the following:
    environment ProviderIntegrationAuthorizationEnvironment
    Environment objects represent an isolated namespace for your Confluent resources for organizational purposes.
    gcp ProviderIntegrationAuthorizationGcp
    (Optional Configuration Block) GCP-specific configuration details. It supports the following:
    providerIntegrationId string
    The ID of the provider integration to authorize.
    azure ProviderIntegrationAuthorizationAzureArgs
    (Optional Configuration Block) Azure-specific configuration details. It supports the following:
    environment ProviderIntegrationAuthorizationEnvironmentArgs
    Environment objects represent an isolated namespace for your Confluent resources for organizational purposes.
    gcp ProviderIntegrationAuthorizationGcpArgs
    (Optional Configuration Block) GCP-specific configuration details. It supports the following:
    provider_integration_id str
    The ID of the provider integration to authorize.
    azure Property Map
    (Optional Configuration Block) Azure-specific configuration details. It supports the following:
    environment Property Map
    Environment objects represent an isolated namespace for your Confluent resources for organizational purposes.
    gcp Property Map
    (Optional Configuration Block) GCP-specific configuration details. It supports the following:
    providerIntegrationId String
    The ID of the provider integration to authorize.

    Supporting Types

    ProviderIntegrationAuthorizationAzure, ProviderIntegrationAuthorizationAzureArgs

    CustomerAzureTenantId string
    Customer's Azure Tenant ID.
    ConfluentMultiTenantAppId string
    (Computed String) Confluent Multi-Tenant App ID used to access customer Azure resources.
    CustomerAzureTenantId string
    Customer's Azure Tenant ID.
    ConfluentMultiTenantAppId string
    (Computed String) Confluent Multi-Tenant App ID used to access customer Azure resources.
    customerAzureTenantId String
    Customer's Azure Tenant ID.
    confluentMultiTenantAppId String
    (Computed String) Confluent Multi-Tenant App ID used to access customer Azure resources.
    customerAzureTenantId string
    Customer's Azure Tenant ID.
    confluentMultiTenantAppId string
    (Computed String) Confluent Multi-Tenant App ID used to access customer Azure resources.
    customer_azure_tenant_id str
    Customer's Azure Tenant ID.
    confluent_multi_tenant_app_id str
    (Computed String) Confluent Multi-Tenant App ID used to access customer Azure resources.
    customerAzureTenantId String
    Customer's Azure Tenant ID.
    confluentMultiTenantAppId String
    (Computed String) Confluent Multi-Tenant App ID used to access customer Azure resources.

    ProviderIntegrationAuthorizationEnvironment, ProviderIntegrationAuthorizationEnvironmentArgs

    Id string
    The ID of the Environment that the Provider Integration belongs to, for example, env-abc123.
    Id string
    The ID of the Environment that the Provider Integration belongs to, for example, env-abc123.
    id String
    The ID of the Environment that the Provider Integration belongs to, for example, env-abc123.
    id string
    The ID of the Environment that the Provider Integration belongs to, for example, env-abc123.
    id str
    The ID of the Environment that the Provider Integration belongs to, for example, env-abc123.
    id String
    The ID of the Environment that the Provider Integration belongs to, for example, env-abc123.

    ProviderIntegrationAuthorizationGcp, ProviderIntegrationAuthorizationGcpArgs

    CustomerGoogleServiceAccount string

    Customer's Google Service Account that Confluent Cloud impersonates.

    Note: Exactly one of azure or gcp configuration blocks must be provided, matching the cloud provider of the associated provider integration.

    GoogleServiceAccount string
    (Computed String) Google Service Account that Confluent Cloud uses for impersonation.
    CustomerGoogleServiceAccount string

    Customer's Google Service Account that Confluent Cloud impersonates.

    Note: Exactly one of azure or gcp configuration blocks must be provided, matching the cloud provider of the associated provider integration.

    GoogleServiceAccount string
    (Computed String) Google Service Account that Confluent Cloud uses for impersonation.
    customerGoogleServiceAccount String

    Customer's Google Service Account that Confluent Cloud impersonates.

    Note: Exactly one of azure or gcp configuration blocks must be provided, matching the cloud provider of the associated provider integration.

    googleServiceAccount String
    (Computed String) Google Service Account that Confluent Cloud uses for impersonation.
    customerGoogleServiceAccount string

    Customer's Google Service Account that Confluent Cloud impersonates.

    Note: Exactly one of azure or gcp configuration blocks must be provided, matching the cloud provider of the associated provider integration.

    googleServiceAccount string
    (Computed String) Google Service Account that Confluent Cloud uses for impersonation.
    customer_google_service_account str

    Customer's Google Service Account that Confluent Cloud impersonates.

    Note: Exactly one of azure or gcp configuration blocks must be provided, matching the cloud provider of the associated provider integration.

    google_service_account str
    (Computed String) Google Service Account that Confluent Cloud uses for impersonation.
    customerGoogleServiceAccount String

    Customer's Google Service Account that Confluent Cloud impersonates.

    Note: Exactly one of azure or gcp configuration blocks must be provided, matching the cloud provider of the associated provider integration.

    googleServiceAccount String
    (Computed String) Google Service Account that Confluent Cloud uses for impersonation.

    Import

    Note: CONFLUENT_CLOUD_API_KEY and CONFLUENT_CLOUD_API_SECRET environment variables must be set before importing a Provider Integration Authorization.

    You can import a Provider Integration Authorization by using Environment ID and Provider Integration ID, in the format <Environment ID>/<Provider Integration ID>. The following example shows how to import a Provider Integration Authorization:

    $ export CONFLUENT_CLOUD_API_KEY="<cloud_api_key>"
$ export CONFLUENT_CLOUD_API_SECRET="<cloud_api_secret>"
$ pulumi import confluentcloud:index/providerIntegrationAuthorization:ProviderIntegrationAuthorization main env-abc123/cspi-4xg0q

    !> Warning: Do not forget to delete terminal command history afterwards for security purposes.

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Confluent Cloud pulumi/pulumi-confluentcloud
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the confluent Terraform Provider.
    confluentcloud logo
    Viewing docs for Confluent v2.59.0
    published on Friday, Mar 6, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-confluentcloud
      Try Pulumi Cloud free. Your team will thank you.