Policy Set Definition Version At Management Group
The policy set definition version. Uses Azure REST API version 2025-01-01. In version 2.x of the Azure Native provider, it used API version 2023-04-01. Other available API versions: 2023-04-01, 2024-05-01, 2025-03-01. These can be accessed by generating a local SDK package using the CLI command pulumi package add azure-native authorization [ApiVersion]
. See the ../../../version-guide/#accessing-any-api-version-via-local-packages for details.
Example Usage
Create or update a policy set definition version at management group level
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var policySetDefinitionVersionAtManagementGroup = new AzureNative.Authorization.PolicySetDefinitionVersionAtManagementGroup("policySetDefinitionVersionAtManagementGroup", new()
{
Description = "Policies to enforce low cost storage SKUs",
DisplayName = "Cost Management",
ManagementGroupName = "MyManagementGroup",
Metadata = new Dictionary<string, object?>
{
["category"] = "Cost Management",
},
PolicyDefinitionVersion = "1.2.1",
PolicyDefinitions = new[]
{
new AzureNative.Authorization.Inputs.PolicyDefinitionReferenceArgs
{
Parameters =
{
{ "listOfAllowedSKUs", new AzureNative.Authorization.Inputs.ParameterValuesValueArgs
{
Value = new[]
{
"Standard_GRS",
"Standard_LRS",
},
} },
},
PolicyDefinitionId = "/providers/Microsoft.Management/managementgroups/MyManagementGroup/providers/Microsoft.Authorization/policyDefinitions/7433c107-6db4-4ad1-b57a-a76dce0154a1",
PolicyDefinitionReferenceId = "Limit_Skus",
},
new AzureNative.Authorization.Inputs.PolicyDefinitionReferenceArgs
{
Parameters =
{
{ "prefix", new AzureNative.Authorization.Inputs.ParameterValuesValueArgs
{
Value = "DeptA",
} },
{ "suffix", new AzureNative.Authorization.Inputs.ParameterValuesValueArgs
{
Value = "-LC",
} },
},
PolicyDefinitionId = "/providers/Microsoft.Management/managementgroups/MyManagementGroup/providers/Microsoft.Authorization/policyDefinitions/ResourceNaming",
PolicyDefinitionReferenceId = "Resource_Naming",
},
},
PolicySetDefinitionName = "CostManagement",
Version = "1.2.1",
});
});
package main
import (
authorization "github.com/pulumi/pulumi-azure-native-sdk/authorization/v2"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := authorization.NewPolicySetDefinitionVersionAtManagementGroup(ctx, "policySetDefinitionVersionAtManagementGroup", &authorization.PolicySetDefinitionVersionAtManagementGroupArgs{
Description: pulumi.String("Policies to enforce low cost storage SKUs"),
DisplayName: pulumi.String("Cost Management"),
ManagementGroupName: pulumi.String("MyManagementGroup"),
Metadata: pulumi.Any(map[string]interface{}{
"category": "Cost Management",
}),
PolicyDefinitionVersion: pulumi.String("1.2.1"),
PolicyDefinitions: authorization.PolicyDefinitionReferenceArray{
&authorization.PolicyDefinitionReferenceArgs{
Parameters: authorization.ParameterValuesValueMap{
"listOfAllowedSKUs": &authorization.ParameterValuesValueArgs{
Value: pulumi.Any{
"Standard_GRS",
"Standard_LRS",
},
},
},
PolicyDefinitionId: pulumi.String("/providers/Microsoft.Management/managementgroups/MyManagementGroup/providers/Microsoft.Authorization/policyDefinitions/7433c107-6db4-4ad1-b57a-a76dce0154a1"),
PolicyDefinitionReferenceId: pulumi.String("Limit_Skus"),
},
&authorization.PolicyDefinitionReferenceArgs{
Parameters: authorization.ParameterValuesValueMap{
"prefix": &authorization.ParameterValuesValueArgs{
Value: pulumi.Any("DeptA"),
},
"suffix": &authorization.ParameterValuesValueArgs{
Value: pulumi.Any("-LC"),
},
},
PolicyDefinitionId: pulumi.String("/providers/Microsoft.Management/managementgroups/MyManagementGroup/providers/Microsoft.Authorization/policyDefinitions/ResourceNaming"),
PolicyDefinitionReferenceId: pulumi.String("Resource_Naming"),
},
},
PolicySetDefinitionName: pulumi.String("CostManagement"),
Version: pulumi.String("1.2.1"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.authorization.PolicySetDefinitionVersionAtManagementGroup;
import com.pulumi.azurenative.authorization.PolicySetDefinitionVersionAtManagementGroupArgs;
import com.pulumi.azurenative.authorization.inputs.PolicyDefinitionReferenceArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var policySetDefinitionVersionAtManagementGroup = new PolicySetDefinitionVersionAtManagementGroup("policySetDefinitionVersionAtManagementGroup", PolicySetDefinitionVersionAtManagementGroupArgs.builder()
.description("Policies to enforce low cost storage SKUs")
.displayName("Cost Management")
.managementGroupName("MyManagementGroup")
.metadata(Map.of("category", "Cost Management"))
.policyDefinitionVersion("1.2.1")
.policyDefinitions(
PolicyDefinitionReferenceArgs.builder()
.parameters(Map.of("listOfAllowedSKUs", Map.of("value",
"Standard_GRS",
"Standard_LRS")))
.policyDefinitionId("/providers/Microsoft.Management/managementgroups/MyManagementGroup/providers/Microsoft.Authorization/policyDefinitions/7433c107-6db4-4ad1-b57a-a76dce0154a1")
.policyDefinitionReferenceId("Limit_Skus")
.build(),
PolicyDefinitionReferenceArgs.builder()
.parameters(Map.ofEntries(
Map.entry("prefix", Map.of("value", "DeptA")),
Map.entry("suffix", Map.of("value", "-LC"))
))
.policyDefinitionId("/providers/Microsoft.Management/managementgroups/MyManagementGroup/providers/Microsoft.Authorization/policyDefinitions/ResourceNaming")
.policyDefinitionReferenceId("Resource_Naming")
.build())
.policySetDefinitionName("CostManagement")
.version("1.2.1")
.build());
}
}
Import
An existing resource can be imported using its type token, name, and identifier, e.g.
$ pulumi import azure-native:authorization:PolicySetDefinitionVersionAtManagementGroup CostManagement /providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}
Properties
The Azure API version of the resource.
The policy set definition description.
The display name of the policy set definition.
The policy set definition parameters that can be used in policy definition references.
The metadata describing groups of policy definition references within the policy set definition.
An array of policy definition references.
The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static.
The system metadata relating to this resource.