pulumi-gcp 8.15.0a1737527599__py3-none-any.whl → 8.15.0a1737577694__py3-none-any.whl

pulumi_gcp/chronicle/rule_deployment.py

@@ -0,0 +1,849 @@
+# coding=utf-8
+# *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import copy
+import warnings
+import sys
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
+from .. import _utilities
+
+__all__ = ['RuleDeploymentArgs', 'RuleDeployment']
+
+@pulumi.input_type
+class RuleDeploymentArgs:
+    def __init__(__self__, *,
+                 instance: pulumi.Input[str],
+                 location: pulumi.Input[str],
+                 rule: pulumi.Input[str],
+                 alerting: Optional[pulumi.Input[bool]] = None,
+                 archived: Optional[pulumi.Input[bool]] = None,
+                 enabled: Optional[pulumi.Input[bool]] = None,
+                 project: Optional[pulumi.Input[str]] = None,
+                 run_frequency: Optional[pulumi.Input[str]] = None):
+        """
+        The set of arguments for constructing a RuleDeployment resource.
+        :param pulumi.Input[str] instance: The unique identifier for the Chronicle instance, which is the same as the customer ID.
+        :param pulumi.Input[str] location: The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".
+        :param pulumi.Input[str] rule: The Rule ID of the rule.
+               
+               
+               - - -
+        :param pulumi.Input[bool] alerting: Whether detections resulting from this deployment should be considered
+               alerts.
+        :param pulumi.Input[bool] archived: The archive state of the rule deployment.
+               Cannot be set to true unless enabled is set to false.
+               If set to true, alerting will automatically be set to false.
+               If currently set to true, enabled, alerting, and run_frequency cannot be
+               updated.
+        :param pulumi.Input[bool] enabled: Whether the rule is currently deployed continuously against incoming data.
+        :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
+               If it is not provided, the provider project is used.
+        :param pulumi.Input[str] run_frequency: The run frequency of the rule deployment.
+               Possible values:
+               LIVE
+               HOURLY
+               DAILY
+        """
+        pulumi.set(__self__, "instance", instance)
+        pulumi.set(__self__, "location", location)
+        pulumi.set(__self__, "rule", rule)
+        if alerting is not None:
+            pulumi.set(__self__, "alerting", alerting)
+        if archived is not None:
+            pulumi.set(__self__, "archived", archived)
+        if enabled is not None:
+            pulumi.set(__self__, "enabled", enabled)
+        if project is not None:
+            pulumi.set(__self__, "project", project)
+        if run_frequency is not None:
+            pulumi.set(__self__, "run_frequency", run_frequency)
+
+    @property
+    @pulumi.getter
+    def instance(self) -> pulumi.Input[str]:
+        """
+        The unique identifier for the Chronicle instance, which is the same as the customer ID.
+        """
+        return pulumi.get(self, "instance")
+
+    @instance.setter
+    def instance(self, value: pulumi.Input[str]):
+        pulumi.set(self, "instance", value)
+
+    @property
+    @pulumi.getter
+    def location(self) -> pulumi.Input[str]:
+        """
+        The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".
+        """
+        return pulumi.get(self, "location")
+
+    @location.setter
+    def location(self, value: pulumi.Input[str]):
+        pulumi.set(self, "location", value)
+
+    @property
+    @pulumi.getter
+    def rule(self) -> pulumi.Input[str]:
+        """
+        The Rule ID of the rule.
+
+
+        - - -
+        """
+        return pulumi.get(self, "rule")
+
+    @rule.setter
+    def rule(self, value: pulumi.Input[str]):
+        pulumi.set(self, "rule", value)
+
+    @property
+    @pulumi.getter
+    def alerting(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Whether detections resulting from this deployment should be considered
+        alerts.
+        """
+        return pulumi.get(self, "alerting")
+
+    @alerting.setter
+    def alerting(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "alerting", value)
+
+    @property
+    @pulumi.getter
+    def archived(self) -> Optional[pulumi.Input[bool]]:
+        """
+        The archive state of the rule deployment.
+        Cannot be set to true unless enabled is set to false.
+        If set to true, alerting will automatically be set to false.
+        If currently set to true, enabled, alerting, and run_frequency cannot be
+        updated.
+        """
+        return pulumi.get(self, "archived")
+
+    @archived.setter
+    def archived(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "archived", value)
+
+    @property
+    @pulumi.getter
+    def enabled(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Whether the rule is currently deployed continuously against incoming data.
+        """
+        return pulumi.get(self, "enabled")
+
+    @enabled.setter
+    def enabled(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "enabled", value)
+
+    @property
+    @pulumi.getter
+    def project(self) -> Optional[pulumi.Input[str]]:
+        """
+        The ID of the project in which the resource belongs.
+        If it is not provided, the provider project is used.
+        """
+        return pulumi.get(self, "project")
+
+    @project.setter
+    def project(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "project", value)
+
+    @property
+    @pulumi.getter(name="runFrequency")
+    def run_frequency(self) -> Optional[pulumi.Input[str]]:
+        """
+        The run frequency of the rule deployment.
+        Possible values:
+        LIVE
+        HOURLY
+        DAILY
+        """
+        return pulumi.get(self, "run_frequency")
+
+    @run_frequency.setter
+    def run_frequency(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "run_frequency", value)
+
+
+@pulumi.input_type
+class _RuleDeploymentState:
+    def __init__(__self__, *,
+                 alerting: Optional[pulumi.Input[bool]] = None,
+                 archive_time: Optional[pulumi.Input[str]] = None,
+                 archived: Optional[pulumi.Input[bool]] = None,
+                 consumer_rules: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 enabled: Optional[pulumi.Input[bool]] = None,
+                 execution_state: Optional[pulumi.Input[str]] = None,
+                 instance: Optional[pulumi.Input[str]] = None,
+                 last_alert_status_change_time: Optional[pulumi.Input[str]] = None,
+                 location: Optional[pulumi.Input[str]] = None,
+                 name: Optional[pulumi.Input[str]] = None,
+                 producer_rules: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 project: Optional[pulumi.Input[str]] = None,
+                 rule: Optional[pulumi.Input[str]] = None,
+                 run_frequency: Optional[pulumi.Input[str]] = None):
+        """
+        Input properties used for looking up and filtering RuleDeployment resources.
+        :param pulumi.Input[bool] alerting: Whether detections resulting from this deployment should be considered
+               alerts.
+        :param pulumi.Input[str] archive_time: Output only. The timestamp when the rule deployment archive state was last set to true. If the rule deployment's current archive state is not set to true, the field will be empty.
+        :param pulumi.Input[bool] archived: The archive state of the rule deployment.
+               Cannot be set to true unless enabled is set to false.
+               If set to true, alerting will automatically be set to false.
+               If currently set to true, enabled, alerting, and run_frequency cannot be
+               updated.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] consumer_rules: Output only. The names of the associated/chained consumer rules. Rules are considered
+               consumers of this rule if their rule text explicitly filters on this rule's ruleid.
+               Format:
+               projects/{project}/locations/{location}/instances/{instance}/rules/{rule}
+        :param pulumi.Input[bool] enabled: Whether the rule is currently deployed continuously against incoming data.
+        :param pulumi.Input[str] execution_state: The execution state of the rule deployment.
+               Possible values:
+               DEFAULT
+               LIMITED
+               PAUSED
+        :param pulumi.Input[str] instance: The unique identifier for the Chronicle instance, which is the same as the customer ID.
+        :param pulumi.Input[str] last_alert_status_change_time: Output only. The timestamp when the rule deployment alert state was lastly changed. This is filled regardless of the current alert state.E.g. if the current alert status is false, this timestamp will be the timestamp when the alert status was changed to false.
+        :param pulumi.Input[str] location: The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".
+        :param pulumi.Input[str] name: The resource name of the rule deployment.
+               Note that RuleDeployment is a child of the overall Rule, not any individual
+               revision, so the resource ID segment for the Rule resource must not
+               reference a specific revision.
+               Format:
+               projects/{project}/locations/{location}/instances/{instance}/rules/{rule}/deployment
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] producer_rules: Output only. The names of the associated/chained producer rules. Rules are considered
+               producers for this rule if this rule explicitly filters on their ruleid.
+               Format:
+               projects/{project}/locations/{location}/instances/{instance}/rules/{rule}
+        :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
+               If it is not provided, the provider project is used.
+        :param pulumi.Input[str] rule: The Rule ID of the rule.
+               
+               
+               - - -
+        :param pulumi.Input[str] run_frequency: The run frequency of the rule deployment.
+               Possible values:
+               LIVE
+               HOURLY
+               DAILY
+        """
+        if alerting is not None:
+            pulumi.set(__self__, "alerting", alerting)
+        if archive_time is not None:
+            pulumi.set(__self__, "archive_time", archive_time)
+        if archived is not None:
+            pulumi.set(__self__, "archived", archived)
+        if consumer_rules is not None:
+            pulumi.set(__self__, "consumer_rules", consumer_rules)
+        if enabled is not None:
+            pulumi.set(__self__, "enabled", enabled)
+        if execution_state is not None:
+            pulumi.set(__self__, "execution_state", execution_state)
+        if instance is not None:
+            pulumi.set(__self__, "instance", instance)
+        if last_alert_status_change_time is not None:
+            pulumi.set(__self__, "last_alert_status_change_time", last_alert_status_change_time)
+        if location is not None:
+            pulumi.set(__self__, "location", location)
+        if name is not None:
+            pulumi.set(__self__, "name", name)
+        if producer_rules is not None:
+            pulumi.set(__self__, "producer_rules", producer_rules)
+        if project is not None:
+            pulumi.set(__self__, "project", project)
+        if rule is not None:
+            pulumi.set(__self__, "rule", rule)
+        if run_frequency is not None:
+            pulumi.set(__self__, "run_frequency", run_frequency)
+
+    @property
+    @pulumi.getter
+    def alerting(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Whether detections resulting from this deployment should be considered
+        alerts.
+        """
+        return pulumi.get(self, "alerting")
+
+    @alerting.setter
+    def alerting(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "alerting", value)
+
+    @property
+    @pulumi.getter(name="archiveTime")
+    def archive_time(self) -> Optional[pulumi.Input[str]]:
+        """
+        Output only. The timestamp when the rule deployment archive state was last set to true. If the rule deployment's current archive state is not set to true, the field will be empty.
+        """
+        return pulumi.get(self, "archive_time")
+
+    @archive_time.setter
+    def archive_time(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "archive_time", value)
+
+    @property
+    @pulumi.getter
+    def archived(self) -> Optional[pulumi.Input[bool]]:
+        """
+        The archive state of the rule deployment.
+        Cannot be set to true unless enabled is set to false.
+        If set to true, alerting will automatically be set to false.
+        If currently set to true, enabled, alerting, and run_frequency cannot be
+        updated.
+        """
+        return pulumi.get(self, "archived")
+
+    @archived.setter
+    def archived(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "archived", value)
+
+    @property
+    @pulumi.getter(name="consumerRules")
+    def consumer_rules(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        Output only. The names of the associated/chained consumer rules. Rules are considered
+        consumers of this rule if their rule text explicitly filters on this rule's ruleid.
+        Format:
+        projects/{project}/locations/{location}/instances/{instance}/rules/{rule}
+        """
+        return pulumi.get(self, "consumer_rules")
+
+    @consumer_rules.setter
+    def consumer_rules(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "consumer_rules", value)
+
+    @property
+    @pulumi.getter
+    def enabled(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Whether the rule is currently deployed continuously against incoming data.
+        """
+        return pulumi.get(self, "enabled")
+
+    @enabled.setter
+    def enabled(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "enabled", value)
+
+    @property
+    @pulumi.getter(name="executionState")
+    def execution_state(self) -> Optional[pulumi.Input[str]]:
+        """
+        The execution state of the rule deployment.
+        Possible values:
+        DEFAULT
+        LIMITED
+        PAUSED
+        """
+        return pulumi.get(self, "execution_state")
+
+    @execution_state.setter
+    def execution_state(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "execution_state", value)
+
+    @property
+    @pulumi.getter
+    def instance(self) -> Optional[pulumi.Input[str]]:
+        """
+        The unique identifier for the Chronicle instance, which is the same as the customer ID.
+        """
+        return pulumi.get(self, "instance")
+
+    @instance.setter
+    def instance(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "instance", value)
+
+    @property
+    @pulumi.getter(name="lastAlertStatusChangeTime")
+    def last_alert_status_change_time(self) -> Optional[pulumi.Input[str]]:
+        """
+        Output only. The timestamp when the rule deployment alert state was lastly changed. This is filled regardless of the current alert state.E.g. if the current alert status is false, this timestamp will be the timestamp when the alert status was changed to false.
+        """
+        return pulumi.get(self, "last_alert_status_change_time")
+
+    @last_alert_status_change_time.setter
+    def last_alert_status_change_time(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "last_alert_status_change_time", value)
+
+    @property
+    @pulumi.getter
+    def location(self) -> Optional[pulumi.Input[str]]:
+        """
+        The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".
+        """
+        return pulumi.get(self, "location")
+
+    @location.setter
+    def location(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "location", value)
+
+    @property
+    @pulumi.getter
+    def name(self) -> Optional[pulumi.Input[str]]:
+        """
+        The resource name of the rule deployment.
+        Note that RuleDeployment is a child of the overall Rule, not any individual
+        revision, so the resource ID segment for the Rule resource must not
+        reference a specific revision.
+        Format:
+        projects/{project}/locations/{location}/instances/{instance}/rules/{rule}/deployment
+        """
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "name", value)
+
+    @property
+    @pulumi.getter(name="producerRules")
+    def producer_rules(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        Output only. The names of the associated/chained producer rules. Rules are considered
+        producers for this rule if this rule explicitly filters on their ruleid.
+        Format:
+        projects/{project}/locations/{location}/instances/{instance}/rules/{rule}
+        """
+        return pulumi.get(self, "producer_rules")
+
+    @producer_rules.setter
+    def producer_rules(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "producer_rules", value)
+
+    @property
+    @pulumi.getter
+    def project(self) -> Optional[pulumi.Input[str]]:
+        """
+        The ID of the project in which the resource belongs.
+        If it is not provided, the provider project is used.
+        """
+        return pulumi.get(self, "project")
+
+    @project.setter
+    def project(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "project", value)
+
+    @property
+    @pulumi.getter
+    def rule(self) -> Optional[pulumi.Input[str]]:
+        """
+        The Rule ID of the rule.
+
+
+        - - -
+        """
+        return pulumi.get(self, "rule")
+
+    @rule.setter
+    def rule(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "rule", value)
+
+    @property
+    @pulumi.getter(name="runFrequency")
+    def run_frequency(self) -> Optional[pulumi.Input[str]]:
+        """
+        The run frequency of the rule deployment.
+        Possible values:
+        LIVE
+        HOURLY
+        DAILY
+        """
+        return pulumi.get(self, "run_frequency")
+
+    @run_frequency.setter
+    def run_frequency(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "run_frequency", value)
+
+
+class RuleDeployment(pulumi.CustomResource):
+    @overload
+    def __init__(__self__,
+                 resource_name: str,
+                 opts: Optional[pulumi.ResourceOptions] = None,
+                 alerting: Optional[pulumi.Input[bool]] = None,
+                 archived: Optional[pulumi.Input[bool]] = None,
+                 enabled: Optional[pulumi.Input[bool]] = None,
+                 instance: Optional[pulumi.Input[str]] = None,
+                 location: Optional[pulumi.Input[str]] = None,
+                 project: Optional[pulumi.Input[str]] = None,
+                 rule: Optional[pulumi.Input[str]] = None,
+                 run_frequency: Optional[pulumi.Input[str]] = None,
+                 __props__=None):
+        """
+        ## Example Usage
+
+        ## Import
+
+        RuleDeployment can be imported using any of these accepted formats:
+
+        * `projects/{{project}}/locations/{{location}}/instances/{{instance}}/rules/{{rule}}/deployment`
+
+        * `{{project}}/{{location}}/{{instance}}/{{rule}}`
+
+        * `{{location}}/{{instance}}/{{rule}}`
+
+        When using the `pulumi import` command, RuleDeployment can be imported using one of the formats above. For example:
+
+        ```sh
+        $ pulumi import gcp:chronicle/ruleDeployment:RuleDeployment default projects/{{project}}/locations/{{location}}/instances/{{instance}}/rules/{{rule}}/deployment
+        ```
+
+        ```sh
+        $ pulumi import gcp:chronicle/ruleDeployment:RuleDeployment default {{project}}/{{location}}/{{instance}}/{{rule}}
+        ```
+
+        ```sh
+        $ pulumi import gcp:chronicle/ruleDeployment:RuleDeployment default {{location}}/{{instance}}/{{rule}}
+        ```
+
+        :param str resource_name: The name of the resource.
+        :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[bool] alerting: Whether detections resulting from this deployment should be considered
+               alerts.
+        :param pulumi.Input[bool] archived: The archive state of the rule deployment.
+               Cannot be set to true unless enabled is set to false.
+               If set to true, alerting will automatically be set to false.
+               If currently set to true, enabled, alerting, and run_frequency cannot be
+               updated.
+        :param pulumi.Input[bool] enabled: Whether the rule is currently deployed continuously against incoming data.
+        :param pulumi.Input[str] instance: The unique identifier for the Chronicle instance, which is the same as the customer ID.
+        :param pulumi.Input[str] location: The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".
+        :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
+               If it is not provided, the provider project is used.
+        :param pulumi.Input[str] rule: The Rule ID of the rule.
+               
+               
+               - - -
+        :param pulumi.Input[str] run_frequency: The run frequency of the rule deployment.
+               Possible values:
+               LIVE
+               HOURLY
+               DAILY
+        """
+        ...
+    @overload
+    def __init__(__self__,
+                 resource_name: str,
+                 args: RuleDeploymentArgs,
+                 opts: Optional[pulumi.ResourceOptions] = None):
+        """
+        ## Example Usage
+
+        ## Import
+
+        RuleDeployment can be imported using any of these accepted formats:
+
+        * `projects/{{project}}/locations/{{location}}/instances/{{instance}}/rules/{{rule}}/deployment`
+
+        * `{{project}}/{{location}}/{{instance}}/{{rule}}`
+
+        * `{{location}}/{{instance}}/{{rule}}`
+
+        When using the `pulumi import` command, RuleDeployment can be imported using one of the formats above. For example:
+
+        ```sh
+        $ pulumi import gcp:chronicle/ruleDeployment:RuleDeployment default projects/{{project}}/locations/{{location}}/instances/{{instance}}/rules/{{rule}}/deployment
+        ```
+
+        ```sh
+        $ pulumi import gcp:chronicle/ruleDeployment:RuleDeployment default {{project}}/{{location}}/{{instance}}/{{rule}}
+        ```
+
+        ```sh
+        $ pulumi import gcp:chronicle/ruleDeployment:RuleDeployment default {{location}}/{{instance}}/{{rule}}
+        ```
+
+        :param str resource_name: The name of the resource.
+        :param RuleDeploymentArgs args: The arguments to use to populate this resource's properties.
+        :param pulumi.ResourceOptions opts: Options for the resource.
+        """
+        ...
+    def __init__(__self__, resource_name: str, *args, **kwargs):
+        resource_args, opts = _utilities.get_resource_args_opts(RuleDeploymentArgs, pulumi.ResourceOptions, *args, **kwargs)
+        if resource_args is not None:
+            __self__._internal_init(resource_name, opts, **resource_args.__dict__)
+        else:
+            __self__._internal_init(resource_name, *args, **kwargs)
+
+    def _internal_init(__self__,
+                 resource_name: str,
+                 opts: Optional[pulumi.ResourceOptions] = None,
+                 alerting: Optional[pulumi.Input[bool]] = None,
+                 archived: Optional[pulumi.Input[bool]] = None,
+                 enabled: Optional[pulumi.Input[bool]] = None,
+                 instance: Optional[pulumi.Input[str]] = None,
+                 location: Optional[pulumi.Input[str]] = None,
+                 project: Optional[pulumi.Input[str]] = None,
+                 rule: Optional[pulumi.Input[str]] = None,
+                 run_frequency: Optional[pulumi.Input[str]] = None,
+                 __props__=None):
+        opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
+        if not isinstance(opts, pulumi.ResourceOptions):
+            raise TypeError('Expected resource options to be a ResourceOptions instance')
+        if opts.id is None:
+            if __props__ is not None:
+                raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
+            __props__ = RuleDeploymentArgs.__new__(RuleDeploymentArgs)
+
+            __props__.__dict__["alerting"] = alerting
+            __props__.__dict__["archived"] = archived
+            __props__.__dict__["enabled"] = enabled
+            if instance is None and not opts.urn:
+                raise TypeError("Missing required property 'instance'")
+            __props__.__dict__["instance"] = instance
+            if location is None and not opts.urn:
+                raise TypeError("Missing required property 'location'")
+            __props__.__dict__["location"] = location
+            __props__.__dict__["project"] = project
+            if rule is None and not opts.urn:
+                raise TypeError("Missing required property 'rule'")
+            __props__.__dict__["rule"] = rule
+            __props__.__dict__["run_frequency"] = run_frequency
+            __props__.__dict__["archive_time"] = None
+            __props__.__dict__["consumer_rules"] = None
+            __props__.__dict__["execution_state"] = None
+            __props__.__dict__["last_alert_status_change_time"] = None
+            __props__.__dict__["name"] = None
+            __props__.__dict__["producer_rules"] = None
+        super(RuleDeployment, __self__).__init__(
+            'gcp:chronicle/ruleDeployment:RuleDeployment',
+            resource_name,
+            __props__,
+            opts)
+
+    @staticmethod
+    def get(resource_name: str,
+            id: pulumi.Input[str],
+            opts: Optional[pulumi.ResourceOptions] = None,
+            alerting: Optional[pulumi.Input[bool]] = None,
+            archive_time: Optional[pulumi.Input[str]] = None,
+            archived: Optional[pulumi.Input[bool]] = None,
+            consumer_rules: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+            enabled: Optional[pulumi.Input[bool]] = None,
+            execution_state: Optional[pulumi.Input[str]] = None,
+            instance: Optional[pulumi.Input[str]] = None,
+            last_alert_status_change_time: Optional[pulumi.Input[str]] = None,
+            location: Optional[pulumi.Input[str]] = None,
+            name: Optional[pulumi.Input[str]] = None,
+            producer_rules: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+            project: Optional[pulumi.Input[str]] = None,
+            rule: Optional[pulumi.Input[str]] = None,
+            run_frequency: Optional[pulumi.Input[str]] = None) -> 'RuleDeployment':
+        """
+        Get an existing RuleDeployment resource's state with the given name, id, and optional extra
+        properties used to qualify the lookup.
+
+        :param str resource_name: The unique name of the resulting resource.
+        :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
+        :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[bool] alerting: Whether detections resulting from this deployment should be considered
+               alerts.
+        :param pulumi.Input[str] archive_time: Output only. The timestamp when the rule deployment archive state was last set to true. If the rule deployment's current archive state is not set to true, the field will be empty.
+        :param pulumi.Input[bool] archived: The archive state of the rule deployment.
+               Cannot be set to true unless enabled is set to false.
+               If set to true, alerting will automatically be set to false.
+               If currently set to true, enabled, alerting, and run_frequency cannot be
+               updated.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] consumer_rules: Output only. The names of the associated/chained consumer rules. Rules are considered
+               consumers of this rule if their rule text explicitly filters on this rule's ruleid.
+               Format:
+               projects/{project}/locations/{location}/instances/{instance}/rules/{rule}
+        :param pulumi.Input[bool] enabled: Whether the rule is currently deployed continuously against incoming data.
+        :param pulumi.Input[str] execution_state: The execution state of the rule deployment.
+               Possible values:
+               DEFAULT
+               LIMITED
+               PAUSED
+        :param pulumi.Input[str] instance: The unique identifier for the Chronicle instance, which is the same as the customer ID.
+        :param pulumi.Input[str] last_alert_status_change_time: Output only. The timestamp when the rule deployment alert state was lastly changed. This is filled regardless of the current alert state.E.g. if the current alert status is false, this timestamp will be the timestamp when the alert status was changed to false.
+        :param pulumi.Input[str] location: The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".
+        :param pulumi.Input[str] name: The resource name of the rule deployment.
+               Note that RuleDeployment is a child of the overall Rule, not any individual
+               revision, so the resource ID segment for the Rule resource must not
+               reference a specific revision.
+               Format:
+               projects/{project}/locations/{location}/instances/{instance}/rules/{rule}/deployment
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] producer_rules: Output only. The names of the associated/chained producer rules. Rules are considered
+               producers for this rule if this rule explicitly filters on their ruleid.
+               Format:
+               projects/{project}/locations/{location}/instances/{instance}/rules/{rule}
+        :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
+               If it is not provided, the provider project is used.
+        :param pulumi.Input[str] rule: The Rule ID of the rule.
+               
+               
+               - - -
+        :param pulumi.Input[str] run_frequency: The run frequency of the rule deployment.
+               Possible values:
+               LIVE
+               HOURLY
+               DAILY
+        """
+        opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
+
+        __props__ = _RuleDeploymentState.__new__(_RuleDeploymentState)
+
+        __props__.__dict__["alerting"] = alerting
+        __props__.__dict__["archive_time"] = archive_time
+        __props__.__dict__["archived"] = archived
+        __props__.__dict__["consumer_rules"] = consumer_rules
+        __props__.__dict__["enabled"] = enabled
+        __props__.__dict__["execution_state"] = execution_state
+        __props__.__dict__["instance"] = instance
+        __props__.__dict__["last_alert_status_change_time"] = last_alert_status_change_time
+        __props__.__dict__["location"] = location
+        __props__.__dict__["name"] = name
+        __props__.__dict__["producer_rules"] = producer_rules
+        __props__.__dict__["project"] = project
+        __props__.__dict__["rule"] = rule
+        __props__.__dict__["run_frequency"] = run_frequency
+        return RuleDeployment(resource_name, opts=opts, __props__=__props__)
+
+    @property
+    @pulumi.getter
+    def alerting(self) -> pulumi.Output[Optional[bool]]:
+        """
+        Whether detections resulting from this deployment should be considered
+        alerts.
+        """
+        return pulumi.get(self, "alerting")
+
+    @property
+    @pulumi.getter(name="archiveTime")
+    def archive_time(self) -> pulumi.Output[str]:
+        """
+        Output only. The timestamp when the rule deployment archive state was last set to true. If the rule deployment's current archive state is not set to true, the field will be empty.
+        """
+        return pulumi.get(self, "archive_time")
+
+    @property
+    @pulumi.getter
+    def archived(self) -> pulumi.Output[Optional[bool]]:
+        """
+        The archive state of the rule deployment.
+        Cannot be set to true unless enabled is set to false.
+        If set to true, alerting will automatically be set to false.
+        If currently set to true, enabled, alerting, and run_frequency cannot be
+        updated.
+        """
+        return pulumi.get(self, "archived")
+
+    @property
+    @pulumi.getter(name="consumerRules")
+    def consumer_rules(self) -> pulumi.Output[Sequence[str]]:
+        """
+        Output only. The names of the associated/chained consumer rules. Rules are considered
+        consumers of this rule if their rule text explicitly filters on this rule's ruleid.
+        Format:
+        projects/{project}/locations/{location}/instances/{instance}/rules/{rule}
+        """
+        return pulumi.get(self, "consumer_rules")
+
+    @property
+    @pulumi.getter
+    def enabled(self) -> pulumi.Output[Optional[bool]]:
+        """
+        Whether the rule is currently deployed continuously against incoming data.
+        """
+        return pulumi.get(self, "enabled")
+
+    @property
+    @pulumi.getter(name="executionState")
+    def execution_state(self) -> pulumi.Output[str]:
+        """
+        The execution state of the rule deployment.
+        Possible values:
+        DEFAULT
+        LIMITED
+        PAUSED
+        """
+        return pulumi.get(self, "execution_state")
+
+    @property
+    @pulumi.getter
+    def instance(self) -> pulumi.Output[str]:
+        """
+        The unique identifier for the Chronicle instance, which is the same as the customer ID.
+        """
+        return pulumi.get(self, "instance")
+
+    @property
+    @pulumi.getter(name="lastAlertStatusChangeTime")
+    def last_alert_status_change_time(self) -> pulumi.Output[str]:
+        """
+        Output only. The timestamp when the rule deployment alert state was lastly changed. This is filled regardless of the current alert state.E.g. if the current alert status is false, this timestamp will be the timestamp when the alert status was changed to false.
+        """
+        return pulumi.get(self, "last_alert_status_change_time")
+
+    @property
+    @pulumi.getter
+    def location(self) -> pulumi.Output[str]:
+        """
+        The location of the resource. This is the geographical region where the Chronicle instance resides, such as "us" or "europe-west2".
+        """
+        return pulumi.get(self, "location")
+
+    @property
+    @pulumi.getter
+    def name(self) -> pulumi.Output[str]:
+        """
+        The resource name of the rule deployment.
+        Note that RuleDeployment is a child of the overall Rule, not any individual
+        revision, so the resource ID segment for the Rule resource must not
+        reference a specific revision.
+        Format:
+        projects/{project}/locations/{location}/instances/{instance}/rules/{rule}/deployment
+        """
+        return pulumi.get(self, "name")
+
+    @property
+    @pulumi.getter(name="producerRules")
+    def producer_rules(self) -> pulumi.Output[Sequence[str]]:
+        """
+        Output only. The names of the associated/chained producer rules. Rules are considered
+        producers for this rule if this rule explicitly filters on their ruleid.
+        Format:
+        projects/{project}/locations/{location}/instances/{instance}/rules/{rule}
+        """
+        return pulumi.get(self, "producer_rules")
+
+    @property
+    @pulumi.getter
+    def project(self) -> pulumi.Output[str]:
+        """
+        The ID of the project in which the resource belongs.
+        If it is not provided, the provider project is used.
+        """
+        return pulumi.get(self, "project")
+
+    @property
+    @pulumi.getter
+    def rule(self) -> pulumi.Output[str]:
+        """
+        The Rule ID of the rule.
+
+
+        - - -
+        """
+        return pulumi.get(self, "rule")
+
+    @property
+    @pulumi.getter(name="runFrequency")
+    def run_frequency(self) -> pulumi.Output[Optional[str]]:
+        """
+        The run frequency of the rule deployment.
+        Possible values:
+        LIVE
+        HOURLY
+        DAILY
+        """
+        return pulumi.get(self, "run_frequency")
+