StandardAssignment

class StandardAssignment : KotlinCustomResource

Security Assignment on a resource group over a given scope Uses Azure REST API version 2024-08-01. In version 2.x of the Azure Native provider, it used API version 2024-08-01.

Example Usage

Put an audit standard assignment

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var standardAssignment = new AzureNative.Security.StandardAssignment("standardAssignment", new()
{
AssignedStandard = new AzureNative.Security.Inputs.AssignedStandardItemArgs
{
Id = "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
},
Description = "Set of policies monitored by Azure Security Center for cross cloud",
DisplayName = "ASC Default",
Effect = AzureNative.Security.Effect.Audit,
ExcludedScopes = new[] {},
ResourceId = "subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23",
StandardAssignmentName = "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
});
});
package main
import (
security "github.com/pulumi/pulumi-azure-native-sdk/security/v2"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := security.NewStandardAssignment(ctx, "standardAssignment", &security.StandardAssignmentArgs{
AssignedStandard: &security.AssignedStandardItemArgs{
Id: pulumi.String("/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
},
Description: pulumi.String("Set of policies monitored by Azure Security Center for cross cloud"),
DisplayName: pulumi.String("ASC Default"),
Effect: pulumi.String(security.EffectAudit),
ExcludedScopes: pulumi.StringArray{},
ResourceId: pulumi.String("subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23"),
StandardAssignmentName: pulumi.String("1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.security.StandardAssignment;
import com.pulumi.azurenative.security.StandardAssignmentArgs;
import com.pulumi.azurenative.security.inputs.AssignedStandardItemArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var standardAssignment = new StandardAssignment("standardAssignment", StandardAssignmentArgs.builder()
.assignedStandard(AssignedStandardItemArgs.builder()
.id("/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8")
.build())
.description("Set of policies monitored by Azure Security Center for cross cloud")
.displayName("ASC Default")
.effect("Audit")
.excludedScopes()
.resourceId("subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23")
.standardAssignmentName("1f3afdf9-d0c9-4c3d-847f-89da613e70a8")
.build());
}
}

Put exemption standard assignment

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var standardAssignment = new AzureNative.Security.StandardAssignment("standardAssignment", new()
{
AssignedStandard = new AzureNative.Security.Inputs.AssignedStandardItemArgs
{
Id = "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
},
Description = "Exemption description",
DisplayName = "Test exemption",
Effect = AzureNative.Security.Effect.Exempt,
ExemptionData = new AzureNative.Security.Inputs.StandardAssignmentPropertiesExemptionDataArgs
{
AssignedAssessment = new AzureNative.Security.Inputs.AssignedAssessmentItemArgs
{
AssessmentKey = "1195afff-c881-495e-9bc5-1486211ae03f",
},
ExemptionCategory = AzureNative.Security.ExemptionCategory.Waiver,
},
ExpiresOn = "2022-05-01T19:50:47.083633Z",
ResourceId = "subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA",
StandardAssignmentName = "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
});
});
package main
import (
security "github.com/pulumi/pulumi-azure-native-sdk/security/v2"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := security.NewStandardAssignment(ctx, "standardAssignment", &security.StandardAssignmentArgs{
AssignedStandard: &security.AssignedStandardItemArgs{
Id: pulumi.String("/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
},
Description: pulumi.String("Exemption description"),
DisplayName: pulumi.String("Test exemption"),
Effect: pulumi.String(security.EffectExempt),
ExemptionData: &security.StandardAssignmentPropertiesExemptionDataArgs{
AssignedAssessment: &security.AssignedAssessmentItemArgs{
AssessmentKey: pulumi.String("1195afff-c881-495e-9bc5-1486211ae03f"),
},
ExemptionCategory: pulumi.String(security.ExemptionCategoryWaiver),
},
ExpiresOn: pulumi.String("2022-05-01T19:50:47.083633Z"),
ResourceId: pulumi.String("subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA"),
StandardAssignmentName: pulumi.String("1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.security.StandardAssignment;
import com.pulumi.azurenative.security.StandardAssignmentArgs;
import com.pulumi.azurenative.security.inputs.AssignedStandardItemArgs;
import com.pulumi.azurenative.security.inputs.StandardAssignmentPropertiesExemptionDataArgs;
import com.pulumi.azurenative.security.inputs.AssignedAssessmentItemArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var standardAssignment = new StandardAssignment("standardAssignment", StandardAssignmentArgs.builder()
.assignedStandard(AssignedStandardItemArgs.builder()
.id("/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8")
.build())
.description("Exemption description")
.displayName("Test exemption")
.effect("Exempt")
.exemptionData(StandardAssignmentPropertiesExemptionDataArgs.builder()
.assignedAssessment(AssignedAssessmentItemArgs.builder()
.assessmentKey("1195afff-c881-495e-9bc5-1486211ae03f")
.build())
.exemptionCategory("waiver")
.build())
.expiresOn("2022-05-01T19:50:47.083633Z")
.resourceId("subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA")
.standardAssignmentName("1f3afdf9-d0c9-4c3d-847f-89da613e70a8")
.build());
}
}

Import

An existing resource can be imported using its type token, name, and identifier, e.g.

$ pulumi import azure-native:security:StandardAssignment 1f3afdf9-d0c9-4c3d-847f-89da613e70a8 /{resourceId}/providers/Microsoft.Security/standardAssignments/{standardAssignmentName}

Properties

Link copied to clipboard

Standard item with key as applied to this standard assignment over the given scope

Link copied to clipboard

Additional data about assignment that has Attest effect

Link copied to clipboard
val azureApiVersion: Output<String>

The Azure API version of the resource.

Link copied to clipboard
val description: Output<String>?

Description of the standardAssignment

Link copied to clipboard
val displayName: Output<String>?

Display name of the standardAssignment

Link copied to clipboard
val effect: Output<String>?

Expected effect of this assignment (Audit/Exempt/Attest)

Link copied to clipboard
val excludedScopes: Output<List<String>>?

Excluded scopes, filter out the descendants of the scope (on management scopes)

Link copied to clipboard

Additional data about assignment that has Exempt effect

Link copied to clipboard
val expiresOn: Output<String>?

Expiration date of this assignment as a full ISO date

Link copied to clipboard
val id: Output<String>
Link copied to clipboard

The standard assignment metadata.

Link copied to clipboard
val name: Output<String>

Resource name

Link copied to clipboard
val pulumiChildResources: Set<KotlinResource>
Link copied to clipboard
Link copied to clipboard
Link copied to clipboard
val type: Output<String>

Resource type

Link copied to clipboard
val urn: Output<String>