pulumi-azure-native 2.72.0a1731341920__py3-none-any.whl → 2.73.0__py3-none-any.whl

pulumi_azure_native/authorization/get_policy_set_definition_version.py

@@ -182,7 +182,8 @@ class AwaitableGetPolicySetDefinitionVersionResult(GetPolicySetDefinitionVersion
             version=self.version)
 
 
-def get_policy_set_definition_version(policy_definition_version: Optional[str] = None,
+def get_policy_set_definition_version(expand: Optional[str] = None,
+                                      policy_definition_version: Optional[str] = None,
                                       policy_set_definition_name: Optional[str] = None,
                                       opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetPolicySetDefinitionVersionResult:
     """
@@ -192,10 +193,12 @@ def get_policy_set_definition_version(policy_definition_version: Optional[str] =
     Other available API versions: 2024-05-01.
 
 
+    :param str expand: Comma-separated list of additional properties to be included in the response. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'.
     :param str policy_definition_version: The policy set definition version.  The format is x.y.z where x is the major version number, y is the minor version number, and z is the patch number
     :param str policy_set_definition_name: The name of the policy set definition.
     """
     __args__ = dict()
+    __args__['expand'] = expand
     __args__['policyDefinitionVersion'] = policy_definition_version
     __args__['policySetDefinitionName'] = policy_set_definition_name
     opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
@@ -214,7 +217,8 @@ def get_policy_set_definition_version(policy_definition_version: Optional[str] =
         system_data=pulumi.get(__ret__, 'system_data'),
         type=pulumi.get(__ret__, 'type'),
         version=pulumi.get(__ret__, 'version'))
-def get_policy_set_definition_version_output(policy_definition_version: Optional[pulumi.Input[str]] = None,
+def get_policy_set_definition_version_output(expand: Optional[pulumi.Input[Optional[str]]] = None,
+                                             policy_definition_version: Optional[pulumi.Input[str]] = None,
                                              policy_set_definition_name: Optional[pulumi.Input[str]] = None,
                                              opts: Optional[pulumi.InvokeOptions] = None) -> pulumi.Output[GetPolicySetDefinitionVersionResult]:
     """
@@ -224,10 +228,12 @@ def get_policy_set_definition_version_output(policy_definition_version: Optional
     Other available API versions: 2024-05-01.
 
 
+    :param str expand: Comma-separated list of additional properties to be included in the response. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'.
     :param str policy_definition_version: The policy set definition version.  The format is x.y.z where x is the major version number, y is the minor version number, and z is the patch number
     :param str policy_set_definition_name: The name of the policy set definition.
     """
     __args__ = dict()
+    __args__['expand'] = expand
     __args__['policyDefinitionVersion'] = policy_definition_version
     __args__['policySetDefinitionName'] = policy_set_definition_name
     opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)

pulumi_azure_native/authorization/get_policy_set_definition_version_at_management_group.py

@@ -182,7 +182,8 @@ class AwaitableGetPolicySetDefinitionVersionAtManagementGroupResult(GetPolicySet
             version=self.version)
 
 
-def get_policy_set_definition_version_at_management_group(management_group_name: Optional[str] = None,
+def get_policy_set_definition_version_at_management_group(expand: Optional[str] = None,
+                                                          management_group_name: Optional[str] = None,
                                                           policy_definition_version: Optional[str] = None,
                                                           policy_set_definition_name: Optional[str] = None,
                                                           opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetPolicySetDefinitionVersionAtManagementGroupResult:
@@ -193,11 +194,13 @@ def get_policy_set_definition_version_at_management_group(management_group_name:
     Other available API versions: 2024-05-01.
 
 
+    :param str expand: Comma-separated list of additional properties to be included in the response. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'.
     :param str management_group_name: The name of the management group. The name is case insensitive.
     :param str policy_definition_version: The policy set definition version.  The format is x.y.z where x is the major version number, y is the minor version number, and z is the patch number
     :param str policy_set_definition_name: The name of the policy set definition.
     """
     __args__ = dict()
+    __args__['expand'] = expand
     __args__['managementGroupName'] = management_group_name
     __args__['policyDefinitionVersion'] = policy_definition_version
     __args__['policySetDefinitionName'] = policy_set_definition_name
@@ -217,7 +220,8 @@ def get_policy_set_definition_version_at_management_group(management_group_name:
         system_data=pulumi.get(__ret__, 'system_data'),
         type=pulumi.get(__ret__, 'type'),
         version=pulumi.get(__ret__, 'version'))
-def get_policy_set_definition_version_at_management_group_output(management_group_name: Optional[pulumi.Input[str]] = None,
+def get_policy_set_definition_version_at_management_group_output(expand: Optional[pulumi.Input[Optional[str]]] = None,
+                                                                 management_group_name: Optional[pulumi.Input[str]] = None,
                                                                  policy_definition_version: Optional[pulumi.Input[str]] = None,
                                                                  policy_set_definition_name: Optional[pulumi.Input[str]] = None,
                                                                  opts: Optional[pulumi.InvokeOptions] = None) -> pulumi.Output[GetPolicySetDefinitionVersionAtManagementGroupResult]:
@@ -228,11 +232,13 @@ def get_policy_set_definition_version_at_management_group_output(management_grou
     Other available API versions: 2024-05-01.
 
 
+    :param str expand: Comma-separated list of additional properties to be included in the response. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'.
     :param str management_group_name: The name of the management group. The name is case insensitive.
     :param str policy_definition_version: The policy set definition version.  The format is x.y.z where x is the major version number, y is the minor version number, and z is the patch number
     :param str policy_set_definition_name: The name of the policy set definition.
     """
     __args__ = dict()
+    __args__['expand'] = expand
     __args__['managementGroupName'] = management_group_name
     __args__['policyDefinitionVersion'] = policy_definition_version
     __args__['policySetDefinitionName'] = policy_set_definition_name

pulumi_azure_native/authorization/outputs.py

@@ -1695,7 +1695,11 @@ class PolicyDefinitionReferenceResponse(dict):
     @staticmethod
     def __key_warning(key: str):
         suggest = None
-        if key == "policyDefinitionId":
+        if key == "effectiveDefinitionVersion":
+            suggest = "effective_definition_version"
+        elif key == "latestDefinitionVersion":
+            suggest = "latest_definition_version"
+        elif key == "policyDefinitionId":
             suggest = "policy_definition_id"
         elif key == "definitionVersion":
             suggest = "definition_version"
@@ -1716,6 +1720,8 @@ class PolicyDefinitionReferenceResponse(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
+                 effective_definition_version: str,
+                 latest_definition_version: str,
                  policy_definition_id: str,
                  definition_version: Optional[str] = None,
                  group_names: Optional[Sequence[str]] = None,
@@ -1723,12 +1729,16 @@ class PolicyDefinitionReferenceResponse(dict):
                  policy_definition_reference_id: Optional[str] = None):
         """
         The policy definition reference.
+        :param str effective_definition_version: The effective version of the policy definition in use. This is only present if requested via the $expand query parameter.
+        :param str latest_definition_version: The latest version of the policy definition available. This is only present if requested via the $expand query parameter.
         :param str policy_definition_id: The ID of the policy definition or policy set definition.
         :param str definition_version: The version of the policy definition to use.
         :param Sequence[str] group_names: The name of the groups that this policy definition reference belongs to.
         :param Mapping[str, 'ParameterValuesValueResponse'] parameters: The parameter values for the referenced policy rule. The keys are the parameter names.
         :param str policy_definition_reference_id: A unique id (within the policy set definition) for this policy definition reference.
         """
+        pulumi.set(__self__, "effective_definition_version", effective_definition_version)
+        pulumi.set(__self__, "latest_definition_version", latest_definition_version)
         pulumi.set(__self__, "policy_definition_id", policy_definition_id)
         if definition_version is not None:
             pulumi.set(__self__, "definition_version", definition_version)
@@ -1739,6 +1749,22 @@ class PolicyDefinitionReferenceResponse(dict):
         if policy_definition_reference_id is not None:
             pulumi.set(__self__, "policy_definition_reference_id", policy_definition_reference_id)
 
+    @property
+    @pulumi.getter(name="effectiveDefinitionVersion")
+    def effective_definition_version(self) -> str:
+        """
+        The effective version of the policy definition in use. This is only present if requested via the $expand query parameter.
+        """
+        return pulumi.get(self, "effective_definition_version")
+
+    @property
+    @pulumi.getter(name="latestDefinitionVersion")
+    def latest_definition_version(self) -> str:
+        """
+        The latest version of the policy definition available. This is only present if requested via the $expand query parameter.
+        """
+        return pulumi.get(self, "latest_definition_version")
+
     @property
     @pulumi.getter(name="policyDefinitionId")
     def policy_definition_id(self) -> str:

pulumi_azure_native/authorization/v20230401/get_policy_assignment.py

@@ -27,7 +27,7 @@ class GetPolicyAssignmentResult:
     """
     The policy assignment.
     """
-    def __init__(__self__, definition_version=None, description=None, display_name=None, enforcement_mode=None, id=None, identity=None, location=None, metadata=None, name=None, non_compliance_messages=None, not_scopes=None, overrides=None, parameters=None, policy_definition_id=None, resource_selectors=None, scope=None, system_data=None, type=None):
+    def __init__(__self__, definition_version=None, description=None, display_name=None, effective_definition_version=None, enforcement_mode=None, id=None, identity=None, latest_definition_version=None, location=None, metadata=None, name=None, non_compliance_messages=None, not_scopes=None, overrides=None, parameters=None, policy_definition_id=None, resource_selectors=None, scope=None, system_data=None, type=None):
         if definition_version and not isinstance(definition_version, str):
             raise TypeError("Expected argument 'definition_version' to be a str")
         pulumi.set(__self__, "definition_version", definition_version)
@@ -37,6 +37,9 @@ class GetPolicyAssignmentResult:
         if display_name and not isinstance(display_name, str):
             raise TypeError("Expected argument 'display_name' to be a str")
         pulumi.set(__self__, "display_name", display_name)
+        if effective_definition_version and not isinstance(effective_definition_version, str):
+            raise TypeError("Expected argument 'effective_definition_version' to be a str")
+        pulumi.set(__self__, "effective_definition_version", effective_definition_version)
         if enforcement_mode and not isinstance(enforcement_mode, str):
             raise TypeError("Expected argument 'enforcement_mode' to be a str")
         pulumi.set(__self__, "enforcement_mode", enforcement_mode)
@@ -46,6 +49,9 @@ class GetPolicyAssignmentResult:
         if identity and not isinstance(identity, dict):
             raise TypeError("Expected argument 'identity' to be a dict")
         pulumi.set(__self__, "identity", identity)
+        if latest_definition_version and not isinstance(latest_definition_version, str):
+            raise TypeError("Expected argument 'latest_definition_version' to be a str")
+        pulumi.set(__self__, "latest_definition_version", latest_definition_version)
         if location and not isinstance(location, str):
             raise TypeError("Expected argument 'location' to be a str")
         pulumi.set(__self__, "location", location)
@@ -107,6 +113,14 @@ class GetPolicyAssignmentResult:
         """
         return pulumi.get(self, "display_name")
 
+    @property
+    @pulumi.getter(name="effectiveDefinitionVersion")
+    def effective_definition_version(self) -> str:
+        """
+        The effective version of the policy definition in use. This is only present if requested via the $expand query parameter.
+        """
+        return pulumi.get(self, "effective_definition_version")
+
     @property
     @pulumi.getter(name="enforcementMode")
     def enforcement_mode(self) -> Optional[str]:
@@ -131,6 +145,14 @@ class GetPolicyAssignmentResult:
         """
         return pulumi.get(self, "identity")
 
+    @property
+    @pulumi.getter(name="latestDefinitionVersion")
+    def latest_definition_version(self) -> str:
+        """
+        The latest version of the policy definition available. This is only present if requested via the $expand query parameter.
+        """
+        return pulumi.get(self, "latest_definition_version")
+
     @property
     @pulumi.getter
     def location(self) -> Optional[str]:
@@ -237,9 +259,11 @@ class AwaitableGetPolicyAssignmentResult(GetPolicyAssignmentResult):
             definition_version=self.definition_version,
             description=self.description,
             display_name=self.display_name,
+            effective_definition_version=self.effective_definition_version,
             enforcement_mode=self.enforcement_mode,
             id=self.id,
             identity=self.identity,
+            latest_definition_version=self.latest_definition_version,
             location=self.location,
             metadata=self.metadata,
             name=self.name,
@@ -254,17 +278,20 @@ class AwaitableGetPolicyAssignmentResult(GetPolicyAssignmentResult):
             type=self.type)
 
 
-def get_policy_assignment(policy_assignment_name: Optional[str] = None,
+def get_policy_assignment(expand: Optional[str] = None,
+                          policy_assignment_name: Optional[str] = None,
                           scope: Optional[str] = None,
                           opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetPolicyAssignmentResult:
     """
     This operation retrieves a single policy assignment, given its name and the scope it was created at.
 
 
+    :param str expand: Comma-separated list of additional properties to be included in the response. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'.
     :param str policy_assignment_name: The name of the policy assignment to get.
     :param str scope: The scope of the policy assignment. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'
     """
     __args__ = dict()
+    __args__['expand'] = expand
     __args__['policyAssignmentName'] = policy_assignment_name
     __args__['scope'] = scope
     opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
@@ -274,9 +301,11 @@ def get_policy_assignment(policy_assignment_name: Optional[str] = None,
         definition_version=pulumi.get(__ret__, 'definition_version'),
         description=pulumi.get(__ret__, 'description'),
         display_name=pulumi.get(__ret__, 'display_name'),
+        effective_definition_version=pulumi.get(__ret__, 'effective_definition_version'),
         enforcement_mode=pulumi.get(__ret__, 'enforcement_mode'),
         id=pulumi.get(__ret__, 'id'),
         identity=pulumi.get(__ret__, 'identity'),
+        latest_definition_version=pulumi.get(__ret__, 'latest_definition_version'),
         location=pulumi.get(__ret__, 'location'),
         metadata=pulumi.get(__ret__, 'metadata'),
         name=pulumi.get(__ret__, 'name'),
@@ -289,17 +318,20 @@ def get_policy_assignment(policy_assignment_name: Optional[str] = None,
         scope=pulumi.get(__ret__, 'scope'),
         system_data=pulumi.get(__ret__, 'system_data'),
         type=pulumi.get(__ret__, 'type'))
-def get_policy_assignment_output(policy_assignment_name: Optional[pulumi.Input[str]] = None,
+def get_policy_assignment_output(expand: Optional[pulumi.Input[Optional[str]]] = None,
+                                 policy_assignment_name: Optional[pulumi.Input[str]] = None,
                                  scope: Optional[pulumi.Input[str]] = None,
                                  opts: Optional[pulumi.InvokeOptions] = None) -> pulumi.Output[GetPolicyAssignmentResult]:
     """
     This operation retrieves a single policy assignment, given its name and the scope it was created at.
 
 
+    :param str expand: Comma-separated list of additional properties to be included in the response. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'.
     :param str policy_assignment_name: The name of the policy assignment to get.
     :param str scope: The scope of the policy assignment. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'
     """
     __args__ = dict()
+    __args__['expand'] = expand
     __args__['policyAssignmentName'] = policy_assignment_name
     __args__['scope'] = scope
     opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
@@ -308,9 +340,11 @@ def get_policy_assignment_output(policy_assignment_name: Optional[pulumi.Input[s
         definition_version=pulumi.get(__response__, 'definition_version'),
         description=pulumi.get(__response__, 'description'),
         display_name=pulumi.get(__response__, 'display_name'),
+        effective_definition_version=pulumi.get(__response__, 'effective_definition_version'),
         enforcement_mode=pulumi.get(__response__, 'enforcement_mode'),
         id=pulumi.get(__response__, 'id'),
         identity=pulumi.get(__response__, 'identity'),
+        latest_definition_version=pulumi.get(__response__, 'latest_definition_version'),
         location=pulumi.get(__response__, 'location'),
         metadata=pulumi.get(__response__, 'metadata'),
         name=pulumi.get(__response__, 'name'),

pulumi_azure_native/authorization/v20230401/get_policy_set_definition.py

@@ -194,15 +194,18 @@ class AwaitableGetPolicySetDefinitionResult(GetPolicySetDefinitionResult):
             versions=self.versions)
 
 
-def get_policy_set_definition(policy_set_definition_name: Optional[str] = None,
+def get_policy_set_definition(expand: Optional[str] = None,
+                              policy_set_definition_name: Optional[str] = None,
                               opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetPolicySetDefinitionResult:
     """
     This operation retrieves the policy set definition in the given subscription with the given name.
 
 
+    :param str expand: Comma-separated list of additional properties to be included in the response. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'.
     :param str policy_set_definition_name: The name of the policy set definition to get.
     """
     __args__ = dict()
+    __args__['expand'] = expand
     __args__['policySetDefinitionName'] = policy_set_definition_name
     opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
     __ret__ = pulumi.runtime.invoke('azure-native:authorization/v20230401:getPolicySetDefinition', __args__, opts=opts, typ=GetPolicySetDefinitionResult).value
@@ -221,15 +224,18 @@ def get_policy_set_definition(policy_set_definition_name: Optional[str] = None,
         type=pulumi.get(__ret__, 'type'),
         version=pulumi.get(__ret__, 'version'),
         versions=pulumi.get(__ret__, 'versions'))
-def get_policy_set_definition_output(policy_set_definition_name: Optional[pulumi.Input[str]] = None,
+def get_policy_set_definition_output(expand: Optional[pulumi.Input[Optional[str]]] = None,
+                                     policy_set_definition_name: Optional[pulumi.Input[str]] = None,
                                      opts: Optional[pulumi.InvokeOptions] = None) -> pulumi.Output[GetPolicySetDefinitionResult]:
     """
     This operation retrieves the policy set definition in the given subscription with the given name.
 
 
+    :param str expand: Comma-separated list of additional properties to be included in the response. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'.
     :param str policy_set_definition_name: The name of the policy set definition to get.
     """
     __args__ = dict()
+    __args__['expand'] = expand
     __args__['policySetDefinitionName'] = policy_set_definition_name
     opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
     __ret__ = pulumi.runtime.invoke_output('azure-native:authorization/v20230401:getPolicySetDefinition', __args__, opts=opts, typ=GetPolicySetDefinitionResult)

pulumi_azure_native/authorization/v20230401/get_policy_set_definition_at_management_group.py

@@ -194,17 +194,20 @@ class AwaitableGetPolicySetDefinitionAtManagementGroupResult(GetPolicySetDefinit
             versions=self.versions)
 
 
-def get_policy_set_definition_at_management_group(management_group_id: Optional[str] = None,
+def get_policy_set_definition_at_management_group(expand: Optional[str] = None,
+                                                  management_group_id: Optional[str] = None,
                                                   policy_set_definition_name: Optional[str] = None,
                                                   opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetPolicySetDefinitionAtManagementGroupResult:
     """
     This operation retrieves the policy set definition in the given management group with the given name.
 
 
+    :param str expand: Comma-separated list of additional properties to be included in the response. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'.
     :param str management_group_id: The ID of the management group.
     :param str policy_set_definition_name: The name of the policy set definition to get.
     """
     __args__ = dict()
+    __args__['expand'] = expand
     __args__['managementGroupId'] = management_group_id
     __args__['policySetDefinitionName'] = policy_set_definition_name
     opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
@@ -224,17 +227,20 @@ def get_policy_set_definition_at_management_group(management_group_id: Optional[
         type=pulumi.get(__ret__, 'type'),
         version=pulumi.get(__ret__, 'version'),
         versions=pulumi.get(__ret__, 'versions'))
-def get_policy_set_definition_at_management_group_output(management_group_id: Optional[pulumi.Input[str]] = None,
+def get_policy_set_definition_at_management_group_output(expand: Optional[pulumi.Input[Optional[str]]] = None,
+                                                         management_group_id: Optional[pulumi.Input[str]] = None,
                                                          policy_set_definition_name: Optional[pulumi.Input[str]] = None,
                                                          opts: Optional[pulumi.InvokeOptions] = None) -> pulumi.Output[GetPolicySetDefinitionAtManagementGroupResult]:
     """
     This operation retrieves the policy set definition in the given management group with the given name.
 
 
+    :param str expand: Comma-separated list of additional properties to be included in the response. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'.
     :param str management_group_id: The ID of the management group.
     :param str policy_set_definition_name: The name of the policy set definition to get.
     """
     __args__ = dict()
+    __args__['expand'] = expand
     __args__['managementGroupId'] = management_group_id
     __args__['policySetDefinitionName'] = policy_set_definition_name
     opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)

pulumi_azure_native/authorization/v20230401/get_policy_set_definition_version.py

@@ -182,17 +182,20 @@ class AwaitableGetPolicySetDefinitionVersionResult(GetPolicySetDefinitionVersion
             version=self.version)
 
 
-def get_policy_set_definition_version(policy_definition_version: Optional[str] = None,
+def get_policy_set_definition_version(expand: Optional[str] = None,
+                                      policy_definition_version: Optional[str] = None,
                                       policy_set_definition_name: Optional[str] = None,
                                       opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetPolicySetDefinitionVersionResult:
     """
     This operation retrieves the policy set definition version in the given subscription with the given name and version.
 
 
+    :param str expand: Comma-separated list of additional properties to be included in the response. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'.
     :param str policy_definition_version: The policy set definition version.  The format is x.y.z where x is the major version number, y is the minor version number, and z is the patch number
     :param str policy_set_definition_name: The name of the policy set definition.
     """
     __args__ = dict()
+    __args__['expand'] = expand
     __args__['policyDefinitionVersion'] = policy_definition_version
     __args__['policySetDefinitionName'] = policy_set_definition_name
     opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
@@ -211,17 +214,20 @@ def get_policy_set_definition_version(policy_definition_version: Optional[str] =
         system_data=pulumi.get(__ret__, 'system_data'),
         type=pulumi.get(__ret__, 'type'),
         version=pulumi.get(__ret__, 'version'))
-def get_policy_set_definition_version_output(policy_definition_version: Optional[pulumi.Input[str]] = None,
+def get_policy_set_definition_version_output(expand: Optional[pulumi.Input[Optional[str]]] = None,
+                                             policy_definition_version: Optional[pulumi.Input[str]] = None,
                                              policy_set_definition_name: Optional[pulumi.Input[str]] = None,
                                              opts: Optional[pulumi.InvokeOptions] = None) -> pulumi.Output[GetPolicySetDefinitionVersionResult]:
     """
     This operation retrieves the policy set definition version in the given subscription with the given name and version.
 
 
+    :param str expand: Comma-separated list of additional properties to be included in the response. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'.
     :param str policy_definition_version: The policy set definition version.  The format is x.y.z where x is the major version number, y is the minor version number, and z is the patch number
     :param str policy_set_definition_name: The name of the policy set definition.
     """
     __args__ = dict()
+    __args__['expand'] = expand
     __args__['policyDefinitionVersion'] = policy_definition_version
     __args__['policySetDefinitionName'] = policy_set_definition_name
     opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)

pulumi_azure_native/authorization/v20230401/get_policy_set_definition_version_at_management_group.py

@@ -182,7 +182,8 @@ class AwaitableGetPolicySetDefinitionVersionAtManagementGroupResult(GetPolicySet
             version=self.version)
 
 
-def get_policy_set_definition_version_at_management_group(management_group_name: Optional[str] = None,
+def get_policy_set_definition_version_at_management_group(expand: Optional[str] = None,
+                                                          management_group_name: Optional[str] = None,
                                                           policy_definition_version: Optional[str] = None,
                                                           policy_set_definition_name: Optional[str] = None,
                                                           opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetPolicySetDefinitionVersionAtManagementGroupResult:
@@ -190,11 +191,13 @@ def get_policy_set_definition_version_at_management_group(management_group_name:
     This operation retrieves the policy set definition version in the given management group with the given name and version.
 
 
+    :param str expand: Comma-separated list of additional properties to be included in the response. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'.
     :param str management_group_name: The name of the management group. The name is case insensitive.
     :param str policy_definition_version: The policy set definition version.  The format is x.y.z where x is the major version number, y is the minor version number, and z is the patch number
     :param str policy_set_definition_name: The name of the policy set definition.
     """
     __args__ = dict()
+    __args__['expand'] = expand
     __args__['managementGroupName'] = management_group_name
     __args__['policyDefinitionVersion'] = policy_definition_version
     __args__['policySetDefinitionName'] = policy_set_definition_name
@@ -214,7 +217,8 @@ def get_policy_set_definition_version_at_management_group(management_group_name:
         system_data=pulumi.get(__ret__, 'system_data'),
         type=pulumi.get(__ret__, 'type'),
         version=pulumi.get(__ret__, 'version'))
-def get_policy_set_definition_version_at_management_group_output(management_group_name: Optional[pulumi.Input[str]] = None,
+def get_policy_set_definition_version_at_management_group_output(expand: Optional[pulumi.Input[Optional[str]]] = None,
+                                                                 management_group_name: Optional[pulumi.Input[str]] = None,
                                                                  policy_definition_version: Optional[pulumi.Input[str]] = None,
                                                                  policy_set_definition_name: Optional[pulumi.Input[str]] = None,
                                                                  opts: Optional[pulumi.InvokeOptions] = None) -> pulumi.Output[GetPolicySetDefinitionVersionAtManagementGroupResult]:
@@ -222,11 +226,13 @@ def get_policy_set_definition_version_at_management_group_output(management_grou
     This operation retrieves the policy set definition version in the given management group with the given name and version.
 
 
+    :param str expand: Comma-separated list of additional properties to be included in the response. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'.
     :param str management_group_name: The name of the management group. The name is case insensitive.
     :param str policy_definition_version: The policy set definition version.  The format is x.y.z where x is the major version number, y is the minor version number, and z is the patch number
     :param str policy_set_definition_name: The name of the policy set definition.
     """
     __args__ = dict()
+    __args__['expand'] = expand
     __args__['managementGroupName'] = management_group_name
     __args__['policyDefinitionVersion'] = policy_definition_version
     __args__['policySetDefinitionName'] = policy_set_definition_name

pulumi_azure_native/authorization/v20230401/outputs.py

@@ -547,7 +547,11 @@ class PolicyDefinitionReferenceResponse(dict):
     @staticmethod
     def __key_warning(key: str):
         suggest = None
-        if key == "policyDefinitionId":
+        if key == "effectiveDefinitionVersion":
+            suggest = "effective_definition_version"
+        elif key == "latestDefinitionVersion":
+            suggest = "latest_definition_version"
+        elif key == "policyDefinitionId":
             suggest = "policy_definition_id"
         elif key == "definitionVersion":
             suggest = "definition_version"
@@ -568,6 +572,8 @@ class PolicyDefinitionReferenceResponse(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
+                 effective_definition_version: str,
+                 latest_definition_version: str,
                  policy_definition_id: str,
                  definition_version: Optional[str] = None,
                  group_names: Optional[Sequence[str]] = None,
@@ -575,12 +581,16 @@ class PolicyDefinitionReferenceResponse(dict):
                  policy_definition_reference_id: Optional[str] = None):
         """
         The policy definition reference.
+        :param str effective_definition_version: The effective version of the policy definition in use. This is only present if requested via the $expand query parameter.
+        :param str latest_definition_version: The latest version of the policy definition available. This is only present if requested via the $expand query parameter.
         :param str policy_definition_id: The ID of the policy definition or policy set definition.
         :param str definition_version: The version of the policy definition to use.
         :param Sequence[str] group_names: The name of the groups that this policy definition reference belongs to.
         :param Mapping[str, 'ParameterValuesValueResponse'] parameters: The parameter values for the referenced policy rule. The keys are the parameter names.
         :param str policy_definition_reference_id: A unique id (within the policy set definition) for this policy definition reference.
         """
+        pulumi.set(__self__, "effective_definition_version", effective_definition_version)
+        pulumi.set(__self__, "latest_definition_version", latest_definition_version)
         pulumi.set(__self__, "policy_definition_id", policy_definition_id)
         if definition_version is not None:
             pulumi.set(__self__, "definition_version", definition_version)
@@ -591,6 +601,22 @@ class PolicyDefinitionReferenceResponse(dict):
         if policy_definition_reference_id is not None:
             pulumi.set(__self__, "policy_definition_reference_id", policy_definition_reference_id)
 
+    @property
+    @pulumi.getter(name="effectiveDefinitionVersion")
+    def effective_definition_version(self) -> str:
+        """
+        The effective version of the policy definition in use. This is only present if requested via the $expand query parameter.
+        """
+        return pulumi.get(self, "effective_definition_version")
+
+    @property
+    @pulumi.getter(name="latestDefinitionVersion")
+    def latest_definition_version(self) -> str:
+        """
+        The latest version of the policy definition available. This is only present if requested via the $expand query parameter.
+        """
+        return pulumi.get(self, "latest_definition_version")
+
     @property
     @pulumi.getter(name="policyDefinitionId")
     def policy_definition_id(self) -> str:

pulumi_azure_native/authorization/v20230401/policy_assignment.py

@@ -377,6 +377,8 @@ class PolicyAssignment(pulumi.CustomResource):
             if scope is None and not opts.urn:
                 raise TypeError("Missing required property 'scope'")
             __props__.__dict__["scope"] = scope
+            __props__.__dict__["effective_definition_version"] = None
+            __props__.__dict__["latest_definition_version"] = None
             __props__.__dict__["name"] = None
             __props__.__dict__["system_data"] = None
             __props__.__dict__["type"] = None
@@ -407,8 +409,10 @@ class PolicyAssignment(pulumi.CustomResource):
         __props__.__dict__["definition_version"] = None
         __props__.__dict__["description"] = None
         __props__.__dict__["display_name"] = None
+        __props__.__dict__["effective_definition_version"] = None
         __props__.__dict__["enforcement_mode"] = None
         __props__.__dict__["identity"] = None
+        __props__.__dict__["latest_definition_version"] = None
         __props__.__dict__["location"] = None
         __props__.__dict__["metadata"] = None
         __props__.__dict__["name"] = None
@@ -447,6 +451,14 @@ class PolicyAssignment(pulumi.CustomResource):
         """
         return pulumi.get(self, "display_name")
 
+    @property
+    @pulumi.getter(name="effectiveDefinitionVersion")
+    def effective_definition_version(self) -> pulumi.Output[str]:
+        """
+        The effective version of the policy definition in use. This is only present if requested via the $expand query parameter.
+        """
+        return pulumi.get(self, "effective_definition_version")
+
     @property
     @pulumi.getter(name="enforcementMode")
     def enforcement_mode(self) -> pulumi.Output[Optional[str]]:
@@ -463,6 +475,14 @@ class PolicyAssignment(pulumi.CustomResource):
         """
         return pulumi.get(self, "identity")
 
+    @property
+    @pulumi.getter(name="latestDefinitionVersion")
+    def latest_definition_version(self) -> pulumi.Output[str]:
+        """
+        The latest version of the policy definition available. This is only present if requested via the $expand query parameter.
+        """
+        return pulumi.get(self, "latest_definition_version")
+
     @property
     @pulumi.getter
     def location(self) -> pulumi.Output[Optional[str]]: