pulumi-azure-native 2.36.1a1712854250__py3-none-any.whl → 2.36.1a1713161317__py3-none-any.whl

pulumi_azure_native/authorization/v20240401/_inputs.py

@@ -0,0 +1,276 @@
+# coding=utf-8
+# *** WARNING: this file was generated by pulumi-language-python. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import copy
+import warnings
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+from ... import _utilities
+from ._enums import *
+
+__all__ = [
+    'IdentityArgs',
+    'NonComplianceMessageArgs',
+    'OverrideArgs',
+    'ParameterValuesValueArgs',
+    'ResourceSelectorArgs',
+    'SelectorArgs',
+]
+
+@pulumi.input_type
+class IdentityArgs:
+    def __init__(__self__, *,
+                 type: Optional[pulumi.Input['ResourceIdentityType']] = None,
+                 user_assigned_identities: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
+        """
+        Identity for the resource.  Policy assignments support a maximum of one identity.  That is either a system assigned identity or a single user assigned identity.
+        :param pulumi.Input['ResourceIdentityType'] type: The identity type. This is the only required field when adding a system or user assigned identity to a resource.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] user_assigned_identities: The user identity associated with the policy. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.
+        """
+        if type is not None:
+            pulumi.set(__self__, "type", type)
+        if user_assigned_identities is not None:
+            pulumi.set(__self__, "user_assigned_identities", user_assigned_identities)
+
+    @property
+    @pulumi.getter
+    def type(self) -> Optional[pulumi.Input['ResourceIdentityType']]:
+        """
+        The identity type. This is the only required field when adding a system or user assigned identity to a resource.
+        """
+        return pulumi.get(self, "type")
+
+    @type.setter
+    def type(self, value: Optional[pulumi.Input['ResourceIdentityType']]):
+        pulumi.set(self, "type", value)
+
+    @property
+    @pulumi.getter(name="userAssignedIdentities")
+    def user_assigned_identities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        The user identity associated with the policy. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.
+        """
+        return pulumi.get(self, "user_assigned_identities")
+
+    @user_assigned_identities.setter
+    def user_assigned_identities(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "user_assigned_identities", value)
+
+
+@pulumi.input_type
+class NonComplianceMessageArgs:
+    def __init__(__self__, *,
+                 message: pulumi.Input[str],
+                 policy_definition_reference_id: Optional[pulumi.Input[str]] = None):
+        """
+        A message that describes why a resource is non-compliant with the policy. This is shown in 'deny' error messages and on resource's non-compliant compliance results.
+        :param pulumi.Input[str] message: A message that describes why a resource is non-compliant with the policy. This is shown in 'deny' error messages and on resource's non-compliant compliance results.
+        :param pulumi.Input[str] policy_definition_reference_id: The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If this is not provided the message applies to all policies assigned by this policy assignment.
+        """
+        pulumi.set(__self__, "message", message)
+        if policy_definition_reference_id is not None:
+            pulumi.set(__self__, "policy_definition_reference_id", policy_definition_reference_id)
+
+    @property
+    @pulumi.getter
+    def message(self) -> pulumi.Input[str]:
+        """
+        A message that describes why a resource is non-compliant with the policy. This is shown in 'deny' error messages and on resource's non-compliant compliance results.
+        """
+        return pulumi.get(self, "message")
+
+    @message.setter
+    def message(self, value: pulumi.Input[str]):
+        pulumi.set(self, "message", value)
+
+    @property
+    @pulumi.getter(name="policyDefinitionReferenceId")
+    def policy_definition_reference_id(self) -> Optional[pulumi.Input[str]]:
+        """
+        The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If this is not provided the message applies to all policies assigned by this policy assignment.
+        """
+        return pulumi.get(self, "policy_definition_reference_id")
+
+    @policy_definition_reference_id.setter
+    def policy_definition_reference_id(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "policy_definition_reference_id", value)
+
+
+@pulumi.input_type
+class OverrideArgs:
+    def __init__(__self__, *,
+                 kind: Optional[pulumi.Input[Union[str, 'OverrideKind']]] = None,
+                 selectors: Optional[pulumi.Input[Sequence[pulumi.Input['SelectorArgs']]]] = None,
+                 value: Optional[pulumi.Input[str]] = None):
+        """
+        The policy property value override.
+        :param pulumi.Input[Union[str, 'OverrideKind']] kind: The override kind.
+        :param pulumi.Input[Sequence[pulumi.Input['SelectorArgs']]] selectors: The list of the selector expressions.
+        :param pulumi.Input[str] value: The value to override the policy property.
+        """
+        if kind is not None:
+            pulumi.set(__self__, "kind", kind)
+        if selectors is not None:
+            pulumi.set(__self__, "selectors", selectors)
+        if value is not None:
+            pulumi.set(__self__, "value", value)
+
+    @property
+    @pulumi.getter
+    def kind(self) -> Optional[pulumi.Input[Union[str, 'OverrideKind']]]:
+        """
+        The override kind.
+        """
+        return pulumi.get(self, "kind")
+
+    @kind.setter
+    def kind(self, value: Optional[pulumi.Input[Union[str, 'OverrideKind']]]):
+        pulumi.set(self, "kind", value)
+
+    @property
+    @pulumi.getter
+    def selectors(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['SelectorArgs']]]]:
+        """
+        The list of the selector expressions.
+        """
+        return pulumi.get(self, "selectors")
+
+    @selectors.setter
+    def selectors(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['SelectorArgs']]]]):
+        pulumi.set(self, "selectors", value)
+
+    @property
+    @pulumi.getter
+    def value(self) -> Optional[pulumi.Input[str]]:
+        """
+        The value to override the policy property.
+        """
+        return pulumi.get(self, "value")
+
+    @value.setter
+    def value(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "value", value)
+
+
+@pulumi.input_type
+class ParameterValuesValueArgs:
+    def __init__(__self__, *,
+                 value: Optional[Any] = None):
+        """
+        The value of a parameter.
+        :param Any value: The value of the parameter.
+        """
+        if value is not None:
+            pulumi.set(__self__, "value", value)
+
+    @property
+    @pulumi.getter
+    def value(self) -> Optional[Any]:
+        """
+        The value of the parameter.
+        """
+        return pulumi.get(self, "value")
+
+    @value.setter
+    def value(self, value: Optional[Any]):
+        pulumi.set(self, "value", value)
+
+
+@pulumi.input_type
+class ResourceSelectorArgs:
+    def __init__(__self__, *,
+                 name: Optional[pulumi.Input[str]] = None,
+                 selectors: Optional[pulumi.Input[Sequence[pulumi.Input['SelectorArgs']]]] = None):
+        """
+        The resource selector to filter policies by resource properties.
+        :param pulumi.Input[str] name: The name of the resource selector.
+        :param pulumi.Input[Sequence[pulumi.Input['SelectorArgs']]] selectors: The list of the selector expressions.
+        """
+        if name is not None:
+            pulumi.set(__self__, "name", name)
+        if selectors is not None:
+            pulumi.set(__self__, "selectors", selectors)
+
+    @property
+    @pulumi.getter
+    def name(self) -> Optional[pulumi.Input[str]]:
+        """
+        The name of the resource selector.
+        """
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "name", value)
+
+    @property
+    @pulumi.getter
+    def selectors(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['SelectorArgs']]]]:
+        """
+        The list of the selector expressions.
+        """
+        return pulumi.get(self, "selectors")
+
+    @selectors.setter
+    def selectors(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['SelectorArgs']]]]):
+        pulumi.set(self, "selectors", value)
+
+
+@pulumi.input_type
+class SelectorArgs:
+    def __init__(__self__, *,
+                 in_: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 kind: Optional[pulumi.Input[Union[str, 'SelectorKind']]] = None,
+                 not_in: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
+        """
+        The selector expression.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] in_: The list of values to filter in.
+        :param pulumi.Input[Union[str, 'SelectorKind']] kind: The selector kind.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] not_in: The list of values to filter out.
+        """
+        if in_ is not None:
+            pulumi.set(__self__, "in_", in_)
+        if kind is not None:
+            pulumi.set(__self__, "kind", kind)
+        if not_in is not None:
+            pulumi.set(__self__, "not_in", not_in)
+
+    @property
+    @pulumi.getter(name="in")
+    def in_(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        The list of values to filter in.
+        """
+        return pulumi.get(self, "in_")
+
+    @in_.setter
+    def in_(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "in_", value)
+
+    @property
+    @pulumi.getter
+    def kind(self) -> Optional[pulumi.Input[Union[str, 'SelectorKind']]]:
+        """
+        The selector kind.
+        """
+        return pulumi.get(self, "kind")
+
+    @kind.setter
+    def kind(self, value: Optional[pulumi.Input[Union[str, 'SelectorKind']]]):
+        pulumi.set(self, "kind", value)
+
+    @property
+    @pulumi.getter(name="notIn")
+    def not_in(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        The list of values to filter out.
+        """
+        return pulumi.get(self, "not_in")
+
+    @not_in.setter
+    def not_in(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "not_in", value)
+
+

pulumi_azure_native/authorization/v20240401/get_policy_assignment.py

@@ -0,0 +1,300 @@
+# coding=utf-8
+# *** WARNING: this file was generated by pulumi-language-python. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import copy
+import warnings
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+from ... import _utilities
+from . import outputs
+
+__all__ = [
+    'GetPolicyAssignmentResult',
+    'AwaitableGetPolicyAssignmentResult',
+    'get_policy_assignment',
+    'get_policy_assignment_output',
+]
+
+@pulumi.output_type
+class GetPolicyAssignmentResult:
+    """
+    The policy assignment.
+    """
+    def __init__(__self__, description=None, display_name=None, enforcement_mode=None, id=None, identity=None, is_system_policy=None, location=None, metadata=None, name=None, non_compliance_messages=None, not_scopes=None, overrides=None, parameters=None, policy_definition_id=None, resource_selectors=None, scope=None, system_data=None, type=None):
+        if description and not isinstance(description, str):
+            raise TypeError("Expected argument 'description' to be a str")
+        pulumi.set(__self__, "description", description)
+        if display_name and not isinstance(display_name, str):
+            raise TypeError("Expected argument 'display_name' to be a str")
+        pulumi.set(__self__, "display_name", display_name)
+        if enforcement_mode and not isinstance(enforcement_mode, str):
+            raise TypeError("Expected argument 'enforcement_mode' to be a str")
+        pulumi.set(__self__, "enforcement_mode", enforcement_mode)
+        if id and not isinstance(id, str):
+            raise TypeError("Expected argument 'id' to be a str")
+        pulumi.set(__self__, "id", id)
+        if identity and not isinstance(identity, dict):
+            raise TypeError("Expected argument 'identity' to be a dict")
+        pulumi.set(__self__, "identity", identity)
+        if is_system_policy and not isinstance(is_system_policy, bool):
+            raise TypeError("Expected argument 'is_system_policy' to be a bool")
+        pulumi.set(__self__, "is_system_policy", is_system_policy)
+        if location and not isinstance(location, str):
+            raise TypeError("Expected argument 'location' to be a str")
+        pulumi.set(__self__, "location", location)
+        if metadata and not isinstance(metadata, dict):
+            raise TypeError("Expected argument 'metadata' to be a dict")
+        pulumi.set(__self__, "metadata", metadata)
+        if name and not isinstance(name, str):
+            raise TypeError("Expected argument 'name' to be a str")
+        pulumi.set(__self__, "name", name)
+        if non_compliance_messages and not isinstance(non_compliance_messages, list):
+            raise TypeError("Expected argument 'non_compliance_messages' to be a list")
+        pulumi.set(__self__, "non_compliance_messages", non_compliance_messages)
+        if not_scopes and not isinstance(not_scopes, list):
+            raise TypeError("Expected argument 'not_scopes' to be a list")
+        pulumi.set(__self__, "not_scopes", not_scopes)
+        if overrides and not isinstance(overrides, list):
+            raise TypeError("Expected argument 'overrides' to be a list")
+        pulumi.set(__self__, "overrides", overrides)
+        if parameters and not isinstance(parameters, dict):
+            raise TypeError("Expected argument 'parameters' to be a dict")
+        pulumi.set(__self__, "parameters", parameters)
+        if policy_definition_id and not isinstance(policy_definition_id, str):
+            raise TypeError("Expected argument 'policy_definition_id' to be a str")
+        pulumi.set(__self__, "policy_definition_id", policy_definition_id)
+        if resource_selectors and not isinstance(resource_selectors, list):
+            raise TypeError("Expected argument 'resource_selectors' to be a list")
+        pulumi.set(__self__, "resource_selectors", resource_selectors)
+        if scope and not isinstance(scope, str):
+            raise TypeError("Expected argument 'scope' to be a str")
+        pulumi.set(__self__, "scope", scope)
+        if system_data and not isinstance(system_data, dict):
+            raise TypeError("Expected argument 'system_data' to be a dict")
+        pulumi.set(__self__, "system_data", system_data)
+        if type and not isinstance(type, str):
+            raise TypeError("Expected argument 'type' to be a str")
+        pulumi.set(__self__, "type", type)
+
+    @property
+    @pulumi.getter
+    def description(self) -> Optional[str]:
+        """
+        This message will be part of response in case of policy violation.
+        """
+        return pulumi.get(self, "description")
+
+    @property
+    @pulumi.getter(name="displayName")
+    def display_name(self) -> Optional[str]:
+        """
+        The display name of the policy assignment.
+        """
+        return pulumi.get(self, "display_name")
+
+    @property
+    @pulumi.getter(name="enforcementMode")
+    def enforcement_mode(self) -> Optional[str]:
+        """
+        The policy assignment enforcement mode. Possible values are Default and DoNotEnforce.
+        """
+        return pulumi.get(self, "enforcement_mode")
+
+    @property
+    @pulumi.getter
+    def id(self) -> str:
+        """
+        The ID of the policy assignment.
+        """
+        return pulumi.get(self, "id")
+
+    @property
+    @pulumi.getter
+    def identity(self) -> Optional['outputs.IdentityResponse']:
+        """
+        The managed identity associated with the policy assignment.
+        """
+        return pulumi.get(self, "identity")
+
+    @property
+    @pulumi.getter(name="isSystemPolicy")
+    def is_system_policy(self) -> Optional[bool]:
+        """
+        A value indicating whether the policy assignment is for a system level policy assignment. Immutable.
+        """
+        return pulumi.get(self, "is_system_policy")
+
+    @property
+    @pulumi.getter
+    def location(self) -> Optional[str]:
+        """
+        The location of the policy assignment. Only required when utilizing managed identity.
+        """
+        return pulumi.get(self, "location")
+
+    @property
+    @pulumi.getter
+    def metadata(self) -> Optional[Any]:
+        """
+        The policy assignment metadata. Metadata is an open ended object and is typically a collection of key value pairs.
+        """
+        return pulumi.get(self, "metadata")
+
+    @property
+    @pulumi.getter
+    def name(self) -> str:
+        """
+        The name of the policy assignment.
+        """
+        return pulumi.get(self, "name")
+
+    @property
+    @pulumi.getter(name="nonComplianceMessages")
+    def non_compliance_messages(self) -> Optional[Sequence['outputs.NonComplianceMessageResponse']]:
+        """
+        The messages that describe why a resource is non-compliant with the policy.
+        """
+        return pulumi.get(self, "non_compliance_messages")
+
+    @property
+    @pulumi.getter(name="notScopes")
+    def not_scopes(self) -> Optional[Sequence[str]]:
+        """
+        The policy's excluded scopes.
+        """
+        return pulumi.get(self, "not_scopes")
+
+    @property
+    @pulumi.getter
+    def overrides(self) -> Optional[Sequence['outputs.OverrideResponse']]:
+        """
+        The policy property value override.
+        """
+        return pulumi.get(self, "overrides")
+
+    @property
+    @pulumi.getter
+    def parameters(self) -> Optional[Mapping[str, 'outputs.ParameterValuesValueResponse']]:
+        """
+        The parameter values for the assigned policy rule. The keys are the parameter names.
+        """
+        return pulumi.get(self, "parameters")
+
+    @property
+    @pulumi.getter(name="policyDefinitionId")
+    def policy_definition_id(self) -> Optional[str]:
+        """
+        The ID of the policy definition or policy set definition being assigned.
+        """
+        return pulumi.get(self, "policy_definition_id")
+
+    @property
+    @pulumi.getter(name="resourceSelectors")
+    def resource_selectors(self) -> Optional[Sequence['outputs.ResourceSelectorResponse']]:
+        """
+        The resource selector list to filter policies by resource properties.
+        """
+        return pulumi.get(self, "resource_selectors")
+
+    @property
+    @pulumi.getter
+    def scope(self) -> str:
+        """
+        The scope for the policy assignment.
+        """
+        return pulumi.get(self, "scope")
+
+    @property
+    @pulumi.getter(name="systemData")
+    def system_data(self) -> 'outputs.SystemDataResponse':
+        """
+        The system metadata relating to this resource.
+        """
+        return pulumi.get(self, "system_data")
+
+    @property
+    @pulumi.getter
+    def type(self) -> str:
+        """
+        The type of the policy assignment.
+        """
+        return pulumi.get(self, "type")
+
+
+class AwaitableGetPolicyAssignmentResult(GetPolicyAssignmentResult):
+    # pylint: disable=using-constant-test
+    def __await__(self):
+        if False:
+            yield self
+        return GetPolicyAssignmentResult(
+            description=self.description,
+            display_name=self.display_name,
+            enforcement_mode=self.enforcement_mode,
+            id=self.id,
+            identity=self.identity,
+            is_system_policy=self.is_system_policy,
+            location=self.location,
+            metadata=self.metadata,
+            name=self.name,
+            non_compliance_messages=self.non_compliance_messages,
+            not_scopes=self.not_scopes,
+            overrides=self.overrides,
+            parameters=self.parameters,
+            policy_definition_id=self.policy_definition_id,
+            resource_selectors=self.resource_selectors,
+            scope=self.scope,
+            system_data=self.system_data,
+            type=self.type)
+
+
+def get_policy_assignment(policy_assignment_name: Optional[str] = None,
+                          scope: Optional[str] = None,
+                          opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetPolicyAssignmentResult:
+    """
+    This operation retrieves a single policy assignment, given its name and the scope it was created at.
+
+
+    :param str policy_assignment_name: The name of the policy assignment to get.
+    :param str scope: The scope of the policy assignment. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'
+    """
+    __args__ = dict()
+    __args__['policyAssignmentName'] = policy_assignment_name
+    __args__['scope'] = scope
+    opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke('azure-native:authorization/v20240401:getPolicyAssignment', __args__, opts=opts, typ=GetPolicyAssignmentResult).value
+
+    return AwaitableGetPolicyAssignmentResult(
+        description=pulumi.get(__ret__, 'description'),
+        display_name=pulumi.get(__ret__, 'display_name'),
+        enforcement_mode=pulumi.get(__ret__, 'enforcement_mode'),
+        id=pulumi.get(__ret__, 'id'),
+        identity=pulumi.get(__ret__, 'identity'),
+        is_system_policy=pulumi.get(__ret__, 'is_system_policy'),
+        location=pulumi.get(__ret__, 'location'),
+        metadata=pulumi.get(__ret__, 'metadata'),
+        name=pulumi.get(__ret__, 'name'),
+        non_compliance_messages=pulumi.get(__ret__, 'non_compliance_messages'),
+        not_scopes=pulumi.get(__ret__, 'not_scopes'),
+        overrides=pulumi.get(__ret__, 'overrides'),
+        parameters=pulumi.get(__ret__, 'parameters'),
+        policy_definition_id=pulumi.get(__ret__, 'policy_definition_id'),
+        resource_selectors=pulumi.get(__ret__, 'resource_selectors'),
+        scope=pulumi.get(__ret__, 'scope'),
+        system_data=pulumi.get(__ret__, 'system_data'),
+        type=pulumi.get(__ret__, 'type'))
+
+
+@_utilities.lift_output_func(get_policy_assignment)
+def get_policy_assignment_output(policy_assignment_name: Optional[pulumi.Input[str]] = None,
+                                 scope: Optional[pulumi.Input[str]] = None,
+                                 opts: Optional[pulumi.InvokeOptions] = None) -> pulumi.Output[GetPolicyAssignmentResult]:
+    """
+    This operation retrieves a single policy assignment, given its name and the scope it was created at.
+
+
+    :param str policy_assignment_name: The name of the policy assignment to get.
+    :param str scope: The scope of the policy assignment. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'
+    """
+    ...