@pulumi/azure 5.0.0 → 5.3.0-alpha.1650909643

package/core/resourceGroupPolicyExemption.js

@@ -0,0 +1,111 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ResourceGroupPolicyExemption = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * Manages a Resource Group Policy Exemption.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as azure from "@pulumi/azure";
+ *
+ * const exampleResourceGroup = new azure.core.ResourceGroup("exampleResourceGroup", {location: "westus"});
+ * const examplePolicyDefintion = azure.policy.getPolicyDefintion({
+ *     displayName: "Allowed locations",
+ * });
+ * const exampleResourceGroupPolicyAssignment = new azure.core.ResourceGroupPolicyAssignment("exampleResourceGroupPolicyAssignment", {
+ *     resourceGroupId: exampleResourceGroup.id,
+ *     policyDefinitionId: examplePolicyDefintion.then(examplePolicyDefintion => examplePolicyDefintion.id),
+ *     parameters: exampleResourceGroup.location.apply(location => JSON.stringify({
+ *         listOfAllowedLocations: {
+ *             value: [location],
+ *         },
+ *     })),
+ * });
+ * const exampleResourceGroupPolicyExemption = new azure.core.ResourceGroupPolicyExemption("exampleResourceGroupPolicyExemption", {
+ *     resourceGroupId: exampleResourceGroup.id,
+ *     policyAssignmentId: exampleResourceGroupPolicyAssignment.id,
+ *     exemptionCategory: "Mitigated",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * Policy Exemptions can be imported using the `resource id`, e.g.
+ *
+ * ```sh
+ *  $ pulumi import azure:core/resourceGroupPolicyExemption:ResourceGroupPolicyExemption exemption1 /subscriptions/00000000-0000-0000-000000000000/resourceGroups/resGroup1/providers/Microsoft.Authorization/policyExemptions/exemption1
+ * ```
+ */
+class ResourceGroupPolicyExemption extends pulumi.CustomResource {
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["description"] = state ? state.description : undefined;
+            resourceInputs["displayName"] = state ? state.displayName : undefined;
+            resourceInputs["exemptionCategory"] = state ? state.exemptionCategory : undefined;
+            resourceInputs["expiresOn"] = state ? state.expiresOn : undefined;
+            resourceInputs["metadata"] = state ? state.metadata : undefined;
+            resourceInputs["name"] = state ? state.name : undefined;
+            resourceInputs["policyAssignmentId"] = state ? state.policyAssignmentId : undefined;
+            resourceInputs["policyDefinitionReferenceIds"] = state ? state.policyDefinitionReferenceIds : undefined;
+            resourceInputs["resourceGroupId"] = state ? state.resourceGroupId : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.exemptionCategory === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'exemptionCategory'");
+            }
+            if ((!args || args.policyAssignmentId === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'policyAssignmentId'");
+            }
+            if ((!args || args.resourceGroupId === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'resourceGroupId'");
+            }
+            resourceInputs["description"] = args ? args.description : undefined;
+            resourceInputs["displayName"] = args ? args.displayName : undefined;
+            resourceInputs["exemptionCategory"] = args ? args.exemptionCategory : undefined;
+            resourceInputs["expiresOn"] = args ? args.expiresOn : undefined;
+            resourceInputs["metadata"] = args ? args.metadata : undefined;
+            resourceInputs["name"] = args ? args.name : undefined;
+            resourceInputs["policyAssignmentId"] = args ? args.policyAssignmentId : undefined;
+            resourceInputs["policyDefinitionReferenceIds"] = args ? args.policyDefinitionReferenceIds : undefined;
+            resourceInputs["resourceGroupId"] = args ? args.resourceGroupId : undefined;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(ResourceGroupPolicyExemption.__pulumiType, name, resourceInputs, opts);
+    }
+    /**
+     * Get an existing ResourceGroupPolicyExemption resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new ResourceGroupPolicyExemption(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of ResourceGroupPolicyExemption.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === ResourceGroupPolicyExemption.__pulumiType;
+    }
+}
+exports.ResourceGroupPolicyExemption = ResourceGroupPolicyExemption;
+/** @internal */
+ResourceGroupPolicyExemption.__pulumiType = 'azure:core/resourceGroupPolicyExemption:ResourceGroupPolicyExemption';
+//# sourceMappingURL=resourceGroupPolicyExemption.js.map

package/core/resourceGroupPolicyExemption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resourceGroupPolicyExemption.js","sourceRoot":"","sources":["../../core/resourceGroupPolicyExemption.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAa,4BAA6B,SAAQ,MAAM,CAAC,cAAc;IAyEnE,YAAY,IAAY,EAAE,WAAkF,EAAE,IAAmC;QAC7I,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA4D,CAAC;YAC3E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,8BAA8B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC,SAAS,CAAC;YACxG,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;SACjF;aAAM;YACH,MAAM,IAAI,GAAG,WAA2D,CAAC;YACzE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC9D,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;aACpE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC/D,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;aACrE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC5D,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;aAClE;YACD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,8BAA8B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/E;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,4BAA4B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACjF,CAAC;IA7GD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAyC,EAAE,IAAmC;QACvI,OAAO,IAAI,4BAA4B,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACnF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,4BAA4B,CAAC,YAAY,CAAC;IAC7E,CAAC;;AA1BL,oEA+GC;AAjGG,gBAAgB;AACO,yCAAY,GAAG,sEAAsE,CAAC"}

package/core/resourcePolicyExemption.d.ts

@@ -0,0 +1,185 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Manages a Resource Policy Exemption.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as azure from "@pulumi/azure";
+ *
+ * const exampleResourceGroup = new azure.core.ResourceGroup("exampleResourceGroup", {location: "westus"});
+ * const exampleVirtualNetwork = new azure.network.VirtualNetwork("exampleVirtualNetwork", {
+ *     resourceGroupName: exampleResourceGroup.name,
+ *     location: exampleResourceGroup.location,
+ *     addressSpaces: ["10.0.0.0/16"],
+ * });
+ * const examplePolicySetDefinition = azure.policy.getPolicySetDefinition({
+ *     displayName: "Audit machines with insecure password security settings",
+ * });
+ * const exampleResourcePolicyAssignment = new azure.core.ResourcePolicyAssignment("exampleResourcePolicyAssignment", {
+ *     resourceId: exampleVirtualNetwork.id,
+ *     policyDefinitionId: examplePolicySetDefinition.then(examplePolicySetDefinition => examplePolicySetDefinition.id),
+ *     location: exampleResourceGroup.location,
+ *     identity: {
+ *         type: "SystemAssigned",
+ *     },
+ * });
+ * const exampleResourcePolicyExemption = new azure.core.ResourcePolicyExemption("exampleResourcePolicyExemption", {
+ *     resourceId: exampleResourcePolicyAssignment.resourceId,
+ *     policyAssignmentId: exampleResourcePolicyAssignment.id,
+ *     exemptionCategory: "Mitigated",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * Policy Exemptions can be imported using the `resource id`, e.g.
+ *
+ * ```sh
+ *  $ pulumi import azure:core/resourcePolicyExemption:ResourcePolicyExemption exemption1 /subscriptions/00000000-0000-0000-000000000000/resourceGroups/resGroup1/providers/Microsoft.Authorization/policyExemptions/exemption1
+ * ```
+ */
+export declare class ResourcePolicyExemption extends pulumi.CustomResource {
+    /**
+     * Get an existing ResourcePolicyExemption resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ResourcePolicyExemptionState, opts?: pulumi.CustomResourceOptions): ResourcePolicyExemption;
+    /**
+     * Returns true if the given object is an instance of ResourcePolicyExemption.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is ResourcePolicyExemption;
+    /**
+     * A description to use for this Policy Exemption.
+     */
+    readonly description: pulumi.Output<string | undefined>;
+    /**
+     * A friendly display name to use for this Policy Exemption.
+     */
+    readonly displayName: pulumi.Output<string | undefined>;
+    /**
+     * The category of this policy exemption. Possible values are `Waiver` and `Mitigated`.
+     */
+    readonly exemptionCategory: pulumi.Output<string>;
+    /**
+     * The expiration date and time in UTC ISO 8601 format of this policy exemption.
+     */
+    readonly expiresOn: pulumi.Output<string | undefined>;
+    /**
+     * The metadata for this policy exemption. This is a JSON string representing additional metadata that should be stored with the policy exemption.
+     */
+    readonly metadata: pulumi.Output<string>;
+    /**
+     * The name of the Policy Exemption. Changing this forces a new resource to be created.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * The ID of the Policy Assignment to be exempted at the specified Scope.
+     */
+    readonly policyAssignmentId: pulumi.Output<string>;
+    /**
+     * The policy definition reference ID list when the associated policy assignment is an assignment of a policy set definition.
+     */
+    readonly policyDefinitionReferenceIds: pulumi.Output<string[] | undefined>;
+    /**
+     * The Resource ID where the Policy Exemption should be applied. Changing this forces a new resource to be created.
+     */
+    readonly resourceId: pulumi.Output<string>;
+    /**
+     * Create a ResourcePolicyExemption resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ResourcePolicyExemptionArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering ResourcePolicyExemption resources.
+ */
+export interface ResourcePolicyExemptionState {
+    /**
+     * A description to use for this Policy Exemption.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * A friendly display name to use for this Policy Exemption.
+     */
+    displayName?: pulumi.Input<string>;
+    /**
+     * The category of this policy exemption. Possible values are `Waiver` and `Mitigated`.
+     */
+    exemptionCategory?: pulumi.Input<string>;
+    /**
+     * The expiration date and time in UTC ISO 8601 format of this policy exemption.
+     */
+    expiresOn?: pulumi.Input<string>;
+    /**
+     * The metadata for this policy exemption. This is a JSON string representing additional metadata that should be stored with the policy exemption.
+     */
+    metadata?: pulumi.Input<string>;
+    /**
+     * The name of the Policy Exemption. Changing this forces a new resource to be created.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * The ID of the Policy Assignment to be exempted at the specified Scope.
+     */
+    policyAssignmentId?: pulumi.Input<string>;
+    /**
+     * The policy definition reference ID list when the associated policy assignment is an assignment of a policy set definition.
+     */
+    policyDefinitionReferenceIds?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The Resource ID where the Policy Exemption should be applied. Changing this forces a new resource to be created.
+     */
+    resourceId?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a ResourcePolicyExemption resource.
+ */
+export interface ResourcePolicyExemptionArgs {
+    /**
+     * A description to use for this Policy Exemption.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * A friendly display name to use for this Policy Exemption.
+     */
+    displayName?: pulumi.Input<string>;
+    /**
+     * The category of this policy exemption. Possible values are `Waiver` and `Mitigated`.
+     */
+    exemptionCategory: pulumi.Input<string>;
+    /**
+     * The expiration date and time in UTC ISO 8601 format of this policy exemption.
+     */
+    expiresOn?: pulumi.Input<string>;
+    /**
+     * The metadata for this policy exemption. This is a JSON string representing additional metadata that should be stored with the policy exemption.
+     */
+    metadata?: pulumi.Input<string>;
+    /**
+     * The name of the Policy Exemption. Changing this forces a new resource to be created.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * The ID of the Policy Assignment to be exempted at the specified Scope.
+     */
+    policyAssignmentId: pulumi.Input<string>;
+    /**
+     * The policy definition reference ID list when the associated policy assignment is an assignment of a policy set definition.
+     */
+    policyDefinitionReferenceIds?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The Resource ID where the Policy Exemption should be applied. Changing this forces a new resource to be created.
+     */
+    resourceId: pulumi.Input<string>;
+}

package/core/resourcePolicyExemption.js

@@ -0,0 +1,115 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ResourcePolicyExemption = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * Manages a Resource Policy Exemption.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as azure from "@pulumi/azure";
+ *
+ * const exampleResourceGroup = new azure.core.ResourceGroup("exampleResourceGroup", {location: "westus"});
+ * const exampleVirtualNetwork = new azure.network.VirtualNetwork("exampleVirtualNetwork", {
+ *     resourceGroupName: exampleResourceGroup.name,
+ *     location: exampleResourceGroup.location,
+ *     addressSpaces: ["10.0.0.0/16"],
+ * });
+ * const examplePolicySetDefinition = azure.policy.getPolicySetDefinition({
+ *     displayName: "Audit machines with insecure password security settings",
+ * });
+ * const exampleResourcePolicyAssignment = new azure.core.ResourcePolicyAssignment("exampleResourcePolicyAssignment", {
+ *     resourceId: exampleVirtualNetwork.id,
+ *     policyDefinitionId: examplePolicySetDefinition.then(examplePolicySetDefinition => examplePolicySetDefinition.id),
+ *     location: exampleResourceGroup.location,
+ *     identity: {
+ *         type: "SystemAssigned",
+ *     },
+ * });
+ * const exampleResourcePolicyExemption = new azure.core.ResourcePolicyExemption("exampleResourcePolicyExemption", {
+ *     resourceId: exampleResourcePolicyAssignment.resourceId,
+ *     policyAssignmentId: exampleResourcePolicyAssignment.id,
+ *     exemptionCategory: "Mitigated",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * Policy Exemptions can be imported using the `resource id`, e.g.
+ *
+ * ```sh
+ *  $ pulumi import azure:core/resourcePolicyExemption:ResourcePolicyExemption exemption1 /subscriptions/00000000-0000-0000-000000000000/resourceGroups/resGroup1/providers/Microsoft.Authorization/policyExemptions/exemption1
+ * ```
+ */
+class ResourcePolicyExemption extends pulumi.CustomResource {
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["description"] = state ? state.description : undefined;
+            resourceInputs["displayName"] = state ? state.displayName : undefined;
+            resourceInputs["exemptionCategory"] = state ? state.exemptionCategory : undefined;
+            resourceInputs["expiresOn"] = state ? state.expiresOn : undefined;
+            resourceInputs["metadata"] = state ? state.metadata : undefined;
+            resourceInputs["name"] = state ? state.name : undefined;
+            resourceInputs["policyAssignmentId"] = state ? state.policyAssignmentId : undefined;
+            resourceInputs["policyDefinitionReferenceIds"] = state ? state.policyDefinitionReferenceIds : undefined;
+            resourceInputs["resourceId"] = state ? state.resourceId : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.exemptionCategory === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'exemptionCategory'");
+            }
+            if ((!args || args.policyAssignmentId === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'policyAssignmentId'");
+            }
+            if ((!args || args.resourceId === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'resourceId'");
+            }
+            resourceInputs["description"] = args ? args.description : undefined;
+            resourceInputs["displayName"] = args ? args.displayName : undefined;
+            resourceInputs["exemptionCategory"] = args ? args.exemptionCategory : undefined;
+            resourceInputs["expiresOn"] = args ? args.expiresOn : undefined;
+            resourceInputs["metadata"] = args ? args.metadata : undefined;
+            resourceInputs["name"] = args ? args.name : undefined;
+            resourceInputs["policyAssignmentId"] = args ? args.policyAssignmentId : undefined;
+            resourceInputs["policyDefinitionReferenceIds"] = args ? args.policyDefinitionReferenceIds : undefined;
+            resourceInputs["resourceId"] = args ? args.resourceId : undefined;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(ResourcePolicyExemption.__pulumiType, name, resourceInputs, opts);
+    }
+    /**
+     * Get an existing ResourcePolicyExemption resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new ResourcePolicyExemption(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of ResourcePolicyExemption.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === ResourcePolicyExemption.__pulumiType;
+    }
+}
+exports.ResourcePolicyExemption = ResourcePolicyExemption;
+/** @internal */
+ResourcePolicyExemption.__pulumiType = 'azure:core/resourcePolicyExemption:ResourcePolicyExemption';
+//# sourceMappingURL=resourcePolicyExemption.js.map

package/core/resourcePolicyExemption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resourcePolicyExemption.js","sourceRoot":"","sources":["../../core/resourcePolicyExemption.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAa,uBAAwB,SAAQ,MAAM,CAAC,cAAc;IAyE9D,YAAY,IAAY,EAAE,WAAwE,EAAE,IAAmC;QACnI,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAuD,CAAC;YACtE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,8BAA8B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC,SAAS,CAAC;YACxG,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SACvE;aAAM;YACH,MAAM,IAAI,GAAG,WAAsD,CAAC;YACpE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC9D,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;aACpE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC/D,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;aACrE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,8BAA8B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SACrE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,uBAAuB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC5E,CAAC;IA7GD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAoC,EAAE,IAAmC;QAClI,OAAO,IAAI,uBAAuB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC9E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,uBAAuB,CAAC,YAAY,CAAC;IACxE,CAAC;;AA1BL,0DA+GC;AAjGG,gBAAgB;AACO,oCAAY,GAAG,4DAA4D,CAAC"}

package/core/subscriptionPolicyExemption.d.ts

@@ -0,0 +1,180 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Manages a Subscription Policy Exemption.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as azure from "@pulumi/azure";
+ *
+ * const exampleSubscription = azure.core.getSubscription({});
+ * const examplePolicySetDefinition = azure.policy.getPolicySetDefinition({
+ *     displayName: "Audit machines with insecure password security settings",
+ * });
+ * const exampleSubscriptionPolicyAssignment = new azure.core.SubscriptionPolicyAssignment("exampleSubscriptionPolicyAssignment", {
+ *     subscriptionId: exampleSubscription.then(exampleSubscription => exampleSubscription.id),
+ *     policyDefinitionId: examplePolicySetDefinition.then(examplePolicySetDefinition => examplePolicySetDefinition.id),
+ *     location: "westus",
+ *     identity: {
+ *         type: "SystemAssigned",
+ *     },
+ * });
+ * const exampleSubscriptionPolicyExemption = new azure.core.SubscriptionPolicyExemption("exampleSubscriptionPolicyExemption", {
+ *     resourceGroupId: exampleSubscription.then(exampleSubscription => exampleSubscription.id),
+ *     policyAssignmentId: exampleSubscriptionPolicyAssignment.id,
+ *     exemptionCategory: "Mitigated",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * Policy Exemptions can be imported using the `resource id`, e.g.
+ *
+ * ```sh
+ *  $ pulumi import azure:core/subscriptionPolicyExemption:SubscriptionPolicyExemption exemption1 /subscriptions/00000000-0000-0000-000000000000/providers/Microsoft.Authorization/policyExemptions/exemption1
+ * ```
+ */
+export declare class SubscriptionPolicyExemption extends pulumi.CustomResource {
+    /**
+     * Get an existing SubscriptionPolicyExemption resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: SubscriptionPolicyExemptionState, opts?: pulumi.CustomResourceOptions): SubscriptionPolicyExemption;
+    /**
+     * Returns true if the given object is an instance of SubscriptionPolicyExemption.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is SubscriptionPolicyExemption;
+    /**
+     * A description to use for this Policy Exemption.
+     */
+    readonly description: pulumi.Output<string | undefined>;
+    /**
+     * A friendly display name to use for this Policy Exemption.
+     */
+    readonly displayName: pulumi.Output<string | undefined>;
+    /**
+     * The category of this policy exemption. Possible values are `Waiver` and `Mitigated`.
+     */
+    readonly exemptionCategory: pulumi.Output<string>;
+    /**
+     * The expiration date and time in UTC ISO 8601 format of this policy exemption.
+     */
+    readonly expiresOn: pulumi.Output<string | undefined>;
+    /**
+     * The metadata for this policy exemption. This is a JSON string representing additional metadata that should be stored with the policy exemption.
+     */
+    readonly metadata: pulumi.Output<string>;
+    /**
+     * The name of the Policy Exemption. Changing this forces a new resource to be created.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * The ID of the Policy Assignment to be exempted at the specified Scope.
+     */
+    readonly policyAssignmentId: pulumi.Output<string>;
+    /**
+     * The policy definition reference ID list when the associated policy assignment is an assignment of a policy set definition.
+     */
+    readonly policyDefinitionReferenceIds: pulumi.Output<string[] | undefined>;
+    /**
+     * The Subscription ID where the Policy Exemption should be applied. Changing this forces a new resource to be created.
+     */
+    readonly subscriptionId: pulumi.Output<string>;
+    /**
+     * Create a SubscriptionPolicyExemption resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: SubscriptionPolicyExemptionArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering SubscriptionPolicyExemption resources.
+ */
+export interface SubscriptionPolicyExemptionState {
+    /**
+     * A description to use for this Policy Exemption.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * A friendly display name to use for this Policy Exemption.
+     */
+    displayName?: pulumi.Input<string>;
+    /**
+     * The category of this policy exemption. Possible values are `Waiver` and `Mitigated`.
+     */
+    exemptionCategory?: pulumi.Input<string>;
+    /**
+     * The expiration date and time in UTC ISO 8601 format of this policy exemption.
+     */
+    expiresOn?: pulumi.Input<string>;
+    /**
+     * The metadata for this policy exemption. This is a JSON string representing additional metadata that should be stored with the policy exemption.
+     */
+    metadata?: pulumi.Input<string>;
+    /**
+     * The name of the Policy Exemption. Changing this forces a new resource to be created.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * The ID of the Policy Assignment to be exempted at the specified Scope.
+     */
+    policyAssignmentId?: pulumi.Input<string>;
+    /**
+     * The policy definition reference ID list when the associated policy assignment is an assignment of a policy set definition.
+     */
+    policyDefinitionReferenceIds?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The Subscription ID where the Policy Exemption should be applied. Changing this forces a new resource to be created.
+     */
+    subscriptionId?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a SubscriptionPolicyExemption resource.
+ */
+export interface SubscriptionPolicyExemptionArgs {
+    /**
+     * A description to use for this Policy Exemption.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * A friendly display name to use for this Policy Exemption.
+     */
+    displayName?: pulumi.Input<string>;
+    /**
+     * The category of this policy exemption. Possible values are `Waiver` and `Mitigated`.
+     */
+    exemptionCategory: pulumi.Input<string>;
+    /**
+     * The expiration date and time in UTC ISO 8601 format of this policy exemption.
+     */
+    expiresOn?: pulumi.Input<string>;
+    /**
+     * The metadata for this policy exemption. This is a JSON string representing additional metadata that should be stored with the policy exemption.
+     */
+    metadata?: pulumi.Input<string>;
+    /**
+     * The name of the Policy Exemption. Changing this forces a new resource to be created.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * The ID of the Policy Assignment to be exempted at the specified Scope.
+     */
+    policyAssignmentId: pulumi.Input<string>;
+    /**
+     * The policy definition reference ID list when the associated policy assignment is an assignment of a policy set definition.
+     */
+    policyDefinitionReferenceIds?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The Subscription ID where the Policy Exemption should be applied. Changing this forces a new resource to be created.
+     */
+    subscriptionId: pulumi.Input<string>;
+}