Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Azure Native
  4. API Docs
  5. security
  6. Automation
This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Viewing docs for Azure Native v3.23.0
published on Saturday, Jul 18, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-azure-native

azure-native.security.Automation

azure-native logo
This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Viewing docs for Azure Native v3.23.0
published on Saturday, Jul 18, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-azure-native

    The security automation resource.

    Uses Azure REST API version 2023-12-01-preview. In version 2.x of the Azure Native provider, it used API version 2019-01-01-preview.

    Other available API versions: 2019-01-01-preview. These can be accessed by generating a local SDK package using the CLI command pulumi package add azure-native security [ApiVersion]. See the version guide for details.

    Example Usage

    Create or update a security automation for all assessments (including all severities)

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var automation = new AzureNative.Security.Automation("automation", new()
    {
        Actions = new[]
        {
            new AzureNative.Security.Inputs.AutomationActionLogicAppArgs
            {
                ActionType = "LogicApp",
                LogicAppResourceId = "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
                Uri = "https://exampleTriggerUri1.com",
            },
        },
        AutomationName = "exampleAutomation",
        Description = "An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment",
        IsEnabled = true,
        Location = "Central US",
        ResourceGroupName = "exampleResourceGroup",
        Scopes = new[]
        {
            new AzureNative.Security.Inputs.AutomationScopeArgs
            {
                Description = "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
                ScopePath = "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
            },
        },
        Sources = new[]
        {
            new AzureNative.Security.Inputs.AutomationSourceArgs
            {
                EventSource = AzureNative.Security.EventSource.Assessments,
            },
        },
        Tags = null,
    });

});

    package main

import (
	security "github.com/pulumi/pulumi-azure-native-sdk/security/v3"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := security.NewAutomation(ctx, "automation", &security.AutomationArgs{
			Actions: pulumi.Array{
				security.AutomationActionLogicApp{
					ActionType:         "LogicApp",
					LogicAppResourceId: "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
					Uri:                "https://exampleTriggerUri1.com",
				},
			},
			AutomationName:    pulumi.String("exampleAutomation"),
			Description:       pulumi.String("An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment"),
			IsEnabled:         pulumi.Bool(true),
			Location:          pulumi.String("Central US"),
			ResourceGroupName: pulumi.String("exampleResourceGroup"),
			Scopes: security.AutomationScopeArray{
				&security.AutomationScopeArgs{
					Description: pulumi.String("A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5"),
					ScopePath:   pulumi.String("/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup"),
				},
			},
			Sources: security.AutomationSourceArray{
				&security.AutomationSourceArgs{
					EventSource: pulumi.String(security.EventSourceAssessments),
				},
			},
			Tags: pulumi.StringMap{},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    pulumi {
  required_providers {
    azure-native = {
      source = "pulumi/azure-native"
    }
  }
}

resource "azure-native_security_automation" "automation" {
  actions = [{
    "actionType"         = "LogicApp"
    "logicAppResourceId" = "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1"
    "uri"                = "https://exampleTriggerUri1.com"
  }]
  automation_name     = "exampleAutomation"
  description         = "An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment"
  is_enabled          = true
  location            = "Central US"
  resource_group_name = "exampleResourceGroup"
  scopes {
    description = "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5"
    scope_path  = "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup"
  }
  sources {
    event_source = "Assessments"
  }
  tags = {}
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.security.Automation;
import com.pulumi.azurenative.security.AutomationArgs;
import com.pulumi.azurenative.security.inputs.AutomationScopeArgs;
import com.pulumi.azurenative.security.inputs.AutomationSourceArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var automation = new Automation("automation", AutomationArgs.builder()
            .actions(AutomationActionLogicAppArgs.builder()
                .actionType("LogicApp")
                .logicAppResourceId("/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1")
                .uri("https://exampleTriggerUri1.com")
                .build())
            .automationName("exampleAutomation")
            .description("An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment")
            .isEnabled(true)
            .location("Central US")
            .resourceGroupName("exampleResourceGroup")
            .scopes(AutomationScopeArgs.builder()
                .description("A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5")
                .scopePath("/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup")
                .build())
            .sources(AutomationSourceArgs.builder()
                .eventSource("Assessments")
                .build())
            .tags(Map.ofEntries(
            ))
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const automation = new azure_native.security.Automation("automation", {
    actions: [{
        actionType: "LogicApp",
        logicAppResourceId: "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
        uri: "https://exampleTriggerUri1.com",
    }],
    automationName: "exampleAutomation",
    description: "An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment",
    isEnabled: true,
    location: "Central US",
    resourceGroupName: "exampleResourceGroup",
    scopes: [{
        description: "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
        scopePath: "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
    }],
    sources: [{
        eventSource: azure_native.security.EventSource.Assessments,
    }],
    tags: {},
});

    import pulumi
import pulumi_azure_native as azure_native

automation = azure_native.security.Automation("automation",
    actions=[{
        "action_type": "LogicApp",
        "logic_app_resource_id": "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
        "uri": "https://exampleTriggerUri1.com",
    }],
    automation_name="exampleAutomation",
    description="An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment",
    is_enabled=True,
    location="Central US",
    resource_group_name="exampleResourceGroup",
    scopes=[{
        "description": "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
        "scope_path": "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
    }],
    sources=[{
        "event_source": azure_native.security.EventSource.ASSESSMENTS,
    }],
    tags={})

    resources:
  automation:
    type: azure-native:security:Automation
    properties:
      actions:
        - actionType: LogicApp
          logicAppResourceId: /subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1
          uri: https://exampleTriggerUri1.com
      automationName: exampleAutomation
      description: An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment
      isEnabled: true
      location: Central US
      resourceGroupName: exampleResourceGroup
      scopes:
        - description: 'A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5'
          scopePath: /subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup
      sources:
        - eventSource: Assessments
      tags: {}

    Create or update a security automation for all high severity assessments

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var automation = new AzureNative.Security.Automation("automation", new()
    {
        Actions = new[]
        {
            new AzureNative.Security.Inputs.AutomationActionLogicAppArgs
            {
                ActionType = "LogicApp",
                LogicAppResourceId = "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
                Uri = "https://exampleTriggerUri1.com",
            },
        },
        AutomationName = "exampleAutomation",
        Description = "An example of a security automation that triggers one LogicApp resource (myTest1) on any high severity security assessment",
        IsEnabled = true,
        Location = "Central US",
        ResourceGroupName = "exampleResourceGroup",
        Scopes = new[]
        {
            new AzureNative.Security.Inputs.AutomationScopeArgs
            {
                Description = "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
                ScopePath = "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
            },
        },
        Sources = new[]
        {
            new AzureNative.Security.Inputs.AutomationSourceArgs
            {
                EventSource = AzureNative.Security.EventSource.Assessments,
                RuleSets = new[]
                {
                    new AzureNative.Security.Inputs.AutomationRuleSetArgs
                    {
                        Rules = new[]
                        {
                            new AzureNative.Security.Inputs.AutomationTriggeringRuleArgs
                            {
                                ExpectedValue = "High",
                                Operator = AzureNative.Security.Operator.EqualsValue,
                                PropertyJPath = "properties.metadata.severity",
                                PropertyType = AzureNative.Security.PropertyType.String,
                            },
                        },
                    },
                },
            },
        },
        Tags = null,
    });

});

    package main

import (
	security "github.com/pulumi/pulumi-azure-native-sdk/security/v3"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := security.NewAutomation(ctx, "automation", &security.AutomationArgs{
			Actions: pulumi.Array{
				security.AutomationActionLogicApp{
					ActionType:         "LogicApp",
					LogicAppResourceId: "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
					Uri:                "https://exampleTriggerUri1.com",
				},
			},
			AutomationName:    pulumi.String("exampleAutomation"),
			Description:       pulumi.String("An example of a security automation that triggers one LogicApp resource (myTest1) on any high severity security assessment"),
			IsEnabled:         pulumi.Bool(true),
			Location:          pulumi.String("Central US"),
			ResourceGroupName: pulumi.String("exampleResourceGroup"),
			Scopes: security.AutomationScopeArray{
				&security.AutomationScopeArgs{
					Description: pulumi.String("A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5"),
					ScopePath:   pulumi.String("/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup"),
				},
			},
			Sources: security.AutomationSourceArray{
				&security.AutomationSourceArgs{
					EventSource: pulumi.String(security.EventSourceAssessments),
					RuleSets: security.AutomationRuleSetArray{
						&security.AutomationRuleSetArgs{
							Rules: security.AutomationTriggeringRuleArray{
								&security.AutomationTriggeringRuleArgs{
									ExpectedValue: pulumi.String("High"),
									Operator:      pulumi.String(security.OperatorEquals),
									PropertyJPath: pulumi.String("properties.metadata.severity"),
									PropertyType:  pulumi.String(security.PropertyTypeString),
								},
							},
						},
					},
				},
			},
			Tags: pulumi.StringMap{},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    pulumi {
  required_providers {
    azure-native = {
      source = "pulumi/azure-native"
    }
  }
}

resource "azure-native_security_automation" "automation" {
  actions = [{
    "actionType"         = "LogicApp"
    "logicAppResourceId" = "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1"
    "uri"                = "https://exampleTriggerUri1.com"
  }]
  automation_name     = "exampleAutomation"
  description         = "An example of a security automation that triggers one LogicApp resource (myTest1) on any high severity security assessment"
  is_enabled          = true
  location            = "Central US"
  resource_group_name = "exampleResourceGroup"
  scopes {
    description = "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5"
    scope_path  = "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup"
  }
  sources {
    event_source = "Assessments"
    rule_sets {
      rules {
        expected_value  = "High"
        operator        = "Equals"
        property_j_path = "properties.metadata.severity"
        property_type   = "String"
      }
    }
  }
  tags = {}
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.security.Automation;
import com.pulumi.azurenative.security.AutomationArgs;
import com.pulumi.azurenative.security.inputs.AutomationScopeArgs;
import com.pulumi.azurenative.security.inputs.AutomationSourceArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var automation = new Automation("automation", AutomationArgs.builder()
            .actions(AutomationActionLogicAppArgs.builder()
                .actionType("LogicApp")
                .logicAppResourceId("/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1")
                .uri("https://exampleTriggerUri1.com")
                .build())
            .automationName("exampleAutomation")
            .description("An example of a security automation that triggers one LogicApp resource (myTest1) on any high severity security assessment")
            .isEnabled(true)
            .location("Central US")
            .resourceGroupName("exampleResourceGroup")
            .scopes(AutomationScopeArgs.builder()
                .description("A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5")
                .scopePath("/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup")
                .build())
            .sources(AutomationSourceArgs.builder()
                .eventSource("Assessments")
                .ruleSets(AutomationRuleSetArgs.builder()
                    .rules(AutomationTriggeringRuleArgs.builder()
                        .expectedValue("High")
                        .operator("Equals")
                        .propertyJPath("properties.metadata.severity")
                        .propertyType("String")
                        .build())
                    .build())
                .build())
            .tags(Map.ofEntries(
            ))
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const automation = new azure_native.security.Automation("automation", {
    actions: [{
        actionType: "LogicApp",
        logicAppResourceId: "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
        uri: "https://exampleTriggerUri1.com",
    }],
    automationName: "exampleAutomation",
    description: "An example of a security automation that triggers one LogicApp resource (myTest1) on any high severity security assessment",
    isEnabled: true,
    location: "Central US",
    resourceGroupName: "exampleResourceGroup",
    scopes: [{
        description: "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
        scopePath: "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
    }],
    sources: [{
        eventSource: azure_native.security.EventSource.Assessments,
        ruleSets: [{
            rules: [{
                expectedValue: "High",
                operator: azure_native.security.Operator.Equals,
                propertyJPath: "properties.metadata.severity",
                propertyType: azure_native.security.PropertyType.String,
            }],
        }],
    }],
    tags: {},
});

    import pulumi
import pulumi_azure_native as azure_native

automation = azure_native.security.Automation("automation",
    actions=[{
        "action_type": "LogicApp",
        "logic_app_resource_id": "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
        "uri": "https://exampleTriggerUri1.com",
    }],
    automation_name="exampleAutomation",
    description="An example of a security automation that triggers one LogicApp resource (myTest1) on any high severity security assessment",
    is_enabled=True,
    location="Central US",
    resource_group_name="exampleResourceGroup",
    scopes=[{
        "description": "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
        "scope_path": "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
    }],
    sources=[{
        "event_source": azure_native.security.EventSource.ASSESSMENTS,
        "rule_sets": [{
            "rules": [{
                "expected_value": "High",
                "operator": azure_native.security.Operator.EQUALS,
                "property_j_path": "properties.metadata.severity",
                "property_type": azure_native.security.PropertyType.STRING,
            }],
        }],
    }],
    tags={})

    resources:
  automation:
    type: azure-native:security:Automation
    properties:
      actions:
        - actionType: LogicApp
          logicAppResourceId: /subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1
          uri: https://exampleTriggerUri1.com
      automationName: exampleAutomation
      description: An example of a security automation that triggers one LogicApp resource (myTest1) on any high severity security assessment
      isEnabled: true
      location: Central US
      resourceGroupName: exampleResourceGroup
      scopes:
        - description: 'A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5'
          scopePath: /subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup
      sources:
        - eventSource: Assessments
          ruleSets:
            - rules:
                - expectedValue: High
                  operator: Equals
                  propertyJPath: properties.metadata.severity
                  propertyType: String
      tags: {}

    Disable or enable a security automation

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var automation = new AzureNative.Security.Automation("automation", new()
    {
        Actions = new[]
        {
            new AzureNative.Security.Inputs.AutomationActionLogicAppArgs
            {
                ActionType = "LogicApp",
                LogicAppResourceId = "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
                Uri = "https://exampleTriggerUri1.com",
            },
        },
        AutomationName = "exampleAutomation",
        Description = "An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment of type customAssessment",
        IsEnabled = false,
        Location = "Central US",
        ResourceGroupName = "exampleResourceGroup",
        Scopes = new[]
        {
            new AzureNative.Security.Inputs.AutomationScopeArgs
            {
                Description = "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
                ScopePath = "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
            },
        },
        Sources = new[]
        {
            new AzureNative.Security.Inputs.AutomationSourceArgs
            {
                EventSource = AzureNative.Security.EventSource.Assessments,
                RuleSets = new[]
                {
                    new AzureNative.Security.Inputs.AutomationRuleSetArgs
                    {
                        Rules = new[]
                        {
                            new AzureNative.Security.Inputs.AutomationTriggeringRuleArgs
                            {
                                ExpectedValue = "customAssessment",
                                Operator = AzureNative.Security.Operator.EqualsValue,
                                PropertyJPath = "$.Entity.AssessmentType",
                                PropertyType = AzureNative.Security.PropertyType.String,
                            },
                        },
                    },
                },
            },
        },
        Tags = null,
    });

});

    package main

import (
	security "github.com/pulumi/pulumi-azure-native-sdk/security/v3"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := security.NewAutomation(ctx, "automation", &security.AutomationArgs{
			Actions: pulumi.Array{
				security.AutomationActionLogicApp{
					ActionType:         "LogicApp",
					LogicAppResourceId: "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
					Uri:                "https://exampleTriggerUri1.com",
				},
			},
			AutomationName:    pulumi.String("exampleAutomation"),
			Description:       pulumi.String("An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment of type customAssessment"),
			IsEnabled:         pulumi.Bool(false),
			Location:          pulumi.String("Central US"),
			ResourceGroupName: pulumi.String("exampleResourceGroup"),
			Scopes: security.AutomationScopeArray{
				&security.AutomationScopeArgs{
					Description: pulumi.String("A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5"),
					ScopePath:   pulumi.String("/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup"),
				},
			},
			Sources: security.AutomationSourceArray{
				&security.AutomationSourceArgs{
					EventSource: pulumi.String(security.EventSourceAssessments),
					RuleSets: security.AutomationRuleSetArray{
						&security.AutomationRuleSetArgs{
							Rules: security.AutomationTriggeringRuleArray{
								&security.AutomationTriggeringRuleArgs{
									ExpectedValue: pulumi.String("customAssessment"),
									Operator:      pulumi.String(security.OperatorEquals),
									PropertyJPath: pulumi.String("$.Entity.AssessmentType"),
									PropertyType:  pulumi.String(security.PropertyTypeString),
								},
							},
						},
					},
				},
			},
			Tags: pulumi.StringMap{},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    pulumi {
  required_providers {
    azure-native = {
      source = "pulumi/azure-native"
    }
  }
}

resource "azure-native_security_automation" "automation" {
  actions = [{
    "actionType"         = "LogicApp"
    "logicAppResourceId" = "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1"
    "uri"                = "https://exampleTriggerUri1.com"
  }]
  automation_name     = "exampleAutomation"
  description         = "An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment of type customAssessment"
  is_enabled          = false
  location            = "Central US"
  resource_group_name = "exampleResourceGroup"
  scopes {
    description = "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5"
    scope_path  = "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup"
  }
  sources {
    event_source = "Assessments"
    rule_sets {
      rules {
        expected_value  = "customAssessment"
        operator        = "Equals"
        property_j_path = "$.Entity.AssessmentType"
        property_type   = "String"
      }
    }
  }
  tags = {}
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.security.Automation;
import com.pulumi.azurenative.security.AutomationArgs;
import com.pulumi.azurenative.security.inputs.AutomationScopeArgs;
import com.pulumi.azurenative.security.inputs.AutomationSourceArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var automation = new Automation("automation", AutomationArgs.builder()
            .actions(AutomationActionLogicAppArgs.builder()
                .actionType("LogicApp")
                .logicAppResourceId("/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1")
                .uri("https://exampleTriggerUri1.com")
                .build())
            .automationName("exampleAutomation")
            .description("An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment of type customAssessment")
            .isEnabled(false)
            .location("Central US")
            .resourceGroupName("exampleResourceGroup")
            .scopes(AutomationScopeArgs.builder()
                .description("A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5")
                .scopePath("/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup")
                .build())
            .sources(AutomationSourceArgs.builder()
                .eventSource("Assessments")
                .ruleSets(AutomationRuleSetArgs.builder()
                    .rules(AutomationTriggeringRuleArgs.builder()
                        .expectedValue("customAssessment")
                        .operator("Equals")
                        .propertyJPath("$.Entity.AssessmentType")
                        .propertyType("String")
                        .build())
                    .build())
                .build())
            .tags(Map.ofEntries(
            ))
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const automation = new azure_native.security.Automation("automation", {
    actions: [{
        actionType: "LogicApp",
        logicAppResourceId: "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
        uri: "https://exampleTriggerUri1.com",
    }],
    automationName: "exampleAutomation",
    description: "An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment of type customAssessment",
    isEnabled: false,
    location: "Central US",
    resourceGroupName: "exampleResourceGroup",
    scopes: [{
        description: "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
        scopePath: "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
    }],
    sources: [{
        eventSource: azure_native.security.EventSource.Assessments,
        ruleSets: [{
            rules: [{
                expectedValue: "customAssessment",
                operator: azure_native.security.Operator.Equals,
                propertyJPath: "$.Entity.AssessmentType",
                propertyType: azure_native.security.PropertyType.String,
            }],
        }],
    }],
    tags: {},
});

    import pulumi
import pulumi_azure_native as azure_native

automation = azure_native.security.Automation("automation",
    actions=[{
        "action_type": "LogicApp",
        "logic_app_resource_id": "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
        "uri": "https://exampleTriggerUri1.com",
    }],
    automation_name="exampleAutomation",
    description="An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment of type customAssessment",
    is_enabled=False,
    location="Central US",
    resource_group_name="exampleResourceGroup",
    scopes=[{
        "description": "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
        "scope_path": "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
    }],
    sources=[{
        "event_source": azure_native.security.EventSource.ASSESSMENTS,
        "rule_sets": [{
            "rules": [{
                "expected_value": "customAssessment",
                "operator": azure_native.security.Operator.EQUALS,
                "property_j_path": "$.Entity.AssessmentType",
                "property_type": azure_native.security.PropertyType.STRING,
            }],
        }],
    }],
    tags={})

    resources:
  automation:
    type: azure-native:security:Automation
    properties:
      actions:
        - actionType: LogicApp
          logicAppResourceId: /subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1
          uri: https://exampleTriggerUri1.com
      automationName: exampleAutomation
      description: An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment of type customAssessment
      isEnabled: false
      location: Central US
      resourceGroupName: exampleResourceGroup
      scopes:
        - description: 'A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5'
          scopePath: /subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup
      sources:
        - eventSource: Assessments
          ruleSets:
            - rules:
                - expectedValue: customAssessment
                  operator: Equals
                  propertyJPath: $.Entity.AssessmentType
                  propertyType: String
      tags: {}

    Create Automation Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Automation(name: string, args: AutomationArgs, opts?: CustomResourceOptions);
    @overload
def Automation(resource_name: str,
               args: AutomationArgs,
               opts: Optional[ResourceOptions] = None)

@overload
def Automation(resource_name: str,
               opts: Optional[ResourceOptions] = None,
               resource_group_name: Optional[str] = None,
               actions: Optional[Sequence[Union[AutomationActionEventHubArgs, AutomationActionLogicAppArgs, AutomationActionWorkspaceArgs]]] = None,
               automation_name: Optional[str] = None,
               description: Optional[str] = None,
               is_enabled: Optional[bool] = None,
               kind: Optional[str] = None,
               location: Optional[str] = None,
               scopes: Optional[Sequence[AutomationScopeArgs]] = None,
               sources: Optional[Sequence[AutomationSourceArgs]] = None,
               tags: Optional[Mapping[str, str]] = None)
    func NewAutomation(ctx *Context, name string, args AutomationArgs, opts ...ResourceOption) (*Automation, error)
    public Automation(string name, AutomationArgs args, CustomResourceOptions? opts = null)
    public Automation(String name, AutomationArgs args)
public Automation(String name, AutomationArgs args, CustomResourceOptions options)

    type: azure-native:security:Automation
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "azure-native_security_automation" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args AutomationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AutomationArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AutomationArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AutomationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AutomationArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var automationResource = new AzureNative.Security.Automation("automationResource", new()
{
    ResourceGroupName = "string",
    Actions = 
    {
        new AzureNative.Security.Inputs.AutomationActionEventHubArgs
        {
            ActionType = "EventHub",
            ConnectionString = "string",
            EventHubResourceId = "string",
            IsTrustedServiceEnabled = false,
        },
    },
    AutomationName = "string",
    Description = "string",
    IsEnabled = false,
    Kind = "string",
    Location = "string",
    Scopes = new[]
    {
        new AzureNative.Security.Inputs.AutomationScopeArgs
        {
            Description = "string",
            ScopePath = "string",
        },
    },
    Sources = new[]
    {
        new AzureNative.Security.Inputs.AutomationSourceArgs
        {
            EventSource = "string",
            RuleSets = new[]
            {
                new AzureNative.Security.Inputs.AutomationRuleSetArgs
                {
                    Rules = new[]
                    {
                        new AzureNative.Security.Inputs.AutomationTriggeringRuleArgs
                        {
                            ExpectedValue = "string",
                            Operator = "string",
                            PropertyJPath = "string",
                            PropertyType = "string",
                        },
                    },
                },
            },
        },
    },
    Tags = 
    {
        { "string", "string" },
    },
});

    example, err := security.NewAutomation(ctx, "automationResource", &security.AutomationArgs{
	ResourceGroupName: pulumi.String("string"),
	Actions: pulumi.Array{
		&security.AutomationActionEventHubArgs{
			ActionType:              pulumi.String("EventHub"),
			ConnectionString:        pulumi.String("string"),
			EventHubResourceId:      pulumi.String("string"),
			IsTrustedServiceEnabled: pulumi.Bool(false),
		},
	},
	AutomationName: pulumi.String("string"),
	Description:    pulumi.String("string"),
	IsEnabled:      pulumi.Bool(false),
	Kind:           pulumi.String("string"),
	Location:       pulumi.String("string"),
	Scopes: security.AutomationScopeArray{
		&security.AutomationScopeArgs{
			Description: pulumi.String("string"),
			ScopePath:   pulumi.String("string"),
		},
	},
	Sources: security.AutomationSourceArray{
		&security.AutomationSourceArgs{
			EventSource: pulumi.String("string"),
			RuleSets: security.AutomationRuleSetArray{
				&security.AutomationRuleSetArgs{
					Rules: security.AutomationTriggeringRuleArray{
						&security.AutomationTriggeringRuleArgs{
							ExpectedValue: pulumi.String("string"),
							Operator:      pulumi.String("string"),
							PropertyJPath: pulumi.String("string"),
							PropertyType:  pulumi.String("string"),
						},
					},
				},
			},
		},
	},
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
})

    resource "azure-native_security_automation" "automationResource" {
  lifecycle {
    create_before_destroy = true
  }
  resource_group_name = "string"
  actions = [{
    action_type                = "EventHub"
    connection_string          = "string"
    event_hub_resource_id      = "string"
    is_trusted_service_enabled = false
  }]
  automation_name = "string"
  description     = "string"
  is_enabled      = false
  kind            = "string"
  location        = "string"
  scopes {
    description = "string"
    scope_path  = "string"
  }
  sources {
    event_source = "string"
    rule_sets {
      rules {
        expected_value  = "string"
        operator        = "string"
        property_j_path = "string"
        property_type   = "string"
      }
    }
  }
  tags = {
    "string" = "string"
  }
}

    var automationResource = new Automation("automationResource", AutomationArgs.builder()
    .resourceGroupName("string")
    .actions(AutomationActionEventHubArgs.builder()
        .actionType("EventHub")
        .connectionString("string")
        .eventHubResourceId("string")
        .isTrustedServiceEnabled(false)
        .build())
    .automationName("string")
    .description("string")
    .isEnabled(false)
    .kind("string")
    .location("string")
    .scopes(AutomationScopeArgs.builder()
        .description("string")
        .scopePath("string")
        .build())
    .sources(AutomationSourceArgs.builder()
        .eventSource("string")
        .ruleSets(AutomationRuleSetArgs.builder()
            .rules(AutomationTriggeringRuleArgs.builder()
                .expectedValue("string")
                .operator("string")
                .propertyJPath("string")
                .propertyType("string")
                .build())
            .build())
        .build())
    .tags(Map.of("string", "string"))
    .build());

    automation_resource = azure_native.security.Automation("automationResource",
    resource_group_name="string",
    actions=[{
        "action_type": "EventHub",
        "connection_string": "string",
        "event_hub_resource_id": "string",
        "is_trusted_service_enabled": False,
    }],
    automation_name="string",
    description="string",
    is_enabled=False,
    kind="string",
    location="string",
    scopes=[{
        "description": "string",
        "scope_path": "string",
    }],
    sources=[{
        "event_source": "string",
        "rule_sets": [{
            "rules": [{
                "expected_value": "string",
                "operator": "string",
                "property_j_path": "string",
                "property_type": "string",
            }],
        }],
    }],
    tags={
        "string": "string",
    })

    const automationResource = new azure_native.security.Automation("automationResource", {
    resourceGroupName: "string",
    actions: [{
        actionType: "EventHub",
        connectionString: "string",
        eventHubResourceId: "string",
        isTrustedServiceEnabled: false,
    }],
    automationName: "string",
    description: "string",
    isEnabled: false,
    kind: "string",
    location: "string",
    scopes: [{
        description: "string",
        scopePath: "string",
    }],
    sources: [{
        eventSource: "string",
        ruleSets: [{
            rules: [{
                expectedValue: "string",
                operator: "string",
                propertyJPath: "string",
                propertyType: "string",
            }],
        }],
    }],
    tags: {
        string: "string",
    },
});

    type: azure-native:security:Automation
properties:
    actions:
        - actionType: EventHub
          connectionString: string
          eventHubResourceId: string
          isTrustedServiceEnabled: false
    automationName: string
    description: string
    isEnabled: false
    kind: string
    location: string
    resourceGroupName: string
    scopes:
        - description: string
          scopePath: string
    sources:
        - eventSource: string
          ruleSets:
            - rules:
                - expectedValue: string
                  operator: string
                  propertyJPath: string
                  propertyType: string
    tags:
        string: string

    Automation Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Automation resource accepts the following input properties:

    ResourceGroupName string
    The name of the resource group. The name is case insensitive.
    Actions List<object>
    A collection of the actions which are triggered if all the configured rules evaluations, within at least one rule set, are true.
    AutomationName string
    The security automation name.
    Description string
    The security automation description.
    IsEnabled bool
    Indicates whether the security automation is enabled.
    Kind string
    Kind of the resource
    Location string
    The geo-location where the resource lives
    Scopes List<Pulumi.AzureNative.Security.Inputs.AutomationScope>
    A collection of scopes on which the security automations logic is applied. Supported scopes are the subscription itself or a resource group under that subscription. The automation will only apply on defined scopes.
    Sources List<Pulumi.AzureNative.Security.Inputs.AutomationSource>
    A collection of the source event types which evaluate the security automation set of rules.
    Tags Dictionary<string, string>
    Resource tags.
    ResourceGroupName string
    The name of the resource group. The name is case insensitive.
    Actions []interface{}
    A collection of the actions which are triggered if all the configured rules evaluations, within at least one rule set, are true.
    AutomationName string
    The security automation name.
    Description string
    The security automation description.
    IsEnabled bool
    Indicates whether the security automation is enabled.
    Kind string
    Kind of the resource
    Location string
    The geo-location where the resource lives
    Scopes []AutomationScopeArgs
    A collection of scopes on which the security automations logic is applied. Supported scopes are the subscription itself or a resource group under that subscription. The automation will only apply on defined scopes.
    Sources []AutomationSourceArgs
    A collection of the source event types which evaluate the security automation set of rules.
    Tags map[string]string
    Resource tags.
    resource_group_name string
    The name of the resource group. The name is case insensitive.
    actions list(object | object | object)
    A collection of the actions which are triggered if all the configured rules evaluations, within at least one rule set, are true.
    automation_name string
    The security automation name.
    description string
    The security automation description.
    is_enabled bool
    Indicates whether the security automation is enabled.
    kind string
    Kind of the resource
    location string
    The geo-location where the resource lives
    scopes list(object)
    A collection of scopes on which the security automations logic is applied. Supported scopes are the subscription itself or a resource group under that subscription. The automation will only apply on defined scopes.
    sources list(object)
    A collection of the source event types which evaluate the security automation set of rules.
    tags map(string)
    Resource tags.
    resourceGroupName String
    The name of the resource group. The name is case insensitive.
    actions List<Object>
    A collection of the actions which are triggered if all the configured rules evaluations, within at least one rule set, are true.
    automationName String
    The security automation name.
    description String
    The security automation description.
    isEnabled Boolean
    Indicates whether the security automation is enabled.
    kind String
    Kind of the resource
    location String
    The geo-location where the resource lives
    scopes List<AutomationScope>
    A collection of scopes on which the security automations logic is applied. Supported scopes are the subscription itself or a resource group under that subscription. The automation will only apply on defined scopes.
    sources List<AutomationSource>
    A collection of the source event types which evaluate the security automation set of rules.
    tags Map<String,String>
    Resource tags.
    resourceGroupName string
    The name of the resource group. The name is case insensitive.
    actions (AutomationActionEventHub | AutomationActionLogicAppArgs | AutomationActionWorkspaceArgs)[]
    A collection of the actions which are triggered if all the configured rules evaluations, within at least one rule set, are true.
    automationName string
    The security automation name.
    description string
    The security automation description.
    isEnabled boolean
    Indicates whether the security automation is enabled.
    kind string
    Kind of the resource
    location string
    The geo-location where the resource lives
    scopes AutomationScope[]
    A collection of scopes on which the security automations logic is applied. Supported scopes are the subscription itself or a resource group under that subscription. The automation will only apply on defined scopes.
    sources AutomationSource[]
    A collection of the source event types which evaluate the security automation set of rules.
    tags {[key: string]: string}
    Resource tags.
    resource_group_name str
    The name of the resource group. The name is case insensitive.
    actions Sequence[Union[AutomationActionEventHubArgs, AutomationActionLogicAppArgs, AutomationActionWorkspaceArgs]]
    A collection of the actions which are triggered if all the configured rules evaluations, within at least one rule set, are true.
    automation_name str
    The security automation name.
    description str
    The security automation description.
    is_enabled bool
    Indicates whether the security automation is enabled.
    kind str
    Kind of the resource
    location str
    The geo-location where the resource lives
    scopes Sequence[AutomationScopeArgs]
    A collection of scopes on which the security automations logic is applied. Supported scopes are the subscription itself or a resource group under that subscription. The automation will only apply on defined scopes.
    sources Sequence[AutomationSourceArgs]
    A collection of the source event types which evaluate the security automation set of rules.
    tags Mapping[str, str]
    Resource tags.
    resourceGroupName String
    The name of the resource group. The name is case insensitive.
    actions List<Property Map | Property Map | Property Map>
    A collection of the actions which are triggered if all the configured rules evaluations, within at least one rule set, are true.
    automationName String
    The security automation name.
    description String
    The security automation description.
    isEnabled Boolean
    Indicates whether the security automation is enabled.
    kind String
    Kind of the resource
    location String
    The geo-location where the resource lives
    scopes List<Property Map>
    A collection of scopes on which the security automations logic is applied. Supported scopes are the subscription itself or a resource group under that subscription. The automation will only apply on defined scopes.
    sources List<Property Map>
    A collection of the source event types which evaluate the security automation set of rules.
    tags Map<String>
    Resource tags.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Automation resource produces the following output properties:

    AzureApiVersion string
    The Azure API version of the resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    The name of the resource
    SystemData Pulumi.AzureNative.Security.Outputs.SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    Type string
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    Etag string
    Entity tag is used for comparing two or more entities from the same requested resource.
    AzureApiVersion string
    The Azure API version of the resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    The name of the resource
    SystemData SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    Type string
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    Etag string
    Entity tag is used for comparing two or more entities from the same requested resource.
    azure_api_version string
    The Azure API version of the resource.
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    The name of the resource
    system_data object
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    type string
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    etag string
    Entity tag is used for comparing two or more entities from the same requested resource.
    azureApiVersion String
    The Azure API version of the resource.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    The name of the resource
    systemData SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    type String
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    etag String
    Entity tag is used for comparing two or more entities from the same requested resource.
    azureApiVersion string
    The Azure API version of the resource.
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    The name of the resource
    systemData SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    type string
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    etag string
    Entity tag is used for comparing two or more entities from the same requested resource.
    azure_api_version str
    The Azure API version of the resource.
    id str
    The provider-assigned unique ID for this managed resource.
    name str
    The name of the resource
    system_data SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    type str
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    etag str
    Entity tag is used for comparing two or more entities from the same requested resource.
    azureApiVersion String
    The Azure API version of the resource.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    The name of the resource
    systemData Property Map
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    type String
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    etag String
    Entity tag is used for comparing two or more entities from the same requested resource.

    Supporting Types

    AutomationActionEventHub, AutomationActionEventHubArgs

    The target Event Hub to which event data will be exported. To learn more about Microsoft Defender for Cloud continuous export capabilities, visit https://aka.ms/ASCExportLearnMore
    ConnectionString string
    The target Event Hub connection string (it will not be included in any response).
    EventHubResourceId string
    The target Event Hub Azure Resource ID.
    IsTrustedServiceEnabled bool
    Indicates whether the trusted service is enabled or not.
    ConnectionString string
    The target Event Hub connection string (it will not be included in any response).
    EventHubResourceId string
    The target Event Hub Azure Resource ID.
    IsTrustedServiceEnabled bool
    Indicates whether the trusted service is enabled or not.
    connection_string string
    The target Event Hub connection string (it will not be included in any response).
    event_hub_resource_id string
    The target Event Hub Azure Resource ID.
    is_trusted_service_enabled bool
    Indicates whether the trusted service is enabled or not.
    connectionString String
    The target Event Hub connection string (it will not be included in any response).
    eventHubResourceId String
    The target Event Hub Azure Resource ID.
    isTrustedServiceEnabled Boolean
    Indicates whether the trusted service is enabled or not.
    connectionString string
    The target Event Hub connection string (it will not be included in any response).
    eventHubResourceId string
    The target Event Hub Azure Resource ID.
    isTrustedServiceEnabled boolean
    Indicates whether the trusted service is enabled or not.
    connection_string str
    The target Event Hub connection string (it will not be included in any response).
    event_hub_resource_id str
    The target Event Hub Azure Resource ID.
    is_trusted_service_enabled bool
    Indicates whether the trusted service is enabled or not.
    connectionString String
    The target Event Hub connection string (it will not be included in any response).
    eventHubResourceId String
    The target Event Hub Azure Resource ID.
    isTrustedServiceEnabled Boolean
    Indicates whether the trusted service is enabled or not.

    AutomationActionEventHubResponse, AutomationActionEventHubResponseArgs

    The target Event Hub to which event data will be exported. To learn more about Microsoft Defender for Cloud continuous export capabilities, visit https://aka.ms/ASCExportLearnMore
    SasPolicyName string
    The target Event Hub SAS policy name.
    ConnectionString string
    The target Event Hub connection string (it will not be included in any response).
    EventHubResourceId string
    The target Event Hub Azure Resource ID.
    IsTrustedServiceEnabled bool
    Indicates whether the trusted service is enabled or not.
    SasPolicyName string
    The target Event Hub SAS policy name.
    ConnectionString string
    The target Event Hub connection string (it will not be included in any response).
    EventHubResourceId string
    The target Event Hub Azure Resource ID.
    IsTrustedServiceEnabled bool
    Indicates whether the trusted service is enabled or not.
    sas_policy_name string
    The target Event Hub SAS policy name.
    connection_string string
    The target Event Hub connection string (it will not be included in any response).
    event_hub_resource_id string
    The target Event Hub Azure Resource ID.
    is_trusted_service_enabled bool
    Indicates whether the trusted service is enabled or not.
    sasPolicyName String
    The target Event Hub SAS policy name.
    connectionString String
    The target Event Hub connection string (it will not be included in any response).
    eventHubResourceId String
    The target Event Hub Azure Resource ID.
    isTrustedServiceEnabled Boolean
    Indicates whether the trusted service is enabled or not.
    sasPolicyName string
    The target Event Hub SAS policy name.
    connectionString string
    The target Event Hub connection string (it will not be included in any response).
    eventHubResourceId string
    The target Event Hub Azure Resource ID.
    isTrustedServiceEnabled boolean
    Indicates whether the trusted service is enabled or not.
    sas_policy_name str
    The target Event Hub SAS policy name.
    connection_string str
    The target Event Hub connection string (it will not be included in any response).
    event_hub_resource_id str
    The target Event Hub Azure Resource ID.
    is_trusted_service_enabled bool
    Indicates whether the trusted service is enabled or not.
    sasPolicyName String
    The target Event Hub SAS policy name.
    connectionString String
    The target Event Hub connection string (it will not be included in any response).
    eventHubResourceId String
    The target Event Hub Azure Resource ID.
    isTrustedServiceEnabled Boolean
    Indicates whether the trusted service is enabled or not.

    AutomationActionLogicApp, AutomationActionLogicAppArgs

    The logic app action that should be triggered. To learn more about Microsoft Defender for Cloud's Workflow Automation capabilities, visit https://aka.ms/ASCWorkflowAutomationLearnMore
    LogicAppResourceId string
    The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
    Uri string
    The Logic App trigger URI endpoint (it will not be included in any response).
    LogicAppResourceId string
    The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
    Uri string
    The Logic App trigger URI endpoint (it will not be included in any response).
    logic_app_resource_id string
    The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
    uri string
    The Logic App trigger URI endpoint (it will not be included in any response).
    logicAppResourceId String
    The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
    uri String
    The Logic App trigger URI endpoint (it will not be included in any response).
    logicAppResourceId string
    The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
    uri string
    The Logic App trigger URI endpoint (it will not be included in any response).
    logic_app_resource_id str
    The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
    uri str
    The Logic App trigger URI endpoint (it will not be included in any response).
    logicAppResourceId String
    The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
    uri String
    The Logic App trigger URI endpoint (it will not be included in any response).

    AutomationActionLogicAppResponse, AutomationActionLogicAppResponseArgs

    The logic app action that should be triggered. To learn more about Microsoft Defender for Cloud's Workflow Automation capabilities, visit https://aka.ms/ASCWorkflowAutomationLearnMore
    LogicAppResourceId string
    The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
    Uri string
    The Logic App trigger URI endpoint (it will not be included in any response).
    LogicAppResourceId string
    The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
    Uri string
    The Logic App trigger URI endpoint (it will not be included in any response).
    logic_app_resource_id string
    The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
    uri string
    The Logic App trigger URI endpoint (it will not be included in any response).
    logicAppResourceId String
    The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
    uri String
    The Logic App trigger URI endpoint (it will not be included in any response).
    logicAppResourceId string
    The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
    uri string
    The Logic App trigger URI endpoint (it will not be included in any response).
    logic_app_resource_id str
    The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
    uri str
    The Logic App trigger URI endpoint (it will not be included in any response).
    logicAppResourceId String
    The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App
    uri String
    The Logic App trigger URI endpoint (it will not be included in any response).

    AutomationActionWorkspace, AutomationActionWorkspaceArgs

    The Log Analytics Workspace to which event data will be exported. Security alerts data will reside in the 'SecurityAlert' table and the assessments data will reside in the 'SecurityRecommendation' table (under the 'Security'/'SecurityCenterFree' solutions). Note that in order to view the data in the workspace, the Security Center Log Analytics free/standard solution needs to be enabled on that workspace. To learn more about Microsoft Defender for Cloud continuous export capabilities, visit https://aka.ms/ASCExportLearnMore
    WorkspaceResourceId string
    The fully qualified Log Analytics Workspace Azure Resource ID.
    WorkspaceResourceId string
    The fully qualified Log Analytics Workspace Azure Resource ID.
    workspace_resource_id string
    The fully qualified Log Analytics Workspace Azure Resource ID.
    workspaceResourceId String
    The fully qualified Log Analytics Workspace Azure Resource ID.
    workspaceResourceId string
    The fully qualified Log Analytics Workspace Azure Resource ID.
    workspace_resource_id str
    The fully qualified Log Analytics Workspace Azure Resource ID.
    workspaceResourceId String
    The fully qualified Log Analytics Workspace Azure Resource ID.

    AutomationActionWorkspaceResponse, AutomationActionWorkspaceResponseArgs

    The Log Analytics Workspace to which event data will be exported. Security alerts data will reside in the 'SecurityAlert' table and the assessments data will reside in the 'SecurityRecommendation' table (under the 'Security'/'SecurityCenterFree' solutions). Note that in order to view the data in the workspace, the Security Center Log Analytics free/standard solution needs to be enabled on that workspace. To learn more about Microsoft Defender for Cloud continuous export capabilities, visit https://aka.ms/ASCExportLearnMore
    WorkspaceResourceId string
    The fully qualified Log Analytics Workspace Azure Resource ID.
    WorkspaceResourceId string
    The fully qualified Log Analytics Workspace Azure Resource ID.
    workspace_resource_id string
    The fully qualified Log Analytics Workspace Azure Resource ID.
    workspaceResourceId String
    The fully qualified Log Analytics Workspace Azure Resource ID.
    workspaceResourceId string
    The fully qualified Log Analytics Workspace Azure Resource ID.
    workspace_resource_id str
    The fully qualified Log Analytics Workspace Azure Resource ID.
    workspaceResourceId String
    The fully qualified Log Analytics Workspace Azure Resource ID.

    AutomationRuleSet, AutomationRuleSetArgs

    A rule set which evaluates all its rules upon an event interception. Only when all the included rules in the rule set will be evaluated as 'true', will the event trigger the defined actions.

    AutomationRuleSetResponse, AutomationRuleSetResponseArgs

    A rule set which evaluates all its rules upon an event interception. Only when all the included rules in the rule set will be evaluated as 'true', will the event trigger the defined actions.

    AutomationScope, AutomationScopeArgs

    A single automation scope.
    Description string
    The resources scope description.
    ScopePath string
    The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
    Description string
    The resources scope description.
    ScopePath string
    The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
    description string
    The resources scope description.
    scope_path string
    The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
    description String
    The resources scope description.
    scopePath String
    The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
    description string
    The resources scope description.
    scopePath string
    The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
    description str
    The resources scope description.
    scope_path str
    The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
    description String
    The resources scope description.
    scopePath String
    The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).

    AutomationScopeResponse, AutomationScopeResponseArgs

    A single automation scope.
    Description string
    The resources scope description.
    ScopePath string
    The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
    Description string
    The resources scope description.
    ScopePath string
    The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
    description string
    The resources scope description.
    scope_path string
    The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
    description String
    The resources scope description.
    scopePath String
    The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
    description string
    The resources scope description.
    scopePath string
    The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
    description str
    The resources scope description.
    scope_path str
    The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).
    description String
    The resources scope description.
    scopePath String
    The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).

    AutomationSource, AutomationSourceArgs

    The source event types which evaluate the security automation set of rules. For example - security alerts and security assessments. To learn more about the supported security events data models schemas - please visit https://aka.ms/ASCAutomationSchemas.
    EventSource string | Pulumi.AzureNative.Security.EventSource
    A valid event source type.
    RuleSets List<Pulumi.AzureNative.Security.Inputs.AutomationRuleSet>
    A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
    EventSource string | EventSource
    A valid event source type.
    RuleSets []AutomationRuleSet
    A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
    eventSource String | EventSource
    A valid event source type.
    ruleSets List<AutomationRuleSet>
    A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
    eventSource string | EventSource
    A valid event source type.
    ruleSets AutomationRuleSet[]
    A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
    event_source str | EventSource
    A valid event source type.
    rule_sets Sequence[AutomationRuleSet]
    A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').

    AutomationSourceResponse, AutomationSourceResponseArgs

    The source event types which evaluate the security automation set of rules. For example - security alerts and security assessments. To learn more about the supported security events data models schemas - please visit https://aka.ms/ASCAutomationSchemas.
    EventSource string
    A valid event source type.
    RuleSets List<Pulumi.AzureNative.Security.Inputs.AutomationRuleSetResponse>
    A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
    EventSource string
    A valid event source type.
    RuleSets []AutomationRuleSetResponse
    A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
    event_source string
    A valid event source type.
    rule_sets list(object)
    A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
    eventSource String
    A valid event source type.
    ruleSets List<AutomationRuleSetResponse>
    A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
    eventSource string
    A valid event source type.
    ruleSets AutomationRuleSetResponse[]
    A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
    event_source str
    A valid event source type.
    rule_sets Sequence[AutomationRuleSetResponse]
    A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').
    eventSource String
    A valid event source type.
    ruleSets List<Property Map>
    A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').

    AutomationTriggeringRule, AutomationTriggeringRuleArgs

    A rule which is evaluated upon event interception. The rule is configured by comparing a specific value from the event model to an expected value. This comparison is done by using one of the supported operators set.
    ExpectedValue string
    The expected value.
    Operator string | Pulumi.AzureNative.Security.Operator
    A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
    PropertyJPath string
    The JPath of the entity model property that should be checked.
    PropertyType string | Pulumi.AzureNative.Security.PropertyType
    The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
    ExpectedValue string
    The expected value.
    Operator string | Operator
    A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
    PropertyJPath string
    The JPath of the entity model property that should be checked.
    PropertyType string | PropertyType
    The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
    expected_value string
    The expected value.
    operator string | "Equals" | "GreaterThan" | "GreaterThanOrEqualTo" | "LesserThan" | "LesserThanOrEqualTo" | "NotEquals" | "Contains" | "StartsWith" | "EndsWith"
    A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
    property_j_path string
    The JPath of the entity model property that should be checked.
    property_type string | "String" | "Integer" | "Number" | "Boolean"
    The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
    expectedValue String
    The expected value.
    operator String | Operator
    A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
    propertyJPath String
    The JPath of the entity model property that should be checked.
    propertyType String | PropertyType
    The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
    expectedValue string
    The expected value.
    operator string | Operator
    A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
    propertyJPath string
    The JPath of the entity model property that should be checked.
    propertyType string | PropertyType
    The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
    expected_value str
    The expected value.
    operator str | Operator
    A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
    property_j_path str
    The JPath of the entity model property that should be checked.
    property_type str | PropertyType
    The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
    expectedValue String
    The expected value.
    operator String | "Equals" | "GreaterThan" | "GreaterThanOrEqualTo" | "LesserThan" | "LesserThanOrEqualTo" | "NotEquals" | "Contains" | "StartsWith" | "EndsWith"
    A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
    propertyJPath String
    The JPath of the entity model property that should be checked.
    propertyType String | "String" | "Integer" | "Number" | "Boolean"
    The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]

    AutomationTriggeringRuleResponse, AutomationTriggeringRuleResponseArgs

    A rule which is evaluated upon event interception. The rule is configured by comparing a specific value from the event model to an expected value. This comparison is done by using one of the supported operators set.
    ExpectedValue string
    The expected value.
    Operator string
    A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
    PropertyJPath string
    The JPath of the entity model property that should be checked.
    PropertyType string
    The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
    ExpectedValue string
    The expected value.
    Operator string
    A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
    PropertyJPath string
    The JPath of the entity model property that should be checked.
    PropertyType string
    The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
    expected_value string
    The expected value.
    operator string
    A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
    property_j_path string
    The JPath of the entity model property that should be checked.
    property_type string
    The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
    expectedValue String
    The expected value.
    operator String
    A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
    propertyJPath String
    The JPath of the entity model property that should be checked.
    propertyType String
    The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
    expectedValue string
    The expected value.
    operator string
    A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
    propertyJPath string
    The JPath of the entity model property that should be checked.
    propertyType string
    The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
    expected_value str
    The expected value.
    operator str
    A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
    property_j_path str
    The JPath of the entity model property that should be checked.
    property_type str
    The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]
    expectedValue String
    The expected value.
    operator String
    A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.
    propertyJPath String
    The JPath of the entity model property that should be checked.
    propertyType String
    The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]

    EventSource, EventSourceArgs

    Assessments
    Assessments Assessments
    AssessmentsSnapshot
    AssessmentsSnapshot AssessmentsSnapshot
    SubAssessments
    SubAssessments SubAssessments
    SubAssessmentsSnapshot
    SubAssessmentsSnapshot SubAssessmentsSnapshot
    Alerts
    Alerts Alerts
    SecureScores
    SecureScores SecureScores
    SecureScoresSnapshot
    SecureScoresSnapshot SecureScoresSnapshot
    SecureScoreControls
    SecureScoreControls SecureScoreControls
    SecureScoreControlsSnapshot
    SecureScoreControlsSnapshot SecureScoreControlsSnapshot
    RegulatoryComplianceAssessment
    RegulatoryComplianceAssessment RegulatoryComplianceAssessment
    RegulatoryComplianceAssessmentSnapshot
    RegulatoryComplianceAssessmentSnapshot RegulatoryComplianceAssessmentSnapshot
    AttackPaths
    AttackPaths AttackPaths
    AttackPathsSnapshot
    AttackPathsSnapshot AttackPathsSnapshot
    EventSourceAssessments
    Assessments Assessments
    EventSourceAssessmentsSnapshot
    AssessmentsSnapshot AssessmentsSnapshot
    EventSourceSubAssessments
    SubAssessments SubAssessments
    EventSourceSubAssessmentsSnapshot
    SubAssessmentsSnapshot SubAssessmentsSnapshot
    EventSourceAlerts
    Alerts Alerts
    EventSourceSecureScores
    SecureScores SecureScores
    EventSourceSecureScoresSnapshot
    SecureScoresSnapshot SecureScoresSnapshot
    EventSourceSecureScoreControls
    SecureScoreControls SecureScoreControls
    EventSourceSecureScoreControlsSnapshot
    SecureScoreControlsSnapshot SecureScoreControlsSnapshot
    EventSourceRegulatoryComplianceAssessment
    RegulatoryComplianceAssessment RegulatoryComplianceAssessment
    EventSourceRegulatoryComplianceAssessmentSnapshot
    RegulatoryComplianceAssessmentSnapshot RegulatoryComplianceAssessmentSnapshot
    EventSourceAttackPaths
    AttackPaths AttackPaths
    EventSourceAttackPathsSnapshot
    AttackPathsSnapshot AttackPathsSnapshot
    "Assessments"
    Assessments Assessments
    "AssessmentsSnapshot"
    AssessmentsSnapshot AssessmentsSnapshot
    "SubAssessments"
    SubAssessments SubAssessments
    "SubAssessmentsSnapshot"
    SubAssessmentsSnapshot SubAssessmentsSnapshot
    "Alerts"
    Alerts Alerts
    "SecureScores"
    SecureScores SecureScores
    "SecureScoresSnapshot"
    SecureScoresSnapshot SecureScoresSnapshot
    "SecureScoreControls"
    SecureScoreControls SecureScoreControls
    "SecureScoreControlsSnapshot"
    SecureScoreControlsSnapshot SecureScoreControlsSnapshot
    "RegulatoryComplianceAssessment"
    RegulatoryComplianceAssessment RegulatoryComplianceAssessment
    "RegulatoryComplianceAssessmentSnapshot"
    RegulatoryComplianceAssessmentSnapshot RegulatoryComplianceAssessmentSnapshot
    "AttackPaths"
    AttackPaths AttackPaths
    "AttackPathsSnapshot"
    AttackPathsSnapshot AttackPathsSnapshot
    Assessments
    Assessments Assessments
    AssessmentsSnapshot
    AssessmentsSnapshot AssessmentsSnapshot
    SubAssessments
    SubAssessments SubAssessments
    SubAssessmentsSnapshot
    SubAssessmentsSnapshot SubAssessmentsSnapshot
    Alerts
    Alerts Alerts
    SecureScores
    SecureScores SecureScores
    SecureScoresSnapshot
    SecureScoresSnapshot SecureScoresSnapshot
    SecureScoreControls
    SecureScoreControls SecureScoreControls
    SecureScoreControlsSnapshot
    SecureScoreControlsSnapshot SecureScoreControlsSnapshot
    RegulatoryComplianceAssessment
    RegulatoryComplianceAssessment RegulatoryComplianceAssessment
    RegulatoryComplianceAssessmentSnapshot
    RegulatoryComplianceAssessmentSnapshot RegulatoryComplianceAssessmentSnapshot
    AttackPaths
    AttackPaths AttackPaths
    AttackPathsSnapshot
    AttackPathsSnapshot AttackPathsSnapshot
    Assessments
    Assessments Assessments
    AssessmentsSnapshot
    AssessmentsSnapshot AssessmentsSnapshot
    SubAssessments
    SubAssessments SubAssessments
    SubAssessmentsSnapshot
    SubAssessmentsSnapshot SubAssessmentsSnapshot
    Alerts
    Alerts Alerts
    SecureScores
    SecureScores SecureScores
    SecureScoresSnapshot
    SecureScoresSnapshot SecureScoresSnapshot
    SecureScoreControls
    SecureScoreControls SecureScoreControls
    SecureScoreControlsSnapshot
    SecureScoreControlsSnapshot SecureScoreControlsSnapshot
    RegulatoryComplianceAssessment
    RegulatoryComplianceAssessment RegulatoryComplianceAssessment
    RegulatoryComplianceAssessmentSnapshot
    RegulatoryComplianceAssessmentSnapshot RegulatoryComplianceAssessmentSnapshot
    AttackPaths
    AttackPaths AttackPaths
    AttackPathsSnapshot
    AttackPathsSnapshot AttackPathsSnapshot
    ASSESSMENTS
    Assessments Assessments
    ASSESSMENTS_SNAPSHOT
    AssessmentsSnapshot AssessmentsSnapshot
    SUB_ASSESSMENTS
    SubAssessments SubAssessments
    SUB_ASSESSMENTS_SNAPSHOT
    SubAssessmentsSnapshot SubAssessmentsSnapshot
    ALERTS
    Alerts Alerts
    SECURE_SCORES
    SecureScores SecureScores
    SECURE_SCORES_SNAPSHOT
    SecureScoresSnapshot SecureScoresSnapshot
    SECURE_SCORE_CONTROLS
    SecureScoreControls SecureScoreControls
    SECURE_SCORE_CONTROLS_SNAPSHOT
    SecureScoreControlsSnapshot SecureScoreControlsSnapshot
    REGULATORY_COMPLIANCE_ASSESSMENT
    RegulatoryComplianceAssessment RegulatoryComplianceAssessment
    REGULATORY_COMPLIANCE_ASSESSMENT_SNAPSHOT
    RegulatoryComplianceAssessmentSnapshot RegulatoryComplianceAssessmentSnapshot
    ATTACK_PATHS
    AttackPaths AttackPaths
    ATTACK_PATHS_SNAPSHOT
    AttackPathsSnapshot AttackPathsSnapshot
    "Assessments"
    Assessments Assessments
    "AssessmentsSnapshot"
    AssessmentsSnapshot AssessmentsSnapshot
    "SubAssessments"
    SubAssessments SubAssessments
    "SubAssessmentsSnapshot"
    SubAssessmentsSnapshot SubAssessmentsSnapshot
    "Alerts"
    Alerts Alerts
    "SecureScores"
    SecureScores SecureScores
    "SecureScoresSnapshot"
    SecureScoresSnapshot SecureScoresSnapshot
    "SecureScoreControls"
    SecureScoreControls SecureScoreControls
    "SecureScoreControlsSnapshot"
    SecureScoreControlsSnapshot SecureScoreControlsSnapshot
    "RegulatoryComplianceAssessment"
    RegulatoryComplianceAssessment RegulatoryComplianceAssessment
    "RegulatoryComplianceAssessmentSnapshot"
    RegulatoryComplianceAssessmentSnapshot RegulatoryComplianceAssessmentSnapshot
    "AttackPaths"
    AttackPaths AttackPaths
    "AttackPathsSnapshot"
    AttackPathsSnapshot AttackPathsSnapshot

    Operator, OperatorArgs

    EqualsValue
    Equals Applies for decimal and non-decimal operands
    GreaterThan
    GreaterThan Applies only for decimal operands
    GreaterThanOrEqualTo
    GreaterThanOrEqualTo Applies only for decimal operands
    LesserThan
    LesserThan Applies only for decimal operands
    LesserThanOrEqualTo
    LesserThanOrEqualTo Applies only for decimal operands
    NotEquals
    NotEquals Applies for decimal and non-decimal operands
    Contains
    Contains Applies only for non-decimal operands
    StartsWith
    StartsWith Applies only for non-decimal operands
    EndsWith
    EndsWith Applies only for non-decimal operands
    OperatorEquals
    Equals Applies for decimal and non-decimal operands
    OperatorGreaterThan
    GreaterThan Applies only for decimal operands
    OperatorGreaterThanOrEqualTo
    GreaterThanOrEqualTo Applies only for decimal operands
    OperatorLesserThan
    LesserThan Applies only for decimal operands
    OperatorLesserThanOrEqualTo
    LesserThanOrEqualTo Applies only for decimal operands
    OperatorNotEquals
    NotEquals Applies for decimal and non-decimal operands
    OperatorContains
    Contains Applies only for non-decimal operands
    OperatorStartsWith
    StartsWith Applies only for non-decimal operands
    OperatorEndsWith
    EndsWith Applies only for non-decimal operands
    "Equals"
    Equals Applies for decimal and non-decimal operands
    "GreaterThan"
    GreaterThan Applies only for decimal operands
    "GreaterThanOrEqualTo"
    GreaterThanOrEqualTo Applies only for decimal operands
    "LesserThan"
    LesserThan Applies only for decimal operands
    "LesserThanOrEqualTo"
    LesserThanOrEqualTo Applies only for decimal operands
    "NotEquals"
    NotEquals Applies for decimal and non-decimal operands
    "Contains"
    Contains Applies only for non-decimal operands
    "StartsWith"
    StartsWith Applies only for non-decimal operands
    "EndsWith"
    EndsWith Applies only for non-decimal operands
    Equals
    Equals Applies for decimal and non-decimal operands
    GreaterThan
    GreaterThan Applies only for decimal operands
    GreaterThanOrEqualTo
    GreaterThanOrEqualTo Applies only for decimal operands
    LesserThan
    LesserThan Applies only for decimal operands
    LesserThanOrEqualTo
    LesserThanOrEqualTo Applies only for decimal operands
    NotEquals
    NotEquals Applies for decimal and non-decimal operands
    Contains
    Contains Applies only for non-decimal operands
    StartsWith
    StartsWith Applies only for non-decimal operands
    EndsWith
    EndsWith Applies only for non-decimal operands
    Equals
    Equals Applies for decimal and non-decimal operands
    GreaterThan
    GreaterThan Applies only for decimal operands
    GreaterThanOrEqualTo
    GreaterThanOrEqualTo Applies only for decimal operands
    LesserThan
    LesserThan Applies only for decimal operands
    LesserThanOrEqualTo
    LesserThanOrEqualTo Applies only for decimal operands
    NotEquals
    NotEquals Applies for decimal and non-decimal operands
    Contains
    Contains Applies only for non-decimal operands
    StartsWith
    StartsWith Applies only for non-decimal operands
    EndsWith
    EndsWith Applies only for non-decimal operands
    EQUALS
    Equals Applies for decimal and non-decimal operands
    GREATER_THAN
    GreaterThan Applies only for decimal operands
    GREATER_THAN_OR_EQUAL_TO
    GreaterThanOrEqualTo Applies only for decimal operands
    LESSER_THAN
    LesserThan Applies only for decimal operands
    LESSER_THAN_OR_EQUAL_TO
    LesserThanOrEqualTo Applies only for decimal operands
    NOT_EQUALS
    NotEquals Applies for decimal and non-decimal operands
    CONTAINS
    Contains Applies only for non-decimal operands
    STARTS_WITH
    StartsWith Applies only for non-decimal operands
    ENDS_WITH
    EndsWith Applies only for non-decimal operands
    "Equals"
    Equals Applies for decimal and non-decimal operands
    "GreaterThan"
    GreaterThan Applies only for decimal operands
    "GreaterThanOrEqualTo"
    GreaterThanOrEqualTo Applies only for decimal operands
    "LesserThan"
    LesserThan Applies only for decimal operands
    "LesserThanOrEqualTo"
    LesserThanOrEqualTo Applies only for decimal operands
    "NotEquals"
    NotEquals Applies for decimal and non-decimal operands
    "Contains"
    Contains Applies only for non-decimal operands
    "StartsWith"
    StartsWith Applies only for non-decimal operands
    "EndsWith"
    EndsWith Applies only for non-decimal operands

    PropertyType, PropertyTypeArgs

    String
    String String
    Integer
    Integer Integer
    Number
    Number Number
    Boolean
    Boolean Boolean
    PropertyTypeString
    String String
    PropertyTypeInteger
    Integer Integer
    PropertyTypeNumber
    Number Number
    PropertyTypeBoolean
    Boolean Boolean
    "String"
    String String
    "Integer"
    Integer Integer
    "Number"
    Number Number
    "Boolean"
    Boolean Boolean
    String
    String String
    Integer
    Integer Integer
    Number
    Number Number
    Boolean
    Boolean Boolean
    String
    String String
    Integer
    Integer Integer
    Number
    Number Number
    Boolean
    Boolean Boolean
    STRING
    String String
    INTEGER
    Integer Integer
    NUMBER
    Number Number
    BOOLEAN
    Boolean Boolean
    "String"
    String String
    "Integer"
    Integer Integer
    "Number"
    Number Number
    "Boolean"
    Boolean Boolean

    SystemDataResponse, SystemDataResponseArgs

    Metadata pertaining to creation and last modification of the resource.
    CreatedAt string
    The timestamp of resource creation (UTC).
    CreatedBy string
    The identity that created the resource.
    CreatedByType string
    The type of identity that created the resource.
    LastModifiedAt string
    The timestamp of resource last modification (UTC)
    LastModifiedBy string
    The identity that last modified the resource.
    LastModifiedByType string
    The type of identity that last modified the resource.
    CreatedAt string
    The timestamp of resource creation (UTC).
    CreatedBy string
    The identity that created the resource.
    CreatedByType string
    The type of identity that created the resource.
    LastModifiedAt string
    The timestamp of resource last modification (UTC)
    LastModifiedBy string
    The identity that last modified the resource.
    LastModifiedByType string
    The type of identity that last modified the resource.
    created_at string
    The timestamp of resource creation (UTC).
    created_by string
    The identity that created the resource.
    created_by_type string
    The type of identity that created the resource.
    last_modified_at string
    The timestamp of resource last modification (UTC)
    last_modified_by string
    The identity that last modified the resource.
    last_modified_by_type string
    The type of identity that last modified the resource.
    createdAt String
    The timestamp of resource creation (UTC).
    createdBy String
    The identity that created the resource.
    createdByType String
    The type of identity that created the resource.
    lastModifiedAt String
    The timestamp of resource last modification (UTC)
    lastModifiedBy String
    The identity that last modified the resource.
    lastModifiedByType String
    The type of identity that last modified the resource.
    createdAt string
    The timestamp of resource creation (UTC).
    createdBy string
    The identity that created the resource.
    createdByType string
    The type of identity that created the resource.
    lastModifiedAt string
    The timestamp of resource last modification (UTC)
    lastModifiedBy string
    The identity that last modified the resource.
    lastModifiedByType string
    The type of identity that last modified the resource.
    created_at str
    The timestamp of resource creation (UTC).
    created_by str
    The identity that created the resource.
    created_by_type str
    The type of identity that created the resource.
    last_modified_at str
    The timestamp of resource last modification (UTC)
    last_modified_by str
    The identity that last modified the resource.
    last_modified_by_type str
    The type of identity that last modified the resource.
    createdAt String
    The timestamp of resource creation (UTC).
    createdBy String
    The identity that created the resource.
    createdByType String
    The type of identity that created the resource.
    lastModifiedAt String
    The timestamp of resource last modification (UTC)
    lastModifiedBy String
    The identity that last modified the resource.
    lastModifiedByType String
    The type of identity that last modified the resource.

    Import

    An existing resource can be imported using its type token, name, and identifier, e.g.

    $ pulumi import azure-native:security:Automation exampleAutomation /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Security/automations/{automationName}

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Azure Native pulumi/pulumi-azure-native
    License
    Apache-2.0
    azure-native logo
    This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
    Viewing docs for Azure Native v3.23.0
    published on Saturday, Jul 18, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-azure-native

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial