@atensec/pulumi-thoth 0.1.4 → 0.1.6

package/governance/governanceSettings.ts

@@ -64,6 +64,10 @@ export class GovernanceSettings extends pulumi.CustomResource {
      * Failover provider order.
      */
     declare public readonly modelRouterFailoverProviders: pulumi.Output<string[] | undefined>;
+    /**
+     * Explicit regulatory regimes for onboarding baseline auto-pack loading (for example: soc2, hipaa, gdpr, fedramp, sec_cftc). Defaults to SOC2 when unset.
+     */
+    declare public readonly regulatoryRegimes: pulumi.Output<string[] | undefined>;
     /**
      * Allowed host patterns for secret broker.
      */
@@ -138,6 +142,7 @@ export class GovernanceSettings extends pulumi.CustomResource {
             resourceInputs["modelRouterDefaultProvider"] = state?.modelRouterDefaultProvider;
             resourceInputs["modelRouterEnabled"] = state?.modelRouterEnabled;
             resourceInputs["modelRouterFailoverProviders"] = state?.modelRouterFailoverProviders;
+            resourceInputs["regulatoryRegimes"] = state?.regulatoryRegimes;
             resourceInputs["secretBrokerAllowedHosts"] = state?.secretBrokerAllowedHosts;
             resourceInputs["secretBrokerAuthBindingsJson"] = state?.secretBrokerAuthBindingsJson;
             resourceInputs["secretBrokerEnabled"] = state?.secretBrokerEnabled;
@@ -161,6 +166,7 @@ export class GovernanceSettings extends pulumi.CustomResource {
             resourceInputs["modelRouterDefaultProvider"] = args?.modelRouterDefaultProvider;
             resourceInputs["modelRouterEnabled"] = args?.modelRouterEnabled;
             resourceInputs["modelRouterFailoverProviders"] = args?.modelRouterFailoverProviders;
+            resourceInputs["regulatoryRegimes"] = args?.regulatoryRegimes;
             resourceInputs["secretBrokerAllowedHosts"] = args?.secretBrokerAllowedHosts;
             resourceInputs["secretBrokerAuthBindingsJson"] = args?.secretBrokerAuthBindingsJson;
             resourceInputs["secretBrokerEnabled"] = args?.secretBrokerEnabled;
@@ -216,6 +222,10 @@ export interface GovernanceSettingsState {
      * Failover provider order.
      */
     modelRouterFailoverProviders?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Explicit regulatory regimes for onboarding baseline auto-pack loading (for example: soc2, hipaa, gdpr, fedramp, sec_cftc). Defaults to SOC2 when unset.
+     */
+    regulatoryRegimes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     /**
      * Allowed host patterns for secret broker.
      */
@@ -306,6 +316,10 @@ export interface GovernanceSettingsArgs {
      * Failover provider order.
      */
     modelRouterFailoverProviders?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Explicit regulatory regimes for onboarding baseline auto-pack loading (for example: soc2, hipaa, gdpr, fedramp, sec_cftc). Defaults to SOC2 when unset.
+     */
+    regulatoryRegimes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     /**
      * Allowed host patterns for secret broker.
      */

package/governance/index.ts

@@ -35,6 +35,11 @@ export const getDay7Report: typeof import("./getDay7Report").getDay7Report = nul
 export const getDay7ReportOutput: typeof import("./getDay7Report").getDay7ReportOutput = null as any;
 utilities.lazyLoad(exports, ["getDay7Report","getDay7ReportOutput"], () => require("./getDay7Report"));
 
+export { GetEffectivePolicyBundlesArgs, GetEffectivePolicyBundlesResult, GetEffectivePolicyBundlesOutputArgs } from "./getEffectivePolicyBundles";
+export const getEffectivePolicyBundles: typeof import("./getEffectivePolicyBundles").getEffectivePolicyBundles = null as any;
+export const getEffectivePolicyBundlesOutput: typeof import("./getEffectivePolicyBundles").getEffectivePolicyBundlesOutput = null as any;
+utilities.lazyLoad(exports, ["getEffectivePolicyBundles","getEffectivePolicyBundlesOutput"], () => require("./getEffectivePolicyBundles"));
+
 export { GetEvidenceBundleArgs, GetEvidenceBundleResult, GetEvidenceBundleOutputArgs } from "./getEvidenceBundle";
 export const getEvidenceBundle: typeof import("./getEvidenceBundle").getEvidenceBundle = null as any;
 export const getEvidenceBundleOutput: typeof import("./getEvidenceBundle").getEvidenceBundleOutput = null as any;
@@ -60,11 +65,26 @@ export const getFeed: typeof import("./getFeed").getFeed = null as any;
 export const getFeedOutput: typeof import("./getFeed").getFeedOutput = null as any;
 utilities.lazyLoad(exports, ["getFeed","getFeedOutput"], () => require("./getFeed"));
 
+export { GetPackRuleVersionsArgs, GetPackRuleVersionsResult, GetPackRuleVersionsOutputArgs } from "./getPackRuleVersions";
+export const getPackRuleVersions: typeof import("./getPackRuleVersions").getPackRuleVersions = null as any;
+export const getPackRuleVersionsOutput: typeof import("./getPackRuleVersions").getPackRuleVersionsOutput = null as any;
+utilities.lazyLoad(exports, ["getPackRuleVersions","getPackRuleVersionsOutput"], () => require("./getPackRuleVersions"));
+
+export { GetPackRulesArgs, GetPackRulesResult, GetPackRulesOutputArgs } from "./getPackRules";
+export const getPackRules: typeof import("./getPackRules").getPackRules = null as any;
+export const getPackRulesOutput: typeof import("./getPackRules").getPackRulesOutput = null as any;
+utilities.lazyLoad(exports, ["getPackRules","getPackRulesOutput"], () => require("./getPackRules"));
+
 export { GetPacksResult } from "./getPacks";
 export const getPacks: typeof import("./getPacks").getPacks = null as any;
 export const getPacksOutput: typeof import("./getPacks").getPacksOutput = null as any;
 utilities.lazyLoad(exports, ["getPacks","getPacksOutput"], () => require("./getPacks"));
 
+export { GetPolicyBundlesArgs, GetPolicyBundlesResult, GetPolicyBundlesOutputArgs } from "./getPolicyBundles";
+export const getPolicyBundles: typeof import("./getPolicyBundles").getPolicyBundles = null as any;
+export const getPolicyBundlesOutput: typeof import("./getPolicyBundles").getPolicyBundlesOutput = null as any;
+utilities.lazyLoad(exports, ["getPolicyBundles","getPolicyBundlesOutput"], () => require("./getPolicyBundles"));
+
 export { GetReportsOverviewArgs, GetReportsOverviewResult, GetReportsOverviewOutputArgs } from "./getReportsOverview";
 export const getReportsOverview: typeof import("./getReportsOverview").getReportsOverview = null as any;
 export const getReportsOverviewOutput: typeof import("./getReportsOverview").getReportsOverviewOutput = null as any;
@@ -105,6 +125,11 @@ export type PamSettings = import("./pamSettings").PamSettings;
 export const PamSettings: typeof import("./pamSettings").PamSettings = null as any;
 utilities.lazyLoad(exports, ["PamSettings"], () => require("./pamSettings"));
 
+export { PolicyBundleArgs, PolicyBundleState } from "./policyBundle";
+export type PolicyBundle = import("./policyBundle").PolicyBundle;
+export const PolicyBundle: typeof import("./policyBundle").PolicyBundle = null as any;
+utilities.lazyLoad(exports, ["PolicyBundle"], () => require("./policyBundle"));
+
 export { PolicySyncArgs, PolicySyncState } from "./policySync";
 export type PolicySync = import("./policySync").PolicySync;
 export const PolicySync: typeof import("./policySync").PolicySync = null as any;
@@ -144,6 +169,8 @@ const _module = {
                 return new PackAssignmentBulk(name, <any>undefined, { urn })
             case "thoth:governance/pamSettings:PamSettings":
                 return new PamSettings(name, <any>undefined, { urn })
+            case "thoth:governance/policyBundle:PolicyBundle":
+                return new PolicyBundle(name, <any>undefined, { urn })
             case "thoth:governance/policySync:PolicySync":
                 return new PolicySync(name, <any>undefined, { urn })
             case "thoth:governance/siemSettings:SiemSettings":
@@ -164,6 +191,7 @@ pulumi.runtime.registerResourceModule("thoth", "governance/governanceSettings",
 pulumi.runtime.registerResourceModule("thoth", "governance/packAssignment", _module)
 pulumi.runtime.registerResourceModule("thoth", "governance/packAssignmentBulk", _module)
 pulumi.runtime.registerResourceModule("thoth", "governance/pamSettings", _module)
+pulumi.runtime.registerResourceModule("thoth", "governance/policyBundle", _module)
 pulumi.runtime.registerResourceModule("thoth", "governance/policySync", _module)
 pulumi.runtime.registerResourceModule("thoth", "governance/siemSettings", _module)
 pulumi.runtime.registerResourceModule("thoth", "governance/webhookSettings", _module)

package/governance/packAssignment.ts

@@ -48,10 +48,22 @@ export class PackAssignment extends pulumi.CustomResource {
      * Approval policy ID for pack application.
      */
     declare public readonly approvalPolicyId: pulumi.Output<string | undefined>;
+    /**
+     * Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1).
+     */
+    declare public readonly criticalThreshold: pulumi.Output<number | undefined>;
+    /**
+     * Deterministic boost for delegation risk signals (0-100).
+     */
+    declare public readonly delegationBoost: pulumi.Output<number | undefined>;
     /**
      * Environment: dev or prod.
      */
     declare public readonly environment: pulumi.Output<string | undefined>;
+    /**
+     * Deterministic boost for purpose/sensitivity mismatch signals (0-100).
+     */
+    declare public readonly mismatchBoost: pulumi.Output<number | undefined>;
     /**
      * Pack override JSON object.
      */
@@ -80,6 +92,10 @@ export class PackAssignment extends pulumi.CustomResource {
      * Tenant ID from provider configuration.
      */
     declare public /*out*/ readonly tenantId: pulumi.Output<string>;
+    /**
+     * Ignore low-confidence purpose/delegation signals below this floor (0-1).
+     */
+    declare public readonly trustFloor: pulumi.Output<number | undefined>;
 
     /**
      * Create a PackAssignment resource with the given unique name, arguments, and options.
@@ -98,7 +114,10 @@ export class PackAssignment extends pulumi.CustomResource {
             resourceInputs["appliedAt"] = state?.appliedAt;
             resourceInputs["appliedBy"] = state?.appliedBy;
             resourceInputs["approvalPolicyId"] = state?.approvalPolicyId;
+            resourceInputs["criticalThreshold"] = state?.criticalThreshold;
+            resourceInputs["delegationBoost"] = state?.delegationBoost;
             resourceInputs["environment"] = state?.environment;
+            resourceInputs["mismatchBoost"] = state?.mismatchBoost;
             resourceInputs["overridesJson"] = state?.overridesJson;
             resourceInputs["packId"] = state?.packId;
             resourceInputs["regulation"] = state?.regulation;
@@ -106,6 +125,7 @@ export class PackAssignment extends pulumi.CustomResource {
             resourceInputs["ruleVersion"] = state?.ruleVersion;
             resourceInputs["status"] = state?.status;
             resourceInputs["tenantId"] = state?.tenantId;
+            resourceInputs["trustFloor"] = state?.trustFloor;
         } else {
             const args = argsOrState as PackAssignmentArgs | undefined;
             if (args?.agentId === undefined && !opts.urn) {
@@ -116,9 +136,13 @@ export class PackAssignment extends pulumi.CustomResource {
             }
             resourceInputs["agentId"] = args?.agentId;
             resourceInputs["approvalPolicyId"] = args?.approvalPolicyId;
+            resourceInputs["criticalThreshold"] = args?.criticalThreshold;
+            resourceInputs["delegationBoost"] = args?.delegationBoost;
             resourceInputs["environment"] = args?.environment;
+            resourceInputs["mismatchBoost"] = args?.mismatchBoost;
             resourceInputs["overridesJson"] = args?.overridesJson;
             resourceInputs["packId"] = args?.packId;
+            resourceInputs["trustFloor"] = args?.trustFloor;
             resourceInputs["appliedAt"] = undefined /*out*/;
             resourceInputs["appliedBy"] = undefined /*out*/;
             resourceInputs["regulation"] = undefined /*out*/;
@@ -152,10 +176,22 @@ export interface PackAssignmentState {
      * Approval policy ID for pack application.
      */
     approvalPolicyId?: pulumi.Input<string | undefined>;
+    /**
+     * Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1).
+     */
+    criticalThreshold?: pulumi.Input<number | undefined>;
+    /**
+     * Deterministic boost for delegation risk signals (0-100).
+     */
+    delegationBoost?: pulumi.Input<number | undefined>;
     /**
      * Environment: dev or prod.
      */
     environment?: pulumi.Input<string | undefined>;
+    /**
+     * Deterministic boost for purpose/sensitivity mismatch signals (0-100).
+     */
+    mismatchBoost?: pulumi.Input<number | undefined>;
     /**
      * Pack override JSON object.
      */
@@ -184,6 +220,10 @@ export interface PackAssignmentState {
      * Tenant ID from provider configuration.
      */
     tenantId?: pulumi.Input<string | undefined>;
+    /**
+     * Ignore low-confidence purpose/delegation signals below this floor (0-1).
+     */
+    trustFloor?: pulumi.Input<number | undefined>;
 }
 
 /**
@@ -198,10 +238,22 @@ export interface PackAssignmentArgs {
      * Approval policy ID for pack application.
      */
     approvalPolicyId?: pulumi.Input<string | undefined>;
+    /**
+     * Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1).
+     */
+    criticalThreshold?: pulumi.Input<number | undefined>;
+    /**
+     * Deterministic boost for delegation risk signals (0-100).
+     */
+    delegationBoost?: pulumi.Input<number | undefined>;
     /**
      * Environment: dev or prod.
      */
     environment?: pulumi.Input<string | undefined>;
+    /**
+     * Deterministic boost for purpose/sensitivity mismatch signals (0-100).
+     */
+    mismatchBoost?: pulumi.Input<number | undefined>;
     /**
      * Pack override JSON object.
      */
@@ -210,4 +262,8 @@ export interface PackAssignmentArgs {
      * Compliance pack identifier.
      */
     packId: pulumi.Input<string>;
+    /**
+     * Ignore low-confidence purpose/delegation signals below this floor (0-1).
+     */
+    trustFloor?: pulumi.Input<number | undefined>;
 }

package/governance/packAssignmentBulk.ts

@@ -48,6 +48,14 @@ export class PackAssignmentBulk extends pulumi.CustomResource {
      * Approval policy ID for pack application (defaults to 'default').
      */
     declare public readonly approvalPolicyId: pulumi.Output<string | undefined>;
+    /**
+     * Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1). Applied to selected pack_ids.
+     */
+    declare public readonly criticalThreshold: pulumi.Output<number | undefined>;
+    /**
+     * Deterministic boost for delegation risk signals (0-100). Applied to selected pack_ids.
+     */
+    declare public readonly delegationBoost: pulumi.Output<number | undefined>;
     /**
      * Endpoint IDs whose agents should receive the selected packs.
      */
@@ -68,6 +76,10 @@ export class PackAssignmentBulk extends pulumi.CustomResource {
      * Timestamp of the most recent apply operation.
      */
     declare public /*out*/ readonly lastAppliedAt: pulumi.Output<string>;
+    /**
+     * Deterministic boost for purpose/sensitivity mismatch signals (0-100). Applied to selected pack_ids.
+     */
+    declare public readonly mismatchBoost: pulumi.Output<number | undefined>;
     /**
      * JSON map keyed by<span pulumi-lang-nodejs=" packId " pulumi-lang-dotnet=" PackId " pulumi-lang-go=" packId " pulumi-lang-python=" pack_id " pulumi-lang-yaml=" packId " pulumi-lang-java=" packId "> packId </span>with per-pack overrides.
      */
@@ -96,6 +108,10 @@ export class PackAssignmentBulk extends pulumi.CustomResource {
      * Change this value to force a fresh apply run.
      */
     declare public readonly trigger: pulumi.Output<string | undefined>;
+    /**
+     * Ignore low-confidence purpose/delegation signals below this floor (0-1). Applied to selected pack_ids.
+     */
+    declare public readonly trustFloor: pulumi.Output<number | undefined>;
 
     /**
      * Create a PackAssignmentBulk resource with the given unique name, arguments, and options.
@@ -114,11 +130,14 @@ export class PackAssignmentBulk extends pulumi.CustomResource {
             resourceInputs["allAgents"] = state?.allAgents;
             resourceInputs["appliedCount"] = state?.appliedCount;
             resourceInputs["approvalPolicyId"] = state?.approvalPolicyId;
+            resourceInputs["criticalThreshold"] = state?.criticalThreshold;
+            resourceInputs["delegationBoost"] = state?.delegationBoost;
             resourceInputs["endpointIds"] = state?.endpointIds;
             resourceInputs["environment"] = state?.environment;
             resourceInputs["failedCount"] = state?.failedCount;
             resourceInputs["fleetIds"] = state?.fleetIds;
             resourceInputs["lastAppliedAt"] = state?.lastAppliedAt;
+            resourceInputs["mismatchBoost"] = state?.mismatchBoost;
             resourceInputs["overridesByPackJson"] = state?.overridesByPackJson;
             resourceInputs["packIds"] = state?.packIds;
             resourceInputs["resultsJson"] = state?.resultsJson;
@@ -126,6 +145,7 @@ export class PackAssignmentBulk extends pulumi.CustomResource {
             resourceInputs["tenantId"] = state?.tenantId;
             resourceInputs["totalOps"] = state?.totalOps;
             resourceInputs["trigger"] = state?.trigger;
+            resourceInputs["trustFloor"] = state?.trustFloor;
         } else {
             const args = argsOrState as PackAssignmentBulkArgs | undefined;
             if (args?.packIds === undefined && !opts.urn) {
@@ -134,12 +154,16 @@ export class PackAssignmentBulk extends pulumi.CustomResource {
             resourceInputs["agentIds"] = args?.agentIds;
             resourceInputs["allAgents"] = args?.allAgents;
             resourceInputs["approvalPolicyId"] = args?.approvalPolicyId;
+            resourceInputs["criticalThreshold"] = args?.criticalThreshold;
+            resourceInputs["delegationBoost"] = args?.delegationBoost;
             resourceInputs["endpointIds"] = args?.endpointIds;
             resourceInputs["environment"] = args?.environment;
             resourceInputs["fleetIds"] = args?.fleetIds;
+            resourceInputs["mismatchBoost"] = args?.mismatchBoost;
             resourceInputs["overridesByPackJson"] = args?.overridesByPackJson;
             resourceInputs["packIds"] = args?.packIds;
             resourceInputs["trigger"] = args?.trigger;
+            resourceInputs["trustFloor"] = args?.trustFloor;
             resourceInputs["appliedCount"] = undefined /*out*/;
             resourceInputs["failedCount"] = undefined /*out*/;
             resourceInputs["lastAppliedAt"] = undefined /*out*/;
@@ -173,6 +197,14 @@ export interface PackAssignmentBulkState {
      * Approval policy ID for pack application (defaults to 'default').
      */
     approvalPolicyId?: pulumi.Input<string | undefined>;
+    /**
+     * Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1). Applied to selected pack_ids.
+     */
+    criticalThreshold?: pulumi.Input<number | undefined>;
+    /**
+     * Deterministic boost for delegation risk signals (0-100). Applied to selected pack_ids.
+     */
+    delegationBoost?: pulumi.Input<number | undefined>;
     /**
      * Endpoint IDs whose agents should receive the selected packs.
      */
@@ -193,6 +225,10 @@ export interface PackAssignmentBulkState {
      * Timestamp of the most recent apply operation.
      */
     lastAppliedAt?: pulumi.Input<string | undefined>;
+    /**
+     * Deterministic boost for purpose/sensitivity mismatch signals (0-100). Applied to selected pack_ids.
+     */
+    mismatchBoost?: pulumi.Input<number | undefined>;
     /**
      * JSON map keyed by<span pulumi-lang-nodejs=" packId " pulumi-lang-dotnet=" PackId " pulumi-lang-go=" packId " pulumi-lang-python=" pack_id " pulumi-lang-yaml=" packId " pulumi-lang-java=" packId "> packId </span>with per-pack overrides.
      */
@@ -221,6 +257,10 @@ export interface PackAssignmentBulkState {
      * Change this value to force a fresh apply run.
      */
     trigger?: pulumi.Input<string | undefined>;
+    /**
+     * Ignore low-confidence purpose/delegation signals below this floor (0-1). Applied to selected pack_ids.
+     */
+    trustFloor?: pulumi.Input<number | undefined>;
 }
 
 /**
@@ -239,6 +279,14 @@ export interface PackAssignmentBulkArgs {
      * Approval policy ID for pack application (defaults to 'default').
      */
     approvalPolicyId?: pulumi.Input<string | undefined>;
+    /**
+     * Force at least STEP_UP when normalized risk meets/exceeds this threshold (0-1). Applied to selected pack_ids.
+     */
+    criticalThreshold?: pulumi.Input<number | undefined>;
+    /**
+     * Deterministic boost for delegation risk signals (0-100). Applied to selected pack_ids.
+     */
+    delegationBoost?: pulumi.Input<number | undefined>;
     /**
      * Endpoint IDs whose agents should receive the selected packs.
      */
@@ -251,6 +299,10 @@ export interface PackAssignmentBulkArgs {
      * Fleet IDs whose agents should receive the selected packs.
      */
     fleetIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Deterministic boost for purpose/sensitivity mismatch signals (0-100). Applied to selected pack_ids.
+     */
+    mismatchBoost?: pulumi.Input<number | undefined>;
     /**
      * JSON map keyed by<span pulumi-lang-nodejs=" packId " pulumi-lang-dotnet=" PackId " pulumi-lang-go=" packId " pulumi-lang-python=" pack_id " pulumi-lang-yaml=" packId " pulumi-lang-java=" packId "> packId </span>with per-pack overrides.
      */
@@ -263,4 +315,8 @@ export interface PackAssignmentBulkArgs {
      * Change this value to force a fresh apply run.
      */
     trigger?: pulumi.Input<string | undefined>;
+    /**
+     * Ignore low-confidence purpose/delegation signals below this floor (0-1). Applied to selected pack_ids.
+     */
+    trustFloor?: pulumi.Input<number | undefined>;
 }