Policy
data class PolicySetDefinitionArgs(val description: Output<String>? = null, val displayName: Output<String>? = null, val metadata: Output<Any>? = null, val parameters: Output<Map<String, ParameterDefinitionsValueArgs>>? = null, val policyDefinitionGroups: Output<List<PolicyDefinitionGroupArgs>>? = null, val policyDefinitions: Output<List<PolicyDefinitionReferenceArgs>>? = null, val policySetDefinitionName: Output<String>? = null, val policyType: Output<Either<String, PolicyType>>? = null) : ConvertibleToJava<PolicySetDefinitionArgs>
The policy set definition. Azure REST API version: 2021-06-01. Prior API version in Azure Native 1.x: 2020-09-01. Other available API versions: 2019-06-01, 2023-04-01.
Example Usage
Create or update a policy set definition
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var policySetDefinition = new AzureNative.Authorization.PolicySetDefinition("policySetDefinition", new()
{
Description = "Policies to enforce low cost storage SKUs",
DisplayName = "Cost Management",
Metadata =
{
{ "category", "Cost Management" },
},
Parameters =
{
{ "namePrefix", new AzureNative.Authorization.Inputs.ParameterDefinitionsValueArgs
{
DefaultValue = "myPrefix",
Metadata = new AzureNative.Authorization.Inputs.ParameterDefinitionsValueMetadataArgs
{
DisplayName = "Prefix to enforce on resource names",
},
Type = "String",
} },
},
PolicyDefinitions = new[]
{
new AzureNative.Authorization.Inputs.PolicyDefinitionReferenceArgs
{
Parameters =
{
{ "listOfAllowedSKUs", new AzureNative.Authorization.Inputs.ParameterValuesValueArgs
{
Value = new[]
{
"Standard_GRS",
"Standard_LRS",
},
} },
},
PolicyDefinitionId = "/subscriptions/ae640e6b-ba3e-4256-9d62-2993eecfa6f2/providers/Microsoft.Authorization/policyDefinitions/7433c107-6db4-4ad1-b57a-a76dce0154a1",
PolicyDefinitionReferenceId = "Limit_Skus",
},
new AzureNative.Authorization.Inputs.PolicyDefinitionReferenceArgs
{
Parameters =
{
{ "prefix", new AzureNative.Authorization.Inputs.ParameterValuesValueArgs
{
Value = "[parameters('namePrefix')]",
} },
{ "suffix", new AzureNative.Authorization.Inputs.ParameterValuesValueArgs
{
Value = "-LC",
} },
},
PolicyDefinitionId = "/subscriptions/ae640e6b-ba3e-4256-9d62-2993eecfa6f2/providers/Microsoft.Authorization/policyDefinitions/ResourceNaming",
PolicyDefinitionReferenceId = "Resource_Naming",
},
},
PolicySetDefinitionName = "CostManagement",
});
});Content copied to clipboard
package main
import (
"github.com/pulumi/pulumi-azure-native-sdk/authorization/v2"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := authorization.NewPolicySetDefinition(ctx, "policySetDefinition", &authorization.PolicySetDefinitionArgs{
Description: pulumi.String("Policies to enforce low cost storage SKUs"),
DisplayName: pulumi.String("Cost Management"),
Metadata: pulumi.Any{
Category: "Cost Management",
},
Parameters: authorization.ParameterDefinitionsValueMap{
"namePrefix": &authorization.ParameterDefinitionsValueArgs{
DefaultValue: pulumi.Any("myPrefix"),
Metadata: &authorization.ParameterDefinitionsValueMetadataArgs{
DisplayName: pulumi.String("Prefix to enforce on resource names"),
},
Type: pulumi.String("String"),
},
},
PolicyDefinitions: []authorization.PolicyDefinitionReferenceArgs{
{
Parameters: {
"listOfAllowedSKUs": {
Value: pulumi.Any{
"Standard_GRS",
"Standard_LRS",
},
},
},
PolicyDefinitionId: pulumi.String("/subscriptions/ae640e6b-ba3e-4256-9d62-2993eecfa6f2/providers/Microsoft.Authorization/policyDefinitions/7433c107-6db4-4ad1-b57a-a76dce0154a1"),
PolicyDefinitionReferenceId: pulumi.String("Limit_Skus"),
},
{
Parameters: {
"prefix": {
Value: pulumi.Any("[parameters('namePrefix')]"),
},
"suffix": {
Value: pulumi.Any("-LC"),
},
},
PolicyDefinitionId: pulumi.String("/subscriptions/ae640e6b-ba3e-4256-9d62-2993eecfa6f2/providers/Microsoft.Authorization/policyDefinitions/ResourceNaming"),
PolicyDefinitionReferenceId: pulumi.String("Resource_Naming"),
},
},
PolicySetDefinitionName: pulumi.String("CostManagement"),
})
if err != nil {
return err
}
return nil
})
}Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.authorization.PolicySetDefinition;
import com.pulumi.azurenative.authorization.PolicySetDefinitionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var policySetDefinition = new PolicySetDefinition("policySetDefinition", PolicySetDefinitionArgs.builder()
.description("Policies to enforce low cost storage SKUs")
.displayName("Cost Management")
.metadata(Map.of("category", "Cost Management"))
.parameters(Map.of("namePrefix", Map.ofEntries(
Map.entry("defaultValue", "myPrefix"),
Map.entry("metadata", Map.of("displayName", "Prefix to enforce on resource names")),
Map.entry("type", "String")
)))
.policyDefinitions(
Map.ofEntries(
Map.entry("parameters", Map.of("listOfAllowedSKUs", Map.of("value",
"Standard_GRS",
"Standard_LRS"))),
Map.entry("policyDefinitionId", "/subscriptions/ae640e6b-ba3e-4256-9d62-2993eecfa6f2/providers/Microsoft.Authorization/policyDefinitions/7433c107-6db4-4ad1-b57a-a76dce0154a1"),
Map.entry("policyDefinitionReferenceId", "Limit_Skus")
),
Map.ofEntries(
Map.entry("parameters", Map.ofEntries(
Map.entry("prefix", Map.of("value", "[parameters('namePrefix')]")),
Map.entry("suffix", Map.of("value", "-LC"))
)),
Map.entry("policyDefinitionId", "/subscriptions/ae640e6b-ba3e-4256-9d62-2993eecfa6f2/providers/Microsoft.Authorization/policyDefinitions/ResourceNaming"),
Map.entry("policyDefinitionReferenceId", "Resource_Naming")
))
.policySetDefinitionName("CostManagement")
.build());
}
}Content copied to clipboard
Create or update a policy set definition with groups
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var policySetDefinition = new AzureNative.Authorization.PolicySetDefinition("policySetDefinition", new()
{
Description = "Policies to enforce low cost storage SKUs",
DisplayName = "Cost Management",
Metadata =
{
{ "category", "Cost Management" },
},
PolicyDefinitionGroups = new[]
{
new AzureNative.Authorization.Inputs.PolicyDefinitionGroupArgs
{
Description = "Policies designed to control spend within a subscription.",
DisplayName = "Cost Management Policies",
Name = "CostSaving",
},
new AzureNative.Authorization.Inputs.PolicyDefinitionGroupArgs
{
Description = "Policies that help enforce resource organization standards within a subscription.",
DisplayName = "Organizational Policies",
Name = "Organizational",
},
},
PolicyDefinitions = new[]
{
new AzureNative.Authorization.Inputs.PolicyDefinitionReferenceArgs
{
GroupNames = new[]
{
"CostSaving",
},
Parameters =
{
{ "listOfAllowedSKUs", new AzureNative.Authorization.Inputs.ParameterValuesValueArgs
{
Value = new[]
{
"Standard_GRS",
"Standard_LRS",
},
} },
},
PolicyDefinitionId = "/subscriptions/ae640e6b-ba3e-4256-9d62-2993eecfa6f2/providers/Microsoft.Authorization/policyDefinitions/7433c107-6db4-4ad1-b57a-a76dce0154a1",
PolicyDefinitionReferenceId = "Limit_Skus",
},
new AzureNative.Authorization.Inputs.PolicyDefinitionReferenceArgs
{
GroupNames = new[]
{
"Organizational",
},
Parameters =
{
{ "prefix", new AzureNative.Authorization.Inputs.ParameterValuesValueArgs
{
Value = "DeptA",
} },
{ "suffix", new AzureNative.Authorization.Inputs.ParameterValuesValueArgs
{
Value = "-LC",
} },
},
PolicyDefinitionId = "/subscriptions/ae640e6b-ba3e-4256-9d62-2993eecfa6f2/providers/Microsoft.Authorization/policyDefinitions/ResourceNaming",
PolicyDefinitionReferenceId = "Resource_Naming",
},
},
PolicySetDefinitionName = "CostManagement",
});
});Content copied to clipboard
package main
import (
"github.com/pulumi/pulumi-azure-native-sdk/authorization/v2"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := authorization.NewPolicySetDefinition(ctx, "policySetDefinition", &authorization.PolicySetDefinitionArgs{
Description: pulumi.String("Policies to enforce low cost storage SKUs"),
DisplayName: pulumi.String("Cost Management"),
Metadata: pulumi.Any{
Category: "Cost Management",
},
PolicyDefinitionGroups: []authorization.PolicyDefinitionGroupArgs{
{
Description: pulumi.String("Policies designed to control spend within a subscription."),
DisplayName: pulumi.String("Cost Management Policies"),
Name: pulumi.String("CostSaving"),
},
{
Description: pulumi.String("Policies that help enforce resource organization standards within a subscription."),
DisplayName: pulumi.String("Organizational Policies"),
Name: pulumi.String("Organizational"),
},
},
PolicyDefinitions: []authorization.PolicyDefinitionReferenceArgs{
{
GroupNames: pulumi.StringArray{
pulumi.String("CostSaving"),
},
Parameters: {
"listOfAllowedSKUs": {
Value: pulumi.Any{
"Standard_GRS",
"Standard_LRS",
},
},
},
PolicyDefinitionId: pulumi.String("/subscriptions/ae640e6b-ba3e-4256-9d62-2993eecfa6f2/providers/Microsoft.Authorization/policyDefinitions/7433c107-6db4-4ad1-b57a-a76dce0154a1"),
PolicyDefinitionReferenceId: pulumi.String("Limit_Skus"),
},
{
GroupNames: pulumi.StringArray{
pulumi.String("Organizational"),
},
Parameters: {
"prefix": {
Value: pulumi.Any("DeptA"),
},
"suffix": {
Value: pulumi.Any("-LC"),
},
},
PolicyDefinitionId: pulumi.String("/subscriptions/ae640e6b-ba3e-4256-9d62-2993eecfa6f2/providers/Microsoft.Authorization/policyDefinitions/ResourceNaming"),
PolicyDefinitionReferenceId: pulumi.String("Resource_Naming"),
},
},
PolicySetDefinitionName: pulumi.String("CostManagement"),
})
if err != nil {
return err
}
return nil
})
}Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.authorization.PolicySetDefinition;
import com.pulumi.azurenative.authorization.PolicySetDefinitionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var policySetDefinition = new PolicySetDefinition("policySetDefinition", PolicySetDefinitionArgs.builder()
.description("Policies to enforce low cost storage SKUs")
.displayName("Cost Management")
.metadata(Map.of("category", "Cost Management"))
.policyDefinitionGroups(
Map.ofEntries(
Map.entry("description", "Policies designed to control spend within a subscription."),
Map.entry("displayName", "Cost Management Policies"),
Map.entry("name", "CostSaving")
),
Map.ofEntries(
Map.entry("description", "Policies that help enforce resource organization standards within a subscription."),
Map.entry("displayName", "Organizational Policies"),
Map.entry("name", "Organizational")
))
.policyDefinitions(
Map.ofEntries(
Map.entry("groupNames", "CostSaving"),
Map.entry("parameters", Map.of("listOfAllowedSKUs", Map.of("value",
"Standard_GRS",
"Standard_LRS"))),
Map.entry("policyDefinitionId", "/subscriptions/ae640e6b-ba3e-4256-9d62-2993eecfa6f2/providers/Microsoft.Authorization/policyDefinitions/7433c107-6db4-4ad1-b57a-a76dce0154a1"),
Map.entry("policyDefinitionReferenceId", "Limit_Skus")
),
Map.ofEntries(
Map.entry("groupNames", "Organizational"),
Map.entry("parameters", Map.ofEntries(
Map.entry("prefix", Map.of("value", "DeptA")),
Map.entry("suffix", Map.of("value", "-LC"))
)),
Map.entry("policyDefinitionId", "/subscriptions/ae640e6b-ba3e-4256-9d62-2993eecfa6f2/providers/Microsoft.Authorization/policyDefinitions/ResourceNaming"),
Map.entry("policyDefinitionReferenceId", "Resource_Naming")
))
.policySetDefinitionName("CostManagement")
.build());
}
}Content copied to clipboard
Import
An existing resource can be imported using its type token, name, and identifier, e.g.
$ pulumi import azure-native:authorization:PolicySetDefinition CostManagement /subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}Content copied to clipboard
Constructors
Link copied to clipboard
fun PolicySetDefinitionArgs(description: Output<String>? = null, displayName: Output<String>? = null, metadata: Output<Any>? = null, parameters: Output<Map<String, ParameterDefinitionsValueArgs>>? = null, policyDefinitionGroups: Output<List<PolicyDefinitionGroupArgs>>? = null, policyDefinitions: Output<List<PolicyDefinitionReferenceArgs>>? = null, policySetDefinitionName: Output<String>? = null, policyType: Output<Either<String, PolicyType>>? = null)