pulumi-azure-native 2.25.1a1705492661__py3-none-any.whl → 2.26.1__py3-none-any.whl

pulumi_azure_native/__init__.py

@@ -12008,6 +12008,7 @@ _utilities.register(
    "azure-native:security:Connector": "Connector",
    "azure-native:security:CustomAssessmentAutomation": "CustomAssessmentAutomation",
    "azure-native:security:CustomEntityStoreAssignment": "CustomEntityStoreAssignment",
+   "azure-native:security:DefenderForStorage": "DefenderForStorage",
    "azure-native:security:DevOpsConfiguration": "DevOpsConfiguration",
    "azure-native:security:DeviceSecurityGroup": "DeviceSecurityGroup",
    "azure-native:security:GovernanceAssignment": "GovernanceAssignment",
@@ -12136,6 +12137,14 @@ _utilities.register(
    "azure-native:security/v20221120preview:APICollection": "APICollection"
   }
  },
+ {
+  "pkg": "azure-native",
+  "mod": "security/v20221201preview",
+  "fqn": "pulumi_azure_native.security.v20221201preview",
+  "classes": {
+   "azure-native:security/v20221201preview:DefenderForStorage": "DefenderForStorage"
+  }
+ },
  {
   "pkg": "azure-native",
   "mod": "security/v20230101preview",

pulumi_azure_native/security/__init__.py

@@ -21,6 +21,7 @@ from .azure_servers_setting import *
 from .connector import *
 from .custom_assessment_automation import *
 from .custom_entity_store_assignment import *
+from .defender_for_storage import *
 from .dev_ops_configuration import *
 from .device_security_group import *
 from .get_adaptive_application_control import *
@@ -38,6 +39,7 @@ from .get_azure_servers_setting import *
 from .get_connector import *
 from .get_custom_assessment_automation import *
 from .get_custom_entity_store_assignment import *
+from .get_defender_for_storage import *
 from .get_dev_ops_configuration import *
 from .get_device_security_group import *
 from .get_governance_assignment import *
@@ -99,6 +101,8 @@ if typing.TYPE_CHECKING:
     v20220701preview = __v20220701preview
     import pulumi_azure_native.security.v20221120preview as __v20221120preview
     v20221120preview = __v20221120preview
+    import pulumi_azure_native.security.v20221201preview as __v20221201preview
+    v20221201preview = __v20221201preview
     import pulumi_azure_native.security.v20230101preview as __v20230101preview
     v20230101preview = __v20230101preview
     import pulumi_azure_native.security.v20230201preview as __v20230201preview
@@ -128,6 +132,7 @@ else:
     v20220101preview = _utilities.lazy_import('pulumi_azure_native.security.v20220101preview')
     v20220701preview = _utilities.lazy_import('pulumi_azure_native.security.v20220701preview')
     v20221120preview = _utilities.lazy_import('pulumi_azure_native.security.v20221120preview')
+    v20221201preview = _utilities.lazy_import('pulumi_azure_native.security.v20221201preview')
     v20230101preview = _utilities.lazy_import('pulumi_azure_native.security.v20230101preview')
     v20230201preview = _utilities.lazy_import('pulumi_azure_native.security.v20230201preview')
     v20230301preview = _utilities.lazy_import('pulumi_azure_native.security.v20230301preview')

pulumi_azure_native/security/_inputs.py

@@ -109,6 +109,7 @@ __all__ = [
     'JitNetworkAccessRequestPortArgs',
     'JitNetworkAccessRequestVirtualMachineArgs',
     'JitNetworkAccessRequestArgs',
+    'MalwareScanningPropertiesArgs',
     'OnPremiseResourceDetailsArgs',
     'OnPremiseSqlResourceDetailsArgs',
     'PathRecommendationArgs',
@@ -124,6 +125,7 @@ __all__ = [
     'SecurityAssessmentPartnerDataArgs',
     'SecurityContactPropertiesAlertNotificationsArgs',
     'SecurityContactPropertiesNotificationsByRoleArgs',
+    'SensitiveDataDiscoveryPropertiesArgs',
     'ServicePrincipalPropertiesArgs',
     'StandardComponentPropertiesArgs',
     'SuppressionAlertsScopeArgs',
@@ -4811,6 +4813,62 @@ class JitNetworkAccessRequestArgs:
         pulumi.set(self, "justification", value)
 
 
+@pulumi.input_type
+class MalwareScanningPropertiesArgs:
+    def __init__(__self__, *,
+                 cap_gb_per_month: Optional[pulumi.Input[int]] = None,
+                 is_enabled: Optional[pulumi.Input[bool]] = None,
+                 scan_results_event_grid_topic_resource_id: Optional[pulumi.Input[str]] = None):
+        """
+        Properties of Malware Scanning.
+        :param pulumi.Input[int] cap_gb_per_month: Defines the max GB to be scanned per Month. Set to -1 if no capping is needed.
+        :param pulumi.Input[bool] is_enabled: Indicates whether On Upload malware scanning should be enabled.
+        :param pulumi.Input[str] scan_results_event_grid_topic_resource_id: Optional. Resource id of an Event Grid Topic to send scan results to.
+        """
+        if cap_gb_per_month is not None:
+            pulumi.set(__self__, "cap_gb_per_month", cap_gb_per_month)
+        if is_enabled is not None:
+            pulumi.set(__self__, "is_enabled", is_enabled)
+        if scan_results_event_grid_topic_resource_id is not None:
+            pulumi.set(__self__, "scan_results_event_grid_topic_resource_id", scan_results_event_grid_topic_resource_id)
+
+    @property
+    @pulumi.getter(name="capGBPerMonth")
+    def cap_gb_per_month(self) -> Optional[pulumi.Input[int]]:
+        """
+        Defines the max GB to be scanned per Month. Set to -1 if no capping is needed.
+        """
+        return pulumi.get(self, "cap_gb_per_month")
+
+    @cap_gb_per_month.setter
+    def cap_gb_per_month(self, value: Optional[pulumi.Input[int]]):
+        pulumi.set(self, "cap_gb_per_month", value)
+
+    @property
+    @pulumi.getter(name="isEnabled")
+    def is_enabled(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Indicates whether On Upload malware scanning should be enabled.
+        """
+        return pulumi.get(self, "is_enabled")
+
+    @is_enabled.setter
+    def is_enabled(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "is_enabled", value)
+
+    @property
+    @pulumi.getter(name="scanResultsEventGridTopicResourceId")
+    def scan_results_event_grid_topic_resource_id(self) -> Optional[pulumi.Input[str]]:
+        """
+        Optional. Resource id of an Event Grid Topic to send scan results to.
+        """
+        return pulumi.get(self, "scan_results_event_grid_topic_resource_id")
+
+    @scan_results_event_grid_topic_resource_id.setter
+    def scan_results_event_grid_topic_resource_id(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "scan_results_event_grid_topic_resource_id", value)
+
+
 @pulumi.input_type
 class OnPremiseResourceDetailsArgs:
     def __init__(__self__, *,
@@ -5814,6 +5872,30 @@ class SecurityContactPropertiesNotificationsByRoleArgs:
         pulumi.set(self, "state", value)
 
 
+@pulumi.input_type
+class SensitiveDataDiscoveryPropertiesArgs:
+    def __init__(__self__, *,
+                 is_enabled: Optional[pulumi.Input[bool]] = None):
+        """
+        Properties of Sensitive Data Discovery.
+        :param pulumi.Input[bool] is_enabled: Indicates whether Sensitive Data Discovery should be enabled.
+        """
+        if is_enabled is not None:
+            pulumi.set(__self__, "is_enabled", is_enabled)
+
+    @property
+    @pulumi.getter(name="isEnabled")
+    def is_enabled(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Indicates whether Sensitive Data Discovery should be enabled.
+        """
+        return pulumi.get(self, "is_enabled")
+
+    @is_enabled.setter
+    def is_enabled(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "is_enabled", value)
+
+
 @pulumi.input_type
 class ServicePrincipalPropertiesArgs:
     def __init__(__self__, *,

pulumi_azure_native/security/defender_for_storage.py

@@ -0,0 +1,273 @@
+# coding=utf-8
+# *** WARNING: this file was generated by pulumi-language-python. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import copy
+import warnings
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+from .. import _utilities
+from . import outputs
+from ._inputs import *
+
+__all__ = ['DefenderForStorageArgs', 'DefenderForStorage']
+
+@pulumi.input_type
+class DefenderForStorageArgs:
+    def __init__(__self__, *,
+                 resource_id: pulumi.Input[str],
+                 is_enabled: Optional[pulumi.Input[bool]] = None,
+                 malware_scanning: Optional[pulumi.Input['MalwareScanningPropertiesArgs']] = None,
+                 override_subscription_level_settings: Optional[pulumi.Input[bool]] = None,
+                 sensitive_data_discovery: Optional[pulumi.Input['SensitiveDataDiscoveryPropertiesArgs']] = None,
+                 setting_name: Optional[pulumi.Input[str]] = None):
+        """
+        The set of arguments for constructing a DefenderForStorage resource.
+        :param pulumi.Input[str] resource_id: The identifier of the resource.
+        :param pulumi.Input[bool] is_enabled: Indicates whether Defender for Storage is enabled on this storage account.
+        :param pulumi.Input['MalwareScanningPropertiesArgs'] malware_scanning: Properties of Malware Scanning.
+        :param pulumi.Input[bool] override_subscription_level_settings: Indicates whether the settings defined for this storage account should override the settings defined for the subscription.
+        :param pulumi.Input['SensitiveDataDiscoveryPropertiesArgs'] sensitive_data_discovery: Properties of Sensitive Data Discovery.
+        :param pulumi.Input[str] setting_name: Defender for Storage setting name.
+        """
+        pulumi.set(__self__, "resource_id", resource_id)
+        if is_enabled is not None:
+            pulumi.set(__self__, "is_enabled", is_enabled)
+        if malware_scanning is not None:
+            pulumi.set(__self__, "malware_scanning", malware_scanning)
+        if override_subscription_level_settings is not None:
+            pulumi.set(__self__, "override_subscription_level_settings", override_subscription_level_settings)
+        if sensitive_data_discovery is not None:
+            pulumi.set(__self__, "sensitive_data_discovery", sensitive_data_discovery)
+        if setting_name is not None:
+            pulumi.set(__self__, "setting_name", setting_name)
+
+    @property
+    @pulumi.getter(name="resourceId")
+    def resource_id(self) -> pulumi.Input[str]:
+        """
+        The identifier of the resource.
+        """
+        return pulumi.get(self, "resource_id")
+
+    @resource_id.setter
+    def resource_id(self, value: pulumi.Input[str]):
+        pulumi.set(self, "resource_id", value)
+
+    @property
+    @pulumi.getter(name="isEnabled")
+    def is_enabled(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Indicates whether Defender for Storage is enabled on this storage account.
+        """
+        return pulumi.get(self, "is_enabled")
+
+    @is_enabled.setter
+    def is_enabled(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "is_enabled", value)
+
+    @property
+    @pulumi.getter(name="malwareScanning")
+    def malware_scanning(self) -> Optional[pulumi.Input['MalwareScanningPropertiesArgs']]:
+        """
+        Properties of Malware Scanning.
+        """
+        return pulumi.get(self, "malware_scanning")
+
+    @malware_scanning.setter
+    def malware_scanning(self, value: Optional[pulumi.Input['MalwareScanningPropertiesArgs']]):
+        pulumi.set(self, "malware_scanning", value)
+
+    @property
+    @pulumi.getter(name="overrideSubscriptionLevelSettings")
+    def override_subscription_level_settings(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Indicates whether the settings defined for this storage account should override the settings defined for the subscription.
+        """
+        return pulumi.get(self, "override_subscription_level_settings")
+
+    @override_subscription_level_settings.setter
+    def override_subscription_level_settings(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "override_subscription_level_settings", value)
+
+    @property
+    @pulumi.getter(name="sensitiveDataDiscovery")
+    def sensitive_data_discovery(self) -> Optional[pulumi.Input['SensitiveDataDiscoveryPropertiesArgs']]:
+        """
+        Properties of Sensitive Data Discovery.
+        """
+        return pulumi.get(self, "sensitive_data_discovery")
+
+    @sensitive_data_discovery.setter
+    def sensitive_data_discovery(self, value: Optional[pulumi.Input['SensitiveDataDiscoveryPropertiesArgs']]):
+        pulumi.set(self, "sensitive_data_discovery", value)
+
+    @property
+    @pulumi.getter(name="settingName")
+    def setting_name(self) -> Optional[pulumi.Input[str]]:
+        """
+        Defender for Storage setting name.
+        """
+        return pulumi.get(self, "setting_name")
+
+    @setting_name.setter
+    def setting_name(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "setting_name", value)
+
+
+class DefenderForStorage(pulumi.CustomResource):
+    @overload
+    def __init__(__self__,
+                 resource_name: str,
+                 opts: Optional[pulumi.ResourceOptions] = None,
+                 is_enabled: Optional[pulumi.Input[bool]] = None,
+                 malware_scanning: Optional[pulumi.Input[pulumi.InputType['MalwareScanningPropertiesArgs']]] = None,
+                 override_subscription_level_settings: Optional[pulumi.Input[bool]] = None,
+                 resource_id: Optional[pulumi.Input[str]] = None,
+                 sensitive_data_discovery: Optional[pulumi.Input[pulumi.InputType['SensitiveDataDiscoveryPropertiesArgs']]] = None,
+                 setting_name: Optional[pulumi.Input[str]] = None,
+                 __props__=None):
+        """
+        The Defender for Storage resource.
+        Azure REST API version: 2022-12-01-preview.
+
+        :param str resource_name: The name of the resource.
+        :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[bool] is_enabled: Indicates whether Defender for Storage is enabled on this storage account.
+        :param pulumi.Input[pulumi.InputType['MalwareScanningPropertiesArgs']] malware_scanning: Properties of Malware Scanning.
+        :param pulumi.Input[bool] override_subscription_level_settings: Indicates whether the settings defined for this storage account should override the settings defined for the subscription.
+        :param pulumi.Input[str] resource_id: The identifier of the resource.
+        :param pulumi.Input[pulumi.InputType['SensitiveDataDiscoveryPropertiesArgs']] sensitive_data_discovery: Properties of Sensitive Data Discovery.
+        :param pulumi.Input[str] setting_name: Defender for Storage setting name.
+        """
+        ...
+    @overload
+    def __init__(__self__,
+                 resource_name: str,
+                 args: DefenderForStorageArgs,
+                 opts: Optional[pulumi.ResourceOptions] = None):
+        """
+        The Defender for Storage resource.
+        Azure REST API version: 2022-12-01-preview.
+
+        :param str resource_name: The name of the resource.
+        :param DefenderForStorageArgs args: The arguments to use to populate this resource's properties.
+        :param pulumi.ResourceOptions opts: Options for the resource.
+        """
+        ...
+    def __init__(__self__, resource_name: str, *args, **kwargs):
+        resource_args, opts = _utilities.get_resource_args_opts(DefenderForStorageArgs, pulumi.ResourceOptions, *args, **kwargs)
+        if resource_args is not None:
+            __self__._internal_init(resource_name, opts, **resource_args.__dict__)
+        else:
+            __self__._internal_init(resource_name, *args, **kwargs)
+
+    def _internal_init(__self__,
+                 resource_name: str,
+                 opts: Optional[pulumi.ResourceOptions] = None,
+                 is_enabled: Optional[pulumi.Input[bool]] = None,
+                 malware_scanning: Optional[pulumi.Input[pulumi.InputType['MalwareScanningPropertiesArgs']]] = None,
+                 override_subscription_level_settings: Optional[pulumi.Input[bool]] = None,
+                 resource_id: Optional[pulumi.Input[str]] = None,
+                 sensitive_data_discovery: Optional[pulumi.Input[pulumi.InputType['SensitiveDataDiscoveryPropertiesArgs']]] = None,
+                 setting_name: Optional[pulumi.Input[str]] = None,
+                 __props__=None):
+        opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
+        if not isinstance(opts, pulumi.ResourceOptions):
+            raise TypeError('Expected resource options to be a ResourceOptions instance')
+        if opts.id is None:
+            if __props__ is not None:
+                raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
+            __props__ = DefenderForStorageArgs.__new__(DefenderForStorageArgs)
+
+            __props__.__dict__["is_enabled"] = is_enabled
+            __props__.__dict__["malware_scanning"] = malware_scanning
+            __props__.__dict__["override_subscription_level_settings"] = override_subscription_level_settings
+            if resource_id is None and not opts.urn:
+                raise TypeError("Missing required property 'resource_id'")
+            __props__.__dict__["resource_id"] = resource_id
+            __props__.__dict__["sensitive_data_discovery"] = sensitive_data_discovery
+            __props__.__dict__["setting_name"] = setting_name
+            __props__.__dict__["name"] = None
+            __props__.__dict__["type"] = None
+        alias_opts = pulumi.ResourceOptions(aliases=[pulumi.Alias(type_="azure-native:security/v20221201preview:DefenderForStorage")])
+        opts = pulumi.ResourceOptions.merge(opts, alias_opts)
+        super(DefenderForStorage, __self__).__init__(
+            'azure-native:security:DefenderForStorage',
+            resource_name,
+            __props__,
+            opts)
+
+    @staticmethod
+    def get(resource_name: str,
+            id: pulumi.Input[str],
+            opts: Optional[pulumi.ResourceOptions] = None) -> 'DefenderForStorage':
+        """
+        Get an existing DefenderForStorage resource's state with the given name, id, and optional extra
+        properties used to qualify the lookup.
+
+        :param str resource_name: The unique name of the resulting resource.
+        :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
+        :param pulumi.ResourceOptions opts: Options for the resource.
+        """
+        opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
+
+        __props__ = DefenderForStorageArgs.__new__(DefenderForStorageArgs)
+
+        __props__.__dict__["is_enabled"] = None
+        __props__.__dict__["malware_scanning"] = None
+        __props__.__dict__["name"] = None
+        __props__.__dict__["override_subscription_level_settings"] = None
+        __props__.__dict__["sensitive_data_discovery"] = None
+        __props__.__dict__["type"] = None
+        return DefenderForStorage(resource_name, opts=opts, __props__=__props__)
+
+    @property
+    @pulumi.getter(name="isEnabled")
+    def is_enabled(self) -> pulumi.Output[Optional[bool]]:
+        """
+        Indicates whether Defender for Storage is enabled on this storage account.
+        """
+        return pulumi.get(self, "is_enabled")
+
+    @property
+    @pulumi.getter(name="malwareScanning")
+    def malware_scanning(self) -> pulumi.Output[Optional['outputs.MalwareScanningPropertiesResponse']]:
+        """
+        Properties of Malware Scanning.
+        """
+        return pulumi.get(self, "malware_scanning")
+
+    @property
+    @pulumi.getter
+    def name(self) -> pulumi.Output[str]:
+        """
+        Resource name
+        """
+        return pulumi.get(self, "name")
+
+    @property
+    @pulumi.getter(name="overrideSubscriptionLevelSettings")
+    def override_subscription_level_settings(self) -> pulumi.Output[Optional[bool]]:
+        """
+        Indicates whether the settings defined for this storage account should override the settings defined for the subscription.
+        """
+        return pulumi.get(self, "override_subscription_level_settings")
+
+    @property
+    @pulumi.getter(name="sensitiveDataDiscovery")
+    def sensitive_data_discovery(self) -> pulumi.Output[Optional['outputs.SensitiveDataDiscoveryPropertiesResponse']]:
+        """
+        Properties of Sensitive Data Discovery.
+        """
+        return pulumi.get(self, "sensitive_data_discovery")
+
+    @property
+    @pulumi.getter
+    def type(self) -> pulumi.Output[str]:
+        """
+        Resource type
+        """
+        return pulumi.get(self, "type")
+

pulumi_azure_native/security/get_defender_for_storage.py

@@ -0,0 +1,159 @@
+# coding=utf-8
+# *** WARNING: this file was generated by pulumi-language-python. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import copy
+import warnings
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+from .. import _utilities
+from . import outputs
+
+__all__ = [
+    'GetDefenderForStorageResult',
+    'AwaitableGetDefenderForStorageResult',
+    'get_defender_for_storage',
+    'get_defender_for_storage_output',
+]
+
+@pulumi.output_type
+class GetDefenderForStorageResult:
+    """
+    The Defender for Storage resource.
+    """
+    def __init__(__self__, id=None, is_enabled=None, malware_scanning=None, name=None, override_subscription_level_settings=None, sensitive_data_discovery=None, type=None):
+        if id and not isinstance(id, str):
+            raise TypeError("Expected argument 'id' to be a str")
+        pulumi.set(__self__, "id", id)
+        if is_enabled and not isinstance(is_enabled, bool):
+            raise TypeError("Expected argument 'is_enabled' to be a bool")
+        pulumi.set(__self__, "is_enabled", is_enabled)
+        if malware_scanning and not isinstance(malware_scanning, dict):
+            raise TypeError("Expected argument 'malware_scanning' to be a dict")
+        pulumi.set(__self__, "malware_scanning", malware_scanning)
+        if name and not isinstance(name, str):
+            raise TypeError("Expected argument 'name' to be a str")
+        pulumi.set(__self__, "name", name)
+        if override_subscription_level_settings and not isinstance(override_subscription_level_settings, bool):
+            raise TypeError("Expected argument 'override_subscription_level_settings' to be a bool")
+        pulumi.set(__self__, "override_subscription_level_settings", override_subscription_level_settings)
+        if sensitive_data_discovery and not isinstance(sensitive_data_discovery, dict):
+            raise TypeError("Expected argument 'sensitive_data_discovery' to be a dict")
+        pulumi.set(__self__, "sensitive_data_discovery", sensitive_data_discovery)
+        if type and not isinstance(type, str):
+            raise TypeError("Expected argument 'type' to be a str")
+        pulumi.set(__self__, "type", type)
+
+    @property
+    @pulumi.getter
+    def id(self) -> str:
+        """
+        Resource Id
+        """
+        return pulumi.get(self, "id")
+
+    @property
+    @pulumi.getter(name="isEnabled")
+    def is_enabled(self) -> Optional[bool]:
+        """
+        Indicates whether Defender for Storage is enabled on this storage account.
+        """
+        return pulumi.get(self, "is_enabled")
+
+    @property
+    @pulumi.getter(name="malwareScanning")
+    def malware_scanning(self) -> Optional['outputs.MalwareScanningPropertiesResponse']:
+        """
+        Properties of Malware Scanning.
+        """
+        return pulumi.get(self, "malware_scanning")
+
+    @property
+    @pulumi.getter
+    def name(self) -> str:
+        """
+        Resource name
+        """
+        return pulumi.get(self, "name")
+
+    @property
+    @pulumi.getter(name="overrideSubscriptionLevelSettings")
+    def override_subscription_level_settings(self) -> Optional[bool]:
+        """
+        Indicates whether the settings defined for this storage account should override the settings defined for the subscription.
+        """
+        return pulumi.get(self, "override_subscription_level_settings")
+
+    @property
+    @pulumi.getter(name="sensitiveDataDiscovery")
+    def sensitive_data_discovery(self) -> Optional['outputs.SensitiveDataDiscoveryPropertiesResponse']:
+        """
+        Properties of Sensitive Data Discovery.
+        """
+        return pulumi.get(self, "sensitive_data_discovery")
+
+    @property
+    @pulumi.getter
+    def type(self) -> str:
+        """
+        Resource type
+        """
+        return pulumi.get(self, "type")
+
+
+class AwaitableGetDefenderForStorageResult(GetDefenderForStorageResult):
+    # pylint: disable=using-constant-test
+    def __await__(self):
+        if False:
+            yield self
+        return GetDefenderForStorageResult(
+            id=self.id,
+            is_enabled=self.is_enabled,
+            malware_scanning=self.malware_scanning,
+            name=self.name,
+            override_subscription_level_settings=self.override_subscription_level_settings,
+            sensitive_data_discovery=self.sensitive_data_discovery,
+            type=self.type)
+
+
+def get_defender_for_storage(resource_id: Optional[str] = None,
+                             setting_name: Optional[str] = None,
+                             opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetDefenderForStorageResult:
+    """
+    Gets the Defender for Storage settings for the specified storage account.
+    Azure REST API version: 2022-12-01-preview.
+
+
+    :param str resource_id: The identifier of the resource.
+    :param str setting_name: Defender for Storage setting name.
+    """
+    __args__ = dict()
+    __args__['resourceId'] = resource_id
+    __args__['settingName'] = setting_name
+    opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke('azure-native:security:getDefenderForStorage', __args__, opts=opts, typ=GetDefenderForStorageResult).value
+
+    return AwaitableGetDefenderForStorageResult(
+        id=pulumi.get(__ret__, 'id'),
+        is_enabled=pulumi.get(__ret__, 'is_enabled'),
+        malware_scanning=pulumi.get(__ret__, 'malware_scanning'),
+        name=pulumi.get(__ret__, 'name'),
+        override_subscription_level_settings=pulumi.get(__ret__, 'override_subscription_level_settings'),
+        sensitive_data_discovery=pulumi.get(__ret__, 'sensitive_data_discovery'),
+        type=pulumi.get(__ret__, 'type'))
+
+
+@_utilities.lift_output_func(get_defender_for_storage)
+def get_defender_for_storage_output(resource_id: Optional[pulumi.Input[str]] = None,
+                                    setting_name: Optional[pulumi.Input[str]] = None,
+                                    opts: Optional[pulumi.InvokeOptions] = None) -> pulumi.Output[GetDefenderForStorageResult]:
+    """
+    Gets the Defender for Storage settings for the specified storage account.
+    Azure REST API version: 2022-12-01-preview.
+
+
+    :param str resource_id: The identifier of the resource.
+    :param str setting_name: Defender for Storage setting name.
+    """
+    ...