Standard
data class StandardAssignmentArgs(val assignedStandard: Output<AssignedStandardItemArgs>? = null, val attestationData: Output<StandardAssignmentPropertiesAttestationDataArgs>? = null, val description: Output<String>? = null, val displayName: Output<String>? = null, val effect: Output<Either<String, Effect>>? = null, val excludedScopes: Output<List<String>>? = null, val exemptionData: Output<StandardAssignmentPropertiesExemptionDataArgs>? = null, val expiresOn: Output<String>? = null, val resourceId: Output<String>? = null, val standardAssignmentName: Output<String>? = null) : ConvertibleToJava<StandardAssignmentArgs>
Security Assignment on a resource group over a given scope Uses Azure REST API version 2024-08-01.
Example Usage
Put an audit standard assignment
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var standardAssignment = new AzureNative.Security.StandardAssignment("standardAssignment", new()
{
AssignedStandard = new AzureNative.Security.Inputs.AssignedStandardItemArgs
{
Id = "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
},
Description = "Set of policies monitored by Azure Security Center for cross cloud",
DisplayName = "ASC Default",
Effect = AzureNative.Security.Effect.Audit,
ExcludedScopes = new[] {},
ResourceId = "subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23",
StandardAssignmentName = "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
});
});Content copied to clipboard
package main
import (
security "github.com/pulumi/pulumi-azure-native-sdk/security/v2"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := security.NewStandardAssignment(ctx, "standardAssignment", &security.StandardAssignmentArgs{
AssignedStandard: &security.AssignedStandardItemArgs{
Id: pulumi.String("/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
},
Description: pulumi.String("Set of policies monitored by Azure Security Center for cross cloud"),
DisplayName: pulumi.String("ASC Default"),
Effect: pulumi.String(security.EffectAudit),
ExcludedScopes: pulumi.StringArray{},
ResourceId: pulumi.String("subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23"),
StandardAssignmentName: pulumi.String("1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
})
if err != nil {
return err
}
return nil
})
}Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.security.StandardAssignment;
import com.pulumi.azurenative.security.StandardAssignmentArgs;
import com.pulumi.azurenative.security.inputs.AssignedStandardItemArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var standardAssignment = new StandardAssignment("standardAssignment", StandardAssignmentArgs.builder()
.assignedStandard(AssignedStandardItemArgs.builder()
.id("/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8")
.build())
.description("Set of policies monitored by Azure Security Center for cross cloud")
.displayName("ASC Default")
.effect("Audit")
.excludedScopes()
.resourceId("subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23")
.standardAssignmentName("1f3afdf9-d0c9-4c3d-847f-89da613e70a8")
.build());
}
}Content copied to clipboard
Put exemption standard assignment
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var standardAssignment = new AzureNative.Security.StandardAssignment("standardAssignment", new()
{
AssignedStandard = new AzureNative.Security.Inputs.AssignedStandardItemArgs
{
Id = "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
},
Description = "Exemption description",
DisplayName = "Test exemption",
Effect = AzureNative.Security.Effect.Exempt,
ExemptionData = new AzureNative.Security.Inputs.StandardAssignmentPropertiesExemptionDataArgs
{
AssignedAssessment = new AzureNative.Security.Inputs.AssignedAssessmentItemArgs
{
AssessmentKey = "1195afff-c881-495e-9bc5-1486211ae03f",
},
ExemptionCategory = AzureNative.Security.ExemptionCategory.Waiver,
},
ExpiresOn = "2022-05-01T19:50:47.083633Z",
ResourceId = "subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA",
StandardAssignmentName = "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
});
});Content copied to clipboard
package main
import (
security "github.com/pulumi/pulumi-azure-native-sdk/security/v2"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := security.NewStandardAssignment(ctx, "standardAssignment", &security.StandardAssignmentArgs{
AssignedStandard: &security.AssignedStandardItemArgs{
Id: pulumi.String("/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
},
Description: pulumi.String("Exemption description"),
DisplayName: pulumi.String("Test exemption"),
Effect: pulumi.String(security.EffectExempt),
ExemptionData: &security.StandardAssignmentPropertiesExemptionDataArgs{
AssignedAssessment: &security.AssignedAssessmentItemArgs{
AssessmentKey: pulumi.String("1195afff-c881-495e-9bc5-1486211ae03f"),
},
ExemptionCategory: pulumi.String(security.ExemptionCategoryWaiver),
},
ExpiresOn: pulumi.String("2022-05-01T19:50:47.083633Z"),
ResourceId: pulumi.String("subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA"),
StandardAssignmentName: pulumi.String("1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
})
if err != nil {
return err
}
return nil
})
}Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.security.StandardAssignment;
import com.pulumi.azurenative.security.StandardAssignmentArgs;
import com.pulumi.azurenative.security.inputs.AssignedStandardItemArgs;
import com.pulumi.azurenative.security.inputs.StandardAssignmentPropertiesExemptionDataArgs;
import com.pulumi.azurenative.security.inputs.AssignedAssessmentItemArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var standardAssignment = new StandardAssignment("standardAssignment", StandardAssignmentArgs.builder()
.assignedStandard(AssignedStandardItemArgs.builder()
.id("/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8")
.build())
.description("Exemption description")
.displayName("Test exemption")
.effect("Exempt")
.exemptionData(StandardAssignmentPropertiesExemptionDataArgs.builder()
.assignedAssessment(AssignedAssessmentItemArgs.builder()
.assessmentKey("1195afff-c881-495e-9bc5-1486211ae03f")
.build())
.exemptionCategory("waiver")
.build())
.expiresOn("2022-05-01T19:50:47.083633Z")
.resourceId("subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA")
.standardAssignmentName("1f3afdf9-d0c9-4c3d-847f-89da613e70a8")
.build());
}
}Content copied to clipboard
Import
An existing resource can be imported using its type token, name, and identifier, e.g.
$ pulumi import azure-native:security:StandardAssignment 1f3afdf9-d0c9-4c3d-847f-89da613e70a8 /{resourceId}/providers/Microsoft.Security/standardAssignments/{standardAssignmentName}Content copied to clipboard
Constructors
Link copied to clipboard
constructor(assignedStandard: Output<AssignedStandardItemArgs>? = null, attestationData: Output<StandardAssignmentPropertiesAttestationDataArgs>? = null, description: Output<String>? = null, displayName: Output<String>? = null, effect: Output<Either<String, Effect>>? = null, excludedScopes: Output<List<String>>? = null, exemptionData: Output<StandardAssignmentPropertiesExemptionDataArgs>? = null, expiresOn: Output<String>? = null, resourceId: Output<String>? = null, standardAssignmentName: Output<String>? = null)
Properties
Link copied to clipboard
Standard item with key as applied to this standard assignment over the given scope
Link copied to clipboard
Additional data about assignment that has Attest effect
Link copied to clipboard
Description of the standardAssignment
Link copied to clipboard
Display name of the standardAssignment
Link copied to clipboard
Excluded scopes, filter out the descendants of the scope (on management scopes)
Link copied to clipboard
Additional data about assignment that has Exempt effect
Link copied to clipboard
The identifier of the resource.
Link copied to clipboard
The standard assignments assignment key - unique key for the standard assignment