published on Monday, Mar 9, 2026 by Pulumi
published on Monday, Mar 9, 2026 by Pulumi
Import
$ pulumi import ns1:index/aPIKey:APIKey `ns1_apikey`
So for the example above
$ pulumi import ns1:index/aPIKey:APIKey example <ID>`
Create APIKey Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new APIKey(name: string, args?: APIKeyArgs, opts?: CustomResourceOptions);@overload
def APIKey(resource_name: str,
args: Optional[APIKeyArgs] = None,
opts: Optional[ResourceOptions] = None)
@overload
def APIKey(resource_name: str,
opts: Optional[ResourceOptions] = None,
account_manage_account_settings: Optional[bool] = None,
account_manage_apikeys: Optional[bool] = None,
account_manage_ip_whitelist: Optional[bool] = None,
account_manage_payment_methods: Optional[bool] = None,
account_manage_plan: Optional[bool] = None,
account_manage_teams: Optional[bool] = None,
account_manage_users: Optional[bool] = None,
account_view_activity_log: Optional[bool] = None,
account_view_invoices: Optional[bool] = None,
data_manage_datafeeds: Optional[bool] = None,
data_manage_datasources: Optional[bool] = None,
data_push_to_datafeeds: Optional[bool] = None,
dhcp_manage_dhcp: Optional[bool] = None,
dhcp_view_dhcp: Optional[bool] = None,
dns_manage_zones: Optional[bool] = None,
dns_records_allows: Optional[Sequence[APIKeyDnsRecordsAllowArgs]] = None,
dns_records_denies: Optional[Sequence[APIKeyDnsRecordsDenyArgs]] = None,
dns_view_zones: Optional[bool] = None,
dns_zones_allow_by_default: Optional[bool] = None,
dns_zones_allows: Optional[Sequence[str]] = None,
dns_zones_denies: Optional[Sequence[str]] = None,
ip_whitelist_strict: Optional[bool] = None,
ip_whitelists: Optional[Sequence[str]] = None,
ipam_manage_ipam: Optional[bool] = None,
ipam_view_ipam: Optional[bool] = None,
monitoring_manage_jobs: Optional[bool] = None,
monitoring_manage_lists: Optional[bool] = None,
monitoring_view_jobs: Optional[bool] = None,
name: Optional[str] = None,
security_manage_active_directory: Optional[bool] = None,
security_manage_global2fa: Optional[bool] = None,
teams: Optional[Sequence[str]] = None)func NewAPIKey(ctx *Context, name string, args *APIKeyArgs, opts ...ResourceOption) (*APIKey, error)public APIKey(string name, APIKeyArgs? args = null, CustomResourceOptions? opts = null)
public APIKey(String name, APIKeyArgs args)
public APIKey(String name, APIKeyArgs args, CustomResourceOptions options)
type: ns1:APIKey
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args APIKeyArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args APIKeyArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args APIKeyArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args APIKeyArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args APIKeyArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var apikeyResource = new Ns1.APIKey("apikeyResource", new()
{
AccountManageAccountSettings = false,
AccountManageApikeys = false,
AccountManageIpWhitelist = false,
AccountManagePaymentMethods = false,
AccountManageTeams = false,
AccountManageUsers = false,
AccountViewActivityLog = false,
AccountViewInvoices = false,
DataManageDatafeeds = false,
DataManageDatasources = false,
DataPushToDatafeeds = false,
DhcpManageDhcp = false,
DhcpViewDhcp = false,
DnsManageZones = false,
DnsRecordsAllows = new[]
{
new Ns1.Inputs.APIKeyDnsRecordsAllowArgs
{
Domain = "string",
IncludeSubdomains = false,
Type = "string",
Zone = "string",
},
},
DnsRecordsDenies = new[]
{
new Ns1.Inputs.APIKeyDnsRecordsDenyArgs
{
Domain = "string",
IncludeSubdomains = false,
Type = "string",
Zone = "string",
},
},
DnsViewZones = false,
DnsZonesAllowByDefault = false,
DnsZonesAllows = new[]
{
"string",
},
DnsZonesDenies = new[]
{
"string",
},
IpWhitelistStrict = false,
IpWhitelists = new[]
{
"string",
},
IpamManageIpam = false,
IpamViewIpam = false,
MonitoringManageJobs = false,
MonitoringManageLists = false,
MonitoringViewJobs = false,
Name = "string",
SecurityManageActiveDirectory = false,
SecurityManageGlobal2fa = false,
Teams = new[]
{
"string",
},
});
example, err := ns1.NewAPIKey(ctx, "apikeyResource", &ns1.APIKeyArgs{
AccountManageAccountSettings: pulumi.Bool(false),
AccountManageApikeys: pulumi.Bool(false),
AccountManageIpWhitelist: pulumi.Bool(false),
AccountManagePaymentMethods: pulumi.Bool(false),
AccountManageTeams: pulumi.Bool(false),
AccountManageUsers: pulumi.Bool(false),
AccountViewActivityLog: pulumi.Bool(false),
AccountViewInvoices: pulumi.Bool(false),
DataManageDatafeeds: pulumi.Bool(false),
DataManageDatasources: pulumi.Bool(false),
DataPushToDatafeeds: pulumi.Bool(false),
DhcpManageDhcp: pulumi.Bool(false),
DhcpViewDhcp: pulumi.Bool(false),
DnsManageZones: pulumi.Bool(false),
DnsRecordsAllows: ns1.APIKeyDnsRecordsAllowArray{
&ns1.APIKeyDnsRecordsAllowArgs{
Domain: pulumi.String("string"),
IncludeSubdomains: pulumi.Bool(false),
Type: pulumi.String("string"),
Zone: pulumi.String("string"),
},
},
DnsRecordsDenies: ns1.APIKeyDnsRecordsDenyArray{
&ns1.APIKeyDnsRecordsDenyArgs{
Domain: pulumi.String("string"),
IncludeSubdomains: pulumi.Bool(false),
Type: pulumi.String("string"),
Zone: pulumi.String("string"),
},
},
DnsViewZones: pulumi.Bool(false),
DnsZonesAllowByDefault: pulumi.Bool(false),
DnsZonesAllows: pulumi.StringArray{
pulumi.String("string"),
},
DnsZonesDenies: pulumi.StringArray{
pulumi.String("string"),
},
IpWhitelistStrict: pulumi.Bool(false),
IpWhitelists: pulumi.StringArray{
pulumi.String("string"),
},
IpamManageIpam: pulumi.Bool(false),
IpamViewIpam: pulumi.Bool(false),
MonitoringManageJobs: pulumi.Bool(false),
MonitoringManageLists: pulumi.Bool(false),
MonitoringViewJobs: pulumi.Bool(false),
Name: pulumi.String("string"),
SecurityManageActiveDirectory: pulumi.Bool(false),
SecurityManageGlobal2fa: pulumi.Bool(false),
Teams: pulumi.StringArray{
pulumi.String("string"),
},
})
var apikeyResource = new APIKey("apikeyResource", APIKeyArgs.builder()
.accountManageAccountSettings(false)
.accountManageApikeys(false)
.accountManageIpWhitelist(false)
.accountManagePaymentMethods(false)
.accountManageTeams(false)
.accountManageUsers(false)
.accountViewActivityLog(false)
.accountViewInvoices(false)
.dataManageDatafeeds(false)
.dataManageDatasources(false)
.dataPushToDatafeeds(false)
.dhcpManageDhcp(false)
.dhcpViewDhcp(false)
.dnsManageZones(false)
.dnsRecordsAllows(APIKeyDnsRecordsAllowArgs.builder()
.domain("string")
.includeSubdomains(false)
.type("string")
.zone("string")
.build())
.dnsRecordsDenies(APIKeyDnsRecordsDenyArgs.builder()
.domain("string")
.includeSubdomains(false)
.type("string")
.zone("string")
.build())
.dnsViewZones(false)
.dnsZonesAllowByDefault(false)
.dnsZonesAllows("string")
.dnsZonesDenies("string")
.ipWhitelistStrict(false)
.ipWhitelists("string")
.ipamManageIpam(false)
.ipamViewIpam(false)
.monitoringManageJobs(false)
.monitoringManageLists(false)
.monitoringViewJobs(false)
.name("string")
.securityManageActiveDirectory(false)
.securityManageGlobal2fa(false)
.teams("string")
.build());
apikey_resource = ns1.APIKey("apikeyResource",
account_manage_account_settings=False,
account_manage_apikeys=False,
account_manage_ip_whitelist=False,
account_manage_payment_methods=False,
account_manage_teams=False,
account_manage_users=False,
account_view_activity_log=False,
account_view_invoices=False,
data_manage_datafeeds=False,
data_manage_datasources=False,
data_push_to_datafeeds=False,
dhcp_manage_dhcp=False,
dhcp_view_dhcp=False,
dns_manage_zones=False,
dns_records_allows=[{
"domain": "string",
"include_subdomains": False,
"type": "string",
"zone": "string",
}],
dns_records_denies=[{
"domain": "string",
"include_subdomains": False,
"type": "string",
"zone": "string",
}],
dns_view_zones=False,
dns_zones_allow_by_default=False,
dns_zones_allows=["string"],
dns_zones_denies=["string"],
ip_whitelist_strict=False,
ip_whitelists=["string"],
ipam_manage_ipam=False,
ipam_view_ipam=False,
monitoring_manage_jobs=False,
monitoring_manage_lists=False,
monitoring_view_jobs=False,
name="string",
security_manage_active_directory=False,
security_manage_global2fa=False,
teams=["string"])
const apikeyResource = new ns1.APIKey("apikeyResource", {
accountManageAccountSettings: false,
accountManageApikeys: false,
accountManageIpWhitelist: false,
accountManagePaymentMethods: false,
accountManageTeams: false,
accountManageUsers: false,
accountViewActivityLog: false,
accountViewInvoices: false,
dataManageDatafeeds: false,
dataManageDatasources: false,
dataPushToDatafeeds: false,
dhcpManageDhcp: false,
dhcpViewDhcp: false,
dnsManageZones: false,
dnsRecordsAllows: [{
domain: "string",
includeSubdomains: false,
type: "string",
zone: "string",
}],
dnsRecordsDenies: [{
domain: "string",
includeSubdomains: false,
type: "string",
zone: "string",
}],
dnsViewZones: false,
dnsZonesAllowByDefault: false,
dnsZonesAllows: ["string"],
dnsZonesDenies: ["string"],
ipWhitelistStrict: false,
ipWhitelists: ["string"],
ipamManageIpam: false,
ipamViewIpam: false,
monitoringManageJobs: false,
monitoringManageLists: false,
monitoringViewJobs: false,
name: "string",
securityManageActiveDirectory: false,
securityManageGlobal2fa: false,
teams: ["string"],
});
type: ns1:APIKey
properties:
accountManageAccountSettings: false
accountManageApikeys: false
accountManageIpWhitelist: false
accountManagePaymentMethods: false
accountManageTeams: false
accountManageUsers: false
accountViewActivityLog: false
accountViewInvoices: false
dataManageDatafeeds: false
dataManageDatasources: false
dataPushToDatafeeds: false
dhcpManageDhcp: false
dhcpViewDhcp: false
dnsManageZones: false
dnsRecordsAllows:
- domain: string
includeSubdomains: false
type: string
zone: string
dnsRecordsDenies:
- domain: string
includeSubdomains: false
type: string
zone: string
dnsViewZones: false
dnsZonesAllowByDefault: false
dnsZonesAllows:
- string
dnsZonesDenies:
- string
ipWhitelistStrict: false
ipWhitelists:
- string
ipamManageIpam: false
ipamViewIpam: false
monitoringManageJobs: false
monitoringManageLists: false
monitoringViewJobs: false
name: string
securityManageActiveDirectory: false
securityManageGlobal2fa: false
teams:
- string
APIKey Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The APIKey resource accepts the following input properties:
- Account
Manage boolAccount Settings - Whether the apikey can modify account settings.
- Account
Manage boolApikeys - Whether the apikey can modify account apikeys.
- Account
Manage boolIp Whitelist - Whether the apikey can manage ip whitelist.
- Account
Manage boolPayment Methods - Whether the apikey can modify account payment methods.
- Account
Manage boolPlan - No longer in use.
- Account
Manage boolTeams - Whether the apikey can modify other teams in the account.
- Account
Manage boolUsers - Whether the apikey can modify account users.
- Account
View boolActivity Log - Whether the apikey can view activity logs.
- Account
View boolInvoices - Whether the apikey can view invoices.
- Data
Manage boolDatafeeds - Whether the apikey can modify data feeds.
- Data
Manage boolDatasources - Whether the apikey can modify data sources.
- Data
Push boolTo Datafeeds - Whether the apikey can publish to data feeds.
- Dhcp
Manage boolDhcp - Whether the apikey can manage DHCP. Only relevant for the DDI product.
- Dhcp
View boolDhcp - Whether the apikey can view DHCP. Only relevant for the DDI product.
- Dns
Manage boolZones - Whether the apikey can modify the accounts zones.
- Dns
Records List<APIKeyAllows Dns Records Allow> - List of records that the apikey may access.
- Dns
Records List<APIKeyDenies Dns Records Deny> - List of records that the apikey may not access.
- Dns
View boolZones - Whether the apikey can view the accounts zones.
- Dns
Zones boolAllow By Default - If true, enable the
dns_zones_allowlist, otherwise enable thedns_zones_denylist. - Dns
Zones List<string>Allows - List of zones that the apikey may access.
- Dns
Zones List<string>Denies - List of zones that the apikey may not access.
- Ip
Whitelist boolStrict - Set to true to restrict access to only those IP addresses and networks listed in the ip_whitelist field.
- Ip
Whitelists List<string> - Array of IP addresses/networks to which to grant the API key access.
- Ipam
Manage boolIpam - Whether the apikey can manage IPAM. Only relevant for the DDI product.
- Ipam
View boolIpam - Whether the apikey can view IPAM. Only relevant for the DDI product.
- Monitoring
Manage boolJobs - Whether the apikey can modify monitoring jobs.
- Monitoring
Manage boolLists - Whether the apikey can modify notification lists.
- Monitoring
View boolJobs - Whether the apikey can view monitoring jobs.
- Name string
- The free form name of the apikey.
- Security
Manage boolActive Directory - Whether the apikey can manage global active directory. Only relevant for the DDI product.
- Security
Manage boolGlobal2fa - Whether the apikey can manage global two factor authentication.
- Teams List<string>
- The teams that the apikey belongs to.
- Account
Manage boolAccount Settings - Whether the apikey can modify account settings.
- Account
Manage boolApikeys - Whether the apikey can modify account apikeys.
- Account
Manage boolIp Whitelist - Whether the apikey can manage ip whitelist.
- Account
Manage boolPayment Methods - Whether the apikey can modify account payment methods.
- Account
Manage boolPlan - No longer in use.
- Account
Manage boolTeams - Whether the apikey can modify other teams in the account.
- Account
Manage boolUsers - Whether the apikey can modify account users.
- Account
View boolActivity Log - Whether the apikey can view activity logs.
- Account
View boolInvoices - Whether the apikey can view invoices.
- Data
Manage boolDatafeeds - Whether the apikey can modify data feeds.
- Data
Manage boolDatasources - Whether the apikey can modify data sources.
- Data
Push boolTo Datafeeds - Whether the apikey can publish to data feeds.
- Dhcp
Manage boolDhcp - Whether the apikey can manage DHCP. Only relevant for the DDI product.
- Dhcp
View boolDhcp - Whether the apikey can view DHCP. Only relevant for the DDI product.
- Dns
Manage boolZones - Whether the apikey can modify the accounts zones.
- Dns
Records []APIKeyAllows Dns Records Allow Args - List of records that the apikey may access.
- Dns
Records []APIKeyDenies Dns Records Deny Args - List of records that the apikey may not access.
- Dns
View boolZones - Whether the apikey can view the accounts zones.
- Dns
Zones boolAllow By Default - If true, enable the
dns_zones_allowlist, otherwise enable thedns_zones_denylist. - Dns
Zones []stringAllows - List of zones that the apikey may access.
- Dns
Zones []stringDenies - List of zones that the apikey may not access.
- Ip
Whitelist boolStrict - Set to true to restrict access to only those IP addresses and networks listed in the ip_whitelist field.
- Ip
Whitelists []string - Array of IP addresses/networks to which to grant the API key access.
- Ipam
Manage boolIpam - Whether the apikey can manage IPAM. Only relevant for the DDI product.
- Ipam
View boolIpam - Whether the apikey can view IPAM. Only relevant for the DDI product.
- Monitoring
Manage boolJobs - Whether the apikey can modify monitoring jobs.
- Monitoring
Manage boolLists - Whether the apikey can modify notification lists.
- Monitoring
View boolJobs - Whether the apikey can view monitoring jobs.
- Name string
- The free form name of the apikey.
- Security
Manage boolActive Directory - Whether the apikey can manage global active directory. Only relevant for the DDI product.
- Security
Manage boolGlobal2fa - Whether the apikey can manage global two factor authentication.
- Teams []string
- The teams that the apikey belongs to.
- account
Manage BooleanAccount Settings - Whether the apikey can modify account settings.
- account
Manage BooleanApikeys - Whether the apikey can modify account apikeys.
- account
Manage BooleanIp Whitelist - Whether the apikey can manage ip whitelist.
- account
Manage BooleanPayment Methods - Whether the apikey can modify account payment methods.
- account
Manage BooleanPlan - No longer in use.
- account
Manage BooleanTeams - Whether the apikey can modify other teams in the account.
- account
Manage BooleanUsers - Whether the apikey can modify account users.
- account
View BooleanActivity Log - Whether the apikey can view activity logs.
- account
View BooleanInvoices - Whether the apikey can view invoices.
- data
Manage BooleanDatafeeds - Whether the apikey can modify data feeds.
- data
Manage BooleanDatasources - Whether the apikey can modify data sources.
- data
Push BooleanTo Datafeeds - Whether the apikey can publish to data feeds.
- dhcp
Manage BooleanDhcp - Whether the apikey can manage DHCP. Only relevant for the DDI product.
- dhcp
View BooleanDhcp - Whether the apikey can view DHCP. Only relevant for the DDI product.
- dns
Manage BooleanZones - Whether the apikey can modify the accounts zones.
- dns
Records List<APIKeyAllows Dns Records Allow> - List of records that the apikey may access.
- dns
Records List<APIKeyDenies Dns Records Deny> - List of records that the apikey may not access.
- dns
View BooleanZones - Whether the apikey can view the accounts zones.
- dns
Zones BooleanAllow By Default - If true, enable the
dns_zones_allowlist, otherwise enable thedns_zones_denylist. - dns
Zones List<String>Allows - List of zones that the apikey may access.
- dns
Zones List<String>Denies - List of zones that the apikey may not access.
- ip
Whitelist BooleanStrict - Set to true to restrict access to only those IP addresses and networks listed in the ip_whitelist field.
- ip
Whitelists List<String> - Array of IP addresses/networks to which to grant the API key access.
- ipam
Manage BooleanIpam - Whether the apikey can manage IPAM. Only relevant for the DDI product.
- ipam
View BooleanIpam - Whether the apikey can view IPAM. Only relevant for the DDI product.
- monitoring
Manage BooleanJobs - Whether the apikey can modify monitoring jobs.
- monitoring
Manage BooleanLists - Whether the apikey can modify notification lists.
- monitoring
View BooleanJobs - Whether the apikey can view monitoring jobs.
- name String
- The free form name of the apikey.
- security
Manage BooleanActive Directory - Whether the apikey can manage global active directory. Only relevant for the DDI product.
- security
Manage BooleanGlobal2fa - Whether the apikey can manage global two factor authentication.
- teams List<String>
- The teams that the apikey belongs to.
- account
Manage booleanAccount Settings - Whether the apikey can modify account settings.
- account
Manage booleanApikeys - Whether the apikey can modify account apikeys.
- account
Manage booleanIp Whitelist - Whether the apikey can manage ip whitelist.
- account
Manage booleanPayment Methods - Whether the apikey can modify account payment methods.
- account
Manage booleanPlan - No longer in use.
- account
Manage booleanTeams - Whether the apikey can modify other teams in the account.
- account
Manage booleanUsers - Whether the apikey can modify account users.
- account
View booleanActivity Log - Whether the apikey can view activity logs.
- account
View booleanInvoices - Whether the apikey can view invoices.
- data
Manage booleanDatafeeds - Whether the apikey can modify data feeds.
- data
Manage booleanDatasources - Whether the apikey can modify data sources.
- data
Push booleanTo Datafeeds - Whether the apikey can publish to data feeds.
- dhcp
Manage booleanDhcp - Whether the apikey can manage DHCP. Only relevant for the DDI product.
- dhcp
View booleanDhcp - Whether the apikey can view DHCP. Only relevant for the DDI product.
- dns
Manage booleanZones - Whether the apikey can modify the accounts zones.
- dns
Records APIKeyAllows Dns Records Allow[] - List of records that the apikey may access.
- dns
Records APIKeyDenies Dns Records Deny[] - List of records that the apikey may not access.
- dns
View booleanZones - Whether the apikey can view the accounts zones.
- dns
Zones booleanAllow By Default - If true, enable the
dns_zones_allowlist, otherwise enable thedns_zones_denylist. - dns
Zones string[]Allows - List of zones that the apikey may access.
- dns
Zones string[]Denies - List of zones that the apikey may not access.
- ip
Whitelist booleanStrict - Set to true to restrict access to only those IP addresses and networks listed in the ip_whitelist field.
- ip
Whitelists string[] - Array of IP addresses/networks to which to grant the API key access.
- ipam
Manage booleanIpam - Whether the apikey can manage IPAM. Only relevant for the DDI product.
- ipam
View booleanIpam - Whether the apikey can view IPAM. Only relevant for the DDI product.
- monitoring
Manage booleanJobs - Whether the apikey can modify monitoring jobs.
- monitoring
Manage booleanLists - Whether the apikey can modify notification lists.
- monitoring
View booleanJobs - Whether the apikey can view monitoring jobs.
- name string
- The free form name of the apikey.
- security
Manage booleanActive Directory - Whether the apikey can manage global active directory. Only relevant for the DDI product.
- security
Manage booleanGlobal2fa - Whether the apikey can manage global two factor authentication.
- teams string[]
- The teams that the apikey belongs to.
- account_
manage_ boolaccount_ settings - Whether the apikey can modify account settings.
- account_
manage_ boolapikeys - Whether the apikey can modify account apikeys.
- account_
manage_ boolip_ whitelist - Whether the apikey can manage ip whitelist.
- account_
manage_ boolpayment_ methods - Whether the apikey can modify account payment methods.
- account_
manage_ boolplan - No longer in use.
- account_
manage_ boolteams - Whether the apikey can modify other teams in the account.
- account_
manage_ boolusers - Whether the apikey can modify account users.
- account_
view_ boolactivity_ log - Whether the apikey can view activity logs.
- account_
view_ boolinvoices - Whether the apikey can view invoices.
- data_
manage_ booldatafeeds - Whether the apikey can modify data feeds.
- data_
manage_ booldatasources - Whether the apikey can modify data sources.
- data_
push_ boolto_ datafeeds - Whether the apikey can publish to data feeds.
- dhcp_
manage_ booldhcp - Whether the apikey can manage DHCP. Only relevant for the DDI product.
- dhcp_
view_ booldhcp - Whether the apikey can view DHCP. Only relevant for the DDI product.
- dns_
manage_ boolzones - Whether the apikey can modify the accounts zones.
- dns_
records_ Sequence[APIKeyallows Dns Records Allow Args] - List of records that the apikey may access.
- dns_
records_ Sequence[APIKeydenies Dns Records Deny Args] - List of records that the apikey may not access.
- dns_
view_ boolzones - Whether the apikey can view the accounts zones.
- dns_
zones_ boolallow_ by_ default - If true, enable the
dns_zones_allowlist, otherwise enable thedns_zones_denylist. - dns_
zones_ Sequence[str]allows - List of zones that the apikey may access.
- dns_
zones_ Sequence[str]denies - List of zones that the apikey may not access.
- ip_
whitelist_ boolstrict - Set to true to restrict access to only those IP addresses and networks listed in the ip_whitelist field.
- ip_
whitelists Sequence[str] - Array of IP addresses/networks to which to grant the API key access.
- ipam_
manage_ boolipam - Whether the apikey can manage IPAM. Only relevant for the DDI product.
- ipam_
view_ boolipam - Whether the apikey can view IPAM. Only relevant for the DDI product.
- monitoring_
manage_ booljobs - Whether the apikey can modify monitoring jobs.
- monitoring_
manage_ boollists - Whether the apikey can modify notification lists.
- monitoring_
view_ booljobs - Whether the apikey can view monitoring jobs.
- name str
- The free form name of the apikey.
- security_
manage_ boolactive_ directory - Whether the apikey can manage global active directory. Only relevant for the DDI product.
- security_
manage_ boolglobal2fa - Whether the apikey can manage global two factor authentication.
- teams Sequence[str]
- The teams that the apikey belongs to.
- account
Manage BooleanAccount Settings - Whether the apikey can modify account settings.
- account
Manage BooleanApikeys - Whether the apikey can modify account apikeys.
- account
Manage BooleanIp Whitelist - Whether the apikey can manage ip whitelist.
- account
Manage BooleanPayment Methods - Whether the apikey can modify account payment methods.
- account
Manage BooleanPlan - No longer in use.
- account
Manage BooleanTeams - Whether the apikey can modify other teams in the account.
- account
Manage BooleanUsers - Whether the apikey can modify account users.
- account
View BooleanActivity Log - Whether the apikey can view activity logs.
- account
View BooleanInvoices - Whether the apikey can view invoices.
- data
Manage BooleanDatafeeds - Whether the apikey can modify data feeds.
- data
Manage BooleanDatasources - Whether the apikey can modify data sources.
- data
Push BooleanTo Datafeeds - Whether the apikey can publish to data feeds.
- dhcp
Manage BooleanDhcp - Whether the apikey can manage DHCP. Only relevant for the DDI product.
- dhcp
View BooleanDhcp - Whether the apikey can view DHCP. Only relevant for the DDI product.
- dns
Manage BooleanZones - Whether the apikey can modify the accounts zones.
- dns
Records List<Property Map>Allows - List of records that the apikey may access.
- dns
Records List<Property Map>Denies - List of records that the apikey may not access.
- dns
View BooleanZones - Whether the apikey can view the accounts zones.
- dns
Zones BooleanAllow By Default - If true, enable the
dns_zones_allowlist, otherwise enable thedns_zones_denylist. - dns
Zones List<String>Allows - List of zones that the apikey may access.
- dns
Zones List<String>Denies - List of zones that the apikey may not access.
- ip
Whitelist BooleanStrict - Set to true to restrict access to only those IP addresses and networks listed in the ip_whitelist field.
- ip
Whitelists List<String> - Array of IP addresses/networks to which to grant the API key access.
- ipam
Manage BooleanIpam - Whether the apikey can manage IPAM. Only relevant for the DDI product.
- ipam
View BooleanIpam - Whether the apikey can view IPAM. Only relevant for the DDI product.
- monitoring
Manage BooleanJobs - Whether the apikey can modify monitoring jobs.
- monitoring
Manage BooleanLists - Whether the apikey can modify notification lists.
- monitoring
View BooleanJobs - Whether the apikey can view monitoring jobs.
- name String
- The free form name of the apikey.
- security
Manage BooleanActive Directory - Whether the apikey can manage global active directory. Only relevant for the DDI product.
- security
Manage BooleanGlobal2fa - Whether the apikey can manage global two factor authentication.
- teams List<String>
- The teams that the apikey belongs to.
Outputs
All input properties are implicitly available as output properties. Additionally, the APIKey resource produces the following output properties:
Look up Existing APIKey Resource
Get an existing APIKey resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: APIKeyState, opts?: CustomResourceOptions): APIKey@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
account_manage_account_settings: Optional[bool] = None,
account_manage_apikeys: Optional[bool] = None,
account_manage_ip_whitelist: Optional[bool] = None,
account_manage_payment_methods: Optional[bool] = None,
account_manage_plan: Optional[bool] = None,
account_manage_teams: Optional[bool] = None,
account_manage_users: Optional[bool] = None,
account_view_activity_log: Optional[bool] = None,
account_view_invoices: Optional[bool] = None,
data_manage_datafeeds: Optional[bool] = None,
data_manage_datasources: Optional[bool] = None,
data_push_to_datafeeds: Optional[bool] = None,
dhcp_manage_dhcp: Optional[bool] = None,
dhcp_view_dhcp: Optional[bool] = None,
dns_manage_zones: Optional[bool] = None,
dns_records_allows: Optional[Sequence[APIKeyDnsRecordsAllowArgs]] = None,
dns_records_denies: Optional[Sequence[APIKeyDnsRecordsDenyArgs]] = None,
dns_view_zones: Optional[bool] = None,
dns_zones_allow_by_default: Optional[bool] = None,
dns_zones_allows: Optional[Sequence[str]] = None,
dns_zones_denies: Optional[Sequence[str]] = None,
ip_whitelist_strict: Optional[bool] = None,
ip_whitelists: Optional[Sequence[str]] = None,
ipam_manage_ipam: Optional[bool] = None,
ipam_view_ipam: Optional[bool] = None,
key: Optional[str] = None,
monitoring_manage_jobs: Optional[bool] = None,
monitoring_manage_lists: Optional[bool] = None,
monitoring_view_jobs: Optional[bool] = None,
name: Optional[str] = None,
security_manage_active_directory: Optional[bool] = None,
security_manage_global2fa: Optional[bool] = None,
teams: Optional[Sequence[str]] = None) -> APIKeyfunc GetAPIKey(ctx *Context, name string, id IDInput, state *APIKeyState, opts ...ResourceOption) (*APIKey, error)public static APIKey Get(string name, Input<string> id, APIKeyState? state, CustomResourceOptions? opts = null)public static APIKey get(String name, Output<String> id, APIKeyState state, CustomResourceOptions options)resources: _: type: ns1:APIKey get: id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Account
Manage boolAccount Settings - Whether the apikey can modify account settings.
- Account
Manage boolApikeys - Whether the apikey can modify account apikeys.
- Account
Manage boolIp Whitelist - Whether the apikey can manage ip whitelist.
- Account
Manage boolPayment Methods - Whether the apikey can modify account payment methods.
- Account
Manage boolPlan - No longer in use.
- Account
Manage boolTeams - Whether the apikey can modify other teams in the account.
- Account
Manage boolUsers - Whether the apikey can modify account users.
- Account
View boolActivity Log - Whether the apikey can view activity logs.
- Account
View boolInvoices - Whether the apikey can view invoices.
- Data
Manage boolDatafeeds - Whether the apikey can modify data feeds.
- Data
Manage boolDatasources - Whether the apikey can modify data sources.
- Data
Push boolTo Datafeeds - Whether the apikey can publish to data feeds.
- Dhcp
Manage boolDhcp - Whether the apikey can manage DHCP. Only relevant for the DDI product.
- Dhcp
View boolDhcp - Whether the apikey can view DHCP. Only relevant for the DDI product.
- Dns
Manage boolZones - Whether the apikey can modify the accounts zones.
- Dns
Records List<APIKeyAllows Dns Records Allow> - List of records that the apikey may access.
- Dns
Records List<APIKeyDenies Dns Records Deny> - List of records that the apikey may not access.
- Dns
View boolZones - Whether the apikey can view the accounts zones.
- Dns
Zones boolAllow By Default - If true, enable the
dns_zones_allowlist, otherwise enable thedns_zones_denylist. - Dns
Zones List<string>Allows - List of zones that the apikey may access.
- Dns
Zones List<string>Denies - List of zones that the apikey may not access.
- Ip
Whitelist boolStrict - Set to true to restrict access to only those IP addresses and networks listed in the ip_whitelist field.
- Ip
Whitelists List<string> - Array of IP addresses/networks to which to grant the API key access.
- Ipam
Manage boolIpam - Whether the apikey can manage IPAM. Only relevant for the DDI product.
- Ipam
View boolIpam - Whether the apikey can view IPAM. Only relevant for the DDI product.
- Key string
- (Computed) The apikeys authentication token.
- Monitoring
Manage boolJobs - Whether the apikey can modify monitoring jobs.
- Monitoring
Manage boolLists - Whether the apikey can modify notification lists.
- Monitoring
View boolJobs - Whether the apikey can view monitoring jobs.
- Name string
- The free form name of the apikey.
- Security
Manage boolActive Directory - Whether the apikey can manage global active directory. Only relevant for the DDI product.
- Security
Manage boolGlobal2fa - Whether the apikey can manage global two factor authentication.
- Teams List<string>
- The teams that the apikey belongs to.
- Account
Manage boolAccount Settings - Whether the apikey can modify account settings.
- Account
Manage boolApikeys - Whether the apikey can modify account apikeys.
- Account
Manage boolIp Whitelist - Whether the apikey can manage ip whitelist.
- Account
Manage boolPayment Methods - Whether the apikey can modify account payment methods.
- Account
Manage boolPlan - No longer in use.
- Account
Manage boolTeams - Whether the apikey can modify other teams in the account.
- Account
Manage boolUsers - Whether the apikey can modify account users.
- Account
View boolActivity Log - Whether the apikey can view activity logs.
- Account
View boolInvoices - Whether the apikey can view invoices.
- Data
Manage boolDatafeeds - Whether the apikey can modify data feeds.
- Data
Manage boolDatasources - Whether the apikey can modify data sources.
- Data
Push boolTo Datafeeds - Whether the apikey can publish to data feeds.
- Dhcp
Manage boolDhcp - Whether the apikey can manage DHCP. Only relevant for the DDI product.
- Dhcp
View boolDhcp - Whether the apikey can view DHCP. Only relevant for the DDI product.
- Dns
Manage boolZones - Whether the apikey can modify the accounts zones.
- Dns
Records []APIKeyAllows Dns Records Allow Args - List of records that the apikey may access.
- Dns
Records []APIKeyDenies Dns Records Deny Args - List of records that the apikey may not access.
- Dns
View boolZones - Whether the apikey can view the accounts zones.
- Dns
Zones boolAllow By Default - If true, enable the
dns_zones_allowlist, otherwise enable thedns_zones_denylist. - Dns
Zones []stringAllows - List of zones that the apikey may access.
- Dns
Zones []stringDenies - List of zones that the apikey may not access.
- Ip
Whitelist boolStrict - Set to true to restrict access to only those IP addresses and networks listed in the ip_whitelist field.
- Ip
Whitelists []string - Array of IP addresses/networks to which to grant the API key access.
- Ipam
Manage boolIpam - Whether the apikey can manage IPAM. Only relevant for the DDI product.
- Ipam
View boolIpam - Whether the apikey can view IPAM. Only relevant for the DDI product.
- Key string
- (Computed) The apikeys authentication token.
- Monitoring
Manage boolJobs - Whether the apikey can modify monitoring jobs.
- Monitoring
Manage boolLists - Whether the apikey can modify notification lists.
- Monitoring
View boolJobs - Whether the apikey can view monitoring jobs.
- Name string
- The free form name of the apikey.
- Security
Manage boolActive Directory - Whether the apikey can manage global active directory. Only relevant for the DDI product.
- Security
Manage boolGlobal2fa - Whether the apikey can manage global two factor authentication.
- Teams []string
- The teams that the apikey belongs to.
- account
Manage BooleanAccount Settings - Whether the apikey can modify account settings.
- account
Manage BooleanApikeys - Whether the apikey can modify account apikeys.
- account
Manage BooleanIp Whitelist - Whether the apikey can manage ip whitelist.
- account
Manage BooleanPayment Methods - Whether the apikey can modify account payment methods.
- account
Manage BooleanPlan - No longer in use.
- account
Manage BooleanTeams - Whether the apikey can modify other teams in the account.
- account
Manage BooleanUsers - Whether the apikey can modify account users.
- account
View BooleanActivity Log - Whether the apikey can view activity logs.
- account
View BooleanInvoices - Whether the apikey can view invoices.
- data
Manage BooleanDatafeeds - Whether the apikey can modify data feeds.
- data
Manage BooleanDatasources - Whether the apikey can modify data sources.
- data
Push BooleanTo Datafeeds - Whether the apikey can publish to data feeds.
- dhcp
Manage BooleanDhcp - Whether the apikey can manage DHCP. Only relevant for the DDI product.
- dhcp
View BooleanDhcp - Whether the apikey can view DHCP. Only relevant for the DDI product.
- dns
Manage BooleanZones - Whether the apikey can modify the accounts zones.
- dns
Records List<APIKeyAllows Dns Records Allow> - List of records that the apikey may access.
- dns
Records List<APIKeyDenies Dns Records Deny> - List of records that the apikey may not access.
- dns
View BooleanZones - Whether the apikey can view the accounts zones.
- dns
Zones BooleanAllow By Default - If true, enable the
dns_zones_allowlist, otherwise enable thedns_zones_denylist. - dns
Zones List<String>Allows - List of zones that the apikey may access.
- dns
Zones List<String>Denies - List of zones that the apikey may not access.
- ip
Whitelist BooleanStrict - Set to true to restrict access to only those IP addresses and networks listed in the ip_whitelist field.
- ip
Whitelists List<String> - Array of IP addresses/networks to which to grant the API key access.
- ipam
Manage BooleanIpam - Whether the apikey can manage IPAM. Only relevant for the DDI product.
- ipam
View BooleanIpam - Whether the apikey can view IPAM. Only relevant for the DDI product.
- key String
- (Computed) The apikeys authentication token.
- monitoring
Manage BooleanJobs - Whether the apikey can modify monitoring jobs.
- monitoring
Manage BooleanLists - Whether the apikey can modify notification lists.
- monitoring
View BooleanJobs - Whether the apikey can view monitoring jobs.
- name String
- The free form name of the apikey.
- security
Manage BooleanActive Directory - Whether the apikey can manage global active directory. Only relevant for the DDI product.
- security
Manage BooleanGlobal2fa - Whether the apikey can manage global two factor authentication.
- teams List<String>
- The teams that the apikey belongs to.
- account
Manage booleanAccount Settings - Whether the apikey can modify account settings.
- account
Manage booleanApikeys - Whether the apikey can modify account apikeys.
- account
Manage booleanIp Whitelist - Whether the apikey can manage ip whitelist.
- account
Manage booleanPayment Methods - Whether the apikey can modify account payment methods.
- account
Manage booleanPlan - No longer in use.
- account
Manage booleanTeams - Whether the apikey can modify other teams in the account.
- account
Manage booleanUsers - Whether the apikey can modify account users.
- account
View booleanActivity Log - Whether the apikey can view activity logs.
- account
View booleanInvoices - Whether the apikey can view invoices.
- data
Manage booleanDatafeeds - Whether the apikey can modify data feeds.
- data
Manage booleanDatasources - Whether the apikey can modify data sources.
- data
Push booleanTo Datafeeds - Whether the apikey can publish to data feeds.
- dhcp
Manage booleanDhcp - Whether the apikey can manage DHCP. Only relevant for the DDI product.
- dhcp
View booleanDhcp - Whether the apikey can view DHCP. Only relevant for the DDI product.
- dns
Manage booleanZones - Whether the apikey can modify the accounts zones.
- dns
Records APIKeyAllows Dns Records Allow[] - List of records that the apikey may access.
- dns
Records APIKeyDenies Dns Records Deny[] - List of records that the apikey may not access.
- dns
View booleanZones - Whether the apikey can view the accounts zones.
- dns
Zones booleanAllow By Default - If true, enable the
dns_zones_allowlist, otherwise enable thedns_zones_denylist. - dns
Zones string[]Allows - List of zones that the apikey may access.
- dns
Zones string[]Denies - List of zones that the apikey may not access.
- ip
Whitelist booleanStrict - Set to true to restrict access to only those IP addresses and networks listed in the ip_whitelist field.
- ip
Whitelists string[] - Array of IP addresses/networks to which to grant the API key access.
- ipam
Manage booleanIpam - Whether the apikey can manage IPAM. Only relevant for the DDI product.
- ipam
View booleanIpam - Whether the apikey can view IPAM. Only relevant for the DDI product.
- key string
- (Computed) The apikeys authentication token.
- monitoring
Manage booleanJobs - Whether the apikey can modify monitoring jobs.
- monitoring
Manage booleanLists - Whether the apikey can modify notification lists.
- monitoring
View booleanJobs - Whether the apikey can view monitoring jobs.
- name string
- The free form name of the apikey.
- security
Manage booleanActive Directory - Whether the apikey can manage global active directory. Only relevant for the DDI product.
- security
Manage booleanGlobal2fa - Whether the apikey can manage global two factor authentication.
- teams string[]
- The teams that the apikey belongs to.
- account_
manage_ boolaccount_ settings - Whether the apikey can modify account settings.
- account_
manage_ boolapikeys - Whether the apikey can modify account apikeys.
- account_
manage_ boolip_ whitelist - Whether the apikey can manage ip whitelist.
- account_
manage_ boolpayment_ methods - Whether the apikey can modify account payment methods.
- account_
manage_ boolplan - No longer in use.
- account_
manage_ boolteams - Whether the apikey can modify other teams in the account.
- account_
manage_ boolusers - Whether the apikey can modify account users.
- account_
view_ boolactivity_ log - Whether the apikey can view activity logs.
- account_
view_ boolinvoices - Whether the apikey can view invoices.
- data_
manage_ booldatafeeds - Whether the apikey can modify data feeds.
- data_
manage_ booldatasources - Whether the apikey can modify data sources.
- data_
push_ boolto_ datafeeds - Whether the apikey can publish to data feeds.
- dhcp_
manage_ booldhcp - Whether the apikey can manage DHCP. Only relevant for the DDI product.
- dhcp_
view_ booldhcp - Whether the apikey can view DHCP. Only relevant for the DDI product.
- dns_
manage_ boolzones - Whether the apikey can modify the accounts zones.
- dns_
records_ Sequence[APIKeyallows Dns Records Allow Args] - List of records that the apikey may access.
- dns_
records_ Sequence[APIKeydenies Dns Records Deny Args] - List of records that the apikey may not access.
- dns_
view_ boolzones - Whether the apikey can view the accounts zones.
- dns_
zones_ boolallow_ by_ default - If true, enable the
dns_zones_allowlist, otherwise enable thedns_zones_denylist. - dns_
zones_ Sequence[str]allows - List of zones that the apikey may access.
- dns_
zones_ Sequence[str]denies - List of zones that the apikey may not access.
- ip_
whitelist_ boolstrict - Set to true to restrict access to only those IP addresses and networks listed in the ip_whitelist field.
- ip_
whitelists Sequence[str] - Array of IP addresses/networks to which to grant the API key access.
- ipam_
manage_ boolipam - Whether the apikey can manage IPAM. Only relevant for the DDI product.
- ipam_
view_ boolipam - Whether the apikey can view IPAM. Only relevant for the DDI product.
- key str
- (Computed) The apikeys authentication token.
- monitoring_
manage_ booljobs - Whether the apikey can modify monitoring jobs.
- monitoring_
manage_ boollists - Whether the apikey can modify notification lists.
- monitoring_
view_ booljobs - Whether the apikey can view monitoring jobs.
- name str
- The free form name of the apikey.
- security_
manage_ boolactive_ directory - Whether the apikey can manage global active directory. Only relevant for the DDI product.
- security_
manage_ boolglobal2fa - Whether the apikey can manage global two factor authentication.
- teams Sequence[str]
- The teams that the apikey belongs to.
- account
Manage BooleanAccount Settings - Whether the apikey can modify account settings.
- account
Manage BooleanApikeys - Whether the apikey can modify account apikeys.
- account
Manage BooleanIp Whitelist - Whether the apikey can manage ip whitelist.
- account
Manage BooleanPayment Methods - Whether the apikey can modify account payment methods.
- account
Manage BooleanPlan - No longer in use.
- account
Manage BooleanTeams - Whether the apikey can modify other teams in the account.
- account
Manage BooleanUsers - Whether the apikey can modify account users.
- account
View BooleanActivity Log - Whether the apikey can view activity logs.
- account
View BooleanInvoices - Whether the apikey can view invoices.
- data
Manage BooleanDatafeeds - Whether the apikey can modify data feeds.
- data
Manage BooleanDatasources - Whether the apikey can modify data sources.
- data
Push BooleanTo Datafeeds - Whether the apikey can publish to data feeds.
- dhcp
Manage BooleanDhcp - Whether the apikey can manage DHCP. Only relevant for the DDI product.
- dhcp
View BooleanDhcp - Whether the apikey can view DHCP. Only relevant for the DDI product.
- dns
Manage BooleanZones - Whether the apikey can modify the accounts zones.
- dns
Records List<Property Map>Allows - List of records that the apikey may access.
- dns
Records List<Property Map>Denies - List of records that the apikey may not access.
- dns
View BooleanZones - Whether the apikey can view the accounts zones.
- dns
Zones BooleanAllow By Default - If true, enable the
dns_zones_allowlist, otherwise enable thedns_zones_denylist. - dns
Zones List<String>Allows - List of zones that the apikey may access.
- dns
Zones List<String>Denies - List of zones that the apikey may not access.
- ip
Whitelist BooleanStrict - Set to true to restrict access to only those IP addresses and networks listed in the ip_whitelist field.
- ip
Whitelists List<String> - Array of IP addresses/networks to which to grant the API key access.
- ipam
Manage BooleanIpam - Whether the apikey can manage IPAM. Only relevant for the DDI product.
- ipam
View BooleanIpam - Whether the apikey can view IPAM. Only relevant for the DDI product.
- key String
- (Computed) The apikeys authentication token.
- monitoring
Manage BooleanJobs - Whether the apikey can modify monitoring jobs.
- monitoring
Manage BooleanLists - Whether the apikey can modify notification lists.
- monitoring
View BooleanJobs - Whether the apikey can view monitoring jobs.
- name String
- The free form name of the apikey.
- security
Manage BooleanActive Directory - Whether the apikey can manage global active directory. Only relevant for the DDI product.
- security
Manage BooleanGlobal2fa - Whether the apikey can manage global two factor authentication.
- teams List<String>
- The teams that the apikey belongs to.
Supporting Types
APIKeyDnsRecordsAllow, APIKeyDnsRecordsAllowArgs
- Domain string
- Include
Subdomains bool - Type string
- Zone string
- Domain string
- Include
Subdomains bool - Type string
- Zone string
- domain String
- include
Subdomains Boolean - type String
- zone String
- domain string
- include
Subdomains boolean - type string
- zone string
- domain str
- include_
subdomains bool - type str
- zone str
- domain String
- include
Subdomains Boolean - type String
- zone String
APIKeyDnsRecordsDeny, APIKeyDnsRecordsDenyArgs
- Domain string
- Include
Subdomains bool - Type string
- Zone string
- Domain string
- Include
Subdomains bool - Type string
- Zone string
- domain String
- include
Subdomains Boolean - type String
- zone String
- domain string
- include
Subdomains boolean - type string
- zone string
- domain str
- include_
subdomains bool - type str
- zone str
- domain String
- include
Subdomains Boolean - type String
- zone String
Package Details
- Repository
- NS1 pulumi/pulumi-ns1
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
ns1Terraform Provider.
published on Monday, Mar 9, 2026 by Pulumi
