@atensec/pulumi-thoth 0.1.11 → 0.1.13

package/governance/governanceSettings.ts

@@ -43,27 +43,27 @@ export class GovernanceSettings extends pulumi.CustomResource {
     /**
      * Allowed model names allowlist.
      */
-    declare public readonly modelRouterAllowedModels: pulumi.Output<string[] | undefined>;
+    declare public readonly modelRouterAllowedModels: pulumi.Output<string[]>;
     /**
      * Allowed model providers allowlist.
      */
-    declare public readonly modelRouterAllowedProviders: pulumi.Output<string[] | undefined>;
+    declare public readonly modelRouterAllowedProviders: pulumi.Output<string[]>;
     /**
      * Default model name.
      */
-    declare public readonly modelRouterDefaultModel: pulumi.Output<string | undefined>;
+    declare public readonly modelRouterDefaultModel: pulumi.Output<string>;
     /**
      * Default model provider.
      */
-    declare public readonly modelRouterDefaultProvider: pulumi.Output<string | undefined>;
+    declare public readonly modelRouterDefaultProvider: pulumi.Output<string>;
     /**
      * Enable model routing policy controls.
      */
-    declare public readonly modelRouterEnabled: pulumi.Output<boolean | undefined>;
+    declare public readonly modelRouterEnabled: pulumi.Output<boolean>;
     /**
      * Failover provider order.
      */
-    declare public readonly modelRouterFailoverProviders: pulumi.Output<string[] | undefined>;
+    declare public readonly modelRouterFailoverProviders: pulumi.Output<string[]>;
     /**
      * Explicit regulatory regimes for onboarding baseline auto-pack loading (for example: soc2, hipaa, gdpr, fedramp, sec_cftc). Defaults to SOC2 when unset.
      */
@@ -87,7 +87,7 @@ export class GovernanceSettings extends pulumi.CustomResource {
     /**
      * Secret broker provider slug.
      */
-    declare public readonly secretBrokerProvider: pulumi.Output<string | undefined>;
+    declare public readonly secretBrokerProvider: pulumi.Output<string>;
     /**
      * Require endpoint registration for secret resolution.
      */

package/governance/index.ts

@@ -20,11 +20,21 @@ export type EvidenceBackfill = import("./evidenceBackfill").EvidenceBackfill;
 export const EvidenceBackfill: typeof import("./evidenceBackfill").EvidenceBackfill = null as any;
 utilities.lazyLoad(exports, ["EvidenceBackfill"], () => require("./evidenceBackfill"));
 
+export { GetAgentLatestForensicsArgs, GetAgentLatestForensicsResult, GetAgentLatestForensicsOutputArgs } from "./getAgentLatestForensics";
+export const getAgentLatestForensics: typeof import("./getAgentLatestForensics").getAgentLatestForensics = null as any;
+export const getAgentLatestForensicsOutput: typeof import("./getAgentLatestForensics").getAgentLatestForensicsOutput = null as any;
+utilities.lazyLoad(exports, ["getAgentLatestForensics","getAgentLatestForensicsOutput"], () => require("./getAgentLatestForensics"));
+
 export { GetApprovalsArgs, GetApprovalsResult, GetApprovalsOutputArgs } from "./getApprovals";
 export const getApprovals: typeof import("./getApprovals").getApprovals = null as any;
 export const getApprovalsOutput: typeof import("./getApprovals").getApprovalsOutput = null as any;
 utilities.lazyLoad(exports, ["getApprovals","getApprovalsOutput"], () => require("./getApprovals"));
 
+export { GetBoardIncidentSummaryArgs, GetBoardIncidentSummaryResult, GetBoardIncidentSummaryOutputArgs } from "./getBoardIncidentSummary";
+export const getBoardIncidentSummary: typeof import("./getBoardIncidentSummary").getBoardIncidentSummary = null as any;
+export const getBoardIncidentSummaryOutput: typeof import("./getBoardIncidentSummary").getBoardIncidentSummaryOutput = null as any;
+utilities.lazyLoad(exports, ["getBoardIncidentSummary","getBoardIncidentSummaryOutput"], () => require("./getBoardIncidentSummary"));
+
 export { GetCostReportArgs, GetCostReportResult, GetCostReportOutputArgs } from "./getCostReport";
 export const getCostReport: typeof import("./getCostReport").getCostReport = null as any;
 export const getCostReportOutput: typeof import("./getCostReport").getCostReportOutput = null as any;
@@ -60,11 +70,21 @@ export const getEvidenceVerify: typeof import("./getEvidenceVerify").getEvidence
 export const getEvidenceVerifyOutput: typeof import("./getEvidenceVerify").getEvidenceVerifyOutput = null as any;
 utilities.lazyLoad(exports, ["getEvidenceVerify","getEvidenceVerifyOutput"], () => require("./getEvidenceVerify"));
 
+export { GetExecutiveSummaryArgs, GetExecutiveSummaryResult, GetExecutiveSummaryOutputArgs } from "./getExecutiveSummary";
+export const getExecutiveSummary: typeof import("./getExecutiveSummary").getExecutiveSummary = null as any;
+export const getExecutiveSummaryOutput: typeof import("./getExecutiveSummary").getExecutiveSummaryOutput = null as any;
+utilities.lazyLoad(exports, ["getExecutiveSummary","getExecutiveSummaryOutput"], () => require("./getExecutiveSummary"));
+
 export { GetFeedArgs, GetFeedResult, GetFeedOutputArgs } from "./getFeed";
 export const getFeed: typeof import("./getFeed").getFeed = null as any;
 export const getFeedOutput: typeof import("./getFeed").getFeedOutput = null as any;
 utilities.lazyLoad(exports, ["getFeed","getFeedOutput"], () => require("./getFeed"));
 
+export { GetIncidentForensicsArgs, GetIncidentForensicsResult, GetIncidentForensicsOutputArgs } from "./getIncidentForensics";
+export const getIncidentForensics: typeof import("./getIncidentForensics").getIncidentForensics = null as any;
+export const getIncidentForensicsOutput: typeof import("./getIncidentForensics").getIncidentForensicsOutput = null as any;
+utilities.lazyLoad(exports, ["getIncidentForensics","getIncidentForensicsOutput"], () => require("./getIncidentForensics"));
+
 export { GetPackRuleVersionsArgs, GetPackRuleVersionsResult, GetPackRuleVersionsOutputArgs } from "./getPackRuleVersions";
 export const getPackRuleVersions: typeof import("./getPackRuleVersions").getPackRuleVersions = null as any;
 export const getPackRuleVersionsOutput: typeof import("./getPackRuleVersions").getPackRuleVersionsOutput = null as any;
@@ -85,6 +105,31 @@ export const getPolicyBundles: typeof import("./getPolicyBundles").getPolicyBund
 export const getPolicyBundlesOutput: typeof import("./getPolicyBundles").getPolicyBundlesOutput = null as any;
 utilities.lazyLoad(exports, ["getPolicyBundles","getPolicyBundlesOutput"], () => require("./getPolicyBundles"));
 
+export { GetPolicyChangeArtifactArgs, GetPolicyChangeArtifactResult, GetPolicyChangeArtifactOutputArgs } from "./getPolicyChangeArtifact";
+export const getPolicyChangeArtifact: typeof import("./getPolicyChangeArtifact").getPolicyChangeArtifact = null as any;
+export const getPolicyChangeArtifactOutput: typeof import("./getPolicyChangeArtifact").getPolicyChangeArtifactOutput = null as any;
+utilities.lazyLoad(exports, ["getPolicyChangeArtifact","getPolicyChangeArtifactOutput"], () => require("./getPolicyChangeArtifact"));
+
+export { GetPolicyChangeArtifactsArgs, GetPolicyChangeArtifactsResult, GetPolicyChangeArtifactsOutputArgs } from "./getPolicyChangeArtifacts";
+export const getPolicyChangeArtifacts: typeof import("./getPolicyChangeArtifacts").getPolicyChangeArtifacts = null as any;
+export const getPolicyChangeArtifactsOutput: typeof import("./getPolicyChangeArtifacts").getPolicyChangeArtifactsOutput = null as any;
+utilities.lazyLoad(exports, ["getPolicyChangeArtifacts","getPolicyChangeArtifactsOutput"], () => require("./getPolicyChangeArtifacts"));
+
+export { GetPolicyExceptionArgs, GetPolicyExceptionResult, GetPolicyExceptionOutputArgs } from "./getPolicyException";
+export const getPolicyException: typeof import("./getPolicyException").getPolicyException = null as any;
+export const getPolicyExceptionOutput: typeof import("./getPolicyException").getPolicyExceptionOutput = null as any;
+utilities.lazyLoad(exports, ["getPolicyException","getPolicyExceptionOutput"], () => require("./getPolicyException"));
+
+export { GetPolicyExceptionsArgs, GetPolicyExceptionsResult, GetPolicyExceptionsOutputArgs } from "./getPolicyExceptions";
+export const getPolicyExceptions: typeof import("./getPolicyExceptions").getPolicyExceptions = null as any;
+export const getPolicyExceptionsOutput: typeof import("./getPolicyExceptions").getPolicyExceptionsOutput = null as any;
+utilities.lazyLoad(exports, ["getPolicyExceptions","getPolicyExceptionsOutput"], () => require("./getPolicyExceptions"));
+
+export { GetReportDataArgs, GetReportDataResult, GetReportDataOutputArgs } from "./getReportData";
+export const getReportData: typeof import("./getReportData").getReportData = null as any;
+export const getReportDataOutput: typeof import("./getReportData").getReportDataOutput = null as any;
+utilities.lazyLoad(exports, ["getReportData","getReportDataOutput"], () => require("./getReportData"));
+
 export { GetReportsOverviewArgs, GetReportsOverviewResult, GetReportsOverviewOutputArgs } from "./getReportsOverview";
 export const getReportsOverview: typeof import("./getReportsOverview").getReportsOverview = null as any;
 export const getReportsOverviewOutput: typeof import("./getReportsOverview").getReportsOverviewOutput = null as any;
@@ -95,6 +140,11 @@ export const getRuntimeStatus: typeof import("./getRuntimeStatus").getRuntimeSta
 export const getRuntimeStatusOutput: typeof import("./getRuntimeStatus").getRuntimeStatusOutput = null as any;
 utilities.lazyLoad(exports, ["getRuntimeStatus","getRuntimeStatusOutput"], () => require("./getRuntimeStatus"));
 
+export { GetSessionForensicsArgs, GetSessionForensicsResult, GetSessionForensicsOutputArgs } from "./getSessionForensics";
+export const getSessionForensics: typeof import("./getSessionForensics").getSessionForensics = null as any;
+export const getSessionForensicsOutput: typeof import("./getSessionForensics").getSessionForensicsOutput = null as any;
+utilities.lazyLoad(exports, ["getSessionForensics","getSessionForensicsOutput"], () => require("./getSessionForensics"));
+
 export { GetTenantSettingsResult } from "./getTenantSettings";
 export const getTenantSettings: typeof import("./getTenantSettings").getTenantSettings = null as any;
 export const getTenantSettingsOutput: typeof import("./getTenantSettings").getTenantSettingsOutput = null as any;
@@ -130,6 +180,21 @@ export type PolicyBundle = import("./policyBundle").PolicyBundle;
 export const PolicyBundle: typeof import("./policyBundle").PolicyBundle = null as any;
 utilities.lazyLoad(exports, ["PolicyBundle"], () => require("./policyBundle"));
 
+export { PolicyChangeArtifactApplyArgs, PolicyChangeArtifactApplyState } from "./policyChangeArtifactApply";
+export type PolicyChangeArtifactApply = import("./policyChangeArtifactApply").PolicyChangeArtifactApply;
+export const PolicyChangeArtifactApply: typeof import("./policyChangeArtifactApply").PolicyChangeArtifactApply = null as any;
+utilities.lazyLoad(exports, ["PolicyChangeArtifactApply"], () => require("./policyChangeArtifactApply"));
+
+export { PolicyExceptionArgs, PolicyExceptionState } from "./policyException";
+export type PolicyException = import("./policyException").PolicyException;
+export const PolicyException: typeof import("./policyException").PolicyException = null as any;
+utilities.lazyLoad(exports, ["PolicyException"], () => require("./policyException"));
+
+export { PolicyExceptionReviewArgs, PolicyExceptionReviewState } from "./policyExceptionReview";
+export type PolicyExceptionReview = import("./policyExceptionReview").PolicyExceptionReview;
+export const PolicyExceptionReview: typeof import("./policyExceptionReview").PolicyExceptionReview = null as any;
+utilities.lazyLoad(exports, ["PolicyExceptionReview"], () => require("./policyExceptionReview"));
+
 export { PolicySyncArgs, PolicySyncState } from "./policySync";
 export type PolicySync = import("./policySync").PolicySync;
 export const PolicySync: typeof import("./policySync").PolicySync = null as any;
@@ -171,6 +236,12 @@ const _module = {
                 return new PamSettings(name, <any>undefined, { urn })
             case "thoth:governance/policyBundle:PolicyBundle":
                 return new PolicyBundle(name, <any>undefined, { urn })
+            case "thoth:governance/policyChangeArtifactApply:PolicyChangeArtifactApply":
+                return new PolicyChangeArtifactApply(name, <any>undefined, { urn })
+            case "thoth:governance/policyException:PolicyException":
+                return new PolicyException(name, <any>undefined, { urn })
+            case "thoth:governance/policyExceptionReview:PolicyExceptionReview":
+                return new PolicyExceptionReview(name, <any>undefined, { urn })
             case "thoth:governance/policySync:PolicySync":
                 return new PolicySync(name, <any>undefined, { urn })
             case "thoth:governance/siemSettings:SiemSettings":
@@ -192,6 +263,9 @@ pulumi.runtime.registerResourceModule("thoth", "governance/packAssignment", _mod
 pulumi.runtime.registerResourceModule("thoth", "governance/packAssignmentBulk", _module)
 pulumi.runtime.registerResourceModule("thoth", "governance/pamSettings", _module)
 pulumi.runtime.registerResourceModule("thoth", "governance/policyBundle", _module)
+pulumi.runtime.registerResourceModule("thoth", "governance/policyChangeArtifactApply", _module)
+pulumi.runtime.registerResourceModule("thoth", "governance/policyException", _module)
+pulumi.runtime.registerResourceModule("thoth", "governance/policyExceptionReview", _module)
 pulumi.runtime.registerResourceModule("thoth", "governance/policySync", _module)
 pulumi.runtime.registerResourceModule("thoth", "governance/siemSettings", _module)
 pulumi.runtime.registerResourceModule("thoth", "governance/webhookSettings", _module)

package/governance/packAssignmentBulk.ts

@@ -81,7 +81,7 @@ export class PackAssignmentBulk extends pulumi.CustomResource {
      */
     declare public readonly mismatchBoost: pulumi.Output<number | undefined>;
     /**
-     * JSON map keyed by<span pulumi-lang-nodejs=" packId " pulumi-lang-dotnet=" PackId " pulumi-lang-go=" packId " pulumi-lang-python=" pack_id " pulumi-lang-yaml=" packId " pulumi-lang-java=" packId "> packId </span>with per-pack overrides.
+     * JSON map keyed by packId with per-pack overrides.
      */
     declare public readonly overridesByPackJson: pulumi.Output<string | undefined>;
     /**
@@ -230,7 +230,7 @@ export interface PackAssignmentBulkState {
      */
     mismatchBoost?: pulumi.Input<number | undefined>;
     /**
-     * JSON map keyed by<span pulumi-lang-nodejs=" packId " pulumi-lang-dotnet=" PackId " pulumi-lang-go=" packId " pulumi-lang-python=" pack_id " pulumi-lang-yaml=" packId " pulumi-lang-java=" packId "> packId </span>with per-pack overrides.
+     * JSON map keyed by packId with per-pack overrides.
      */
     overridesByPackJson?: pulumi.Input<string | undefined>;
     /**
@@ -304,7 +304,7 @@ export interface PackAssignmentBulkArgs {
      */
     mismatchBoost?: pulumi.Input<number | undefined>;
     /**
-     * JSON map keyed by<span pulumi-lang-nodejs=" packId " pulumi-lang-dotnet=" PackId " pulumi-lang-go=" packId " pulumi-lang-python=" pack_id " pulumi-lang-yaml=" packId " pulumi-lang-java=" packId "> packId </span>with per-pack overrides.
+     * JSON map keyed by packId with per-pack overrides.
      */
     overridesByPackJson?: pulumi.Input<string | undefined>;
     /**

package/governance/pamSettings.ts

@@ -39,11 +39,11 @@ export class PamSettings extends pulumi.CustomResource {
     /**
      * Enable PAM step-up callback integration.
      */
-    declare public readonly pamEnabled: pulumi.Output<boolean | undefined>;
+    declare public readonly pamEnabled: pulumi.Output<boolean>;
     /**
      * PAM provider slug.
      */
-    declare public readonly pamProvider: pulumi.Output<string | undefined>;
+    declare public readonly pamProvider: pulumi.Output<string>;
     /**
      * Outbound PAM auth token.
      */
@@ -55,11 +55,11 @@ export class PamSettings extends pulumi.CustomResource {
     /**
      * Outbound PAM request timeout in seconds.
      */
-    declare public readonly pamRequestTimeoutSeconds: pulumi.Output<number | undefined>;
+    declare public readonly pamRequestTimeoutSeconds: pulumi.Output<number>;
     /**
      * Outbound PAM request URL.
      */
-    declare public readonly pamRequestUrl: pulumi.Output<string | undefined>;
+    declare public readonly pamRequestUrl: pulumi.Output<string>;
     /**
      * Tenant ID resolved from provider configuration.
      */

package/governance/policyChangeArtifactApply.ts

@@ -0,0 +1,269 @@
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import * as pulumi from "@pulumi/pulumi";
+import * as utilities from "../utilities";
+
+export class PolicyChangeArtifactApply extends pulumi.CustomResource {
+    /**
+     * Get an existing PolicyChangeArtifactApply resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: PolicyChangeArtifactApplyState, opts?: pulumi.CustomResourceOptions): PolicyChangeArtifactApply {
+        return new PolicyChangeArtifactApply(name, <any>state, { ...opts, id: id });
+    }
+
+    /** @internal */
+    public static readonly __pulumiType = 'thoth:governance/policyChangeArtifactApply:PolicyChangeArtifactApply';
+
+    /**
+     * Returns true if the given object is an instance of PolicyChangeArtifactApply.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    public static isInstance(obj: any): obj is PolicyChangeArtifactApply {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === PolicyChangeArtifactApply.__pulumiType;
+    }
+
+    /**
+     * Apply execution timestamp.
+     */
+    declare public /*out*/ readonly appliedAt: pulumi.Output<string>;
+    /**
+     * Actor applying the artifact.
+     */
+    declare public readonly appliedBy: pulumi.Output<string>;
+    /**
+     * Apply channel to use. Defaults to govapi.
+     */
+    declare public readonly applyChannel: pulumi.Output<string | undefined>;
+    /**
+     * Artifact ID used for apply.
+     */
+    declare public /*out*/ readonly artifactId: pulumi.Output<string>;
+    /**
+     * Optional assignment targets for govapi policy bundle apply.
+     */
+    declare public readonly assignments: pulumi.Output<string[] | undefined>;
+    /**
+     * Optional bundle description for govapi apply.
+     */
+    declare public readonly bundleDescription: pulumi.Output<string | undefined>;
+    /**
+     * Optional override bundle name for govapi apply.
+     */
+    declare public readonly bundleName: pulumi.Output<string | undefined>;
+    /**
+     * Optional enforcement mode override (enforce or observe).
+     */
+    declare public readonly enforcementMode: pulumi.Output<string | undefined>;
+    /**
+     * GovAPI resource returned by apply operation as JSON.
+     */
+    declare public /*out*/ readonly govapiResourceJson: pulumi.Output<string>;
+    /**
+     * Whether a temporary runtime override was revoked after apply.
+     */
+    declare public /*out*/ readonly overrideRevoked: pulumi.Output<boolean>;
+    /**
+     * Preferred policy format for apply payload (cedar, rego, yaml).
+     */
+    declare public readonly policyFormat: pulumi.Output<string | undefined>;
+    /**
+     * Policy exception request ID.
+     */
+    declare public readonly requestId: pulumi.Output<string>;
+    /**
+     * Full apply response as JSON.
+     */
+    declare public /*out*/ readonly responseJson: pulumi.Output<string>;
+    /**
+     * Optional policy bundle status override (active, staged, paused, disabled).
+     */
+    declare public readonly status: pulumi.Output<string | undefined>;
+    /**
+     * Target environment for the apply operation.
+     */
+    declare public /*out*/ readonly targetEnvironment: pulumi.Output<string>;
+    /**
+     * Tenant ID from provider configuration.
+     */
+    declare public /*out*/ readonly tenantId: pulumi.Output<string>;
+
+    /**
+     * Create a PolicyChangeArtifactApply resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: PolicyChangeArtifactApplyArgs, opts?: pulumi.CustomResourceOptions)
+    constructor(name: string, argsOrState?: PolicyChangeArtifactApplyArgs | PolicyChangeArtifactApplyState, opts?: pulumi.CustomResourceOptions) {
+        let resourceInputs: pulumi.Inputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState as PolicyChangeArtifactApplyState | undefined;
+            resourceInputs["appliedAt"] = state?.appliedAt;
+            resourceInputs["appliedBy"] = state?.appliedBy;
+            resourceInputs["applyChannel"] = state?.applyChannel;
+            resourceInputs["artifactId"] = state?.artifactId;
+            resourceInputs["assignments"] = state?.assignments;
+            resourceInputs["bundleDescription"] = state?.bundleDescription;
+            resourceInputs["bundleName"] = state?.bundleName;
+            resourceInputs["enforcementMode"] = state?.enforcementMode;
+            resourceInputs["govapiResourceJson"] = state?.govapiResourceJson;
+            resourceInputs["overrideRevoked"] = state?.overrideRevoked;
+            resourceInputs["policyFormat"] = state?.policyFormat;
+            resourceInputs["requestId"] = state?.requestId;
+            resourceInputs["responseJson"] = state?.responseJson;
+            resourceInputs["status"] = state?.status;
+            resourceInputs["targetEnvironment"] = state?.targetEnvironment;
+            resourceInputs["tenantId"] = state?.tenantId;
+        } else {
+            const args = argsOrState as PolicyChangeArtifactApplyArgs | undefined;
+            if (args?.appliedBy === undefined && !opts.urn) {
+                throw new Error("Missing required property 'appliedBy'");
+            }
+            if (args?.requestId === undefined && !opts.urn) {
+                throw new Error("Missing required property 'requestId'");
+            }
+            resourceInputs["appliedBy"] = args?.appliedBy;
+            resourceInputs["applyChannel"] = args?.applyChannel;
+            resourceInputs["assignments"] = args?.assignments;
+            resourceInputs["bundleDescription"] = args?.bundleDescription;
+            resourceInputs["bundleName"] = args?.bundleName;
+            resourceInputs["enforcementMode"] = args?.enforcementMode;
+            resourceInputs["policyFormat"] = args?.policyFormat;
+            resourceInputs["requestId"] = args?.requestId;
+            resourceInputs["status"] = args?.status;
+            resourceInputs["appliedAt"] = undefined /*out*/;
+            resourceInputs["artifactId"] = undefined /*out*/;
+            resourceInputs["govapiResourceJson"] = undefined /*out*/;
+            resourceInputs["overrideRevoked"] = undefined /*out*/;
+            resourceInputs["responseJson"] = undefined /*out*/;
+            resourceInputs["targetEnvironment"] = undefined /*out*/;
+            resourceInputs["tenantId"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(PolicyChangeArtifactApply.__pulumiType, name, resourceInputs, opts);
+    }
+}
+
+/**
+ * Input properties used for looking up and filtering PolicyChangeArtifactApply resources.
+ */
+export interface PolicyChangeArtifactApplyState {
+    /**
+     * Apply execution timestamp.
+     */
+    appliedAt?: pulumi.Input<string | undefined>;
+    /**
+     * Actor applying the artifact.
+     */
+    appliedBy?: pulumi.Input<string | undefined>;
+    /**
+     * Apply channel to use. Defaults to govapi.
+     */
+    applyChannel?: pulumi.Input<string | undefined>;
+    /**
+     * Artifact ID used for apply.
+     */
+    artifactId?: pulumi.Input<string | undefined>;
+    /**
+     * Optional assignment targets for govapi policy bundle apply.
+     */
+    assignments?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Optional bundle description for govapi apply.
+     */
+    bundleDescription?: pulumi.Input<string | undefined>;
+    /**
+     * Optional override bundle name for govapi apply.
+     */
+    bundleName?: pulumi.Input<string | undefined>;
+    /**
+     * Optional enforcement mode override (enforce or observe).
+     */
+    enforcementMode?: pulumi.Input<string | undefined>;
+    /**
+     * GovAPI resource returned by apply operation as JSON.
+     */
+    govapiResourceJson?: pulumi.Input<string | undefined>;
+    /**
+     * Whether a temporary runtime override was revoked after apply.
+     */
+    overrideRevoked?: pulumi.Input<boolean | undefined>;
+    /**
+     * Preferred policy format for apply payload (cedar, rego, yaml).
+     */
+    policyFormat?: pulumi.Input<string | undefined>;
+    /**
+     * Policy exception request ID.
+     */
+    requestId?: pulumi.Input<string | undefined>;
+    /**
+     * Full apply response as JSON.
+     */
+    responseJson?: pulumi.Input<string | undefined>;
+    /**
+     * Optional policy bundle status override (active, staged, paused, disabled).
+     */
+    status?: pulumi.Input<string | undefined>;
+    /**
+     * Target environment for the apply operation.
+     */
+    targetEnvironment?: pulumi.Input<string | undefined>;
+    /**
+     * Tenant ID from provider configuration.
+     */
+    tenantId?: pulumi.Input<string | undefined>;
+}
+
+/**
+ * The set of arguments for constructing a PolicyChangeArtifactApply resource.
+ */
+export interface PolicyChangeArtifactApplyArgs {
+    /**
+     * Actor applying the artifact.
+     */
+    appliedBy: pulumi.Input<string>;
+    /**
+     * Apply channel to use. Defaults to govapi.
+     */
+    applyChannel?: pulumi.Input<string | undefined>;
+    /**
+     * Optional assignment targets for govapi policy bundle apply.
+     */
+    assignments?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Optional bundle description for govapi apply.
+     */
+    bundleDescription?: pulumi.Input<string | undefined>;
+    /**
+     * Optional override bundle name for govapi apply.
+     */
+    bundleName?: pulumi.Input<string | undefined>;
+    /**
+     * Optional enforcement mode override (enforce or observe).
+     */
+    enforcementMode?: pulumi.Input<string | undefined>;
+    /**
+     * Preferred policy format for apply payload (cedar, rego, yaml).
+     */
+    policyFormat?: pulumi.Input<string | undefined>;
+    /**
+     * Policy exception request ID.
+     */
+    requestId: pulumi.Input<string>;
+    /**
+     * Optional policy bundle status override (active, staged, paused, disabled).
+     */
+    status?: pulumi.Input<string | undefined>;
+}