SubscriptionPolicyExemption

import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";
const example = azure.core.getSubscription({});
const exampleGetPolicySetDefinition = azure.policy.getPolicySetDefinition({
    displayName: "Audit machines with insecure password security settings",
});
const exampleSubscriptionPolicyAssignment = new azure.core.SubscriptionPolicyAssignment("example", {
    name: "exampleAssignment",
    subscriptionId: example.then(example => example.id),
    policyDefinitionId: exampleGetPolicySetDefinition.then(exampleGetPolicySetDefinition => exampleGetPolicySetDefinition.id),
    location: "westus",
    identity: {
        type: "SystemAssigned",
    },
});
const exampleSubscriptionPolicyExemption = new azure.core.SubscriptionPolicyExemption("example", {
    name: "exampleExemption",
    subscriptionId: example.then(example => example.id),
    policyAssignmentId: exampleSubscriptionPolicyAssignment.id,
    exemptionCategory: "Mitigated",
});

import pulumi
import pulumi_azure as azure
example = azure.core.get_subscription()
example_get_policy_set_definition = azure.policy.get_policy_set_definition(display_name="Audit machines with insecure password security settings")
example_subscription_policy_assignment = azure.core.SubscriptionPolicyAssignment("example",
    name="exampleAssignment",
    subscription_id=example.id,
    policy_definition_id=example_get_policy_set_definition.id,
    location="westus",
    identity={
        "type": "SystemAssigned",
    })
example_subscription_policy_exemption = azure.core.SubscriptionPolicyExemption("example",
    name="exampleExemption",
    subscription_id=example.id,
    policy_assignment_id=example_subscription_policy_assignment.id,
    exemption_category="Mitigated")

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;
return await Deployment.RunAsync(() =>
{
    var example = Azure.Core.GetSubscription.Invoke();
    var exampleGetPolicySetDefinition = Azure.Policy.GetPolicySetDefinition.Invoke(new()
    {
        DisplayName = "Audit machines with insecure password security settings",
    });
    var exampleSubscriptionPolicyAssignment = new Azure.Core.SubscriptionPolicyAssignment("example", new()
    {
        Name = "exampleAssignment",
        SubscriptionId = example.Apply(getSubscriptionResult => getSubscriptionResult.Id),
        PolicyDefinitionId = exampleGetPolicySetDefinition.Apply(getPolicySetDefinitionResult => getPolicySetDefinitionResult.Id),
        Location = "westus",
        Identity = new Azure.Core.Inputs.SubscriptionPolicyAssignmentIdentityArgs
        {
            Type = "SystemAssigned",
        },
    });
    var exampleSubscriptionPolicyExemption = new Azure.Core.SubscriptionPolicyExemption("example", new()
    {
        Name = "exampleExemption",
        SubscriptionId = example.Apply(getSubscriptionResult => getSubscriptionResult.Id),
        PolicyAssignmentId = exampleSubscriptionPolicyAssignment.Id,
        ExemptionCategory = "Mitigated",
    });
});

package main
import (
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/core"
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/policy"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := core.LookupSubscription(ctx, &core.LookupSubscriptionArgs{}, nil)
		if err != nil {
			return err
		}
		exampleGetPolicySetDefinition, err := policy.LookupPolicySetDefinition(ctx, &policy.LookupPolicySetDefinitionArgs{
			DisplayName: pulumi.StringRef("Audit machines with insecure password security settings"),
		}, nil)
		if err != nil {
			return err
		}
		exampleSubscriptionPolicyAssignment, err := core.NewSubscriptionPolicyAssignment(ctx, "example", &core.SubscriptionPolicyAssignmentArgs{
			Name:               pulumi.String("exampleAssignment"),
			SubscriptionId:     pulumi.String(example.Id),
			PolicyDefinitionId: pulumi.String(exampleGetPolicySetDefinition.Id),
			Location:           pulumi.String("westus"),
			Identity: &core.SubscriptionPolicyAssignmentIdentityArgs{
				Type: pulumi.String("SystemAssigned"),
			},
		})
		if err != nil {
			return err
		}
		_, err = core.NewSubscriptionPolicyExemption(ctx, "example", &core.SubscriptionPolicyExemptionArgs{
			Name:               pulumi.String("exampleExemption"),
			SubscriptionId:     pulumi.String(example.Id),
			PolicyAssignmentId: exampleSubscriptionPolicyAssignment.ID(),
			ExemptionCategory:  pulumi.String("Mitigated"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.CoreFunctions;
import com.pulumi.azure.core.inputs.GetSubscriptionArgs;
import com.pulumi.azure.policy.PolicyFunctions;
import com.pulumi.azure.policy.inputs.GetPolicySetDefinitionArgs;
import com.pulumi.azure.core.SubscriptionPolicyAssignment;
import com.pulumi.azure.core.SubscriptionPolicyAssignmentArgs;
import com.pulumi.azure.core.inputs.SubscriptionPolicyAssignmentIdentityArgs;
import com.pulumi.azure.core.SubscriptionPolicyExemption;
import com.pulumi.azure.core.SubscriptionPolicyExemptionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var example = CoreFunctions.getSubscription();
        final var exampleGetPolicySetDefinition = PolicyFunctions.getPolicySetDefinition(GetPolicySetDefinitionArgs.builder()
            .displayName("Audit machines with insecure password security settings")
            .build());
        var exampleSubscriptionPolicyAssignment = new SubscriptionPolicyAssignment("exampleSubscriptionPolicyAssignment", SubscriptionPolicyAssignmentArgs.builder()
            .name("exampleAssignment")
            .subscriptionId(example.applyValue(getSubscriptionResult -> getSubscriptionResult.id()))
            .policyDefinitionId(exampleGetPolicySetDefinition.applyValue(getPolicySetDefinitionResult -> getPolicySetDefinitionResult.id()))
            .location("westus")
            .identity(SubscriptionPolicyAssignmentIdentityArgs.builder()
                .type("SystemAssigned")
                .build())
            .build());
        var exampleSubscriptionPolicyExemption = new SubscriptionPolicyExemption("exampleSubscriptionPolicyExemption", SubscriptionPolicyExemptionArgs.builder()
            .name("exampleExemption")
            .subscriptionId(example.applyValue(getSubscriptionResult -> getSubscriptionResult.id()))
            .policyAssignmentId(exampleSubscriptionPolicyAssignment.id())
            .exemptionCategory("Mitigated")
            .build());
    }
}

resources:
  exampleSubscriptionPolicyAssignment:
    type: azure:core:SubscriptionPolicyAssignment
    name: example
    properties:
      name: exampleAssignment
      subscriptionId: ${example.id}
      policyDefinitionId: ${exampleGetPolicySetDefinition.id}
      location: westus
      identity:
        type: SystemAssigned
  exampleSubscriptionPolicyExemption:
    type: azure:core:SubscriptionPolicyExemption
    name: example
    properties:
      name: exampleExemption
      subscriptionId: ${example.id}
      policyAssignmentId: ${exampleSubscriptionPolicyAssignment.id}
      exemptionCategory: Mitigated
variables:
  example:
    fn::invoke:
      function: azure:core:getSubscription
      arguments: {}
  exampleGetPolicySetDefinition:
    fn::invoke:
      function: azure:policy:getPolicySetDefinition
      arguments:
        displayName: Audit machines with insecure password security settings

$ pulumi import azure:core/subscriptionPolicyExemption:SubscriptionPolicyExemption exemption1 /subscriptions/00000000-0000-0000-000000000000/providers/Microsoft.Authorization/policyExemptions/exemption1