pulumi-azure-native 2.51.0a1721725880__py3-none-any.whl → 2.52.0__py3-none-any.whl

pulumi_azure_native/authorization/v20240501/outputs.py

@@ -0,0 +1,1148 @@
+# coding=utf-8
+# *** WARNING: this file was generated by pulumi-language-python. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import copy
+import warnings
+import sys
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
+from ... import _utilities
+from . import outputs
+from ._enums import *
+
+__all__ = [
+    'IdentityResponse',
+    'IdentityResponseUserAssignedIdentities',
+    'NonComplianceMessageResponse',
+    'OverrideResponse',
+    'ParameterDefinitionsValueResponse',
+    'ParameterDefinitionsValueResponseMetadata',
+    'ParameterValuesValueResponse',
+    'PolicyDefinitionGroupResponse',
+    'PolicyDefinitionReferenceResponse',
+    'PolicyDefinitionVersionResponse',
+    'PolicySetDefinitionVersionResponse',
+    'ResourceSelectorResponse',
+    'SelectorResponse',
+    'SystemDataResponse',
+]
+
+@pulumi.output_type
+class IdentityResponse(dict):
+    """
+    Identity for the resource.  Policy assignments support a maximum of one identity.  That is either a system assigned identity or a single user assigned identity.
+    """
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "principalId":
+            suggest = "principal_id"
+        elif key == "tenantId":
+            suggest = "tenant_id"
+        elif key == "userAssignedIdentities":
+            suggest = "user_assigned_identities"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in IdentityResponse. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        IdentityResponse.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        IdentityResponse.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 principal_id: str,
+                 tenant_id: str,
+                 type: Optional[str] = None,
+                 user_assigned_identities: Optional[Mapping[str, 'outputs.IdentityResponseUserAssignedIdentities']] = None):
+        """
+        Identity for the resource.  Policy assignments support a maximum of one identity.  That is either a system assigned identity or a single user assigned identity.
+        :param str principal_id: The principal ID of the resource identity.  This property will only be provided for a system assigned identity
+        :param str tenant_id: The tenant ID of the resource identity.  This property will only be provided for a system assigned identity
+        :param str type: The identity type. This is the only required field when adding a system or user assigned identity to a resource.
+        :param Mapping[str, 'IdentityResponseUserAssignedIdentities'] user_assigned_identities: The user identity associated with the policy. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.
+        """
+        pulumi.set(__self__, "principal_id", principal_id)
+        pulumi.set(__self__, "tenant_id", tenant_id)
+        if type is not None:
+            pulumi.set(__self__, "type", type)
+        if user_assigned_identities is not None:
+            pulumi.set(__self__, "user_assigned_identities", user_assigned_identities)
+
+    @property
+    @pulumi.getter(name="principalId")
+    def principal_id(self) -> str:
+        """
+        The principal ID of the resource identity.  This property will only be provided for a system assigned identity
+        """
+        return pulumi.get(self, "principal_id")
+
+    @property
+    @pulumi.getter(name="tenantId")
+    def tenant_id(self) -> str:
+        """
+        The tenant ID of the resource identity.  This property will only be provided for a system assigned identity
+        """
+        return pulumi.get(self, "tenant_id")
+
+    @property
+    @pulumi.getter
+    def type(self) -> Optional[str]:
+        """
+        The identity type. This is the only required field when adding a system or user assigned identity to a resource.
+        """
+        return pulumi.get(self, "type")
+
+    @property
+    @pulumi.getter(name="userAssignedIdentities")
+    def user_assigned_identities(self) -> Optional[Mapping[str, 'outputs.IdentityResponseUserAssignedIdentities']]:
+        """
+        The user identity associated with the policy. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.
+        """
+        return pulumi.get(self, "user_assigned_identities")
+
+
+@pulumi.output_type
+class IdentityResponseUserAssignedIdentities(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "clientId":
+            suggest = "client_id"
+        elif key == "principalId":
+            suggest = "principal_id"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in IdentityResponseUserAssignedIdentities. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        IdentityResponseUserAssignedIdentities.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        IdentityResponseUserAssignedIdentities.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 client_id: str,
+                 principal_id: str):
+        """
+        :param str client_id: The client id of user assigned identity.
+        :param str principal_id: The principal id of user assigned identity.
+        """
+        pulumi.set(__self__, "client_id", client_id)
+        pulumi.set(__self__, "principal_id", principal_id)
+
+    @property
+    @pulumi.getter(name="clientId")
+    def client_id(self) -> str:
+        """
+        The client id of user assigned identity.
+        """
+        return pulumi.get(self, "client_id")
+
+    @property
+    @pulumi.getter(name="principalId")
+    def principal_id(self) -> str:
+        """
+        The principal id of user assigned identity.
+        """
+        return pulumi.get(self, "principal_id")
+
+
+@pulumi.output_type
+class NonComplianceMessageResponse(dict):
+    """
+    A message that describes why a resource is non-compliant with the policy. This is shown in 'deny' error messages and on resource's non-compliant compliance results.
+    """
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "policyDefinitionReferenceId":
+            suggest = "policy_definition_reference_id"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in NonComplianceMessageResponse. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        NonComplianceMessageResponse.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        NonComplianceMessageResponse.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 message: str,
+                 policy_definition_reference_id: Optional[str] = None):
+        """
+        A message that describes why a resource is non-compliant with the policy. This is shown in 'deny' error messages and on resource's non-compliant compliance results.
+        :param str message: A message that describes why a resource is non-compliant with the policy. This is shown in 'deny' error messages and on resource's non-compliant compliance results.
+        :param str policy_definition_reference_id: The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If this is not provided the message applies to all policies assigned by this policy assignment.
+        """
+        pulumi.set(__self__, "message", message)
+        if policy_definition_reference_id is not None:
+            pulumi.set(__self__, "policy_definition_reference_id", policy_definition_reference_id)
+
+    @property
+    @pulumi.getter
+    def message(self) -> str:
+        """
+        A message that describes why a resource is non-compliant with the policy. This is shown in 'deny' error messages and on resource's non-compliant compliance results.
+        """
+        return pulumi.get(self, "message")
+
+    @property
+    @pulumi.getter(name="policyDefinitionReferenceId")
+    def policy_definition_reference_id(self) -> Optional[str]:
+        """
+        The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If this is not provided the message applies to all policies assigned by this policy assignment.
+        """
+        return pulumi.get(self, "policy_definition_reference_id")
+
+
+@pulumi.output_type
+class OverrideResponse(dict):
+    """
+    The policy property value override.
+    """
+    def __init__(__self__, *,
+                 kind: Optional[str] = None,
+                 selectors: Optional[Sequence['outputs.SelectorResponse']] = None,
+                 value: Optional[str] = None):
+        """
+        The policy property value override.
+        :param str kind: The override kind.
+        :param Sequence['SelectorResponse'] selectors: The list of the selector expressions.
+        :param str value: The value to override the policy property.
+        """
+        if kind is not None:
+            pulumi.set(__self__, "kind", kind)
+        if selectors is not None:
+            pulumi.set(__self__, "selectors", selectors)
+        if value is not None:
+            pulumi.set(__self__, "value", value)
+
+    @property
+    @pulumi.getter
+    def kind(self) -> Optional[str]:
+        """
+        The override kind.
+        """
+        return pulumi.get(self, "kind")
+
+    @property
+    @pulumi.getter
+    def selectors(self) -> Optional[Sequence['outputs.SelectorResponse']]:
+        """
+        The list of the selector expressions.
+        """
+        return pulumi.get(self, "selectors")
+
+    @property
+    @pulumi.getter
+    def value(self) -> Optional[str]:
+        """
+        The value to override the policy property.
+        """
+        return pulumi.get(self, "value")
+
+
+@pulumi.output_type
+class ParameterDefinitionsValueResponse(dict):
+    """
+    The definition of a parameter that can be provided to the policy.
+    """
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "allowedValues":
+            suggest = "allowed_values"
+        elif key == "defaultValue":
+            suggest = "default_value"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in ParameterDefinitionsValueResponse. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        ParameterDefinitionsValueResponse.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        ParameterDefinitionsValueResponse.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 allowed_values: Optional[Sequence[Any]] = None,
+                 default_value: Optional[Any] = None,
+                 metadata: Optional['outputs.ParameterDefinitionsValueResponseMetadata'] = None,
+                 schema: Optional[Any] = None,
+                 type: Optional[str] = None):
+        """
+        The definition of a parameter that can be provided to the policy.
+        :param Sequence[Any] allowed_values: The allowed values for the parameter.
+        :param Any default_value: The default value for the parameter if no value is provided.
+        :param 'ParameterDefinitionsValueResponseMetadata' metadata: General metadata for the parameter.
+        :param Any schema: Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/.
+        :param str type: The data type of the parameter.
+        """
+        if allowed_values is not None:
+            pulumi.set(__self__, "allowed_values", allowed_values)
+        if default_value is not None:
+            pulumi.set(__self__, "default_value", default_value)
+        if metadata is not None:
+            pulumi.set(__self__, "metadata", metadata)
+        if schema is not None:
+            pulumi.set(__self__, "schema", schema)
+        if type is not None:
+            pulumi.set(__self__, "type", type)
+
+    @property
+    @pulumi.getter(name="allowedValues")
+    def allowed_values(self) -> Optional[Sequence[Any]]:
+        """
+        The allowed values for the parameter.
+        """
+        return pulumi.get(self, "allowed_values")
+
+    @property
+    @pulumi.getter(name="defaultValue")
+    def default_value(self) -> Optional[Any]:
+        """
+        The default value for the parameter if no value is provided.
+        """
+        return pulumi.get(self, "default_value")
+
+    @property
+    @pulumi.getter
+    def metadata(self) -> Optional['outputs.ParameterDefinitionsValueResponseMetadata']:
+        """
+        General metadata for the parameter.
+        """
+        return pulumi.get(self, "metadata")
+
+    @property
+    @pulumi.getter
+    def schema(self) -> Optional[Any]:
+        """
+        Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/.
+        """
+        return pulumi.get(self, "schema")
+
+    @property
+    @pulumi.getter
+    def type(self) -> Optional[str]:
+        """
+        The data type of the parameter.
+        """
+        return pulumi.get(self, "type")
+
+
+@pulumi.output_type
+class ParameterDefinitionsValueResponseMetadata(dict):
+    """
+    General metadata for the parameter.
+    """
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "assignPermissions":
+            suggest = "assign_permissions"
+        elif key == "displayName":
+            suggest = "display_name"
+        elif key == "strongType":
+            suggest = "strong_type"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in ParameterDefinitionsValueResponseMetadata. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        ParameterDefinitionsValueResponseMetadata.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        ParameterDefinitionsValueResponseMetadata.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 assign_permissions: Optional[bool] = None,
+                 description: Optional[str] = None,
+                 display_name: Optional[str] = None,
+                 strong_type: Optional[str] = None):
+        """
+        General metadata for the parameter.
+        :param bool assign_permissions: Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope.
+        :param str description: The description of the parameter.
+        :param str display_name: The display name for the parameter.
+        :param str strong_type: Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from.
+        """
+        if assign_permissions is not None:
+            pulumi.set(__self__, "assign_permissions", assign_permissions)
+        if description is not None:
+            pulumi.set(__self__, "description", description)
+        if display_name is not None:
+            pulumi.set(__self__, "display_name", display_name)
+        if strong_type is not None:
+            pulumi.set(__self__, "strong_type", strong_type)
+
+    @property
+    @pulumi.getter(name="assignPermissions")
+    def assign_permissions(self) -> Optional[bool]:
+        """
+        Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope.
+        """
+        return pulumi.get(self, "assign_permissions")
+
+    @property
+    @pulumi.getter
+    def description(self) -> Optional[str]:
+        """
+        The description of the parameter.
+        """
+        return pulumi.get(self, "description")
+
+    @property
+    @pulumi.getter(name="displayName")
+    def display_name(self) -> Optional[str]:
+        """
+        The display name for the parameter.
+        """
+        return pulumi.get(self, "display_name")
+
+    @property
+    @pulumi.getter(name="strongType")
+    def strong_type(self) -> Optional[str]:
+        """
+        Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from.
+        """
+        return pulumi.get(self, "strong_type")
+
+
+@pulumi.output_type
+class ParameterValuesValueResponse(dict):
+    """
+    The value of a parameter.
+    """
+    def __init__(__self__, *,
+                 value: Optional[Any] = None):
+        """
+        The value of a parameter.
+        :param Any value: The value of the parameter.
+        """
+        if value is not None:
+            pulumi.set(__self__, "value", value)
+
+    @property
+    @pulumi.getter
+    def value(self) -> Optional[Any]:
+        """
+        The value of the parameter.
+        """
+        return pulumi.get(self, "value")
+
+
+@pulumi.output_type
+class PolicyDefinitionGroupResponse(dict):
+    """
+    The policy definition group.
+    """
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "additionalMetadataId":
+            suggest = "additional_metadata_id"
+        elif key == "displayName":
+            suggest = "display_name"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in PolicyDefinitionGroupResponse. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        PolicyDefinitionGroupResponse.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        PolicyDefinitionGroupResponse.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 name: str,
+                 additional_metadata_id: Optional[str] = None,
+                 category: Optional[str] = None,
+                 description: Optional[str] = None,
+                 display_name: Optional[str] = None):
+        """
+        The policy definition group.
+        :param str name: The name of the group.
+        :param str additional_metadata_id: A resource ID of a resource that contains additional metadata about the group.
+        :param str category: The group's category.
+        :param str description: The group's description.
+        :param str display_name: The group's display name.
+        """
+        pulumi.set(__self__, "name", name)
+        if additional_metadata_id is not None:
+            pulumi.set(__self__, "additional_metadata_id", additional_metadata_id)
+        if category is not None:
+            pulumi.set(__self__, "category", category)
+        if description is not None:
+            pulumi.set(__self__, "description", description)
+        if display_name is not None:
+            pulumi.set(__self__, "display_name", display_name)
+
+    @property
+    @pulumi.getter
+    def name(self) -> str:
+        """
+        The name of the group.
+        """
+        return pulumi.get(self, "name")
+
+    @property
+    @pulumi.getter(name="additionalMetadataId")
+    def additional_metadata_id(self) -> Optional[str]:
+        """
+        A resource ID of a resource that contains additional metadata about the group.
+        """
+        return pulumi.get(self, "additional_metadata_id")
+
+    @property
+    @pulumi.getter
+    def category(self) -> Optional[str]:
+        """
+        The group's category.
+        """
+        return pulumi.get(self, "category")
+
+    @property
+    @pulumi.getter
+    def description(self) -> Optional[str]:
+        """
+        The group's description.
+        """
+        return pulumi.get(self, "description")
+
+    @property
+    @pulumi.getter(name="displayName")
+    def display_name(self) -> Optional[str]:
+        """
+        The group's display name.
+        """
+        return pulumi.get(self, "display_name")
+
+
+@pulumi.output_type
+class PolicyDefinitionReferenceResponse(dict):
+    """
+    The policy definition reference.
+    """
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "policyDefinitionId":
+            suggest = "policy_definition_id"
+        elif key == "definitionVersion":
+            suggest = "definition_version"
+        elif key == "groupNames":
+            suggest = "group_names"
+        elif key == "policyDefinitionReferenceId":
+            suggest = "policy_definition_reference_id"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in PolicyDefinitionReferenceResponse. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        PolicyDefinitionReferenceResponse.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        PolicyDefinitionReferenceResponse.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 policy_definition_id: str,
+                 definition_version: Optional[str] = None,
+                 group_names: Optional[Sequence[str]] = None,
+                 parameters: Optional[Mapping[str, 'outputs.ParameterValuesValueResponse']] = None,
+                 policy_definition_reference_id: Optional[str] = None):
+        """
+        The policy definition reference.
+        :param str policy_definition_id: The ID of the policy definition or policy set definition.
+        :param str definition_version: The version of the policy definition to use.
+        :param Sequence[str] group_names: The name of the groups that this policy definition reference belongs to.
+        :param Mapping[str, 'ParameterValuesValueResponse'] parameters: The parameter values for the referenced policy rule. The keys are the parameter names.
+        :param str policy_definition_reference_id: A unique id (within the policy set definition) for this policy definition reference.
+        """
+        pulumi.set(__self__, "policy_definition_id", policy_definition_id)
+        if definition_version is not None:
+            pulumi.set(__self__, "definition_version", definition_version)
+        if group_names is not None:
+            pulumi.set(__self__, "group_names", group_names)
+        if parameters is not None:
+            pulumi.set(__self__, "parameters", parameters)
+        if policy_definition_reference_id is not None:
+            pulumi.set(__self__, "policy_definition_reference_id", policy_definition_reference_id)
+
+    @property
+    @pulumi.getter(name="policyDefinitionId")
+    def policy_definition_id(self) -> str:
+        """
+        The ID of the policy definition or policy set definition.
+        """
+        return pulumi.get(self, "policy_definition_id")
+
+    @property
+    @pulumi.getter(name="definitionVersion")
+    def definition_version(self) -> Optional[str]:
+        """
+        The version of the policy definition to use.
+        """
+        return pulumi.get(self, "definition_version")
+
+    @property
+    @pulumi.getter(name="groupNames")
+    def group_names(self) -> Optional[Sequence[str]]:
+        """
+        The name of the groups that this policy definition reference belongs to.
+        """
+        return pulumi.get(self, "group_names")
+
+    @property
+    @pulumi.getter
+    def parameters(self) -> Optional[Mapping[str, 'outputs.ParameterValuesValueResponse']]:
+        """
+        The parameter values for the referenced policy rule. The keys are the parameter names.
+        """
+        return pulumi.get(self, "parameters")
+
+    @property
+    @pulumi.getter(name="policyDefinitionReferenceId")
+    def policy_definition_reference_id(self) -> Optional[str]:
+        """
+        A unique id (within the policy set definition) for this policy definition reference.
+        """
+        return pulumi.get(self, "policy_definition_reference_id")
+
+
+@pulumi.output_type
+class PolicyDefinitionVersionResponse(dict):
+    """
+    The ID of the policy definition version.
+    """
+    def __init__(__self__, *,
+                 id: str,
+                 name: str,
+                 system_data: 'outputs.SystemDataResponse',
+                 type: str,
+                 description: Optional[str] = None,
+                 display_name: Optional[str] = None,
+                 metadata: Optional[Any] = None,
+                 mode: Optional[str] = None,
+                 parameters: Optional[Mapping[str, 'outputs.ParameterDefinitionsValueResponse']] = None,
+                 policy_rule: Optional[Any] = None,
+                 policy_type: Optional[str] = None,
+                 version: Optional[str] = None):
+        """
+        The ID of the policy definition version.
+        :param str id: The ID of the policy definition version.
+        :param str name: The name of the policy definition version.
+        :param 'SystemDataResponse' system_data: The system metadata relating to this resource.
+        :param str type: The type of the resource (Microsoft.Authorization/policyDefinitions/versions).
+        :param str description: The policy definition description.
+        :param str display_name: The display name of the policy definition.
+        :param Any metadata: The policy definition metadata.  Metadata is an open ended object and is typically a collection of key value pairs.
+        :param str mode: The policy definition mode. Some examples are All, Indexed, Microsoft.KeyVault.Data.
+        :param Mapping[str, 'ParameterDefinitionsValueResponse'] parameters: The parameter definitions for parameters used in the policy rule. The keys are the parameter names.
+        :param Any policy_rule: The policy rule.
+        :param str policy_type: The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static.
+        :param str version: The policy definition version in #.#.# format.
+        """
+        pulumi.set(__self__, "id", id)
+        pulumi.set(__self__, "name", name)
+        pulumi.set(__self__, "system_data", system_data)
+        pulumi.set(__self__, "type", type)
+        if description is not None:
+            pulumi.set(__self__, "description", description)
+        if display_name is not None:
+            pulumi.set(__self__, "display_name", display_name)
+        if metadata is not None:
+            pulumi.set(__self__, "metadata", metadata)
+        if mode is None:
+            mode = 'Indexed'
+        if mode is not None:
+            pulumi.set(__self__, "mode", mode)
+        if parameters is not None:
+            pulumi.set(__self__, "parameters", parameters)
+        if policy_rule is not None:
+            pulumi.set(__self__, "policy_rule", policy_rule)
+        if policy_type is not None:
+            pulumi.set(__self__, "policy_type", policy_type)
+        if version is not None:
+            pulumi.set(__self__, "version", version)
+
+    @property
+    @pulumi.getter
+    def id(self) -> str:
+        """
+        The ID of the policy definition version.
+        """
+        return pulumi.get(self, "id")
+
+    @property
+    @pulumi.getter
+    def name(self) -> str:
+        """
+        The name of the policy definition version.
+        """
+        return pulumi.get(self, "name")
+
+    @property
+    @pulumi.getter(name="systemData")
+    def system_data(self) -> 'outputs.SystemDataResponse':
+        """
+        The system metadata relating to this resource.
+        """
+        return pulumi.get(self, "system_data")
+
+    @property
+    @pulumi.getter
+    def type(self) -> str:
+        """
+        The type of the resource (Microsoft.Authorization/policyDefinitions/versions).
+        """
+        return pulumi.get(self, "type")
+
+    @property
+    @pulumi.getter
+    def description(self) -> Optional[str]:
+        """
+        The policy definition description.
+        """
+        return pulumi.get(self, "description")
+
+    @property
+    @pulumi.getter(name="displayName")
+    def display_name(self) -> Optional[str]:
+        """
+        The display name of the policy definition.
+        """
+        return pulumi.get(self, "display_name")
+
+    @property
+    @pulumi.getter
+    def metadata(self) -> Optional[Any]:
+        """
+        The policy definition metadata.  Metadata is an open ended object and is typically a collection of key value pairs.
+        """
+        return pulumi.get(self, "metadata")
+
+    @property
+    @pulumi.getter
+    def mode(self) -> Optional[str]:
+        """
+        The policy definition mode. Some examples are All, Indexed, Microsoft.KeyVault.Data.
+        """
+        return pulumi.get(self, "mode")
+
+    @property
+    @pulumi.getter
+    def parameters(self) -> Optional[Mapping[str, 'outputs.ParameterDefinitionsValueResponse']]:
+        """
+        The parameter definitions for parameters used in the policy rule. The keys are the parameter names.
+        """
+        return pulumi.get(self, "parameters")
+
+    @property
+    @pulumi.getter(name="policyRule")
+    def policy_rule(self) -> Optional[Any]:
+        """
+        The policy rule.
+        """
+        return pulumi.get(self, "policy_rule")
+
+    @property
+    @pulumi.getter(name="policyType")
+    def policy_type(self) -> Optional[str]:
+        """
+        The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static.
+        """
+        return pulumi.get(self, "policy_type")
+
+    @property
+    @pulumi.getter
+    def version(self) -> Optional[str]:
+        """
+        The policy definition version in #.#.# format.
+        """
+        return pulumi.get(self, "version")
+
+
+@pulumi.output_type
+class PolicySetDefinitionVersionResponse(dict):
+    """
+    The policy set definition version.
+    """
+    def __init__(__self__, *,
+                 id: str,
+                 name: str,
+                 policy_definitions: Sequence['outputs.PolicyDefinitionReferenceResponse'],
+                 system_data: 'outputs.SystemDataResponse',
+                 type: str,
+                 description: Optional[str] = None,
+                 display_name: Optional[str] = None,
+                 metadata: Optional[Any] = None,
+                 parameters: Optional[Mapping[str, 'outputs.ParameterDefinitionsValueResponse']] = None,
+                 policy_definition_groups: Optional[Sequence['outputs.PolicyDefinitionGroupResponse']] = None,
+                 policy_type: Optional[str] = None,
+                 version: Optional[str] = None):
+        """
+        The policy set definition version.
+        :param str id: The ID of the policy set definition version.
+        :param str name: The name of the policy set definition version.
+        :param Sequence['PolicyDefinitionReferenceResponse'] policy_definitions: An array of policy definition references.
+        :param 'SystemDataResponse' system_data: The system metadata relating to this resource.
+        :param str type: The type of the resource (Microsoft.Authorization/policySetDefinitions/versions).
+        :param str description: The policy set definition description.
+        :param str display_name: The display name of the policy set definition.
+        :param Any metadata: The policy set definition metadata.  Metadata is an open ended object and is typically a collection of key value pairs.
+        :param Mapping[str, 'ParameterDefinitionsValueResponse'] parameters: The policy set definition parameters that can be used in policy definition references.
+        :param Sequence['PolicyDefinitionGroupResponse'] policy_definition_groups: The metadata describing groups of policy definition references within the policy set definition.
+        :param str policy_type: The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static.
+        :param str version: The policy set definition version in #.#.# format.
+        """
+        pulumi.set(__self__, "id", id)
+        pulumi.set(__self__, "name", name)
+        pulumi.set(__self__, "policy_definitions", policy_definitions)
+        pulumi.set(__self__, "system_data", system_data)
+        pulumi.set(__self__, "type", type)
+        if description is not None:
+            pulumi.set(__self__, "description", description)
+        if display_name is not None:
+            pulumi.set(__self__, "display_name", display_name)
+        if metadata is not None:
+            pulumi.set(__self__, "metadata", metadata)
+        if parameters is not None:
+            pulumi.set(__self__, "parameters", parameters)
+        if policy_definition_groups is not None:
+            pulumi.set(__self__, "policy_definition_groups", policy_definition_groups)
+        if policy_type is not None:
+            pulumi.set(__self__, "policy_type", policy_type)
+        if version is not None:
+            pulumi.set(__self__, "version", version)
+
+    @property
+    @pulumi.getter
+    def id(self) -> str:
+        """
+        The ID of the policy set definition version.
+        """
+        return pulumi.get(self, "id")
+
+    @property
+    @pulumi.getter
+    def name(self) -> str:
+        """
+        The name of the policy set definition version.
+        """
+        return pulumi.get(self, "name")
+
+    @property
+    @pulumi.getter(name="policyDefinitions")
+    def policy_definitions(self) -> Sequence['outputs.PolicyDefinitionReferenceResponse']:
+        """
+        An array of policy definition references.
+        """
+        return pulumi.get(self, "policy_definitions")
+
+    @property
+    @pulumi.getter(name="systemData")
+    def system_data(self) -> 'outputs.SystemDataResponse':
+        """
+        The system metadata relating to this resource.
+        """
+        return pulumi.get(self, "system_data")
+
+    @property
+    @pulumi.getter
+    def type(self) -> str:
+        """
+        The type of the resource (Microsoft.Authorization/policySetDefinitions/versions).
+        """
+        return pulumi.get(self, "type")
+
+    @property
+    @pulumi.getter
+    def description(self) -> Optional[str]:
+        """
+        The policy set definition description.
+        """
+        return pulumi.get(self, "description")
+
+    @property
+    @pulumi.getter(name="displayName")
+    def display_name(self) -> Optional[str]:
+        """
+        The display name of the policy set definition.
+        """
+        return pulumi.get(self, "display_name")
+
+    @property
+    @pulumi.getter
+    def metadata(self) -> Optional[Any]:
+        """
+        The policy set definition metadata.  Metadata is an open ended object and is typically a collection of key value pairs.
+        """
+        return pulumi.get(self, "metadata")
+
+    @property
+    @pulumi.getter
+    def parameters(self) -> Optional[Mapping[str, 'outputs.ParameterDefinitionsValueResponse']]:
+        """
+        The policy set definition parameters that can be used in policy definition references.
+        """
+        return pulumi.get(self, "parameters")
+
+    @property
+    @pulumi.getter(name="policyDefinitionGroups")
+    def policy_definition_groups(self) -> Optional[Sequence['outputs.PolicyDefinitionGroupResponse']]:
+        """
+        The metadata describing groups of policy definition references within the policy set definition.
+        """
+        return pulumi.get(self, "policy_definition_groups")
+
+    @property
+    @pulumi.getter(name="policyType")
+    def policy_type(self) -> Optional[str]:
+        """
+        The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static.
+        """
+        return pulumi.get(self, "policy_type")
+
+    @property
+    @pulumi.getter
+    def version(self) -> Optional[str]:
+        """
+        The policy set definition version in #.#.# format.
+        """
+        return pulumi.get(self, "version")
+
+
+@pulumi.output_type
+class ResourceSelectorResponse(dict):
+    """
+    The resource selector to filter policies by resource properties.
+    """
+    def __init__(__self__, *,
+                 name: Optional[str] = None,
+                 selectors: Optional[Sequence['outputs.SelectorResponse']] = None):
+        """
+        The resource selector to filter policies by resource properties.
+        :param str name: The name of the resource selector.
+        :param Sequence['SelectorResponse'] selectors: The list of the selector expressions.
+        """
+        if name is not None:
+            pulumi.set(__self__, "name", name)
+        if selectors is not None:
+            pulumi.set(__self__, "selectors", selectors)
+
+    @property
+    @pulumi.getter
+    def name(self) -> Optional[str]:
+        """
+        The name of the resource selector.
+        """
+        return pulumi.get(self, "name")
+
+    @property
+    @pulumi.getter
+    def selectors(self) -> Optional[Sequence['outputs.SelectorResponse']]:
+        """
+        The list of the selector expressions.
+        """
+        return pulumi.get(self, "selectors")
+
+
+@pulumi.output_type
+class SelectorResponse(dict):
+    """
+    The selector expression.
+    """
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "in":
+            suggest = "in_"
+        elif key == "notIn":
+            suggest = "not_in"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in SelectorResponse. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        SelectorResponse.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        SelectorResponse.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 in_: Optional[Sequence[str]] = None,
+                 kind: Optional[str] = None,
+                 not_in: Optional[Sequence[str]] = None):
+        """
+        The selector expression.
+        :param Sequence[str] in_: The list of values to filter in.
+        :param str kind: The selector kind.
+        :param Sequence[str] not_in: The list of values to filter out.
+        """
+        if in_ is not None:
+            pulumi.set(__self__, "in_", in_)
+        if kind is not None:
+            pulumi.set(__self__, "kind", kind)
+        if not_in is not None:
+            pulumi.set(__self__, "not_in", not_in)
+
+    @property
+    @pulumi.getter(name="in")
+    def in_(self) -> Optional[Sequence[str]]:
+        """
+        The list of values to filter in.
+        """
+        return pulumi.get(self, "in_")
+
+    @property
+    @pulumi.getter
+    def kind(self) -> Optional[str]:
+        """
+        The selector kind.
+        """
+        return pulumi.get(self, "kind")
+
+    @property
+    @pulumi.getter(name="notIn")
+    def not_in(self) -> Optional[Sequence[str]]:
+        """
+        The list of values to filter out.
+        """
+        return pulumi.get(self, "not_in")
+
+
+@pulumi.output_type
+class SystemDataResponse(dict):
+    """
+    Metadata pertaining to creation and last modification of the resource.
+    """
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "createdAt":
+            suggest = "created_at"
+        elif key == "createdBy":
+            suggest = "created_by"
+        elif key == "createdByType":
+            suggest = "created_by_type"
+        elif key == "lastModifiedAt":
+            suggest = "last_modified_at"
+        elif key == "lastModifiedBy":
+            suggest = "last_modified_by"
+        elif key == "lastModifiedByType":
+            suggest = "last_modified_by_type"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in SystemDataResponse. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        SystemDataResponse.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        SystemDataResponse.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 created_at: Optional[str] = None,
+                 created_by: Optional[str] = None,
+                 created_by_type: Optional[str] = None,
+                 last_modified_at: Optional[str] = None,
+                 last_modified_by: Optional[str] = None,
+                 last_modified_by_type: Optional[str] = None):
+        """
+        Metadata pertaining to creation and last modification of the resource.
+        :param str created_at: The timestamp of resource creation (UTC).
+        :param str created_by: The identity that created the resource.
+        :param str created_by_type: The type of identity that created the resource.
+        :param str last_modified_at: The timestamp of resource last modification (UTC)
+        :param str last_modified_by: The identity that last modified the resource.
+        :param str last_modified_by_type: The type of identity that last modified the resource.
+        """
+        if created_at is not None:
+            pulumi.set(__self__, "created_at", created_at)
+        if created_by is not None:
+            pulumi.set(__self__, "created_by", created_by)
+        if created_by_type is not None:
+            pulumi.set(__self__, "created_by_type", created_by_type)
+        if last_modified_at is not None:
+            pulumi.set(__self__, "last_modified_at", last_modified_at)
+        if last_modified_by is not None:
+            pulumi.set(__self__, "last_modified_by", last_modified_by)
+        if last_modified_by_type is not None:
+            pulumi.set(__self__, "last_modified_by_type", last_modified_by_type)
+
+    @property
+    @pulumi.getter(name="createdAt")
+    def created_at(self) -> Optional[str]:
+        """
+        The timestamp of resource creation (UTC).
+        """
+        return pulumi.get(self, "created_at")
+
+    @property
+    @pulumi.getter(name="createdBy")
+    def created_by(self) -> Optional[str]:
+        """
+        The identity that created the resource.
+        """
+        return pulumi.get(self, "created_by")
+
+    @property
+    @pulumi.getter(name="createdByType")
+    def created_by_type(self) -> Optional[str]:
+        """
+        The type of identity that created the resource.
+        """
+        return pulumi.get(self, "created_by_type")
+
+    @property
+    @pulumi.getter(name="lastModifiedAt")
+    def last_modified_at(self) -> Optional[str]:
+        """
+        The timestamp of resource last modification (UTC)
+        """
+        return pulumi.get(self, "last_modified_at")
+
+    @property
+    @pulumi.getter(name="lastModifiedBy")
+    def last_modified_by(self) -> Optional[str]:
+        """
+        The identity that last modified the resource.
+        """
+        return pulumi.get(self, "last_modified_by")
+
+    @property
+    @pulumi.getter(name="lastModifiedByType")
+    def last_modified_by_type(self) -> Optional[str]:
+        """
+        The type of identity that last modified the resource.
+        """
+        return pulumi.get(self, "last_modified_by_type")
+
+