DataZone

17 resource kinds. Generated from the operator's CRD schemas.

API Group: aws.konfig.io/v1alpha1

DataZoneConnection # CLOUD CONTROL · AWS::DataZone::Connection

DataZoneConnection manages AWS::DataZone::Connection through the AWS Cloud Control API.

kubectl get datazoneconnections · example on GitHub

Example

# DataZoneConnection — DataZone
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/datazone.html#datazoneconnection
apiVersion: aws.konfig.io/v1alpha1
kind: DataZoneConnection
metadata:
  name: example-datazoneconnection
  namespace: default
spec:
  awsLocation:
    accessRole: example
    awsAccountId: '123456789012'
    awsRegion: example
  configurations:
  - classification: example
    properties:
      key: value
  description: Managed by konfig-konector
  domainIdentifier: example
  enableTrustedIdentityPropagation: true
  environmentIdentifier: example
  name: example-datazoneconnection
  projectIdentifier: example
  providerRef:
    name: example-datazoneconnection
    region: us-east-1
  scope: DOMAIN

Spec

Field	Type	Required	Description
`awsLocation`	object	—	DataZoneConnectionAwsLocation is a nested property type of AWS::DataZone::Connection.
`awsLocation.accessRole`	string	—
`awsLocation.awsAccountId`	string	—
`awsLocation.awsRegion`	string	—
`awsLocation.iamConnectionId`	string	—
`configurations`	array<object>	—	The configurations of the connection.
`configurations[].classification`	string	—	The classification of the connection configuration.
`configurations[].properties`	map<string>	—
`description`	string	—	The description of the connection.
`domainIdentifier`	string	yes	The identifier of the domain in which the connection is created.
`enableTrustedIdentityPropagation`	boolean	—	Specifies whether the trusted identity propagation is enabled Create-only in AWS: changing it requires replacing the resource.
`environmentIdentifier`	string	—	The identifier of the environment in which the connection is created.
`name`	string	yes	The name of the connection.
`projectIdentifier`	string	—	The identifier of the project in which the connection should be created.
`props`	object	—
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`scope`	enum	—	The scope of the connection. Allowed: `DOMAIN, PROJECT`

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`connectionId`	string	—	The ID of the connection.
`domainId`	string	—	The ID of the domain in which the connection is created.
`domainUnitId`	string	—	The ID of the domain unit in which the connection is created.
`environmentId`	string	—	The ID of the environment in which the connection is created.
`environmentUserRole`	string	—	The role of the user in the environment.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`projectId`	string	—	The ID of the project in which the connection is created.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`type`	string	—	Read-only: reported by AWS after creation.

DataZoneDataSource # CLOUD CONTROL · AWS::DataZone::DataSource

DataZoneDataSource manages AWS::DataZone::DataSource through the AWS Cloud Control API.

kubectl get datazonedatasources · example on GitHub

Example

# DataZoneDataSource — DataZone
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/datazone.html#datazonedatasource
apiVersion: aws.konfig.io/v1alpha1
kind: DataZoneDataSource
metadata:
  name: example-datazonedatasource
  namespace: default
spec:
  assetFormsInput:
  - content: example
    formName: example-datazonedatasource
    typeIdentifier: example
    typeRevision: example
  connectionIdentifier: example
  description: Managed by konfig-konector
  domainIdentifier: example
  enableSetting: ENABLED
  environmentIdentifier: example
  name: example-datazonedatasource
  projectIdentifier: example
  providerRef:
    name: example-datazonedatasource
    region: us-east-1
  publishOnImport: false
  recommendation:
    enableBusinessNameGeneration: true
  schedule:
    schedule: example
    timezone: example
  type: example

Spec

Field	Type	Required	Description
`assetFormsInput`	array<object>	—	The metadata forms that are to be attached to the assets that this data source works with.
`assetFormsInput[].content`	string	—	The content of the metadata form.
`assetFormsInput[].formName`	string	yes	The name of the metadata form.
`assetFormsInput[].typeIdentifier`	string	—	The ID of the metadata form type.
`assetFormsInput[].typeRevision`	string	—	The revision of the metadata form type.
`configuration`	object	—	Configuration of the data source.
`connectionIdentifier`	string	—	The unique identifier of a connection used to fetch relevant parameters from connection during Datasource run Create-only in AWS: changing it requires replacing the resource.
`description`	string	—	The description of the data source.
`domainIdentifier`	string	yes	The ID of the Amazon DataZone domain where the data source is created.
`enableSetting`	enum	—	Specifies whether the data source is enabled. Allowed: `ENABLED, DISABLED`
`environmentIdentifier`	string	—	The unique identifier of the Amazon DataZone environment to which the data source publishes assets.
`name`	string	yes	The name of the data source.
`projectIdentifier`	string	yes	The identifier of the Amazon DataZone project in which you want to add the data source.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`publishOnImport`	boolean	—	Specifies whether the assets that this data source creates in the inventory are to be also automatically published to the catalog.
`recommendation`	object	—	Specifies whether the business name generation is to be enabled for this data source.
`recommendation.enableBusinessNameGeneration`	boolean	—	Specifies whether automatic business name generation is to be enabled or not as part of the recommendation configuration.
`schedule`	object	—	The schedule of the data source runs.
`schedule.schedule`	string	—	The schedule of the data source runs.
`schedule.timezone`	string	—	The timezone of the data source run.
`type`	string	yes	The type of the data source.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`connectionId`	string	—	The unique identifier of a connection used to fetch relevant parameters from connection during Datasource run Read-only: reported by AWS after creation.
`createdAt`	string	—	The timestamp of when the data source was created.
`domainId`	string	—	The ID of the Amazon DataZone domain where the data source is created.
`environmentId`	string	—	The unique identifier of the Amazon DataZone environment to which the data source publishes assets.
`id`	string	—	The unique identifier of the data source.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastRunAssetCount`	number	—	The number of assets created by the data source during its last run.
`lastRunAt`	string	—	The timestamp that specifies when the data source was last run.
`lastRunStatus`	string	—	The status of the last run of this data source.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`projectId`	string	—	The ID of the Amazon DataZone project to which the data source is added.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`status`	enum	—	The status of the data source. Allowed: `CREATING, FAILED_CREATION, READY, UPDATING, FAILED_UPDATE, RUNNING, DELETING, FAILED_DELETION`
`updatedAt`	string	—	The timestamp of when this data source was updated.

DataZoneDomain # CLOUD CONTROL · AWS::DataZone::Domain

DataZoneDomain manages AWS::DataZone::Domain through the AWS Cloud Control API.

kubectl get datazonedomains · example on GitHub

Example

# DataZoneDomain — DataZone
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/datazone.html#datazonedomain
apiVersion: aws.konfig.io/v1alpha1
kind: DataZoneDomain
metadata:
  name: example-datazonedomain
  namespace: default
spec:
  description: Managed by konfig-konector
  domainExecutionRole: example
  domainVersion: V1
  kmsKeyIdentifier: example
  name: example-datazonedomain
  providerRef:
    name: example-datazonedomain
    region: us-east-1
  serviceRole: example
  singleSignOn:
    idcInstanceArn: arn:aws:iam::123456789012:role/example-role
    type: IAM_IDC
    userAssignment: AUTOMATIC
  tags:
  - key: example
    value: example

Spec

Field	Type	Required	Description
`description`	string	—	The description of the Amazon DataZone domain.
`domainExecutionRole`	string	—	The domain execution role that is created when an Amazon DataZone domain is created.
`domainVersion`	enum	—	The version of the domain. Allowed: `V1, V2`
`kmsKeyIdentifier`	string	—	The identifier of the AWS Key Management Service (KMS) key that is used to encrypt the Amazon DataZone domain, metadata, and reporting data.
`name`	string	yes	The name of the Amazon DataZone domain.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`serviceRole`	string	—	The service role of the domain that is created.
`singleSignOn`	object	—	The single-sign on configuration of the Amazon DataZone domain.
`singleSignOn.idcInstanceArn`	string	—
`singleSignOn.type`	enum	—	Allowed: `IAM_IDC, DISABLED`
`singleSignOn.userAssignment`	enum	—	Allowed: `AUTOMATIC, MANUAL`
`tags`	array<object>	—	The tags specified for the Amazon DataZone domain.
`tags[].key`	string	yes
`tags[].value`	string	yes

Status

Field	Type	Required	Description
`arn`	string	—	The ARN of the Amazon DataZone domain.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`createdAt`	string	—	The timestamp of when the Amazon DataZone domain was last updated.
`id`	string	—	The id of the Amazon DataZone domain.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`lastUpdatedAt`	string	—	The timestamp of when the Amazon DataZone domain was last updated.
`managedAccountId`	string	—	The identifier of the AWS account that manages the domain.
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`portalUrl`	string	—	The URL of the data portal for this Amazon DataZone domain.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`rootDomainUnitId`	string	—	The ID of the root domain in Amazon Datazone.
`status`	enum	—	The status of the Amazon DataZone domain. Allowed: `CREATING, AVAILABLE, CREATION_FAILED, DELETING, DELETED, DELETION_FAILED`

DataZoneDomainUnit # CLOUD CONTROL · AWS::DataZone::DomainUnit

DataZoneDomainUnit manages AWS::DataZone::DomainUnit through the AWS Cloud Control API.

kubectl get datazonedomainunits · example on GitHub

Example

# DataZoneDomainUnit — DataZone
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/datazone.html#datazonedomainunit
apiVersion: aws.konfig.io/v1alpha1
kind: DataZoneDomainUnit
metadata:
  name: example-datazonedomainunit
  namespace: default
spec:
  description: Managed by konfig-konector
  domainIdentifier: example
  name: example-datazonedomainunit
  parentDomainUnitIdentifier: example
  providerRef:
    name: example-datazonedomainunit
    region: us-east-1

Spec

Field	Type	Required	Description
`description`	string	—	The description of the domain unit.
`domainIdentifier`	string	yes	The ID of the domain where you want to create a domain unit.
`name`	string	yes	The name of the domain unit.
`parentDomainUnitIdentifier`	string	yes	The ID of the parent domain unit.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`createdAt`	string	—	The timestamp at which the domain unit was created.
`domainId`	string	—	The ID of the domain where the domain unit was created.
`id`	string	—	The ID of the domain unit.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`lastUpdatedAt`	string	—	The timestamp at which the domain unit was last updated.
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`parentDomainUnitId`	string	—	The ID of the parent domain unit.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

DataZoneEnvironment # CLOUD CONTROL · AWS::DataZone::Environment

DataZoneEnvironment manages AWS::DataZone::Environment through the AWS Cloud Control API.

kubectl get datazoneenvironments · example on GitHub

Example

# DataZoneEnvironment — DataZone
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/datazone.html#datazoneenvironment
apiVersion: aws.konfig.io/v1alpha1
kind: DataZoneEnvironment
metadata:
  name: example-datazoneenvironment
  namespace: default
spec:
  deploymentOrder: 1
  description: Managed by konfig-konector
  domainIdentifier: example
  environmentAccountIdentifier: example
  environmentAccountRegion: example
  environmentBlueprintIdentifier: example
  environmentProfileIdentifier: example
  environmentRoleArn: arn:aws:iam::123456789012:role/example-role
  glossaryTerms:
  - example
  name: example-datazoneenvironment
  projectIdentifier: example
  providerRef:
    name: example-datazoneenvironment
    region: us-east-1
  userParameters:
  - name: example-datazoneenvironment
    value: example

Spec

Field	Type	Required	Description
`deploymentOrder`	integer	—	The deployment order for the environment.
`description`	string	—	The description of the Amazon DataZone environment.
`domainIdentifier`	string	yes	The identifier of the Amazon DataZone domain in which the environment would be created.
`environmentAccountIdentifier`	string	—	The AWS account in which the Amazon DataZone environment is created.
`environmentAccountRegion`	string	—	The AWS region in which the Amazon DataZone environment is created.
`environmentBlueprintIdentifier`	string	—	The identifier of the environment blueprint.
`environmentConfigurationId`	string	—	The identifier of the environment configuration.
`environmentProfileIdentifier`	string	—	The ID of the environment profile with which the Amazon DataZone environment would be created.
`environmentRoleArn`	string	—	Environment role arn for custom aws environment permissions
`glossaryTerms`	array<string>	—	The glossary terms that can be used in the Amazon DataZone environment.
`name`	string	yes	The name of the environment.
`projectIdentifier`	string	yes	The ID of the Amazon DataZone project in which the environment would be created.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`userParameters`	array<object>	—	The user parameters of the Amazon DataZone environment.
`userParameters[].name`	string	—	The name of an environment parameter.
`userParameters[].value`	string	—	The value of an environment parameter.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsAccountId`	string	—	The AWS account in which the Amazon DataZone environment is created.
`awsAccountRegion`	string	—	The AWS region in which the Amazon DataZone environment is created.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`createdAt`	string	—	The timestamp of when the environment was created.
`createdBy`	string	—	The Amazon DataZone user who created the environment.
`domainId`	string	—	The identifier of the Amazon DataZone domain in which the environment is created.
`environmentBlueprintId`	string	—	The ID of the blueprint with which the Amazon DataZone environment was created.
`environmentProfileId`	string	—	The ID of the environment profile with which the Amazon DataZone environment was created.
`id`	string	—	The ID of the Amazon DataZone environment.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`projectId`	string	—	The ID of the Amazon DataZone project in which the environment is created.
`provider`	string	—	The provider of the Amazon DataZone environment.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`status`	enum	—	The status of the Amazon DataZone environment. Allowed: `ACTIVE, CREATING, UPDATING, DELETING, CREATE_FAILED, UPDATE_FAILED, DELETE_FAILED, VALIDATION_FAILED…`
`updatedAt`	string	—	The timestamp of when the environment was updated.

DataZoneEnvironmentActions # CLOUD CONTROL · AWS::DataZone::EnvironmentActions

DataZoneEnvironmentActions manages AWS::DataZone::EnvironmentActions through the AWS Cloud Control API.

kubectl get datazoneenvironmentactions · example on GitHub

Example

# DataZoneEnvironmentActions — DataZone
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/datazone.html#datazoneenvironmentactions
apiVersion: aws.konfig.io/v1alpha1
kind: DataZoneEnvironmentActions
metadata:
  name: example-datazoneenvironmentactions
  namespace: default
spec:
  description: Managed by konfig-konector
  domainIdentifier: example
  environmentIdentifier: example
  identifier: example
  name: example-datazoneenvironmentactions
  parameters:
    uri: example
  providerRef:
    name: example-datazoneenvironmentactions
    region: us-east-1

Spec

Field	Type	Required	Description
`description`	string	—	The description of the Amazon DataZone environment action.
`domainIdentifier`	string	—	The identifier of the Amazon DataZone domain in which the environment would be created.
`environmentIdentifier`	string	—	The identifier of the Amazon DataZone environment in which the action is taking place Create-only in AWS: changing it requires replacing the resource.
`identifier`	string	—	The ID of the Amazon DataZone environment action.
`name`	string	yes	The name of the environment action.
`parameters`	object	—	The parameters of the environment action.
`parameters.uri`	string	—
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`domainId`	string	—	The identifier of the Amazon DataZone domain in which the environment is created.
`environmentId`	string	—	The identifier of the Amazon DataZone environment in which the action is taking place Read-only: reported by AWS after creation.
`id`	string	—	The ID of the Amazon DataZone environment action.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

DataZoneEnvironmentBlueprintConfiguration # CLOUD CONTROL · AWS::DataZone::EnvironmentBlueprintConfiguration

DataZoneEnvironmentBlueprintConfiguration manages AWS::DataZone::EnvironmentBlueprintConfiguration through the AWS Cloud Control API.

kubectl get datazoneenvironmentblueprintconfigurations · example on GitHub

Example

# DataZoneEnvironmentBlueprintConfiguration — DataZone
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/datazone.html#datazoneenvironmentblueprintconfiguration
apiVersion: aws.konfig.io/v1alpha1
kind: DataZoneEnvironmentBlueprintConfiguration
metadata:
  name: example-datazoneenvironmentblueprintconfiguration
  namespace: default
spec:
  domainIdentifier: example
  enabledRegions:
  - example
  environmentBlueprintIdentifier: example
  environmentRolePermissionBoundary: example
  globalParameters:
    key: value
  manageAccessRoleArn: arn:aws:iam::123456789012:role/example-role
  providerRef:
    name: example-datazoneenvironmentblueprintconfiguration
    region: us-east-1
  provisioningRoleArn: arn:aws:iam::123456789012:role/example-role
  regionalParameters:
  - parameters:
      key: value
    region: us-east-1

Spec

Field	Type	Required	Description
`domainIdentifier`	string	yes	Create-only in AWS: changing it requires replacing the resource.
`enabledRegions`	array<string>	yes
`environmentBlueprintIdentifier`	string	yes	Create-only in AWS: changing it requires replacing the resource.
`environmentRolePermissionBoundary`	string	—
`globalParameters`	map<string>	—	Region-agnostic environment blueprint parameters.
`manageAccessRoleArn`	string	—
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`provisioningConfigurations`	array<object>	—
`provisioningRoleArn`	string	—
`regionalParameters`	array<object>	—
`regionalParameters[].parameters`	map<string>	—
`regionalParameters[].region`	string	—

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`createdAt`	string	—	Read-only: reported by AWS after creation.
`domainId`	string	—	Read-only: reported by AWS after creation.
`environmentBlueprintId`	string	—	Read-only: reported by AWS after creation.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`updatedAt`	string	—	Read-only: reported by AWS after creation.

DataZoneEnvironmentProfile # CLOUD CONTROL · AWS::DataZone::EnvironmentProfile

DataZoneEnvironmentProfile manages AWS::DataZone::EnvironmentProfile through the AWS Cloud Control API.

kubectl get datazoneenvironmentprofiles · example on GitHub

Example

# DataZoneEnvironmentProfile — DataZone
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/datazone.html#datazoneenvironmentprofile
apiVersion: aws.konfig.io/v1alpha1
kind: DataZoneEnvironmentProfile
metadata:
  name: example-datazoneenvironmentprofile
  namespace: default
spec:
  awsAccountId: '123456789012'
  awsAccountRegion: example
  description: Managed by konfig-konector
  domainIdentifier: example
  environmentBlueprintIdentifier: example
  name: example-datazoneenvironmentprofile
  projectIdentifier: example
  providerRef:
    name: example-datazoneenvironmentprofile
    region: us-east-1
  userParameters:
  - name: example-datazoneenvironmentprofile
    value: example

Spec

Field	Type	Required	Description
`awsAccountId`	string	yes	The AWS account in which the Amazon DataZone environment is created.
`awsAccountRegion`	string	yes	The AWS region in which this environment profile is created.
`description`	string	—	The description of this Amazon DataZone environment profile.
`domainIdentifier`	string	yes	The ID of the Amazon DataZone domain in which this environment profile is created.
`environmentBlueprintIdentifier`	string	yes	The ID of the blueprint with which this environment profile is created.
`name`	string	yes	The name of this Amazon DataZone environment profile.
`projectIdentifier`	string	yes	The identifier of the project in which to create the environment profile.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`userParameters`	array<object>	—	The user parameters of this Amazon DataZone environment profile.
`userParameters[].name`	string	—	The name of an environment profile parameter.
`userParameters[].value`	string	—	The value of an environment profile parameter.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`createdAt`	string	—	The timestamp of when this environment profile was created.
`createdBy`	string	—	The Amazon DataZone user who created this environment profile.
`domainId`	string	—	The ID of the Amazon DataZone domain in which this environment profile is created.
`environmentBlueprintId`	string	—	The ID of the blueprint with which this environment profile is created.
`id`	string	—	The ID of this Amazon DataZone environment profile.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`projectId`	string	—	The identifier of the project in which to create the environment profile.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`updatedAt`	string	—	The timestamp of when this environment profile was updated.

DataZoneFormType # CLOUD CONTROL · AWS::DataZone::FormType

DataZoneFormType manages AWS::DataZone::FormType through the AWS Cloud Control API.

kubectl get datazoneformtypes · example on GitHub

Example

# DataZoneFormType — DataZone
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/datazone.html#datazoneformtype
apiVersion: aws.konfig.io/v1alpha1
kind: DataZoneFormType
metadata:
  name: example-datazoneformtype
  namespace: default
spec:
  description: Managed by konfig-konector
  domainIdentifier: example
  model:
    smithy: example
  name: example-datazoneformtype
  owningProjectIdentifier: example
  providerRef:
    name: example-datazoneformtype
    region: us-east-1
  status: ENABLED

Spec

Field	Type	Required	Description
`description`	string	—	The description of this Amazon DataZone metadata form type.
`domainIdentifier`	string	yes	The ID of the Amazon DataZone domain in which this metadata form type is created.
`model`	object	yes	The model of this Amazon DataZone metadata form type.
`model.smithy`	string	—
`name`	string	yes	The name of this Amazon DataZone metadata form type.
`owningProjectIdentifier`	string	yes	The ID of the Amazon DataZone project that owns this metadata form type.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`status`	enum	—	The status of this Amazon DataZone metadata form type. Allowed: `ENABLED, DISABLED`

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`createdAt`	string	—	The timestamp of when this Amazon DataZone metadata form type was created.
`createdBy`	string	—	The user who created this Amazon DataZone metadata form type.
`domainId`	string	—	The ID of the Amazon DataZone domain in which this metadata form type is created.
`formTypeIdentifier`	string	—	The ID of this Amazon DataZone metadata form type.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`owningProjectId`	string	—	The ID of the project that owns this Amazon DataZone metadata form type.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`revision`	string	—	The revision of this Amazon DataZone metadata form type.

DataZoneGroupProfile # CLOUD CONTROL · AWS::DataZone::GroupProfile

DataZoneGroupProfile manages AWS::DataZone::GroupProfile through the AWS Cloud Control API.

kubectl get datazonegroupprofiles · example on GitHub

Example

# DataZoneGroupProfile — DataZone
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/datazone.html#datazonegroupprofile
apiVersion: aws.konfig.io/v1alpha1
kind: DataZoneGroupProfile
metadata:
  name: example-datazonegroupprofile
  namespace: default
spec:
  domainIdentifier: example
  groupIdentifier: example
  groupType: DATAZONE_SSO_GROUP
  providerRef:
    name: example-datazonegroupprofile
    region: us-east-1
  rolePrincipalArn: arn:aws:iam::123456789012:role/example-role
  status: ASSIGNED

Spec

Field	Type	Required	Description
`domainIdentifier`	string	yes	The identifier of the Amazon DataZone domain in which the group profile would be created.
`groupIdentifier`	string	—	The ID of the group.
`groupType`	enum	—	Allowed: `DATAZONE_SSO_GROUP, IAM_ROLE_SESSION_GROUP`
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`rolePrincipalArn`	string	—	The ARN of the role principal for the group profile.
`status`	enum	—	Allowed: `ASSIGNED, NOT_ASSIGNED`

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`domainId`	string	—	The identifier of the Amazon DataZone domain in which the group profile is created.
`groupName`	string	—	The group-name of the Group Profile.
`id`	string	—	The ID of the Amazon DataZone group profile.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`rolePrincipalId`	string	—	The ID of the role principal for the group profile.

DataZoneOwner # CLOUD CONTROL · AWS::DataZone::Owner

DataZoneOwner manages AWS::DataZone::Owner through the AWS Cloud Control API.

kubectl get datazoneowners · example on GitHub

Example

# DataZoneOwner — DataZone
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/datazone.html#datazoneowner
apiVersion: aws.konfig.io/v1alpha1
kind: DataZoneOwner
metadata:
  name: example-datazoneowner
  namespace: default
spec:
  domainIdentifier: example
  entityIdentifier: example
  entityType: DOMAIN_UNIT
  providerRef:
    name: example-datazoneowner
    region: us-east-1

Spec

Field	Type	Required	Description
`domainIdentifier`	string	yes	The ID of the domain in which you want to add the entity owner.
`entityIdentifier`	string	yes	The ID of the entity to which you want to add an owner.
`entityType`	enum	yes	The type of an entity. Allowed: `DOMAIN_UNIT`
`owner`	object	yes	The owner that you want to add to the entity.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`ownerIdentifier`	string	—	Read-only: reported by AWS after creation.
`ownerType`	enum	—	Read-only: reported by AWS after creation. Allowed: `USER, GROUP`
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

DataZonePolicyGrant # CLOUD CONTROL · AWS::DataZone::PolicyGrant

DataZonePolicyGrant manages AWS::DataZone::PolicyGrant through the AWS Cloud Control API.

kubectl get datazonepolicygrants · example on GitHub

Example

# DataZonePolicyGrant — DataZone
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/datazone.html#datazonepolicygrant
apiVersion: aws.konfig.io/v1alpha1
kind: DataZonePolicyGrant
metadata:
  name: example-datazonepolicygrant
  namespace: default
spec:
  domainIdentifier: example
  entityIdentifier: example
  entityType: DOMAIN_UNIT
  policyType: CREATE_DOMAIN_UNIT
  providerRef:
    name: example-datazonepolicygrant
    region: us-east-1

Spec

Field	Type	Required	Description
`detail`	object	—	Create-only in AWS: changing it requires replacing the resource.
`domainIdentifier`	string	yes	Create-only in AWS: changing it requires replacing the resource.
`entityIdentifier`	string	yes	Create-only in AWS: changing it requires replacing the resource.
`entityType`	enum	yes	Create-only in AWS: changing it requires replacing the resource. Allowed: `DOMAIN_UNIT, ENVIRONMENT_BLUEPRINT_CONFIGURATION, ENVIRONMENT_PROFILE, ASSET_TYPE`
`policyType`	enum	yes	Create-only in AWS: changing it requires replacing the resource. Allowed: `CREATE_DOMAIN_UNIT, OVERRIDE_DOMAIN_UNIT_OWNERS, ADD_TO_PROJECT_MEMBER_POOL, OVERRIDE_PROJECT_OWNERS, CREATE_GLOSSARY, CREATE_FORM_TYPE, CREATE_ASSET_TYPE, CREATE_PROJECT…`
`principal`	object	—	Create-only in AWS: changing it requires replacing the resource.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`createdAt`	string	—	Specifies the timestamp at which policy grant member was created.
`createdBy`	string	—	Specifies the user who created the policy grant member.
`grantId`	string	—	The unique identifier of the policy grant returned by the AddPolicyGrant API Read-only: reported by AWS after creation.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

DataZoneProject # CLOUD CONTROL · AWS::DataZone::Project

DataZoneProject manages AWS::DataZone::Project through the AWS Cloud Control API.

kubectl get datazoneprojects · example on GitHub

Example

# DataZoneProject — DataZone
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/datazone.html#datazoneproject
apiVersion: aws.konfig.io/v1alpha1
kind: DataZoneProject
metadata:
  name: example-datazoneproject
  namespace: default
spec:
  description: Managed by konfig-konector
  domainIdentifier: example
  glossaryTerms:
  - example
  membershipAssignments:
  - designation: PROJECT_OWNER
    member:
      groupIdentifier: example
      userIdentifier: example
  name: example-datazoneproject
  projectCategory: example
  projectExecutionRole: example
  projectProfileVersion: '1.0'
  providerRef:
    name: example-datazoneproject
    region: us-east-1
  resourceTags:
  - key: example
    value: example
  userParameters:
  - environmentConfigurationName: example-datazoneproject
    environmentParameters:
    - name: example-datazoneproject
      value: example

Spec

Field	Type	Required	Description
`description`	string	—	The description of the Amazon DataZone project.
`domainIdentifier`	string	yes	The ID of the Amazon DataZone domain in which this project is created.
`domainUnitId`	string	—	The ID of the domain unit.
`glossaryTerms`	array<string>	—	The glossary terms that can be used in this Amazon DataZone project.
`membershipAssignments`	array<object>	—	The project membership assignments.
`membershipAssignments[].designation`	enum	yes	Allowed: `PROJECT_OWNER, PROJECT_CONTRIBUTOR`
`membershipAssignments[].member`	object	yes	DataZoneProjectMember is a nested property type of AWS::DataZone::Project.
`membershipAssignments[].member.groupIdentifier`	string	—
`membershipAssignments[].member.userIdentifier`	string	—
`name`	string	yes	The name of the Amazon DataZone project.
`projectCategory`	string	—	The project category.
`projectExecutionRole`	string	—	The project execution role ARN.
`projectProfileId`	string	—	The project profile ID.
`projectProfileVersion`	string	—	The project profile version to which the project should be updated.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`resourceTags`	array<object>	—	The resource tags of the project.
`resourceTags[].key`	string	yes
`resourceTags[].value`	string	yes
`userParameters`	array<object>	—	The user parameters of the project.
`userParameters[].environmentConfigurationName`	string	—
`userParameters[].environmentId`	string	—
`userParameters[].environmentParameters`	array<object>	—
`userParameters[].environmentParameters[].name`	string	—
`userParameters[].environmentParameters[].value`	string	—

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`createdAt`	string	—	The timestamp of when the project was created.
`createdBy`	string	—	The Amazon DataZone user who created the project.
`domainId`	string	—	The identifier of the Amazon DataZone domain in which the project was created.
`id`	string	—	The ID of the Amazon DataZone project.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`lastUpdatedAt`	string	—	The timestamp of when the project was last updated.
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`projectStatus`	enum	—	The status of the project. Allowed: `ACTIVE, MOVING, DELETING, DELETE_FAILED, UPDATING, UPDATE_FAILED`
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

DataZoneProjectMembership # CLOUD CONTROL · AWS::DataZone::ProjectMembership

DataZoneProjectMembership manages AWS::DataZone::ProjectMembership through the AWS Cloud Control API.

kubectl get datazoneprojectmemberships · example on GitHub

Example

# DataZoneProjectMembership — DataZone
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/datazone.html#datazoneprojectmembership
apiVersion: aws.konfig.io/v1alpha1
kind: DataZoneProjectMembership
metadata:
  name: example-datazoneprojectmembership
  namespace: default
spec:
  designation: PROJECT_OWNER
  domainIdentifier: example
  projectIdentifier: example
  providerRef:
    name: example-datazoneprojectmembership
    region: us-east-1

Spec

Field	Type	Required	Description
`designation`	enum	yes	Allowed: `PROJECT_OWNER, PROJECT_CONTRIBUTOR, PROJECT_CATALOG_VIEWER, PROJECT_CATALOG_CONSUMER, PROJECT_CATALOG_STEWARD`
`domainIdentifier`	string	yes	Create-only in AWS: changing it requires replacing the resource.
`member`	object	yes	Create-only in AWS: changing it requires replacing the resource.
`projectIdentifier`	string	yes	Create-only in AWS: changing it requires replacing the resource.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`memberIdentifier`	string	—	Read-only: reported by AWS after creation.
`memberIdentifierType`	enum	—	Read-only: reported by AWS after creation. Allowed: `USER_IDENTIFIER, GROUP_IDENTIFIER`
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

DataZoneProjectProfile # CLOUD CONTROL · AWS::DataZone::ProjectProfile

DataZoneProjectProfile manages AWS::DataZone::ProjectProfile through the AWS Cloud Control API.

kubectl get datazoneprojectprofiles · example on GitHub

Example

# DataZoneProjectProfile — DataZone
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/datazone.html#datazoneprojectprofile
apiVersion: aws.konfig.io/v1alpha1
kind: DataZoneProjectProfile
metadata:
  name: example-datazoneprojectprofile
  namespace: default
spec:
  allowCustomProjectResourceTags: false
  description: Managed by konfig-konector
  domainIdentifier: example
  domainUnitIdentifier: example
  environmentConfigurations:
  - awsAccount:
      awsAccountId: '123456789012'
    awsRegion:
      regionName: example-datazone
    configurationParameters:
      parameterOverrides:
      - isEditable: false
        name: example-datazoneprojectprofile
        value: example
      resolvedParameters:
      - isEditable: false
        name: example-datazoneprojectprofile
        value: example
      ssmPath: example
    deploymentMode: ON_CREATE
    deploymentOrder: 1
    description: Managed by konfig-konector
    environmentBlueprintId: example-id
    name: example-datazoneprojectprofile
  name: example-datazoneprojectprofile
  projectResourceTags:
  - isValueEditable: false
    key: example
    value: example
  projectResourceTagsDescription: Managed by konfig-konector
  providerRef:
    name: example-datazoneprojectprofile
    region: us-east-1
  status: ENABLED
  useDefaultConfigurations: false

Spec

Field	Type	Required	Description
`allowCustomProjectResourceTags`	boolean	—
`description`	string	—
`domainIdentifier`	string	—	Create-only in AWS: changing it requires replacing the resource.
`domainUnitIdentifier`	string	—
`environmentConfigurations`	array<object>	—
`environmentConfigurations[].awsAccount`	object	—	DataZoneProjectProfileAwsAccount is a nested property type of AWS::DataZone::ProjectProfile.
`environmentConfigurations[].awsAccount.awsAccountId`	string	yes
`environmentConfigurations[].awsRegion`	object	yes	DataZoneProjectProfileRegion is a nested property type of AWS::DataZone::ProjectProfile.
`environmentConfigurations[].awsRegion.regionName`	string	yes
`environmentConfigurations[].configurationParameters`	object	—	DataZoneProjectProfileEnvironmentConfigurationParametersDetails is a nested property type of AWS::DataZone::ProjectProfile.
`environmentConfigurations[].configurationParameters.parameterOverrides`	array<object>	—
`environmentConfigurations[].configurationParameters.parameterOverrides[].isEditable`	boolean	—
`environmentConfigurations[].configurationParameters.parameterOverrides[].name`	string	—
`environmentConfigurations[].configurationParameters.parameterOverrides[].value`	string	—
`environmentConfigurations[].configurationParameters.resolvedParameters`	array<object>	—
`environmentConfigurations[].configurationParameters.resolvedParameters[].isEditable`	boolean	—
`environmentConfigurations[].configurationParameters.resolvedParameters[].name`	string	—
`environmentConfigurations[].configurationParameters.resolvedParameters[].value`	string	—
`environmentConfigurations[].configurationParameters.ssmPath`	string	—
`environmentConfigurations[].deploymentMode`	enum	—	Allowed: `ON_CREATE, ON_DEMAND`
`environmentConfigurations[].deploymentOrder`	number	—
`environmentConfigurations[].description`	string	—
`environmentConfigurations[].environmentBlueprintId`	string	yes
`environmentConfigurations[].environmentConfigurationId`	string	—
`environmentConfigurations[].name`	string	yes
`name`	string	yes
`projectResourceTags`	array<object>	—
`projectResourceTags[].isValueEditable`	boolean	yes
`projectResourceTags[].key`	string	yes
`projectResourceTags[].value`	string	yes
`projectResourceTagsDescription`	string	—
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`status`	enum	—	Allowed: `ENABLED, DISABLED`
`useDefaultConfigurations`	boolean	—	Create-only in AWS: changing it requires replacing the resource.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`createdAt`	string	—	Read-only: reported by AWS after creation.
`createdBy`	string	—	Read-only: reported by AWS after creation.
`domainId`	string	—	Read-only: reported by AWS after creation.
`domainUnitId`	string	—	Read-only: reported by AWS after creation.
`id`	string	—	Read-only: reported by AWS after creation.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`lastUpdatedAt`	string	—	Read-only: reported by AWS after creation.
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

DataZoneSubscriptionTarget # CLOUD CONTROL · AWS::DataZone::SubscriptionTarget

DataZoneSubscriptionTarget manages AWS::DataZone::SubscriptionTarget through the AWS Cloud Control API.

kubectl get datazonesubscriptiontargets · example on GitHub

Example

# DataZoneSubscriptionTarget — DataZone
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/datazone.html#datazonesubscriptiontarget
apiVersion: aws.konfig.io/v1alpha1
kind: DataZoneSubscriptionTarget
metadata:
  name: example-datazonesubscriptiontarget
  namespace: default
spec:
  applicableAssetTypes:
  - example
  authorizedPrincipals:
  - example
  domainIdentifier: example
  environmentIdentifier: example
  manageAccessRole: example
  name: example-datazonesubscriptiontarget
  provider: example
  providerRef:
    name: example-datazonesubscriptiontarget
    region: us-east-1
  subscriptionTargetConfig:
  - content: example
    formName: example-datazonesubscriptiontarget
  type: example

Spec

Field	Type	Required	Description
`applicableAssetTypes`	array<string>	yes	The asset types that can be included in the subscription target.
`authorizedPrincipals`	array<string>	yes	The authorized principals of the subscription target.
`domainIdentifier`	string	yes	The ID of the Amazon DataZone domain in which subscription target would be created.
`environmentIdentifier`	string	yes	The ID of the environment in which subscription target would be created.
`manageAccessRole`	string	—	The manage access role that is used to create the subscription target.
`name`	string	yes	The name of the subscription target.
`provider`	string	—	The provider of the subscription target.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`subscriptionTargetConfig`	array<object>	yes	The configuration of the subscription target.
`subscriptionTargetConfig[].content`	string	yes	The content of the subscription target configuration.
`subscriptionTargetConfig[].formName`	string	yes	The form name included in the subscription target configuration.
`type`	string	yes	The type of the subscription target.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`createdAt`	string	—	The timestamp of when the subscription target was created.
`createdBy`	string	—	The Amazon DataZone user who created the subscription target.
`domainId`	string	—	The ID of the Amazon DataZone domain in which subscription target is created.
`environmentId`	string	—	The ID of the environment in which subscription target is created.
`id`	string	—	The ID of the subscription target.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`projectId`	string	—	The identifier of the project specified in the subscription target.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`updatedAt`	string	—	The timestamp of when the subscription target was updated.
`updatedBy`	string	—	The Amazon DataZone user who updated the subscription target.

DataZoneUserProfile # CLOUD CONTROL · AWS::DataZone::UserProfile

DataZoneUserProfile manages AWS::DataZone::UserProfile through the AWS Cloud Control API.

kubectl get datazoneuserprofiles · example on GitHub

Example

# DataZoneUserProfile — DataZone
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/datazone.html#datazoneuserprofile
apiVersion: aws.konfig.io/v1alpha1
kind: DataZoneUserProfile
metadata:
  name: example-datazoneuserprofile
  namespace: default
spec:
  domainIdentifier: example
  providerRef:
    name: example-datazoneuserprofile
    region: us-east-1
  sessionName: example-datazoneuserprofile
  status: ASSIGNED
  userIdentifier: example
  userType: IAM_USER

Spec

Field	Type	Required	Description
`domainIdentifier`	string	yes	The identifier of the Amazon DataZone domain in which the user profile would be created.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`sessionName`	string	—	The session name of the user profile.
`status`	enum	—	Allowed: `ASSIGNED, NOT_ASSIGNED, ACTIVATED, DEACTIVATED`
`userIdentifier`	string	yes	The ID of the user.
`userType`	enum	—	Create-only in AWS: changing it requires replacing the resource. Allowed: `IAM_USER, IAM_ROLE, SSO_USER, IAM_ROLE_SESSION`

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`details`	object	—	Read-only: reported by AWS after creation.
`domainId`	string	—	The identifier of the Amazon DataZone domain in which the user profile is created.
`id`	string	—	The ID of the Amazon DataZone user profile.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`type`	enum	—	Read-only: reported by AWS after creation. Allowed: `IAM, SSO`