Azure Native

v1.79.2 published on Thursday, Sep 29, 2022 by Pulumi

Automation

The security automation resource. API Version: 2019-01-01-preview.

Example Usage

Create or update a security automation for all assessments (including all severities)

using System.Collections.Generic;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var automation = new AzureNative.Security.Automation("automation", new()
    {
        Actions = new[]
        {
            new AzureNative.Security.Inputs.AutomationActionLogicAppArgs
            {
                ActionType = "LogicApp",
                LogicAppResourceId = "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
                Uri = "https://exampleTriggerUri1.com",
            },
        },
        AutomationName = "exampleAutomation",
        Description = "An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment",
        IsEnabled = true,
        Location = "Central US",
        ResourceGroupName = "exampleResourceGroup",
        Scopes = new[]
        {
            new AzureNative.Security.Inputs.AutomationScopeArgs
            {
                Description = "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
                ScopePath = "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
            },
        },
        Sources = new[]
        {
            new AzureNative.Security.Inputs.AutomationSourceArgs
            {
                EventSource = "Assessments",
            },
        },
        Tags = ,
    });

});
package main

import (
	security "github.com/pulumi/pulumi-azure-native/sdk/go/azure/security"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := security.NewAutomation(ctx, "automation", &security.AutomationArgs{
			Actions: pulumi.AnyArray{
				security.AutomationActionLogicApp{
					ActionType:         "LogicApp",
					LogicAppResourceId: "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
					Uri:                "https://exampleTriggerUri1.com",
				},
			},
			AutomationName:    pulumi.String("exampleAutomation"),
			Description:       pulumi.String("An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment"),
			IsEnabled:         pulumi.Bool(true),
			Location:          pulumi.String("Central US"),
			ResourceGroupName: pulumi.String("exampleResourceGroup"),
			Scopes: []security.AutomationScopeArgs{
				&security.AutomationScopeArgs{
					Description: pulumi.String("A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5"),
					ScopePath:   pulumi.String("/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup"),
				},
			},
			Sources: []security.AutomationSourceArgs{
				&security.AutomationSourceArgs{
					EventSource: pulumi.String("Assessments"),
				},
			},
			Tags: nil,
		})
		if err != nil {
			return err
		}
		return nil
	})
}
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.security.Automation;
import com.pulumi.azurenative.security.AutomationArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var automation = new Automation("automation", AutomationArgs.builder()        
            .actions(Map.ofEntries(
                Map.entry("actionType", "LogicApp"),
                Map.entry("logicAppResourceId", "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1"),
                Map.entry("uri", "https://exampleTriggerUri1.com")
            ))
            .automationName("exampleAutomation")
            .description("An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment")
            .isEnabled(true)
            .location("Central US")
            .resourceGroupName("exampleResourceGroup")
            .scopes(Map.ofEntries(
                Map.entry("description", "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5"),
                Map.entry("scopePath", "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup")
            ))
            .sources(Map.of("eventSource", "Assessments"))
            .tags()
            .build());

    }
}
import pulumi
import pulumi_azure_native as azure_native

automation = azure_native.security.Automation("automation",
    actions=[azure_native.security.AutomationActionLogicAppArgs(
        action_type="LogicApp",
        logic_app_resource_id="/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
        uri="https://exampleTriggerUri1.com",
    )],
    automation_name="exampleAutomation",
    description="An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment",
    is_enabled=True,
    location="Central US",
    resource_group_name="exampleResourceGroup",
    scopes=[azure_native.security.AutomationScopeArgs(
        description="A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
        scope_path="/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
    )],
    sources=[azure_native.security.AutomationSourceArgs(
        event_source="Assessments",
    )],
    tags={})
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const automation = new azure_native.security.Automation("automation", {
    actions: [{
        actionType: "LogicApp",
        logicAppResourceId: "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
        uri: "https://exampleTriggerUri1.com",
    }],
    automationName: "exampleAutomation",
    description: "An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment",
    isEnabled: true,
    location: "Central US",
    resourceGroupName: "exampleResourceGroup",
    scopes: [{
        description: "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
        scopePath: "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
    }],
    sources: [{
        eventSource: "Assessments",
    }],
    tags: {},
});
resources:
  automation:
    type: azure-native:security:Automation
    properties:
      actions:
        - actionType: LogicApp
          logicAppResourceId: /subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1
          uri: https://exampleTriggerUri1.com
      automationName: exampleAutomation
      description: An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment
      isEnabled: true
      location: Central US
      resourceGroupName: exampleResourceGroup
      scopes:
        - description: 'A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5'
          scopePath: /subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup
      sources:
        - eventSource: Assessments
      tags: {}

Create or update a security automation for all high severity assessments

using System.Collections.Generic;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var automation = new AzureNative.Security.Automation("automation", new()
    {
        Actions = new[]
        {
            new AzureNative.Security.Inputs.AutomationActionLogicAppArgs
            {
                ActionType = "LogicApp",
                LogicAppResourceId = "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
                Uri = "https://exampleTriggerUri1.com",
            },
        },
        AutomationName = "exampleAutomation",
        Description = "An example of a security automation that triggers one LogicApp resource (myTest1) on any high severity security assessment",
        IsEnabled = true,
        Location = "Central US",
        ResourceGroupName = "exampleResourceGroup",
        Scopes = new[]
        {
            new AzureNative.Security.Inputs.AutomationScopeArgs
            {
                Description = "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
                ScopePath = "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
            },
        },
        Sources = new[]
        {
            new AzureNative.Security.Inputs.AutomationSourceArgs
            {
                EventSource = "Assessments",
                RuleSets = new[]
                {
                    new AzureNative.Security.Inputs.AutomationRuleSetArgs
                    {
                        Rules = new[]
                        {
                            new AzureNative.Security.Inputs.AutomationTriggeringRuleArgs
                            {
                                ExpectedValue = "High",
                                Operator = "Equals",
                                PropertyJPath = "properties.metadata.severity",
                                PropertyType = "String",
                            },
                        },
                    },
                },
            },
        },
        Tags = ,
    });

});
package main

import (
	security "github.com/pulumi/pulumi-azure-native/sdk/go/azure/security"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := security.NewAutomation(ctx, "automation", &security.AutomationArgs{
			Actions: pulumi.AnyArray{
				security.AutomationActionLogicApp{
					ActionType:         "LogicApp",
					LogicAppResourceId: "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
					Uri:                "https://exampleTriggerUri1.com",
				},
			},
			AutomationName:    pulumi.String("exampleAutomation"),
			Description:       pulumi.String("An example of a security automation that triggers one LogicApp resource (myTest1) on any high severity security assessment"),
			IsEnabled:         pulumi.Bool(true),
			Location:          pulumi.String("Central US"),
			ResourceGroupName: pulumi.String("exampleResourceGroup"),
			Scopes: []security.AutomationScopeArgs{
				&security.AutomationScopeArgs{
					Description: pulumi.String("A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5"),
					ScopePath:   pulumi.String("/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup"),
				},
			},
			Sources: []security.AutomationSourceArgs{
				&security.AutomationSourceArgs{
					EventSource: pulumi.String("Assessments"),
					RuleSets: security.AutomationRuleSetArray{
						&security.AutomationRuleSetArgs{
							Rules: security.AutomationTriggeringRuleArray{
								&security.AutomationTriggeringRuleArgs{
									ExpectedValue: pulumi.String("High"),
									Operator:      pulumi.String("Equals"),
									PropertyJPath: pulumi.String("properties.metadata.severity"),
									PropertyType:  pulumi.String("String"),
								},
							},
						},
					},
				},
			},
			Tags: nil,
		})
		if err != nil {
			return err
		}
		return nil
	})
}
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.security.Automation;
import com.pulumi.azurenative.security.AutomationArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var automation = new Automation("automation", AutomationArgs.builder()        
            .actions(Map.ofEntries(
                Map.entry("actionType", "LogicApp"),
                Map.entry("logicAppResourceId", "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1"),
                Map.entry("uri", "https://exampleTriggerUri1.com")
            ))
            .automationName("exampleAutomation")
            .description("An example of a security automation that triggers one LogicApp resource (myTest1) on any high severity security assessment")
            .isEnabled(true)
            .location("Central US")
            .resourceGroupName("exampleResourceGroup")
            .scopes(Map.ofEntries(
                Map.entry("description", "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5"),
                Map.entry("scopePath", "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup")
            ))
            .sources(Map.ofEntries(
                Map.entry("eventSource", "Assessments"),
                Map.entry("ruleSets", Map.of("rules", Map.ofEntries(
                    Map.entry("expectedValue", "High"),
                    Map.entry("operator", "Equals"),
                    Map.entry("propertyJPath", "properties.metadata.severity"),
                    Map.entry("propertyType", "String")
                )))
            ))
            .tags()
            .build());

    }
}
import pulumi
import pulumi_azure_native as azure_native

automation = azure_native.security.Automation("automation",
    actions=[azure_native.security.AutomationActionLogicAppArgs(
        action_type="LogicApp",
        logic_app_resource_id="/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
        uri="https://exampleTriggerUri1.com",
    )],
    automation_name="exampleAutomation",
    description="An example of a security automation that triggers one LogicApp resource (myTest1) on any high severity security assessment",
    is_enabled=True,
    location="Central US",
    resource_group_name="exampleResourceGroup",
    scopes=[azure_native.security.AutomationScopeArgs(
        description="A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
        scope_path="/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
    )],
    sources=[azure_native.security.AutomationSourceArgs(
        event_source="Assessments",
        rule_sets=[azure_native.security.AutomationRuleSetArgs(
            rules=[azure_native.security.AutomationTriggeringRuleArgs(
                expected_value="High",
                operator="Equals",
                property_j_path="properties.metadata.severity",
                property_type="String",
            )],
        )],
    )],
    tags={})
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const automation = new azure_native.security.Automation("automation", {
    actions: [{
        actionType: "LogicApp",
        logicAppResourceId: "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
        uri: "https://exampleTriggerUri1.com",
    }],
    automationName: "exampleAutomation",
    description: "An example of a security automation that triggers one LogicApp resource (myTest1) on any high severity security assessment",
    isEnabled: true,
    location: "Central US",
    resourceGroupName: "exampleResourceGroup",
    scopes: [{
        description: "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
        scopePath: "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
    }],
    sources: [{
        eventSource: "Assessments",
        ruleSets: [{
            rules: [{
                expectedValue: "High",
                operator: "Equals",
                propertyJPath: "properties.metadata.severity",
                propertyType: "String",
            }],
        }],
    }],
    tags: {},
});
resources:
  automation:
    type: azure-native:security:Automation
    properties:
      actions:
        - actionType: LogicApp
          logicAppResourceId: /subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1
          uri: https://exampleTriggerUri1.com
      automationName: exampleAutomation
      description: An example of a security automation that triggers one LogicApp resource (myTest1) on any high severity security assessment
      isEnabled: true
      location: Central US
      resourceGroupName: exampleResourceGroup
      scopes:
        - description: 'A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5'
          scopePath: /subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup
      sources:
        - eventSource: Assessments
          ruleSets:
            - rules:
                - expectedValue: High
                  operator: Equals
                  propertyJPath: properties.metadata.severity
                  propertyType: String
      tags: {}

Disable or enable a security automation

using System.Collections.Generic;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var automation = new AzureNative.Security.Automation("automation", new()
    {
        Actions = new[]
        {
            new AzureNative.Security.Inputs.AutomationActionLogicAppArgs
            {
                ActionType = "LogicApp",
                LogicAppResourceId = "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
                Uri = "https://exampleTriggerUri1.com",
            },
        },
        AutomationName = "exampleAutomation",
        Description = "An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment of type customAssessment",
        IsEnabled = false,
        Location = "Central US",
        ResourceGroupName = "exampleResourceGroup",
        Scopes = new[]
        {
            new AzureNative.Security.Inputs.AutomationScopeArgs
            {
                Description = "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
                ScopePath = "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
            },
        },
        Sources = new[]
        {
            new AzureNative.Security.Inputs.AutomationSourceArgs
            {
                EventSource = "Assessments",
                RuleSets = new[]
                {
                    new AzureNative.Security.Inputs.AutomationRuleSetArgs
                    {
                        Rules = new[]
                        {
                            new AzureNative.Security.Inputs.AutomationTriggeringRuleArgs
                            {
                                ExpectedValue = "customAssessment",
                                Operator = "Equals",
                                PropertyJPath = "$.Entity.AssessmentType",
                                PropertyType = "String",
                            },
                        },
                    },
                },
            },
        },
        Tags = ,
    });

});
package main

import (
	"fmt"

	security "github.com/pulumi/pulumi-azure-native/sdk/go/azure/security"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := security.NewAutomation(ctx, "automation", &security.AutomationArgs{
			Actions: pulumi.AnyArray{
				security.AutomationActionLogicApp{
					ActionType:         "LogicApp",
					LogicAppResourceId: "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
					Uri:                "https://exampleTriggerUri1.com",
				},
			},
			AutomationName:    pulumi.String("exampleAutomation"),
			Description:       pulumi.String("An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment of type customAssessment"),
			IsEnabled:         pulumi.Bool(false),
			Location:          pulumi.String("Central US"),
			ResourceGroupName: pulumi.String("exampleResourceGroup"),
			Scopes: []security.AutomationScopeArgs{
				&security.AutomationScopeArgs{
					Description: pulumi.String("A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5"),
					ScopePath:   pulumi.String("/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup"),
				},
			},
			Sources: []security.AutomationSourceArgs{
				&security.AutomationSourceArgs{
					EventSource: pulumi.String("Assessments"),
					RuleSets: security.AutomationRuleSetArray{
						&security.AutomationRuleSetArgs{
							Rules: security.AutomationTriggeringRuleArray{
								&security.AutomationTriggeringRuleArgs{
									ExpectedValue: pulumi.String("customAssessment"),
									Operator:      pulumi.String("Equals"),
									PropertyJPath: pulumi.String(fmt.Sprintf("$.Entity.AssessmentType")),
									PropertyType:  pulumi.String("String"),
								},
							},
						},
					},
				},
			},
			Tags: nil,
		})
		if err != nil {
			return err
		}
		return nil
	})
}
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.security.Automation;
import com.pulumi.azurenative.security.AutomationArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var automation = new Automation("automation", AutomationArgs.builder()        
            .actions(Map.ofEntries(
                Map.entry("actionType", "LogicApp"),
                Map.entry("logicAppResourceId", "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1"),
                Map.entry("uri", "https://exampleTriggerUri1.com")
            ))
            .automationName("exampleAutomation")
            .description("An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment of type customAssessment")
            .isEnabled(false)
            .location("Central US")
            .resourceGroupName("exampleResourceGroup")
            .scopes(Map.ofEntries(
                Map.entry("description", "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5"),
                Map.entry("scopePath", "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup")
            ))
            .sources(Map.ofEntries(
                Map.entry("eventSource", "Assessments"),
                Map.entry("ruleSets", Map.of("rules", Map.ofEntries(
                    Map.entry("expectedValue", "customAssessment"),
                    Map.entry("operator", "Equals"),
                    Map.entry("propertyJPath", "$.Entity.AssessmentType"),
                    Map.entry("propertyType", "String")
                )))
            ))
            .tags()
            .build());

    }
}
import pulumi
import pulumi_azure_native as azure_native

automation = azure_native.security.Automation("automation",
    actions=[azure_native.security.AutomationActionLogicAppArgs(
        action_type="LogicApp",
        logic_app_resource_id="/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
        uri="https://exampleTriggerUri1.com",
    )],
    automation_name="exampleAutomation",
    description="An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment of type customAssessment",
    is_enabled=False,
    location="Central US",
    resource_group_name="exampleResourceGroup",
    scopes=[azure_native.security.AutomationScopeArgs(
        description="A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
        scope_path="/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
    )],
    sources=[azure_native.security.AutomationSourceArgs(
        event_source="Assessments",
        rule_sets=[azure_native.security.AutomationRuleSetArgs(
            rules=[azure_native.security.AutomationTriggeringRuleArgs(
                expected_value="customAssessment",
                operator="Equals",
                property_j_path="$.Entity.AssessmentType",
                property_type="String",
            )],
        )],
    )],
    tags={})
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const automation = new azure_native.security.Automation("automation", {
    actions: [{
        actionType: "LogicApp",
        logicAppResourceId: "/subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1",
        uri: "https://exampleTriggerUri1.com",
    }],
    automationName: "exampleAutomation",
    description: "An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment of type customAssessment",
    isEnabled: false,
    location: "Central US",
    resourceGroupName: "exampleResourceGroup",
    scopes: [{
        description: "A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5",
        scopePath: "/subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup",
    }],
    sources: [{
        eventSource: "Assessments",
        ruleSets: [{
            rules: [{
                expectedValue: "customAssessment",
                operator: "Equals",
                propertyJPath: `$.Entity.AssessmentType`,
                propertyType: "String",
            }],
        }],
    }],
    tags: {},
});
resources:
  automation:
    type: azure-native:security:Automation
    properties:
      actions:
        - actionType: LogicApp
          logicAppResourceId: /subscriptions/e54a4a18-5b94-4f90-9471-bd3decad8a2e/resourceGroups/sample/providers/Microsoft.Logic/workflows/MyTest1
          uri: https://exampleTriggerUri1.com
      automationName: exampleAutomation
      description: An example of a security automation that triggers one LogicApp resource (myTest1) on any security assessment of type customAssessment
      isEnabled: false
      location: Central US
      resourceGroupName: exampleResourceGroup
      scopes:
        - description: 'A description that helps to identify this scope - for example: security assessments that relate to the resource group myResourceGroup within the subscription a5caac9c-5c04-49af-b3d0-e204f40345d5'
          scopePath: /subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/myResourceGroup
      sources:
        - eventSource: Assessments
          ruleSets:
            - rules:
                - expectedValue: customAssessment
                  operator: Equals
                  propertyJPath: $.Entity.AssessmentType
                  propertyType: String
      tags: {}

Create a Automation Resource

new Automation(name: string, args: AutomationArgs, opts?: CustomResourceOptions);
@overload
def Automation(resource_name: str,
               opts: Optional[ResourceOptions] = None,
               actions: Optional[Sequence[Union[AutomationActionEventHubArgs, AutomationActionLogicAppArgs, AutomationActionWorkspaceArgs]]] = None,
               automation_name: Optional[str] = None,
               description: Optional[str] = None,
               is_enabled: Optional[bool] = None,
               kind: Optional[str] = None,
               location: Optional[str] = None,
               resource_group_name: Optional[str] = None,
               scopes: Optional[Sequence[AutomationScopeArgs]] = None,
               sources: Optional[Sequence[AutomationSourceArgs]] = None,
               tags: Optional[Mapping[str, str]] = None)
@overload
def Automation(resource_name: str,
               args: AutomationArgs,
               opts: Optional[ResourceOptions] = None)
func NewAutomation(ctx *Context, name string, args AutomationArgs, opts ...ResourceOption) (*Automation, error)
public Automation(string name, AutomationArgs args, CustomResourceOptions? opts = null)
public Automation(String name, AutomationArgs args)
public Automation(String name, AutomationArgs args, CustomResourceOptions options)
type: azure-native:security:Automation
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

name string
The unique name of the resource.
args AutomationArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name str
The unique name of the resource.
args AutomationArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name string
The unique name of the resource.
args AutomationArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name string
The unique name of the resource.
args AutomationArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name String
The unique name of the resource.
args AutomationArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Automation Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The Automation resource accepts the following input properties:

ResourceGroupName string

The name of the resource group within the user's subscription. The name is case insensitive.

Actions List<object>

A collection of the actions which are triggered if all the configured rules evaluations, within at least one rule set, are true.

AutomationName string

The security automation name.

Description string

The security automation description.

IsEnabled bool

Indicates whether the security automation is enabled.

Kind string

Kind of the resource

Location string

Location where the resource is stored

Scopes List<Pulumi.AzureNative.Security.Inputs.AutomationScopeArgs>

A collection of scopes on which the security automations logic is applied. Supported scopes are the subscription itself or a resource group under that subscription. The automation will only apply on defined scopes.

Sources List<Pulumi.AzureNative.Security.Inputs.AutomationSourceArgs>

A collection of the source event types which evaluate the security automation set of rules.

Tags Dictionary<string, string>

A list of key value pairs that describe the resource.

ResourceGroupName string

The name of the resource group within the user's subscription. The name is case insensitive.

Actions []interface{}

A collection of the actions which are triggered if all the configured rules evaluations, within at least one rule set, are true.

AutomationName string

The security automation name.

Description string

The security automation description.

IsEnabled bool

Indicates whether the security automation is enabled.

Kind string

Kind of the resource

Location string

Location where the resource is stored

Scopes []AutomationScopeArgs

A collection of scopes on which the security automations logic is applied. Supported scopes are the subscription itself or a resource group under that subscription. The automation will only apply on defined scopes.

Sources []AutomationSourceArgs

A collection of the source event types which evaluate the security automation set of rules.

Tags map[string]string

A list of key value pairs that describe the resource.

resourceGroupName String

The name of the resource group within the user's subscription. The name is case insensitive.

actions List<Object>

A collection of the actions which are triggered if all the configured rules evaluations, within at least one rule set, are true.

automationName String

The security automation name.

description String

The security automation description.

isEnabled Boolean

Indicates whether the security automation is enabled.

kind String

Kind of the resource

location String

Location where the resource is stored

scopes List<AutomationScopeArgs>

A collection of scopes on which the security automations logic is applied. Supported scopes are the subscription itself or a resource group under that subscription. The automation will only apply on defined scopes.

sources List<AutomationSourceArgs>

A collection of the source event types which evaluate the security automation set of rules.

tags Map<String,String>

A list of key value pairs that describe the resource.

resourceGroupName string

The name of the resource group within the user's subscription. The name is case insensitive.

actions (AutomationActionEventHubArgs | AutomationActionLogicAppArgs | AutomationActionWorkspaceArgs)[]

A collection of the actions which are triggered if all the configured rules evaluations, within at least one rule set, are true.

automationName string

The security automation name.

description string

The security automation description.

isEnabled boolean

Indicates whether the security automation is enabled.

kind string

Kind of the resource

location string

Location where the resource is stored

scopes AutomationScopeArgs[]

A collection of scopes on which the security automations logic is applied. Supported scopes are the subscription itself or a resource group under that subscription. The automation will only apply on defined scopes.

sources AutomationSourceArgs[]

A collection of the source event types which evaluate the security automation set of rules.

tags {[key: string]: string}

A list of key value pairs that describe the resource.

resource_group_name str

The name of the resource group within the user's subscription. The name is case insensitive.

actions Sequence[Union[AutomationActionEventHubArgs, AutomationActionLogicAppArgs, AutomationActionWorkspaceArgs]]

A collection of the actions which are triggered if all the configured rules evaluations, within at least one rule set, are true.

automation_name str

The security automation name.

description str

The security automation description.

is_enabled bool

Indicates whether the security automation is enabled.

kind str

Kind of the resource

location str

Location where the resource is stored

scopes Sequence[AutomationScopeArgs]

A collection of scopes on which the security automations logic is applied. Supported scopes are the subscription itself or a resource group under that subscription. The automation will only apply on defined scopes.

sources Sequence[AutomationSourceArgs]

A collection of the source event types which evaluate the security automation set of rules.

tags Mapping[str, str]

A list of key value pairs that describe the resource.

resourceGroupName String

The name of the resource group within the user's subscription. The name is case insensitive.

actions List<Property Map | Property Map | Property Map>

A collection of the actions which are triggered if all the configured rules evaluations, within at least one rule set, are true.

automationName String

The security automation name.

description String

The security automation description.

isEnabled Boolean

Indicates whether the security automation is enabled.

kind String

Kind of the resource

location String

Location where the resource is stored

scopes List<Property Map>

A collection of scopes on which the security automations logic is applied. Supported scopes are the subscription itself or a resource group under that subscription. The automation will only apply on defined scopes.

sources List<Property Map>

A collection of the source event types which evaluate the security automation set of rules.

tags Map<String>

A list of key value pairs that describe the resource.

Outputs

All input properties are implicitly available as output properties. Additionally, the Automation resource produces the following output properties:

Id string

The provider-assigned unique ID for this managed resource.

Name string

Resource name

Type string

Resource type

Etag string

Entity tag is used for comparing two or more entities from the same requested resource.

Id string

The provider-assigned unique ID for this managed resource.

Name string

Resource name

Type string

Resource type

Etag string

Entity tag is used for comparing two or more entities from the same requested resource.

id String

The provider-assigned unique ID for this managed resource.

name String

Resource name

type String

Resource type

etag String

Entity tag is used for comparing two or more entities from the same requested resource.

id string

The provider-assigned unique ID for this managed resource.

name string

Resource name

type string

Resource type

etag string

Entity tag is used for comparing two or more entities from the same requested resource.

id str

The provider-assigned unique ID for this managed resource.

name str

Resource name

type str

Resource type

etag str

Entity tag is used for comparing two or more entities from the same requested resource.

id String

The provider-assigned unique ID for this managed resource.

name String

Resource name

type String

Resource type

etag String

Entity tag is used for comparing two or more entities from the same requested resource.

Supporting Types

AutomationActionEventHub

ConnectionString string

The target Event Hub connection string (it will not be included in any response).

EventHubResourceId string

The target Event Hub Azure Resource ID.

ConnectionString string

The target Event Hub connection string (it will not be included in any response).

EventHubResourceId string

The target Event Hub Azure Resource ID.

connectionString String

The target Event Hub connection string (it will not be included in any response).

eventHubResourceId String

The target Event Hub Azure Resource ID.

connectionString string

The target Event Hub connection string (it will not be included in any response).

eventHubResourceId string

The target Event Hub Azure Resource ID.

connection_string str

The target Event Hub connection string (it will not be included in any response).

event_hub_resource_id str

The target Event Hub Azure Resource ID.

connectionString String

The target Event Hub connection string (it will not be included in any response).

eventHubResourceId String

The target Event Hub Azure Resource ID.

AutomationActionEventHubResponse

SasPolicyName string

The target Event Hub SAS policy name.

ConnectionString string

The target Event Hub connection string (it will not be included in any response).

EventHubResourceId string

The target Event Hub Azure Resource ID.

SasPolicyName string

The target Event Hub SAS policy name.

ConnectionString string

The target Event Hub connection string (it will not be included in any response).

EventHubResourceId string

The target Event Hub Azure Resource ID.

sasPolicyName String

The target Event Hub SAS policy name.

connectionString String

The target Event Hub connection string (it will not be included in any response).

eventHubResourceId String

The target Event Hub Azure Resource ID.

sasPolicyName string

The target Event Hub SAS policy name.

connectionString string

The target Event Hub connection string (it will not be included in any response).

eventHubResourceId string

The target Event Hub Azure Resource ID.

sas_policy_name str

The target Event Hub SAS policy name.

connection_string str

The target Event Hub connection string (it will not be included in any response).

event_hub_resource_id str

The target Event Hub Azure Resource ID.

sasPolicyName String

The target Event Hub SAS policy name.

connectionString String

The target Event Hub connection string (it will not be included in any response).

eventHubResourceId String

The target Event Hub Azure Resource ID.

AutomationActionLogicApp

LogicAppResourceId string

The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App

Uri string

The Logic App trigger URI endpoint (it will not be included in any response).

LogicAppResourceId string

The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App

Uri string

The Logic App trigger URI endpoint (it will not be included in any response).

logicAppResourceId String

The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App

uri String

The Logic App trigger URI endpoint (it will not be included in any response).

logicAppResourceId string

The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App

uri string

The Logic App trigger URI endpoint (it will not be included in any response).

logic_app_resource_id str

The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App

uri str

The Logic App trigger URI endpoint (it will not be included in any response).

logicAppResourceId String

The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App

uri String

The Logic App trigger URI endpoint (it will not be included in any response).

AutomationActionLogicAppResponse

LogicAppResourceId string

The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App

Uri string

The Logic App trigger URI endpoint (it will not be included in any response).

LogicAppResourceId string

The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App

Uri string

The Logic App trigger URI endpoint (it will not be included in any response).

logicAppResourceId String

The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App

uri String

The Logic App trigger URI endpoint (it will not be included in any response).

logicAppResourceId string

The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App

uri string

The Logic App trigger URI endpoint (it will not be included in any response).

logic_app_resource_id str

The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App

uri str

The Logic App trigger URI endpoint (it will not be included in any response).

logicAppResourceId String

The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App

uri String

The Logic App trigger URI endpoint (it will not be included in any response).

AutomationActionWorkspace

WorkspaceResourceId string

The fully qualified Log Analytics Workspace Azure Resource ID.

WorkspaceResourceId string

The fully qualified Log Analytics Workspace Azure Resource ID.

workspaceResourceId String

The fully qualified Log Analytics Workspace Azure Resource ID.

workspaceResourceId string

The fully qualified Log Analytics Workspace Azure Resource ID.

workspace_resource_id str

The fully qualified Log Analytics Workspace Azure Resource ID.

workspaceResourceId String

The fully qualified Log Analytics Workspace Azure Resource ID.

AutomationActionWorkspaceResponse

WorkspaceResourceId string

The fully qualified Log Analytics Workspace Azure Resource ID.

WorkspaceResourceId string

The fully qualified Log Analytics Workspace Azure Resource ID.

workspaceResourceId String

The fully qualified Log Analytics Workspace Azure Resource ID.

workspaceResourceId string

The fully qualified Log Analytics Workspace Azure Resource ID.

workspace_resource_id str

The fully qualified Log Analytics Workspace Azure Resource ID.

workspaceResourceId String

The fully qualified Log Analytics Workspace Azure Resource ID.

AutomationRuleSet

AutomationRuleSetResponse

AutomationScope

Description string

The resources scope description.

ScopePath string

The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).

Description string

The resources scope description.

ScopePath string

The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).

description String

The resources scope description.

scopePath String

The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).

description string

The resources scope description.

scopePath string

The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).

description str

The resources scope description.

scope_path str

The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).

description String

The resources scope description.

scopePath String

The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).

AutomationScopeResponse

Description string

The resources scope description.

ScopePath string

The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).

Description string

The resources scope description.

ScopePath string

The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).

description String

The resources scope description.

scopePath String

The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).

description string

The resources scope description.

scopePath string

The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).

description str

The resources scope description.

scope_path str

The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).

description String

The resources scope description.

scopePath String

The resources scope path. Can be the subscription on which the automation is defined on or a resource group under that subscription (fully qualified Azure resource IDs).

AutomationSource

EventSource string | Pulumi.AzureNative.Security.EventSource

A valid event source type.

RuleSets List<Pulumi.AzureNative.Security.Inputs.AutomationRuleSet>

A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').

EventSource string | EventSource

A valid event source type.

RuleSets []AutomationRuleSet

A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').

eventSource String | EventSource

A valid event source type.

ruleSets List<AutomationRuleSet>

A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').

eventSource string | EventSource

A valid event source type.

ruleSets AutomationRuleSet[]

A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').

event_source str | EventSource

A valid event source type.

rule_sets Sequence[AutomationRuleSet]

A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').

AutomationSourceResponse

EventSource string

A valid event source type.

RuleSets List<Pulumi.AzureNative.Security.Inputs.AutomationRuleSetResponse>

A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').

EventSource string

A valid event source type.

RuleSets []AutomationRuleSetResponse

A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').

eventSource String

A valid event source type.

ruleSets List<AutomationRuleSetResponse>

A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').

eventSource string

A valid event source type.

ruleSets AutomationRuleSetResponse[]

A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').

event_source str

A valid event source type.

rule_sets Sequence[AutomationRuleSetResponse]

A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').

eventSource String

A valid event source type.

ruleSets List<Property Map>

A set of rules which evaluate upon event interception. A logical disjunction is applied between defined rule sets (logical 'or').

AutomationTriggeringRule

ExpectedValue string

The expected value.

Operator string | Pulumi.AzureNative.Security.Operator

A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.

PropertyJPath string

The JPath of the entity model property that should be checked.

PropertyType string | Pulumi.AzureNative.Security.PropertyType

The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]

ExpectedValue string

The expected value.

Operator string | Operator

A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.

PropertyJPath string

The JPath of the entity model property that should be checked.

PropertyType string | PropertyType

The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]

expectedValue String

The expected value.

operator String | Operator

A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.

propertyJPath String

The JPath of the entity model property that should be checked.

propertyType String | PropertyType

The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]

expectedValue string

The expected value.

operator string | Operator

A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.

propertyJPath string

The JPath of the entity model property that should be checked.

propertyType string | PropertyType

The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]

expected_value str

The expected value.

operator str | Operator

A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.

property_j_path str

The JPath of the entity model property that should be checked.

property_type str | PropertyType

The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]

expectedValue String

The expected value.

operator String | "Equals" | "GreaterThan" | "GreaterThanOrEqualTo" | "LesserThan" | "LesserThanOrEqualTo" | "NotEquals" | "Contains" | "StartsWith" | "EndsWith"

A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.

propertyJPath String

The JPath of the entity model property that should be checked.

propertyType String | "String" | "Integer" | "Number" | "Boolean"

The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]

AutomationTriggeringRuleResponse

ExpectedValue string

The expected value.

Operator string

A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.

PropertyJPath string

The JPath of the entity model property that should be checked.

PropertyType string

The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]

ExpectedValue string

The expected value.

Operator string

A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.

PropertyJPath string

The JPath of the entity model property that should be checked.

PropertyType string

The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]

expectedValue String

The expected value.

operator String

A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.

propertyJPath String

The JPath of the entity model property that should be checked.

propertyType String

The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]

expectedValue string

The expected value.

operator string

A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.

propertyJPath string

The JPath of the entity model property that should be checked.

propertyType string

The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]

expected_value str

The expected value.

operator str

A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.

property_j_path str

The JPath of the entity model property that should be checked.

property_type str

The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]

expectedValue String

The expected value.

operator String

A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.

propertyJPath String

The JPath of the entity model property that should be checked.

propertyType String

The data type of the compared operands (string, integer, floating point number or a boolean [true/false]]

EventSource

Assessments
Assessments
AssessmentsSnapshot
AssessmentsSnapshot
SubAssessments
SubAssessments
SubAssessmentsSnapshot
SubAssessmentsSnapshot
Alerts
Alerts
SecureScores
SecureScores
SecureScoresSnapshot
SecureScoresSnapshot
SecureScoreControls
SecureScoreControls
SecureScoreControlsSnapshot
SecureScoreControlsSnapshot
RegulatoryComplianceAssessment
RegulatoryComplianceAssessment
RegulatoryComplianceAssessmentSnapshot
RegulatoryComplianceAssessmentSnapshot
EventSourceAssessments
Assessments
EventSourceAssessmentsSnapshot
AssessmentsSnapshot
EventSourceSubAssessments
SubAssessments
EventSourceSubAssessmentsSnapshot
SubAssessmentsSnapshot
EventSourceAlerts
Alerts
EventSourceSecureScores
SecureScores
EventSourceSecureScoresSnapshot
SecureScoresSnapshot
EventSourceSecureScoreControls
SecureScoreControls
EventSourceSecureScoreControlsSnapshot
SecureScoreControlsSnapshot
EventSourceRegulatoryComplianceAssessment
RegulatoryComplianceAssessment
EventSourceRegulatoryComplianceAssessmentSnapshot
RegulatoryComplianceAssessmentSnapshot
Assessments
Assessments
AssessmentsSnapshot
AssessmentsSnapshot
SubAssessments
SubAssessments
SubAssessmentsSnapshot
SubAssessmentsSnapshot
Alerts
Alerts
SecureScores
SecureScores
SecureScoresSnapshot
SecureScoresSnapshot
SecureScoreControls
SecureScoreControls
SecureScoreControlsSnapshot
SecureScoreControlsSnapshot
RegulatoryComplianceAssessment
RegulatoryComplianceAssessment
RegulatoryComplianceAssessmentSnapshot
RegulatoryComplianceAssessmentSnapshot
Assessments
Assessments
AssessmentsSnapshot
AssessmentsSnapshot
SubAssessments
SubAssessments
SubAssessmentsSnapshot
SubAssessmentsSnapshot
Alerts
Alerts
SecureScores
SecureScores
SecureScoresSnapshot
SecureScoresSnapshot
SecureScoreControls
SecureScoreControls
SecureScoreControlsSnapshot
SecureScoreControlsSnapshot
RegulatoryComplianceAssessment
RegulatoryComplianceAssessment
RegulatoryComplianceAssessmentSnapshot
RegulatoryComplianceAssessmentSnapshot
ASSESSMENTS
Assessments
ASSESSMENTS_SNAPSHOT
AssessmentsSnapshot
SUB_ASSESSMENTS
SubAssessments
SUB_ASSESSMENTS_SNAPSHOT
SubAssessmentsSnapshot
ALERTS
Alerts
SECURE_SCORES
SecureScores
SECURE_SCORES_SNAPSHOT
SecureScoresSnapshot
SECURE_SCORE_CONTROLS
SecureScoreControls
SECURE_SCORE_CONTROLS_SNAPSHOT
SecureScoreControlsSnapshot
REGULATORY_COMPLIANCE_ASSESSMENT
RegulatoryComplianceAssessment
REGULATORY_COMPLIANCE_ASSESSMENT_SNAPSHOT
RegulatoryComplianceAssessmentSnapshot
"Assessments"
Assessments
"AssessmentsSnapshot"
AssessmentsSnapshot
"SubAssessments"
SubAssessments
"SubAssessmentsSnapshot"
SubAssessmentsSnapshot
"Alerts"
Alerts
"SecureScores"
SecureScores
"SecureScoresSnapshot"
SecureScoresSnapshot
"SecureScoreControls"
SecureScoreControls
"SecureScoreControlsSnapshot"
SecureScoreControlsSnapshot
"RegulatoryComplianceAssessment"
RegulatoryComplianceAssessment
"RegulatoryComplianceAssessmentSnapshot"
RegulatoryComplianceAssessmentSnapshot

Operator

EqualsValue
Equals

Applies for decimal and non-decimal operands

GreaterThan
GreaterThan

Applies only for decimal operands

GreaterThanOrEqualTo
GreaterThanOrEqualTo

Applies only for decimal operands

LesserThan
LesserThan

Applies only for decimal operands

LesserThanOrEqualTo
LesserThanOrEqualTo

Applies only for decimal operands

NotEquals
NotEquals

Applies for decimal and non-decimal operands

Contains
Contains

Applies only for non-decimal operands

StartsWith
StartsWith

Applies only for non-decimal operands

EndsWith
EndsWith

Applies only for non-decimal operands

OperatorEquals
Equals

Applies for decimal and non-decimal operands

OperatorGreaterThan
GreaterThan

Applies only for decimal operands

OperatorGreaterThanOrEqualTo
GreaterThanOrEqualTo

Applies only for decimal operands

OperatorLesserThan
LesserThan

Applies only for decimal operands

OperatorLesserThanOrEqualTo
LesserThanOrEqualTo

Applies only for decimal operands

OperatorNotEquals
NotEquals

Applies for decimal and non-decimal operands

OperatorContains
Contains

Applies only for non-decimal operands

OperatorStartsWith
StartsWith

Applies only for non-decimal operands

OperatorEndsWith
EndsWith

Applies only for non-decimal operands

Equals
Equals

Applies for decimal and non-decimal operands

GreaterThan
GreaterThan

Applies only for decimal operands

GreaterThanOrEqualTo
GreaterThanOrEqualTo

Applies only for decimal operands

LesserThan
LesserThan

Applies only for decimal operands

LesserThanOrEqualTo
LesserThanOrEqualTo

Applies only for decimal operands

NotEquals
NotEquals

Applies for decimal and non-decimal operands

Contains
Contains

Applies only for non-decimal operands

StartsWith
StartsWith

Applies only for non-decimal operands

EndsWith
EndsWith

Applies only for non-decimal operands

Equals
Equals

Applies for decimal and non-decimal operands

GreaterThan
GreaterThan

Applies only for decimal operands

GreaterThanOrEqualTo
GreaterThanOrEqualTo

Applies only for decimal operands

LesserThan
LesserThan

Applies only for decimal operands

LesserThanOrEqualTo
LesserThanOrEqualTo

Applies only for decimal operands

NotEquals
NotEquals

Applies for decimal and non-decimal operands

Contains
Contains

Applies only for non-decimal operands

StartsWith
StartsWith

Applies only for non-decimal operands

EndsWith
EndsWith

Applies only for non-decimal operands

EQUALS
Equals

Applies for decimal and non-decimal operands

GREATER_THAN
GreaterThan

Applies only for decimal operands

GREATER_THAN_OR_EQUAL_TO
GreaterThanOrEqualTo

Applies only for decimal operands

LESSER_THAN
LesserThan

Applies only for decimal operands

LESSER_THAN_OR_EQUAL_TO
LesserThanOrEqualTo

Applies only for decimal operands

NOT_EQUALS
NotEquals

Applies for decimal and non-decimal operands

CONTAINS
Contains

Applies only for non-decimal operands

STARTS_WITH
StartsWith

Applies only for non-decimal operands

ENDS_WITH
EndsWith

Applies only for non-decimal operands

"Equals"
Equals

Applies for decimal and non-decimal operands

"GreaterThan"
GreaterThan

Applies only for decimal operands

"GreaterThanOrEqualTo"
GreaterThanOrEqualTo

Applies only for decimal operands

"LesserThan"
LesserThan

Applies only for decimal operands

"LesserThanOrEqualTo"
LesserThanOrEqualTo

Applies only for decimal operands

"NotEquals"
NotEquals

Applies for decimal and non-decimal operands

"Contains"
Contains

Applies only for non-decimal operands

"StartsWith"
StartsWith

Applies only for non-decimal operands

"EndsWith"
EndsWith

Applies only for non-decimal operands

PropertyType

String
String
Integer
Integer
Number
Number
Boolean
Boolean
PropertyTypeString
String
PropertyTypeInteger
Integer
PropertyTypeNumber
Number
PropertyTypeBoolean
Boolean
String
String
Integer
Integer
Number
Number
Boolean
Boolean
String
String
Integer
Integer
Number
Number
Boolean
Boolean
STRING
String
INTEGER
Integer
NUMBER
Number
BOOLEAN
Boolean
"String"
String
"Integer"
Integer
"Number"
Number
"Boolean"
Boolean

Import

An existing resource can be imported using its type token, name, and identifier, e.g.

$ pulumi import azure-native:security:Automation exampleAutomation /subscriptions/a5caac9c-5c04-49af-b3d0-e204f40345d5/resourceGroups/exampleResourceGroup/providers/Microsoft.Security/SecurityAutomations/exampleAutomation 

Package Details

Repository
https://github.com/pulumi/pulumi-azure-native
License
Apache-2.0