Azure Native v2.9.0, Sep 27 23

This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.

Azure Native v2.9.0 published on Wednesday, Sep 27, 2023 by Pulumi

pulumi/pulumi-azure-native

azure-native.security.AssessmentsMetadataSubscription

Explore with Pulumi AI

This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.

Azure Native v2.9.0 published on Wednesday, Sep 27, 2023 by Pulumi

pulumi/pulumi-azure-native

Example Usage

Create security assessment metadata for subscription

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var assessmentsMetadataSubscription = new AzureNative.Security.AssessmentsMetadataSubscription("assessmentsMetadataSubscription", new()
    {
        AssessmentMetadataName = "ca039e75-a276-4175-aebc-bcd41e4b14b7",
        AssessmentType = "CustomerManaged",
        Categories = new[]
        {
            "Compute",
        },
        Description = "Install an endpoint protection solution on your virtual machines scale sets, to protect them from threats and vulnerabilities.",
        DisplayName = "Install endpoint protection solution on virtual machine scale sets",
        ImplementationEffort = "Low",
        RemediationDescription = "To install an endpoint protection solution: 1.  <a href=\"https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-faq#how-do-i-turn-on-antimalware-in-my-virtual-machine-scale-set\">Follow the instructions in How do I turn on antimalware in my virtual machine scale set</a>",
        Severity = "Medium",
        Threats = new[]
        {
            "dataExfiltration",
            "dataSpillage",
            "maliciousInsider",
        },
        UserImpact = "Low",
    });

});

package main

import (
	"github.com/pulumi/pulumi-azure-native-sdk/security/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := security.NewAssessmentsMetadataSubscription(ctx, "assessmentsMetadataSubscription", &security.AssessmentsMetadataSubscriptionArgs{
			AssessmentMetadataName: pulumi.String("ca039e75-a276-4175-aebc-bcd41e4b14b7"),
			AssessmentType:         pulumi.String("CustomerManaged"),
			Categories: pulumi.StringArray{
				pulumi.String("Compute"),
			},
			Description:            pulumi.String("Install an endpoint protection solution on your virtual machines scale sets, to protect them from threats and vulnerabilities."),
			DisplayName:            pulumi.String("Install endpoint protection solution on virtual machine scale sets"),
			ImplementationEffort:   pulumi.String("Low"),
			RemediationDescription: pulumi.String("To install an endpoint protection solution: 1.  <a href=\"https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-faq#how-do-i-turn-on-antimalware-in-my-virtual-machine-scale-set\">Follow the instructions in How do I turn on antimalware in my virtual machine scale set</a>"),
			Severity:               pulumi.String("Medium"),
			Threats: pulumi.StringArray{
				pulumi.String("dataExfiltration"),
				pulumi.String("dataSpillage"),
				pulumi.String("maliciousInsider"),
			},
			UserImpact: pulumi.String("Low"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.security.AssessmentsMetadataSubscription;
import com.pulumi.azurenative.security.AssessmentsMetadataSubscriptionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var assessmentsMetadataSubscription = new AssessmentsMetadataSubscription("assessmentsMetadataSubscription", AssessmentsMetadataSubscriptionArgs.builder()        
            .assessmentMetadataName("ca039e75-a276-4175-aebc-bcd41e4b14b7")
            .assessmentType("CustomerManaged")
            .categories("Compute")
            .description("Install an endpoint protection solution on your virtual machines scale sets, to protect them from threats and vulnerabilities.")
            .displayName("Install endpoint protection solution on virtual machine scale sets")
            .implementationEffort("Low")
            .remediationDescription("To install an endpoint protection solution: 1.  <a href=\"https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-faq#how-do-i-turn-on-antimalware-in-my-virtual-machine-scale-set\">Follow the instructions in How do I turn on antimalware in my virtual machine scale set</a>")
            .severity("Medium")
            .threats(            
                "dataExfiltration",
                "dataSpillage",
                "maliciousInsider")
            .userImpact("Low")
            .build());

    }
}

import pulumi
import pulumi_azure_native as azure_native

assessments_metadata_subscription = azure_native.security.AssessmentsMetadataSubscription("assessmentsMetadataSubscription",
    assessment_metadata_name="ca039e75-a276-4175-aebc-bcd41e4b14b7",
    assessment_type="CustomerManaged",
    categories=["Compute"],
    description="Install an endpoint protection solution on your virtual machines scale sets, to protect them from threats and vulnerabilities.",
    display_name="Install endpoint protection solution on virtual machine scale sets",
    implementation_effort="Low",
    remediation_description="To install an endpoint protection solution: 1.  <a href=\"https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-faq#how-do-i-turn-on-antimalware-in-my-virtual-machine-scale-set\">Follow the instructions in How do I turn on antimalware in my virtual machine scale set</a>",
    severity="Medium",
    threats=[
        "dataExfiltration",
        "dataSpillage",
        "maliciousInsider",
    ],
    user_impact="Low")

import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const assessmentsMetadataSubscription = new azure_native.security.AssessmentsMetadataSubscription("assessmentsMetadataSubscription", {
    assessmentMetadataName: "ca039e75-a276-4175-aebc-bcd41e4b14b7",
    assessmentType: "CustomerManaged",
    categories: ["Compute"],
    description: "Install an endpoint protection solution on your virtual machines scale sets, to protect them from threats and vulnerabilities.",
    displayName: "Install endpoint protection solution on virtual machine scale sets",
    implementationEffort: "Low",
    remediationDescription: "To install an endpoint protection solution: 1.  <a href=\"https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-faq#how-do-i-turn-on-antimalware-in-my-virtual-machine-scale-set\">Follow the instructions in How do I turn on antimalware in my virtual machine scale set</a>",
    severity: "Medium",
    threats: [
        "dataExfiltration",
        "dataSpillage",
        "maliciousInsider",
    ],
    userImpact: "Low",
});

resources:
  assessmentsMetadataSubscription:
    type: azure-native:security:AssessmentsMetadataSubscription
    properties:
      assessmentMetadataName: ca039e75-a276-4175-aebc-bcd41e4b14b7
      assessmentType: CustomerManaged
      categories:
        - Compute
      description: Install an endpoint protection solution on your virtual machines scale sets, to protect them from threats and vulnerabilities.
      displayName: Install endpoint protection solution on virtual machine scale sets
      implementationEffort: Low
      remediationDescription: 'To install an endpoint protection solution: 1.  <a href="https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-faq#how-do-i-turn-on-antimalware-in-my-virtual-machine-scale-set">Follow the instructions in How do I turn on antimalware in my virtual machine scale set</a>'
      severity: Medium
      threats:
        - dataExfiltration
        - dataSpillage
        - maliciousInsider
      userImpact: Low

Create AssessmentsMetadataSubscription Resource

new AssessmentsMetadataSubscription(name: string, args: AssessmentsMetadataSubscriptionArgs, opts?: CustomResourceOptions);

@overload
def AssessmentsMetadataSubscription(resource_name: str,
                                    opts: Optional[ResourceOptions] = None,
                                    assessment_metadata_name: Optional[str] = None,
                                    assessment_type: Optional[Union[str, AssessmentType]] = None,
                                    categories: Optional[Sequence[Union[str, Categories]]] = None,
                                    description: Optional[str] = None,
                                    display_name: Optional[str] = None,
                                    implementation_effort: Optional[Union[str, ImplementationEffort]] = None,
                                    preview: Optional[bool] = None,
                                    remediation_description: Optional[str] = None,
                                    severity: Optional[Union[str, Severity]] = None,
                                    threats: Optional[Sequence[Union[str, Threats]]] = None,
                                    user_impact: Optional[Union[str, UserImpact]] = None)
@overload
def AssessmentsMetadataSubscription(resource_name: str,
                                    args: AssessmentsMetadataSubscriptionArgs,
                                    opts: Optional[ResourceOptions] = None)

func NewAssessmentsMetadataSubscription(ctx *Context, name string, args AssessmentsMetadataSubscriptionArgs, opts ...ResourceOption) (*AssessmentsMetadataSubscription, error)

public AssessmentsMetadataSubscription(string name, AssessmentsMetadataSubscriptionArgs args, CustomResourceOptions? opts = null)

public AssessmentsMetadataSubscription(String name, AssessmentsMetadataSubscriptionArgs args)
public AssessmentsMetadataSubscription(String name, AssessmentsMetadataSubscriptionArgs args, CustomResourceOptions options)

type: azure-native:security:AssessmentsMetadataSubscription
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

name string: The unique name of the resource.
args AssessmentsMetadataSubscriptionArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args AssessmentsMetadataSubscriptionArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args AssessmentsMetadataSubscriptionArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args AssessmentsMetadataSubscriptionArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args AssessmentsMetadataSubscriptionArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

AssessmentsMetadataSubscription Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The AssessmentsMetadataSubscription resource accepts the following input properties:

AssessmentType string | Pulumi.AzureNative.Security.AssessmentType: BuiltIn if the assessment based on built-in Azure Policy definition, Custom if the assessment based on custom Azure Policy definition
DisplayName string: User friendly display name of the assessment
Severity string | Pulumi.AzureNative.Security.Severity: The severity level of the assessment
AssessmentMetadataName string: The Assessment Key - Unique key for the assessment type
Categories List<Union<string, Pulumi.AzureNative.Security.Categories>>
Description string: Human readable description of the assessment
ImplementationEffort string | Pulumi.AzureNative.Security.ImplementationEffort: The implementation effort required to remediate this assessment
Preview bool: True if this assessment is in preview release status
RemediationDescription string: Human readable description of what you should do to mitigate this security issue
Threats List<Union<string, Pulumi.AzureNative.Security.Threats>>
UserImpact string | Pulumi.AzureNative.Security.UserImpact: The user impact of the assessment

AssessmentType string | AssessmentType: BuiltIn if the assessment based on built-in Azure Policy definition, Custom if the assessment based on custom Azure Policy definition
DisplayName string: User friendly display name of the assessment
Severity string | Severity: The severity level of the assessment
AssessmentMetadataName string: The Assessment Key - Unique key for the assessment type
Categories []string
Description string: Human readable description of the assessment
ImplementationEffort string | ImplementationEffort: The implementation effort required to remediate this assessment
Preview bool: True if this assessment is in preview release status
RemediationDescription string: Human readable description of what you should do to mitigate this security issue
Threats []string
UserImpact string | UserImpact: The user impact of the assessment

assessmentType String | AssessmentType: BuiltIn if the assessment based on built-in Azure Policy definition, Custom if the assessment based on custom Azure Policy definition
displayName String: User friendly display name of the assessment
severity String | Severity: The severity level of the assessment
assessmentMetadataName String: The Assessment Key - Unique key for the assessment type
categories List<Either<String,Categories>>
description String: Human readable description of the assessment
implementationEffort String | ImplementationEffort: The implementation effort required to remediate this assessment
preview Boolean: True if this assessment is in preview release status
remediationDescription String: Human readable description of what you should do to mitigate this security issue
threats List<Either<String,Threats>>
userImpact String | UserImpact: The user impact of the assessment

assessmentType string | AssessmentType: BuiltIn if the assessment based on built-in Azure Policy definition, Custom if the assessment based on custom Azure Policy definition
displayName string: User friendly display name of the assessment
severity string | Severity: The severity level of the assessment
assessmentMetadataName string: The Assessment Key - Unique key for the assessment type
categories (string | Categories)[]
description string: Human readable description of the assessment
implementationEffort string | ImplementationEffort: The implementation effort required to remediate this assessment
preview boolean: True if this assessment is in preview release status
remediationDescription string: Human readable description of what you should do to mitigate this security issue
threats (string | Threats)[]
userImpact string | UserImpact: The user impact of the assessment

assessment_type str | AssessmentType: BuiltIn if the assessment based on built-in Azure Policy definition, Custom if the assessment based on custom Azure Policy definition
display_name str: User friendly display name of the assessment
severity str | Severity: The severity level of the assessment
assessment_metadata_name str: The Assessment Key - Unique key for the assessment type
categories Sequence[Union[str, Categories]]
description str: Human readable description of the assessment
implementation_effort str | ImplementationEffort: The implementation effort required to remediate this assessment
preview bool: True if this assessment is in preview release status
remediation_description str: Human readable description of what you should do to mitigate this security issue
threats Sequence[Union[str, Threats]]
user_impact str | UserImpact: The user impact of the assessment

assessmentType String | "BuiltIn" | "CustomPolicy" | "CustomerManaged": BuiltIn if the assessment based on built-in Azure Policy definition, Custom if the assessment based on custom Azure Policy definition
displayName String: User friendly display name of the assessment
severity String | "Low" | "Medium" | "High": The severity level of the assessment
assessmentMetadataName String: The Assessment Key - Unique key for the assessment type
categories List<String | "Compute" | "Networking" | "Data" | "IdentityAndAccess" | "IoT">
description String: Human readable description of the assessment
implementationEffort String | "Low" | "Moderate" | "High": The implementation effort required to remediate this assessment
preview Boolean: True if this assessment is in preview release status
remediationDescription String: Human readable description of what you should do to mitigate this security issue
threats List<String | "accountBreach" | "dataExfiltration" | "dataSpillage" | "maliciousInsider" | "elevationOfPrivilege" | "threatResistance" | "missingCoverage" | "denialOfService">
userImpact String | "Low" | "Moderate" | "High": The user impact of the assessment

Outputs

All input properties are implicitly available as output properties. Additionally, the AssessmentsMetadataSubscription resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.
Name string: Resource name
PolicyDefinitionId string: Azure resource ID of the policy definition that turns this assessment calculation on
Type string: Resource type

Id string: The provider-assigned unique ID for this managed resource.
Name string: Resource name
PolicyDefinitionId string: Azure resource ID of the policy definition that turns this assessment calculation on
Type string: Resource type

id String: The provider-assigned unique ID for this managed resource.
name String: Resource name
policyDefinitionId String: Azure resource ID of the policy definition that turns this assessment calculation on
type String: Resource type

id string: The provider-assigned unique ID for this managed resource.
name string: Resource name
policyDefinitionId string: Azure resource ID of the policy definition that turns this assessment calculation on
type string: Resource type

id str: The provider-assigned unique ID for this managed resource.
name str: Resource name
policy_definition_id str: Azure resource ID of the policy definition that turns this assessment calculation on
type str: Resource type

id String: The provider-assigned unique ID for this managed resource.
name String: Resource name
policyDefinitionId String: Azure resource ID of the policy definition that turns this assessment calculation on
type String: Resource type

Supporting Types

AssessmentType, AssessmentTypeArgs

BuiltIn: BuiltIn
Microsoft Defender for Cloud managed assessments
CustomPolicy: CustomPolicy
User defined policies that are automatically ingested from Azure Policy to Microsoft Defender for Cloud
CustomerManaged: CustomerManaged
User assessments pushed directly by the user or other third party to Microsoft Defender for Cloud

AssessmentTypeBuiltIn: BuiltIn
Microsoft Defender for Cloud managed assessments
AssessmentTypeCustomPolicy: CustomPolicy
User defined policies that are automatically ingested from Azure Policy to Microsoft Defender for Cloud
AssessmentTypeCustomerManaged: CustomerManaged
User assessments pushed directly by the user or other third party to Microsoft Defender for Cloud

BuiltIn: BuiltIn
Microsoft Defender for Cloud managed assessments
CustomPolicy: CustomPolicy
User defined policies that are automatically ingested from Azure Policy to Microsoft Defender for Cloud
CustomerManaged: CustomerManaged
User assessments pushed directly by the user or other third party to Microsoft Defender for Cloud

BuiltIn: BuiltIn
Microsoft Defender for Cloud managed assessments
CustomPolicy: CustomPolicy
User defined policies that are automatically ingested from Azure Policy to Microsoft Defender for Cloud
CustomerManaged: CustomerManaged
User assessments pushed directly by the user or other third party to Microsoft Defender for Cloud

BUILT_IN: BuiltIn
Microsoft Defender for Cloud managed assessments
CUSTOM_POLICY: CustomPolicy
User defined policies that are automatically ingested from Azure Policy to Microsoft Defender for Cloud
CUSTOMER_MANAGED: CustomerManaged
User assessments pushed directly by the user or other third party to Microsoft Defender for Cloud

"BuiltIn": BuiltIn
Microsoft Defender for Cloud managed assessments
"CustomPolicy": CustomPolicy
User defined policies that are automatically ingested from Azure Policy to Microsoft Defender for Cloud
"CustomerManaged": CustomerManaged
User assessments pushed directly by the user or other third party to Microsoft Defender for Cloud

Categories, CategoriesArgs

Compute: Compute
Networking: Networking
Data: Data
IdentityAndAccess: IdentityAndAccess
IoT: IoT

CategoriesCompute: Compute
CategoriesNetworking: Networking
CategoriesData: Data
CategoriesIdentityAndAccess: IdentityAndAccess
CategoriesIoT: IoT

Compute: Compute
Networking: Networking
Data: Data
IdentityAndAccess: IdentityAndAccess
IoT: IoT

Compute: Compute
Networking: Networking
Data: Data
IdentityAndAccess: IdentityAndAccess
IoT: IoT

COMPUTE: Compute
NETWORKING: Networking
DATA: Data
IDENTITY_AND_ACCESS: IdentityAndAccess
IO_T: IoT

"Compute": Compute
"Networking": Networking
"Data": Data
"IdentityAndAccess": IdentityAndAccess
"IoT": IoT

ImplementationEffort, ImplementationEffortArgs

Low: Low
Moderate: Moderate
High: High

ImplementationEffortLow: Low
ImplementationEffortModerate: Moderate
ImplementationEffortHigh: High

Low: Low
Moderate: Moderate
High: High

Low: Low
Moderate: Moderate
High: High

LOW: Low
MODERATE: Moderate
HIGH: High

"Low": Low
"Moderate": Moderate
"High": High

Severity, SeverityArgs

Low: Low
Medium: Medium
High: High

SeverityLow: Low
SeverityMedium: Medium
SeverityHigh: High

Low: Low
Medium: Medium
High: High

Low: Low
Medium: Medium
High: High

LOW: Low
MEDIUM: Medium
HIGH: High

"Low": Low
"Medium": Medium
"High": High

Threats, ThreatsArgs

AccountBreach: accountBreach
DataExfiltration: dataExfiltration
DataSpillage: dataSpillage
MaliciousInsider: maliciousInsider
ElevationOfPrivilege: elevationOfPrivilege
ThreatResistance: threatResistance
MissingCoverage: missingCoverage
DenialOfService: denialOfService

ThreatsAccountBreach: accountBreach
ThreatsDataExfiltration: dataExfiltration
ThreatsDataSpillage: dataSpillage
ThreatsMaliciousInsider: maliciousInsider
ThreatsElevationOfPrivilege: elevationOfPrivilege
ThreatsThreatResistance: threatResistance
ThreatsMissingCoverage: missingCoverage
ThreatsDenialOfService: denialOfService

AccountBreach: accountBreach
DataExfiltration: dataExfiltration
DataSpillage: dataSpillage
MaliciousInsider: maliciousInsider
ElevationOfPrivilege: elevationOfPrivilege
ThreatResistance: threatResistance
MissingCoverage: missingCoverage
DenialOfService: denialOfService

AccountBreach: accountBreach
DataExfiltration: dataExfiltration
DataSpillage: dataSpillage
MaliciousInsider: maliciousInsider
ElevationOfPrivilege: elevationOfPrivilege
ThreatResistance: threatResistance
MissingCoverage: missingCoverage
DenialOfService: denialOfService

ACCOUNT_BREACH: accountBreach
DATA_EXFILTRATION: dataExfiltration
DATA_SPILLAGE: dataSpillage
MALICIOUS_INSIDER: maliciousInsider
ELEVATION_OF_PRIVILEGE: elevationOfPrivilege
THREAT_RESISTANCE: threatResistance
MISSING_COVERAGE: missingCoverage
DENIAL_OF_SERVICE: denialOfService

"accountBreach": accountBreach
"dataExfiltration": dataExfiltration
"dataSpillage": dataSpillage
"maliciousInsider": maliciousInsider
"elevationOfPrivilege": elevationOfPrivilege
"threatResistance": threatResistance
"missingCoverage": missingCoverage
"denialOfService": denialOfService

UserImpact, UserImpactArgs

Low: Low
Moderate: Moderate
High: High

UserImpactLow: Low
UserImpactModerate: Moderate
UserImpactHigh: High

Low: Low
Moderate: Moderate
High: High

Low: Low
Moderate: Moderate
High: High

LOW: Low
MODERATE: Moderate
HIGH: High

"Low": Low
"Moderate": Moderate
"High": High

Import

An existing resource can be imported using its type token, name, and identifier, e.g.

$ pulumi import azure-native:security:AssessmentsMetadataSubscription ca039e75-a276-4175-aebc-bcd41e4b14b7 /subscriptions/{subscriptionId}/providers/Microsoft.Security/assessmentMetadata/{assessmentMetadataName}

Package Details

Repository: Azure Native pulumi/pulumi-azure-native
License: Apache-2.0

This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.

Azure Native v2.9.0 published on Wednesday, Sep 27, 2023 by Pulumi

pulumi/pulumi-azure-native

azure-native.security.AssessmentsMetadataSubscription

On this page

On this page

Example Usage

Create security assessment metadata for subscription

Create AssessmentsMetadataSubscription Resource

AssessmentsMetadataSubscription Resource Properties

Inputs

Outputs

Supporting Types

AssessmentType, AssessmentTypeArgs

Categories, CategoriesArgs

ImplementationEffort, ImplementationEffortArgs

Severity, SeverityArgs

Threats, ThreatsArgs

UserImpact, UserImpactArgs

Import

Package Details

On this page

On this page