pulumi-azure-native 2.52.0a1722242159__py3-none-any.whl → 2.52.1__py3-none-any.whl

pulumi_azure_native/authorization/v20240501/_inputs.py

@@ -0,0 +1,839 @@
+# coding=utf-8
+# *** WARNING: this file was generated by pulumi-language-python. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import copy
+import warnings
+import sys
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
+from ... import _utilities
+from ._enums import *
+
+__all__ = [
+    'IdentityArgs',
+    'IdentityArgsDict',
+    'NonComplianceMessageArgs',
+    'NonComplianceMessageArgsDict',
+    'OverrideArgs',
+    'OverrideArgsDict',
+    'ParameterDefinitionsValueMetadataArgs',
+    'ParameterDefinitionsValueMetadataArgsDict',
+    'ParameterDefinitionsValueArgs',
+    'ParameterDefinitionsValueArgsDict',
+    'ParameterValuesValueArgs',
+    'ParameterValuesValueArgsDict',
+    'PolicyDefinitionGroupArgs',
+    'PolicyDefinitionGroupArgsDict',
+    'PolicyDefinitionReferenceArgs',
+    'PolicyDefinitionReferenceArgsDict',
+    'ResourceSelectorArgs',
+    'ResourceSelectorArgsDict',
+    'SelectorArgs',
+    'SelectorArgsDict',
+]
+
+MYPY = False
+
+if not MYPY:
+    class IdentityArgsDict(TypedDict):
+        """
+        Identity for the resource.  Policy assignments support a maximum of one identity.  That is either a system assigned identity or a single user assigned identity.
+        """
+        type: NotRequired[pulumi.Input['ResourceIdentityType']]
+        """
+        The identity type. This is the only required field when adding a system or user assigned identity to a resource.
+        """
+        user_assigned_identities: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        The user identity associated with the policy. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.
+        """
+elif False:
+    IdentityArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class IdentityArgs:
+    def __init__(__self__, *,
+                 type: Optional[pulumi.Input['ResourceIdentityType']] = None,
+                 user_assigned_identities: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
+        """
+        Identity for the resource.  Policy assignments support a maximum of one identity.  That is either a system assigned identity or a single user assigned identity.
+        :param pulumi.Input['ResourceIdentityType'] type: The identity type. This is the only required field when adding a system or user assigned identity to a resource.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] user_assigned_identities: The user identity associated with the policy. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.
+        """
+        if type is not None:
+            pulumi.set(__self__, "type", type)
+        if user_assigned_identities is not None:
+            pulumi.set(__self__, "user_assigned_identities", user_assigned_identities)
+
+    @property
+    @pulumi.getter
+    def type(self) -> Optional[pulumi.Input['ResourceIdentityType']]:
+        """
+        The identity type. This is the only required field when adding a system or user assigned identity to a resource.
+        """
+        return pulumi.get(self, "type")
+
+    @type.setter
+    def type(self, value: Optional[pulumi.Input['ResourceIdentityType']]):
+        pulumi.set(self, "type", value)
+
+    @property
+    @pulumi.getter(name="userAssignedIdentities")
+    def user_assigned_identities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        The user identity associated with the policy. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.
+        """
+        return pulumi.get(self, "user_assigned_identities")
+
+    @user_assigned_identities.setter
+    def user_assigned_identities(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "user_assigned_identities", value)
+
+
+if not MYPY:
+    class NonComplianceMessageArgsDict(TypedDict):
+        """
+        A message that describes why a resource is non-compliant with the policy. This is shown in 'deny' error messages and on resource's non-compliant compliance results.
+        """
+        message: pulumi.Input[str]
+        """
+        A message that describes why a resource is non-compliant with the policy. This is shown in 'deny' error messages and on resource's non-compliant compliance results.
+        """
+        policy_definition_reference_id: NotRequired[pulumi.Input[str]]
+        """
+        The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If this is not provided the message applies to all policies assigned by this policy assignment.
+        """
+elif False:
+    NonComplianceMessageArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class NonComplianceMessageArgs:
+    def __init__(__self__, *,
+                 message: pulumi.Input[str],
+                 policy_definition_reference_id: Optional[pulumi.Input[str]] = None):
+        """
+        A message that describes why a resource is non-compliant with the policy. This is shown in 'deny' error messages and on resource's non-compliant compliance results.
+        :param pulumi.Input[str] message: A message that describes why a resource is non-compliant with the policy. This is shown in 'deny' error messages and on resource's non-compliant compliance results.
+        :param pulumi.Input[str] policy_definition_reference_id: The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If this is not provided the message applies to all policies assigned by this policy assignment.
+        """
+        pulumi.set(__self__, "message", message)
+        if policy_definition_reference_id is not None:
+            pulumi.set(__self__, "policy_definition_reference_id", policy_definition_reference_id)
+
+    @property
+    @pulumi.getter
+    def message(self) -> pulumi.Input[str]:
+        """
+        A message that describes why a resource is non-compliant with the policy. This is shown in 'deny' error messages and on resource's non-compliant compliance results.
+        """
+        return pulumi.get(self, "message")
+
+    @message.setter
+    def message(self, value: pulumi.Input[str]):
+        pulumi.set(self, "message", value)
+
+    @property
+    @pulumi.getter(name="policyDefinitionReferenceId")
+    def policy_definition_reference_id(self) -> Optional[pulumi.Input[str]]:
+        """
+        The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If this is not provided the message applies to all policies assigned by this policy assignment.
+        """
+        return pulumi.get(self, "policy_definition_reference_id")
+
+    @policy_definition_reference_id.setter
+    def policy_definition_reference_id(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "policy_definition_reference_id", value)
+
+
+if not MYPY:
+    class OverrideArgsDict(TypedDict):
+        """
+        The policy property value override.
+        """
+        kind: NotRequired[pulumi.Input[Union[str, 'OverrideKind']]]
+        """
+        The override kind.
+        """
+        selectors: NotRequired[pulumi.Input[Sequence[pulumi.Input['SelectorArgsDict']]]]
+        """
+        The list of the selector expressions.
+        """
+        value: NotRequired[pulumi.Input[str]]
+        """
+        The value to override the policy property.
+        """
+elif False:
+    OverrideArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class OverrideArgs:
+    def __init__(__self__, *,
+                 kind: Optional[pulumi.Input[Union[str, 'OverrideKind']]] = None,
+                 selectors: Optional[pulumi.Input[Sequence[pulumi.Input['SelectorArgs']]]] = None,
+                 value: Optional[pulumi.Input[str]] = None):
+        """
+        The policy property value override.
+        :param pulumi.Input[Union[str, 'OverrideKind']] kind: The override kind.
+        :param pulumi.Input[Sequence[pulumi.Input['SelectorArgs']]] selectors: The list of the selector expressions.
+        :param pulumi.Input[str] value: The value to override the policy property.
+        """
+        if kind is not None:
+            pulumi.set(__self__, "kind", kind)
+        if selectors is not None:
+            pulumi.set(__self__, "selectors", selectors)
+        if value is not None:
+            pulumi.set(__self__, "value", value)
+
+    @property
+    @pulumi.getter
+    def kind(self) -> Optional[pulumi.Input[Union[str, 'OverrideKind']]]:
+        """
+        The override kind.
+        """
+        return pulumi.get(self, "kind")
+
+    @kind.setter
+    def kind(self, value: Optional[pulumi.Input[Union[str, 'OverrideKind']]]):
+        pulumi.set(self, "kind", value)
+
+    @property
+    @pulumi.getter
+    def selectors(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['SelectorArgs']]]]:
+        """
+        The list of the selector expressions.
+        """
+        return pulumi.get(self, "selectors")
+
+    @selectors.setter
+    def selectors(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['SelectorArgs']]]]):
+        pulumi.set(self, "selectors", value)
+
+    @property
+    @pulumi.getter
+    def value(self) -> Optional[pulumi.Input[str]]:
+        """
+        The value to override the policy property.
+        """
+        return pulumi.get(self, "value")
+
+    @value.setter
+    def value(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "value", value)
+
+
+if not MYPY:
+    class ParameterDefinitionsValueMetadataArgsDict(TypedDict):
+        """
+        General metadata for the parameter.
+        """
+        assign_permissions: NotRequired[pulumi.Input[bool]]
+        """
+        Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope.
+        """
+        description: NotRequired[pulumi.Input[str]]
+        """
+        The description of the parameter.
+        """
+        display_name: NotRequired[pulumi.Input[str]]
+        """
+        The display name for the parameter.
+        """
+        strong_type: NotRequired[pulumi.Input[str]]
+        """
+        Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from.
+        """
+elif False:
+    ParameterDefinitionsValueMetadataArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ParameterDefinitionsValueMetadataArgs:
+    def __init__(__self__, *,
+                 assign_permissions: Optional[pulumi.Input[bool]] = None,
+                 description: Optional[pulumi.Input[str]] = None,
+                 display_name: Optional[pulumi.Input[str]] = None,
+                 strong_type: Optional[pulumi.Input[str]] = None):
+        """
+        General metadata for the parameter.
+        :param pulumi.Input[bool] assign_permissions: Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope.
+        :param pulumi.Input[str] description: The description of the parameter.
+        :param pulumi.Input[str] display_name: The display name for the parameter.
+        :param pulumi.Input[str] strong_type: Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from.
+        """
+        if assign_permissions is not None:
+            pulumi.set(__self__, "assign_permissions", assign_permissions)
+        if description is not None:
+            pulumi.set(__self__, "description", description)
+        if display_name is not None:
+            pulumi.set(__self__, "display_name", display_name)
+        if strong_type is not None:
+            pulumi.set(__self__, "strong_type", strong_type)
+
+    @property
+    @pulumi.getter(name="assignPermissions")
+    def assign_permissions(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope.
+        """
+        return pulumi.get(self, "assign_permissions")
+
+    @assign_permissions.setter
+    def assign_permissions(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "assign_permissions", value)
+
+    @property
+    @pulumi.getter
+    def description(self) -> Optional[pulumi.Input[str]]:
+        """
+        The description of the parameter.
+        """
+        return pulumi.get(self, "description")
+
+    @description.setter
+    def description(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "description", value)
+
+    @property
+    @pulumi.getter(name="displayName")
+    def display_name(self) -> Optional[pulumi.Input[str]]:
+        """
+        The display name for the parameter.
+        """
+        return pulumi.get(self, "display_name")
+
+    @display_name.setter
+    def display_name(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "display_name", value)
+
+    @property
+    @pulumi.getter(name="strongType")
+    def strong_type(self) -> Optional[pulumi.Input[str]]:
+        """
+        Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from.
+        """
+        return pulumi.get(self, "strong_type")
+
+    @strong_type.setter
+    def strong_type(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "strong_type", value)
+
+
+if not MYPY:
+    class ParameterDefinitionsValueArgsDict(TypedDict):
+        """
+        The definition of a parameter that can be provided to the policy.
+        """
+        allowed_values: NotRequired[pulumi.Input[Sequence[Any]]]
+        """
+        The allowed values for the parameter.
+        """
+        default_value: NotRequired[Any]
+        """
+        The default value for the parameter if no value is provided.
+        """
+        metadata: NotRequired[pulumi.Input['ParameterDefinitionsValueMetadataArgsDict']]
+        """
+        General metadata for the parameter.
+        """
+        schema: NotRequired[Any]
+        """
+        Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/.
+        """
+        type: NotRequired[pulumi.Input[Union[str, 'ParameterType']]]
+        """
+        The data type of the parameter.
+        """
+elif False:
+    ParameterDefinitionsValueArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ParameterDefinitionsValueArgs:
+    def __init__(__self__, *,
+                 allowed_values: Optional[pulumi.Input[Sequence[Any]]] = None,
+                 default_value: Optional[Any] = None,
+                 metadata: Optional[pulumi.Input['ParameterDefinitionsValueMetadataArgs']] = None,
+                 schema: Optional[Any] = None,
+                 type: Optional[pulumi.Input[Union[str, 'ParameterType']]] = None):
+        """
+        The definition of a parameter that can be provided to the policy.
+        :param pulumi.Input[Sequence[Any]] allowed_values: The allowed values for the parameter.
+        :param Any default_value: The default value for the parameter if no value is provided.
+        :param pulumi.Input['ParameterDefinitionsValueMetadataArgs'] metadata: General metadata for the parameter.
+        :param Any schema: Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/.
+        :param pulumi.Input[Union[str, 'ParameterType']] type: The data type of the parameter.
+        """
+        if allowed_values is not None:
+            pulumi.set(__self__, "allowed_values", allowed_values)
+        if default_value is not None:
+            pulumi.set(__self__, "default_value", default_value)
+        if metadata is not None:
+            pulumi.set(__self__, "metadata", metadata)
+        if schema is not None:
+            pulumi.set(__self__, "schema", schema)
+        if type is not None:
+            pulumi.set(__self__, "type", type)
+
+    @property
+    @pulumi.getter(name="allowedValues")
+    def allowed_values(self) -> Optional[pulumi.Input[Sequence[Any]]]:
+        """
+        The allowed values for the parameter.
+        """
+        return pulumi.get(self, "allowed_values")
+
+    @allowed_values.setter
+    def allowed_values(self, value: Optional[pulumi.Input[Sequence[Any]]]):
+        pulumi.set(self, "allowed_values", value)
+
+    @property
+    @pulumi.getter(name="defaultValue")
+    def default_value(self) -> Optional[Any]:
+        """
+        The default value for the parameter if no value is provided.
+        """
+        return pulumi.get(self, "default_value")
+
+    @default_value.setter
+    def default_value(self, value: Optional[Any]):
+        pulumi.set(self, "default_value", value)
+
+    @property
+    @pulumi.getter
+    def metadata(self) -> Optional[pulumi.Input['ParameterDefinitionsValueMetadataArgs']]:
+        """
+        General metadata for the parameter.
+        """
+        return pulumi.get(self, "metadata")
+
+    @metadata.setter
+    def metadata(self, value: Optional[pulumi.Input['ParameterDefinitionsValueMetadataArgs']]):
+        pulumi.set(self, "metadata", value)
+
+    @property
+    @pulumi.getter
+    def schema(self) -> Optional[Any]:
+        """
+        Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/.
+        """
+        return pulumi.get(self, "schema")
+
+    @schema.setter
+    def schema(self, value: Optional[Any]):
+        pulumi.set(self, "schema", value)
+
+    @property
+    @pulumi.getter
+    def type(self) -> Optional[pulumi.Input[Union[str, 'ParameterType']]]:
+        """
+        The data type of the parameter.
+        """
+        return pulumi.get(self, "type")
+
+    @type.setter
+    def type(self, value: Optional[pulumi.Input[Union[str, 'ParameterType']]]):
+        pulumi.set(self, "type", value)
+
+
+if not MYPY:
+    class ParameterValuesValueArgsDict(TypedDict):
+        """
+        The value of a parameter.
+        """
+        value: NotRequired[Any]
+        """
+        The value of the parameter.
+        """
+elif False:
+    ParameterValuesValueArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ParameterValuesValueArgs:
+    def __init__(__self__, *,
+                 value: Optional[Any] = None):
+        """
+        The value of a parameter.
+        :param Any value: The value of the parameter.
+        """
+        if value is not None:
+            pulumi.set(__self__, "value", value)
+
+    @property
+    @pulumi.getter
+    def value(self) -> Optional[Any]:
+        """
+        The value of the parameter.
+        """
+        return pulumi.get(self, "value")
+
+    @value.setter
+    def value(self, value: Optional[Any]):
+        pulumi.set(self, "value", value)
+
+
+if not MYPY:
+    class PolicyDefinitionGroupArgsDict(TypedDict):
+        """
+        The policy definition group.
+        """
+        name: pulumi.Input[str]
+        """
+        The name of the group.
+        """
+        additional_metadata_id: NotRequired[pulumi.Input[str]]
+        """
+        A resource ID of a resource that contains additional metadata about the group.
+        """
+        category: NotRequired[pulumi.Input[str]]
+        """
+        The group's category.
+        """
+        description: NotRequired[pulumi.Input[str]]
+        """
+        The group's description.
+        """
+        display_name: NotRequired[pulumi.Input[str]]
+        """
+        The group's display name.
+        """
+elif False:
+    PolicyDefinitionGroupArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class PolicyDefinitionGroupArgs:
+    def __init__(__self__, *,
+                 name: pulumi.Input[str],
+                 additional_metadata_id: Optional[pulumi.Input[str]] = None,
+                 category: Optional[pulumi.Input[str]] = None,
+                 description: Optional[pulumi.Input[str]] = None,
+                 display_name: Optional[pulumi.Input[str]] = None):
+        """
+        The policy definition group.
+        :param pulumi.Input[str] name: The name of the group.
+        :param pulumi.Input[str] additional_metadata_id: A resource ID of a resource that contains additional metadata about the group.
+        :param pulumi.Input[str] category: The group's category.
+        :param pulumi.Input[str] description: The group's description.
+        :param pulumi.Input[str] display_name: The group's display name.
+        """
+        pulumi.set(__self__, "name", name)
+        if additional_metadata_id is not None:
+            pulumi.set(__self__, "additional_metadata_id", additional_metadata_id)
+        if category is not None:
+            pulumi.set(__self__, "category", category)
+        if description is not None:
+            pulumi.set(__self__, "description", description)
+        if display_name is not None:
+            pulumi.set(__self__, "display_name", display_name)
+
+    @property
+    @pulumi.getter
+    def name(self) -> pulumi.Input[str]:
+        """
+        The name of the group.
+        """
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: pulumi.Input[str]):
+        pulumi.set(self, "name", value)
+
+    @property
+    @pulumi.getter(name="additionalMetadataId")
+    def additional_metadata_id(self) -> Optional[pulumi.Input[str]]:
+        """
+        A resource ID of a resource that contains additional metadata about the group.
+        """
+        return pulumi.get(self, "additional_metadata_id")
+
+    @additional_metadata_id.setter
+    def additional_metadata_id(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "additional_metadata_id", value)
+
+    @property
+    @pulumi.getter
+    def category(self) -> Optional[pulumi.Input[str]]:
+        """
+        The group's category.
+        """
+        return pulumi.get(self, "category")
+
+    @category.setter
+    def category(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "category", value)
+
+    @property
+    @pulumi.getter
+    def description(self) -> Optional[pulumi.Input[str]]:
+        """
+        The group's description.
+        """
+        return pulumi.get(self, "description")
+
+    @description.setter
+    def description(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "description", value)
+
+    @property
+    @pulumi.getter(name="displayName")
+    def display_name(self) -> Optional[pulumi.Input[str]]:
+        """
+        The group's display name.
+        """
+        return pulumi.get(self, "display_name")
+
+    @display_name.setter
+    def display_name(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "display_name", value)
+
+
+if not MYPY:
+    class PolicyDefinitionReferenceArgsDict(TypedDict):
+        """
+        The policy definition reference.
+        """
+        policy_definition_id: pulumi.Input[str]
+        """
+        The ID of the policy definition or policy set definition.
+        """
+        definition_version: NotRequired[pulumi.Input[str]]
+        """
+        The version of the policy definition to use.
+        """
+        group_names: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        The name of the groups that this policy definition reference belongs to.
+        """
+        parameters: NotRequired[pulumi.Input[Mapping[str, pulumi.Input['ParameterValuesValueArgsDict']]]]
+        """
+        The parameter values for the referenced policy rule. The keys are the parameter names.
+        """
+        policy_definition_reference_id: NotRequired[pulumi.Input[str]]
+        """
+        A unique id (within the policy set definition) for this policy definition reference.
+        """
+elif False:
+    PolicyDefinitionReferenceArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class PolicyDefinitionReferenceArgs:
+    def __init__(__self__, *,
+                 policy_definition_id: pulumi.Input[str],
+                 definition_version: Optional[pulumi.Input[str]] = None,
+                 group_names: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 parameters: Optional[pulumi.Input[Mapping[str, pulumi.Input['ParameterValuesValueArgs']]]] = None,
+                 policy_definition_reference_id: Optional[pulumi.Input[str]] = None):
+        """
+        The policy definition reference.
+        :param pulumi.Input[str] policy_definition_id: The ID of the policy definition or policy set definition.
+        :param pulumi.Input[str] definition_version: The version of the policy definition to use.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] group_names: The name of the groups that this policy definition reference belongs to.
+        :param pulumi.Input[Mapping[str, pulumi.Input['ParameterValuesValueArgs']]] parameters: The parameter values for the referenced policy rule. The keys are the parameter names.
+        :param pulumi.Input[str] policy_definition_reference_id: A unique id (within the policy set definition) for this policy definition reference.
+        """
+        pulumi.set(__self__, "policy_definition_id", policy_definition_id)
+        if definition_version is not None:
+            pulumi.set(__self__, "definition_version", definition_version)
+        if group_names is not None:
+            pulumi.set(__self__, "group_names", group_names)
+        if parameters is not None:
+            pulumi.set(__self__, "parameters", parameters)
+        if policy_definition_reference_id is not None:
+            pulumi.set(__self__, "policy_definition_reference_id", policy_definition_reference_id)
+
+    @property
+    @pulumi.getter(name="policyDefinitionId")
+    def policy_definition_id(self) -> pulumi.Input[str]:
+        """
+        The ID of the policy definition or policy set definition.
+        """
+        return pulumi.get(self, "policy_definition_id")
+
+    @policy_definition_id.setter
+    def policy_definition_id(self, value: pulumi.Input[str]):
+        pulumi.set(self, "policy_definition_id", value)
+
+    @property
+    @pulumi.getter(name="definitionVersion")
+    def definition_version(self) -> Optional[pulumi.Input[str]]:
+        """
+        The version of the policy definition to use.
+        """
+        return pulumi.get(self, "definition_version")
+
+    @definition_version.setter
+    def definition_version(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "definition_version", value)
+
+    @property
+    @pulumi.getter(name="groupNames")
+    def group_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        The name of the groups that this policy definition reference belongs to.
+        """
+        return pulumi.get(self, "group_names")
+
+    @group_names.setter
+    def group_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "group_names", value)
+
+    @property
+    @pulumi.getter
+    def parameters(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input['ParameterValuesValueArgs']]]]:
+        """
+        The parameter values for the referenced policy rule. The keys are the parameter names.
+        """
+        return pulumi.get(self, "parameters")
+
+    @parameters.setter
+    def parameters(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input['ParameterValuesValueArgs']]]]):
+        pulumi.set(self, "parameters", value)
+
+    @property
+    @pulumi.getter(name="policyDefinitionReferenceId")
+    def policy_definition_reference_id(self) -> Optional[pulumi.Input[str]]:
+        """
+        A unique id (within the policy set definition) for this policy definition reference.
+        """
+        return pulumi.get(self, "policy_definition_reference_id")
+
+    @policy_definition_reference_id.setter
+    def policy_definition_reference_id(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "policy_definition_reference_id", value)
+
+
+if not MYPY:
+    class ResourceSelectorArgsDict(TypedDict):
+        """
+        The resource selector to filter policies by resource properties.
+        """
+        name: NotRequired[pulumi.Input[str]]
+        """
+        The name of the resource selector.
+        """
+        selectors: NotRequired[pulumi.Input[Sequence[pulumi.Input['SelectorArgsDict']]]]
+        """
+        The list of the selector expressions.
+        """
+elif False:
+    ResourceSelectorArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ResourceSelectorArgs:
+    def __init__(__self__, *,
+                 name: Optional[pulumi.Input[str]] = None,
+                 selectors: Optional[pulumi.Input[Sequence[pulumi.Input['SelectorArgs']]]] = None):
+        """
+        The resource selector to filter policies by resource properties.
+        :param pulumi.Input[str] name: The name of the resource selector.
+        :param pulumi.Input[Sequence[pulumi.Input['SelectorArgs']]] selectors: The list of the selector expressions.
+        """
+        if name is not None:
+            pulumi.set(__self__, "name", name)
+        if selectors is not None:
+            pulumi.set(__self__, "selectors", selectors)
+
+    @property
+    @pulumi.getter
+    def name(self) -> Optional[pulumi.Input[str]]:
+        """
+        The name of the resource selector.
+        """
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "name", value)
+
+    @property
+    @pulumi.getter
+    def selectors(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['SelectorArgs']]]]:
+        """
+        The list of the selector expressions.
+        """
+        return pulumi.get(self, "selectors")
+
+    @selectors.setter
+    def selectors(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['SelectorArgs']]]]):
+        pulumi.set(self, "selectors", value)
+
+
+if not MYPY:
+    class SelectorArgsDict(TypedDict):
+        """
+        The selector expression.
+        """
+        in_: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        The list of values to filter in.
+        """
+        kind: NotRequired[pulumi.Input[Union[str, 'SelectorKind']]]
+        """
+        The selector kind.
+        """
+        not_in: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        The list of values to filter out.
+        """
+elif False:
+    SelectorArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class SelectorArgs:
+    def __init__(__self__, *,
+                 in_: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 kind: Optional[pulumi.Input[Union[str, 'SelectorKind']]] = None,
+                 not_in: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
+        """
+        The selector expression.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] in_: The list of values to filter in.
+        :param pulumi.Input[Union[str, 'SelectorKind']] kind: The selector kind.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] not_in: The list of values to filter out.
+        """
+        if in_ is not None:
+            pulumi.set(__self__, "in_", in_)
+        if kind is not None:
+            pulumi.set(__self__, "kind", kind)
+        if not_in is not None:
+            pulumi.set(__self__, "not_in", not_in)
+
+    @property
+    @pulumi.getter(name="in")
+    def in_(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        The list of values to filter in.
+        """
+        return pulumi.get(self, "in_")
+
+    @in_.setter
+    def in_(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "in_", value)
+
+    @property
+    @pulumi.getter
+    def kind(self) -> Optional[pulumi.Input[Union[str, 'SelectorKind']]]:
+        """
+        The selector kind.
+        """
+        return pulumi.get(self, "kind")
+
+    @kind.setter
+    def kind(self, value: Optional[pulumi.Input[Union[str, 'SelectorKind']]]):
+        pulumi.set(self, "kind", value)
+
+    @property
+    @pulumi.getter(name="notIn")
+    def not_in(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        The list of values to filter out.
+        """
+        return pulumi.get(self, "not_in")
+
+    @not_in.setter
+    def not_in(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "not_in", value)
+
+