Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Elasticstack Provider
  4. API Docs
  5. FleetManagedIntegration
Viewing docs for elasticstack 0.16.5
published on Sunday, Sep 13, 2026 by elastic
Schema (JSON)
elastic/terraform-provider-elasticstack

elasticstack.FleetManagedIntegration

Viewing docs for elasticstack 0.16.5
published on Sunday, Sep 13, 2026 by elastic
Schema (JSON)
elastic/terraform-provider-elasticstack

    Manages Fleet managed integrations, which provision agent runtime capacity in Elastic’s own cloud infrastructure instead of on a host running Elastic Agent. The underlying Fleet managed integrations API requires Kibana 9.5.0 or later. It is only supported on Elastic Cloud Hosted and Serverless (Security or Observability) deployments; self-managed (on-premises) Kibana is not supported, and this resource refuses to run against a self-managed deployment it can positively identify as such.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as elasticstack from "@pulumi/elasticstack";

// Fleet managed integration: Cloud Security Posture Management (CSPM) for an
// AWS account. Elastic provisions and runs the agent runtime in its own cloud
// infrastructure -- no Elastic Agent host is required.
//
// This resource is only supported on Elastic Cloud Hosted and Serverless
// (Security or Observability) deployments running Kibana 9.5.0+.
const cspmAws = new elasticstack.FleetManagedIntegration("cspm_aws", {
    name: "Agentless CSPM - AWS Production",
    description: "Cloud Security Posture Management for the AWS production account",
    policyTemplate: "cspm",
    "package": {
        name: "cloud_security_posture",
        version: "3.4.0",
    },
    varsJson: JSON.stringify({
        posture: "cspm",
        deployment: "aws",
    }),
    varGroupSelections: {
        deployment: "aws",
    },
    inputs: {
        "cspm-cloudbeat/cis_aws": {
            enabled: true,
            streams: {
                "cloud_security_posture.findings": {
                    enabled: true,
                    vars: JSON.stringify({
                        role_arn: "arn:aws:iam::123456789012:role/elastic-cspm-role",
                        "aws.credentials.type": "assume_role",
                        "aws.account_type": "single-account",
                    }),
                },
            },
        },
    },
    cloudConnector: {
        enabled: true,
        cloudConnectorId: "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
        name: "aws-production-cross-account",
        targetCsp: "aws",
    },
    globalDataTags: {
        env: {
            stringValue: "production",
        },
        team: {
            stringValue: "cloud-security",
        },
    },
    additionalDatastreamsPermissions: ["logs-custom-*"],
});

    import pulumi
import json
import pulumi_elasticstack as elasticstack

# Fleet managed integration: Cloud Security Posture Management (CSPM) for an
# AWS account. Elastic provisions and runs the agent runtime in its own cloud
# infrastructure -- no Elastic Agent host is required.
#
# This resource is only supported on Elastic Cloud Hosted and Serverless
# (Security or Observability) deployments running Kibana 9.5.0+.
cspm_aws = elasticstack.FleetManagedIntegration("cspm_aws",
    name="Agentless CSPM - AWS Production",
    description="Cloud Security Posture Management for the AWS production account",
    policy_template="cspm",
    package={
        "name": "cloud_security_posture",
        "version": "3.4.0",
    },
    vars_json=json.dumps({
        "posture": "cspm",
        "deployment": "aws",
    }),
    var_group_selections={
        "deployment": "aws",
    },
    inputs={
        "cspm-cloudbeat/cis_aws": {
            "enabled": True,
            "streams": {
                "cloud_security_posture.findings": {
                    "enabled": True,
                    "vars": json.dumps({
                        "role_arn": "arn:aws:iam::123456789012:role/elastic-cspm-role",
                        "aws.credentials.type": "assume_role",
                        "aws.account_type": "single-account",
                    }),
                },
            },
        },
    },
    cloud_connector={
        "enabled": True,
        "cloud_connector_id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
        "name": "aws-production-cross-account",
        "target_csp": "aws",
    },
    global_data_tags={
        "env": {
            "string_value": "production",
        },
        "team": {
            "string_value": "cloud-security",
        },
    },
    additional_datastreams_permissions=["logs-custom-*"])

    package main

import (
	"encoding/json"

	"github.com/pulumi/pulumi-terraform-provider/sdks/go/elasticstack/elasticstack"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		tmpJSON0, err := json.Marshal(map[string]interface{}{
			"posture":    "cspm",
			"deployment": "aws",
		})
		if err != nil {
			return err
		}
		json0 := string(tmpJSON0)
		tmpJSON1, err := json.Marshal(map[string]interface{}{
			"role_arn":             "arn:aws:iam::123456789012:role/elastic-cspm-role",
			"aws.credentials.type": "assume_role",
			"aws.account_type":     "single-account",
		})
		if err != nil {
			return err
		}
		json1 := string(tmpJSON1)
		// Fleet managed integration: Cloud Security Posture Management (CSPM) for an
		// AWS account. Elastic provisions and runs the agent runtime in its own cloud
		// infrastructure -- no Elastic Agent host is required.
		//
		// This resource is only supported on Elastic Cloud Hosted and Serverless
		// (Security or Observability) deployments running Kibana 9.5.0+.
		_, err = elasticstack.NewFleetManagedIntegration(ctx, "cspm_aws", &elasticstack.FleetManagedIntegrationArgs{
			Name:           pulumi.String("Agentless CSPM - AWS Production"),
			Description:    pulumi.String("Cloud Security Posture Management for the AWS production account"),
			PolicyTemplate: pulumi.String("cspm"),
			Package: &elasticstack.FleetManagedIntegrationPackageArgs{
				Name:    pulumi.String("cloud_security_posture"),
				Version: pulumi.String("3.4.0"),
			},
			VarsJson: pulumi.String(json0),
			VarGroupSelections: pulumi.StringMap{
				"deployment": pulumi.String("aws"),
			},
			Inputs: elasticstack.FleetManagedIntegrationInputsMap{
				"cspm-cloudbeat/cis_aws": &elasticstack.FleetManagedIntegrationInputsArgs{
					Enabled: pulumi.Bool(true),
					Streams: elasticstack.FleetManagedIntegrationInputsStreamsMap{
						"cloud_security_posture.findings": &elasticstack.FleetManagedIntegrationInputsStreamsArgs{
							Enabled: pulumi.Bool(true),
							Vars:    pulumi.String(json1),
						},
					},
				},
			},
			CloudConnector: &elasticstack.FleetManagedIntegrationCloudConnectorArgs{
				Enabled:          pulumi.Bool(true),
				CloudConnectorId: pulumi.String("a1b2c3d4-e5f6-7890-abcd-ef1234567890"),
				Name:             pulumi.String("aws-production-cross-account"),
				TargetCsp:        pulumi.String("aws"),
			},
			GlobalDataTags: elasticstack.FleetManagedIntegrationGlobalDataTagsMap{
				"env": &elasticstack.FleetManagedIntegrationGlobalDataTagsArgs{
					StringValue: pulumi.String("production"),
				},
				"team": &elasticstack.FleetManagedIntegrationGlobalDataTagsArgs{
					StringValue: pulumi.String("cloud-security"),
				},
			},
			AdditionalDatastreamsPermissions: pulumi.StringArray{
				pulumi.String("logs-custom-*"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using System.Text.Json;
using Pulumi;
using Elasticstack = Pulumi.Elasticstack;

return await Deployment.RunAsync(() => 
{
    // Fleet managed integration: Cloud Security Posture Management (CSPM) for an
    // AWS account. Elastic provisions and runs the agent runtime in its own cloud
    // infrastructure -- no Elastic Agent host is required.
    //
    // This resource is only supported on Elastic Cloud Hosted and Serverless
    // (Security or Observability) deployments running Kibana 9.5.0+.
    var cspmAws = new Elasticstack.FleetManagedIntegration("cspm_aws", new()
    {
        Name = "Agentless CSPM - AWS Production",
        Description = "Cloud Security Posture Management for the AWS production account",
        PolicyTemplate = "cspm",
        Package = new Elasticstack.Inputs.FleetManagedIntegrationPackageArgs
        {
            Name = "cloud_security_posture",
            Version = "3.4.0",
        },
        VarsJson = JsonSerializer.Serialize(new Dictionary<string, object?>
        {
            ["posture"] = "cspm",
            ["deployment"] = "aws",
        }),
        VarGroupSelections = 
        {
            { "deployment", "aws" },
        },
        Inputs = 
        {
            { "cspm-cloudbeat/cis_aws", new Elasticstack.Inputs.FleetManagedIntegrationInputsArgs
            {
                Enabled = true,
                Streams = 
                {
                    { "cloud_security_posture.findings", new Elasticstack.Inputs.FleetManagedIntegrationInputsStreamsArgs
                    {
                        Enabled = true,
                        Vars = JsonSerializer.Serialize(new Dictionary<string, object?>
                        {
                            ["role_arn"] = "arn:aws:iam::123456789012:role/elastic-cspm-role",
                            ["aws.credentials.type"] = "assume_role",
                            ["aws.account_type"] = "single-account",
                        }),
                    } },
                },
            } },
        },
        CloudConnector = new Elasticstack.Inputs.FleetManagedIntegrationCloudConnectorArgs
        {
            Enabled = true,
            CloudConnectorId = "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
            Name = "aws-production-cross-account",
            TargetCsp = "aws",
        },
        GlobalDataTags = 
        {
            { "env", new Elasticstack.Inputs.FleetManagedIntegrationGlobalDataTagsArgs
            {
                StringValue = "production",
            } },
            { "team", new Elasticstack.Inputs.FleetManagedIntegrationGlobalDataTagsArgs
            {
                StringValue = "cloud-security",
            } },
        },
        AdditionalDatastreamsPermissions = new[]
        {
            "logs-custom-*",
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.elasticstack.FleetManagedIntegration;
import com.pulumi.elasticstack.FleetManagedIntegrationArgs;
import com.pulumi.elasticstack.inputs.FleetManagedIntegrationPackageArgs;
import com.pulumi.elasticstack.inputs.FleetManagedIntegrationCloudConnectorArgs;
import static com.pulumi.codegen.internal.Serialization.*;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        // Fleet managed integration: Cloud Security Posture Management (CSPM) for an
        // AWS account. Elastic provisions and runs the agent runtime in its own cloud
        // infrastructure -- no Elastic Agent host is required.
        //
        // This resource is only supported on Elastic Cloud Hosted and Serverless
        // (Security or Observability) deployments running Kibana 9.5.0+.
        var cspmAws = new FleetManagedIntegration("cspmAws", FleetManagedIntegrationArgs.builder()
            .name("Agentless CSPM - AWS Production")
            .description("Cloud Security Posture Management for the AWS production account")
            .policyTemplate("cspm")
            .package_(FleetManagedIntegrationPackageArgs.builder()
                .name("cloud_security_posture")
                .version("3.4.0")
                .build())
            .varsJson(serializeJson(
                jsonObject(
                    jsonProperty("posture", "cspm"),
                    jsonProperty("deployment", "aws")
                )))
            .varGroupSelections(Map.of("deployment", "aws"))
            .inputs(Map.of("cspm-cloudbeat/cis_aws", FleetManagedIntegrationInputsArgs.builder()
                .enabled(true)
                .streams(Map.of("cloud_security_posture.findings", FleetManagedIntegrationInputsStreamsArgs.builder()
                    .enabled(true)
                    .vars(serializeJson(
                        jsonObject(
                            jsonProperty("role_arn", "arn:aws:iam::123456789012:role/elastic-cspm-role"),
                            jsonProperty("aws.credentials.type", "assume_role"),
                            jsonProperty("aws.account_type", "single-account")
                        )))
                    .build()))
                .build()))
            .cloudConnector(FleetManagedIntegrationCloudConnectorArgs.builder()
                .enabled(true)
                .cloudConnectorId("a1b2c3d4-e5f6-7890-abcd-ef1234567890")
                .name("aws-production-cross-account")
                .targetCsp("aws")
                .build())
            .globalDataTags(Map.ofEntries(
                Map.entry("env", FleetManagedIntegrationGlobalDataTagsArgs.builder()
                    .stringValue("production")
                    .build()),
                Map.entry("team", FleetManagedIntegrationGlobalDataTagsArgs.builder()
                    .stringValue("cloud-security")
                    .build())
            ))
            .additionalDatastreamsPermissions("logs-custom-*")
            .build());

    }
}

    resources:
  # Fleet managed integration: Cloud Security Posture Management (CSPM) for an
  # AWS account. Elastic provisions and runs the agent runtime in its own cloud
  # infrastructure -- no Elastic Agent host is required.
  #
  # This resource is only supported on Elastic Cloud Hosted and Serverless
  # (Security or Observability) deployments running Kibana 9.5.0+.
  cspmAws:
    type: elasticstack:FleetManagedIntegration
    name: cspm_aws
    properties:
      name: Agentless CSPM - AWS Production
      description: Cloud Security Posture Management for the AWS production account
      policyTemplate: cspm
      package:
        name: cloud_security_posture
        version: 3.4.0
      varsJson:
        fn::toJSON:
          posture: cspm
          deployment: aws
      varGroupSelections:
        deployment: aws
      inputs:
        cspm-cloudbeat/cis_aws:
          enabled: true
          streams:
            cloud_security_posture.findings:
              enabled: true
              vars:
                fn::toJSON:
                  role_arn: arn:aws:iam::123456789012:role/elastic-cspm-role
                  aws.credentials.type: assume_role
                  aws.account_type: single-account
      cloudConnector:
        enabled: true
        cloudConnectorId: a1b2c3d4-e5f6-7890-abcd-ef1234567890
        name: aws-production-cross-account
        targetCsp: aws
      globalDataTags:
        env:
          stringValue: production
        team:
          stringValue: cloud-security
      additionalDatastreamsPermissions:
        - logs-custom-*

    Example coming soon!

    Create FleetManagedIntegration Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new FleetManagedIntegration(name: string, args: FleetManagedIntegrationArgs, opts?: CustomResourceOptions);
    @overload
def FleetManagedIntegration(resource_name: str,
                            args: FleetManagedIntegrationArgs,
                            opts: Optional[ResourceOptions] = None)

@overload
def FleetManagedIntegration(resource_name: str,
                            opts: Optional[ResourceOptions] = None,
                            package: Optional[FleetManagedIntegrationPackageArgs] = None,
                            kibana_connections: Optional[Sequence[FleetManagedIntegrationKibanaConnectionArgs]] = None,
                            cloud_connector: Optional[FleetManagedIntegrationCloudConnectorArgs] = None,
                            description: Optional[str] = None,
                            force: Optional[bool] = None,
                            force_delete: Optional[bool] = None,
                            global_data_tags: Optional[Mapping[str, FleetManagedIntegrationGlobalDataTagsArgs]] = None,
                            inputs: Optional[Mapping[str, FleetManagedIntegrationInputsArgs]] = None,
                            additional_datastreams_permissions: Optional[Sequence[str]] = None,
                            create_dataset_templates: Optional[bool] = None,
                            name: Optional[str] = None,
                            namespace: Optional[str] = None,
                            policy_id: Optional[str] = None,
                            policy_template: Optional[str] = None,
                            skip_topology_check: Optional[bool] = None,
                            space_ids: Optional[Sequence[str]] = None,
                            timeouts: Optional[FleetManagedIntegrationTimeoutsArgs] = None,
                            var_group_selections: Optional[Mapping[str, str]] = None,
                            vars_json: Optional[str] = None)
    func NewFleetManagedIntegration(ctx *Context, name string, args FleetManagedIntegrationArgs, opts ...ResourceOption) (*FleetManagedIntegration, error)
    public FleetManagedIntegration(string name, FleetManagedIntegrationArgs args, CustomResourceOptions? opts = null)
    public FleetManagedIntegration(String name, FleetManagedIntegrationArgs args)
public FleetManagedIntegration(String name, FleetManagedIntegrationArgs args, CustomResourceOptions options)

    type: elasticstack:FleetManagedIntegration
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "elasticstack_fleet_managed_integration" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args FleetManagedIntegrationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args FleetManagedIntegrationArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args FleetManagedIntegrationArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args FleetManagedIntegrationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args FleetManagedIntegrationArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var fleetManagedIntegrationResource = new Elasticstack.FleetManagedIntegration("fleetManagedIntegrationResource", new()
{
    Package = new Elasticstack.Inputs.FleetManagedIntegrationPackageArgs
    {
        Name = "string",
        Version = "string",
        Title = "string",
    },
    KibanaConnections = new[]
    {
        new Elasticstack.Inputs.FleetManagedIntegrationKibanaConnectionArgs
        {
            ApiKey = "string",
            BearerToken = "string",
            CaCerts = new[]
            {
                "string",
            },
            Endpoints = new[]
            {
                "string",
            },
            Insecure = false,
            Password = "string",
            Username = "string",
        },
    },
    CloudConnector = new Elasticstack.Inputs.FleetManagedIntegrationCloudConnectorArgs
    {
        CloudConnectorId = "string",
        Enabled = false,
        Name = "string",
        TargetCsp = "string",
    },
    Description = "string",
    Force = false,
    ForceDelete = false,
    GlobalDataTags = 
    {
        { "string", new Elasticstack.Inputs.FleetManagedIntegrationGlobalDataTagsArgs
        {
            NumberValue = 0.0,
            StringValue = "string",
        } },
    },
    Inputs = 
    {
        { "string", new Elasticstack.Inputs.FleetManagedIntegrationInputsArgs
        {
            Condition = "string",
            Enabled = false,
            Streams = 
            {
                { "string", new Elasticstack.Inputs.FleetManagedIntegrationInputsStreamsArgs
                {
                    Condition = "string",
                    Enabled = false,
                    Vars = "string",
                } },
            },
            Vars = "string",
        } },
    },
    AdditionalDatastreamsPermissions = new[]
    {
        "string",
    },
    CreateDatasetTemplates = false,
    Name = "string",
    Namespace = "string",
    PolicyId = "string",
    PolicyTemplate = "string",
    SkipTopologyCheck = false,
    SpaceIds = new[]
    {
        "string",
    },
    Timeouts = new Elasticstack.Inputs.FleetManagedIntegrationTimeoutsArgs
    {
        Create = "string",
        Delete = "string",
        Read = "string",
        Update = "string",
    },
    VarGroupSelections = 
    {
        { "string", "string" },
    },
    VarsJson = "string",
});

    example, err := elasticstack.NewFleetManagedIntegration(ctx, "fleetManagedIntegrationResource", &elasticstack.FleetManagedIntegrationArgs{
	Package: &elasticstack.FleetManagedIntegrationPackageArgs{
		Name:    pulumi.String("string"),
		Version: pulumi.String("string"),
		Title:   pulumi.String("string"),
	},
	KibanaConnections: elasticstack.FleetManagedIntegrationKibanaConnectionArray{
		&elasticstack.FleetManagedIntegrationKibanaConnectionArgs{
			ApiKey:      pulumi.String("string"),
			BearerToken: pulumi.String("string"),
			CaCerts: pulumi.StringArray{
				pulumi.String("string"),
			},
			Endpoints: pulumi.StringArray{
				pulumi.String("string"),
			},
			Insecure: pulumi.Bool(false),
			Password: pulumi.String("string"),
			Username: pulumi.String("string"),
		},
	},
	CloudConnector: &elasticstack.FleetManagedIntegrationCloudConnectorArgs{
		CloudConnectorId: pulumi.String("string"),
		Enabled:          pulumi.Bool(false),
		Name:             pulumi.String("string"),
		TargetCsp:        pulumi.String("string"),
	},
	Description: pulumi.String("string"),
	Force:       pulumi.Bool(false),
	ForceDelete: pulumi.Bool(false),
	GlobalDataTags: elasticstack.FleetManagedIntegrationGlobalDataTagsMap{
		"string": &elasticstack.FleetManagedIntegrationGlobalDataTagsArgs{
			NumberValue: pulumi.Float64(0),
			StringValue: pulumi.String("string"),
		},
	},
	Inputs: elasticstack.FleetManagedIntegrationInputsMap{
		"string": &elasticstack.FleetManagedIntegrationInputsArgs{
			Condition: pulumi.String("string"),
			Enabled:   pulumi.Bool(false),
			Streams: elasticstack.FleetManagedIntegrationInputsStreamsMap{
				"string": &elasticstack.FleetManagedIntegrationInputsStreamsArgs{
					Condition: pulumi.String("string"),
					Enabled:   pulumi.Bool(false),
					Vars:      pulumi.String("string"),
				},
			},
			Vars: pulumi.String("string"),
		},
	},
	AdditionalDatastreamsPermissions: pulumi.StringArray{
		pulumi.String("string"),
	},
	CreateDatasetTemplates: pulumi.Bool(false),
	Name:                   pulumi.String("string"),
	Namespace:              pulumi.String("string"),
	PolicyId:               pulumi.String("string"),
	PolicyTemplate:         pulumi.String("string"),
	SkipTopologyCheck:      pulumi.Bool(false),
	SpaceIds: pulumi.StringArray{
		pulumi.String("string"),
	},
	Timeouts: &elasticstack.FleetManagedIntegrationTimeoutsArgs{
		Create: pulumi.String("string"),
		Delete: pulumi.String("string"),
		Read:   pulumi.String("string"),
		Update: pulumi.String("string"),
	},
	VarGroupSelections: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	VarsJson: pulumi.String("string"),
})

    resource "elasticstack_fleet_managed_integration" "fleetManagedIntegrationResource" {
  lifecycle {
    create_before_destroy = true
  }
  package = {
    name    = "string"
    version = "string"
    title   = "string"
  }
  kibana_connections {
    api_key      = "string"
    bearer_token = "string"
    ca_certs     = ["string"]
    endpoints    = ["string"]
    insecure     = false
    password     = "string"
    username     = "string"
  }
  cloud_connector = {
    cloud_connector_id = "string"
    enabled            = false
    name               = "string"
    target_csp         = "string"
  }
  description  = "string"
  force        = false
  force_delete = false
  global_data_tags = {
    "string" = {
      number_value = 0
      string_value = "string"
    }
  }
  inputs = {
    "string" = {
      condition = "string"
      enabled   = false
      streams = {
        "string" = {
          condition = "string"
          enabled   = false
          vars      = "string"
        }
      }
      vars = "string"
    }
  }
  additional_datastreams_permissions = ["string"]
  create_dataset_templates           = false
  name                               = "string"
  namespace                          = "string"
  policy_id                          = "string"
  policy_template                    = "string"
  skip_topology_check                = false
  space_ids                          = ["string"]
  timeouts = {
    create = "string"
    delete = "string"
    read   = "string"
    update = "string"
  }
  var_group_selections = {
    "string" = "string"
  }
  vars_json = "string"
}

    var fleetManagedIntegrationResource = new FleetManagedIntegration("fleetManagedIntegrationResource", FleetManagedIntegrationArgs.builder()
    .package_(FleetManagedIntegrationPackageArgs.builder()
        .name("string")
        .version("string")
        .title("string")
        .build())
    .kibanaConnections(FleetManagedIntegrationKibanaConnectionArgs.builder()
        .apiKey("string")
        .bearerToken("string")
        .caCerts("string")
        .endpoints("string")
        .insecure(false)
        .password("string")
        .username("string")
        .build())
    .cloudConnector(FleetManagedIntegrationCloudConnectorArgs.builder()
        .cloudConnectorId("string")
        .enabled(false)
        .name("string")
        .targetCsp("string")
        .build())
    .description("string")
    .force(false)
    .forceDelete(false)
    .globalDataTags(Map.of("string", FleetManagedIntegrationGlobalDataTagsArgs.builder()
        .numberValue(0.0)
        .stringValue("string")
        .build()))
    .inputs(Map.of("string", FleetManagedIntegrationInputsArgs.builder()
        .condition("string")
        .enabled(false)
        .streams(Map.of("string", FleetManagedIntegrationInputsStreamsArgs.builder()
            .condition("string")
            .enabled(false)
            .vars("string")
            .build()))
        .vars("string")
        .build()))
    .additionalDatastreamsPermissions("string")
    .createDatasetTemplates(false)
    .name("string")
    .namespace("string")
    .policyId("string")
    .policyTemplate("string")
    .skipTopologyCheck(false)
    .spaceIds("string")
    .timeouts(FleetManagedIntegrationTimeoutsArgs.builder()
        .create("string")
        .delete("string")
        .read("string")
        .update("string")
        .build())
    .varGroupSelections(Map.of("string", "string"))
    .varsJson("string")
    .build());

    fleet_managed_integration_resource = elasticstack.FleetManagedIntegration("fleetManagedIntegrationResource",
    package={
        "name": "string",
        "version": "string",
        "title": "string",
    },
    kibana_connections=[{
        "api_key": "string",
        "bearer_token": "string",
        "ca_certs": ["string"],
        "endpoints": ["string"],
        "insecure": False,
        "password": "string",
        "username": "string",
    }],
    cloud_connector={
        "cloud_connector_id": "string",
        "enabled": False,
        "name": "string",
        "target_csp": "string",
    },
    description="string",
    force=False,
    force_delete=False,
    global_data_tags={
        "string": {
            "number_value": float(0),
            "string_value": "string",
        },
    },
    inputs={
        "string": {
            "condition": "string",
            "enabled": False,
            "streams": {
                "string": {
                    "condition": "string",
                    "enabled": False,
                    "vars": "string",
                },
            },
            "vars": "string",
        },
    },
    additional_datastreams_permissions=["string"],
    create_dataset_templates=False,
    name="string",
    namespace="string",
    policy_id="string",
    policy_template="string",
    skip_topology_check=False,
    space_ids=["string"],
    timeouts={
        "create": "string",
        "delete": "string",
        "read": "string",
        "update": "string",
    },
    var_group_selections={
        "string": "string",
    },
    vars_json="string")

    const fleetManagedIntegrationResource = new elasticstack.FleetManagedIntegration("fleetManagedIntegrationResource", {
    "package": {
        name: "string",
        version: "string",
        title: "string",
    },
    kibanaConnections: [{
        apiKey: "string",
        bearerToken: "string",
        caCerts: ["string"],
        endpoints: ["string"],
        insecure: false,
        password: "string",
        username: "string",
    }],
    cloudConnector: {
        cloudConnectorId: "string",
        enabled: false,
        name: "string",
        targetCsp: "string",
    },
    description: "string",
    force: false,
    forceDelete: false,
    globalDataTags: {
        string: {
            numberValue: 0,
            stringValue: "string",
        },
    },
    inputs: {
        string: {
            condition: "string",
            enabled: false,
            streams: {
                string: {
                    condition: "string",
                    enabled: false,
                    vars: "string",
                },
            },
            vars: "string",
        },
    },
    additionalDatastreamsPermissions: ["string"],
    createDatasetTemplates: false,
    name: "string",
    namespace: "string",
    policyId: "string",
    policyTemplate: "string",
    skipTopologyCheck: false,
    spaceIds: ["string"],
    timeouts: {
        create: "string",
        "delete": "string",
        read: "string",
        update: "string",
    },
    varGroupSelections: {
        string: "string",
    },
    varsJson: "string",
});

    type: elasticstack:FleetManagedIntegration
properties:
    additionalDatastreamsPermissions:
        - string
    cloudConnector:
        cloudConnectorId: string
        enabled: false
        name: string
        targetCsp: string
    createDatasetTemplates: false
    description: string
    force: false
    forceDelete: false
    globalDataTags:
        string:
            numberValue: 0
            stringValue: string
    inputs:
        string:
            condition: string
            enabled: false
            streams:
                string:
                    condition: string
                    enabled: false
                    vars: string
            vars: string
    kibanaConnections:
        - apiKey: string
          bearerToken: string
          caCerts:
            - string
          endpoints:
            - string
          insecure: false
          password: string
          username: string
    name: string
    namespace: string
    package:
        name: string
        title: string
        version: string
    policyId: string
    policyTemplate: string
    skipTopologyCheck: false
    spaceIds:
        - string
    timeouts:
        create: string
        delete: string
        read: string
        update: string
    varGroupSelections:
        string: string
    varsJson: string

    FleetManagedIntegration Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The FleetManagedIntegration resource accepts the following input properties:

    Package FleetManagedIntegrationPackage
    The Fleet integration package this managed integration is based on.
    AdditionalDatastreamsPermissions List<string>
    Additional data stream permissions to grant beyond the package's defaults; updatable in-place.
    CloudConnector FleetManagedIntegrationCloudConnector
    References an existing cloud connector for cross-account access. Changing any field forces replacement of the entire cloud_connector block.
    CreateDatasetTemplates bool
    Whether to create dataset templates when creating the policy. Create-only: sent on the create request only, not read back from the API. Changes after creation are a no-op until the resource is recreated.
    Description string
    The description of the managed integration; updatable in-place. An explicit empty string is rejected: it is indistinguishable from "unset" once round-tripped through the API (Kibana returns an omitted/empty description as "", which this provider folds back to null), so setting description = "" would otherwise produce a permanent, non-converging diff. Omit the attribute instead of setting it to "".
    Force bool
    Force the create operation. Create-only: sent on the create request only and not read back from the API.
    ForceDelete bool
    Force deletion of the policy, passed as ?force=true on the delete request. Defaults to false.
    GlobalDataTags Dictionary<string, FleetManagedIntegrationGlobalDataTagsArgs>
    User-defined tags. Keyed by tag name; each entry must set exactly one of string_value or number_value.
    Inputs Dictionary<string, FleetManagedIntegrationInputsArgs>
    Policy inputs mapped by input type ID; updatable in-place.
    KibanaConnections List<FleetManagedIntegrationKibanaConnection>
    Kibana connection configuration block.
    Name string
    The name of the managed integration; updatable in-place.
    Namespace string
    The namespace of the managed integration; forces replacement on change. An explicit empty string is rejected for the same reason as description: it is indistinguishable from "unset" once round-tripped through the API.
    PolicyId string
    The managed integration ID. Server-assigned if omitted; forces replacement on change.
    PolicyTemplate string
    Policy template within the package, configured at create time. Not returned by GET; preserved from prior config on refresh. Null after import when unavailable. Changing it forces replacement.
    SkipTopologyCheck bool
    Skips the deployment-topology preflight check. Use only if you are certain this is running against a supported Elastic Cloud Hosted or Serverless deployment and the automatic detection is producing a false positive (e.g. due to non-standard network routing such as PrivateLink). Does not weaken version gating (Kibana 9.5.0+ is still enforced) -- it only bypasses the topology heuristic. Defaults to false. Create-only: consulted only during Create and not read back from the API.
    SpaceIds List<string>
    The list of spaces the managed integration belongs to; defaults to ["default"]; forces replacement on change.
    Timeouts FleetManagedIntegrationTimeouts
    VarGroupSelections Dictionary<string, string>
    Top-level variable group selections, mapping group name to selected option; updatable in-place. Modeled at the top level only in v1; per-stream vargroupselections is deferred to a follow-up change.
    VarsJson string
    Integration-level variables as JSON. Variables vary depending on the integration package. Updatable in-place.
    Package FleetManagedIntegrationPackageArgs
    The Fleet integration package this managed integration is based on.
    AdditionalDatastreamsPermissions []string
    Additional data stream permissions to grant beyond the package's defaults; updatable in-place.
    CloudConnector FleetManagedIntegrationCloudConnectorArgs
    References an existing cloud connector for cross-account access. Changing any field forces replacement of the entire cloud_connector block.
    CreateDatasetTemplates bool
    Whether to create dataset templates when creating the policy. Create-only: sent on the create request only, not read back from the API. Changes after creation are a no-op until the resource is recreated.
    Description string
    The description of the managed integration; updatable in-place. An explicit empty string is rejected: it is indistinguishable from "unset" once round-tripped through the API (Kibana returns an omitted/empty description as "", which this provider folds back to null), so setting description = "" would otherwise produce a permanent, non-converging diff. Omit the attribute instead of setting it to "".
    Force bool
    Force the create operation. Create-only: sent on the create request only and not read back from the API.
    ForceDelete bool
    Force deletion of the policy, passed as ?force=true on the delete request. Defaults to false.
    GlobalDataTags map[string]FleetManagedIntegrationGlobalDataTagsArgs
    User-defined tags. Keyed by tag name; each entry must set exactly one of string_value or number_value.
    Inputs map[string]FleetManagedIntegrationInputsArgs
    Policy inputs mapped by input type ID; updatable in-place.
    KibanaConnections []FleetManagedIntegrationKibanaConnectionArgs
    Kibana connection configuration block.
    Name string
    The name of the managed integration; updatable in-place.
    Namespace string
    The namespace of the managed integration; forces replacement on change. An explicit empty string is rejected for the same reason as description: it is indistinguishable from "unset" once round-tripped through the API.
    PolicyId string
    The managed integration ID. Server-assigned if omitted; forces replacement on change.
    PolicyTemplate string
    Policy template within the package, configured at create time. Not returned by GET; preserved from prior config on refresh. Null after import when unavailable. Changing it forces replacement.
    SkipTopologyCheck bool
    Skips the deployment-topology preflight check. Use only if you are certain this is running against a supported Elastic Cloud Hosted or Serverless deployment and the automatic detection is producing a false positive (e.g. due to non-standard network routing such as PrivateLink). Does not weaken version gating (Kibana 9.5.0+ is still enforced) -- it only bypasses the topology heuristic. Defaults to false. Create-only: consulted only during Create and not read back from the API.
    SpaceIds []string
    The list of spaces the managed integration belongs to; defaults to ["default"]; forces replacement on change.
    Timeouts FleetManagedIntegrationTimeoutsArgs
    VarGroupSelections map[string]string
    Top-level variable group selections, mapping group name to selected option; updatable in-place. Modeled at the top level only in v1; per-stream vargroupselections is deferred to a follow-up change.
    VarsJson string
    Integration-level variables as JSON. Variables vary depending on the integration package. Updatable in-place.
    package object
    The Fleet integration package this managed integration is based on.
    additional_datastreams_permissions list(string)
    Additional data stream permissions to grant beyond the package's defaults; updatable in-place.
    cloud_connector object
    References an existing cloud connector for cross-account access. Changing any field forces replacement of the entire cloud_connector block.
    create_dataset_templates bool
    Whether to create dataset templates when creating the policy. Create-only: sent on the create request only, not read back from the API. Changes after creation are a no-op until the resource is recreated.
    description string
    The description of the managed integration; updatable in-place. An explicit empty string is rejected: it is indistinguishable from "unset" once round-tripped through the API (Kibana returns an omitted/empty description as "", which this provider folds back to null), so setting description = "" would otherwise produce a permanent, non-converging diff. Omit the attribute instead of setting it to "".
    force bool
    Force the create operation. Create-only: sent on the create request only and not read back from the API.
    force_delete bool
    Force deletion of the policy, passed as ?force=true on the delete request. Defaults to false.
    global_data_tags map(object)
    User-defined tags. Keyed by tag name; each entry must set exactly one of string_value or number_value.
    inputs map(object)
    Policy inputs mapped by input type ID; updatable in-place.
    kibana_connections list(object)
    Kibana connection configuration block.
    name string
    The name of the managed integration; updatable in-place.
    namespace string
    The namespace of the managed integration; forces replacement on change. An explicit empty string is rejected for the same reason as description: it is indistinguishable from "unset" once round-tripped through the API.
    policy_id string
    The managed integration ID. Server-assigned if omitted; forces replacement on change.
    policy_template string
    Policy template within the package, configured at create time. Not returned by GET; preserved from prior config on refresh. Null after import when unavailable. Changing it forces replacement.
    skip_topology_check bool
    Skips the deployment-topology preflight check. Use only if you are certain this is running against a supported Elastic Cloud Hosted or Serverless deployment and the automatic detection is producing a false positive (e.g. due to non-standard network routing such as PrivateLink). Does not weaken version gating (Kibana 9.5.0+ is still enforced) -- it only bypasses the topology heuristic. Defaults to false. Create-only: consulted only during Create and not read back from the API.
    space_ids list(string)
    The list of spaces the managed integration belongs to; defaults to ["default"]; forces replacement on change.
    timeouts object
    var_group_selections map(string)
    Top-level variable group selections, mapping group name to selected option; updatable in-place. Modeled at the top level only in v1; per-stream vargroupselections is deferred to a follow-up change.
    vars_json string
    Integration-level variables as JSON. Variables vary depending on the integration package. Updatable in-place.
    package_ FleetManagedIntegrationPackage
    The Fleet integration package this managed integration is based on.
    additionalDatastreamsPermissions List<String>
    Additional data stream permissions to grant beyond the package's defaults; updatable in-place.
    cloudConnector FleetManagedIntegrationCloudConnector
    References an existing cloud connector for cross-account access. Changing any field forces replacement of the entire cloud_connector block.
    createDatasetTemplates Boolean
    Whether to create dataset templates when creating the policy. Create-only: sent on the create request only, not read back from the API. Changes after creation are a no-op until the resource is recreated.
    description String
    The description of the managed integration; updatable in-place. An explicit empty string is rejected: it is indistinguishable from "unset" once round-tripped through the API (Kibana returns an omitted/empty description as "", which this provider folds back to null), so setting description = "" would otherwise produce a permanent, non-converging diff. Omit the attribute instead of setting it to "".
    force Boolean
    Force the create operation. Create-only: sent on the create request only and not read back from the API.
    forceDelete Boolean
    Force deletion of the policy, passed as ?force=true on the delete request. Defaults to false.
    globalDataTags Map<String,FleetManagedIntegrationGlobalDataTagsArgs>
    User-defined tags. Keyed by tag name; each entry must set exactly one of string_value or number_value.
    inputs Map<String,FleetManagedIntegrationInputsArgs>
    Policy inputs mapped by input type ID; updatable in-place.
    kibanaConnections List<FleetManagedIntegrationKibanaConnection>
    Kibana connection configuration block.
    name String
    The name of the managed integration; updatable in-place.
    namespace String
    The namespace of the managed integration; forces replacement on change. An explicit empty string is rejected for the same reason as description: it is indistinguishable from "unset" once round-tripped through the API.
    policyId String
    The managed integration ID. Server-assigned if omitted; forces replacement on change.
    policyTemplate String
    Policy template within the package, configured at create time. Not returned by GET; preserved from prior config on refresh. Null after import when unavailable. Changing it forces replacement.
    skipTopologyCheck Boolean
    Skips the deployment-topology preflight check. Use only if you are certain this is running against a supported Elastic Cloud Hosted or Serverless deployment and the automatic detection is producing a false positive (e.g. due to non-standard network routing such as PrivateLink). Does not weaken version gating (Kibana 9.5.0+ is still enforced) -- it only bypasses the topology heuristic. Defaults to false. Create-only: consulted only during Create and not read back from the API.
    spaceIds List<String>
    The list of spaces the managed integration belongs to; defaults to ["default"]; forces replacement on change.
    timeouts FleetManagedIntegrationTimeouts
    varGroupSelections Map<String,String>
    Top-level variable group selections, mapping group name to selected option; updatable in-place. Modeled at the top level only in v1; per-stream vargroupselections is deferred to a follow-up change.
    varsJson String
    Integration-level variables as JSON. Variables vary depending on the integration package. Updatable in-place.
    package FleetManagedIntegrationPackage
    The Fleet integration package this managed integration is based on.
    additionalDatastreamsPermissions string[]
    Additional data stream permissions to grant beyond the package's defaults; updatable in-place.
    cloudConnector FleetManagedIntegrationCloudConnector
    References an existing cloud connector for cross-account access. Changing any field forces replacement of the entire cloud_connector block.
    createDatasetTemplates boolean
    Whether to create dataset templates when creating the policy. Create-only: sent on the create request only, not read back from the API. Changes after creation are a no-op until the resource is recreated.
    description string
    The description of the managed integration; updatable in-place. An explicit empty string is rejected: it is indistinguishable from "unset" once round-tripped through the API (Kibana returns an omitted/empty description as "", which this provider folds back to null), so setting description = "" would otherwise produce a permanent, non-converging diff. Omit the attribute instead of setting it to "".
    force boolean
    Force the create operation. Create-only: sent on the create request only and not read back from the API.
    forceDelete boolean
    Force deletion of the policy, passed as ?force=true on the delete request. Defaults to false.
    globalDataTags {[key: string]: FleetManagedIntegrationGlobalDataTagsArgs}
    User-defined tags. Keyed by tag name; each entry must set exactly one of string_value or number_value.
    inputs {[key: string]: FleetManagedIntegrationInputsArgs}
    Policy inputs mapped by input type ID; updatable in-place.
    kibanaConnections FleetManagedIntegrationKibanaConnection[]
    Kibana connection configuration block.
    name string
    The name of the managed integration; updatable in-place.
    namespace string
    The namespace of the managed integration; forces replacement on change. An explicit empty string is rejected for the same reason as description: it is indistinguishable from "unset" once round-tripped through the API.
    policyId string
    The managed integration ID. Server-assigned if omitted; forces replacement on change.
    policyTemplate string
    Policy template within the package, configured at create time. Not returned by GET; preserved from prior config on refresh. Null after import when unavailable. Changing it forces replacement.
    skipTopologyCheck boolean
    Skips the deployment-topology preflight check. Use only if you are certain this is running against a supported Elastic Cloud Hosted or Serverless deployment and the automatic detection is producing a false positive (e.g. due to non-standard network routing such as PrivateLink). Does not weaken version gating (Kibana 9.5.0+ is still enforced) -- it only bypasses the topology heuristic. Defaults to false. Create-only: consulted only during Create and not read back from the API.
    spaceIds string[]
    The list of spaces the managed integration belongs to; defaults to ["default"]; forces replacement on change.
    timeouts FleetManagedIntegrationTimeouts
    varGroupSelections {[key: string]: string}
    Top-level variable group selections, mapping group name to selected option; updatable in-place. Modeled at the top level only in v1; per-stream vargroupselections is deferred to a follow-up change.
    varsJson string
    Integration-level variables as JSON. Variables vary depending on the integration package. Updatable in-place.
    package FleetManagedIntegrationPackageArgs
    The Fleet integration package this managed integration is based on.
    additional_datastreams_permissions Sequence[str]
    Additional data stream permissions to grant beyond the package's defaults; updatable in-place.
    cloud_connector FleetManagedIntegrationCloudConnectorArgs
    References an existing cloud connector for cross-account access. Changing any field forces replacement of the entire cloud_connector block.
    create_dataset_templates bool
    Whether to create dataset templates when creating the policy. Create-only: sent on the create request only, not read back from the API. Changes after creation are a no-op until the resource is recreated.
    description str
    The description of the managed integration; updatable in-place. An explicit empty string is rejected: it is indistinguishable from "unset" once round-tripped through the API (Kibana returns an omitted/empty description as "", which this provider folds back to null), so setting description = "" would otherwise produce a permanent, non-converging diff. Omit the attribute instead of setting it to "".
    force bool
    Force the create operation. Create-only: sent on the create request only and not read back from the API.
    force_delete bool
    Force deletion of the policy, passed as ?force=true on the delete request. Defaults to false.
    global_data_tags Mapping[str, FleetManagedIntegrationGlobalDataTagsArgs]
    User-defined tags. Keyed by tag name; each entry must set exactly one of string_value or number_value.
    inputs Mapping[str, FleetManagedIntegrationInputsArgs]
    Policy inputs mapped by input type ID; updatable in-place.
    kibana_connections Sequence[FleetManagedIntegrationKibanaConnectionArgs]
    Kibana connection configuration block.
    name str
    The name of the managed integration; updatable in-place.
    namespace str
    The namespace of the managed integration; forces replacement on change. An explicit empty string is rejected for the same reason as description: it is indistinguishable from "unset" once round-tripped through the API.
    policy_id str
    The managed integration ID. Server-assigned if omitted; forces replacement on change.
    policy_template str
    Policy template within the package, configured at create time. Not returned by GET; preserved from prior config on refresh. Null after import when unavailable. Changing it forces replacement.
    skip_topology_check bool
    Skips the deployment-topology preflight check. Use only if you are certain this is running against a supported Elastic Cloud Hosted or Serverless deployment and the automatic detection is producing a false positive (e.g. due to non-standard network routing such as PrivateLink). Does not weaken version gating (Kibana 9.5.0+ is still enforced) -- it only bypasses the topology heuristic. Defaults to false. Create-only: consulted only during Create and not read back from the API.
    space_ids Sequence[str]
    The list of spaces the managed integration belongs to; defaults to ["default"]; forces replacement on change.
    timeouts FleetManagedIntegrationTimeoutsArgs
    var_group_selections Mapping[str, str]
    Top-level variable group selections, mapping group name to selected option; updatable in-place. Modeled at the top level only in v1; per-stream vargroupselections is deferred to a follow-up change.
    vars_json str
    Integration-level variables as JSON. Variables vary depending on the integration package. Updatable in-place.
    package Property Map
    The Fleet integration package this managed integration is based on.
    additionalDatastreamsPermissions List<String>
    Additional data stream permissions to grant beyond the package's defaults; updatable in-place.
    cloudConnector Property Map
    References an existing cloud connector for cross-account access. Changing any field forces replacement of the entire cloud_connector block.
    createDatasetTemplates Boolean
    Whether to create dataset templates when creating the policy. Create-only: sent on the create request only, not read back from the API. Changes after creation are a no-op until the resource is recreated.
    description String
    The description of the managed integration; updatable in-place. An explicit empty string is rejected: it is indistinguishable from "unset" once round-tripped through the API (Kibana returns an omitted/empty description as "", which this provider folds back to null), so setting description = "" would otherwise produce a permanent, non-converging diff. Omit the attribute instead of setting it to "".
    force Boolean
    Force the create operation. Create-only: sent on the create request only and not read back from the API.
    forceDelete Boolean
    Force deletion of the policy, passed as ?force=true on the delete request. Defaults to false.
    globalDataTags Map<Property Map>
    User-defined tags. Keyed by tag name; each entry must set exactly one of string_value or number_value.
    inputs Map<Property Map>
    Policy inputs mapped by input type ID; updatable in-place.
    kibanaConnections List<Property Map>
    Kibana connection configuration block.
    name String
    The name of the managed integration; updatable in-place.
    namespace String
    The namespace of the managed integration; forces replacement on change. An explicit empty string is rejected for the same reason as description: it is indistinguishable from "unset" once round-tripped through the API.
    policyId String
    The managed integration ID. Server-assigned if omitted; forces replacement on change.
    policyTemplate String
    Policy template within the package, configured at create time. Not returned by GET; preserved from prior config on refresh. Null after import when unavailable. Changing it forces replacement.
    skipTopologyCheck Boolean
    Skips the deployment-topology preflight check. Use only if you are certain this is running against a supported Elastic Cloud Hosted or Serverless deployment and the automatic detection is producing a false positive (e.g. due to non-standard network routing such as PrivateLink). Does not weaken version gating (Kibana 9.5.0+ is still enforced) -- it only bypasses the topology heuristic. Defaults to false. Create-only: consulted only during Create and not read back from the API.
    spaceIds List<String>
    The list of spaces the managed integration belongs to; defaults to ["default"]; forces replacement on change.
    timeouts Property Map
    varGroupSelections Map<String>
    Top-level variable group selections, mapping group name to selected option; updatable in-place. Modeled at the top level only in v1; per-stream vargroupselections is deferred to a follow-up change.
    varsJson String
    Integration-level variables as JSON. Variables vary depending on the integration package. Updatable in-place.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the FleetManagedIntegration resource produces the following output properties:

    CreatedAt string
    The creation timestamp of the managed integration (ISO 8601).
    Id string
    The provider-assigned unique ID for this managed resource.
    UpdatedAt string
    The last-updated timestamp of the managed integration (ISO 8601).
    CreatedAt string
    The creation timestamp of the managed integration (ISO 8601).
    Id string
    The provider-assigned unique ID for this managed resource.
    UpdatedAt string
    The last-updated timestamp of the managed integration (ISO 8601).
    created_at string
    The creation timestamp of the managed integration (ISO 8601).
    id string
    The provider-assigned unique ID for this managed resource.
    updated_at string
    The last-updated timestamp of the managed integration (ISO 8601).
    createdAt String
    The creation timestamp of the managed integration (ISO 8601).
    id String
    The provider-assigned unique ID for this managed resource.
    updatedAt String
    The last-updated timestamp of the managed integration (ISO 8601).
    createdAt string
    The creation timestamp of the managed integration (ISO 8601).
    id string
    The provider-assigned unique ID for this managed resource.
    updatedAt string
    The last-updated timestamp of the managed integration (ISO 8601).
    created_at str
    The creation timestamp of the managed integration (ISO 8601).
    id str
    The provider-assigned unique ID for this managed resource.
    updated_at str
    The last-updated timestamp of the managed integration (ISO 8601).
    createdAt String
    The creation timestamp of the managed integration (ISO 8601).
    id String
    The provider-assigned unique ID for this managed resource.
    updatedAt String
    The last-updated timestamp of the managed integration (ISO 8601).

    Look up Existing FleetManagedIntegration Resource

    Get an existing FleetManagedIntegration resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: FleetManagedIntegrationState, opts?: CustomResourceOptions): FleetManagedIntegration
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        additional_datastreams_permissions: Optional[Sequence[str]] = None,
        cloud_connector: Optional[FleetManagedIntegrationCloudConnectorArgs] = None,
        create_dataset_templates: Optional[bool] = None,
        created_at: Optional[str] = None,
        description: Optional[str] = None,
        force: Optional[bool] = None,
        force_delete: Optional[bool] = None,
        global_data_tags: Optional[Mapping[str, FleetManagedIntegrationGlobalDataTagsArgs]] = None,
        inputs: Optional[Mapping[str, FleetManagedIntegrationInputsArgs]] = None,
        kibana_connections: Optional[Sequence[FleetManagedIntegrationKibanaConnectionArgs]] = None,
        name: Optional[str] = None,
        namespace: Optional[str] = None,
        package: Optional[FleetManagedIntegrationPackageArgs] = None,
        policy_id: Optional[str] = None,
        policy_template: Optional[str] = None,
        skip_topology_check: Optional[bool] = None,
        space_ids: Optional[Sequence[str]] = None,
        timeouts: Optional[FleetManagedIntegrationTimeoutsArgs] = None,
        updated_at: Optional[str] = None,
        var_group_selections: Optional[Mapping[str, str]] = None,
        vars_json: Optional[str] = None) -> FleetManagedIntegration
    func GetFleetManagedIntegration(ctx *Context, name string, id IDInput, state *FleetManagedIntegrationState, opts ...ResourceOption) (*FleetManagedIntegration, error)
    public static FleetManagedIntegration Get(string name, Input<string> id, FleetManagedIntegrationState? state, CustomResourceOptions? opts = null)
    public static FleetManagedIntegration get(String name, Output<String> id, FleetManagedIntegrationState state, CustomResourceOptions options)
    resources:  _:    type: elasticstack:FleetManagedIntegration    get:      id: ${id}
    import {
  to = elasticstack_fleet_managed_integration.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AdditionalDatastreamsPermissions List<string>
    Additional data stream permissions to grant beyond the package's defaults; updatable in-place.
    CloudConnector FleetManagedIntegrationCloudConnector
    References an existing cloud connector for cross-account access. Changing any field forces replacement of the entire cloud_connector block.
    CreateDatasetTemplates bool
    Whether to create dataset templates when creating the policy. Create-only: sent on the create request only, not read back from the API. Changes after creation are a no-op until the resource is recreated.
    CreatedAt string
    The creation timestamp of the managed integration (ISO 8601).
    Description string
    The description of the managed integration; updatable in-place. An explicit empty string is rejected: it is indistinguishable from "unset" once round-tripped through the API (Kibana returns an omitted/empty description as "", which this provider folds back to null), so setting description = "" would otherwise produce a permanent, non-converging diff. Omit the attribute instead of setting it to "".
    Force bool
    Force the create operation. Create-only: sent on the create request only and not read back from the API.
    ForceDelete bool
    Force deletion of the policy, passed as ?force=true on the delete request. Defaults to false.
    GlobalDataTags Dictionary<string, FleetManagedIntegrationGlobalDataTagsArgs>
    User-defined tags. Keyed by tag name; each entry must set exactly one of string_value or number_value.
    Inputs Dictionary<string, FleetManagedIntegrationInputsArgs>
    Policy inputs mapped by input type ID; updatable in-place.
    KibanaConnections List<FleetManagedIntegrationKibanaConnection>
    Kibana connection configuration block.
    Name string
    The name of the managed integration; updatable in-place.
    Namespace string
    The namespace of the managed integration; forces replacement on change. An explicit empty string is rejected for the same reason as description: it is indistinguishable from "unset" once round-tripped through the API.
    Package FleetManagedIntegrationPackage
    The Fleet integration package this managed integration is based on.
    PolicyId string
    The managed integration ID. Server-assigned if omitted; forces replacement on change.
    PolicyTemplate string
    Policy template within the package, configured at create time. Not returned by GET; preserved from prior config on refresh. Null after import when unavailable. Changing it forces replacement.
    SkipTopologyCheck bool
    Skips the deployment-topology preflight check. Use only if you are certain this is running against a supported Elastic Cloud Hosted or Serverless deployment and the automatic detection is producing a false positive (e.g. due to non-standard network routing such as PrivateLink). Does not weaken version gating (Kibana 9.5.0+ is still enforced) -- it only bypasses the topology heuristic. Defaults to false. Create-only: consulted only during Create and not read back from the API.
    SpaceIds List<string>
    The list of spaces the managed integration belongs to; defaults to ["default"]; forces replacement on change.
    Timeouts FleetManagedIntegrationTimeouts
    UpdatedAt string
    The last-updated timestamp of the managed integration (ISO 8601).
    VarGroupSelections Dictionary<string, string>
    Top-level variable group selections, mapping group name to selected option; updatable in-place. Modeled at the top level only in v1; per-stream vargroupselections is deferred to a follow-up change.
    VarsJson string
    Integration-level variables as JSON. Variables vary depending on the integration package. Updatable in-place.
    AdditionalDatastreamsPermissions []string
    Additional data stream permissions to grant beyond the package's defaults; updatable in-place.
    CloudConnector FleetManagedIntegrationCloudConnectorArgs
    References an existing cloud connector for cross-account access. Changing any field forces replacement of the entire cloud_connector block.
    CreateDatasetTemplates bool
    Whether to create dataset templates when creating the policy. Create-only: sent on the create request only, not read back from the API. Changes after creation are a no-op until the resource is recreated.
    CreatedAt string
    The creation timestamp of the managed integration (ISO 8601).
    Description string
    The description of the managed integration; updatable in-place. An explicit empty string is rejected: it is indistinguishable from "unset" once round-tripped through the API (Kibana returns an omitted/empty description as "", which this provider folds back to null), so setting description = "" would otherwise produce a permanent, non-converging diff. Omit the attribute instead of setting it to "".
    Force bool
    Force the create operation. Create-only: sent on the create request only and not read back from the API.
    ForceDelete bool
    Force deletion of the policy, passed as ?force=true on the delete request. Defaults to false.
    GlobalDataTags map[string]FleetManagedIntegrationGlobalDataTagsArgs
    User-defined tags. Keyed by tag name; each entry must set exactly one of string_value or number_value.
    Inputs map[string]FleetManagedIntegrationInputsArgs
    Policy inputs mapped by input type ID; updatable in-place.
    KibanaConnections []FleetManagedIntegrationKibanaConnectionArgs
    Kibana connection configuration block.
    Name string
    The name of the managed integration; updatable in-place.
    Namespace string
    The namespace of the managed integration; forces replacement on change. An explicit empty string is rejected for the same reason as description: it is indistinguishable from "unset" once round-tripped through the API.
    Package FleetManagedIntegrationPackageArgs
    The Fleet integration package this managed integration is based on.
    PolicyId string
    The managed integration ID. Server-assigned if omitted; forces replacement on change.
    PolicyTemplate string
    Policy template within the package, configured at create time. Not returned by GET; preserved from prior config on refresh. Null after import when unavailable. Changing it forces replacement.
    SkipTopologyCheck bool
    Skips the deployment-topology preflight check. Use only if you are certain this is running against a supported Elastic Cloud Hosted or Serverless deployment and the automatic detection is producing a false positive (e.g. due to non-standard network routing such as PrivateLink). Does not weaken version gating (Kibana 9.5.0+ is still enforced) -- it only bypasses the topology heuristic. Defaults to false. Create-only: consulted only during Create and not read back from the API.
    SpaceIds []string
    The list of spaces the managed integration belongs to; defaults to ["default"]; forces replacement on change.
    Timeouts FleetManagedIntegrationTimeoutsArgs
    UpdatedAt string
    The last-updated timestamp of the managed integration (ISO 8601).
    VarGroupSelections map[string]string
    Top-level variable group selections, mapping group name to selected option; updatable in-place. Modeled at the top level only in v1; per-stream vargroupselections is deferred to a follow-up change.
    VarsJson string
    Integration-level variables as JSON. Variables vary depending on the integration package. Updatable in-place.
    additional_datastreams_permissions list(string)
    Additional data stream permissions to grant beyond the package's defaults; updatable in-place.
    cloud_connector object
    References an existing cloud connector for cross-account access. Changing any field forces replacement of the entire cloud_connector block.
    create_dataset_templates bool
    Whether to create dataset templates when creating the policy. Create-only: sent on the create request only, not read back from the API. Changes after creation are a no-op until the resource is recreated.
    created_at string
    The creation timestamp of the managed integration (ISO 8601).
    description string
    The description of the managed integration; updatable in-place. An explicit empty string is rejected: it is indistinguishable from "unset" once round-tripped through the API (Kibana returns an omitted/empty description as "", which this provider folds back to null), so setting description = "" would otherwise produce a permanent, non-converging diff. Omit the attribute instead of setting it to "".
    force bool
    Force the create operation. Create-only: sent on the create request only and not read back from the API.
    force_delete bool
    Force deletion of the policy, passed as ?force=true on the delete request. Defaults to false.
    global_data_tags map(object)
    User-defined tags. Keyed by tag name; each entry must set exactly one of string_value or number_value.
    inputs map(object)
    Policy inputs mapped by input type ID; updatable in-place.
    kibana_connections list(object)
    Kibana connection configuration block.
    name string
    The name of the managed integration; updatable in-place.
    namespace string
    The namespace of the managed integration; forces replacement on change. An explicit empty string is rejected for the same reason as description: it is indistinguishable from "unset" once round-tripped through the API.
    package object
    The Fleet integration package this managed integration is based on.
    policy_id string
    The managed integration ID. Server-assigned if omitted; forces replacement on change.
    policy_template string
    Policy template within the package, configured at create time. Not returned by GET; preserved from prior config on refresh. Null after import when unavailable. Changing it forces replacement.
    skip_topology_check bool
    Skips the deployment-topology preflight check. Use only if you are certain this is running against a supported Elastic Cloud Hosted or Serverless deployment and the automatic detection is producing a false positive (e.g. due to non-standard network routing such as PrivateLink). Does not weaken version gating (Kibana 9.5.0+ is still enforced) -- it only bypasses the topology heuristic. Defaults to false. Create-only: consulted only during Create and not read back from the API.
    space_ids list(string)
    The list of spaces the managed integration belongs to; defaults to ["default"]; forces replacement on change.
    timeouts object
    updated_at string
    The last-updated timestamp of the managed integration (ISO 8601).
    var_group_selections map(string)
    Top-level variable group selections, mapping group name to selected option; updatable in-place. Modeled at the top level only in v1; per-stream vargroupselections is deferred to a follow-up change.
    vars_json string
    Integration-level variables as JSON. Variables vary depending on the integration package. Updatable in-place.
    additionalDatastreamsPermissions List<String>
    Additional data stream permissions to grant beyond the package's defaults; updatable in-place.
    cloudConnector FleetManagedIntegrationCloudConnector
    References an existing cloud connector for cross-account access. Changing any field forces replacement of the entire cloud_connector block.
    createDatasetTemplates Boolean
    Whether to create dataset templates when creating the policy. Create-only: sent on the create request only, not read back from the API. Changes after creation are a no-op until the resource is recreated.
    createdAt String
    The creation timestamp of the managed integration (ISO 8601).
    description String
    The description of the managed integration; updatable in-place. An explicit empty string is rejected: it is indistinguishable from "unset" once round-tripped through the API (Kibana returns an omitted/empty description as "", which this provider folds back to null), so setting description = "" would otherwise produce a permanent, non-converging diff. Omit the attribute instead of setting it to "".
    force Boolean
    Force the create operation. Create-only: sent on the create request only and not read back from the API.
    forceDelete Boolean
    Force deletion of the policy, passed as ?force=true on the delete request. Defaults to false.
    globalDataTags Map<String,FleetManagedIntegrationGlobalDataTagsArgs>
    User-defined tags. Keyed by tag name; each entry must set exactly one of string_value or number_value.
    inputs Map<String,FleetManagedIntegrationInputsArgs>
    Policy inputs mapped by input type ID; updatable in-place.
    kibanaConnections List<FleetManagedIntegrationKibanaConnection>
    Kibana connection configuration block.
    name String
    The name of the managed integration; updatable in-place.
    namespace String
    The namespace of the managed integration; forces replacement on change. An explicit empty string is rejected for the same reason as description: it is indistinguishable from "unset" once round-tripped through the API.
    package_ FleetManagedIntegrationPackage
    The Fleet integration package this managed integration is based on.
    policyId String
    The managed integration ID. Server-assigned if omitted; forces replacement on change.
    policyTemplate String
    Policy template within the package, configured at create time. Not returned by GET; preserved from prior config on refresh. Null after import when unavailable. Changing it forces replacement.
    skipTopologyCheck Boolean
    Skips the deployment-topology preflight check. Use only if you are certain this is running against a supported Elastic Cloud Hosted or Serverless deployment and the automatic detection is producing a false positive (e.g. due to non-standard network routing such as PrivateLink). Does not weaken version gating (Kibana 9.5.0+ is still enforced) -- it only bypasses the topology heuristic. Defaults to false. Create-only: consulted only during Create and not read back from the API.
    spaceIds List<String>
    The list of spaces the managed integration belongs to; defaults to ["default"]; forces replacement on change.
    timeouts FleetManagedIntegrationTimeouts
    updatedAt String
    The last-updated timestamp of the managed integration (ISO 8601).
    varGroupSelections Map<String,String>
    Top-level variable group selections, mapping group name to selected option; updatable in-place. Modeled at the top level only in v1; per-stream vargroupselections is deferred to a follow-up change.
    varsJson String
    Integration-level variables as JSON. Variables vary depending on the integration package. Updatable in-place.
    additionalDatastreamsPermissions string[]
    Additional data stream permissions to grant beyond the package's defaults; updatable in-place.
    cloudConnector FleetManagedIntegrationCloudConnector
    References an existing cloud connector for cross-account access. Changing any field forces replacement of the entire cloud_connector block.
    createDatasetTemplates boolean
    Whether to create dataset templates when creating the policy. Create-only: sent on the create request only, not read back from the API. Changes after creation are a no-op until the resource is recreated.
    createdAt string
    The creation timestamp of the managed integration (ISO 8601).
    description string
    The description of the managed integration; updatable in-place. An explicit empty string is rejected: it is indistinguishable from "unset" once round-tripped through the API (Kibana returns an omitted/empty description as "", which this provider folds back to null), so setting description = "" would otherwise produce a permanent, non-converging diff. Omit the attribute instead of setting it to "".
    force boolean
    Force the create operation. Create-only: sent on the create request only and not read back from the API.
    forceDelete boolean
    Force deletion of the policy, passed as ?force=true on the delete request. Defaults to false.
    globalDataTags {[key: string]: FleetManagedIntegrationGlobalDataTagsArgs}
    User-defined tags. Keyed by tag name; each entry must set exactly one of string_value or number_value.
    inputs {[key: string]: FleetManagedIntegrationInputsArgs}
    Policy inputs mapped by input type ID; updatable in-place.
    kibanaConnections FleetManagedIntegrationKibanaConnection[]
    Kibana connection configuration block.
    name string
    The name of the managed integration; updatable in-place.
    namespace string
    The namespace of the managed integration; forces replacement on change. An explicit empty string is rejected for the same reason as description: it is indistinguishable from "unset" once round-tripped through the API.
    package FleetManagedIntegrationPackage
    The Fleet integration package this managed integration is based on.
    policyId string
    The managed integration ID. Server-assigned if omitted; forces replacement on change.
    policyTemplate string
    Policy template within the package, configured at create time. Not returned by GET; preserved from prior config on refresh. Null after import when unavailable. Changing it forces replacement.
    skipTopologyCheck boolean
    Skips the deployment-topology preflight check. Use only if you are certain this is running against a supported Elastic Cloud Hosted or Serverless deployment and the automatic detection is producing a false positive (e.g. due to non-standard network routing such as PrivateLink). Does not weaken version gating (Kibana 9.5.0+ is still enforced) -- it only bypasses the topology heuristic. Defaults to false. Create-only: consulted only during Create and not read back from the API.
    spaceIds string[]
    The list of spaces the managed integration belongs to; defaults to ["default"]; forces replacement on change.
    timeouts FleetManagedIntegrationTimeouts
    updatedAt string
    The last-updated timestamp of the managed integration (ISO 8601).
    varGroupSelections {[key: string]: string}
    Top-level variable group selections, mapping group name to selected option; updatable in-place. Modeled at the top level only in v1; per-stream vargroupselections is deferred to a follow-up change.
    varsJson string
    Integration-level variables as JSON. Variables vary depending on the integration package. Updatable in-place.
    additional_datastreams_permissions Sequence[str]
    Additional data stream permissions to grant beyond the package's defaults; updatable in-place.
    cloud_connector FleetManagedIntegrationCloudConnectorArgs
    References an existing cloud connector for cross-account access. Changing any field forces replacement of the entire cloud_connector block.
    create_dataset_templates bool
    Whether to create dataset templates when creating the policy. Create-only: sent on the create request only, not read back from the API. Changes after creation are a no-op until the resource is recreated.
    created_at str
    The creation timestamp of the managed integration (ISO 8601).
    description str
    The description of the managed integration; updatable in-place. An explicit empty string is rejected: it is indistinguishable from "unset" once round-tripped through the API (Kibana returns an omitted/empty description as "", which this provider folds back to null), so setting description = "" would otherwise produce a permanent, non-converging diff. Omit the attribute instead of setting it to "".
    force bool
    Force the create operation. Create-only: sent on the create request only and not read back from the API.
    force_delete bool
    Force deletion of the policy, passed as ?force=true on the delete request. Defaults to false.
    global_data_tags Mapping[str, FleetManagedIntegrationGlobalDataTagsArgs]
    User-defined tags. Keyed by tag name; each entry must set exactly one of string_value or number_value.
    inputs Mapping[str, FleetManagedIntegrationInputsArgs]
    Policy inputs mapped by input type ID; updatable in-place.
    kibana_connections Sequence[FleetManagedIntegrationKibanaConnectionArgs]
    Kibana connection configuration block.
    name str
    The name of the managed integration; updatable in-place.
    namespace str
    The namespace of the managed integration; forces replacement on change. An explicit empty string is rejected for the same reason as description: it is indistinguishable from "unset" once round-tripped through the API.
    package FleetManagedIntegrationPackageArgs
    The Fleet integration package this managed integration is based on.
    policy_id str
    The managed integration ID. Server-assigned if omitted; forces replacement on change.
    policy_template str
    Policy template within the package, configured at create time. Not returned by GET; preserved from prior config on refresh. Null after import when unavailable. Changing it forces replacement.
    skip_topology_check bool
    Skips the deployment-topology preflight check. Use only if you are certain this is running against a supported Elastic Cloud Hosted or Serverless deployment and the automatic detection is producing a false positive (e.g. due to non-standard network routing such as PrivateLink). Does not weaken version gating (Kibana 9.5.0+ is still enforced) -- it only bypasses the topology heuristic. Defaults to false. Create-only: consulted only during Create and not read back from the API.
    space_ids Sequence[str]
    The list of spaces the managed integration belongs to; defaults to ["default"]; forces replacement on change.
    timeouts FleetManagedIntegrationTimeoutsArgs
    updated_at str
    The last-updated timestamp of the managed integration (ISO 8601).
    var_group_selections Mapping[str, str]
    Top-level variable group selections, mapping group name to selected option; updatable in-place. Modeled at the top level only in v1; per-stream vargroupselections is deferred to a follow-up change.
    vars_json str
    Integration-level variables as JSON. Variables vary depending on the integration package. Updatable in-place.
    additionalDatastreamsPermissions List<String>
    Additional data stream permissions to grant beyond the package's defaults; updatable in-place.
    cloudConnector Property Map
    References an existing cloud connector for cross-account access. Changing any field forces replacement of the entire cloud_connector block.
    createDatasetTemplates Boolean
    Whether to create dataset templates when creating the policy. Create-only: sent on the create request only, not read back from the API. Changes after creation are a no-op until the resource is recreated.
    createdAt String
    The creation timestamp of the managed integration (ISO 8601).
    description String
    The description of the managed integration; updatable in-place. An explicit empty string is rejected: it is indistinguishable from "unset" once round-tripped through the API (Kibana returns an omitted/empty description as "", which this provider folds back to null), so setting description = "" would otherwise produce a permanent, non-converging diff. Omit the attribute instead of setting it to "".
    force Boolean
    Force the create operation. Create-only: sent on the create request only and not read back from the API.
    forceDelete Boolean
    Force deletion of the policy, passed as ?force=true on the delete request. Defaults to false.
    globalDataTags Map<Property Map>
    User-defined tags. Keyed by tag name; each entry must set exactly one of string_value or number_value.
    inputs Map<Property Map>
    Policy inputs mapped by input type ID; updatable in-place.
    kibanaConnections List<Property Map>
    Kibana connection configuration block.
    name String
    The name of the managed integration; updatable in-place.
    namespace String
    The namespace of the managed integration; forces replacement on change. An explicit empty string is rejected for the same reason as description: it is indistinguishable from "unset" once round-tripped through the API.
    package Property Map
    The Fleet integration package this managed integration is based on.
    policyId String
    The managed integration ID. Server-assigned if omitted; forces replacement on change.
    policyTemplate String
    Policy template within the package, configured at create time. Not returned by GET; preserved from prior config on refresh. Null after import when unavailable. Changing it forces replacement.
    skipTopologyCheck Boolean
    Skips the deployment-topology preflight check. Use only if you are certain this is running against a supported Elastic Cloud Hosted or Serverless deployment and the automatic detection is producing a false positive (e.g. due to non-standard network routing such as PrivateLink). Does not weaken version gating (Kibana 9.5.0+ is still enforced) -- it only bypasses the topology heuristic. Defaults to false. Create-only: consulted only during Create and not read back from the API.
    spaceIds List<String>
    The list of spaces the managed integration belongs to; defaults to ["default"]; forces replacement on change.
    timeouts Property Map
    updatedAt String
    The last-updated timestamp of the managed integration (ISO 8601).
    varGroupSelections Map<String>
    Top-level variable group selections, mapping group name to selected option; updatable in-place. Modeled at the top level only in v1; per-stream vargroupselections is deferred to a follow-up change.
    varsJson String
    Integration-level variables as JSON. Variables vary depending on the integration package. Updatable in-place.

    Supporting Types

    FleetManagedIntegrationCloudConnector, FleetManagedIntegrationCloudConnectorArgs

    CloudConnectorId string
    The ID of an existing cloud connector to associate with this policy.
    Enabled bool
    Whether the cloud connector is enabled for this policy.
    Name string
    The name of the cloud connector.
    TargetCsp string
    The target cloud service provider for the cloud connector. One of aws, azure, or gcp.
    CloudConnectorId string
    The ID of an existing cloud connector to associate with this policy.
    Enabled bool
    Whether the cloud connector is enabled for this policy.
    Name string
    The name of the cloud connector.
    TargetCsp string
    The target cloud service provider for the cloud connector. One of aws, azure, or gcp.
    cloud_connector_id string
    The ID of an existing cloud connector to associate with this policy.
    enabled bool
    Whether the cloud connector is enabled for this policy.
    name string
    The name of the cloud connector.
    target_csp string
    The target cloud service provider for the cloud connector. One of aws, azure, or gcp.
    cloudConnectorId String
    The ID of an existing cloud connector to associate with this policy.
    enabled Boolean
    Whether the cloud connector is enabled for this policy.
    name String
    The name of the cloud connector.
    targetCsp String
    The target cloud service provider for the cloud connector. One of aws, azure, or gcp.
    cloudConnectorId string
    The ID of an existing cloud connector to associate with this policy.
    enabled boolean
    Whether the cloud connector is enabled for this policy.
    name string
    The name of the cloud connector.
    targetCsp string
    The target cloud service provider for the cloud connector. One of aws, azure, or gcp.
    cloud_connector_id str
    The ID of an existing cloud connector to associate with this policy.
    enabled bool
    Whether the cloud connector is enabled for this policy.
    name str
    The name of the cloud connector.
    target_csp str
    The target cloud service provider for the cloud connector. One of aws, azure, or gcp.
    cloudConnectorId String
    The ID of an existing cloud connector to associate with this policy.
    enabled Boolean
    Whether the cloud connector is enabled for this policy.
    name String
    The name of the cloud connector.
    targetCsp String
    The target cloud service provider for the cloud connector. One of aws, azure, or gcp.

    FleetManagedIntegrationGlobalDataTags, FleetManagedIntegrationGlobalDataTagsArgs

    NumberValue double
    Number value for the tag. If this is set, string_value must not be defined.
    StringValue string
    String value for the tag. If this is set, number_value must not be defined.
    NumberValue float64
    Number value for the tag. If this is set, string_value must not be defined.
    StringValue string
    String value for the tag. If this is set, number_value must not be defined.
    number_value number
    Number value for the tag. If this is set, string_value must not be defined.
    string_value string
    String value for the tag. If this is set, number_value must not be defined.
    numberValue Double
    Number value for the tag. If this is set, string_value must not be defined.
    stringValue String
    String value for the tag. If this is set, number_value must not be defined.
    numberValue number
    Number value for the tag. If this is set, string_value must not be defined.
    stringValue string
    String value for the tag. If this is set, number_value must not be defined.
    number_value float
    Number value for the tag. If this is set, string_value must not be defined.
    string_value str
    String value for the tag. If this is set, number_value must not be defined.
    numberValue Number
    Number value for the tag. If this is set, string_value must not be defined.
    stringValue String
    String value for the tag. If this is set, number_value must not be defined.

    FleetManagedIntegrationInputs, FleetManagedIntegrationInputsArgs

    Condition string
    Agent condition expression to evaluate whether to apply this input.
    Enabled bool
    Enable the input.
    Streams Dictionary<string, FleetManagedIntegrationInputsStreams>
    Input streams mapped by stream ID.
    Vars string
    Input-level variables as JSON. Computed (not purely Optional): some packages (e.g. cloudsecurityposture/CSPM) populate informational input-level vars (such as CloudFormation quick-create template URLs) that are always present in the API response regardless of configuration; Computed with UseStateForUnknown lets those flow through without requiring the user to declare them.
    Condition string
    Agent condition expression to evaluate whether to apply this input.
    Enabled bool
    Enable the input.
    Streams map[string]FleetManagedIntegrationInputsStreams
    Input streams mapped by stream ID.
    Vars string
    Input-level variables as JSON. Computed (not purely Optional): some packages (e.g. cloudsecurityposture/CSPM) populate informational input-level vars (such as CloudFormation quick-create template URLs) that are always present in the API response regardless of configuration; Computed with UseStateForUnknown lets those flow through without requiring the user to declare them.
    condition string
    Agent condition expression to evaluate whether to apply this input.
    enabled bool
    Enable the input.
    streams map(object)
    Input streams mapped by stream ID.
    vars string
    Input-level variables as JSON. Computed (not purely Optional): some packages (e.g. cloudsecurityposture/CSPM) populate informational input-level vars (such as CloudFormation quick-create template URLs) that are always present in the API response regardless of configuration; Computed with UseStateForUnknown lets those flow through without requiring the user to declare them.
    condition String
    Agent condition expression to evaluate whether to apply this input.
    enabled Boolean
    Enable the input.
    streams Map<String,FleetManagedIntegrationInputsStreams>
    Input streams mapped by stream ID.
    vars String
    Input-level variables as JSON. Computed (not purely Optional): some packages (e.g. cloudsecurityposture/CSPM) populate informational input-level vars (such as CloudFormation quick-create template URLs) that are always present in the API response regardless of configuration; Computed with UseStateForUnknown lets those flow through without requiring the user to declare them.
    condition string
    Agent condition expression to evaluate whether to apply this input.
    enabled boolean
    Enable the input.
    streams {[key: string]: FleetManagedIntegrationInputsStreams}
    Input streams mapped by stream ID.
    vars string
    Input-level variables as JSON. Computed (not purely Optional): some packages (e.g. cloudsecurityposture/CSPM) populate informational input-level vars (such as CloudFormation quick-create template URLs) that are always present in the API response regardless of configuration; Computed with UseStateForUnknown lets those flow through without requiring the user to declare them.
    condition str
    Agent condition expression to evaluate whether to apply this input.
    enabled bool
    Enable the input.
    streams Mapping[str, FleetManagedIntegrationInputsStreams]
    Input streams mapped by stream ID.
    vars str
    Input-level variables as JSON. Computed (not purely Optional): some packages (e.g. cloudsecurityposture/CSPM) populate informational input-level vars (such as CloudFormation quick-create template URLs) that are always present in the API response regardless of configuration; Computed with UseStateForUnknown lets those flow through without requiring the user to declare them.
    condition String
    Agent condition expression to evaluate whether to apply this input.
    enabled Boolean
    Enable the input.
    streams Map<Property Map>
    Input streams mapped by stream ID.
    vars String
    Input-level variables as JSON. Computed (not purely Optional): some packages (e.g. cloudsecurityposture/CSPM) populate informational input-level vars (such as CloudFormation quick-create template URLs) that are always present in the API response regardless of configuration; Computed with UseStateForUnknown lets those flow through without requiring the user to declare them.

    FleetManagedIntegrationInputsStreams, FleetManagedIntegrationInputsStreamsArgs

    Condition string
    Agent condition expression to evaluate whether to apply this stream.
    Enabled bool
    Enable the stream.
    Vars string
    Stream-level variables as JSON.
    Condition string
    Agent condition expression to evaluate whether to apply this stream.
    Enabled bool
    Enable the stream.
    Vars string
    Stream-level variables as JSON.
    condition string
    Agent condition expression to evaluate whether to apply this stream.
    enabled bool
    Enable the stream.
    vars string
    Stream-level variables as JSON.
    condition String
    Agent condition expression to evaluate whether to apply this stream.
    enabled Boolean
    Enable the stream.
    vars String
    Stream-level variables as JSON.
    condition string
    Agent condition expression to evaluate whether to apply this stream.
    enabled boolean
    Enable the stream.
    vars string
    Stream-level variables as JSON.
    condition str
    Agent condition expression to evaluate whether to apply this stream.
    enabled bool
    Enable the stream.
    vars str
    Stream-level variables as JSON.
    condition String
    Agent condition expression to evaluate whether to apply this stream.
    enabled Boolean
    Enable the stream.
    vars String
    Stream-level variables as JSON.

    FleetManagedIntegrationKibanaConnection, FleetManagedIntegrationKibanaConnectionArgs

    ApiKey string
    API Key to use for authentication to Kibana
    BearerToken string
    Bearer Token to use for authentication to Kibana
    CaCerts List<string>
    A list of paths to CA certificates to validate the certificate presented by the Kibana server.
    Endpoints List<string>
    Insecure bool
    Disable TLS certificate validation
    Password string
    Password to use for API authentication to Kibana.
    Username string
    Username to use for API authentication to Kibana.
    ApiKey string
    API Key to use for authentication to Kibana
    BearerToken string
    Bearer Token to use for authentication to Kibana
    CaCerts []string
    A list of paths to CA certificates to validate the certificate presented by the Kibana server.
    Endpoints []string
    Insecure bool
    Disable TLS certificate validation
    Password string
    Password to use for API authentication to Kibana.
    Username string
    Username to use for API authentication to Kibana.
    api_key string
    API Key to use for authentication to Kibana
    bearer_token string
    Bearer Token to use for authentication to Kibana
    ca_certs list(string)
    A list of paths to CA certificates to validate the certificate presented by the Kibana server.
    endpoints list(string)
    insecure bool
    Disable TLS certificate validation
    password string
    Password to use for API authentication to Kibana.
    username string
    Username to use for API authentication to Kibana.
    apiKey String
    API Key to use for authentication to Kibana
    bearerToken String
    Bearer Token to use for authentication to Kibana
    caCerts List<String>
    A list of paths to CA certificates to validate the certificate presented by the Kibana server.
    endpoints List<String>
    insecure Boolean
    Disable TLS certificate validation
    password String
    Password to use for API authentication to Kibana.
    username String
    Username to use for API authentication to Kibana.
    apiKey string
    API Key to use for authentication to Kibana
    bearerToken string
    Bearer Token to use for authentication to Kibana
    caCerts string[]
    A list of paths to CA certificates to validate the certificate presented by the Kibana server.
    endpoints string[]
    insecure boolean
    Disable TLS certificate validation
    password string
    Password to use for API authentication to Kibana.
    username string
    Username to use for API authentication to Kibana.
    api_key str
    API Key to use for authentication to Kibana
    bearer_token str
    Bearer Token to use for authentication to Kibana
    ca_certs Sequence[str]
    A list of paths to CA certificates to validate the certificate presented by the Kibana server.
    endpoints Sequence[str]
    insecure bool
    Disable TLS certificate validation
    password str
    Password to use for API authentication to Kibana.
    username str
    Username to use for API authentication to Kibana.
    apiKey String
    API Key to use for authentication to Kibana
    bearerToken String
    Bearer Token to use for authentication to Kibana
    caCerts List<String>
    A list of paths to CA certificates to validate the certificate presented by the Kibana server.
    endpoints List<String>
    insecure Boolean
    Disable TLS certificate validation
    password String
    Password to use for API authentication to Kibana.
    username String
    Username to use for API authentication to Kibana.

    FleetManagedIntegrationPackage, FleetManagedIntegrationPackageArgs

    Name string
    The package name; forces replacement on change.
    Version string
    The package version; updatable in-place.
    Title string
    The package title. If omitted, Kibana populates it from the package registry. Updatable in-place (not RequiresReplace).
    Name string
    The package name; forces replacement on change.
    Version string
    The package version; updatable in-place.
    Title string
    The package title. If omitted, Kibana populates it from the package registry. Updatable in-place (not RequiresReplace).
    name string
    The package name; forces replacement on change.
    version string
    The package version; updatable in-place.
    title string
    The package title. If omitted, Kibana populates it from the package registry. Updatable in-place (not RequiresReplace).
    name String
    The package name; forces replacement on change.
    version String
    The package version; updatable in-place.
    title String
    The package title. If omitted, Kibana populates it from the package registry. Updatable in-place (not RequiresReplace).
    name string
    The package name; forces replacement on change.
    version string
    The package version; updatable in-place.
    title string
    The package title. If omitted, Kibana populates it from the package registry. Updatable in-place (not RequiresReplace).
    name str
    The package name; forces replacement on change.
    version str
    The package version; updatable in-place.
    title str
    The package title. If omitted, Kibana populates it from the package registry. Updatable in-place (not RequiresReplace).
    name String
    The package name; forces replacement on change.
    version String
    The package version; updatable in-place.
    title String
    The package title. If omitted, Kibana populates it from the package registry. Updatable in-place (not RequiresReplace).

    FleetManagedIntegrationTimeouts, FleetManagedIntegrationTimeoutsArgs

    Create string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    Delete string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    Read string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
    Update string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    Create string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    Delete string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    Read string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
    Update string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    create string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    read string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
    update string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    create String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    read String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
    update String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    create string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    read string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
    update string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    create str
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete str
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    read str
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
    update str
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    create String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    read String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
    update String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).

    Import

    The pulumi import command can be used, for example:

    Import using the bare managed integration ID (Fleet policy_id; default space)

    $ pulumi import elasticstack:index/fleetManagedIntegration:FleetManagedIntegration cspm_aws <policy_id>

    Or using the composite <space_id>/<policy_id> ID (policy_id is stored as policy_id in state)

    $ pulumi import elasticstack:index/fleetManagedIntegration:FleetManagedIntegration cspm_aws <space_id>/<policy_id>

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    elasticstack elastic/terraform-provider-elasticstack
    License
    Notes
    This Pulumi package is based on the elasticstack Terraform Provider.
    Viewing docs for elasticstack 0.16.5
    published on Sunday, Sep 13, 2026 by elastic
    Schema (JSON)
    elastic/terraform-provider-elasticstack

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial