pulumi-azure-kotlin/com.pulumi.azure.management.kotlin/GroupPolicyAssignment

GroupPolicyAssignment

class GroupPolicyAssignment : KotlinCustomResource

Manages a Policy Assignment to a Management Group.

Example Usage

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.management.Group;
import com.pulumi.azure.management.GroupArgs;
import com.pulumi.azure.policy.Definition;
import com.pulumi.azure.policy.DefinitionArgs;
import com.pulumi.azure.management.GroupPolicyAssignment;
import com.pulumi.azure.management.GroupPolicyAssignmentArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var exampleGroup = new Group("exampleGroup", GroupArgs.builder()
            .displayName("Some Management Group")
            .build());
        var exampleDefinition = new Definition("exampleDefinition", DefinitionArgs.builder()
            .policyType("Custom")
            .mode("All")
            .displayName("my-policy-definition")
            .managementGroupId(exampleGroup.id())
            .policyRule("""
 {
    "if": {
      "not": {
        "field": "location",
        "equals": "westeurope"
      }
    },
    "then": {
      "effect": "Deny"
    }
  }
            """)
            .build());
        var exampleGroupPolicyAssignment = new GroupPolicyAssignment("exampleGroupPolicyAssignment", GroupPolicyAssignmentArgs.builder()
            .policyDefinitionId(exampleDefinition.id())
            .managementGroupId(exampleGroup.id())
            .build());
    }
}

Import

Management Group Policy Assignments can be imported using the resource id, e.g.

$ pulumi import azure:management/groupPolicyAssignment:GroupPolicyAssignment example /providers/Microsoft.Management/managementGroups/group1/providers/Microsoft.Authorization/policyAssignments/assignment1

Properties

description

val description: Output<String>?

A description which should be used for this Policy Assignment.

displayName

val displayName: Output<String>?

The Display Name for this Policy Assignment.

enforce

val enforce: Output<Boolean>?

Specifies if this Policy should be enforced or not? Defaults to true.

val id: Output<String>

identity

val identity: Output<GroupPolicyAssignmentIdentity>?

An identity block as defined below.

location

val location: Output<String>

The Azure Region where the Policy Assignment should exist. Changing this forces a new Policy Assignment to be created.

managementGroupId

val managementGroupId: Output<String>

The ID of the Management Group. Changing this forces a new Policy Assignment to be created.

metadata

val metadata: Output<String>

A JSON mapping of any Metadata for this Policy.

name

val name: Output<String>

The name which should be used for this Policy Assignment. Possible values must be between 3 and 24 characters in length. Changing this forces a new Policy Assignment to be created.

nonComplianceMessages

val nonComplianceMessages: Output<List<GroupPolicyAssignmentNonComplianceMessage>>?

One or more non_compliance_message blocks as defined below.

notScopes

val notScopes: Output<List<String>>?

Specifies a list of Resource Scopes (for example a Subscription, or a Resource Group) within this Management Group which are excluded from this Policy.

overrides