@atensec/pulumi-thoth 0.1.11 → 0.1.13

package/bin/governance/policyBundle.d.ts

@@ -0,0 +1,225 @@
+import * as pulumi from "@pulumi/pulumi";
+export declare class PolicyBundle extends pulumi.CustomResource {
+    /**
+     * Get an existing PolicyBundle resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: PolicyBundleState, opts?: pulumi.CustomResourceOptions): PolicyBundle;
+    /**
+     * Returns true if the given object is an instance of PolicyBundle.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is PolicyBundle;
+    /**
+     * Assignment targets (for example: all, agent:security-analyst-agent, coding-agent). Defaults to all.
+     */
+    readonly assignments: pulumi.Output<string[] | undefined>;
+    /**
+     * Creation timestamp.
+     */
+    readonly createdAt: pulumi.Output<string>;
+    /**
+     * Creator identity.
+     */
+    readonly createdBy: pulumi.Output<string>;
+    /**
+     * Optional policy bundle description.
+     */
+    readonly description: pulumi.Output<string | undefined>;
+    /**
+     * Customer-facing policy mode: enforce or observe. Defaults to enforce.
+     */
+    readonly enforcementMode: pulumi.Output<string | undefined>;
+    /**
+     * Optional expected SHA-256 hash (hex or sha256:<hex>) to enforce policy integrity.
+     */
+    readonly expectedHash: pulumi.Output<string | undefined>;
+    /**
+     * Policy framework: OPA or CEDAR.
+     */
+    readonly framework: pulumi.Output<string>;
+    /**
+     * Stable bundle name. Updates create a new version for the same name.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * SHA-256 hash of policy content.
+     */
+    readonly policyHash: pulumi.Output<string>;
+    /**
+     * Raw Rego/Cedar policy payload. Set this or source_uri/s3_uri.
+     */
+    readonly rawPolicy: pulumi.Output<string | undefined>;
+    /**
+     * Resolved immutable source version (S3 version ID or file revision hint).
+     */
+    readonly resolvedVersion: pulumi.Output<string>;
+    /**
+     * Legacy S3 source URI (for example: s3://bucket/path/policy.rego). Set this or raw_policy. Prefer source_uri.
+     */
+    readonly s3Uri: pulumi.Output<string | undefined>;
+    /**
+     * Optional S3 object version ID to pin deterministic policy enforcement.
+     */
+    readonly s3VersionId: pulumi.Output<string | undefined>;
+    /**
+     * Unified policy source URI (file:// or s3://). Set this or raw_policy.
+     */
+    readonly sourceUri: pulumi.Output<string | undefined>;
+    /**
+     * Bundle lifecycle status: active, staged, paused, or disabled (alias of paused).
+     */
+    readonly status: pulumi.Output<string | undefined>;
+    /**
+     * Tenant ID from provider configuration.
+     */
+    readonly tenantId: pulumi.Output<string>;
+    /**
+     * Last update timestamp.
+     */
+    readonly updatedAt: pulumi.Output<string>;
+    /**
+     * Monotonic policy bundle version.
+     */
+    readonly version: pulumi.Output<number>;
+    /**
+     * Create a PolicyBundle resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: PolicyBundleArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering PolicyBundle resources.
+ */
+export interface PolicyBundleState {
+    /**
+     * Assignment targets (for example: all, agent:security-analyst-agent, coding-agent). Defaults to all.
+     */
+    assignments?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Creation timestamp.
+     */
+    createdAt?: pulumi.Input<string | undefined>;
+    /**
+     * Creator identity.
+     */
+    createdBy?: pulumi.Input<string | undefined>;
+    /**
+     * Optional policy bundle description.
+     */
+    description?: pulumi.Input<string | undefined>;
+    /**
+     * Customer-facing policy mode: enforce or observe. Defaults to enforce.
+     */
+    enforcementMode?: pulumi.Input<string | undefined>;
+    /**
+     * Optional expected SHA-256 hash (hex or sha256:<hex>) to enforce policy integrity.
+     */
+    expectedHash?: pulumi.Input<string | undefined>;
+    /**
+     * Policy framework: OPA or CEDAR.
+     */
+    framework?: pulumi.Input<string | undefined>;
+    /**
+     * Stable bundle name. Updates create a new version for the same name.
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * SHA-256 hash of policy content.
+     */
+    policyHash?: pulumi.Input<string | undefined>;
+    /**
+     * Raw Rego/Cedar policy payload. Set this or source_uri/s3_uri.
+     */
+    rawPolicy?: pulumi.Input<string | undefined>;
+    /**
+     * Resolved immutable source version (S3 version ID or file revision hint).
+     */
+    resolvedVersion?: pulumi.Input<string | undefined>;
+    /**
+     * Legacy S3 source URI (for example: s3://bucket/path/policy.rego). Set this or raw_policy. Prefer source_uri.
+     */
+    s3Uri?: pulumi.Input<string | undefined>;
+    /**
+     * Optional S3 object version ID to pin deterministic policy enforcement.
+     */
+    s3VersionId?: pulumi.Input<string | undefined>;
+    /**
+     * Unified policy source URI (file:// or s3://). Set this or raw_policy.
+     */
+    sourceUri?: pulumi.Input<string | undefined>;
+    /**
+     * Bundle lifecycle status: active, staged, paused, or disabled (alias of paused).
+     */
+    status?: pulumi.Input<string | undefined>;
+    /**
+     * Tenant ID from provider configuration.
+     */
+    tenantId?: pulumi.Input<string | undefined>;
+    /**
+     * Last update timestamp.
+     */
+    updatedAt?: pulumi.Input<string | undefined>;
+    /**
+     * Monotonic policy bundle version.
+     */
+    version?: pulumi.Input<number | undefined>;
+}
+/**
+ * The set of arguments for constructing a PolicyBundle resource.
+ */
+export interface PolicyBundleArgs {
+    /**
+     * Assignment targets (for example: all, agent:security-analyst-agent, coding-agent). Defaults to all.
+     */
+    assignments?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Optional policy bundle description.
+     */
+    description?: pulumi.Input<string | undefined>;
+    /**
+     * Customer-facing policy mode: enforce or observe. Defaults to enforce.
+     */
+    enforcementMode?: pulumi.Input<string | undefined>;
+    /**
+     * Optional expected SHA-256 hash (hex or sha256:<hex>) to enforce policy integrity.
+     */
+    expectedHash?: pulumi.Input<string | undefined>;
+    /**
+     * Policy framework: OPA or CEDAR.
+     */
+    framework: pulumi.Input<string>;
+    /**
+     * Stable bundle name. Updates create a new version for the same name.
+     */
+    name: pulumi.Input<string>;
+    /**
+     * Raw Rego/Cedar policy payload. Set this or source_uri/s3_uri.
+     */
+    rawPolicy?: pulumi.Input<string | undefined>;
+    /**
+     * Legacy S3 source URI (for example: s3://bucket/path/policy.rego). Set this or raw_policy. Prefer source_uri.
+     */
+    s3Uri?: pulumi.Input<string | undefined>;
+    /**
+     * Optional S3 object version ID to pin deterministic policy enforcement.
+     */
+    s3VersionId?: pulumi.Input<string | undefined>;
+    /**
+     * Unified policy source URI (file:// or s3://). Set this or raw_policy.
+     */
+    sourceUri?: pulumi.Input<string | undefined>;
+    /**
+     * Bundle lifecycle status: active, staged, paused, or disabled (alias of paused).
+     */
+    status?: pulumi.Input<string | undefined>;
+}
+//# sourceMappingURL=policyBundle.d.ts.map

package/bin/governance/policyBundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policyBundle.d.ts","sourceRoot":"","sources":["../../governance/policyBundle.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC,qBAAa,YAAa,SAAQ,MAAM,CAAC,cAAc;IACnD;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,YAAY;IAO1I;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,YAAY;IAOvD;;OAEG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IACzE;;OAEG;IACH,SAAgC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE;;OAEG;IACH,SAAgC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE;;OAEG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACvE;;OAEG;IACH,SAAwB,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3E;;OAEG;IACH,SAAwB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxE;;OAEG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD;;OAEG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD;;OAEG;IACH,SAAgC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClE;;OAEG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACrE;;OAEG;IACH,SAAgC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvE;;OAEG;IACH,SAAwB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACvE;;OAEG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACrE;;OAEG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClE;;OAEG;IACH,SAAgC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChE;;OAEG;IACH,SAAgC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE;;OAEG;IACH,SAAgC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAE/D;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAwDxF;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAC9B;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAC/D;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACnD;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAChD;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACnD;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1C;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5C;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC7B;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAC/D;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACnD;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAChD;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC7C"}

package/bin/governance/policyBundle.js

@@ -0,0 +1,114 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PolicyBundle = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const utilities = __importStar(require("../utilities"));
+class PolicyBundle extends pulumi.CustomResource {
+    /**
+     * Get an existing PolicyBundle resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new PolicyBundle(name, state, { ...opts, id: id });
+    }
+    /** @internal */
+    static __pulumiType = 'thoth:governance/policyBundle:PolicyBundle';
+    /**
+     * Returns true if the given object is an instance of PolicyBundle.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === PolicyBundle.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["assignments"] = state?.assignments;
+            resourceInputs["createdAt"] = state?.createdAt;
+            resourceInputs["createdBy"] = state?.createdBy;
+            resourceInputs["description"] = state?.description;
+            resourceInputs["enforcementMode"] = state?.enforcementMode;
+            resourceInputs["expectedHash"] = state?.expectedHash;
+            resourceInputs["framework"] = state?.framework;
+            resourceInputs["name"] = state?.name;
+            resourceInputs["policyHash"] = state?.policyHash;
+            resourceInputs["rawPolicy"] = state?.rawPolicy;
+            resourceInputs["resolvedVersion"] = state?.resolvedVersion;
+            resourceInputs["s3Uri"] = state?.s3Uri;
+            resourceInputs["s3VersionId"] = state?.s3VersionId;
+            resourceInputs["sourceUri"] = state?.sourceUri;
+            resourceInputs["status"] = state?.status;
+            resourceInputs["tenantId"] = state?.tenantId;
+            resourceInputs["updatedAt"] = state?.updatedAt;
+            resourceInputs["version"] = state?.version;
+        }
+        else {
+            const args = argsOrState;
+            if (args?.framework === undefined && !opts.urn) {
+                throw new Error("Missing required property 'framework'");
+            }
+            if (args?.name === undefined && !opts.urn) {
+                throw new Error("Missing required property 'name'");
+            }
+            resourceInputs["assignments"] = args?.assignments;
+            resourceInputs["description"] = args?.description;
+            resourceInputs["enforcementMode"] = args?.enforcementMode;
+            resourceInputs["expectedHash"] = args?.expectedHash;
+            resourceInputs["framework"] = args?.framework;
+            resourceInputs["name"] = args?.name;
+            resourceInputs["rawPolicy"] = args?.rawPolicy ? pulumi.secret(args.rawPolicy) : undefined;
+            resourceInputs["s3Uri"] = args?.s3Uri;
+            resourceInputs["s3VersionId"] = args?.s3VersionId;
+            resourceInputs["sourceUri"] = args?.sourceUri;
+            resourceInputs["status"] = args?.status;
+            resourceInputs["createdAt"] = undefined /*out*/;
+            resourceInputs["createdBy"] = undefined /*out*/;
+            resourceInputs["policyHash"] = undefined /*out*/;
+            resourceInputs["resolvedVersion"] = undefined /*out*/;
+            resourceInputs["tenantId"] = undefined /*out*/;
+            resourceInputs["updatedAt"] = undefined /*out*/;
+            resourceInputs["version"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        const secretOpts = { additionalSecretOutputs: ["rawPolicy"] };
+        opts = pulumi.mergeOptions(opts, secretOpts);
+        super(PolicyBundle.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.PolicyBundle = PolicyBundle;
+//# sourceMappingURL=policyBundle.js.map

package/bin/governance/policyBundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policyBundle.js","sourceRoot":"","sources":["../../governance/policyBundle.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,wDAA0C;AAE1C,MAAa,YAAa,SAAQ,MAAM,CAAC,cAAc;IACnD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAyB,EAAE,IAAmC;QACvH,OAAO,IAAI,YAAY,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,4CAA4C,CAAC;IAEnF;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,YAAY,CAAC,YAAY,CAAC;IAC7D,CAAC;IAmFD,YAAY,IAAY,EAAE,WAAkD,EAAE,IAAmC;QAC7G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA4C,CAAC;YAC3D,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;SAC9C;aAAM;YACH,MAAM,IAAI,GAAG,WAA2C,CAAC;YACzD,IAAI,IAAI,EAAE,SAAS,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC5C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACjD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9D,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;;AAnKL,oCAoKC"}

package/bin/governance/policyChangeArtifactApply.d.ts

@@ -0,0 +1,201 @@
+import * as pulumi from "@pulumi/pulumi";
+export declare class PolicyChangeArtifactApply extends pulumi.CustomResource {
+    /**
+     * Get an existing PolicyChangeArtifactApply resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: PolicyChangeArtifactApplyState, opts?: pulumi.CustomResourceOptions): PolicyChangeArtifactApply;
+    /**
+     * Returns true if the given object is an instance of PolicyChangeArtifactApply.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is PolicyChangeArtifactApply;
+    /**
+     * Apply execution timestamp.
+     */
+    readonly appliedAt: pulumi.Output<string>;
+    /**
+     * Actor applying the artifact.
+     */
+    readonly appliedBy: pulumi.Output<string>;
+    /**
+     * Apply channel to use. Defaults to govapi.
+     */
+    readonly applyChannel: pulumi.Output<string | undefined>;
+    /**
+     * Artifact ID used for apply.
+     */
+    readonly artifactId: pulumi.Output<string>;
+    /**
+     * Optional assignment targets for govapi policy bundle apply.
+     */
+    readonly assignments: pulumi.Output<string[] | undefined>;
+    /**
+     * Optional bundle description for govapi apply.
+     */
+    readonly bundleDescription: pulumi.Output<string | undefined>;
+    /**
+     * Optional override bundle name for govapi apply.
+     */
+    readonly bundleName: pulumi.Output<string | undefined>;
+    /**
+     * Optional enforcement mode override (enforce or observe).
+     */
+    readonly enforcementMode: pulumi.Output<string | undefined>;
+    /**
+     * GovAPI resource returned by apply operation as JSON.
+     */
+    readonly govapiResourceJson: pulumi.Output<string>;
+    /**
+     * Whether a temporary runtime override was revoked after apply.
+     */
+    readonly overrideRevoked: pulumi.Output<boolean>;
+    /**
+     * Preferred policy format for apply payload (cedar, rego, yaml).
+     */
+    readonly policyFormat: pulumi.Output<string | undefined>;
+    /**
+     * Policy exception request ID.
+     */
+    readonly requestId: pulumi.Output<string>;
+    /**
+     * Full apply response as JSON.
+     */
+    readonly responseJson: pulumi.Output<string>;
+    /**
+     * Optional policy bundle status override (active, staged, paused, disabled).
+     */
+    readonly status: pulumi.Output<string | undefined>;
+    /**
+     * Target environment for the apply operation.
+     */
+    readonly targetEnvironment: pulumi.Output<string>;
+    /**
+     * Tenant ID from provider configuration.
+     */
+    readonly tenantId: pulumi.Output<string>;
+    /**
+     * Create a PolicyChangeArtifactApply resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: PolicyChangeArtifactApplyArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering PolicyChangeArtifactApply resources.
+ */
+export interface PolicyChangeArtifactApplyState {
+    /**
+     * Apply execution timestamp.
+     */
+    appliedAt?: pulumi.Input<string | undefined>;
+    /**
+     * Actor applying the artifact.
+     */
+    appliedBy?: pulumi.Input<string | undefined>;
+    /**
+     * Apply channel to use. Defaults to govapi.
+     */
+    applyChannel?: pulumi.Input<string | undefined>;
+    /**
+     * Artifact ID used for apply.
+     */
+    artifactId?: pulumi.Input<string | undefined>;
+    /**
+     * Optional assignment targets for govapi policy bundle apply.
+     */
+    assignments?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Optional bundle description for govapi apply.
+     */
+    bundleDescription?: pulumi.Input<string | undefined>;
+    /**
+     * Optional override bundle name for govapi apply.
+     */
+    bundleName?: pulumi.Input<string | undefined>;
+    /**
+     * Optional enforcement mode override (enforce or observe).
+     */
+    enforcementMode?: pulumi.Input<string | undefined>;
+    /**
+     * GovAPI resource returned by apply operation as JSON.
+     */
+    govapiResourceJson?: pulumi.Input<string | undefined>;
+    /**
+     * Whether a temporary runtime override was revoked after apply.
+     */
+    overrideRevoked?: pulumi.Input<boolean | undefined>;
+    /**
+     * Preferred policy format for apply payload (cedar, rego, yaml).
+     */
+    policyFormat?: pulumi.Input<string | undefined>;
+    /**
+     * Policy exception request ID.
+     */
+    requestId?: pulumi.Input<string | undefined>;
+    /**
+     * Full apply response as JSON.
+     */
+    responseJson?: pulumi.Input<string | undefined>;
+    /**
+     * Optional policy bundle status override (active, staged, paused, disabled).
+     */
+    status?: pulumi.Input<string | undefined>;
+    /**
+     * Target environment for the apply operation.
+     */
+    targetEnvironment?: pulumi.Input<string | undefined>;
+    /**
+     * Tenant ID from provider configuration.
+     */
+    tenantId?: pulumi.Input<string | undefined>;
+}
+/**
+ * The set of arguments for constructing a PolicyChangeArtifactApply resource.
+ */
+export interface PolicyChangeArtifactApplyArgs {
+    /**
+     * Actor applying the artifact.
+     */
+    appliedBy: pulumi.Input<string>;
+    /**
+     * Apply channel to use. Defaults to govapi.
+     */
+    applyChannel?: pulumi.Input<string | undefined>;
+    /**
+     * Optional assignment targets for govapi policy bundle apply.
+     */
+    assignments?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Optional bundle description for govapi apply.
+     */
+    bundleDescription?: pulumi.Input<string | undefined>;
+    /**
+     * Optional override bundle name for govapi apply.
+     */
+    bundleName?: pulumi.Input<string | undefined>;
+    /**
+     * Optional enforcement mode override (enforce or observe).
+     */
+    enforcementMode?: pulumi.Input<string | undefined>;
+    /**
+     * Preferred policy format for apply payload (cedar, rego, yaml).
+     */
+    policyFormat?: pulumi.Input<string | undefined>;
+    /**
+     * Policy exception request ID.
+     */
+    requestId: pulumi.Input<string>;
+    /**
+     * Optional policy bundle status override (active, staged, paused, disabled).
+     */
+    status?: pulumi.Input<string | undefined>;
+}
+//# sourceMappingURL=policyChangeArtifactApply.d.ts.map

package/bin/governance/policyChangeArtifactApply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policyChangeArtifactApply.d.ts","sourceRoot":"","sources":["../../governance/policyChangeArtifactApply.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC,qBAAa,yBAA0B,SAAQ,MAAM,CAAC,cAAc;IAChE;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,8BAA8B,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,yBAAyB;IAOpK;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,yBAAyB;IAOpE;;OAEG;IACH,SAAgC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE;;OAEG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD;;OAEG;IACH,SAAwB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxE;;OAEG;IACH,SAAgC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClE;;OAEG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IACzE;;OAEG;IACH,SAAwB,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7E;;OAEG;IACH,SAAwB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACtE;;OAEG;IACH,SAAwB,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3E;;OAEG;IACH,SAAgC,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1E;;OAEG;IACH,SAAgC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxE;;OAEG;IACH,SAAwB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxE;;OAEG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD;;OAEG;IACH,SAAgC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpE;;OAEG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClE;;OAEG;IACH,SAAgC,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzE;;OAEG;IACH,SAAgC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhE;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAkDrG;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC3C;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAChD;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAC/D;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACrD;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACnD;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACtD;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IACpD;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAChD;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAChD;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1C;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACrD;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC1C;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAChD;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAC/D;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACrD;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACnD;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAChD;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC7C"}

package/bin/governance/policyChangeArtifactApply.js

@@ -0,0 +1,108 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PolicyChangeArtifactApply = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const utilities = __importStar(require("../utilities"));
+class PolicyChangeArtifactApply extends pulumi.CustomResource {
+    /**
+     * Get an existing PolicyChangeArtifactApply resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new PolicyChangeArtifactApply(name, state, { ...opts, id: id });
+    }
+    /** @internal */
+    static __pulumiType = 'thoth:governance/policyChangeArtifactApply:PolicyChangeArtifactApply';
+    /**
+     * Returns true if the given object is an instance of PolicyChangeArtifactApply.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === PolicyChangeArtifactApply.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["appliedAt"] = state?.appliedAt;
+            resourceInputs["appliedBy"] = state?.appliedBy;
+            resourceInputs["applyChannel"] = state?.applyChannel;
+            resourceInputs["artifactId"] = state?.artifactId;
+            resourceInputs["assignments"] = state?.assignments;
+            resourceInputs["bundleDescription"] = state?.bundleDescription;
+            resourceInputs["bundleName"] = state?.bundleName;
+            resourceInputs["enforcementMode"] = state?.enforcementMode;
+            resourceInputs["govapiResourceJson"] = state?.govapiResourceJson;
+            resourceInputs["overrideRevoked"] = state?.overrideRevoked;
+            resourceInputs["policyFormat"] = state?.policyFormat;
+            resourceInputs["requestId"] = state?.requestId;
+            resourceInputs["responseJson"] = state?.responseJson;
+            resourceInputs["status"] = state?.status;
+            resourceInputs["targetEnvironment"] = state?.targetEnvironment;
+            resourceInputs["tenantId"] = state?.tenantId;
+        }
+        else {
+            const args = argsOrState;
+            if (args?.appliedBy === undefined && !opts.urn) {
+                throw new Error("Missing required property 'appliedBy'");
+            }
+            if (args?.requestId === undefined && !opts.urn) {
+                throw new Error("Missing required property 'requestId'");
+            }
+            resourceInputs["appliedBy"] = args?.appliedBy;
+            resourceInputs["applyChannel"] = args?.applyChannel;
+            resourceInputs["assignments"] = args?.assignments;
+            resourceInputs["bundleDescription"] = args?.bundleDescription;
+            resourceInputs["bundleName"] = args?.bundleName;
+            resourceInputs["enforcementMode"] = args?.enforcementMode;
+            resourceInputs["policyFormat"] = args?.policyFormat;
+            resourceInputs["requestId"] = args?.requestId;
+            resourceInputs["status"] = args?.status;
+            resourceInputs["appliedAt"] = undefined /*out*/;
+            resourceInputs["artifactId"] = undefined /*out*/;
+            resourceInputs["govapiResourceJson"] = undefined /*out*/;
+            resourceInputs["overrideRevoked"] = undefined /*out*/;
+            resourceInputs["responseJson"] = undefined /*out*/;
+            resourceInputs["targetEnvironment"] = undefined /*out*/;
+            resourceInputs["tenantId"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(PolicyChangeArtifactApply.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.PolicyChangeArtifactApply = PolicyChangeArtifactApply;
+//# sourceMappingURL=policyChangeArtifactApply.js.map