Optional 56

• account_access_typestring, default "CURRENT_ACCOUNT"The type of account access for the workspace. Valid values are CURRENT_ACCOUNT and ORGANIZATION
• associate_licensebool, default trueDetermines whether a license will be associated with the workspace
• authentication_providerslist(string), default ["AWS_SSO"]The authentication providers for the workspace. Valid values are AWS_SSO, SAML, or both
• configurationstring, default nullThe configuration string for the workspace
• createbool, default trueDetermines whether a resources will be created
• create_iam_rolebool, default trueDetermines whether a an IAM role is created or to use an existing IAM role
• create_saml_configurationbool, default trueDetermines whether the SAML configuration will be created
• create_security_groupbool, default trueDetermines if a security group is created
• create_workspacebool, default trueDetermines whether a workspace will be created or to use an existing workspace
• data_sourceslist(string), default []The data sources for the workspace. Valid values are AMAZON_OPENSEARCH_SERVICE, ATHENA, CLOUDWATCH, PROMETHEUS, REDSHIFT, SITEWISE, TIMESTREAM, XRAY
• descriptionstring, default nullThe workspace description
• enable_alertsbool, default falseDetermines whether IAM permissions for alerting are enabled for the workspace IAM role
• grafana_tokenstring, default nullA token from Grafana Labs that ties your AWS account with a Grafana Labs account
• grafana_versionstring, default nullSpecifies the version of Grafana to support in the new workspace. If not specified, the default version for the aws_grafana_workspace resource will be used. See aws_grafana_workspace documentation for available options.
• iam_role_arnstring, default nullExisting IAM role ARN for the workspace. Required if create_iam_role is set to false
• iam_role_descriptionstring, default nullThe description of the workspace IAM role
• iam_role_force_detach_policiesbool, default trueDetermines whether the workspace IAM role policies will be forced to detach
• iam_role_max_session_durationnumber, default nullMaximum session duration (in seconds) that you want to set for the IAM role
• iam_role_namestring, default nullName to use on workspace IAM role created
• iam_role_pathstring, default nullWorkspace IAM role path
• iam_role_permissions_boundarystring, default nullARN of the policy that is used to set the permissions boundary for the IAM role
• iam_role_policy_arnslist(string), default []List of ARNs of IAM policies to attach to the workspace IAM role
• iam_role_tagsmap(string), default {}A map of additional tags to add to the IAM role created
• license_typestring, default "ENTERPRISE"The type of license for the workspace license association. Valid values are ENTERPRISE and ENTERPRISE_FREE_TRIAL
• namestring, default nullThe Grafana workspace name
• network_access_controlany, default {}Configuration for network access to your workspace
• notification_destinationslist(string), default []The notification destinations. If a data source is specified here, Amazon Managed Grafana will create IAM roles and permissions needed to use these destinations. Must be set to SNS
• organization_role_namestring, default nullThe role name that the workspace uses to access resources through Amazon Organizations
• organizational_unitslist(string), default []The Amazon Organizations organizational units that the workspace is authorized to use data sources from
• permission_typestring, default "SERVICE_MANAGED"The permission type of the workspace. If SERVICE_MANAGED is specified, the IAM roles and IAM policy attachments are generated automatically. If CUSTOMER_MANAGED is specified, the IAM roles and IAM policy attachments will not be created
• role_associationsany, default {}Map of maps to assocaite user/group IDs to a role. Map key can be used as the role
• saml_admin_role_valueslist(string), default []SAML authentication admin role values
• saml_allowed_organizationslist(string), default []SAML authentication allowed organizations
• saml_editor_role_valueslist(string), default []SAML authentication editor role values
• saml_email_assertionstring, default nullSAML authentication email assertion
• saml_groups_assertionstring, default nullSAML authentication groups assertion
• saml_idp_metadata_urlstring, default nullSAML authentication IDP Metadata URL. Note that either saml_idp_metadata_url or saml_idp_metadata_xml
• saml_idp_metadata_xmlstring, default nullSAML authentication IDP Metadata XML. Note that either saml_idp_metadata_url or saml_idp_metadata_xml
• saml_login_assertionstring, default nullSAML authentication email assertion
• saml_login_validity_durationnumber, default nullSAML authentication login validity duration
• saml_name_assertionstring, default nullSAML authentication name assertion
• saml_org_assertionstring, default nullSAML authentication org assertion
• saml_role_assertionstring, default nullSAML authentication role assertion
• security_group_descriptionstring, default nullDescription of the security group created
• security_group_namestring, default nullName to use on security group created
• security_group_rulesany, default {}Security group rules to add to the security group created
• security_group_tagsmap(string), default {}A map of additional tags to add to the security group created
• security_group_use_name_prefixbool, default trueDetermines whether the security group name (security_group_name) is used as a prefix
• stack_set_namestring, default nullThe AWS CloudFormation stack set name that provisions IAM roles to be used by the workspace
• tagsmap(string), default {}A map of tags to add to all resources
• use_iam_role_name_prefixbool, default trueDetermines whether the IAM role name (wokspace_iam_role_name) is used as a prefix
• vpc_configurationany, default {}The configuration settings for an Amazon VPC that contains data sources for your Grafana workspace to connect to
• workspace_api_keysany, default {}Map of workspace API key definitions to create
• workspace_idstring, default ""The ID of an existing workspace to use when create_workspace is false
• workspace_service_account_tokensany, default {}Map of workspace service account tokens to create
• workspace_service_accountsany, default {}Map of workspace service account definitions to create