StandardAssignmentArgs

data class StandardAssignmentArgs(val assignedStandard: Output<AssignedStandardItemArgs>? = null, val attestationData: Output<StandardAssignmentPropertiesAttestationDataArgs>? = null, val description: Output<String>? = null, val displayName: Output<String>? = null, val effect: Output<Either<String, Effect>>? = null, val excludedScopes: Output<List<String>>? = null, val exemptionData: Output<StandardAssignmentPropertiesExemptionDataArgs>? = null, val expiresOn: Output<String>? = null, val resourceId: Output<String>? = null, val standardAssignmentName: Output<String>? = null) : ConvertibleToJava<StandardAssignmentArgs>

Security Assignment on a resource group over a given scope Uses Azure REST API version 2024-08-01. In version 2.x of the Azure Native provider, it used API version 2024-08-01.

Example Usage

Put an audit standard assignment

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var standardAssignment = new AzureNative.Security.StandardAssignment("standardAssignment", new()
{
AssignedStandard = new AzureNative.Security.Inputs.AssignedStandardItemArgs
{
Id = "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
},
Description = "Set of policies monitored by Azure Security Center for cross cloud",
DisplayName = "ASC Default",
Effect = AzureNative.Security.Effect.Audit,
ExcludedScopes = new[] {},
ResourceId = "subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23",
StandardAssignmentName = "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
});
});
package main
import (
security "github.com/pulumi/pulumi-azure-native-sdk/security/v3"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := security.NewStandardAssignment(ctx, "standardAssignment", &security.StandardAssignmentArgs{
AssignedStandard: &security.AssignedStandardItemArgs{
Id: pulumi.String("/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
},
Description: pulumi.String("Set of policies monitored by Azure Security Center for cross cloud"),
DisplayName: pulumi.String("ASC Default"),
Effect: pulumi.String(security.EffectAudit),
ExcludedScopes: pulumi.StringArray{},
ResourceId: pulumi.String("subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23"),
StandardAssignmentName: pulumi.String("1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.security.StandardAssignment;
import com.pulumi.azurenative.security.StandardAssignmentArgs;
import com.pulumi.azurenative.security.inputs.AssignedStandardItemArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var standardAssignment = new StandardAssignment("standardAssignment", StandardAssignmentArgs.builder()
.assignedStandard(AssignedStandardItemArgs.builder()
.id("/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8")
.build())
.description("Set of policies monitored by Azure Security Center for cross cloud")
.displayName("ASC Default")
.effect("Audit")
.excludedScopes()
.resourceId("subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23")
.standardAssignmentName("1f3afdf9-d0c9-4c3d-847f-89da613e70a8")
.build());
}
}

Put exemption standard assignment

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var standardAssignment = new AzureNative.Security.StandardAssignment("standardAssignment", new()
{
AssignedStandard = new AzureNative.Security.Inputs.AssignedStandardItemArgs
{
Id = "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
},
Description = "Exemption description",
DisplayName = "Test exemption",
Effect = AzureNative.Security.Effect.Exempt,
ExemptionData = new AzureNative.Security.Inputs.StandardAssignmentPropertiesExemptionDataArgs
{
AssignedAssessment = new AzureNative.Security.Inputs.AssignedAssessmentItemArgs
{
AssessmentKey = "1195afff-c881-495e-9bc5-1486211ae03f",
},
ExemptionCategory = AzureNative.Security.ExemptionCategory.Waiver,
},
ExpiresOn = "2022-05-01T19:50:47.083633Z",
ResourceId = "subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA",
StandardAssignmentName = "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
});
});
package main
import (
security "github.com/pulumi/pulumi-azure-native-sdk/security/v3"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := security.NewStandardAssignment(ctx, "standardAssignment", &security.StandardAssignmentArgs{
AssignedStandard: &security.AssignedStandardItemArgs{
Id: pulumi.String("/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
},
Description: pulumi.String("Exemption description"),
DisplayName: pulumi.String("Test exemption"),
Effect: pulumi.String(security.EffectExempt),
ExemptionData: &security.StandardAssignmentPropertiesExemptionDataArgs{
AssignedAssessment: &security.AssignedAssessmentItemArgs{
AssessmentKey: pulumi.String("1195afff-c881-495e-9bc5-1486211ae03f"),
},
ExemptionCategory: pulumi.String(security.ExemptionCategoryWaiver),
},
ExpiresOn: pulumi.String("2022-05-01T19:50:47.083633Z"),
ResourceId: pulumi.String("subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA"),
StandardAssignmentName: pulumi.String("1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.security.StandardAssignment;
import com.pulumi.azurenative.security.StandardAssignmentArgs;
import com.pulumi.azurenative.security.inputs.AssignedStandardItemArgs;
import com.pulumi.azurenative.security.inputs.StandardAssignmentPropertiesExemptionDataArgs;
import com.pulumi.azurenative.security.inputs.AssignedAssessmentItemArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var standardAssignment = new StandardAssignment("standardAssignment", StandardAssignmentArgs.builder()
.assignedStandard(AssignedStandardItemArgs.builder()
.id("/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8")
.build())
.description("Exemption description")
.displayName("Test exemption")
.effect("Exempt")
.exemptionData(StandardAssignmentPropertiesExemptionDataArgs.builder()
.assignedAssessment(AssignedAssessmentItemArgs.builder()
.assessmentKey("1195afff-c881-495e-9bc5-1486211ae03f")
.build())
.exemptionCategory("waiver")
.build())
.expiresOn("2022-05-01T19:50:47.083633Z")
.resourceId("subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA")
.standardAssignmentName("1f3afdf9-d0c9-4c3d-847f-89da613e70a8")
.build());
}
}

Import

An existing resource can be imported using its type token, name, and identifier, e.g.

$ pulumi import azure-native:security:StandardAssignment 1f3afdf9-d0c9-4c3d-847f-89da613e70a8 /{resourceId}/providers/Microsoft.Security/standardAssignments/{standardAssignmentName}

Constructors

Link copied to clipboard
constructor(assignedStandard: Output<AssignedStandardItemArgs>? = null, attestationData: Output<StandardAssignmentPropertiesAttestationDataArgs>? = null, description: Output<String>? = null, displayName: Output<String>? = null, effect: Output<Either<String, Effect>>? = null, excludedScopes: Output<List<String>>? = null, exemptionData: Output<StandardAssignmentPropertiesExemptionDataArgs>? = null, expiresOn: Output<String>? = null, resourceId: Output<String>? = null, standardAssignmentName: Output<String>? = null)

Properties

Link copied to clipboard

Standard item with key as applied to this standard assignment over the given scope

Link copied to clipboard

Additional data about assignment that has Attest effect

Link copied to clipboard
val description: Output<String>? = null

Description of the standardAssignment

Link copied to clipboard
val displayName: Output<String>? = null

Display name of the standardAssignment

Link copied to clipboard
val effect: Output<Either<String, Effect>>? = null

Expected effect of this assignment (Audit/Exempt/Attest)

Link copied to clipboard
val excludedScopes: Output<List<String>>? = null

Excluded scopes, filter out the descendants of the scope (on management scopes)

Link copied to clipboard

Additional data about assignment that has Exempt effect

Link copied to clipboard
val expiresOn: Output<String>? = null

Expiration date of this assignment as a full ISO date

Link copied to clipboard
val resourceId: Output<String>? = null

The identifier of the resource.

Link copied to clipboard
val standardAssignmentName: Output<String>? = null

The standard assignments assignment key - unique key for the standard assignment

Functions

Link copied to clipboard
open override fun toJava(): StandardAssignmentArgs