azure-native.authorization.DenyAssignment

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var denyAssignment = new AzureNative.Authorization.DenyAssignment("denyAssignment", new()
    {
        DenyAssignmentEffect = AzureNative.Authorization.DenyAssignmentEffect.Enforced,
        DenyAssignmentId = "64b75d79-7a26-4341-944e-4f1a19f0e6ca",
        DenyAssignmentName = "Deny delete on critical resources",
        Description = "Prevent all users from deleting critical resources in the subscription.",
        DoNotApplyToChildScopes = false,
        ExcludePrincipals = new[]
        {
            new AzureNative.Authorization.Inputs.DenyAssignmentPrincipalArgs
            {
                Id = "ce2ce14e-85d7-4629-bdbc-454d0519d987",
                Type = "ServicePrincipal",
            },
        },
        Permissions = new[]
        {
            new AzureNative.Authorization.Inputs.DenyAssignmentPermissionArgs
            {
                Actions = new[]
                {
                    "*/delete",
                },
                DataActions = new() { },
                NotActions = new() { },
                NotDataActions = new() { },
            },
        },
        Principals = new[]
        {
            new AzureNative.Authorization.Inputs.DenyAssignmentPrincipalArgs
            {
                Id = "00000000-0000-0000-0000-000000000000",
                Type = "SystemDefined",
            },
        },
        Scope = "subscriptions/a925f2f7-5c63-4b7b-8799-25a5f97bc3b2",
    });

});

package main

import (
	authorization "github.com/pulumi/pulumi-azure-native-sdk/authorization/v3"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := authorization.NewDenyAssignment(ctx, "denyAssignment", &authorization.DenyAssignmentArgs{
			DenyAssignmentEffect:    pulumi.String(authorization.DenyAssignmentEffectEnforced),
			DenyAssignmentId:        pulumi.String("64b75d79-7a26-4341-944e-4f1a19f0e6ca"),
			DenyAssignmentName:      pulumi.String("Deny delete on critical resources"),
			Description:             pulumi.String("Prevent all users from deleting critical resources in the subscription."),
			DoNotApplyToChildScopes: pulumi.Bool(false),
			ExcludePrincipals: authorization.DenyAssignmentPrincipalArray{
				&authorization.DenyAssignmentPrincipalArgs{
					Id:   pulumi.String("ce2ce14e-85d7-4629-bdbc-454d0519d987"),
					Type: pulumi.String("ServicePrincipal"),
				},
			},
			Permissions: authorization.DenyAssignmentPermissionArray{
				&authorization.DenyAssignmentPermissionArgs{
					Actions: pulumi.StringArray{
						pulumi.String("*/delete"),
					},
					DataActions:    pulumi.StringArray{},
					NotActions:     pulumi.StringArray{},
					NotDataActions: pulumi.StringArray{},
				},
			},
			Principals: authorization.DenyAssignmentPrincipalArray{
				&authorization.DenyAssignmentPrincipalArgs{
					Id:   pulumi.String("00000000-0000-0000-0000-000000000000"),
					Type: pulumi.String("SystemDefined"),
				},
			},
			Scope: pulumi.String("subscriptions/a925f2f7-5c63-4b7b-8799-25a5f97bc3b2"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

pulumi {
  required_providers {
    azure-native = {
      source = "pulumi/azure-native"
    }
  }
}

resource "azure-native_authorization_denyassignment" "denyAssignment" {
  deny_assignment_effect       = "enforced"
  deny_assignment_id           = "64b75d79-7a26-4341-944e-4f1a19f0e6ca"
  deny_assignment_name         = "Deny delete on critical resources"
  description                  = "Prevent all users from deleting critical resources in the subscription."
  do_not_apply_to_child_scopes = false
  exclude_principals {
    id   = "ce2ce14e-85d7-4629-bdbc-454d0519d987"
    type = "ServicePrincipal"
  }
  permissions {
    actions          = ["*/delete"]
    data_actions     = []
    not_actions      = []
    not_data_actions = []
  }
  principals {
    id   = "00000000-0000-0000-0000-000000000000"
    type = "SystemDefined"
  }
  scope = "subscriptions/a925f2f7-5c63-4b7b-8799-25a5f97bc3b2"
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.authorization.DenyAssignment;
import com.pulumi.azurenative.authorization.DenyAssignmentArgs;
import com.pulumi.azurenative.authorization.inputs.DenyAssignmentPrincipalArgs;
import com.pulumi.azurenative.authorization.inputs.DenyAssignmentPermissionArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var denyAssignment = new DenyAssignment("denyAssignment", DenyAssignmentArgs.builder()
            .denyAssignmentEffect("enforced")
            .denyAssignmentId("64b75d79-7a26-4341-944e-4f1a19f0e6ca")
            .denyAssignmentName("Deny delete on critical resources")
            .description("Prevent all users from deleting critical resources in the subscription.")
            .doNotApplyToChildScopes(false)
            .excludePrincipals(DenyAssignmentPrincipalArgs.builder()
                .id("ce2ce14e-85d7-4629-bdbc-454d0519d987")
                .type("ServicePrincipal")
                .build())
            .permissions(DenyAssignmentPermissionArgs.builder()
                .actions("*/delete")
                .dataActions()
                .notActions()
                .notDataActions()
                .build())
            .principals(DenyAssignmentPrincipalArgs.builder()
                .id("00000000-0000-0000-0000-000000000000")
                .type("SystemDefined")
                .build())
            .scope("subscriptions/a925f2f7-5c63-4b7b-8799-25a5f97bc3b2")
            .build());

    }
}

import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const denyAssignment = new azure_native.authorization.DenyAssignment("denyAssignment", {
    denyAssignmentEffect: azure_native.authorization.DenyAssignmentEffect.Enforced,
    denyAssignmentId: "64b75d79-7a26-4341-944e-4f1a19f0e6ca",
    denyAssignmentName: "Deny delete on critical resources",
    description: "Prevent all users from deleting critical resources in the subscription.",
    doNotApplyToChildScopes: false,
    excludePrincipals: [{
        id: "ce2ce14e-85d7-4629-bdbc-454d0519d987",
        type: "ServicePrincipal",
    }],
    permissions: [{
        actions: ["*/delete"],
        dataActions: [],
        notActions: [],
        notDataActions: [],
    }],
    principals: [{
        id: "00000000-0000-0000-0000-000000000000",
        type: "SystemDefined",
    }],
    scope: "subscriptions/a925f2f7-5c63-4b7b-8799-25a5f97bc3b2",
});

import pulumi
import pulumi_azure_native as azure_native

deny_assignment = azure_native.authorization.DenyAssignment("denyAssignment",
    deny_assignment_effect=azure_native.authorization.DenyAssignmentEffect.ENFORCED,
    deny_assignment_id="64b75d79-7a26-4341-944e-4f1a19f0e6ca",
    deny_assignment_name="Deny delete on critical resources",
    description="Prevent all users from deleting critical resources in the subscription.",
    do_not_apply_to_child_scopes=False,
    exclude_principals=[{
        "id": "ce2ce14e-85d7-4629-bdbc-454d0519d987",
        "type": "ServicePrincipal",
    }],
    permissions=[{
        "actions": ["*/delete"],
        "data_actions": [],
        "not_actions": [],
        "not_data_actions": [],
    }],
    principals=[{
        "id": "00000000-0000-0000-0000-000000000000",
        "type": "SystemDefined",
    }],
    scope="subscriptions/a925f2f7-5c63-4b7b-8799-25a5f97bc3b2")

resources:
  denyAssignment:
    type: azure-native:authorization:DenyAssignment
    properties:
      denyAssignmentEffect: enforced
      denyAssignmentId: 64b75d79-7a26-4341-944e-4f1a19f0e6ca
      denyAssignmentName: Deny delete on critical resources
      description: Prevent all users from deleting critical resources in the subscription.
      doNotApplyToChildScopes: false
      excludePrincipals:
        - id: ce2ce14e-85d7-4629-bdbc-454d0519d987
          type: ServicePrincipal
      permissions:
        - actions:
            - '*/delete'
          dataActions: []
          notActions: []
          notDataActions: []
      principals:
        - id: 00000000-0000-0000-0000-000000000000
          type: SystemDefined
      scope: subscriptions/a925f2f7-5c63-4b7b-8799-25a5f97bc3b2