@atensec/pulumi-thoth 0.1.3 → 0.1.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/access/{apiKey.ts → agentApiKey.ts} +29 -33
- package/access/endpointApiKey.ts +235 -0
- package/access/fleetApiKey.ts +235 -0
- package/access/getApiKeyAuthorization.ts +72 -0
- package/access/getApiKeys.ts +57 -0
- package/access/index.ts +33 -7
- package/billing/getCreditBank.ts +56 -0
- package/billing/getEstimate.ts +93 -0
- package/billing/getInvoices.ts +49 -0
- package/billing/getMonthlyCost.ts +38 -0
- package/billing/getPricing.ts +37 -0
- package/billing/getReport.ts +49 -0
- package/billing/getReports.ts +29 -0
- package/billing/index.ts +60 -0
- package/billing/overageCap.ts +174 -0
- package/browser/getEnrollments.ts +52 -0
- package/browser/getPolicies.ts +47 -0
- package/browser/getProviders.ts +28 -0
- package/browser/index.ts +15 -0
- package/config/vars.ts +3 -3
- package/fleet/fleet.ts +292 -0
- package/fleet/getEndpointStats.ts +36 -0
- package/fleet/getEndpoints.ts +52 -0
- package/fleet/getFleet.ts +48 -0
- package/fleet/getFleets.ts +57 -0
- package/fleet/index.ts +45 -0
- package/governance/getApprovals.ts +57 -0
- package/governance/getCostReport.ts +51 -0
- package/governance/getDay7Report.ts +46 -0
- package/governance/getEvidenceBundle.ts +47 -0
- package/governance/getEvidenceChain.ts +53 -0
- package/governance/getEvidenceVerify.ts +50 -0
- package/governance/getPacks.ts +28 -0
- package/governance/getReportsOverview.ts +46 -0
- package/governance/getRuntimeStatus.ts +46 -0
- package/governance/{tenantSettings.ts → governanceSettings.ts} +18 -244
- package/governance/index.ts +76 -7
- package/governance/packAssignment.ts +56 -0
- package/governance/packAssignmentBulk.ts +56 -0
- package/governance/pamSettings.ts +187 -0
- package/governance/siemSettings.ts +159 -0
- package/governance/webhookSettings.ts +145 -0
- package/index.ts +4 -0
- package/mdm/getProviders.ts +28 -0
- package/mdm/index.ts +5 -0
- package/package.json +1 -1
- package/provider.ts +9 -12
- package/tsconfig.json +37 -2
|
@@ -4,9 +4,9 @@
|
|
|
4
4
|
import * as pulumi from "@pulumi/pulumi";
|
|
5
5
|
import * as utilities from "../utilities";
|
|
6
6
|
|
|
7
|
-
export class
|
|
7
|
+
export class GovernanceSettings extends pulumi.CustomResource {
|
|
8
8
|
/**
|
|
9
|
-
* Get an existing
|
|
9
|
+
* Get an existing GovernanceSettings resource's state with the given name, ID, and optional extra
|
|
10
10
|
* properties used to qualify the lookup.
|
|
11
11
|
*
|
|
12
12
|
* @param name The _unique_ name of the resulting resource.
|
|
@@ -14,22 +14,22 @@ export class TenantSettings extends pulumi.CustomResource {
|
|
|
14
14
|
* @param state Any extra arguments used during the lookup.
|
|
15
15
|
* @param opts Optional settings to control the behavior of the CustomResource.
|
|
16
16
|
*/
|
|
17
|
-
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?:
|
|
18
|
-
return new
|
|
17
|
+
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: GovernanceSettingsState, opts?: pulumi.CustomResourceOptions): GovernanceSettings {
|
|
18
|
+
return new GovernanceSettings(name, <any>state, { ...opts, id: id });
|
|
19
19
|
}
|
|
20
20
|
|
|
21
21
|
/** @internal */
|
|
22
|
-
public static readonly __pulumiType = 'thoth:governance/
|
|
22
|
+
public static readonly __pulumiType = 'thoth:governance/governanceSettings:GovernanceSettings';
|
|
23
23
|
|
|
24
24
|
/**
|
|
25
|
-
* Returns true if the given object is an instance of
|
|
25
|
+
* Returns true if the given object is an instance of GovernanceSettings. This is designed to work even
|
|
26
26
|
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
27
27
|
*/
|
|
28
|
-
public static isInstance(obj: any): obj is
|
|
28
|
+
public static isInstance(obj: any): obj is GovernanceSettings {
|
|
29
29
|
if (obj === undefined || obj === null) {
|
|
30
30
|
return false;
|
|
31
31
|
}
|
|
32
|
-
return obj['__pulumiType'] ===
|
|
32
|
+
return obj['__pulumiType'] === GovernanceSettings.__pulumiType;
|
|
33
33
|
}
|
|
34
34
|
|
|
35
35
|
/**
|
|
@@ -64,34 +64,6 @@ export class TenantSettings extends pulumi.CustomResource {
|
|
|
64
64
|
* Failover provider order.
|
|
65
65
|
*/
|
|
66
66
|
declare public readonly modelRouterFailoverProviders: pulumi.Output<string[] | undefined>;
|
|
67
|
-
/**
|
|
68
|
-
* Shared secret for PAM callback validation.
|
|
69
|
-
*/
|
|
70
|
-
declare public readonly pamCallbackSecret: pulumi.Output<string | undefined>;
|
|
71
|
-
/**
|
|
72
|
-
* Enable PAM step-up callback integration.
|
|
73
|
-
*/
|
|
74
|
-
declare public readonly pamEnabled: pulumi.Output<boolean | undefined>;
|
|
75
|
-
/**
|
|
76
|
-
* PAM provider slug.
|
|
77
|
-
*/
|
|
78
|
-
declare public readonly pamProvider: pulumi.Output<string | undefined>;
|
|
79
|
-
/**
|
|
80
|
-
* Outbound PAM auth token.
|
|
81
|
-
*/
|
|
82
|
-
declare public readonly pamRequestAuthToken: pulumi.Output<string | undefined>;
|
|
83
|
-
/**
|
|
84
|
-
* Outbound PAM request secret.
|
|
85
|
-
*/
|
|
86
|
-
declare public readonly pamRequestSecret: pulumi.Output<string | undefined>;
|
|
87
|
-
/**
|
|
88
|
-
* Outbound PAM request timeout in seconds.
|
|
89
|
-
*/
|
|
90
|
-
declare public readonly pamRequestTimeoutSeconds: pulumi.Output<number | undefined>;
|
|
91
|
-
/**
|
|
92
|
-
* Outbound PAM request URL.
|
|
93
|
-
*/
|
|
94
|
-
declare public readonly pamRequestUrl: pulumi.Output<string | undefined>;
|
|
95
67
|
/**
|
|
96
68
|
* Allowed host patterns for secret broker.
|
|
97
69
|
*/
|
|
@@ -132,34 +104,10 @@ export class TenantSettings extends pulumi.CustomResource {
|
|
|
132
104
|
* Default action for medium risk events.
|
|
133
105
|
*/
|
|
134
106
|
declare public readonly shadowMedium: pulumi.Output<string | undefined>;
|
|
135
|
-
/**
|
|
136
|
-
* SIEM provider slug.
|
|
137
|
-
*/
|
|
138
|
-
declare public readonly siemProvider: pulumi.Output<string | undefined>;
|
|
139
|
-
/**
|
|
140
|
-
* Enable SIEM webhook delivery.
|
|
141
|
-
*/
|
|
142
|
-
declare public readonly siemWebhookEnabled: pulumi.Output<boolean | undefined>;
|
|
143
|
-
/**
|
|
144
|
-
* SIEM webhook provider slug.
|
|
145
|
-
*/
|
|
146
|
-
declare public readonly siemWebhookProvider: pulumi.Output<string | undefined>;
|
|
147
|
-
/**
|
|
148
|
-
* SIEM webhook signing secret.
|
|
149
|
-
*/
|
|
150
|
-
declare public readonly siemWebhookSecret: pulumi.Output<string | undefined>;
|
|
151
|
-
/**
|
|
152
|
-
* SIEM webhook URL.
|
|
153
|
-
*/
|
|
154
|
-
declare public readonly siemWebhookUrl: pulumi.Output<string | undefined>;
|
|
155
107
|
/**
|
|
156
108
|
* Tenant ID resolved from provider configuration.
|
|
157
109
|
*/
|
|
158
110
|
declare public /*out*/ readonly tenantId: pulumi.Output<string>;
|
|
159
|
-
/**
|
|
160
|
-
* Run webhook test endpoint after applying settings.
|
|
161
|
-
*/
|
|
162
|
-
declare public readonly testWebhookOnApply: pulumi.Output<boolean | undefined>;
|
|
163
111
|
/**
|
|
164
112
|
* Tool-specific risk tier overrides.
|
|
165
113
|
*/
|
|
@@ -168,32 +116,20 @@ export class TenantSettings extends pulumi.CustomResource {
|
|
|
168
116
|
* Last update timestamp returned by GovAPI.
|
|
169
117
|
*/
|
|
170
118
|
declare public /*out*/ readonly updatedAt: pulumi.Output<string>;
|
|
171
|
-
/**
|
|
172
|
-
* Enable outbound webhook delivery.
|
|
173
|
-
*/
|
|
174
|
-
declare public readonly webhookEnabled: pulumi.Output<boolean | undefined>;
|
|
175
|
-
/**
|
|
176
|
-
* Webhook signing secret.
|
|
177
|
-
*/
|
|
178
|
-
declare public readonly webhookSecret: pulumi.Output<string | undefined>;
|
|
179
|
-
/**
|
|
180
|
-
* Outbound webhook URL.
|
|
181
|
-
*/
|
|
182
|
-
declare public readonly webhookUrl: pulumi.Output<string | undefined>;
|
|
183
119
|
|
|
184
120
|
/**
|
|
185
|
-
* Create a
|
|
121
|
+
* Create a GovernanceSettings resource with the given unique name, arguments, and options.
|
|
186
122
|
*
|
|
187
123
|
* @param name The _unique_ name of the resource.
|
|
188
124
|
* @param args The arguments to use to populate this resource's properties.
|
|
189
125
|
* @param opts A bag of options that control this resource's behavior.
|
|
190
126
|
*/
|
|
191
|
-
constructor(name: string, args?:
|
|
192
|
-
constructor(name: string, argsOrState?:
|
|
127
|
+
constructor(name: string, args?: GovernanceSettingsArgs, opts?: pulumi.CustomResourceOptions)
|
|
128
|
+
constructor(name: string, argsOrState?: GovernanceSettingsArgs | GovernanceSettingsState, opts?: pulumi.CustomResourceOptions) {
|
|
193
129
|
let resourceInputs: pulumi.Inputs = {};
|
|
194
130
|
opts = opts || {};
|
|
195
131
|
if (opts.id) {
|
|
196
|
-
const state = argsOrState as
|
|
132
|
+
const state = argsOrState as GovernanceSettingsState | undefined;
|
|
197
133
|
resourceInputs["complianceProfile"] = state?.complianceProfile;
|
|
198
134
|
resourceInputs["extraSettingsJson"] = state?.extraSettingsJson;
|
|
199
135
|
resourceInputs["modelRouterAllowedModels"] = state?.modelRouterAllowedModels;
|
|
@@ -202,13 +138,6 @@ export class TenantSettings extends pulumi.CustomResource {
|
|
|
202
138
|
resourceInputs["modelRouterDefaultProvider"] = state?.modelRouterDefaultProvider;
|
|
203
139
|
resourceInputs["modelRouterEnabled"] = state?.modelRouterEnabled;
|
|
204
140
|
resourceInputs["modelRouterFailoverProviders"] = state?.modelRouterFailoverProviders;
|
|
205
|
-
resourceInputs["pamCallbackSecret"] = state?.pamCallbackSecret;
|
|
206
|
-
resourceInputs["pamEnabled"] = state?.pamEnabled;
|
|
207
|
-
resourceInputs["pamProvider"] = state?.pamProvider;
|
|
208
|
-
resourceInputs["pamRequestAuthToken"] = state?.pamRequestAuthToken;
|
|
209
|
-
resourceInputs["pamRequestSecret"] = state?.pamRequestSecret;
|
|
210
|
-
resourceInputs["pamRequestTimeoutSeconds"] = state?.pamRequestTimeoutSeconds;
|
|
211
|
-
resourceInputs["pamRequestUrl"] = state?.pamRequestUrl;
|
|
212
141
|
resourceInputs["secretBrokerAllowedHosts"] = state?.secretBrokerAllowedHosts;
|
|
213
142
|
resourceInputs["secretBrokerAuthBindingsJson"] = state?.secretBrokerAuthBindingsJson;
|
|
214
143
|
resourceInputs["secretBrokerEnabled"] = state?.secretBrokerEnabled;
|
|
@@ -219,20 +148,11 @@ export class TenantSettings extends pulumi.CustomResource {
|
|
|
219
148
|
resourceInputs["shadowHigh"] = state?.shadowHigh;
|
|
220
149
|
resourceInputs["shadowLow"] = state?.shadowLow;
|
|
221
150
|
resourceInputs["shadowMedium"] = state?.shadowMedium;
|
|
222
|
-
resourceInputs["siemProvider"] = state?.siemProvider;
|
|
223
|
-
resourceInputs["siemWebhookEnabled"] = state?.siemWebhookEnabled;
|
|
224
|
-
resourceInputs["siemWebhookProvider"] = state?.siemWebhookProvider;
|
|
225
|
-
resourceInputs["siemWebhookSecret"] = state?.siemWebhookSecret;
|
|
226
|
-
resourceInputs["siemWebhookUrl"] = state?.siemWebhookUrl;
|
|
227
151
|
resourceInputs["tenantId"] = state?.tenantId;
|
|
228
|
-
resourceInputs["testWebhookOnApply"] = state?.testWebhookOnApply;
|
|
229
152
|
resourceInputs["toolRiskOverrides"] = state?.toolRiskOverrides;
|
|
230
153
|
resourceInputs["updatedAt"] = state?.updatedAt;
|
|
231
|
-
resourceInputs["webhookEnabled"] = state?.webhookEnabled;
|
|
232
|
-
resourceInputs["webhookSecret"] = state?.webhookSecret;
|
|
233
|
-
resourceInputs["webhookUrl"] = state?.webhookUrl;
|
|
234
154
|
} else {
|
|
235
|
-
const args = argsOrState as
|
|
155
|
+
const args = argsOrState as GovernanceSettingsArgs | undefined;
|
|
236
156
|
resourceInputs["complianceProfile"] = args?.complianceProfile;
|
|
237
157
|
resourceInputs["extraSettingsJson"] = args?.extraSettingsJson;
|
|
238
158
|
resourceInputs["modelRouterAllowedModels"] = args?.modelRouterAllowedModels;
|
|
@@ -241,13 +161,6 @@ export class TenantSettings extends pulumi.CustomResource {
|
|
|
241
161
|
resourceInputs["modelRouterDefaultProvider"] = args?.modelRouterDefaultProvider;
|
|
242
162
|
resourceInputs["modelRouterEnabled"] = args?.modelRouterEnabled;
|
|
243
163
|
resourceInputs["modelRouterFailoverProviders"] = args?.modelRouterFailoverProviders;
|
|
244
|
-
resourceInputs["pamCallbackSecret"] = args?.pamCallbackSecret ? pulumi.secret(args.pamCallbackSecret) : undefined;
|
|
245
|
-
resourceInputs["pamEnabled"] = args?.pamEnabled;
|
|
246
|
-
resourceInputs["pamProvider"] = args?.pamProvider;
|
|
247
|
-
resourceInputs["pamRequestAuthToken"] = args?.pamRequestAuthToken ? pulumi.secret(args.pamRequestAuthToken) : undefined;
|
|
248
|
-
resourceInputs["pamRequestSecret"] = args?.pamRequestSecret ? pulumi.secret(args.pamRequestSecret) : undefined;
|
|
249
|
-
resourceInputs["pamRequestTimeoutSeconds"] = args?.pamRequestTimeoutSeconds;
|
|
250
|
-
resourceInputs["pamRequestUrl"] = args?.pamRequestUrl;
|
|
251
164
|
resourceInputs["secretBrokerAllowedHosts"] = args?.secretBrokerAllowedHosts;
|
|
252
165
|
resourceInputs["secretBrokerAuthBindingsJson"] = args?.secretBrokerAuthBindingsJson;
|
|
253
166
|
resourceInputs["secretBrokerEnabled"] = args?.secretBrokerEnabled;
|
|
@@ -258,30 +171,19 @@ export class TenantSettings extends pulumi.CustomResource {
|
|
|
258
171
|
resourceInputs["shadowHigh"] = args?.shadowHigh;
|
|
259
172
|
resourceInputs["shadowLow"] = args?.shadowLow;
|
|
260
173
|
resourceInputs["shadowMedium"] = args?.shadowMedium;
|
|
261
|
-
resourceInputs["siemProvider"] = args?.siemProvider;
|
|
262
|
-
resourceInputs["siemWebhookEnabled"] = args?.siemWebhookEnabled;
|
|
263
|
-
resourceInputs["siemWebhookProvider"] = args?.siemWebhookProvider;
|
|
264
|
-
resourceInputs["siemWebhookSecret"] = args?.siemWebhookSecret ? pulumi.secret(args.siemWebhookSecret) : undefined;
|
|
265
|
-
resourceInputs["siemWebhookUrl"] = args?.siemWebhookUrl;
|
|
266
|
-
resourceInputs["testWebhookOnApply"] = args?.testWebhookOnApply;
|
|
267
174
|
resourceInputs["toolRiskOverrides"] = args?.toolRiskOverrides;
|
|
268
|
-
resourceInputs["webhookEnabled"] = args?.webhookEnabled;
|
|
269
|
-
resourceInputs["webhookSecret"] = args?.webhookSecret ? pulumi.secret(args.webhookSecret) : undefined;
|
|
270
|
-
resourceInputs["webhookUrl"] = args?.webhookUrl;
|
|
271
175
|
resourceInputs["tenantId"] = undefined /*out*/;
|
|
272
176
|
resourceInputs["updatedAt"] = undefined /*out*/;
|
|
273
177
|
}
|
|
274
178
|
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
|
|
275
|
-
|
|
276
|
-
opts = pulumi.mergeOptions(opts, secretOpts);
|
|
277
|
-
super(TenantSettings.__pulumiType, name, resourceInputs, opts);
|
|
179
|
+
super(GovernanceSettings.__pulumiType, name, resourceInputs, opts);
|
|
278
180
|
}
|
|
279
181
|
}
|
|
280
182
|
|
|
281
183
|
/**
|
|
282
|
-
* Input properties used for looking up and filtering
|
|
184
|
+
* Input properties used for looking up and filtering GovernanceSettings resources.
|
|
283
185
|
*/
|
|
284
|
-
export interface
|
|
186
|
+
export interface GovernanceSettingsState {
|
|
285
187
|
/**
|
|
286
188
|
* Compliance profile (soc2, healthcare, financial, public_sector, privacy, ai_governance).
|
|
287
189
|
*/
|
|
@@ -314,34 +216,6 @@ export interface TenantSettingsState {
|
|
|
314
216
|
* Failover provider order.
|
|
315
217
|
*/
|
|
316
218
|
modelRouterFailoverProviders?: pulumi.Input<pulumi.Input<string>[] | undefined>;
|
|
317
|
-
/**
|
|
318
|
-
* Shared secret for PAM callback validation.
|
|
319
|
-
*/
|
|
320
|
-
pamCallbackSecret?: pulumi.Input<string | undefined>;
|
|
321
|
-
/**
|
|
322
|
-
* Enable PAM step-up callback integration.
|
|
323
|
-
*/
|
|
324
|
-
pamEnabled?: pulumi.Input<boolean | undefined>;
|
|
325
|
-
/**
|
|
326
|
-
* PAM provider slug.
|
|
327
|
-
*/
|
|
328
|
-
pamProvider?: pulumi.Input<string | undefined>;
|
|
329
|
-
/**
|
|
330
|
-
* Outbound PAM auth token.
|
|
331
|
-
*/
|
|
332
|
-
pamRequestAuthToken?: pulumi.Input<string | undefined>;
|
|
333
|
-
/**
|
|
334
|
-
* Outbound PAM request secret.
|
|
335
|
-
*/
|
|
336
|
-
pamRequestSecret?: pulumi.Input<string | undefined>;
|
|
337
|
-
/**
|
|
338
|
-
* Outbound PAM request timeout in seconds.
|
|
339
|
-
*/
|
|
340
|
-
pamRequestTimeoutSeconds?: pulumi.Input<number | undefined>;
|
|
341
|
-
/**
|
|
342
|
-
* Outbound PAM request URL.
|
|
343
|
-
*/
|
|
344
|
-
pamRequestUrl?: pulumi.Input<string | undefined>;
|
|
345
219
|
/**
|
|
346
220
|
* Allowed host patterns for secret broker.
|
|
347
221
|
*/
|
|
@@ -382,34 +256,10 @@ export interface TenantSettingsState {
|
|
|
382
256
|
* Default action for medium risk events.
|
|
383
257
|
*/
|
|
384
258
|
shadowMedium?: pulumi.Input<string | undefined>;
|
|
385
|
-
/**
|
|
386
|
-
* SIEM provider slug.
|
|
387
|
-
*/
|
|
388
|
-
siemProvider?: pulumi.Input<string | undefined>;
|
|
389
|
-
/**
|
|
390
|
-
* Enable SIEM webhook delivery.
|
|
391
|
-
*/
|
|
392
|
-
siemWebhookEnabled?: pulumi.Input<boolean | undefined>;
|
|
393
|
-
/**
|
|
394
|
-
* SIEM webhook provider slug.
|
|
395
|
-
*/
|
|
396
|
-
siemWebhookProvider?: pulumi.Input<string | undefined>;
|
|
397
|
-
/**
|
|
398
|
-
* SIEM webhook signing secret.
|
|
399
|
-
*/
|
|
400
|
-
siemWebhookSecret?: pulumi.Input<string | undefined>;
|
|
401
|
-
/**
|
|
402
|
-
* SIEM webhook URL.
|
|
403
|
-
*/
|
|
404
|
-
siemWebhookUrl?: pulumi.Input<string | undefined>;
|
|
405
259
|
/**
|
|
406
260
|
* Tenant ID resolved from provider configuration.
|
|
407
261
|
*/
|
|
408
262
|
tenantId?: pulumi.Input<string | undefined>;
|
|
409
|
-
/**
|
|
410
|
-
* Run webhook test endpoint after applying settings.
|
|
411
|
-
*/
|
|
412
|
-
testWebhookOnApply?: pulumi.Input<boolean | undefined>;
|
|
413
263
|
/**
|
|
414
264
|
* Tool-specific risk tier overrides.
|
|
415
265
|
*/
|
|
@@ -418,24 +268,12 @@ export interface TenantSettingsState {
|
|
|
418
268
|
* Last update timestamp returned by GovAPI.
|
|
419
269
|
*/
|
|
420
270
|
updatedAt?: pulumi.Input<string | undefined>;
|
|
421
|
-
/**
|
|
422
|
-
* Enable outbound webhook delivery.
|
|
423
|
-
*/
|
|
424
|
-
webhookEnabled?: pulumi.Input<boolean | undefined>;
|
|
425
|
-
/**
|
|
426
|
-
* Webhook signing secret.
|
|
427
|
-
*/
|
|
428
|
-
webhookSecret?: pulumi.Input<string | undefined>;
|
|
429
|
-
/**
|
|
430
|
-
* Outbound webhook URL.
|
|
431
|
-
*/
|
|
432
|
-
webhookUrl?: pulumi.Input<string | undefined>;
|
|
433
271
|
}
|
|
434
272
|
|
|
435
273
|
/**
|
|
436
|
-
* The set of arguments for constructing a
|
|
274
|
+
* The set of arguments for constructing a GovernanceSettings resource.
|
|
437
275
|
*/
|
|
438
|
-
export interface
|
|
276
|
+
export interface GovernanceSettingsArgs {
|
|
439
277
|
/**
|
|
440
278
|
* Compliance profile (soc2, healthcare, financial, public_sector, privacy, ai_governance).
|
|
441
279
|
*/
|
|
@@ -468,34 +306,6 @@ export interface TenantSettingsArgs {
|
|
|
468
306
|
* Failover provider order.
|
|
469
307
|
*/
|
|
470
308
|
modelRouterFailoverProviders?: pulumi.Input<pulumi.Input<string>[] | undefined>;
|
|
471
|
-
/**
|
|
472
|
-
* Shared secret for PAM callback validation.
|
|
473
|
-
*/
|
|
474
|
-
pamCallbackSecret?: pulumi.Input<string | undefined>;
|
|
475
|
-
/**
|
|
476
|
-
* Enable PAM step-up callback integration.
|
|
477
|
-
*/
|
|
478
|
-
pamEnabled?: pulumi.Input<boolean | undefined>;
|
|
479
|
-
/**
|
|
480
|
-
* PAM provider slug.
|
|
481
|
-
*/
|
|
482
|
-
pamProvider?: pulumi.Input<string | undefined>;
|
|
483
|
-
/**
|
|
484
|
-
* Outbound PAM auth token.
|
|
485
|
-
*/
|
|
486
|
-
pamRequestAuthToken?: pulumi.Input<string | undefined>;
|
|
487
|
-
/**
|
|
488
|
-
* Outbound PAM request secret.
|
|
489
|
-
*/
|
|
490
|
-
pamRequestSecret?: pulumi.Input<string | undefined>;
|
|
491
|
-
/**
|
|
492
|
-
* Outbound PAM request timeout in seconds.
|
|
493
|
-
*/
|
|
494
|
-
pamRequestTimeoutSeconds?: pulumi.Input<number | undefined>;
|
|
495
|
-
/**
|
|
496
|
-
* Outbound PAM request URL.
|
|
497
|
-
*/
|
|
498
|
-
pamRequestUrl?: pulumi.Input<string | undefined>;
|
|
499
309
|
/**
|
|
500
310
|
* Allowed host patterns for secret broker.
|
|
501
311
|
*/
|
|
@@ -536,44 +346,8 @@ export interface TenantSettingsArgs {
|
|
|
536
346
|
* Default action for medium risk events.
|
|
537
347
|
*/
|
|
538
348
|
shadowMedium?: pulumi.Input<string | undefined>;
|
|
539
|
-
/**
|
|
540
|
-
* SIEM provider slug.
|
|
541
|
-
*/
|
|
542
|
-
siemProvider?: pulumi.Input<string | undefined>;
|
|
543
|
-
/**
|
|
544
|
-
* Enable SIEM webhook delivery.
|
|
545
|
-
*/
|
|
546
|
-
siemWebhookEnabled?: pulumi.Input<boolean | undefined>;
|
|
547
|
-
/**
|
|
548
|
-
* SIEM webhook provider slug.
|
|
549
|
-
*/
|
|
550
|
-
siemWebhookProvider?: pulumi.Input<string | undefined>;
|
|
551
|
-
/**
|
|
552
|
-
* SIEM webhook signing secret.
|
|
553
|
-
*/
|
|
554
|
-
siemWebhookSecret?: pulumi.Input<string | undefined>;
|
|
555
|
-
/**
|
|
556
|
-
* SIEM webhook URL.
|
|
557
|
-
*/
|
|
558
|
-
siemWebhookUrl?: pulumi.Input<string | undefined>;
|
|
559
|
-
/**
|
|
560
|
-
* Run webhook test endpoint after applying settings.
|
|
561
|
-
*/
|
|
562
|
-
testWebhookOnApply?: pulumi.Input<boolean | undefined>;
|
|
563
349
|
/**
|
|
564
350
|
* Tool-specific risk tier overrides.
|
|
565
351
|
*/
|
|
566
352
|
toolRiskOverrides?: pulumi.Input<{[key: string]: pulumi.Input<string>} | undefined>;
|
|
567
|
-
/**
|
|
568
|
-
* Enable outbound webhook delivery.
|
|
569
|
-
*/
|
|
570
|
-
webhookEnabled?: pulumi.Input<boolean | undefined>;
|
|
571
|
-
/**
|
|
572
|
-
* Webhook signing secret.
|
|
573
|
-
*/
|
|
574
|
-
webhookSecret?: pulumi.Input<string | undefined>;
|
|
575
|
-
/**
|
|
576
|
-
* Outbound webhook URL.
|
|
577
|
-
*/
|
|
578
|
-
webhookUrl?: pulumi.Input<string | undefined>;
|
|
579
353
|
}
|
package/governance/index.ts
CHANGED
|
@@ -20,16 +20,61 @@ export type EvidenceBackfill = import("./evidenceBackfill").EvidenceBackfill;
|
|
|
20
20
|
export const EvidenceBackfill: typeof import("./evidenceBackfill").EvidenceBackfill = null as any;
|
|
21
21
|
utilities.lazyLoad(exports, ["EvidenceBackfill"], () => require("./evidenceBackfill"));
|
|
22
22
|
|
|
23
|
+
export { GetApprovalsArgs, GetApprovalsResult, GetApprovalsOutputArgs } from "./getApprovals";
|
|
24
|
+
export const getApprovals: typeof import("./getApprovals").getApprovals = null as any;
|
|
25
|
+
export const getApprovalsOutput: typeof import("./getApprovals").getApprovalsOutput = null as any;
|
|
26
|
+
utilities.lazyLoad(exports, ["getApprovals","getApprovalsOutput"], () => require("./getApprovals"));
|
|
27
|
+
|
|
28
|
+
export { GetCostReportArgs, GetCostReportResult, GetCostReportOutputArgs } from "./getCostReport";
|
|
29
|
+
export const getCostReport: typeof import("./getCostReport").getCostReport = null as any;
|
|
30
|
+
export const getCostReportOutput: typeof import("./getCostReport").getCostReportOutput = null as any;
|
|
31
|
+
utilities.lazyLoad(exports, ["getCostReport","getCostReportOutput"], () => require("./getCostReport"));
|
|
32
|
+
|
|
33
|
+
export { GetDay7ReportArgs, GetDay7ReportResult, GetDay7ReportOutputArgs } from "./getDay7Report";
|
|
34
|
+
export const getDay7Report: typeof import("./getDay7Report").getDay7Report = null as any;
|
|
35
|
+
export const getDay7ReportOutput: typeof import("./getDay7Report").getDay7ReportOutput = null as any;
|
|
36
|
+
utilities.lazyLoad(exports, ["getDay7Report","getDay7ReportOutput"], () => require("./getDay7Report"));
|
|
37
|
+
|
|
38
|
+
export { GetEvidenceBundleArgs, GetEvidenceBundleResult, GetEvidenceBundleOutputArgs } from "./getEvidenceBundle";
|
|
39
|
+
export const getEvidenceBundle: typeof import("./getEvidenceBundle").getEvidenceBundle = null as any;
|
|
40
|
+
export const getEvidenceBundleOutput: typeof import("./getEvidenceBundle").getEvidenceBundleOutput = null as any;
|
|
41
|
+
utilities.lazyLoad(exports, ["getEvidenceBundle","getEvidenceBundleOutput"], () => require("./getEvidenceBundle"));
|
|
42
|
+
|
|
43
|
+
export { GetEvidenceChainArgs, GetEvidenceChainResult, GetEvidenceChainOutputArgs } from "./getEvidenceChain";
|
|
44
|
+
export const getEvidenceChain: typeof import("./getEvidenceChain").getEvidenceChain = null as any;
|
|
45
|
+
export const getEvidenceChainOutput: typeof import("./getEvidenceChain").getEvidenceChainOutput = null as any;
|
|
46
|
+
utilities.lazyLoad(exports, ["getEvidenceChain","getEvidenceChainOutput"], () => require("./getEvidenceChain"));
|
|
47
|
+
|
|
23
48
|
export { GetEvidenceSlosArgs, GetEvidenceSlosResult, GetEvidenceSlosOutputArgs } from "./getEvidenceSlos";
|
|
24
49
|
export const getEvidenceSlos: typeof import("./getEvidenceSlos").getEvidenceSlos = null as any;
|
|
25
50
|
export const getEvidenceSlosOutput: typeof import("./getEvidenceSlos").getEvidenceSlosOutput = null as any;
|
|
26
51
|
utilities.lazyLoad(exports, ["getEvidenceSlos","getEvidenceSlosOutput"], () => require("./getEvidenceSlos"));
|
|
27
52
|
|
|
53
|
+
export { GetEvidenceVerifyArgs, GetEvidenceVerifyResult, GetEvidenceVerifyOutputArgs } from "./getEvidenceVerify";
|
|
54
|
+
export const getEvidenceVerify: typeof import("./getEvidenceVerify").getEvidenceVerify = null as any;
|
|
55
|
+
export const getEvidenceVerifyOutput: typeof import("./getEvidenceVerify").getEvidenceVerifyOutput = null as any;
|
|
56
|
+
utilities.lazyLoad(exports, ["getEvidenceVerify","getEvidenceVerifyOutput"], () => require("./getEvidenceVerify"));
|
|
57
|
+
|
|
28
58
|
export { GetFeedArgs, GetFeedResult, GetFeedOutputArgs } from "./getFeed";
|
|
29
59
|
export const getFeed: typeof import("./getFeed").getFeed = null as any;
|
|
30
60
|
export const getFeedOutput: typeof import("./getFeed").getFeedOutput = null as any;
|
|
31
61
|
utilities.lazyLoad(exports, ["getFeed","getFeedOutput"], () => require("./getFeed"));
|
|
32
62
|
|
|
63
|
+
export { GetPacksResult } from "./getPacks";
|
|
64
|
+
export const getPacks: typeof import("./getPacks").getPacks = null as any;
|
|
65
|
+
export const getPacksOutput: typeof import("./getPacks").getPacksOutput = null as any;
|
|
66
|
+
utilities.lazyLoad(exports, ["getPacks","getPacksOutput"], () => require("./getPacks"));
|
|
67
|
+
|
|
68
|
+
export { GetReportsOverviewArgs, GetReportsOverviewResult, GetReportsOverviewOutputArgs } from "./getReportsOverview";
|
|
69
|
+
export const getReportsOverview: typeof import("./getReportsOverview").getReportsOverview = null as any;
|
|
70
|
+
export const getReportsOverviewOutput: typeof import("./getReportsOverview").getReportsOverviewOutput = null as any;
|
|
71
|
+
utilities.lazyLoad(exports, ["getReportsOverview","getReportsOverviewOutput"], () => require("./getReportsOverview"));
|
|
72
|
+
|
|
73
|
+
export { GetRuntimeStatusArgs, GetRuntimeStatusResult, GetRuntimeStatusOutputArgs } from "./getRuntimeStatus";
|
|
74
|
+
export const getRuntimeStatus: typeof import("./getRuntimeStatus").getRuntimeStatus = null as any;
|
|
75
|
+
export const getRuntimeStatusOutput: typeof import("./getRuntimeStatus").getRuntimeStatusOutput = null as any;
|
|
76
|
+
utilities.lazyLoad(exports, ["getRuntimeStatus","getRuntimeStatusOutput"], () => require("./getRuntimeStatus"));
|
|
77
|
+
|
|
33
78
|
export { GetTenantSettingsResult } from "./getTenantSettings";
|
|
34
79
|
export const getTenantSettings: typeof import("./getTenantSettings").getTenantSettings = null as any;
|
|
35
80
|
export const getTenantSettingsOutput: typeof import("./getTenantSettings").getTenantSettingsOutput = null as any;
|
|
@@ -40,6 +85,11 @@ export const getTools: typeof import("./getTools").getTools = null as any;
|
|
|
40
85
|
export const getToolsOutput: typeof import("./getTools").getToolsOutput = null as any;
|
|
41
86
|
utilities.lazyLoad(exports, ["getTools","getToolsOutput"], () => require("./getTools"));
|
|
42
87
|
|
|
88
|
+
export { GovernanceSettingsArgs, GovernanceSettingsState } from "./governanceSettings";
|
|
89
|
+
export type GovernanceSettings = import("./governanceSettings").GovernanceSettings;
|
|
90
|
+
export const GovernanceSettings: typeof import("./governanceSettings").GovernanceSettings = null as any;
|
|
91
|
+
utilities.lazyLoad(exports, ["GovernanceSettings"], () => require("./governanceSettings"));
|
|
92
|
+
|
|
43
93
|
export { PackAssignmentArgs, PackAssignmentState } from "./packAssignment";
|
|
44
94
|
export type PackAssignment = import("./packAssignment").PackAssignment;
|
|
45
95
|
export const PackAssignment: typeof import("./packAssignment").PackAssignment = null as any;
|
|
@@ -50,15 +100,25 @@ export type PackAssignmentBulk = import("./packAssignmentBulk").PackAssignmentBu
|
|
|
50
100
|
export const PackAssignmentBulk: typeof import("./packAssignmentBulk").PackAssignmentBulk = null as any;
|
|
51
101
|
utilities.lazyLoad(exports, ["PackAssignmentBulk"], () => require("./packAssignmentBulk"));
|
|
52
102
|
|
|
103
|
+
export { PamSettingsArgs, PamSettingsState } from "./pamSettings";
|
|
104
|
+
export type PamSettings = import("./pamSettings").PamSettings;
|
|
105
|
+
export const PamSettings: typeof import("./pamSettings").PamSettings = null as any;
|
|
106
|
+
utilities.lazyLoad(exports, ["PamSettings"], () => require("./pamSettings"));
|
|
107
|
+
|
|
53
108
|
export { PolicySyncArgs, PolicySyncState } from "./policySync";
|
|
54
109
|
export type PolicySync = import("./policySync").PolicySync;
|
|
55
110
|
export const PolicySync: typeof import("./policySync").PolicySync = null as any;
|
|
56
111
|
utilities.lazyLoad(exports, ["PolicySync"], () => require("./policySync"));
|
|
57
112
|
|
|
58
|
-
export {
|
|
59
|
-
export type
|
|
60
|
-
export const
|
|
61
|
-
utilities.lazyLoad(exports, ["
|
|
113
|
+
export { SiemSettingsArgs, SiemSettingsState } from "./siemSettings";
|
|
114
|
+
export type SiemSettings = import("./siemSettings").SiemSettings;
|
|
115
|
+
export const SiemSettings: typeof import("./siemSettings").SiemSettings = null as any;
|
|
116
|
+
utilities.lazyLoad(exports, ["SiemSettings"], () => require("./siemSettings"));
|
|
117
|
+
|
|
118
|
+
export { WebhookSettingsArgs, WebhookSettingsState } from "./webhookSettings";
|
|
119
|
+
export type WebhookSettings = import("./webhookSettings").WebhookSettings;
|
|
120
|
+
export const WebhookSettings: typeof import("./webhookSettings").WebhookSettings = null as any;
|
|
121
|
+
utilities.lazyLoad(exports, ["WebhookSettings"], () => require("./webhookSettings"));
|
|
62
122
|
|
|
63
123
|
export { WebhookTestArgs, WebhookTestState } from "./webhookTest";
|
|
64
124
|
export type WebhookTest = import("./webhookTest").WebhookTest;
|
|
@@ -76,14 +136,20 @@ const _module = {
|
|
|
76
136
|
return new DecisionFieldBackfill(name, <any>undefined, { urn })
|
|
77
137
|
case "thoth:governance/evidenceBackfill:EvidenceBackfill":
|
|
78
138
|
return new EvidenceBackfill(name, <any>undefined, { urn })
|
|
139
|
+
case "thoth:governance/governanceSettings:GovernanceSettings":
|
|
140
|
+
return new GovernanceSettings(name, <any>undefined, { urn })
|
|
79
141
|
case "thoth:governance/packAssignment:PackAssignment":
|
|
80
142
|
return new PackAssignment(name, <any>undefined, { urn })
|
|
81
143
|
case "thoth:governance/packAssignmentBulk:PackAssignmentBulk":
|
|
82
144
|
return new PackAssignmentBulk(name, <any>undefined, { urn })
|
|
145
|
+
case "thoth:governance/pamSettings:PamSettings":
|
|
146
|
+
return new PamSettings(name, <any>undefined, { urn })
|
|
83
147
|
case "thoth:governance/policySync:PolicySync":
|
|
84
148
|
return new PolicySync(name, <any>undefined, { urn })
|
|
85
|
-
case "thoth:governance/
|
|
86
|
-
return new
|
|
149
|
+
case "thoth:governance/siemSettings:SiemSettings":
|
|
150
|
+
return new SiemSettings(name, <any>undefined, { urn })
|
|
151
|
+
case "thoth:governance/webhookSettings:WebhookSettings":
|
|
152
|
+
return new WebhookSettings(name, <any>undefined, { urn })
|
|
87
153
|
case "thoth:governance/webhookTest:WebhookTest":
|
|
88
154
|
return new WebhookTest(name, <any>undefined, { urn })
|
|
89
155
|
default:
|
|
@@ -94,8 +160,11 @@ const _module = {
|
|
|
94
160
|
pulumi.runtime.registerResourceModule("thoth", "governance/approvalDecision", _module)
|
|
95
161
|
pulumi.runtime.registerResourceModule("thoth", "governance/decisionFieldBackfill", _module)
|
|
96
162
|
pulumi.runtime.registerResourceModule("thoth", "governance/evidenceBackfill", _module)
|
|
163
|
+
pulumi.runtime.registerResourceModule("thoth", "governance/governanceSettings", _module)
|
|
97
164
|
pulumi.runtime.registerResourceModule("thoth", "governance/packAssignment", _module)
|
|
98
165
|
pulumi.runtime.registerResourceModule("thoth", "governance/packAssignmentBulk", _module)
|
|
166
|
+
pulumi.runtime.registerResourceModule("thoth", "governance/pamSettings", _module)
|
|
99
167
|
pulumi.runtime.registerResourceModule("thoth", "governance/policySync", _module)
|
|
100
|
-
pulumi.runtime.registerResourceModule("thoth", "governance/
|
|
168
|
+
pulumi.runtime.registerResourceModule("thoth", "governance/siemSettings", _module)
|
|
169
|
+
pulumi.runtime.registerResourceModule("thoth", "governance/webhookSettings", _module)
|
|
101
170
|
pulumi.runtime.registerResourceModule("thoth", "governance/webhookTest", _module)
|