Security Standard Args
Security Standard on a resource Uses Azure REST API version 2024-08-01. In version 2.x of the Azure Native provider, it used API version 2024-08-01.
Example Usage
Create or update security standard over management group scope
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var securityStandard = new AzureNative.Security.SecurityStandard("securityStandard", new()
{
Assessments = new[]
{
new AzureNative.Security.Inputs.PartialAssessmentPropertiesArgs
{
AssessmentKey = "1195afff-c881-495e-9bc5-1486211ae03f",
},
new AzureNative.Security.Inputs.PartialAssessmentPropertiesArgs
{
AssessmentKey = "dbd0cb49-b563-45e7-9724-889e799fa648",
},
},
CloudProviders = new[]
{
AzureNative.Security.StandardSupportedCloud.GCP,
},
Description = "description of Azure Test Security Standard 1",
DisplayName = "Azure Test Security Standard 1",
PolicySetDefinitionId = "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/providers/Microsoft.Authorization/policySetDefinitions/patchorchestration-applicationversions",
Scope = "providers/Microsoft.Management/managementGroups/contoso",
StandardId = "8bb8be0a-6010-4789-812f-e4d661c4ed0e",
});
});
package main
import (
security "github.com/pulumi/pulumi-azure-native-sdk/security/v3"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := security.NewSecurityStandard(ctx, "securityStandard", &security.SecurityStandardArgs{
Assessments: security.PartialAssessmentPropertiesArray{
&security.PartialAssessmentPropertiesArgs{
AssessmentKey: pulumi.String("1195afff-c881-495e-9bc5-1486211ae03f"),
},
&security.PartialAssessmentPropertiesArgs{
AssessmentKey: pulumi.String("dbd0cb49-b563-45e7-9724-889e799fa648"),
},
},
CloudProviders: pulumi.StringArray{
pulumi.String(security.StandardSupportedCloudGCP),
},
Description: pulumi.String("description of Azure Test Security Standard 1"),
DisplayName: pulumi.String("Azure Test Security Standard 1"),
PolicySetDefinitionId: pulumi.String("/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/providers/Microsoft.Authorization/policySetDefinitions/patchorchestration-applicationversions"),
Scope: pulumi.String("providers/Microsoft.Management/managementGroups/contoso"),
StandardId: pulumi.String("8bb8be0a-6010-4789-812f-e4d661c4ed0e"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.security.SecurityStandard;
import com.pulumi.azurenative.security.SecurityStandardArgs;
import com.pulumi.azurenative.security.inputs.PartialAssessmentPropertiesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var securityStandard = new SecurityStandard("securityStandard", SecurityStandardArgs.builder()
.assessments(
PartialAssessmentPropertiesArgs.builder()
.assessmentKey("1195afff-c881-495e-9bc5-1486211ae03f")
.build(),
PartialAssessmentPropertiesArgs.builder()
.assessmentKey("dbd0cb49-b563-45e7-9724-889e799fa648")
.build())
.cloudProviders("GCP")
.description("description of Azure Test Security Standard 1")
.displayName("Azure Test Security Standard 1")
.policySetDefinitionId("/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/providers/Microsoft.Authorization/policySetDefinitions/patchorchestration-applicationversions")
.scope("providers/Microsoft.Management/managementGroups/contoso")
.standardId("8bb8be0a-6010-4789-812f-e4d661c4ed0e")
.build());
}
}
Create or update security standard over security connector scope
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var securityStandard = new AzureNative.Security.SecurityStandard("securityStandard", new()
{
Assessments = new[]
{
new AzureNative.Security.Inputs.PartialAssessmentPropertiesArgs
{
AssessmentKey = "1195afff-c881-495e-9bc5-1486211ae03f",
},
new AzureNative.Security.Inputs.PartialAssessmentPropertiesArgs
{
AssessmentKey = "dbd0cb49-b563-45e7-9724-889e799fa648",
},
},
CloudProviders = new[]
{
AzureNative.Security.StandardSupportedCloud.GCP,
},
Description = "description of Azure Test Security Standard 1",
DisplayName = "Azure Test Security Standard 1",
Scope = "subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/gcpResourceGroup/providers/Microsoft.Security/securityConnectors/gcpconnector",
StandardId = "8bb8be0a-6010-4789-812f-e4d661c4ed0e",
});
});
package main
import (
security "github.com/pulumi/pulumi-azure-native-sdk/security/v3"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := security.NewSecurityStandard(ctx, "securityStandard", &security.SecurityStandardArgs{
Assessments: security.PartialAssessmentPropertiesArray{
&security.PartialAssessmentPropertiesArgs{
AssessmentKey: pulumi.String("1195afff-c881-495e-9bc5-1486211ae03f"),
},
&security.PartialAssessmentPropertiesArgs{
AssessmentKey: pulumi.String("dbd0cb49-b563-45e7-9724-889e799fa648"),
},
},
CloudProviders: pulumi.StringArray{
pulumi.String(security.StandardSupportedCloudGCP),
},
Description: pulumi.String("description of Azure Test Security Standard 1"),
DisplayName: pulumi.String("Azure Test Security Standard 1"),
Scope: pulumi.String("subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/gcpResourceGroup/providers/Microsoft.Security/securityConnectors/gcpconnector"),
StandardId: pulumi.String("8bb8be0a-6010-4789-812f-e4d661c4ed0e"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.security.SecurityStandard;
import com.pulumi.azurenative.security.SecurityStandardArgs;
import com.pulumi.azurenative.security.inputs.PartialAssessmentPropertiesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var securityStandard = new SecurityStandard("securityStandard", SecurityStandardArgs.builder()
.assessments(
PartialAssessmentPropertiesArgs.builder()
.assessmentKey("1195afff-c881-495e-9bc5-1486211ae03f")
.build(),
PartialAssessmentPropertiesArgs.builder()
.assessmentKey("dbd0cb49-b563-45e7-9724-889e799fa648")
.build())
.cloudProviders("GCP")
.description("description of Azure Test Security Standard 1")
.displayName("Azure Test Security Standard 1")
.scope("subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/gcpResourceGroup/providers/Microsoft.Security/securityConnectors/gcpconnector")
.standardId("8bb8be0a-6010-4789-812f-e4d661c4ed0e")
.build());
}
}
Create or update security standard over subscription scope
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var securityStandard = new AzureNative.Security.SecurityStandard("securityStandard", new()
{
Assessments = new[]
{
new AzureNative.Security.Inputs.PartialAssessmentPropertiesArgs
{
AssessmentKey = "1195afff-c881-495e-9bc5-1486211ae03f",
},
new AzureNative.Security.Inputs.PartialAssessmentPropertiesArgs
{
AssessmentKey = "dbd0cb49-b563-45e7-9724-889e799fa648",
},
},
CloudProviders = new[]
{
AzureNative.Security.StandardSupportedCloud.GCP,
},
Description = "description of Azure Test Security Standard 1",
DisplayName = "Azure Test Security Standard 1",
PolicySetDefinitionId = "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/providers/Microsoft.Authorization/policySetDefinitions/patchorchestration-applicationversions",
Scope = "subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23",
StandardId = "8bb8be0a-6010-4789-812f-e4d661c4ed0e",
});
});
package main
import (
security "github.com/pulumi/pulumi-azure-native-sdk/security/v3"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := security.NewSecurityStandard(ctx, "securityStandard", &security.SecurityStandardArgs{
Assessments: security.PartialAssessmentPropertiesArray{
&security.PartialAssessmentPropertiesArgs{
AssessmentKey: pulumi.String("1195afff-c881-495e-9bc5-1486211ae03f"),
},
&security.PartialAssessmentPropertiesArgs{
AssessmentKey: pulumi.String("dbd0cb49-b563-45e7-9724-889e799fa648"),
},
},
CloudProviders: pulumi.StringArray{
pulumi.String(security.StandardSupportedCloudGCP),
},
Description: pulumi.String("description of Azure Test Security Standard 1"),
DisplayName: pulumi.String("Azure Test Security Standard 1"),
PolicySetDefinitionId: pulumi.String("/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/providers/Microsoft.Authorization/policySetDefinitions/patchorchestration-applicationversions"),
Scope: pulumi.String("subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23"),
StandardId: pulumi.String("8bb8be0a-6010-4789-812f-e4d661c4ed0e"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.security.SecurityStandard;
import com.pulumi.azurenative.security.SecurityStandardArgs;
import com.pulumi.azurenative.security.inputs.PartialAssessmentPropertiesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var securityStandard = new SecurityStandard("securityStandard", SecurityStandardArgs.builder()
.assessments(
PartialAssessmentPropertiesArgs.builder()
.assessmentKey("1195afff-c881-495e-9bc5-1486211ae03f")
.build(),
PartialAssessmentPropertiesArgs.builder()
.assessmentKey("dbd0cb49-b563-45e7-9724-889e799fa648")
.build())
.cloudProviders("GCP")
.description("description of Azure Test Security Standard 1")
.displayName("Azure Test Security Standard 1")
.policySetDefinitionId("/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/providers/Microsoft.Authorization/policySetDefinitions/patchorchestration-applicationversions")
.scope("subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23")
.standardId("8bb8be0a-6010-4789-812f-e4d661c4ed0e")
.build());
}
}
Import
An existing resource can be imported using its type token, name, and identifier, e.g.
$ pulumi import azure-native:security:SecurityStandard 8bb8be0a-6010-4789-812f-e4d661c4ed0e /{scope}/providers/Microsoft.Security/securityStandards/{standardId}
Constructors
Properties
List of assessment keys to apply to standard scope.
List of all standard supported clouds.
Description of the standard
Display name of the standard, equivalent to the standardId
The policy set definition id associated with the standard.
The scope of the security standard. Valid scopes are: management group (format: 'providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: 'subscriptions/{subscriptionId}'), or security connector (format: 'subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Security/securityConnectors/{securityConnectorName})'
The Security Standard key - unique key for the standard type