Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Formal Provider
  4. API Docs
  5. IntegrationCloud
Viewing docs for Formal v1.2.2
published on Wednesday, Jul 15, 2026 by Formal
Schema (JSON)
formalco/pulumi-formal

formal.IntegrationCloud

formal logo
Viewing docs for Formal v1.2.2
published on Wednesday, Jul 15, 2026 by Formal
Schema (JSON)
formalco/pulumi-formal

    Registering a Cloud integration.

    Create IntegrationCloud Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new IntegrationCloud(name: string, args?: IntegrationCloudArgs, opts?: CustomResourceOptions);
    @overload
def IntegrationCloud(resource_name: str,
                     args: Optional[IntegrationCloudArgs] = None,
                     opts: Optional[ResourceOptions] = None)

@overload
def IntegrationCloud(resource_name: str,
                     opts: Optional[ResourceOptions] = None,
                     aws: Optional[IntegrationCloudAwsArgs] = None,
                     cloud_region: Optional[str] = None,
                     gcp: Optional[IntegrationCloudGcpArgs] = None,
                     name: Optional[str] = None,
                     type: Optional[str] = None)
    func NewIntegrationCloud(ctx *Context, name string, args *IntegrationCloudArgs, opts ...ResourceOption) (*IntegrationCloud, error)
    public IntegrationCloud(string name, IntegrationCloudArgs? args = null, CustomResourceOptions? opts = null)
    public IntegrationCloud(String name, IntegrationCloudArgs args)
public IntegrationCloud(String name, IntegrationCloudArgs args, CustomResourceOptions options)

    type: formal:IntegrationCloud
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "formal_integrationcloud" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args IntegrationCloudArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args IntegrationCloudArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args IntegrationCloudArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args IntegrationCloudArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args IntegrationCloudArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var integrationCloudResource = new Pulumi.IntegrationCloud("integrationCloudResource", new()
{
    Aws = new Pulumi.Inputs.IntegrationCloudAwsArgs
    {
        TemplateVersion = "string",
        AllowS3Access = false,
        AutodiscoveryRegions = new[]
        {
            "string",
        },
        AwsCustomerRoleArn = "string",
        EnableEc2Autodiscovery = false,
        EnableEcsAutodiscovery = false,
        EnableEksAutodiscovery = false,
        EnableRdsAutodiscovery = false,
        EnableRedshiftAutodiscovery = false,
        EnableS3Autodiscovery = false,
        S3BucketArn = "string",
    },
    CloudRegion = "string",
    Gcp = new Pulumi.Inputs.IntegrationCloudGcpArgs
    {
        ProjectId = "string",
        AllowGcsAccess = false,
        EnableCloudsqlInstancesAutodiscovery = false,
        EnableComputeInstancesAutodiscovery = false,
        EnableGkeClustersAutodiscovery = false,
        GcsBuckets = new[]
        {
            "string",
        },
    },
    Name = "string",
});

    example, err := formal.NewIntegrationCloud(ctx, "integrationCloudResource", &formal.IntegrationCloudArgs{
	Aws: &formal.IntegrationCloudAwsArgs{
		TemplateVersion: pulumi.String("string"),
		AllowS3Access:   pulumi.Bool(false),
		AutodiscoveryRegions: pulumi.StringArray{
			pulumi.String("string"),
		},
		AwsCustomerRoleArn:          pulumi.String("string"),
		EnableEc2Autodiscovery:      pulumi.Bool(false),
		EnableEcsAutodiscovery:      pulumi.Bool(false),
		EnableEksAutodiscovery:      pulumi.Bool(false),
		EnableRdsAutodiscovery:      pulumi.Bool(false),
		EnableRedshiftAutodiscovery: pulumi.Bool(false),
		EnableS3Autodiscovery:       pulumi.Bool(false),
		S3BucketArn:                 pulumi.String("string"),
	},
	CloudRegion: pulumi.String("string"),
	Gcp: &formal.IntegrationCloudGcpArgs{
		ProjectId:                            pulumi.String("string"),
		AllowGcsAccess:                       pulumi.Bool(false),
		EnableCloudsqlInstancesAutodiscovery: pulumi.Bool(false),
		EnableComputeInstancesAutodiscovery:  pulumi.Bool(false),
		EnableGkeClustersAutodiscovery:       pulumi.Bool(false),
		GcsBuckets: pulumi.StringArray{
			pulumi.String("string"),
		},
	},
	Name: pulumi.String("string"),
})

    resource "formal_integrationcloud" "integrationCloudResource" {
  aws = {
    template_version              = "string"
    allow_s3_access               = false
    autodiscovery_regions         = ["string"]
    aws_customer_role_arn         = "string"
    enable_ec2_autodiscovery      = false
    enable_ecs_autodiscovery      = false
    enable_eks_autodiscovery      = false
    enable_rds_autodiscovery      = false
    enable_redshift_autodiscovery = false
    enable_s3_autodiscovery       = false
    s3_bucket_arn                 = "string"
  }
  cloud_region = "string"
  gcp = {
    project_id                              = "string"
    allow_gcs_access                        = false
    enable_cloudsql_instances_autodiscovery = false
    enable_compute_instances_autodiscovery  = false
    enable_gke_clusters_autodiscovery       = false
    gcs_buckets                             = ["string"]
  }
  name = "string"
}

    var integrationCloudResource = new IntegrationCloud("integrationCloudResource", IntegrationCloudArgs.builder()
    .aws(IntegrationCloudAwsArgs.builder()
        .templateVersion("string")
        .allowS3Access(false)
        .autodiscoveryRegions("string")
        .awsCustomerRoleArn("string")
        .enableEc2Autodiscovery(false)
        .enableEcsAutodiscovery(false)
        .enableEksAutodiscovery(false)
        .enableRdsAutodiscovery(false)
        .enableRedshiftAutodiscovery(false)
        .enableS3Autodiscovery(false)
        .s3BucketArn("string")
        .build())
    .cloudRegion("string")
    .gcp(IntegrationCloudGcpArgs.builder()
        .projectId("string")
        .allowGcsAccess(false)
        .enableCloudsqlInstancesAutodiscovery(false)
        .enableComputeInstancesAutodiscovery(false)
        .enableGkeClustersAutodiscovery(false)
        .gcsBuckets("string")
        .build())
    .name("string")
    .build());

    integration_cloud_resource = formal.IntegrationCloud("integrationCloudResource",
    aws={
        "template_version": "string",
        "allow_s3_access": False,
        "autodiscovery_regions": ["string"],
        "aws_customer_role_arn": "string",
        "enable_ec2_autodiscovery": False,
        "enable_ecs_autodiscovery": False,
        "enable_eks_autodiscovery": False,
        "enable_rds_autodiscovery": False,
        "enable_redshift_autodiscovery": False,
        "enable_s3_autodiscovery": False,
        "s3_bucket_arn": "string",
    },
    cloud_region="string",
    gcp={
        "project_id": "string",
        "allow_gcs_access": False,
        "enable_cloudsql_instances_autodiscovery": False,
        "enable_compute_instances_autodiscovery": False,
        "enable_gke_clusters_autodiscovery": False,
        "gcs_buckets": ["string"],
    },
    name="string")

    const integrationCloudResource = new formal.IntegrationCloud("integrationCloudResource", {
    aws: {
        templateVersion: "string",
        allowS3Access: false,
        autodiscoveryRegions: ["string"],
        awsCustomerRoleArn: "string",
        enableEc2Autodiscovery: false,
        enableEcsAutodiscovery: false,
        enableEksAutodiscovery: false,
        enableRdsAutodiscovery: false,
        enableRedshiftAutodiscovery: false,
        enableS3Autodiscovery: false,
        s3BucketArn: "string",
    },
    cloudRegion: "string",
    gcp: {
        projectId: "string",
        allowGcsAccess: false,
        enableCloudsqlInstancesAutodiscovery: false,
        enableComputeInstancesAutodiscovery: false,
        enableGkeClustersAutodiscovery: false,
        gcsBuckets: ["string"],
    },
    name: "string",
});

    type: formal:IntegrationCloud
properties:
    aws:
        allowS3Access: false
        autodiscoveryRegions:
            - string
        awsCustomerRoleArn: string
        enableEc2Autodiscovery: false
        enableEcsAutodiscovery: false
        enableEksAutodiscovery: false
        enableRdsAutodiscovery: false
        enableRedshiftAutodiscovery: false
        enableS3Autodiscovery: false
        s3BucketArn: string
        templateVersion: string
    cloudRegion: string
    gcp:
        allowGcsAccess: false
        enableCloudsqlInstancesAutodiscovery: false
        enableComputeInstancesAutodiscovery: false
        enableGkeClustersAutodiscovery: false
        gcsBuckets:
            - string
        projectId: string
    name: string

    IntegrationCloud Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The IntegrationCloud resource accepts the following input properties:

    Aws Formal.Pulumi.Inputs.IntegrationCloudAws
    Configuration block for AWS integration.
    CloudRegion string
    Region of the cloud provider. (AWS only)
    Gcp Formal.Pulumi.Inputs.IntegrationCloudGcp
    Configuration block for GCP integration.
    Name string
    Name of the Integration.
    Type string
    Type of the Integration. (Supported: aws, gcp)

    Deprecated: This field is deprecated and will be removed in a future version.

    Aws IntegrationCloudAwsArgs
    Configuration block for AWS integration.
    CloudRegion string
    Region of the cloud provider. (AWS only)
    Gcp IntegrationCloudGcpArgs
    Configuration block for GCP integration.
    Name string
    Name of the Integration.
    Type string
    Type of the Integration. (Supported: aws, gcp)

    Deprecated: This field is deprecated and will be removed in a future version.

    aws object
    Configuration block for AWS integration.
    cloud_region string
    Region of the cloud provider. (AWS only)
    gcp object
    Configuration block for GCP integration.
    name string
    Name of the Integration.
    type string
    Type of the Integration. (Supported: aws, gcp)

    Deprecated: This field is deprecated and will be removed in a future version.

    aws IntegrationCloudAws
    Configuration block for AWS integration.
    cloudRegion String
    Region of the cloud provider. (AWS only)
    gcp IntegrationCloudGcp
    Configuration block for GCP integration.
    name String
    Name of the Integration.
    type String
    Type of the Integration. (Supported: aws, gcp)

    Deprecated: This field is deprecated and will be removed in a future version.

    aws IntegrationCloudAws
    Configuration block for AWS integration.
    cloudRegion string
    Region of the cloud provider. (AWS only)
    gcp IntegrationCloudGcp
    Configuration block for GCP integration.
    name string
    Name of the Integration.
    type string
    Type of the Integration. (Supported: aws, gcp)

    Deprecated: This field is deprecated and will be removed in a future version.

    aws IntegrationCloudAwsArgs
    Configuration block for AWS integration.
    cloud_region str
    Region of the cloud provider. (AWS only)
    gcp IntegrationCloudGcpArgs
    Configuration block for GCP integration.
    name str
    Name of the Integration.
    type str
    Type of the Integration. (Supported: aws, gcp)

    Deprecated: This field is deprecated and will be removed in a future version.

    aws Property Map
    Configuration block for AWS integration.
    cloudRegion String
    Region of the cloud provider. (AWS only)
    gcp Property Map
    Configuration block for GCP integration.
    name String
    Name of the Integration.
    type String
    Type of the Integration. (Supported: aws, gcp)

    Deprecated: This field is deprecated and will be removed in a future version.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the IntegrationCloud resource produces the following output properties:

    AwsAllowS3Access bool
    Whether AWS S3 access is allowed or not.
    AwsEnableEc2Autodiscovery bool
    Whether AWS EC2 autodiscovery is enabled or not.
    AwsEnableEcsAutodiscovery bool
    Whether AWS ECS autodiscovery is enabled or not.
    AwsEnableEksAutodiscovery bool
    Whether AWS EKS autodiscovery is enabled or not.
    AwsEnableRdsAutodiscovery bool
    Whether AWS RDS autodiscovery is enabled or not.
    AwsEnableRedshiftAutodiscovery bool
    Whether AWS Redshift autodiscovery is enabled or not.
    AwsEnableS3Autodiscovery bool
    Whether AWS S3 autodiscovery is enabled or not.
    AwsFormalIamRole string
    The IAM role ID Formal will use to access your resources.
    AwsFormalIamRoleArn string
    The ARN of the IAM role Formal will use to access your resources.
    AwsFormalPingbackArn string
    The SNS topic ARN CloudFormation can use to send events to Formal.
    AwsFormalRoleArn string
    The AWS IAM role ARN Formal uses to federate into your GCP workload identity pool.
    AwsFormalStackName string
    A generated name for your CloudFormation stack.
    AwsS3BucketArn string
    The AWS S3 bucket ARN this Cloud Integration is allowed to use for Log Integrations, if it is allowed to access S3.
    AwsTemplateBody string
    The template body of the CloudFormation stack.
    GcpAllowGcsAccess bool
    Whether the Cloud Integration is allowed to write logs to GCS.
    GcpEnableCloudsqlInstancesAutodiscovery bool
    Whether GCP Cloud SQL instances autodiscovery is enabled or not.
    GcpEnableComputeInstancesAutodiscovery bool
    Whether GCP Compute Engine instances autodiscovery is enabled or not.
    GcpEnableGkeClustersAutodiscovery bool
    Whether GCP GKE clusters autodiscovery is enabled or not.
    GcpGcsBuckets List<string>
    The GCS buckets this Cloud Integration is allowed to write logs to. Empty with access allowed means all buckets in the project.
    GcpProjectId string
    The GCP project ID this integration grants Formal access to.
    GcpRoles List<string>
    The project-level IAM roles to grant Formal's service account, derived from the enabled capabilities. Pass these to the GCP Terraform module.
    GcpServiceAccountEmail string
    The GCP service account email created for this integration.
    GcpWorkloadIdentityPoolProvider string
    The GCP workload identity pool provider created for this integration.
    Id string
    The provider-assigned unique ID for this managed resource.
    AwsAllowS3Access bool
    Whether AWS S3 access is allowed or not.
    AwsEnableEc2Autodiscovery bool
    Whether AWS EC2 autodiscovery is enabled or not.
    AwsEnableEcsAutodiscovery bool
    Whether AWS ECS autodiscovery is enabled or not.
    AwsEnableEksAutodiscovery bool
    Whether AWS EKS autodiscovery is enabled or not.
    AwsEnableRdsAutodiscovery bool
    Whether AWS RDS autodiscovery is enabled or not.
    AwsEnableRedshiftAutodiscovery bool
    Whether AWS Redshift autodiscovery is enabled or not.
    AwsEnableS3Autodiscovery bool
    Whether AWS S3 autodiscovery is enabled or not.
    AwsFormalIamRole string
    The IAM role ID Formal will use to access your resources.
    AwsFormalIamRoleArn string
    The ARN of the IAM role Formal will use to access your resources.
    AwsFormalPingbackArn string
    The SNS topic ARN CloudFormation can use to send events to Formal.
    AwsFormalRoleArn string
    The AWS IAM role ARN Formal uses to federate into your GCP workload identity pool.
    AwsFormalStackName string
    A generated name for your CloudFormation stack.
    AwsS3BucketArn string
    The AWS S3 bucket ARN this Cloud Integration is allowed to use for Log Integrations, if it is allowed to access S3.
    AwsTemplateBody string
    The template body of the CloudFormation stack.
    GcpAllowGcsAccess bool
    Whether the Cloud Integration is allowed to write logs to GCS.
    GcpEnableCloudsqlInstancesAutodiscovery bool
    Whether GCP Cloud SQL instances autodiscovery is enabled or not.
    GcpEnableComputeInstancesAutodiscovery bool
    Whether GCP Compute Engine instances autodiscovery is enabled or not.
    GcpEnableGkeClustersAutodiscovery bool
    Whether GCP GKE clusters autodiscovery is enabled or not.
    GcpGcsBuckets []string
    The GCS buckets this Cloud Integration is allowed to write logs to. Empty with access allowed means all buckets in the project.
    GcpProjectId string
    The GCP project ID this integration grants Formal access to.
    GcpRoles []string
    The project-level IAM roles to grant Formal's service account, derived from the enabled capabilities. Pass these to the GCP Terraform module.
    GcpServiceAccountEmail string
    The GCP service account email created for this integration.
    GcpWorkloadIdentityPoolProvider string
    The GCP workload identity pool provider created for this integration.
    Id string
    The provider-assigned unique ID for this managed resource.
    aws_allow_s3_access bool
    Whether AWS S3 access is allowed or not.
    aws_enable_ec2_autodiscovery bool
    Whether AWS EC2 autodiscovery is enabled or not.
    aws_enable_ecs_autodiscovery bool
    Whether AWS ECS autodiscovery is enabled or not.
    aws_enable_eks_autodiscovery bool
    Whether AWS EKS autodiscovery is enabled or not.
    aws_enable_rds_autodiscovery bool
    Whether AWS RDS autodiscovery is enabled or not.
    aws_enable_redshift_autodiscovery bool
    Whether AWS Redshift autodiscovery is enabled or not.
    aws_enable_s3_autodiscovery bool
    Whether AWS S3 autodiscovery is enabled or not.
    aws_formal_iam_role string
    The IAM role ID Formal will use to access your resources.
    aws_formal_iam_role_arn string
    The ARN of the IAM role Formal will use to access your resources.
    aws_formal_pingback_arn string
    The SNS topic ARN CloudFormation can use to send events to Formal.
    aws_formal_role_arn string
    The AWS IAM role ARN Formal uses to federate into your GCP workload identity pool.
    aws_formal_stack_name string
    A generated name for your CloudFormation stack.
    aws_s3_bucket_arn string
    The AWS S3 bucket ARN this Cloud Integration is allowed to use for Log Integrations, if it is allowed to access S3.
    aws_template_body string
    The template body of the CloudFormation stack.
    gcp_allow_gcs_access bool
    Whether the Cloud Integration is allowed to write logs to GCS.
    gcp_enable_cloudsql_instances_autodiscovery bool
    Whether GCP Cloud SQL instances autodiscovery is enabled or not.
    gcp_enable_compute_instances_autodiscovery bool
    Whether GCP Compute Engine instances autodiscovery is enabled or not.
    gcp_enable_gke_clusters_autodiscovery bool
    Whether GCP GKE clusters autodiscovery is enabled or not.
    gcp_gcs_buckets list(string)
    The GCS buckets this Cloud Integration is allowed to write logs to. Empty with access allowed means all buckets in the project.
    gcp_project_id string
    The GCP project ID this integration grants Formal access to.
    gcp_roles list(string)
    The project-level IAM roles to grant Formal's service account, derived from the enabled capabilities. Pass these to the GCP Terraform module.
    gcp_service_account_email string
    The GCP service account email created for this integration.
    gcp_workload_identity_pool_provider string
    The GCP workload identity pool provider created for this integration.
    id string
    The provider-assigned unique ID for this managed resource.
    awsAllowS3Access Boolean
    Whether AWS S3 access is allowed or not.
    awsEnableEc2Autodiscovery Boolean
    Whether AWS EC2 autodiscovery is enabled or not.
    awsEnableEcsAutodiscovery Boolean
    Whether AWS ECS autodiscovery is enabled or not.
    awsEnableEksAutodiscovery Boolean
    Whether AWS EKS autodiscovery is enabled or not.
    awsEnableRdsAutodiscovery Boolean
    Whether AWS RDS autodiscovery is enabled or not.
    awsEnableRedshiftAutodiscovery Boolean
    Whether AWS Redshift autodiscovery is enabled or not.
    awsEnableS3Autodiscovery Boolean
    Whether AWS S3 autodiscovery is enabled or not.
    awsFormalIamRole String
    The IAM role ID Formal will use to access your resources.
    awsFormalIamRoleArn String
    The ARN of the IAM role Formal will use to access your resources.
    awsFormalPingbackArn String
    The SNS topic ARN CloudFormation can use to send events to Formal.
    awsFormalRoleArn String
    The AWS IAM role ARN Formal uses to federate into your GCP workload identity pool.
    awsFormalStackName String
    A generated name for your CloudFormation stack.
    awsS3BucketArn String
    The AWS S3 bucket ARN this Cloud Integration is allowed to use for Log Integrations, if it is allowed to access S3.
    awsTemplateBody String
    The template body of the CloudFormation stack.
    gcpAllowGcsAccess Boolean
    Whether the Cloud Integration is allowed to write logs to GCS.
    gcpEnableCloudsqlInstancesAutodiscovery Boolean
    Whether GCP Cloud SQL instances autodiscovery is enabled or not.
    gcpEnableComputeInstancesAutodiscovery Boolean
    Whether GCP Compute Engine instances autodiscovery is enabled or not.
    gcpEnableGkeClustersAutodiscovery Boolean
    Whether GCP GKE clusters autodiscovery is enabled or not.
    gcpGcsBuckets List<String>
    The GCS buckets this Cloud Integration is allowed to write logs to. Empty with access allowed means all buckets in the project.
    gcpProjectId String
    The GCP project ID this integration grants Formal access to.
    gcpRoles List<String>
    The project-level IAM roles to grant Formal's service account, derived from the enabled capabilities. Pass these to the GCP Terraform module.
    gcpServiceAccountEmail String
    The GCP service account email created for this integration.
    gcpWorkloadIdentityPoolProvider String
    The GCP workload identity pool provider created for this integration.
    id String
    The provider-assigned unique ID for this managed resource.
    awsAllowS3Access boolean
    Whether AWS S3 access is allowed or not.
    awsEnableEc2Autodiscovery boolean
    Whether AWS EC2 autodiscovery is enabled or not.
    awsEnableEcsAutodiscovery boolean
    Whether AWS ECS autodiscovery is enabled or not.
    awsEnableEksAutodiscovery boolean
    Whether AWS EKS autodiscovery is enabled or not.
    awsEnableRdsAutodiscovery boolean
    Whether AWS RDS autodiscovery is enabled or not.
    awsEnableRedshiftAutodiscovery boolean
    Whether AWS Redshift autodiscovery is enabled or not.
    awsEnableS3Autodiscovery boolean
    Whether AWS S3 autodiscovery is enabled or not.
    awsFormalIamRole string
    The IAM role ID Formal will use to access your resources.
    awsFormalIamRoleArn string
    The ARN of the IAM role Formal will use to access your resources.
    awsFormalPingbackArn string
    The SNS topic ARN CloudFormation can use to send events to Formal.
    awsFormalRoleArn string
    The AWS IAM role ARN Formal uses to federate into your GCP workload identity pool.
    awsFormalStackName string
    A generated name for your CloudFormation stack.
    awsS3BucketArn string
    The AWS S3 bucket ARN this Cloud Integration is allowed to use for Log Integrations, if it is allowed to access S3.
    awsTemplateBody string
    The template body of the CloudFormation stack.
    gcpAllowGcsAccess boolean
    Whether the Cloud Integration is allowed to write logs to GCS.
    gcpEnableCloudsqlInstancesAutodiscovery boolean
    Whether GCP Cloud SQL instances autodiscovery is enabled or not.
    gcpEnableComputeInstancesAutodiscovery boolean
    Whether GCP Compute Engine instances autodiscovery is enabled or not.
    gcpEnableGkeClustersAutodiscovery boolean
    Whether GCP GKE clusters autodiscovery is enabled or not.
    gcpGcsBuckets string[]
    The GCS buckets this Cloud Integration is allowed to write logs to. Empty with access allowed means all buckets in the project.
    gcpProjectId string
    The GCP project ID this integration grants Formal access to.
    gcpRoles string[]
    The project-level IAM roles to grant Formal's service account, derived from the enabled capabilities. Pass these to the GCP Terraform module.
    gcpServiceAccountEmail string
    The GCP service account email created for this integration.
    gcpWorkloadIdentityPoolProvider string
    The GCP workload identity pool provider created for this integration.
    id string
    The provider-assigned unique ID for this managed resource.
    aws_allow_s3_access bool
    Whether AWS S3 access is allowed or not.
    aws_enable_ec2_autodiscovery bool
    Whether AWS EC2 autodiscovery is enabled or not.
    aws_enable_ecs_autodiscovery bool
    Whether AWS ECS autodiscovery is enabled or not.
    aws_enable_eks_autodiscovery bool
    Whether AWS EKS autodiscovery is enabled or not.
    aws_enable_rds_autodiscovery bool
    Whether AWS RDS autodiscovery is enabled or not.
    aws_enable_redshift_autodiscovery bool
    Whether AWS Redshift autodiscovery is enabled or not.
    aws_enable_s3_autodiscovery bool
    Whether AWS S3 autodiscovery is enabled or not.
    aws_formal_iam_role str
    The IAM role ID Formal will use to access your resources.
    aws_formal_iam_role_arn str
    The ARN of the IAM role Formal will use to access your resources.
    aws_formal_pingback_arn str
    The SNS topic ARN CloudFormation can use to send events to Formal.
    aws_formal_role_arn str
    The AWS IAM role ARN Formal uses to federate into your GCP workload identity pool.
    aws_formal_stack_name str
    A generated name for your CloudFormation stack.
    aws_s3_bucket_arn str
    The AWS S3 bucket ARN this Cloud Integration is allowed to use for Log Integrations, if it is allowed to access S3.
    aws_template_body str
    The template body of the CloudFormation stack.
    gcp_allow_gcs_access bool
    Whether the Cloud Integration is allowed to write logs to GCS.
    gcp_enable_cloudsql_instances_autodiscovery bool
    Whether GCP Cloud SQL instances autodiscovery is enabled or not.
    gcp_enable_compute_instances_autodiscovery bool
    Whether GCP Compute Engine instances autodiscovery is enabled or not.
    gcp_enable_gke_clusters_autodiscovery bool
    Whether GCP GKE clusters autodiscovery is enabled or not.
    gcp_gcs_buckets Sequence[str]
    The GCS buckets this Cloud Integration is allowed to write logs to. Empty with access allowed means all buckets in the project.
    gcp_project_id str
    The GCP project ID this integration grants Formal access to.
    gcp_roles Sequence[str]
    The project-level IAM roles to grant Formal's service account, derived from the enabled capabilities. Pass these to the GCP Terraform module.
    gcp_service_account_email str
    The GCP service account email created for this integration.
    gcp_workload_identity_pool_provider str
    The GCP workload identity pool provider created for this integration.
    id str
    The provider-assigned unique ID for this managed resource.
    awsAllowS3Access Boolean
    Whether AWS S3 access is allowed or not.
    awsEnableEc2Autodiscovery Boolean
    Whether AWS EC2 autodiscovery is enabled or not.
    awsEnableEcsAutodiscovery Boolean
    Whether AWS ECS autodiscovery is enabled or not.
    awsEnableEksAutodiscovery Boolean
    Whether AWS EKS autodiscovery is enabled or not.
    awsEnableRdsAutodiscovery Boolean
    Whether AWS RDS autodiscovery is enabled or not.
    awsEnableRedshiftAutodiscovery Boolean
    Whether AWS Redshift autodiscovery is enabled or not.
    awsEnableS3Autodiscovery Boolean
    Whether AWS S3 autodiscovery is enabled or not.
    awsFormalIamRole String
    The IAM role ID Formal will use to access your resources.
    awsFormalIamRoleArn String
    The ARN of the IAM role Formal will use to access your resources.
    awsFormalPingbackArn String
    The SNS topic ARN CloudFormation can use to send events to Formal.
    awsFormalRoleArn String
    The AWS IAM role ARN Formal uses to federate into your GCP workload identity pool.
    awsFormalStackName String
    A generated name for your CloudFormation stack.
    awsS3BucketArn String
    The AWS S3 bucket ARN this Cloud Integration is allowed to use for Log Integrations, if it is allowed to access S3.
    awsTemplateBody String
    The template body of the CloudFormation stack.
    gcpAllowGcsAccess Boolean
    Whether the Cloud Integration is allowed to write logs to GCS.
    gcpEnableCloudsqlInstancesAutodiscovery Boolean
    Whether GCP Cloud SQL instances autodiscovery is enabled or not.
    gcpEnableComputeInstancesAutodiscovery Boolean
    Whether GCP Compute Engine instances autodiscovery is enabled or not.
    gcpEnableGkeClustersAutodiscovery Boolean
    Whether GCP GKE clusters autodiscovery is enabled or not.
    gcpGcsBuckets List<String>
    The GCS buckets this Cloud Integration is allowed to write logs to. Empty with access allowed means all buckets in the project.
    gcpProjectId String
    The GCP project ID this integration grants Formal access to.
    gcpRoles List<String>
    The project-level IAM roles to grant Formal's service account, derived from the enabled capabilities. Pass these to the GCP Terraform module.
    gcpServiceAccountEmail String
    The GCP service account email created for this integration.
    gcpWorkloadIdentityPoolProvider String
    The GCP workload identity pool provider created for this integration.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing IntegrationCloud Resource

    Get an existing IntegrationCloud resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: IntegrationCloudState, opts?: CustomResourceOptions): IntegrationCloud
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        aws: Optional[IntegrationCloudAwsArgs] = None,
        aws_allow_s3_access: Optional[bool] = None,
        aws_enable_ec2_autodiscovery: Optional[bool] = None,
        aws_enable_ecs_autodiscovery: Optional[bool] = None,
        aws_enable_eks_autodiscovery: Optional[bool] = None,
        aws_enable_rds_autodiscovery: Optional[bool] = None,
        aws_enable_redshift_autodiscovery: Optional[bool] = None,
        aws_enable_s3_autodiscovery: Optional[bool] = None,
        aws_formal_iam_role: Optional[str] = None,
        aws_formal_iam_role_arn: Optional[str] = None,
        aws_formal_pingback_arn: Optional[str] = None,
        aws_formal_role_arn: Optional[str] = None,
        aws_formal_stack_name: Optional[str] = None,
        aws_s3_bucket_arn: Optional[str] = None,
        aws_template_body: Optional[str] = None,
        cloud_region: Optional[str] = None,
        gcp: Optional[IntegrationCloudGcpArgs] = None,
        gcp_allow_gcs_access: Optional[bool] = None,
        gcp_enable_cloudsql_instances_autodiscovery: Optional[bool] = None,
        gcp_enable_compute_instances_autodiscovery: Optional[bool] = None,
        gcp_enable_gke_clusters_autodiscovery: Optional[bool] = None,
        gcp_gcs_buckets: Optional[Sequence[str]] = None,
        gcp_project_id: Optional[str] = None,
        gcp_roles: Optional[Sequence[str]] = None,
        gcp_service_account_email: Optional[str] = None,
        gcp_workload_identity_pool_provider: Optional[str] = None,
        name: Optional[str] = None,
        type: Optional[str] = None) -> IntegrationCloud
    func GetIntegrationCloud(ctx *Context, name string, id IDInput, state *IntegrationCloudState, opts ...ResourceOption) (*IntegrationCloud, error)
    public static IntegrationCloud Get(string name, Input<string> id, IntegrationCloudState? state, CustomResourceOptions? opts = null)
    public static IntegrationCloud get(String name, Output<String> id, IntegrationCloudState state, CustomResourceOptions options)
    resources:  _:    type: formal:IntegrationCloud    get:      id: ${id}
    import {
  to = formal_integrationcloud.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Aws Formal.Pulumi.Inputs.IntegrationCloudAws
    Configuration block for AWS integration.
    AwsAllowS3Access bool
    Whether AWS S3 access is allowed or not.
    AwsEnableEc2Autodiscovery bool
    Whether AWS EC2 autodiscovery is enabled or not.
    AwsEnableEcsAutodiscovery bool
    Whether AWS ECS autodiscovery is enabled or not.
    AwsEnableEksAutodiscovery bool
    Whether AWS EKS autodiscovery is enabled or not.
    AwsEnableRdsAutodiscovery bool
    Whether AWS RDS autodiscovery is enabled or not.
    AwsEnableRedshiftAutodiscovery bool
    Whether AWS Redshift autodiscovery is enabled or not.
    AwsEnableS3Autodiscovery bool
    Whether AWS S3 autodiscovery is enabled or not.
    AwsFormalIamRole string
    The IAM role ID Formal will use to access your resources.
    AwsFormalIamRoleArn string
    The ARN of the IAM role Formal will use to access your resources.
    AwsFormalPingbackArn string
    The SNS topic ARN CloudFormation can use to send events to Formal.
    AwsFormalRoleArn string
    The AWS IAM role ARN Formal uses to federate into your GCP workload identity pool.
    AwsFormalStackName string
    A generated name for your CloudFormation stack.
    AwsS3BucketArn string
    The AWS S3 bucket ARN this Cloud Integration is allowed to use for Log Integrations, if it is allowed to access S3.
    AwsTemplateBody string
    The template body of the CloudFormation stack.
    CloudRegion string
    Region of the cloud provider. (AWS only)
    Gcp Formal.Pulumi.Inputs.IntegrationCloudGcp
    Configuration block for GCP integration.
    GcpAllowGcsAccess bool
    Whether the Cloud Integration is allowed to write logs to GCS.
    GcpEnableCloudsqlInstancesAutodiscovery bool
    Whether GCP Cloud SQL instances autodiscovery is enabled or not.
    GcpEnableComputeInstancesAutodiscovery bool
    Whether GCP Compute Engine instances autodiscovery is enabled or not.
    GcpEnableGkeClustersAutodiscovery bool
    Whether GCP GKE clusters autodiscovery is enabled or not.
    GcpGcsBuckets List<string>
    The GCS buckets this Cloud Integration is allowed to write logs to. Empty with access allowed means all buckets in the project.
    GcpProjectId string
    The GCP project ID this integration grants Formal access to.
    GcpRoles List<string>
    The project-level IAM roles to grant Formal's service account, derived from the enabled capabilities. Pass these to the GCP Terraform module.
    GcpServiceAccountEmail string
    The GCP service account email created for this integration.
    GcpWorkloadIdentityPoolProvider string
    The GCP workload identity pool provider created for this integration.
    Name string
    Name of the Integration.
    Type string
    Type of the Integration. (Supported: aws, gcp)

    Deprecated: This field is deprecated and will be removed in a future version.

    Aws IntegrationCloudAwsArgs
    Configuration block for AWS integration.
    AwsAllowS3Access bool
    Whether AWS S3 access is allowed or not.
    AwsEnableEc2Autodiscovery bool
    Whether AWS EC2 autodiscovery is enabled or not.
    AwsEnableEcsAutodiscovery bool
    Whether AWS ECS autodiscovery is enabled or not.
    AwsEnableEksAutodiscovery bool
    Whether AWS EKS autodiscovery is enabled or not.
    AwsEnableRdsAutodiscovery bool
    Whether AWS RDS autodiscovery is enabled or not.
    AwsEnableRedshiftAutodiscovery bool
    Whether AWS Redshift autodiscovery is enabled or not.
    AwsEnableS3Autodiscovery bool
    Whether AWS S3 autodiscovery is enabled or not.
    AwsFormalIamRole string
    The IAM role ID Formal will use to access your resources.
    AwsFormalIamRoleArn string
    The ARN of the IAM role Formal will use to access your resources.
    AwsFormalPingbackArn string
    The SNS topic ARN CloudFormation can use to send events to Formal.
    AwsFormalRoleArn string
    The AWS IAM role ARN Formal uses to federate into your GCP workload identity pool.
    AwsFormalStackName string
    A generated name for your CloudFormation stack.
    AwsS3BucketArn string
    The AWS S3 bucket ARN this Cloud Integration is allowed to use for Log Integrations, if it is allowed to access S3.
    AwsTemplateBody string
    The template body of the CloudFormation stack.
    CloudRegion string
    Region of the cloud provider. (AWS only)
    Gcp IntegrationCloudGcpArgs
    Configuration block for GCP integration.
    GcpAllowGcsAccess bool
    Whether the Cloud Integration is allowed to write logs to GCS.
    GcpEnableCloudsqlInstancesAutodiscovery bool
    Whether GCP Cloud SQL instances autodiscovery is enabled or not.
    GcpEnableComputeInstancesAutodiscovery bool
    Whether GCP Compute Engine instances autodiscovery is enabled or not.
    GcpEnableGkeClustersAutodiscovery bool
    Whether GCP GKE clusters autodiscovery is enabled or not.
    GcpGcsBuckets []string
    The GCS buckets this Cloud Integration is allowed to write logs to. Empty with access allowed means all buckets in the project.
    GcpProjectId string
    The GCP project ID this integration grants Formal access to.
    GcpRoles []string
    The project-level IAM roles to grant Formal's service account, derived from the enabled capabilities. Pass these to the GCP Terraform module.
    GcpServiceAccountEmail string
    The GCP service account email created for this integration.
    GcpWorkloadIdentityPoolProvider string
    The GCP workload identity pool provider created for this integration.
    Name string
    Name of the Integration.
    Type string
    Type of the Integration. (Supported: aws, gcp)

    Deprecated: This field is deprecated and will be removed in a future version.

    aws object
    Configuration block for AWS integration.
    aws_allow_s3_access bool
    Whether AWS S3 access is allowed or not.
    aws_enable_ec2_autodiscovery bool
    Whether AWS EC2 autodiscovery is enabled or not.
    aws_enable_ecs_autodiscovery bool
    Whether AWS ECS autodiscovery is enabled or not.
    aws_enable_eks_autodiscovery bool
    Whether AWS EKS autodiscovery is enabled or not.
    aws_enable_rds_autodiscovery bool
    Whether AWS RDS autodiscovery is enabled or not.
    aws_enable_redshift_autodiscovery bool
    Whether AWS Redshift autodiscovery is enabled or not.
    aws_enable_s3_autodiscovery bool
    Whether AWS S3 autodiscovery is enabled or not.
    aws_formal_iam_role string
    The IAM role ID Formal will use to access your resources.
    aws_formal_iam_role_arn string
    The ARN of the IAM role Formal will use to access your resources.
    aws_formal_pingback_arn string
    The SNS topic ARN CloudFormation can use to send events to Formal.
    aws_formal_role_arn string
    The AWS IAM role ARN Formal uses to federate into your GCP workload identity pool.
    aws_formal_stack_name string
    A generated name for your CloudFormation stack.
    aws_s3_bucket_arn string
    The AWS S3 bucket ARN this Cloud Integration is allowed to use for Log Integrations, if it is allowed to access S3.
    aws_template_body string
    The template body of the CloudFormation stack.
    cloud_region string
    Region of the cloud provider. (AWS only)
    gcp object
    Configuration block for GCP integration.
    gcp_allow_gcs_access bool
    Whether the Cloud Integration is allowed to write logs to GCS.
    gcp_enable_cloudsql_instances_autodiscovery bool
    Whether GCP Cloud SQL instances autodiscovery is enabled or not.
    gcp_enable_compute_instances_autodiscovery bool
    Whether GCP Compute Engine instances autodiscovery is enabled or not.
    gcp_enable_gke_clusters_autodiscovery bool
    Whether GCP GKE clusters autodiscovery is enabled or not.
    gcp_gcs_buckets list(string)
    The GCS buckets this Cloud Integration is allowed to write logs to. Empty with access allowed means all buckets in the project.
    gcp_project_id string
    The GCP project ID this integration grants Formal access to.
    gcp_roles list(string)
    The project-level IAM roles to grant Formal's service account, derived from the enabled capabilities. Pass these to the GCP Terraform module.
    gcp_service_account_email string
    The GCP service account email created for this integration.
    gcp_workload_identity_pool_provider string
    The GCP workload identity pool provider created for this integration.
    name string
    Name of the Integration.
    type string
    Type of the Integration. (Supported: aws, gcp)

    Deprecated: This field is deprecated and will be removed in a future version.

    aws IntegrationCloudAws
    Configuration block for AWS integration.
    awsAllowS3Access Boolean
    Whether AWS S3 access is allowed or not.
    awsEnableEc2Autodiscovery Boolean
    Whether AWS EC2 autodiscovery is enabled or not.
    awsEnableEcsAutodiscovery Boolean
    Whether AWS ECS autodiscovery is enabled or not.
    awsEnableEksAutodiscovery Boolean
    Whether AWS EKS autodiscovery is enabled or not.
    awsEnableRdsAutodiscovery Boolean
    Whether AWS RDS autodiscovery is enabled or not.
    awsEnableRedshiftAutodiscovery Boolean
    Whether AWS Redshift autodiscovery is enabled or not.
    awsEnableS3Autodiscovery Boolean
    Whether AWS S3 autodiscovery is enabled or not.
    awsFormalIamRole String
    The IAM role ID Formal will use to access your resources.
    awsFormalIamRoleArn String
    The ARN of the IAM role Formal will use to access your resources.
    awsFormalPingbackArn String
    The SNS topic ARN CloudFormation can use to send events to Formal.
    awsFormalRoleArn String
    The AWS IAM role ARN Formal uses to federate into your GCP workload identity pool.
    awsFormalStackName String
    A generated name for your CloudFormation stack.
    awsS3BucketArn String
    The AWS S3 bucket ARN this Cloud Integration is allowed to use for Log Integrations, if it is allowed to access S3.
    awsTemplateBody String
    The template body of the CloudFormation stack.
    cloudRegion String
    Region of the cloud provider. (AWS only)
    gcp IntegrationCloudGcp
    Configuration block for GCP integration.
    gcpAllowGcsAccess Boolean
    Whether the Cloud Integration is allowed to write logs to GCS.
    gcpEnableCloudsqlInstancesAutodiscovery Boolean
    Whether GCP Cloud SQL instances autodiscovery is enabled or not.
    gcpEnableComputeInstancesAutodiscovery Boolean
    Whether GCP Compute Engine instances autodiscovery is enabled or not.
    gcpEnableGkeClustersAutodiscovery Boolean
    Whether GCP GKE clusters autodiscovery is enabled or not.
    gcpGcsBuckets List<String>
    The GCS buckets this Cloud Integration is allowed to write logs to. Empty with access allowed means all buckets in the project.
    gcpProjectId String
    The GCP project ID this integration grants Formal access to.
    gcpRoles List<String>
    The project-level IAM roles to grant Formal's service account, derived from the enabled capabilities. Pass these to the GCP Terraform module.
    gcpServiceAccountEmail String
    The GCP service account email created for this integration.
    gcpWorkloadIdentityPoolProvider String
    The GCP workload identity pool provider created for this integration.
    name String
    Name of the Integration.
    type String
    Type of the Integration. (Supported: aws, gcp)

    Deprecated: This field is deprecated and will be removed in a future version.

    aws IntegrationCloudAws
    Configuration block for AWS integration.
    awsAllowS3Access boolean
    Whether AWS S3 access is allowed or not.
    awsEnableEc2Autodiscovery boolean
    Whether AWS EC2 autodiscovery is enabled or not.
    awsEnableEcsAutodiscovery boolean
    Whether AWS ECS autodiscovery is enabled or not.
    awsEnableEksAutodiscovery boolean
    Whether AWS EKS autodiscovery is enabled or not.
    awsEnableRdsAutodiscovery boolean
    Whether AWS RDS autodiscovery is enabled or not.
    awsEnableRedshiftAutodiscovery boolean
    Whether AWS Redshift autodiscovery is enabled or not.
    awsEnableS3Autodiscovery boolean
    Whether AWS S3 autodiscovery is enabled or not.
    awsFormalIamRole string
    The IAM role ID Formal will use to access your resources.
    awsFormalIamRoleArn string
    The ARN of the IAM role Formal will use to access your resources.
    awsFormalPingbackArn string
    The SNS topic ARN CloudFormation can use to send events to Formal.
    awsFormalRoleArn string
    The AWS IAM role ARN Formal uses to federate into your GCP workload identity pool.
    awsFormalStackName string
    A generated name for your CloudFormation stack.
    awsS3BucketArn string
    The AWS S3 bucket ARN this Cloud Integration is allowed to use for Log Integrations, if it is allowed to access S3.
    awsTemplateBody string
    The template body of the CloudFormation stack.
    cloudRegion string
    Region of the cloud provider. (AWS only)
    gcp IntegrationCloudGcp
    Configuration block for GCP integration.
    gcpAllowGcsAccess boolean
    Whether the Cloud Integration is allowed to write logs to GCS.
    gcpEnableCloudsqlInstancesAutodiscovery boolean
    Whether GCP Cloud SQL instances autodiscovery is enabled or not.
    gcpEnableComputeInstancesAutodiscovery boolean
    Whether GCP Compute Engine instances autodiscovery is enabled or not.
    gcpEnableGkeClustersAutodiscovery boolean
    Whether GCP GKE clusters autodiscovery is enabled or not.
    gcpGcsBuckets string[]
    The GCS buckets this Cloud Integration is allowed to write logs to. Empty with access allowed means all buckets in the project.
    gcpProjectId string
    The GCP project ID this integration grants Formal access to.
    gcpRoles string[]
    The project-level IAM roles to grant Formal's service account, derived from the enabled capabilities. Pass these to the GCP Terraform module.
    gcpServiceAccountEmail string
    The GCP service account email created for this integration.
    gcpWorkloadIdentityPoolProvider string
    The GCP workload identity pool provider created for this integration.
    name string
    Name of the Integration.
    type string
    Type of the Integration. (Supported: aws, gcp)

    Deprecated: This field is deprecated and will be removed in a future version.

    aws IntegrationCloudAwsArgs
    Configuration block for AWS integration.
    aws_allow_s3_access bool
    Whether AWS S3 access is allowed or not.
    aws_enable_ec2_autodiscovery bool
    Whether AWS EC2 autodiscovery is enabled or not.
    aws_enable_ecs_autodiscovery bool
    Whether AWS ECS autodiscovery is enabled or not.
    aws_enable_eks_autodiscovery bool
    Whether AWS EKS autodiscovery is enabled or not.
    aws_enable_rds_autodiscovery bool
    Whether AWS RDS autodiscovery is enabled or not.
    aws_enable_redshift_autodiscovery bool
    Whether AWS Redshift autodiscovery is enabled or not.
    aws_enable_s3_autodiscovery bool
    Whether AWS S3 autodiscovery is enabled or not.
    aws_formal_iam_role str
    The IAM role ID Formal will use to access your resources.
    aws_formal_iam_role_arn str
    The ARN of the IAM role Formal will use to access your resources.
    aws_formal_pingback_arn str
    The SNS topic ARN CloudFormation can use to send events to Formal.
    aws_formal_role_arn str
    The AWS IAM role ARN Formal uses to federate into your GCP workload identity pool.
    aws_formal_stack_name str
    A generated name for your CloudFormation stack.
    aws_s3_bucket_arn str
    The AWS S3 bucket ARN this Cloud Integration is allowed to use for Log Integrations, if it is allowed to access S3.
    aws_template_body str
    The template body of the CloudFormation stack.
    cloud_region str
    Region of the cloud provider. (AWS only)
    gcp IntegrationCloudGcpArgs
    Configuration block for GCP integration.
    gcp_allow_gcs_access bool
    Whether the Cloud Integration is allowed to write logs to GCS.
    gcp_enable_cloudsql_instances_autodiscovery bool
    Whether GCP Cloud SQL instances autodiscovery is enabled or not.
    gcp_enable_compute_instances_autodiscovery bool
    Whether GCP Compute Engine instances autodiscovery is enabled or not.
    gcp_enable_gke_clusters_autodiscovery bool
    Whether GCP GKE clusters autodiscovery is enabled or not.
    gcp_gcs_buckets Sequence[str]
    The GCS buckets this Cloud Integration is allowed to write logs to. Empty with access allowed means all buckets in the project.
    gcp_project_id str
    The GCP project ID this integration grants Formal access to.
    gcp_roles Sequence[str]
    The project-level IAM roles to grant Formal's service account, derived from the enabled capabilities. Pass these to the GCP Terraform module.
    gcp_service_account_email str
    The GCP service account email created for this integration.
    gcp_workload_identity_pool_provider str
    The GCP workload identity pool provider created for this integration.
    name str
    Name of the Integration.
    type str
    Type of the Integration. (Supported: aws, gcp)

    Deprecated: This field is deprecated and will be removed in a future version.

    aws Property Map
    Configuration block for AWS integration.
    awsAllowS3Access Boolean
    Whether AWS S3 access is allowed or not.
    awsEnableEc2Autodiscovery Boolean
    Whether AWS EC2 autodiscovery is enabled or not.
    awsEnableEcsAutodiscovery Boolean
    Whether AWS ECS autodiscovery is enabled or not.
    awsEnableEksAutodiscovery Boolean
    Whether AWS EKS autodiscovery is enabled or not.
    awsEnableRdsAutodiscovery Boolean
    Whether AWS RDS autodiscovery is enabled or not.
    awsEnableRedshiftAutodiscovery Boolean
    Whether AWS Redshift autodiscovery is enabled or not.
    awsEnableS3Autodiscovery Boolean
    Whether AWS S3 autodiscovery is enabled or not.
    awsFormalIamRole String
    The IAM role ID Formal will use to access your resources.
    awsFormalIamRoleArn String
    The ARN of the IAM role Formal will use to access your resources.
    awsFormalPingbackArn String
    The SNS topic ARN CloudFormation can use to send events to Formal.
    awsFormalRoleArn String
    The AWS IAM role ARN Formal uses to federate into your GCP workload identity pool.
    awsFormalStackName String
    A generated name for your CloudFormation stack.
    awsS3BucketArn String
    The AWS S3 bucket ARN this Cloud Integration is allowed to use for Log Integrations, if it is allowed to access S3.
    awsTemplateBody String
    The template body of the CloudFormation stack.
    cloudRegion String
    Region of the cloud provider. (AWS only)
    gcp Property Map
    Configuration block for GCP integration.
    gcpAllowGcsAccess Boolean
    Whether the Cloud Integration is allowed to write logs to GCS.
    gcpEnableCloudsqlInstancesAutodiscovery Boolean
    Whether GCP Cloud SQL instances autodiscovery is enabled or not.
    gcpEnableComputeInstancesAutodiscovery Boolean
    Whether GCP Compute Engine instances autodiscovery is enabled or not.
    gcpEnableGkeClustersAutodiscovery Boolean
    Whether GCP GKE clusters autodiscovery is enabled or not.
    gcpGcsBuckets List<String>
    The GCS buckets this Cloud Integration is allowed to write logs to. Empty with access allowed means all buckets in the project.
    gcpProjectId String
    The GCP project ID this integration grants Formal access to.
    gcpRoles List<String>
    The project-level IAM roles to grant Formal's service account, derived from the enabled capabilities. Pass these to the GCP Terraform module.
    gcpServiceAccountEmail String
    The GCP service account email created for this integration.
    gcpWorkloadIdentityPoolProvider String
    The GCP workload identity pool provider created for this integration.
    name String
    Name of the Integration.
    type String
    Type of the Integration. (Supported: aws, gcp)

    Deprecated: This field is deprecated and will be removed in a future version.

    Supporting Types

    IntegrationCloudAws, IntegrationCloudAwsArgs

    TemplateVersion string
    The template version of the CloudFormation stack. Use latest to stay in sync.
    AllowS3Access bool
    Allows the Cloud Integration to access S3 buckets for Log Integrations.
    AutodiscoveryRegions List<string>
    The regions to enable resource autodiscovery for.
    AwsCustomerRoleArn string
    The ARN of the IAM role that Formal assumes in your AWS account to access your resources.
    EnableEc2Autodiscovery bool
    Enables resource autodiscovery for EC2 instances.
    EnableEcsAutodiscovery bool
    Enables resource autodiscovery for ECS clusters.
    EnableEksAutodiscovery bool
    Enables resource autodiscovery for EKS clusters.
    EnableRdsAutodiscovery bool
    Enables resource autodiscovery for RDS instances (PostgreSQL, MySQL, MongoDB).
    EnableRedshiftAutodiscovery bool
    Enables resource autodiscovery for Redshift clusters.
    EnableS3Autodiscovery bool
    Enables resource autodiscovery for S3 buckets.
    S3BucketArn string
    The S3 bucket ARN this Cloud Integration is allowed to use for Log Integrations.
    TemplateVersion string
    The template version of the CloudFormation stack. Use latest to stay in sync.
    AllowS3Access bool
    Allows the Cloud Integration to access S3 buckets for Log Integrations.
    AutodiscoveryRegions []string
    The regions to enable resource autodiscovery for.
    AwsCustomerRoleArn string
    The ARN of the IAM role that Formal assumes in your AWS account to access your resources.
    EnableEc2Autodiscovery bool
    Enables resource autodiscovery for EC2 instances.
    EnableEcsAutodiscovery bool
    Enables resource autodiscovery for ECS clusters.
    EnableEksAutodiscovery bool
    Enables resource autodiscovery for EKS clusters.
    EnableRdsAutodiscovery bool
    Enables resource autodiscovery for RDS instances (PostgreSQL, MySQL, MongoDB).
    EnableRedshiftAutodiscovery bool
    Enables resource autodiscovery for Redshift clusters.
    EnableS3Autodiscovery bool
    Enables resource autodiscovery for S3 buckets.
    S3BucketArn string
    The S3 bucket ARN this Cloud Integration is allowed to use for Log Integrations.
    template_version string
    The template version of the CloudFormation stack. Use latest to stay in sync.
    allow_s3_access bool
    Allows the Cloud Integration to access S3 buckets for Log Integrations.
    autodiscovery_regions list(string)
    The regions to enable resource autodiscovery for.
    aws_customer_role_arn string
    The ARN of the IAM role that Formal assumes in your AWS account to access your resources.
    enable_ec2_autodiscovery bool
    Enables resource autodiscovery for EC2 instances.
    enable_ecs_autodiscovery bool
    Enables resource autodiscovery for ECS clusters.
    enable_eks_autodiscovery bool
    Enables resource autodiscovery for EKS clusters.
    enable_rds_autodiscovery bool
    Enables resource autodiscovery for RDS instances (PostgreSQL, MySQL, MongoDB).
    enable_redshift_autodiscovery bool
    Enables resource autodiscovery for Redshift clusters.
    enable_s3_autodiscovery bool
    Enables resource autodiscovery for S3 buckets.
    s3_bucket_arn string
    The S3 bucket ARN this Cloud Integration is allowed to use for Log Integrations.
    templateVersion String
    The template version of the CloudFormation stack. Use latest to stay in sync.
    allowS3Access Boolean
    Allows the Cloud Integration to access S3 buckets for Log Integrations.
    autodiscoveryRegions List<String>
    The regions to enable resource autodiscovery for.
    awsCustomerRoleArn String
    The ARN of the IAM role that Formal assumes in your AWS account to access your resources.
    enableEc2Autodiscovery Boolean
    Enables resource autodiscovery for EC2 instances.
    enableEcsAutodiscovery Boolean
    Enables resource autodiscovery for ECS clusters.
    enableEksAutodiscovery Boolean
    Enables resource autodiscovery for EKS clusters.
    enableRdsAutodiscovery Boolean
    Enables resource autodiscovery for RDS instances (PostgreSQL, MySQL, MongoDB).
    enableRedshiftAutodiscovery Boolean
    Enables resource autodiscovery for Redshift clusters.
    enableS3Autodiscovery Boolean
    Enables resource autodiscovery for S3 buckets.
    s3BucketArn String
    The S3 bucket ARN this Cloud Integration is allowed to use for Log Integrations.
    templateVersion string
    The template version of the CloudFormation stack. Use latest to stay in sync.
    allowS3Access boolean
    Allows the Cloud Integration to access S3 buckets for Log Integrations.
    autodiscoveryRegions string[]
    The regions to enable resource autodiscovery for.
    awsCustomerRoleArn string
    The ARN of the IAM role that Formal assumes in your AWS account to access your resources.
    enableEc2Autodiscovery boolean
    Enables resource autodiscovery for EC2 instances.
    enableEcsAutodiscovery boolean
    Enables resource autodiscovery for ECS clusters.
    enableEksAutodiscovery boolean
    Enables resource autodiscovery for EKS clusters.
    enableRdsAutodiscovery boolean
    Enables resource autodiscovery for RDS instances (PostgreSQL, MySQL, MongoDB).
    enableRedshiftAutodiscovery boolean
    Enables resource autodiscovery for Redshift clusters.
    enableS3Autodiscovery boolean
    Enables resource autodiscovery for S3 buckets.
    s3BucketArn string
    The S3 bucket ARN this Cloud Integration is allowed to use for Log Integrations.
    template_version str
    The template version of the CloudFormation stack. Use latest to stay in sync.
    allow_s3_access bool
    Allows the Cloud Integration to access S3 buckets for Log Integrations.
    autodiscovery_regions Sequence[str]
    The regions to enable resource autodiscovery for.
    aws_customer_role_arn str
    The ARN of the IAM role that Formal assumes in your AWS account to access your resources.
    enable_ec2_autodiscovery bool
    Enables resource autodiscovery for EC2 instances.
    enable_ecs_autodiscovery bool
    Enables resource autodiscovery for ECS clusters.
    enable_eks_autodiscovery bool
    Enables resource autodiscovery for EKS clusters.
    enable_rds_autodiscovery bool
    Enables resource autodiscovery for RDS instances (PostgreSQL, MySQL, MongoDB).
    enable_redshift_autodiscovery bool
    Enables resource autodiscovery for Redshift clusters.
    enable_s3_autodiscovery bool
    Enables resource autodiscovery for S3 buckets.
    s3_bucket_arn str
    The S3 bucket ARN this Cloud Integration is allowed to use for Log Integrations.
    templateVersion String
    The template version of the CloudFormation stack. Use latest to stay in sync.
    allowS3Access Boolean
    Allows the Cloud Integration to access S3 buckets for Log Integrations.
    autodiscoveryRegions List<String>
    The regions to enable resource autodiscovery for.
    awsCustomerRoleArn String
    The ARN of the IAM role that Formal assumes in your AWS account to access your resources.
    enableEc2Autodiscovery Boolean
    Enables resource autodiscovery for EC2 instances.
    enableEcsAutodiscovery Boolean
    Enables resource autodiscovery for ECS clusters.
    enableEksAutodiscovery Boolean
    Enables resource autodiscovery for EKS clusters.
    enableRdsAutodiscovery Boolean
    Enables resource autodiscovery for RDS instances (PostgreSQL, MySQL, MongoDB).
    enableRedshiftAutodiscovery Boolean
    Enables resource autodiscovery for Redshift clusters.
    enableS3Autodiscovery Boolean
    Enables resource autodiscovery for S3 buckets.
    s3BucketArn String
    The S3 bucket ARN this Cloud Integration is allowed to use for Log Integrations.

    IntegrationCloudGcp, IntegrationCloudGcpArgs

    ProjectId string
    The GCP project ID this integration grants Formal access to.
    AllowGcsAccess bool
    Allows the Cloud Integration to write logs to GCS buckets for Log Integrations.
    EnableCloudsqlInstancesAutodiscovery bool
    Enables resource autodiscovery for Cloud SQL instances.
    EnableComputeInstancesAutodiscovery bool
    Enables resource autodiscovery for Compute Engine instances.
    EnableGkeClustersAutodiscovery bool
    Enables resource autodiscovery for GKE clusters.
    GcsBuckets List<string>
    GCS buckets Formal may write logs to. An empty list with access allowed grants all buckets in the project; a non-empty list restricts writes to those buckets.
    ProjectId string
    The GCP project ID this integration grants Formal access to.
    AllowGcsAccess bool
    Allows the Cloud Integration to write logs to GCS buckets for Log Integrations.
    EnableCloudsqlInstancesAutodiscovery bool
    Enables resource autodiscovery for Cloud SQL instances.
    EnableComputeInstancesAutodiscovery bool
    Enables resource autodiscovery for Compute Engine instances.
    EnableGkeClustersAutodiscovery bool
    Enables resource autodiscovery for GKE clusters.
    GcsBuckets []string
    GCS buckets Formal may write logs to. An empty list with access allowed grants all buckets in the project; a non-empty list restricts writes to those buckets.
    project_id string
    The GCP project ID this integration grants Formal access to.
    allow_gcs_access bool
    Allows the Cloud Integration to write logs to GCS buckets for Log Integrations.
    enable_cloudsql_instances_autodiscovery bool
    Enables resource autodiscovery for Cloud SQL instances.
    enable_compute_instances_autodiscovery bool
    Enables resource autodiscovery for Compute Engine instances.
    enable_gke_clusters_autodiscovery bool
    Enables resource autodiscovery for GKE clusters.
    gcs_buckets list(string)
    GCS buckets Formal may write logs to. An empty list with access allowed grants all buckets in the project; a non-empty list restricts writes to those buckets.
    projectId String
    The GCP project ID this integration grants Formal access to.
    allowGcsAccess Boolean
    Allows the Cloud Integration to write logs to GCS buckets for Log Integrations.
    enableCloudsqlInstancesAutodiscovery Boolean
    Enables resource autodiscovery for Cloud SQL instances.
    enableComputeInstancesAutodiscovery Boolean
    Enables resource autodiscovery for Compute Engine instances.
    enableGkeClustersAutodiscovery Boolean
    Enables resource autodiscovery for GKE clusters.
    gcsBuckets List<String>
    GCS buckets Formal may write logs to. An empty list with access allowed grants all buckets in the project; a non-empty list restricts writes to those buckets.
    projectId string
    The GCP project ID this integration grants Formal access to.
    allowGcsAccess boolean
    Allows the Cloud Integration to write logs to GCS buckets for Log Integrations.
    enableCloudsqlInstancesAutodiscovery boolean
    Enables resource autodiscovery for Cloud SQL instances.
    enableComputeInstancesAutodiscovery boolean
    Enables resource autodiscovery for Compute Engine instances.
    enableGkeClustersAutodiscovery boolean
    Enables resource autodiscovery for GKE clusters.
    gcsBuckets string[]
    GCS buckets Formal may write logs to. An empty list with access allowed grants all buckets in the project; a non-empty list restricts writes to those buckets.
    project_id str
    The GCP project ID this integration grants Formal access to.
    allow_gcs_access bool
    Allows the Cloud Integration to write logs to GCS buckets for Log Integrations.
    enable_cloudsql_instances_autodiscovery bool
    Enables resource autodiscovery for Cloud SQL instances.
    enable_compute_instances_autodiscovery bool
    Enables resource autodiscovery for Compute Engine instances.
    enable_gke_clusters_autodiscovery bool
    Enables resource autodiscovery for GKE clusters.
    gcs_buckets Sequence[str]
    GCS buckets Formal may write logs to. An empty list with access allowed grants all buckets in the project; a non-empty list restricts writes to those buckets.
    projectId String
    The GCP project ID this integration grants Formal access to.
    allowGcsAccess Boolean
    Allows the Cloud Integration to write logs to GCS buckets for Log Integrations.
    enableCloudsqlInstancesAutodiscovery Boolean
    Enables resource autodiscovery for Cloud SQL instances.
    enableComputeInstancesAutodiscovery Boolean
    Enables resource autodiscovery for Compute Engine instances.
    enableGkeClustersAutodiscovery Boolean
    Enables resource autodiscovery for GKE clusters.
    gcsBuckets List<String>
    GCS buckets Formal may write logs to. An empty list with access allowed grants all buckets in the project; a non-empty list restricts writes to those buckets.

    Package Details

    Repository
    formal formalco/pulumi-formal
    License
    MPL-2.0
    Notes
    This Pulumi package is based on the formal Terraform Provider.
    formal logo
    Viewing docs for Formal v1.2.2
    published on Wednesday, Jul 15, 2026 by Formal
    Schema (JSON)
    formalco/pulumi-formal

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial