aws_grafana_workspace

account_access_type

Type: STRING
Provider name: accountAccessType
Description: Specifies whether the workspace can access Amazon Web Services resources in this Amazon Web Services account only, or whether it can also access Amazon Web Services resources in other accounts in the same organization. If this is ORGANIZATION, the workspaceOrganizationalUnits parameter specifies which organizational units the workspace can access.

account_id

Type: STRING

authentication

Type: STRUCT
Provider name: authentication
Description: A structure that describes whether the workspace uses SAML, IAM Identity Center, or both methods for user authentication.

• providers
  Type: UNORDERED_LIST_STRING
  Provider name: providers
  Description: Specifies whether the workspace uses SAML, IAM Identity Center, or both methods for user authentication.
  
• saml_configuration_status
  Type: STRING
  Provider name: samlConfigurationStatus
  Description: Specifies whether the workplace’s user authentication method is fully configured.
  

created

Type: TIMESTAMP
Provider name: created
Description: The date that the workspace was created.

data_sources

Type: UNORDERED_LIST_STRING
Provider name: dataSources
Description: Specifies the Amazon Web Services data sources that have been configured to have IAM roles and permissions created to allow Amazon Managed Grafana to read data from these sources. This list is only used when the workspace was created through the Amazon Web Services console, and the permissionType is SERVICE_MANAGED.

description

Type: STRING
Provider name: description
Description: The user-defined description of the workspace.

endpoint

Type: STRING
Provider name: endpoint
Description: The URL that users can use to access the Grafana console in the workspace.

free_trial_consumed

Type: BOOLEAN
Provider name: freeTrialConsumed
Description: Specifies whether this workspace has already fully used its free trial for Grafana Enterprise. Amazon Managed Grafana workspaces no longer support Grafana Enterprise free trials.

free_trial_expiration

Type: TIMESTAMP
Provider name: freeTrialExpiration
Description: If this workspace is currently in the free trial period for Grafana Enterprise, this value specifies when that free trial ends. Amazon Managed Grafana workspaces no longer support Grafana Enterprise free trials.

grafana_token

Type: STRING
Provider name: grafanaToken
Description: The token that ties this workspace to a Grafana Labs account. For more information, see Link your account with Grafana Labs.

grafana_version

Type: STRING
Provider name: grafanaVersion
Description: The version of Grafana supported in this workspace.

id

Type: STRING
Provider name: id
Description: The unique ID of this workspace.

license_expiration

Type: TIMESTAMP
Provider name: licenseExpiration
Description: If this workspace has a full Grafana Enterprise license purchased through Amazon Web Services Marketplace, this specifies when the license ends and will need to be renewed. Purchasing the Enterprise plugins option through Amazon Managed Grafana does not have an expiration. It is valid until the license is removed.

license_type

Type: STRING
Provider name: licenseType
Description: Specifies whether this workspace has a full Grafana Enterprise license. Amazon Managed Grafana workspaces no longer support Grafana Enterprise free trials.

modified

Type: TIMESTAMP
Provider name: modified
Description: The most recent date that the workspace was modified.

name

Type: STRING
Provider name: name
Description: The name of the workspace.

network_access_control

Type: STRUCT
Provider name: networkAccessControl
Description: The configuration settings for network access to your workspace.

• prefix_list_ids
  Type: UNORDERED_LIST_STRING
  Provider name: prefixListIds
  Description: An array of prefix list IDs. A prefix list is a list of CIDR ranges of IP addresses. The IP addresses specified are allowed to access your workspace. If the list is not included in the configuration (passed an empty array) then no IP addresses are allowed to access the workspace. You create a prefix list using the Amazon VPC console. Prefix list IDs have the format pl-1a2b3c4d . For more information about prefix lists, see Group CIDR blocks using managed prefix listsin the Amazon Virtual Private Cloud User Guide.
  
• vpce_ids
  Type: UNORDERED_LIST_STRING
  Provider name: vpceIds
  Description: An array of Amazon VPC endpoint IDs for the workspace. You can create VPC endpoints to your Amazon Managed Grafana workspace for access from within a VPC. If a NetworkAccessConfiguration is specified then only VPC endpoints specified here are allowed to access the workspace. If you pass in an empty array of strings, then no VPCs are allowed to access the workspace. VPC endpoint IDs have the format vpce-1a2b3c4d . For more information about creating an interface VPC endpoint, see Interface VPC endpoints in the Amazon Managed Grafana User Guide. The only VPC endpoints that can be specified here are interface VPC endpoints for Grafana workspaces (using the com.amazonaws.[region].grafana-workspace service endpoint). Other VPC endpoints are ignored.
  

notification_destinations

Type: UNORDERED_LIST_STRING
Provider name: notificationDestinations
Description: The Amazon Web Services notification channels that Amazon Managed Grafana can automatically create IAM roles and permissions for, to allow Amazon Managed Grafana to use these channels.

organization_role_name

Type: STRING
Provider name: organizationRoleName
Description: The name of the IAM role that is used to access resources through Organizations.

organizational_units

Type: UNORDERED_LIST_STRING
Provider name: organizationalUnits
Description: Specifies the organizational units that this workspace is allowed to use data sources from, if this workspace is in an account that is part of an organization.

permission_type

Type: STRING
Provider name: permissionType
Description: If this is SERVICE_MANAGED, and the workplace was created through the Amazon Managed Grafana console, then Amazon Managed Grafana automatically creates the IAM roles and provisions the permissions that the workspace needs to use Amazon Web Services data sources and notification channels. If this is CUSTOMER_MANAGED, you must manage those roles and permissions yourself. If you are working with a workspace in a member account of an organization and that account is not a delegated administrator account, and you want the workspace to access data sources in other Amazon Web Services accounts in the organization, this parameter must be set to CUSTOMER_MANAGED. For more information about converting between customer and service managed, see Managing permissions for data sources and notification channels. For more information about the roles and permissions that must be managed for customer managed workspaces, see Amazon Managed Grafana permissions and policies for Amazon Web Services data sources and notification channels

stack_set_name

Type: STRING
Provider name: stackSetName
Description: The name of the CloudFormation stack set that is used to generate IAM roles to be used for this workspace.

status

Type: STRING
Provider name: status
Description: The current status of the workspace.

tags

Type: UNORDERED_LIST_STRING

vpc_configuration

Type: STRUCT
Provider name: vpcConfiguration
Description: The configuration for connecting to data sources in a private VPC (Amazon Virtual Private Cloud).

• security_group_ids
  Type: UNORDERED_LIST_STRING
  Provider name: securityGroupIds
  Description: The list of Amazon EC2 security group IDs attached to the Amazon VPC for your Grafana workspace to connect. Duplicates not allowed.
  
• subnet_ids
  Type: UNORDERED_LIST_STRING
  Provider name: subnetIds
  Description: The list of Amazon EC2 subnet IDs created in the Amazon VPC for your Grafana workspace to connect. Duplicates not allowed.
  

workspace_role_arn

Type: STRING
Provider name: workspaceRoleArn
Description: The IAM role that grants permissions to the Amazon Web Services resources that the workspace will view data from. This role must already exist.