@microsoft/terraform-cdk-constructs 1.2.0 → 1.3.0

package/lib/azure-policydefinition/index.d.ts

@@ -0,0 +1 @@
+export * from "./lib";

package/lib/azure-policydefinition/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./lib"), exports);
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvYXp1cmUtcG9saWN5ZGVmaW5pdGlvbi9pbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7Ozs7Ozs7Ozs7Ozs7O0FBQUEsd0NBQXNCIiwic291cmNlc0NvbnRlbnQiOlsiZXhwb3J0ICogZnJvbSBcIi4vbGliXCI7XG4iXX0=

package/lib/azure-policydefinition/lib/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./policy-definition-schemas";
+export * from "./policy-definition";

package/lib/azure-policydefinition/lib/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./policy-definition-schemas"), exports);
+__exportStar(require("./policy-definition"), exports);
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvYXp1cmUtcG9saWN5ZGVmaW5pdGlvbi9saWIvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7Ozs7OztBQUFBLDhEQUE0QztBQUM1QyxzREFBb0MiLCJzb3VyY2VzQ29udGVudCI6WyJleHBvcnQgKiBmcm9tIFwiLi9wb2xpY3ktZGVmaW5pdGlvbi1zY2hlbWFzXCI7XG5leHBvcnQgKiBmcm9tIFwiLi9wb2xpY3ktZGVmaW5pdGlvblwiO1xuIl19

package/lib/azure-policydefinition/lib/policy-definition-schemas.d.ts

@@ -0,0 +1,25 @@
+/**
+ * API schemas for Azure Policy Definition across all supported versions
+ *
+ * This file defines the complete API schemas for Microsoft.Authorization/policyDefinitions
+ * across all supported API versions. The schemas are used by the VersionedAzapiResource
+ * framework for validation, transformation, and version management.
+ */
+import { ApiSchema, VersionConfig } from "../../core-azure/lib/version-manager/interfaces/version-interfaces";
+/**
+ * API Schema for Policy Definition version 2021-06-01
+ * This is the latest stable API version for policy definitions
+ */
+export declare const POLICY_DEFINITION_SCHEMA_2021_06_01: ApiSchema;
+/**
+ * Version configuration for Policy Definition 2021-06-01
+ */
+export declare const POLICY_DEFINITION_VERSION_2021_06_01: VersionConfig;
+/**
+ * All supported Policy Definition versions for registration
+ */
+export declare const ALL_POLICY_DEFINITION_VERSIONS: VersionConfig[];
+/**
+ * Resource type constant
+ */
+export declare const POLICY_DEFINITION_TYPE = "Microsoft.Authorization/policyDefinitions";

package/lib/azure-policydefinition/lib/policy-definition-schemas.js

@@ -0,0 +1,210 @@
+"use strict";
+/**
+ * API schemas for Azure Policy Definition across all supported versions
+ *
+ * This file defines the complete API schemas for Microsoft.Authorization/policyDefinitions
+ * across all supported API versions. The schemas are used by the VersionedAzapiResource
+ * framework for validation, transformation, and version management.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POLICY_DEFINITION_TYPE = exports.ALL_POLICY_DEFINITION_VERSIONS = exports.POLICY_DEFINITION_VERSION_2021_06_01 = exports.POLICY_DEFINITION_SCHEMA_2021_06_01 = void 0;
+const version_interfaces_1 = require("../../core-azure/lib/version-manager/interfaces/version-interfaces");
+// =============================================================================
+// COMMON PROPERTY DEFINITIONS
+// =============================================================================
+/**
+ * Common property definitions shared across all Policy Definition versions
+ */
+const COMMON_PROPERTIES = {
+    name: {
+        dataType: version_interfaces_1.PropertyType.STRING,
+        required: false,
+        description: "The name of the policy definition. Must be unique within the scope (subscription or management group)",
+        validation: [
+            {
+                ruleType: version_interfaces_1.ValidationRuleType.PATTERN_MATCH,
+                value: "^[a-zA-Z0-9_-]+$",
+                message: "Policy definition name can only contain alphanumeric characters, underscores, and hyphens",
+            },
+            {
+                ruleType: version_interfaces_1.ValidationRuleType.VALUE_RANGE,
+                value: { minLength: 1, maxLength: 64 },
+                message: "Policy definition name must be between 1 and 64 characters",
+            },
+        ],
+    },
+    displayName: {
+        dataType: version_interfaces_1.PropertyType.STRING,
+        required: false,
+        description: "The display name of the policy definition",
+        validation: [
+            {
+                ruleType: version_interfaces_1.ValidationRuleType.VALUE_RANGE,
+                value: { minLength: 1, maxLength: 128 },
+                message: "Display name must be between 1 and 128 characters",
+            },
+        ],
+    },
+    description: {
+        dataType: version_interfaces_1.PropertyType.STRING,
+        required: false,
+        description: "The policy definition description. Provides detailed information about what the policy enforces",
+        validation: [
+            {
+                ruleType: version_interfaces_1.ValidationRuleType.VALUE_RANGE,
+                value: { minLength: 0, maxLength: 512 },
+                message: "Description must not exceed 512 characters",
+            },
+        ],
+    },
+    policyType: {
+        dataType: version_interfaces_1.PropertyType.STRING,
+        required: false,
+        defaultValue: "Custom",
+        description: "The type of policy definition. Valid values: NotSpecified, BuiltIn, Static, Custom",
+        validation: [
+            {
+                ruleType: version_interfaces_1.ValidationRuleType.PATTERN_MATCH,
+                value: "^(NotSpecified|BuiltIn|Static|Custom)$",
+                message: "Policy type must be one of: NotSpecified, BuiltIn, Static, Custom",
+            },
+        ],
+    },
+    mode: {
+        dataType: version_interfaces_1.PropertyType.STRING,
+        required: false,
+        defaultValue: "All",
+        description: "The policy mode. Determines which resource types will be evaluated. Valid values: All, Indexed, or resource provider modes",
+        validation: [
+            {
+                ruleType: version_interfaces_1.ValidationRuleType.TYPE_CHECK,
+                value: version_interfaces_1.PropertyType.STRING,
+                message: "Mode must be a string value",
+            },
+        ],
+    },
+    policyRule: {
+        dataType: version_interfaces_1.PropertyType.OBJECT,
+        required: true,
+        description: "The policy rule as a JSON object containing if/then logic that defines the policy enforcement",
+        validation: [
+            {
+                ruleType: version_interfaces_1.ValidationRuleType.REQUIRED,
+                message: "Policy rule is required for policy definitions",
+            },
+            {
+                ruleType: version_interfaces_1.ValidationRuleType.TYPE_CHECK,
+                value: version_interfaces_1.PropertyType.OBJECT,
+                message: "Policy rule must be a valid JSON object",
+            },
+        ],
+    },
+    parameters: {
+        dataType: version_interfaces_1.PropertyType.OBJECT,
+        required: false,
+        description: "Parameters for the policy definition. Allows policy assignments to provide values that are used in the policy rule",
+        validation: [
+            {
+                ruleType: version_interfaces_1.ValidationRuleType.TYPE_CHECK,
+                value: version_interfaces_1.PropertyType.OBJECT,
+                message: "Parameters must be a valid JSON object",
+            },
+        ],
+    },
+    metadata: {
+        dataType: version_interfaces_1.PropertyType.OBJECT,
+        required: false,
+        description: "Metadata for the policy definition. Used to store additional information like category, version, etc.",
+        validation: [
+            {
+                ruleType: version_interfaces_1.ValidationRuleType.TYPE_CHECK,
+                value: version_interfaces_1.PropertyType.OBJECT,
+                message: "Metadata must be a valid JSON object",
+            },
+        ],
+    },
+    ignoreChanges: {
+        dataType: version_interfaces_1.PropertyType.ARRAY,
+        required: false,
+        description: "Array of property names to ignore during updates",
+        validation: [
+            {
+                ruleType: version_interfaces_1.ValidationRuleType.TYPE_CHECK,
+                value: version_interfaces_1.PropertyType.ARRAY,
+                message: "IgnoreChanges must be an array of strings",
+            },
+        ],
+    },
+};
+// =============================================================================
+// VERSION-SPECIFIC SCHEMAS
+// =============================================================================
+/**
+ * API Schema for Policy Definition version 2021-06-01
+ * This is the latest stable API version for policy definitions
+ */
+exports.POLICY_DEFINITION_SCHEMA_2021_06_01 = {
+    resourceType: "Microsoft.Authorization/policyDefinitions",
+    version: "2021-06-01",
+    properties: {
+        ...COMMON_PROPERTIES,
+    },
+    required: ["policyRule"],
+    optional: [
+        "name",
+        "displayName",
+        "description",
+        "policyType",
+        "mode",
+        "parameters",
+        "metadata",
+        "ignoreChanges",
+    ],
+    deprecated: [],
+    transformationRules: {},
+    validationRules: [
+        {
+            property: "policyRule",
+            rules: [
+                {
+                    ruleType: version_interfaces_1.ValidationRuleType.REQUIRED,
+                    message: "Policy rule is required for policy definitions",
+                },
+            ],
+        },
+    ],
+};
+// =============================================================================
+// VERSION CONFIGURATIONS
+// =============================================================================
+/**
+ * Version configuration for Policy Definition 2021-06-01
+ */
+exports.POLICY_DEFINITION_VERSION_2021_06_01 = {
+    version: "2021-06-01",
+    schema: exports.POLICY_DEFINITION_SCHEMA_2021_06_01,
+    supportLevel: version_interfaces_1.VersionSupportLevel.ACTIVE,
+    releaseDate: "2021-06-01",
+    deprecationDate: undefined,
+    sunsetDate: undefined,
+    breakingChanges: [],
+    migrationGuide: "/docs/policy-definition/migration-2021-06-01",
+    changeLog: [
+        {
+            changeType: "added",
+            description: "Stable release of Policy Definition API with full support for custom policies",
+            breaking: false,
+        },
+    ],
+};
+/**
+ * All supported Policy Definition versions for registration
+ */
+exports.ALL_POLICY_DEFINITION_VERSIONS = [
+    exports.POLICY_DEFINITION_VERSION_2021_06_01,
+];
+/**
+ * Resource type constant
+ */
+exports.POLICY_DEFINITION_TYPE = "Microsoft.Authorization/policyDefinitions";
+//# sourceMappingURL=data:application/json;base64,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

package/lib/azure-policydefinition/lib/policy-definition.d.ts

@@ -0,0 +1,260 @@
+/**
+ * Unified Azure Policy Definition implementation using VersionedAzapiResource framework
+ *
+ * This class provides a version-aware implementation for managing Azure Policy Definitions
+ * using the AZAPI provider. Policy definitions are deployed at subscription or management
+ * group scope and define the rules and parameters for policy enforcement.
+ *
+ * Supported API Versions:
+ * - 2021-06-01 (Active, Latest)
+ *
+ * Features:
+ * - Automatic latest version resolution when no version is specified
+ * - Explicit version pinning for stability requirements
+ * - Schema-driven validation and transformation
+ * - Support for custom policy rules and parameters
+ * - JSII compliance for multi-language support
+ */
+import * as cdktf from "cdktf";
+import { Construct } from "constructs";
+import { AzapiResource, AzapiResourceProps } from "../../core-azure/lib/azapi/azapi-resource";
+import { ApiSchema } from "../../core-azure/lib/version-manager/interfaces/version-interfaces";
+/**
+ * Properties for the unified Azure Policy Definition
+ *
+ * Extends AzapiResourceProps with Policy Definition specific properties
+ */
+export interface PolicyDefinitionProps extends AzapiResourceProps {
+    /**
+     * The display name of the policy definition
+     * Provides a human-readable name for the policy
+     *
+     * @example "Require tag and its value on resources"
+     */
+    readonly displayName?: string;
+    /**
+     * The policy definition description
+     * Provides detailed information about what the policy enforces
+     *
+     * @example "Enforces a required tag and its value on resources"
+     */
+    readonly description?: string;
+    /**
+     * The type of policy definition
+     * @default "Custom"
+     * @example "Custom", "BuiltIn", "Static", "NotSpecified"
+     */
+    readonly policyType?: string;
+    /**
+     * The policy mode
+     * Determines which resource types will be evaluated
+     * @default "All"
+     * @example "All", "Indexed", "Microsoft.KeyVault.Data"
+     */
+    readonly mode?: string;
+    /**
+     * The policy rule as a JSON object
+     * Defines the if/then logic that determines policy enforcement
+     * This is required for all policy definitions
+     *
+     * @example
+     * {
+     *   if: {
+     *     field: "tags['Environment']",
+     *     exists: "false"
+     *   },
+     *   then: {
+     *     effect: "deny"
+     *   }
+     * }
+     */
+    readonly policyRule: any;
+    /**
+     * Parameters for the policy definition
+     * Allows policy assignments to provide values that are used in the policy rule
+     *
+     * @example
+     * {
+     *   tagName: {
+     *     type: "String",
+     *     metadata: {
+     *       displayName: "Tag Name",
+     *       description: "Name of the tag to enforce"
+     *     }
+     *   }
+     * }
+     */
+    readonly parameters?: any;
+    /**
+     * Metadata for the policy definition
+     * Used to store additional information like category, version, etc.
+     *
+     * @example
+     * {
+     *   category: "Tags",
+     *   version: "1.0.0"
+     * }
+     */
+    readonly metadata?: any;
+    /**
+     * The lifecycle rules to ignore changes
+     * @example ["metadata"]
+     */
+    readonly ignoreChanges?: string[];
+}
+/**
+ * Properties interface for Azure Policy Definition
+ * This is required for JSII compliance to support multi-language code generation
+ */
+export interface PolicyDefinitionProperties {
+    /**
+     * The display name of the policy definition
+     */
+    readonly displayName?: string;
+    /**
+     * The policy definition description
+     */
+    readonly description?: string;
+    /**
+     * The type of policy definition
+     */
+    readonly policyType?: string;
+    /**
+     * The policy mode
+     */
+    readonly mode?: string;
+    /**
+     * The policy rule object
+     */
+    readonly policyRule: any;
+    /**
+     * Parameters for the policy definition
+     */
+    readonly parameters?: any;
+    /**
+     * Metadata for the policy definition
+     */
+    readonly metadata?: any;
+}
+/**
+ * The resource body interface for Azure Policy Definition API calls
+ * This matches the Azure REST API schema for policy definitions
+ */
+export interface PolicyDefinitionBody {
+    /**
+     * The properties of the policy definition
+     */
+    readonly properties: PolicyDefinitionProperties;
+}
+/**
+ * Unified Azure Policy Definition implementation
+ *
+ * This class provides a single, version-aware implementation for managing Azure
+ * Policy Definitions. It automatically handles version resolution, schema validation,
+ * and property transformation.
+ *
+ * Note: Policy definitions are deployed at subscription or management group scope.
+ * Unlike most Azure resources, they do not have a location property as they are
+ * not region-specific.
+ *
+ * @example
+ * // Basic custom policy definition:
+ * const policyDefinition = new PolicyDefinition(this, "policy", {
+ *   name: "require-tag-policy",
+ *   displayName: "Require tag on resources",
+ *   description: "Enforces a required tag on resources",
+ *   policyRule: {
+ *     if: {
+ *       field: "tags['Environment']",
+ *       exists: "false"
+ *     },
+ *     then: {
+ *       effect: "deny"
+ *     }
+ *   }
+ * });
+ *
+ * @example
+ * // Policy definition with parameters:
+ * const policyDefinition = new PolicyDefinition(this, "policy", {
+ *   name: "require-tag-policy",
+ *   displayName: "Require tag on resources",
+ *   policyRule: {
+ *     if: {
+ *       field: "[concat('tags[', parameters('tagName'), ']')]",
+ *       exists: "false"
+ *     },
+ *     then: {
+ *       effect: "deny"
+ *     }
+ *   },
+ *   parameters: {
+ *     tagName: {
+ *       type: "String",
+ *       metadata: {
+ *         displayName: "Tag Name"
+ *       }
+ *     }
+ *   }
+ * });
+ *
+ * @stability stable
+ */
+export declare class PolicyDefinition extends AzapiResource {
+    /**
+     * The input properties for this Policy Definition instance
+     */
+    readonly props: PolicyDefinitionProps;
+    readonly idOutput: cdktf.TerraformOutput;
+    readonly nameOutput: cdktf.TerraformOutput;
+    /**
+     * Creates a new Azure Policy Definition using the VersionedAzapiResource framework
+     *
+     * The constructor automatically handles version resolution, schema registration,
+     * validation, and resource creation.
+     *
+     * @param scope - The scope in which to define this construct
+     * @param id - The unique identifier for this instance
+     * @param props - Configuration properties for the Policy Definition
+     */
+    constructor(scope: Construct, id: string, props: PolicyDefinitionProps);
+    /**
+     * Gets the default API version to use when no explicit version is specified
+     * Returns the most recent stable version as the default
+     */
+    protected defaultVersion(): string;
+    /**
+     * Gets the Azure resource type for Policy Definitions
+     */
+    protected resourceType(): string;
+    /**
+     * Gets the API schema for the resolved version
+     * Uses the framework's schema resolution to get the appropriate schema
+     */
+    protected apiSchema(): ApiSchema;
+    /**
+     * Creates the resource body for the Azure API call
+     * Transforms the input properties into the JSON format expected by Azure REST API
+     *
+     * Note: Policy definitions do not have a location property as they are
+     * subscription or management group scoped resources.
+     */
+    protected createResourceBody(props: any): any;
+    /**
+     * Get the full resource identifier for use in other Azure resources
+     * Alias for the id property
+     */
+    get resourceId(): string;
+    /**
+     * Get the policy type
+     */
+    get policyType(): string;
+    /**
+     * Get the policy mode
+     */
+    get policyMode(): string;
+    /**
+     * Applies ignore changes lifecycle rules if specified in props
+     */
+    private _applyIgnoreChanges;
+}