tencentcloud 1.81.189, Apr 30 25

tencentcloud 1.81.189 published on Wednesday, Apr 30, 2025 by tencentcloudstack

tencentcloudstack/terraform-provider-tencentcloud

tencentcloud.Provider

Explore with Pulumi AI

tencentcloud 1.81.189 published on Wednesday, Apr 30, 2025 by tencentcloudstack

tencentcloudstack/terraform-provider-tencentcloud

The provider type for the tencentcloud package. By default, resources use package-wide configuration settings, however an explicit Provider instance may be created and passed during resource construction to achieve fine-grained programmatic control over provider settings. See the documentation for more information.

Create Provider Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Provider(name: string, args?: ProviderArgs, opts?: CustomResourceOptions);

@overload
def Provider(resource_name: str,
             args: Optional[ProviderArgs] = None,
             opts: Optional[ResourceOptions] = None)

@overload
def Provider(resource_name: str,
             opts: Optional[ResourceOptions] = None,
             allowed_account_ids: Optional[Sequence[str]] = None,
             assume_role: Optional[ProviderAssumeRoleArgs] = None,
             assume_role_with_saml: Optional[ProviderAssumeRoleWithSamlArgs] = None,
             assume_role_with_web_identity: Optional[ProviderAssumeRoleWithWebIdentityArgs] = None,
             cam_role_name: Optional[str] = None,
             cos_domain: Optional[str] = None,
             domain: Optional[str] = None,
             enable_pod_oidc: Optional[bool] = None,
             forbidden_account_ids: Optional[Sequence[str]] = None,
             mfa_certification: Optional[ProviderMfaCertificationArgs] = None,
             profile: Optional[str] = None,
             protocol: Optional[str] = None,
             region: Optional[str] = None,
             secret_id: Optional[str] = None,
             secret_key: Optional[str] = None,
             security_token: Optional[str] = None,
             shared_credentials_dir: Optional[str] = None)

func NewProvider(ctx *Context, name string, args *ProviderArgs, opts ...ResourceOption) (*Provider, error)

public Provider(string name, ProviderArgs? args = null, CustomResourceOptions? opts = null)

public Provider(String name, ProviderArgs args)
public Provider(String name, ProviderArgs args, CustomResourceOptions options)

type: pulumi:providers:tencentcloud
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args ProviderArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args ProviderArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args ProviderArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args ProviderArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args ProviderArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Provider Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The Provider resource accepts the following input properties:

AllowedAccountIds List<string>: List of allowed TencentCloud account IDs to prevent you from mistakenly using the wrong one (and potentially end up destroying a live environment). Conflicts with forbidden_account_ids, If use assume_role_with_saml or assume_role_with_web_identity, it is not supported.
AssumeRole ProviderAssumeRole
AssumeRoleWithSaml ProviderAssumeRoleWithSaml
AssumeRoleWithWebIdentity ProviderAssumeRoleWithWebIdentity
CamRoleName string: The name of the CVM instance CAM role. It can be sourced from the TENCENTCLOUD_CAM_ROLE_NAME environment variable.
CosDomain string: The cos domain of the API request, Default is https://cos.{region}.myqcloud.com, Other Examples: https://cluster-123456.cos-cdc.ap-guangzhou.myqcloud.com.
Domain string: The root domain of the API request, Default is tencentcloudapi.com.
EnablePodOidc bool: Whether to enable pod oidc.
ForbiddenAccountIds List<string>: List of forbidden TencentCloud account IDs to prevent you from mistakenly using the wrong one (and potentially end up destroying a live environment). Conflicts with allowed_account_ids, If use assume_role_with_saml or assume_role_with_web_identity, it is not supported.
MfaCertification ProviderMfaCertification
Profile string: The profile name as set in the shared credentials. It can also be sourced from the TENCENTCLOUD_PROFILE environment variable. If not set, the default profile created with tccli configure will be used.
Protocol string: The protocol of the API request. Valid values: HTTP and HTTPS. Default is HTTPS.
Region string: This is the TencentCloud region. It can also be sourced from the TENCENTCLOUD_REGION environment variables. The default input value is ap-guangzhou.
SecretId string: This is the TencentCloud access key. It can also be sourced from the TENCENTCLOUD_SECRET_ID environment variable.
SecretKey string: This is the TencentCloud secret key. It can also be sourced from the TENCENTCLOUD_SECRET_KEY environment variable.
SecurityToken string: TencentCloud Security Token of temporary access credentials. It can be sourced from the TENCENTCLOUD_SECURITY_TOKEN environment variable. Notice: for supported products, please refer to: temporary key supported products.
SharedCredentialsDir string: The directory of the shared credentials. It can also be sourced from the TENCENTCLOUD_SHARED_CREDENTIALS_DIR environment variable. If not set this defaults to ~/.tccli.

AllowedAccountIds []string: List of allowed TencentCloud account IDs to prevent you from mistakenly using the wrong one (and potentially end up destroying a live environment). Conflicts with forbidden_account_ids, If use assume_role_with_saml or assume_role_with_web_identity, it is not supported.
AssumeRole ProviderAssumeRoleArgs
AssumeRoleWithSaml ProviderAssumeRoleWithSamlArgs
AssumeRoleWithWebIdentity ProviderAssumeRoleWithWebIdentityArgs
CamRoleName string: The name of the CVM instance CAM role. It can be sourced from the TENCENTCLOUD_CAM_ROLE_NAME environment variable.
CosDomain string: The cos domain of the API request, Default is https://cos.{region}.myqcloud.com, Other Examples: https://cluster-123456.cos-cdc.ap-guangzhou.myqcloud.com.
Domain string: The root domain of the API request, Default is tencentcloudapi.com.
EnablePodOidc bool: Whether to enable pod oidc.
ForbiddenAccountIds []string: List of forbidden TencentCloud account IDs to prevent you from mistakenly using the wrong one (and potentially end up destroying a live environment). Conflicts with allowed_account_ids, If use assume_role_with_saml or assume_role_with_web_identity, it is not supported.
MfaCertification ProviderMfaCertificationArgs
Profile string: The profile name as set in the shared credentials. It can also be sourced from the TENCENTCLOUD_PROFILE environment variable. If not set, the default profile created with tccli configure will be used.
Protocol string: The protocol of the API request. Valid values: HTTP and HTTPS. Default is HTTPS.
Region string: This is the TencentCloud region. It can also be sourced from the TENCENTCLOUD_REGION environment variables. The default input value is ap-guangzhou.
SecretId string: This is the TencentCloud access key. It can also be sourced from the TENCENTCLOUD_SECRET_ID environment variable.
SecretKey string: This is the TencentCloud secret key. It can also be sourced from the TENCENTCLOUD_SECRET_KEY environment variable.
SecurityToken string: TencentCloud Security Token of temporary access credentials. It can be sourced from the TENCENTCLOUD_SECURITY_TOKEN environment variable. Notice: for supported products, please refer to: temporary key supported products.
SharedCredentialsDir string: The directory of the shared credentials. It can also be sourced from the TENCENTCLOUD_SHARED_CREDENTIALS_DIR environment variable. If not set this defaults to ~/.tccli.

allowedAccountIds List<String>: List of allowed TencentCloud account IDs to prevent you from mistakenly using the wrong one (and potentially end up destroying a live environment). Conflicts with forbidden_account_ids, If use assume_role_with_saml or assume_role_with_web_identity, it is not supported.
assumeRole ProviderAssumeRole
assumeRoleWithSaml ProviderAssumeRoleWithSaml
assumeRoleWithWebIdentity ProviderAssumeRoleWithWebIdentity
camRoleName String: The name of the CVM instance CAM role. It can be sourced from the TENCENTCLOUD_CAM_ROLE_NAME environment variable.
cosDomain String: The cos domain of the API request, Default is https://cos.{region}.myqcloud.com, Other Examples: https://cluster-123456.cos-cdc.ap-guangzhou.myqcloud.com.
domain String: The root domain of the API request, Default is tencentcloudapi.com.
enablePodOidc Boolean: Whether to enable pod oidc.
forbiddenAccountIds List<String>: List of forbidden TencentCloud account IDs to prevent you from mistakenly using the wrong one (and potentially end up destroying a live environment). Conflicts with allowed_account_ids, If use assume_role_with_saml or assume_role_with_web_identity, it is not supported.
mfaCertification ProviderMfaCertification
profile String: The profile name as set in the shared credentials. It can also be sourced from the TENCENTCLOUD_PROFILE environment variable. If not set, the default profile created with tccli configure will be used.
protocol String: The protocol of the API request. Valid values: HTTP and HTTPS. Default is HTTPS.
region String: This is the TencentCloud region. It can also be sourced from the TENCENTCLOUD_REGION environment variables. The default input value is ap-guangzhou.
secretId String: This is the TencentCloud access key. It can also be sourced from the TENCENTCLOUD_SECRET_ID environment variable.
secretKey String: This is the TencentCloud secret key. It can also be sourced from the TENCENTCLOUD_SECRET_KEY environment variable.
securityToken String: TencentCloud Security Token of temporary access credentials. It can be sourced from the TENCENTCLOUD_SECURITY_TOKEN environment variable. Notice: for supported products, please refer to: temporary key supported products.
sharedCredentialsDir String: The directory of the shared credentials. It can also be sourced from the TENCENTCLOUD_SHARED_CREDENTIALS_DIR environment variable. If not set this defaults to ~/.tccli.

allowedAccountIds string[]: List of allowed TencentCloud account IDs to prevent you from mistakenly using the wrong one (and potentially end up destroying a live environment). Conflicts with forbidden_account_ids, If use assume_role_with_saml or assume_role_with_web_identity, it is not supported.
assumeRole ProviderAssumeRole
assumeRoleWithSaml ProviderAssumeRoleWithSaml
assumeRoleWithWebIdentity ProviderAssumeRoleWithWebIdentity
camRoleName string: The name of the CVM instance CAM role. It can be sourced from the TENCENTCLOUD_CAM_ROLE_NAME environment variable.
cosDomain string: The cos domain of the API request, Default is https://cos.{region}.myqcloud.com, Other Examples: https://cluster-123456.cos-cdc.ap-guangzhou.myqcloud.com.
domain string: The root domain of the API request, Default is tencentcloudapi.com.
enablePodOidc boolean: Whether to enable pod oidc.
forbiddenAccountIds string[]: List of forbidden TencentCloud account IDs to prevent you from mistakenly using the wrong one (and potentially end up destroying a live environment). Conflicts with allowed_account_ids, If use assume_role_with_saml or assume_role_with_web_identity, it is not supported.
mfaCertification ProviderMfaCertification
profile string: The profile name as set in the shared credentials. It can also be sourced from the TENCENTCLOUD_PROFILE environment variable. If not set, the default profile created with tccli configure will be used.
protocol string: The protocol of the API request. Valid values: HTTP and HTTPS. Default is HTTPS.
region string: This is the TencentCloud region. It can also be sourced from the TENCENTCLOUD_REGION environment variables. The default input value is ap-guangzhou.
secretId string: This is the TencentCloud access key. It can also be sourced from the TENCENTCLOUD_SECRET_ID environment variable.
secretKey string: This is the TencentCloud secret key. It can also be sourced from the TENCENTCLOUD_SECRET_KEY environment variable.
securityToken string: TencentCloud Security Token of temporary access credentials. It can be sourced from the TENCENTCLOUD_SECURITY_TOKEN environment variable. Notice: for supported products, please refer to: temporary key supported products.
sharedCredentialsDir string: The directory of the shared credentials. It can also be sourced from the TENCENTCLOUD_SHARED_CREDENTIALS_DIR environment variable. If not set this defaults to ~/.tccli.

allowed_account_ids Sequence[str]: List of allowed TencentCloud account IDs to prevent you from mistakenly using the wrong one (and potentially end up destroying a live environment). Conflicts with forbidden_account_ids, If use assume_role_with_saml or assume_role_with_web_identity, it is not supported.
assume_role ProviderAssumeRoleArgs
assume_role_with_saml ProviderAssumeRoleWithSamlArgs
assume_role_with_web_identity ProviderAssumeRoleWithWebIdentityArgs
cam_role_name str: The name of the CVM instance CAM role. It can be sourced from the TENCENTCLOUD_CAM_ROLE_NAME environment variable.
cos_domain str: The cos domain of the API request, Default is https://cos.{region}.myqcloud.com, Other Examples: https://cluster-123456.cos-cdc.ap-guangzhou.myqcloud.com.
domain str: The root domain of the API request, Default is tencentcloudapi.com.
enable_pod_oidc bool: Whether to enable pod oidc.
forbidden_account_ids Sequence[str]: List of forbidden TencentCloud account IDs to prevent you from mistakenly using the wrong one (and potentially end up destroying a live environment). Conflicts with allowed_account_ids, If use assume_role_with_saml or assume_role_with_web_identity, it is not supported.
mfa_certification ProviderMfaCertificationArgs
profile str: The profile name as set in the shared credentials. It can also be sourced from the TENCENTCLOUD_PROFILE environment variable. If not set, the default profile created with tccli configure will be used.
protocol str: The protocol of the API request. Valid values: HTTP and HTTPS. Default is HTTPS.
region str: This is the TencentCloud region. It can also be sourced from the TENCENTCLOUD_REGION environment variables. The default input value is ap-guangzhou.
secret_id str: This is the TencentCloud access key. It can also be sourced from the TENCENTCLOUD_SECRET_ID environment variable.
secret_key str: This is the TencentCloud secret key. It can also be sourced from the TENCENTCLOUD_SECRET_KEY environment variable.
security_token str: TencentCloud Security Token of temporary access credentials. It can be sourced from the TENCENTCLOUD_SECURITY_TOKEN environment variable. Notice: for supported products, please refer to: temporary key supported products.
shared_credentials_dir str: The directory of the shared credentials. It can also be sourced from the TENCENTCLOUD_SHARED_CREDENTIALS_DIR environment variable. If not set this defaults to ~/.tccli.

allowedAccountIds List<String>: List of allowed TencentCloud account IDs to prevent you from mistakenly using the wrong one (and potentially end up destroying a live environment). Conflicts with forbidden_account_ids, If use assume_role_with_saml or assume_role_with_web_identity, it is not supported.
assumeRole Property Map
assumeRoleWithSaml Property Map
assumeRoleWithWebIdentity Property Map
camRoleName String: The name of the CVM instance CAM role. It can be sourced from the TENCENTCLOUD_CAM_ROLE_NAME environment variable.
cosDomain String: The cos domain of the API request, Default is https://cos.{region}.myqcloud.com, Other Examples: https://cluster-123456.cos-cdc.ap-guangzhou.myqcloud.com.
domain String: The root domain of the API request, Default is tencentcloudapi.com.
enablePodOidc Boolean: Whether to enable pod oidc.
forbiddenAccountIds List<String>: List of forbidden TencentCloud account IDs to prevent you from mistakenly using the wrong one (and potentially end up destroying a live environment). Conflicts with allowed_account_ids, If use assume_role_with_saml or assume_role_with_web_identity, it is not supported.
mfaCertification Property Map
profile String: The profile name as set in the shared credentials. It can also be sourced from the TENCENTCLOUD_PROFILE environment variable. If not set, the default profile created with tccli configure will be used.
protocol String: The protocol of the API request. Valid values: HTTP and HTTPS. Default is HTTPS.
region String: This is the TencentCloud region. It can also be sourced from the TENCENTCLOUD_REGION environment variables. The default input value is ap-guangzhou.
secretId String: This is the TencentCloud access key. It can also be sourced from the TENCENTCLOUD_SECRET_ID environment variable.
secretKey String: This is the TencentCloud secret key. It can also be sourced from the TENCENTCLOUD_SECRET_KEY environment variable.
securityToken String: TencentCloud Security Token of temporary access credentials. It can be sourced from the TENCENTCLOUD_SECURITY_TOKEN environment variable. Notice: for supported products, please refer to: temporary key supported products.
sharedCredentialsDir String: The directory of the shared credentials. It can also be sourced from the TENCENTCLOUD_SHARED_CREDENTIALS_DIR environment variable. If not set this defaults to ~/.tccli.

Outputs

All input properties are implicitly available as output properties. Additionally, the Provider resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.

Id string: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

id string: The provider-assigned unique ID for this managed resource.

id str: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

Supporting Types

ProviderAssumeRole, ProviderAssumeRoleArgs

RoleArn string: The ARN of the role to assume. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_ARN.
SessionName string: The session name to use when making the AssumeRole call. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_NAME.
ExternalId string: External role ID, which can be obtained by clicking the role name in the CAM console. It can contain 2-128 letters, digits, and symbols (=,.@:/-). Regex: [\w+=,.@:/-]*. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_EXTERNAL_ID.
Policy string: A more restrictive policy when making the AssumeRole call. Its content must not contains principal elements. Notice: more syntax references, please refer to: policies syntax logic.
SerialNumber string: MFA serial number, the identification number of the MFA device associated with the calling CAM user. Format qcs: cam:uin/${ownerUin}::mfa/${mfaType}. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SERIAL_NUMBER.
SessionDuration double: The duration of the session when making the AssumeRole call. Its value ranges from 0 to 43200(seconds), and default is 7200 seconds. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_DURATION.
SourceIdentity string: Caller identity uin. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SOURCE_IDENTITY.
TokenCode string: MFA authentication code. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_TOKEN_CODE.

RoleArn string: The ARN of the role to assume. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_ARN.
SessionName string: The session name to use when making the AssumeRole call. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_NAME.
ExternalId string: External role ID, which can be obtained by clicking the role name in the CAM console. It can contain 2-128 letters, digits, and symbols (=,.@:/-). Regex: [\w+=,.@:/-]*. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_EXTERNAL_ID.
Policy string: A more restrictive policy when making the AssumeRole call. Its content must not contains principal elements. Notice: more syntax references, please refer to: policies syntax logic.
SerialNumber string: MFA serial number, the identification number of the MFA device associated with the calling CAM user. Format qcs: cam:uin/${ownerUin}::mfa/${mfaType}. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SERIAL_NUMBER.
SessionDuration float64: The duration of the session when making the AssumeRole call. Its value ranges from 0 to 43200(seconds), and default is 7200 seconds. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_DURATION.
SourceIdentity string: Caller identity uin. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SOURCE_IDENTITY.
TokenCode string: MFA authentication code. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_TOKEN_CODE.

roleArn String: The ARN of the role to assume. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_ARN.
sessionName String: The session name to use when making the AssumeRole call. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_NAME.
externalId String: External role ID, which can be obtained by clicking the role name in the CAM console. It can contain 2-128 letters, digits, and symbols (=,.@:/-). Regex: [\w+=,.@:/-]*. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_EXTERNAL_ID.
policy String: A more restrictive policy when making the AssumeRole call. Its content must not contains principal elements. Notice: more syntax references, please refer to: policies syntax logic.
serialNumber String: MFA serial number, the identification number of the MFA device associated with the calling CAM user. Format qcs: cam:uin/${ownerUin}::mfa/${mfaType}. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SERIAL_NUMBER.
sessionDuration Double: The duration of the session when making the AssumeRole call. Its value ranges from 0 to 43200(seconds), and default is 7200 seconds. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_DURATION.
sourceIdentity String: Caller identity uin. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SOURCE_IDENTITY.
tokenCode String: MFA authentication code. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_TOKEN_CODE.

roleArn string: The ARN of the role to assume. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_ARN.
sessionName string: The session name to use when making the AssumeRole call. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_NAME.
externalId string: External role ID, which can be obtained by clicking the role name in the CAM console. It can contain 2-128 letters, digits, and symbols (=,.@:/-). Regex: [\w+=,.@:/-]*. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_EXTERNAL_ID.
policy string: A more restrictive policy when making the AssumeRole call. Its content must not contains principal elements. Notice: more syntax references, please refer to: policies syntax logic.
serialNumber string: MFA serial number, the identification number of the MFA device associated with the calling CAM user. Format qcs: cam:uin/${ownerUin}::mfa/${mfaType}. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SERIAL_NUMBER.
sessionDuration number: The duration of the session when making the AssumeRole call. Its value ranges from 0 to 43200(seconds), and default is 7200 seconds. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_DURATION.
sourceIdentity string: Caller identity uin. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SOURCE_IDENTITY.
tokenCode string: MFA authentication code. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_TOKEN_CODE.

role_arn str: The ARN of the role to assume. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_ARN.
session_name str: The session name to use when making the AssumeRole call. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_NAME.
external_id str: External role ID, which can be obtained by clicking the role name in the CAM console. It can contain 2-128 letters, digits, and symbols (=,.@:/-). Regex: [\w+=,.@:/-]*. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_EXTERNAL_ID.
policy str: A more restrictive policy when making the AssumeRole call. Its content must not contains principal elements. Notice: more syntax references, please refer to: policies syntax logic.
serial_number str: MFA serial number, the identification number of the MFA device associated with the calling CAM user. Format qcs: cam:uin/${ownerUin}::mfa/${mfaType}. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SERIAL_NUMBER.
session_duration float: The duration of the session when making the AssumeRole call. Its value ranges from 0 to 43200(seconds), and default is 7200 seconds. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_DURATION.
source_identity str: Caller identity uin. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SOURCE_IDENTITY.
token_code str: MFA authentication code. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_TOKEN_CODE.

roleArn String: The ARN of the role to assume. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_ARN.
sessionName String: The session name to use when making the AssumeRole call. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_NAME.
externalId String: External role ID, which can be obtained by clicking the role name in the CAM console. It can contain 2-128 letters, digits, and symbols (=,.@:/-). Regex: [\w+=,.@:/-]*. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_EXTERNAL_ID.
policy String: A more restrictive policy when making the AssumeRole call. Its content must not contains principal elements. Notice: more syntax references, please refer to: policies syntax logic.
serialNumber String: MFA serial number, the identification number of the MFA device associated with the calling CAM user. Format qcs: cam:uin/${ownerUin}::mfa/${mfaType}. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SERIAL_NUMBER.
sessionDuration Number: The duration of the session when making the AssumeRole call. Its value ranges from 0 to 43200(seconds), and default is 7200 seconds. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_DURATION.
sourceIdentity String: Caller identity uin. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SOURCE_IDENTITY.
tokenCode String: MFA authentication code. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_TOKEN_CODE.

ProviderAssumeRoleWithSaml, ProviderAssumeRoleWithSamlArgs

PrincipalArn string: Player Access Description Name. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_PRINCIPAL_ARN.
RoleArn string: The ARN of the role to assume. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_ARN.
SamlAssertion string: SAML assertion information encoded in base64. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SAML_ASSERTION.
SessionName string: The session name to use when making the AssumeRole call. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_NAME.
SessionDuration double: The duration of the session when making the AssumeRoleWithSAML call. Its value ranges from 0 to 43200(seconds), and default is 7200 seconds. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_DURATION.

PrincipalArn string: Player Access Description Name. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_PRINCIPAL_ARN.
RoleArn string: The ARN of the role to assume. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_ARN.
SamlAssertion string: SAML assertion information encoded in base64. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SAML_ASSERTION.
SessionName string: The session name to use when making the AssumeRole call. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_NAME.
SessionDuration float64: The duration of the session when making the AssumeRoleWithSAML call. Its value ranges from 0 to 43200(seconds), and default is 7200 seconds. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_DURATION.

principalArn String: Player Access Description Name. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_PRINCIPAL_ARN.
roleArn String: The ARN of the role to assume. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_ARN.
samlAssertion String: SAML assertion information encoded in base64. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SAML_ASSERTION.
sessionName String: The session name to use when making the AssumeRole call. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_NAME.
sessionDuration Double: The duration of the session when making the AssumeRoleWithSAML call. Its value ranges from 0 to 43200(seconds), and default is 7200 seconds. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_DURATION.

principalArn string: Player Access Description Name. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_PRINCIPAL_ARN.
roleArn string: The ARN of the role to assume. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_ARN.
samlAssertion string: SAML assertion information encoded in base64. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SAML_ASSERTION.
sessionName string: The session name to use when making the AssumeRole call. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_NAME.
sessionDuration number: The duration of the session when making the AssumeRoleWithSAML call. Its value ranges from 0 to 43200(seconds), and default is 7200 seconds. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_DURATION.

principal_arn str: Player Access Description Name. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_PRINCIPAL_ARN.
role_arn str: The ARN of the role to assume. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_ARN.
saml_assertion str: SAML assertion information encoded in base64. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SAML_ASSERTION.
session_name str: The session name to use when making the AssumeRole call. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_NAME.
session_duration float: The duration of the session when making the AssumeRoleWithSAML call. Its value ranges from 0 to 43200(seconds), and default is 7200 seconds. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_DURATION.

principalArn String: Player Access Description Name. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_PRINCIPAL_ARN.
roleArn String: The ARN of the role to assume. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_ARN.
samlAssertion String: SAML assertion information encoded in base64. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SAML_ASSERTION.
sessionName String: The session name to use when making the AssumeRole call. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_NAME.
sessionDuration Number: The duration of the session when making the AssumeRoleWithSAML call. Its value ranges from 0 to 43200(seconds), and default is 7200 seconds. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_DURATION.

ProviderAssumeRoleWithWebIdentity, ProviderAssumeRoleWithWebIdentityArgs

RoleArn string: The ARN of the role to assume. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_ARN.
SessionName string: The session name to use when making the AssumeRole call. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_NAME.
WebIdentityToken string: OIDC token issued by IdP. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_WEB_IDENTITY_TOKEN.
ProviderId string: Identity provider name. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_PROVIDER_ID, Default is OIDC.
SessionDuration double: The duration of the session when making the AssumeRoleWithWebIdentity call. Its value ranges from 0 to 43200(seconds), and default is 7200 seconds. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_DURATION.

RoleArn string: The ARN of the role to assume. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_ARN.
SessionName string: The session name to use when making the AssumeRole call. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_NAME.
WebIdentityToken string: OIDC token issued by IdP. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_WEB_IDENTITY_TOKEN.
ProviderId string: Identity provider name. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_PROVIDER_ID, Default is OIDC.
SessionDuration float64: The duration of the session when making the AssumeRoleWithWebIdentity call. Its value ranges from 0 to 43200(seconds), and default is 7200 seconds. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_DURATION.

roleArn String: The ARN of the role to assume. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_ARN.
sessionName String: The session name to use when making the AssumeRole call. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_NAME.
webIdentityToken String: OIDC token issued by IdP. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_WEB_IDENTITY_TOKEN.
providerId String: Identity provider name. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_PROVIDER_ID, Default is OIDC.
sessionDuration Double: The duration of the session when making the AssumeRoleWithWebIdentity call. Its value ranges from 0 to 43200(seconds), and default is 7200 seconds. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_DURATION.

roleArn string: The ARN of the role to assume. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_ARN.
sessionName string: The session name to use when making the AssumeRole call. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_NAME.
webIdentityToken string: OIDC token issued by IdP. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_WEB_IDENTITY_TOKEN.
providerId string: Identity provider name. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_PROVIDER_ID, Default is OIDC.
sessionDuration number: The duration of the session when making the AssumeRoleWithWebIdentity call. Its value ranges from 0 to 43200(seconds), and default is 7200 seconds. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_DURATION.

role_arn str: The ARN of the role to assume. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_ARN.
session_name str: The session name to use when making the AssumeRole call. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_NAME.
web_identity_token str: OIDC token issued by IdP. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_WEB_IDENTITY_TOKEN.
provider_id str: Identity provider name. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_PROVIDER_ID, Default is OIDC.
session_duration float: The duration of the session when making the AssumeRoleWithWebIdentity call. Its value ranges from 0 to 43200(seconds), and default is 7200 seconds. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_DURATION.

roleArn String: The ARN of the role to assume. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_ARN.
sessionName String: The session name to use when making the AssumeRole call. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_NAME.
webIdentityToken String: OIDC token issued by IdP. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_WEB_IDENTITY_TOKEN.
providerId String: Identity provider name. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_PROVIDER_ID, Default is OIDC.
sessionDuration Number: The duration of the session when making the AssumeRoleWithWebIdentity call. Its value ranges from 0 to 43200(seconds), and default is 7200 seconds. It can be sourced from the TENCENTCLOUD_ASSUME_ROLE_SESSION_DURATION.

ProviderMfaCertification, ProviderMfaCertificationArgs

SerialNumber string: MFA serial number, the identification number of the MFA device associated with the calling CAM user. Format qcs: cam:uin/${ownerUin}::mfa/${mfaType}. It can be sourced from the TENCENTCLOUD_MFA_CERTIFICATION_SERIAL_NUMBER.
TokenCode string: MFA authentication code. It can be sourced from the TENCENTCLOUD_MFA_CERTIFICATION_TOKEN_CODE.
DurationSeconds double: Specify the validity period of the temporary certificate. The main account can be set to a maximum validity period of 7200 seconds, and the sub account can be set to a maximum validity period of 129600 seconds, and default is 1800 seconds. It can be sourced from the TENCENTCLOUD_MFA_CERTIFICATION_DURATION_SECONDS.

SerialNumber string: MFA serial number, the identification number of the MFA device associated with the calling CAM user. Format qcs: cam:uin/${ownerUin}::mfa/${mfaType}. It can be sourced from the TENCENTCLOUD_MFA_CERTIFICATION_SERIAL_NUMBER.
TokenCode string: MFA authentication code. It can be sourced from the TENCENTCLOUD_MFA_CERTIFICATION_TOKEN_CODE.
DurationSeconds float64: Specify the validity period of the temporary certificate. The main account can be set to a maximum validity period of 7200 seconds, and the sub account can be set to a maximum validity period of 129600 seconds, and default is 1800 seconds. It can be sourced from the TENCENTCLOUD_MFA_CERTIFICATION_DURATION_SECONDS.

serialNumber String: MFA serial number, the identification number of the MFA device associated with the calling CAM user. Format qcs: cam:uin/${ownerUin}::mfa/${mfaType}. It can be sourced from the TENCENTCLOUD_MFA_CERTIFICATION_SERIAL_NUMBER.
tokenCode String: MFA authentication code. It can be sourced from the TENCENTCLOUD_MFA_CERTIFICATION_TOKEN_CODE.
durationSeconds Double: Specify the validity period of the temporary certificate. The main account can be set to a maximum validity period of 7200 seconds, and the sub account can be set to a maximum validity period of 129600 seconds, and default is 1800 seconds. It can be sourced from the TENCENTCLOUD_MFA_CERTIFICATION_DURATION_SECONDS.

serialNumber string: MFA serial number, the identification number of the MFA device associated with the calling CAM user. Format qcs: cam:uin/${ownerUin}::mfa/${mfaType}. It can be sourced from the TENCENTCLOUD_MFA_CERTIFICATION_SERIAL_NUMBER.
tokenCode string: MFA authentication code. It can be sourced from the TENCENTCLOUD_MFA_CERTIFICATION_TOKEN_CODE.
durationSeconds number: Specify the validity period of the temporary certificate. The main account can be set to a maximum validity period of 7200 seconds, and the sub account can be set to a maximum validity period of 129600 seconds, and default is 1800 seconds. It can be sourced from the TENCENTCLOUD_MFA_CERTIFICATION_DURATION_SECONDS.

serial_number str: MFA serial number, the identification number of the MFA device associated with the calling CAM user. Format qcs: cam:uin/${ownerUin}::mfa/${mfaType}. It can be sourced from the TENCENTCLOUD_MFA_CERTIFICATION_SERIAL_NUMBER.
token_code str: MFA authentication code. It can be sourced from the TENCENTCLOUD_MFA_CERTIFICATION_TOKEN_CODE.
duration_seconds float: Specify the validity period of the temporary certificate. The main account can be set to a maximum validity period of 7200 seconds, and the sub account can be set to a maximum validity period of 129600 seconds, and default is 1800 seconds. It can be sourced from the TENCENTCLOUD_MFA_CERTIFICATION_DURATION_SECONDS.

serialNumber String: MFA serial number, the identification number of the MFA device associated with the calling CAM user. Format qcs: cam:uin/${ownerUin}::mfa/${mfaType}. It can be sourced from the TENCENTCLOUD_MFA_CERTIFICATION_SERIAL_NUMBER.
tokenCode String: MFA authentication code. It can be sourced from the TENCENTCLOUD_MFA_CERTIFICATION_TOKEN_CODE.
durationSeconds Number: Specify the validity period of the temporary certificate. The main account can be set to a maximum validity period of 7200 seconds, and the sub account can be set to a maximum validity period of 129600 seconds, and default is 1800 seconds. It can be sourced from the TENCENTCLOUD_MFA_CERTIFICATION_DURATION_SECONDS.

Package Details

Repository: tencentcloud tencentcloudstack/terraform-provider-tencentcloud
License
Notes: This Pulumi package is based on the tencentcloud Terraform Provider.

tencentcloud 1.81.189 published on Wednesday, Apr 30, 2025 by tencentcloudstack

tencentcloudstack/terraform-provider-tencentcloud

tencentcloud.Provider

On this page

On this page

Create Provider Resource

Constructor syntax

Parameters

Provider Resource Properties

Inputs

Outputs

Supporting Types

ProviderAssumeRole, ProviderAssumeRoleArgs

ProviderAssumeRoleWithSaml, ProviderAssumeRoleWithSamlArgs

ProviderAssumeRoleWithWebIdentity, ProviderAssumeRoleWithWebIdentityArgs

ProviderMfaCertification, ProviderMfaCertificationArgs

Package Details

On this page

On this page