WorkspaceDescription

A structure that describes whether the workspace uses SAML, IAM Identity Center, or both methods for user authentication.

Type: AuthenticationSummary object

Required: Yes

The date that the workspace was created.

Type: Timestamp

Required: Yes

Specifies the AWS data sources that have been configured to have IAM roles and permissions created to allow Amazon Managed Grafana to read data from these sources.

This list is only used when the workspace was created through the AWS console, and the permissionType is SERVICE_MANAGED.

Type: Array of strings

Valid Values: AMAZON_OPENSEARCH_SERVICE | CLOUDWATCH | PROMETHEUS | XRAY | TIMESTREAM | SITEWISE | ATHENA | REDSHIFT | TWINMAKER

Required: Yes

The URL that users can use to access the Grafana console in the workspace.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 2048.

Required: Yes

The version of Grafana supported in this workspace.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 255.

Required: Yes

The unique ID of this workspace.

Type: String

Pattern: ^g-[0-9a-f]{10}$

Required: Yes

The most recent date that the workspace was modified.

Type: Timestamp

Required: Yes

The current status of the workspace.

Type: String

Valid Values: ACTIVE | CREATING | DELETING | FAILED | UPDATING | UPGRADING | DELETION_FAILED | CREATION_FAILED | UPDATE_FAILED | UPGRADE_FAILED | LICENSE_REMOVAL_FAILED | VERSION_UPDATING | VERSION_UPDATE_FAILED

Required: Yes

Specifies whether the workspace can access AWS resources in this AWS account only, or whether it can also access AWS resources in other accounts in the same organization. If this is ORGANIZATION, the workspaceOrganizationalUnits parameter specifies which organizational units the workspace can access.

Type: String

Valid Values: CURRENT_ACCOUNT | ORGANIZATION

Required: No

The user-defined description of the workspace.

Type: String

Length Constraints: Minimum length of 0. Maximum length of 2048.

Required: No

Specifies whether this workspace has already fully used its free trial for Grafana Enterprise.

Type: Boolean

Required: No

If this workspace is currently in the free trial period for Grafana Enterprise, this value specifies when that free trial ends.

Type: Timestamp

Required: No

The token that ties this workspace to a Grafana Labs account. For more information, see Link your account with Grafana Labs.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 36.

Required: No

If this workspace has a full Grafana Enterprise license purchased through AWS Marketplace, this specifies when the license ends and will need to be renewed. Purchasing the Enterprise plugins option through Amazon Managed Grafana does not have an expiration. It is valid until the license is removed.

Type: Timestamp

Required: No

Specifies whether this workspace has a full Grafana Enterprise license.

Type: String

Valid Values: ENTERPRISE | ENTERPRISE_FREE_TRIAL

Required: No

The name of the workspace.

Type: String

Pattern: ^[a-zA-Z0-9-._~]{1,255}$

Required: No

The configuration settings for network access to your workspace.

Type: NetworkAccessConfiguration object

Required: No

The AWS notification channels that Amazon Managed Grafana can automatically create IAM roles and permissions for, to allow Amazon Managed Grafana to use these channels.

Type: Array of strings

Valid Values: SNS

Required: No

Specifies the organizational units that this workspace is allowed to use data sources from, if this workspace is in an account that is part of an organization.

Type: Array of strings

Required: No

The name of the IAM role that is used to access resources through Organizations.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 2048.

Required: No

If this is SERVICE_MANAGED, and the workplace was created through the Amazon Managed Grafana console, then Amazon Managed Grafana automatically creates the IAM roles and provisions the permissions that the workspace needs to use AWS data sources and notification channels.

If this is CUSTOMER_MANAGED, you must manage those roles and permissions yourself.

If you are working with a workspace in a member account of an organization and that account is not a delegated administrator account, and you want the workspace to access data sources in other AWS accounts in the organization, this parameter must be set to CUSTOMER_MANAGED.

For more information about converting between customer and service managed, see Managing permissions for data sources and notification channels. For more information about the roles and permissions that must be managed for customer managed workspaces, see Amazon Managed Grafana permissions and policies for AWS data sources and notification channels

Type: String

Valid Values: CUSTOMER_MANAGED | SERVICE_MANAGED

Required: No

The name of the AWS CloudFormation stack set that is used to generate IAM roles to be used for this workspace.

Type: String

Required: No

The list of tags associated with the workspace.

Type: String to string map

Map Entries: Minimum number of 0 items. Maximum number of 50 items.

Key Length Constraints: Minimum length of 1. Maximum length of 128.

Value Length Constraints: Minimum length of 0. Maximum length of 256.

Required: No

The configuration for connecting to data sources in a private VPC (Amazon Virtual Private Cloud).

Type: VpcConfiguration object

Required: No

The IAM role that grants permissions to the AWS resources that the workspace will view data from. This role must already exist.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 2048.

Required: No