pulumi-azure-native 2.21.2__py3-none-any.whl → 2.21.3a1702685082__py3-none-any.whl

pulumi_azure_native/maintenance/v20231001preview/outputs.py

@@ -0,0 +1,498 @@
+# coding=utf-8
+# *** WARNING: this file was generated by pulumi-language-python. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import copy
+import warnings
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+from ... import _utilities
+from . import outputs
+from ._enums import *
+
+__all__ = [
+    'ConfigurationAssignmentFilterPropertiesResponse',
+    'InputLinuxParametersResponse',
+    'InputPatchConfigurationResponse',
+    'InputWindowsParametersResponse',
+    'SystemDataResponse',
+    'TagSettingsPropertiesResponse',
+]
+
+@pulumi.output_type
+class ConfigurationAssignmentFilterPropertiesResponse(dict):
+    """
+    Azure query for the update configuration.
+    """
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "osTypes":
+            suggest = "os_types"
+        elif key == "resourceGroups":
+            suggest = "resource_groups"
+        elif key == "resourceTypes":
+            suggest = "resource_types"
+        elif key == "tagSettings":
+            suggest = "tag_settings"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in ConfigurationAssignmentFilterPropertiesResponse. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        ConfigurationAssignmentFilterPropertiesResponse.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        ConfigurationAssignmentFilterPropertiesResponse.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 locations: Optional[Sequence[str]] = None,
+                 os_types: Optional[Sequence[str]] = None,
+                 resource_groups: Optional[Sequence[str]] = None,
+                 resource_types: Optional[Sequence[str]] = None,
+                 tag_settings: Optional['outputs.TagSettingsPropertiesResponse'] = None):
+        """
+        Azure query for the update configuration.
+        :param Sequence[str] locations: List of locations to scope the query to.
+        :param Sequence[str] os_types: List of allowed operating systems.
+        :param Sequence[str] resource_groups: List of allowed resource groups.
+        :param Sequence[str] resource_types: List of allowed resources.
+        :param 'TagSettingsPropertiesResponse' tag_settings: Tag settings for the VM.
+        """
+        if locations is not None:
+            pulumi.set(__self__, "locations", locations)
+        if os_types is not None:
+            pulumi.set(__self__, "os_types", os_types)
+        if resource_groups is not None:
+            pulumi.set(__self__, "resource_groups", resource_groups)
+        if resource_types is not None:
+            pulumi.set(__self__, "resource_types", resource_types)
+        if tag_settings is not None:
+            pulumi.set(__self__, "tag_settings", tag_settings)
+
+    @property
+    @pulumi.getter
+    def locations(self) -> Optional[Sequence[str]]:
+        """
+        List of locations to scope the query to.
+        """
+        return pulumi.get(self, "locations")
+
+    @property
+    @pulumi.getter(name="osTypes")
+    def os_types(self) -> Optional[Sequence[str]]:
+        """
+        List of allowed operating systems.
+        """
+        return pulumi.get(self, "os_types")
+
+    @property
+    @pulumi.getter(name="resourceGroups")
+    def resource_groups(self) -> Optional[Sequence[str]]:
+        """
+        List of allowed resource groups.
+        """
+        return pulumi.get(self, "resource_groups")
+
+    @property
+    @pulumi.getter(name="resourceTypes")
+    def resource_types(self) -> Optional[Sequence[str]]:
+        """
+        List of allowed resources.
+        """
+        return pulumi.get(self, "resource_types")
+
+    @property
+    @pulumi.getter(name="tagSettings")
+    def tag_settings(self) -> Optional['outputs.TagSettingsPropertiesResponse']:
+        """
+        Tag settings for the VM.
+        """
+        return pulumi.get(self, "tag_settings")
+
+
+@pulumi.output_type
+class InputLinuxParametersResponse(dict):
+    """
+    Input properties for patching a Linux machine.
+    """
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "classificationsToInclude":
+            suggest = "classifications_to_include"
+        elif key == "packageNameMasksToExclude":
+            suggest = "package_name_masks_to_exclude"
+        elif key == "packageNameMasksToInclude":
+            suggest = "package_name_masks_to_include"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in InputLinuxParametersResponse. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        InputLinuxParametersResponse.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        InputLinuxParametersResponse.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 classifications_to_include: Optional[Sequence[str]] = None,
+                 package_name_masks_to_exclude: Optional[Sequence[str]] = None,
+                 package_name_masks_to_include: Optional[Sequence[str]] = None):
+        """
+        Input properties for patching a Linux machine.
+        :param Sequence[str] classifications_to_include: Classification category of patches to be patched
+        :param Sequence[str] package_name_masks_to_exclude: Package names to be excluded for patching.
+        :param Sequence[str] package_name_masks_to_include: Package names to be included for patching.
+        """
+        if classifications_to_include is not None:
+            pulumi.set(__self__, "classifications_to_include", classifications_to_include)
+        if package_name_masks_to_exclude is not None:
+            pulumi.set(__self__, "package_name_masks_to_exclude", package_name_masks_to_exclude)
+        if package_name_masks_to_include is not None:
+            pulumi.set(__self__, "package_name_masks_to_include", package_name_masks_to_include)
+
+    @property
+    @pulumi.getter(name="classificationsToInclude")
+    def classifications_to_include(self) -> Optional[Sequence[str]]:
+        """
+        Classification category of patches to be patched
+        """
+        return pulumi.get(self, "classifications_to_include")
+
+    @property
+    @pulumi.getter(name="packageNameMasksToExclude")
+    def package_name_masks_to_exclude(self) -> Optional[Sequence[str]]:
+        """
+        Package names to be excluded for patching.
+        """
+        return pulumi.get(self, "package_name_masks_to_exclude")
+
+    @property
+    @pulumi.getter(name="packageNameMasksToInclude")
+    def package_name_masks_to_include(self) -> Optional[Sequence[str]]:
+        """
+        Package names to be included for patching.
+        """
+        return pulumi.get(self, "package_name_masks_to_include")
+
+
+@pulumi.output_type
+class InputPatchConfigurationResponse(dict):
+    """
+    Input configuration for a patch run
+    """
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "linuxParameters":
+            suggest = "linux_parameters"
+        elif key == "rebootSetting":
+            suggest = "reboot_setting"
+        elif key == "windowsParameters":
+            suggest = "windows_parameters"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in InputPatchConfigurationResponse. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        InputPatchConfigurationResponse.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        InputPatchConfigurationResponse.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 linux_parameters: Optional['outputs.InputLinuxParametersResponse'] = None,
+                 reboot_setting: Optional[str] = None,
+                 windows_parameters: Optional['outputs.InputWindowsParametersResponse'] = None):
+        """
+        Input configuration for a patch run
+        :param 'InputLinuxParametersResponse' linux_parameters: Input parameters specific to patching Linux machine. For Windows machines, do not pass this property.
+        :param str reboot_setting: Possible reboot preference as defined by the user based on which it would be decided to reboot the machine or not after the patch operation is completed.
+        :param 'InputWindowsParametersResponse' windows_parameters: Input parameters specific to patching a Windows machine. For Linux machines, do not pass this property.
+        """
+        if linux_parameters is not None:
+            pulumi.set(__self__, "linux_parameters", linux_parameters)
+        if reboot_setting is None:
+            reboot_setting = 'IfRequired'
+        if reboot_setting is not None:
+            pulumi.set(__self__, "reboot_setting", reboot_setting)
+        if windows_parameters is not None:
+            pulumi.set(__self__, "windows_parameters", windows_parameters)
+
+    @property
+    @pulumi.getter(name="linuxParameters")
+    def linux_parameters(self) -> Optional['outputs.InputLinuxParametersResponse']:
+        """
+        Input parameters specific to patching Linux machine. For Windows machines, do not pass this property.
+        """
+        return pulumi.get(self, "linux_parameters")
+
+    @property
+    @pulumi.getter(name="rebootSetting")
+    def reboot_setting(self) -> Optional[str]:
+        """
+        Possible reboot preference as defined by the user based on which it would be decided to reboot the machine or not after the patch operation is completed.
+        """
+        return pulumi.get(self, "reboot_setting")
+
+    @property
+    @pulumi.getter(name="windowsParameters")
+    def windows_parameters(self) -> Optional['outputs.InputWindowsParametersResponse']:
+        """
+        Input parameters specific to patching a Windows machine. For Linux machines, do not pass this property.
+        """
+        return pulumi.get(self, "windows_parameters")
+
+
+@pulumi.output_type
+class InputWindowsParametersResponse(dict):
+    """
+    Input properties for patching a Windows machine.
+    """
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "classificationsToInclude":
+            suggest = "classifications_to_include"
+        elif key == "excludeKbsRequiringReboot":
+            suggest = "exclude_kbs_requiring_reboot"
+        elif key == "kbNumbersToExclude":
+            suggest = "kb_numbers_to_exclude"
+        elif key == "kbNumbersToInclude":
+            suggest = "kb_numbers_to_include"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in InputWindowsParametersResponse. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        InputWindowsParametersResponse.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        InputWindowsParametersResponse.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 classifications_to_include: Optional[Sequence[str]] = None,
+                 exclude_kbs_requiring_reboot: Optional[bool] = None,
+                 kb_numbers_to_exclude: Optional[Sequence[str]] = None,
+                 kb_numbers_to_include: Optional[Sequence[str]] = None):
+        """
+        Input properties for patching a Windows machine.
+        :param Sequence[str] classifications_to_include: Classification category of patches to be patched
+        :param bool exclude_kbs_requiring_reboot: Exclude patches which need reboot
+        :param Sequence[str] kb_numbers_to_exclude: Windows KBID to be excluded for patching.
+        :param Sequence[str] kb_numbers_to_include: Windows KBID to be included for patching.
+        """
+        if classifications_to_include is not None:
+            pulumi.set(__self__, "classifications_to_include", classifications_to_include)
+        if exclude_kbs_requiring_reboot is not None:
+            pulumi.set(__self__, "exclude_kbs_requiring_reboot", exclude_kbs_requiring_reboot)
+        if kb_numbers_to_exclude is not None:
+            pulumi.set(__self__, "kb_numbers_to_exclude", kb_numbers_to_exclude)
+        if kb_numbers_to_include is not None:
+            pulumi.set(__self__, "kb_numbers_to_include", kb_numbers_to_include)
+
+    @property
+    @pulumi.getter(name="classificationsToInclude")
+    def classifications_to_include(self) -> Optional[Sequence[str]]:
+        """
+        Classification category of patches to be patched
+        """
+        return pulumi.get(self, "classifications_to_include")
+
+    @property
+    @pulumi.getter(name="excludeKbsRequiringReboot")
+    def exclude_kbs_requiring_reboot(self) -> Optional[bool]:
+        """
+        Exclude patches which need reboot
+        """
+        return pulumi.get(self, "exclude_kbs_requiring_reboot")
+
+    @property
+    @pulumi.getter(name="kbNumbersToExclude")
+    def kb_numbers_to_exclude(self) -> Optional[Sequence[str]]:
+        """
+        Windows KBID to be excluded for patching.
+        """
+        return pulumi.get(self, "kb_numbers_to_exclude")
+
+    @property
+    @pulumi.getter(name="kbNumbersToInclude")
+    def kb_numbers_to_include(self) -> Optional[Sequence[str]]:
+        """
+        Windows KBID to be included for patching.
+        """
+        return pulumi.get(self, "kb_numbers_to_include")
+
+
+@pulumi.output_type
+class SystemDataResponse(dict):
+    """
+    Metadata pertaining to creation and last modification of the resource.
+    """
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "createdAt":
+            suggest = "created_at"
+        elif key == "createdBy":
+            suggest = "created_by"
+        elif key == "createdByType":
+            suggest = "created_by_type"
+        elif key == "lastModifiedAt":
+            suggest = "last_modified_at"
+        elif key == "lastModifiedBy":
+            suggest = "last_modified_by"
+        elif key == "lastModifiedByType":
+            suggest = "last_modified_by_type"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in SystemDataResponse. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        SystemDataResponse.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        SystemDataResponse.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 created_at: Optional[str] = None,
+                 created_by: Optional[str] = None,
+                 created_by_type: Optional[str] = None,
+                 last_modified_at: Optional[str] = None,
+                 last_modified_by: Optional[str] = None,
+                 last_modified_by_type: Optional[str] = None):
+        """
+        Metadata pertaining to creation and last modification of the resource.
+        :param str created_at: The timestamp of resource creation (UTC).
+        :param str created_by: The identity that created the resource.
+        :param str created_by_type: The type of identity that created the resource.
+        :param str last_modified_at: The timestamp of resource last modification (UTC)
+        :param str last_modified_by: The identity that last modified the resource.
+        :param str last_modified_by_type: The type of identity that last modified the resource.
+        """
+        if created_at is not None:
+            pulumi.set(__self__, "created_at", created_at)
+        if created_by is not None:
+            pulumi.set(__self__, "created_by", created_by)
+        if created_by_type is not None:
+            pulumi.set(__self__, "created_by_type", created_by_type)
+        if last_modified_at is not None:
+            pulumi.set(__self__, "last_modified_at", last_modified_at)
+        if last_modified_by is not None:
+            pulumi.set(__self__, "last_modified_by", last_modified_by)
+        if last_modified_by_type is not None:
+            pulumi.set(__self__, "last_modified_by_type", last_modified_by_type)
+
+    @property
+    @pulumi.getter(name="createdAt")
+    def created_at(self) -> Optional[str]:
+        """
+        The timestamp of resource creation (UTC).
+        """
+        return pulumi.get(self, "created_at")
+
+    @property
+    @pulumi.getter(name="createdBy")
+    def created_by(self) -> Optional[str]:
+        """
+        The identity that created the resource.
+        """
+        return pulumi.get(self, "created_by")
+
+    @property
+    @pulumi.getter(name="createdByType")
+    def created_by_type(self) -> Optional[str]:
+        """
+        The type of identity that created the resource.
+        """
+        return pulumi.get(self, "created_by_type")
+
+    @property
+    @pulumi.getter(name="lastModifiedAt")
+    def last_modified_at(self) -> Optional[str]:
+        """
+        The timestamp of resource last modification (UTC)
+        """
+        return pulumi.get(self, "last_modified_at")
+
+    @property
+    @pulumi.getter(name="lastModifiedBy")
+    def last_modified_by(self) -> Optional[str]:
+        """
+        The identity that last modified the resource.
+        """
+        return pulumi.get(self, "last_modified_by")
+
+    @property
+    @pulumi.getter(name="lastModifiedByType")
+    def last_modified_by_type(self) -> Optional[str]:
+        """
+        The type of identity that last modified the resource.
+        """
+        return pulumi.get(self, "last_modified_by_type")
+
+
+@pulumi.output_type
+class TagSettingsPropertiesResponse(dict):
+    """
+    Tag filter information for the VM.
+    """
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "filterOperator":
+            suggest = "filter_operator"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in TagSettingsPropertiesResponse. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        TagSettingsPropertiesResponse.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        TagSettingsPropertiesResponse.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 filter_operator: Optional[str] = None,
+                 tags: Optional[Mapping[str, Sequence[str]]] = None):
+        """
+        Tag filter information for the VM.
+        :param str filter_operator: Filter VMs by Any or All specified tags.
+        :param Mapping[str, Sequence[str]] tags: Dictionary of tags with its list of values.
+        """
+        if filter_operator is not None:
+            pulumi.set(__self__, "filter_operator", filter_operator)
+        if tags is not None:
+            pulumi.set(__self__, "tags", tags)
+
+    @property
+    @pulumi.getter(name="filterOperator")
+    def filter_operator(self) -> Optional[str]:
+        """
+        Filter VMs by Any or All specified tags.
+        """
+        return pulumi.get(self, "filter_operator")
+
+    @property
+    @pulumi.getter
+    def tags(self) -> Optional[Mapping[str, Sequence[str]]]:
+        """
+        Dictionary of tags with its list of values.
+        """
+        return pulumi.get(self, "tags")
+
+

pulumi_azure_native/security/__init__.py

@@ -44,6 +44,7 @@ from .get_governance_assignment import *
 from .get_governance_rule import *
 from .get_iot_security_solution import *
 from .get_jit_network_access_policy import *
+from .get_pricing import *
 from .get_security_connector import *
 from .get_security_connector_application import *
 from .get_security_contact import *
@@ -60,6 +61,7 @@ from .list_azure_dev_ops_org_available import *
 from .list_git_hub_owner_available import *
 from .list_git_lab_group_available import *
 from .list_git_lab_subgroup import *
+from .pricing import *
 from .security_connector import *
 from .security_connector_application import *
 from .security_contact import *
@@ -111,6 +113,8 @@ if typing.TYPE_CHECKING:
     v20231001preview = __v20231001preview
     import pulumi_azure_native.security.v20231115 as __v20231115
     v20231115 = __v20231115
+    import pulumi_azure_native.security.v20240101 as __v20240101
+    v20240101 = __v20240101
 else:
     v20170801preview = _utilities.lazy_import('pulumi_azure_native.security.v20170801preview')
     v20190101 = _utilities.lazy_import('pulumi_azure_native.security.v20190101')
@@ -131,4 +135,5 @@ else:
     v20230901preview = _utilities.lazy_import('pulumi_azure_native.security.v20230901preview')
     v20231001preview = _utilities.lazy_import('pulumi_azure_native.security.v20231001preview')
     v20231115 = _utilities.lazy_import('pulumi_azure_native.security.v20231115')
+    v20240101 = _utilities.lazy_import('pulumi_azure_native.security.v20240101')
 

pulumi_azure_native/security/_enums.py

@@ -18,6 +18,7 @@ __all__ = [
     'CloudName',
     'DataSource',
     'DevOpsProvisioningState',
+    'Enforce',
     'EnvironmentType',
     'EventSource',
     'ExportData',
@@ -25,10 +26,12 @@ __all__ = [
     'GovernanceRuleSourceResourceType',
     'GovernanceRuleType',
     'ImplementationEffort',
+    'IsEnabled',
     'MinimalSeverity',
     'OfferingType',
     'Operator',
     'OrganizationMembershipType',
+    'PricingTier',
     'PropertyType',
     'Protocol',
     'RecommendationConfigStatus',
@@ -219,6 +222,20 @@ class DevOpsProvisioningState(str, Enum):
     DELETION_FAILURE = "DeletionFailure"
 
 
+class Enforce(str, Enum):
+    """
+    If set to "False", it allows the descendants of this scope to override the pricing configuration set on this scope (allows setting inherited="False"). If set to "True", it prevents overrides and forces this pricing configuration on all the descendants of this scope. This field is only available for subscription-level pricing.
+    """
+    FALSE = "False"
+    """
+    Allows the descendants of this scope to override the pricing configuration set on this scope (allows setting inherited="False")
+    """
+    TRUE = "True"
+    """
+    Prevents overrides and forces the current scope's pricing configuration to all descendants
+    """
+
+
 class EnvironmentType(str, Enum):
     """
     The type of the environment data.
@@ -301,6 +318,20 @@ class ImplementationEffort(str, Enum):
     HIGH = "High"
 
 
+class IsEnabled(str, Enum):
+    """
+    Indicates whether the extension is enabled.
+    """
+    TRUE = "True"
+    """
+    Indicates the extension is enabled
+    """
+    FALSE = "False"
+    """
+    Indicates the extension is disabled
+    """
+
+
 class MinimalSeverity(str, Enum):
     """
     Defines the minimal alert severity which will be sent as email notifications
@@ -392,6 +423,20 @@ class OrganizationMembershipType(str, Enum):
     ORGANIZATION = "Organization"
 
 
+class PricingTier(str, Enum):
+    """
+    Indicates whether the Defender plan is enabled on the selected scope. Microsoft Defender for Cloud is provided in two pricing tiers: free and standard. The standard tier offers advanced security capabilities, while the free tier offers basic security features.
+    """
+    FREE = "Free"
+    """
+    Get free Microsoft Defender for Cloud experience with basic security features
+    """
+    STANDARD = "Standard"
+    """
+    Get the standard Microsoft Defender for Cloud experience with advanced security features
+    """
+
+
 class PropertyType(str, Enum):
     """
     The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]

pulumi_azure_native/security/_inputs.py

@@ -89,6 +89,7 @@ __all__ = [
     'DefenderForServersGcpOfferingArgs',
     'DenylistCustomAlertRuleArgs',
     'DevOpsConfigurationPropertiesArgs',
+    'ExtensionArgs',
     'GcpCredentialsDetailsPropertiesArgs',
     'GcpOrganizationalDataMemberArgs',
     'GcpOrganizationalDataOrganizationArgs',
@@ -3612,6 +3613,68 @@ class DevOpsConfigurationPropertiesArgs:
         pulumi.set(self, "top_level_inventory_list", value)
 
 
+@pulumi.input_type
+class ExtensionArgs:
+    def __init__(__self__, *,
+                 is_enabled: pulumi.Input[Union[str, 'IsEnabled']],
+                 name: pulumi.Input[str],
+                 additional_extension_properties: Optional[Any] = None):
+        """
+        A plan's extension properties
+        :param pulumi.Input[Union[str, 'IsEnabled']] is_enabled: Indicates whether the extension is enabled.
+        :param pulumi.Input[str] name: The extension name. Supported values are: <br><br>**AgentlessDiscoveryForKubernetes** - API-based discovery of information about Kubernetes cluster architecture, workload objects, and setup. Required for Kubernetes inventory, identity and network exposure detection, attack path analysis and risk hunting as part of the cloud security explorer.
+               Available for CloudPosture plan.<br><br>**OnUploadMalwareScanning** - Limits the GB to be scanned per month for each storage account within the subscription. Once this limit reached on a given storage account, Blobs won't be scanned during current calendar month.
+               Available for StorageAccounts plan.<br><br>**SensitiveDataDiscovery** - Sensitive data discovery identifies Blob storage container with sensitive data such as credentials, credit cards, and more, to help prioritize and investigate security events.
+               Available for StorageAccounts and CloudPosture plans.<br><br>**ContainerRegistriesVulnerabilityAssessments** - Provides vulnerability management for images stored in your container registries.
+               Available for CloudPosture and Containers plans.
+        :param Any additional_extension_properties: Property values associated with the extension.
+        """
+        pulumi.set(__self__, "is_enabled", is_enabled)
+        pulumi.set(__self__, "name", name)
+        if additional_extension_properties is not None:
+            pulumi.set(__self__, "additional_extension_properties", additional_extension_properties)
+
+    @property
+    @pulumi.getter(name="isEnabled")
+    def is_enabled(self) -> pulumi.Input[Union[str, 'IsEnabled']]:
+        """
+        Indicates whether the extension is enabled.
+        """
+        return pulumi.get(self, "is_enabled")
+
+    @is_enabled.setter
+    def is_enabled(self, value: pulumi.Input[Union[str, 'IsEnabled']]):
+        pulumi.set(self, "is_enabled", value)
+
+    @property
+    @pulumi.getter
+    def name(self) -> pulumi.Input[str]:
+        """
+        The extension name. Supported values are: <br><br>**AgentlessDiscoveryForKubernetes** - API-based discovery of information about Kubernetes cluster architecture, workload objects, and setup. Required for Kubernetes inventory, identity and network exposure detection, attack path analysis and risk hunting as part of the cloud security explorer.
+        Available for CloudPosture plan.<br><br>**OnUploadMalwareScanning** - Limits the GB to be scanned per month for each storage account within the subscription. Once this limit reached on a given storage account, Blobs won't be scanned during current calendar month.
+        Available for StorageAccounts plan.<br><br>**SensitiveDataDiscovery** - Sensitive data discovery identifies Blob storage container with sensitive data such as credentials, credit cards, and more, to help prioritize and investigate security events.
+        Available for StorageAccounts and CloudPosture plans.<br><br>**ContainerRegistriesVulnerabilityAssessments** - Provides vulnerability management for images stored in your container registries.
+        Available for CloudPosture and Containers plans.
+        """
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: pulumi.Input[str]):
+        pulumi.set(self, "name", value)
+
+    @property
+    @pulumi.getter(name="additionalExtensionProperties")
+    def additional_extension_properties(self) -> Optional[Any]:
+        """
+        Property values associated with the extension.
+        """
+        return pulumi.get(self, "additional_extension_properties")
+
+    @additional_extension_properties.setter
+    def additional_extension_properties(self, value: Optional[Any]):
+        pulumi.set(self, "additional_extension_properties", value)
+
+
 @pulumi.input_type
 class GcpCredentialsDetailsPropertiesArgs:
     def __init__(__self__, *,