Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Azure Native
  4. API Docs
  5. security
  6. getGovernanceRule
This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Viewing docs for Azure Native v3.21.0
published on Tuesday, Jul 14, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-azure-native

azure-native.security.getGovernanceRule

azure-native logo
This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Viewing docs for Azure Native v3.21.0
published on Tuesday, Jul 14, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-azure-native

    Get a specific governance rule for the requested scope by ruleId

    Uses Azure REST API version 2022-01-01-preview.

    Using getGovernanceRule

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getGovernanceRule(args: GetGovernanceRuleArgs, opts?: InvokeOptions): Promise<GetGovernanceRuleResult>
function getGovernanceRuleOutput(args: GetGovernanceRuleOutputArgs, opts?: InvokeOptions): Output<GetGovernanceRuleResult>
    def get_governance_rule(rule_id: Optional[str] = None,
                        scope: Optional[str] = None,
                        opts: Optional[InvokeOptions] = None) -> GetGovernanceRuleResult
def get_governance_rule_output(rule_id: pulumi.Input[Optional[str]] = None,
                        scope: pulumi.Input[Optional[str]] = None,
                        opts: Optional[InvokeOptions] = None) -> Output[GetGovernanceRuleResult]
    func LookupGovernanceRule(ctx *Context, args *LookupGovernanceRuleArgs, opts ...InvokeOption) (*LookupGovernanceRuleResult, error)
func LookupGovernanceRuleOutput(ctx *Context, args *LookupGovernanceRuleOutputArgs, opts ...InvokeOption) LookupGovernanceRuleResultOutput

    > Note: This function is named LookupGovernanceRule in the Go SDK.

    public static class GetGovernanceRule 
{
    public static Task<GetGovernanceRuleResult> InvokeAsync(GetGovernanceRuleArgs args, InvokeOptions? opts = null)
    public static Output<GetGovernanceRuleResult> Invoke(GetGovernanceRuleInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetGovernanceRuleResult> getGovernanceRule(GetGovernanceRuleArgs args, InvokeOptions options)
public static Output<GetGovernanceRuleResult> getGovernanceRule(GetGovernanceRuleArgs args, InvokeOptions options)

    fn::invoke:
  function: azure-native:security:getGovernanceRule
  arguments:
    # arguments dictionary
    data "azure-native_security_getgovernancerule" "name" {
    # arguments
}

    The following arguments are supported:

    RuleId string
    The governance rule key - unique key for the standard governance rule (GUID)
    Scope string
    The fully qualified Azure Resource manager identifier of the resource.
    RuleId string
    The governance rule key - unique key for the standard governance rule (GUID)
    Scope string
    The fully qualified Azure Resource manager identifier of the resource.
    rule_id string
    The governance rule key - unique key for the standard governance rule (GUID)
    scope string
    The fully qualified Azure Resource manager identifier of the resource.
    ruleId String
    The governance rule key - unique key for the standard governance rule (GUID)
    scope String
    The fully qualified Azure Resource manager identifier of the resource.
    ruleId string
    The governance rule key - unique key for the standard governance rule (GUID)
    scope string
    The fully qualified Azure Resource manager identifier of the resource.
    rule_id str
    The governance rule key - unique key for the standard governance rule (GUID)
    scope str
    The fully qualified Azure Resource manager identifier of the resource.
    ruleId String
    The governance rule key - unique key for the standard governance rule (GUID)
    scope String
    The fully qualified Azure Resource manager identifier of the resource.

    getGovernanceRule Result

    The following output properties are available:

    AzureApiVersion string
    The Azure API version of the resource.
    ConditionSets List<object>
    The governance rule conditionSets - see examples
    DisplayName string
    Display name of the governance rule
    Id string
    Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
    Name string
    The name of the resource
    OwnerSource Pulumi.AzureNative.Security.Outputs.GovernanceRuleOwnerSourceResponse
    The owner source for the governance rule - e.g. Manually by user@contoso.com - see example
    RulePriority int
    The governance rule priority, priority to the lower number. Rules with the same priority on the same scope will not be allowed
    RuleType string
    The rule type of the governance rule, defines the source of the rule e.g. Integrated
    SourceResourceType string
    The governance rule source, what the rule affects, e.g. Assessments
    SystemData Pulumi.AzureNative.Security.Outputs.SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    TenantId string
    The tenantId (GUID)
    Type string
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    Description string
    Description of the governance rule
    ExcludedScopes List<string>
    Excluded scopes, filter out the descendants of the scope (on management scopes)
    GovernanceEmailNotification Pulumi.AzureNative.Security.Outputs.GovernanceRuleEmailNotificationResponse
    The email notifications settings for the governance rule, states whether to disable notifications for mangers and owners
    IncludeMemberScopes bool
    Defines whether the rule is management scope rule (master connector as a single scope or management scope)
    IsDisabled bool
    Defines whether the rule is active/inactive
    IsGracePeriod bool
    Defines whether there is a grace period on the governance rule
    Metadata Pulumi.AzureNative.Security.Outputs.GovernanceRuleMetadataResponse
    The governance rule metadata
    RemediationTimeframe string
    Governance rule remediation timeframe - this is the time that will affect on the grace-period duration e.g. 7.00:00:00 - means 7 days
    AzureApiVersion string
    The Azure API version of the resource.
    ConditionSets []interface{}
    The governance rule conditionSets - see examples
    DisplayName string
    Display name of the governance rule
    Id string
    Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
    Name string
    The name of the resource
    OwnerSource GovernanceRuleOwnerSourceResponse
    The owner source for the governance rule - e.g. Manually by user@contoso.com - see example
    RulePriority int
    The governance rule priority, priority to the lower number. Rules with the same priority on the same scope will not be allowed
    RuleType string
    The rule type of the governance rule, defines the source of the rule e.g. Integrated
    SourceResourceType string
    The governance rule source, what the rule affects, e.g. Assessments
    SystemData SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    TenantId string
    The tenantId (GUID)
    Type string
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    Description string
    Description of the governance rule
    ExcludedScopes []string
    Excluded scopes, filter out the descendants of the scope (on management scopes)
    GovernanceEmailNotification GovernanceRuleEmailNotificationResponse
    The email notifications settings for the governance rule, states whether to disable notifications for mangers and owners
    IncludeMemberScopes bool
    Defines whether the rule is management scope rule (master connector as a single scope or management scope)
    IsDisabled bool
    Defines whether the rule is active/inactive
    IsGracePeriod bool
    Defines whether there is a grace period on the governance rule
    Metadata GovernanceRuleMetadataResponse
    The governance rule metadata
    RemediationTimeframe string
    Governance rule remediation timeframe - this is the time that will affect on the grace-period duration e.g. 7.00:00:00 - means 7 days
    azure_api_version string
    The Azure API version of the resource.
    condition_sets list(any)
    The governance rule conditionSets - see examples
    display_name string
    Display name of the governance rule
    id string
    Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
    name string
    The name of the resource
    owner_source object
    The owner source for the governance rule - e.g. Manually by user@contoso.com - see example
    rule_priority number
    The governance rule priority, priority to the lower number. Rules with the same priority on the same scope will not be allowed
    rule_type string
    The rule type of the governance rule, defines the source of the rule e.g. Integrated
    source_resource_type string
    The governance rule source, what the rule affects, e.g. Assessments
    system_data object
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    tenant_id string
    The tenantId (GUID)
    type string
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    description string
    Description of the governance rule
    excluded_scopes list(string)
    Excluded scopes, filter out the descendants of the scope (on management scopes)
    governance_email_notification object
    The email notifications settings for the governance rule, states whether to disable notifications for mangers and owners
    include_member_scopes bool
    Defines whether the rule is management scope rule (master connector as a single scope or management scope)
    is_disabled bool
    Defines whether the rule is active/inactive
    is_grace_period bool
    Defines whether there is a grace period on the governance rule
    metadata object
    The governance rule metadata
    remediation_timeframe string
    Governance rule remediation timeframe - this is the time that will affect on the grace-period duration e.g. 7.00:00:00 - means 7 days
    azureApiVersion String
    The Azure API version of the resource.
    conditionSets List<Object>
    The governance rule conditionSets - see examples
    displayName String
    Display name of the governance rule
    id String
    Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
    name String
    The name of the resource
    ownerSource GovernanceRuleOwnerSourceResponse
    The owner source for the governance rule - e.g. Manually by user@contoso.com - see example
    rulePriority Integer
    The governance rule priority, priority to the lower number. Rules with the same priority on the same scope will not be allowed
    ruleType String
    The rule type of the governance rule, defines the source of the rule e.g. Integrated
    sourceResourceType String
    The governance rule source, what the rule affects, e.g. Assessments
    systemData SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    tenantId String
    The tenantId (GUID)
    type String
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    description String
    Description of the governance rule
    excludedScopes List<String>
    Excluded scopes, filter out the descendants of the scope (on management scopes)
    governanceEmailNotification GovernanceRuleEmailNotificationResponse
    The email notifications settings for the governance rule, states whether to disable notifications for mangers and owners
    includeMemberScopes Boolean
    Defines whether the rule is management scope rule (master connector as a single scope or management scope)
    isDisabled Boolean
    Defines whether the rule is active/inactive
    isGracePeriod Boolean
    Defines whether there is a grace period on the governance rule
    metadata GovernanceRuleMetadataResponse
    The governance rule metadata
    remediationTimeframe String
    Governance rule remediation timeframe - this is the time that will affect on the grace-period duration e.g. 7.00:00:00 - means 7 days
    azureApiVersion string
    The Azure API version of the resource.
    conditionSets any[]
    The governance rule conditionSets - see examples
    displayName string
    Display name of the governance rule
    id string
    Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
    name string
    The name of the resource
    ownerSource GovernanceRuleOwnerSourceResponse
    The owner source for the governance rule - e.g. Manually by user@contoso.com - see example
    rulePriority number
    The governance rule priority, priority to the lower number. Rules with the same priority on the same scope will not be allowed
    ruleType string
    The rule type of the governance rule, defines the source of the rule e.g. Integrated
    sourceResourceType string
    The governance rule source, what the rule affects, e.g. Assessments
    systemData SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    tenantId string
    The tenantId (GUID)
    type string
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    description string
    Description of the governance rule
    excludedScopes string[]
    Excluded scopes, filter out the descendants of the scope (on management scopes)
    governanceEmailNotification GovernanceRuleEmailNotificationResponse
    The email notifications settings for the governance rule, states whether to disable notifications for mangers and owners
    includeMemberScopes boolean
    Defines whether the rule is management scope rule (master connector as a single scope or management scope)
    isDisabled boolean
    Defines whether the rule is active/inactive
    isGracePeriod boolean
    Defines whether there is a grace period on the governance rule
    metadata GovernanceRuleMetadataResponse
    The governance rule metadata
    remediationTimeframe string
    Governance rule remediation timeframe - this is the time that will affect on the grace-period duration e.g. 7.00:00:00 - means 7 days
    azure_api_version str
    The Azure API version of the resource.
    condition_sets Sequence[Any]
    The governance rule conditionSets - see examples
    display_name str
    Display name of the governance rule
    id str
    Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
    name str
    The name of the resource
    owner_source GovernanceRuleOwnerSourceResponse
    The owner source for the governance rule - e.g. Manually by user@contoso.com - see example
    rule_priority int
    The governance rule priority, priority to the lower number. Rules with the same priority on the same scope will not be allowed
    rule_type str
    The rule type of the governance rule, defines the source of the rule e.g. Integrated
    source_resource_type str
    The governance rule source, what the rule affects, e.g. Assessments
    system_data SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    tenant_id str
    The tenantId (GUID)
    type str
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    description str
    Description of the governance rule
    excluded_scopes Sequence[str]
    Excluded scopes, filter out the descendants of the scope (on management scopes)
    governance_email_notification GovernanceRuleEmailNotificationResponse
    The email notifications settings for the governance rule, states whether to disable notifications for mangers and owners
    include_member_scopes bool
    Defines whether the rule is management scope rule (master connector as a single scope or management scope)
    is_disabled bool
    Defines whether the rule is active/inactive
    is_grace_period bool
    Defines whether there is a grace period on the governance rule
    metadata GovernanceRuleMetadataResponse
    The governance rule metadata
    remediation_timeframe str
    Governance rule remediation timeframe - this is the time that will affect on the grace-period duration e.g. 7.00:00:00 - means 7 days
    azureApiVersion String
    The Azure API version of the resource.
    conditionSets List<Any>
    The governance rule conditionSets - see examples
    displayName String
    Display name of the governance rule
    id String
    Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
    name String
    The name of the resource
    ownerSource Property Map
    The owner source for the governance rule - e.g. Manually by user@contoso.com - see example
    rulePriority Number
    The governance rule priority, priority to the lower number. Rules with the same priority on the same scope will not be allowed
    ruleType String
    The rule type of the governance rule, defines the source of the rule e.g. Integrated
    sourceResourceType String
    The governance rule source, what the rule affects, e.g. Assessments
    systemData Property Map
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    tenantId String
    The tenantId (GUID)
    type String
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    description String
    Description of the governance rule
    excludedScopes List<String>
    Excluded scopes, filter out the descendants of the scope (on management scopes)
    governanceEmailNotification Property Map
    The email notifications settings for the governance rule, states whether to disable notifications for mangers and owners
    includeMemberScopes Boolean
    Defines whether the rule is management scope rule (master connector as a single scope or management scope)
    isDisabled Boolean
    Defines whether the rule is active/inactive
    isGracePeriod Boolean
    Defines whether there is a grace period on the governance rule
    metadata Property Map
    The governance rule metadata
    remediationTimeframe String
    Governance rule remediation timeframe - this is the time that will affect on the grace-period duration e.g. 7.00:00:00 - means 7 days

    Supporting Types

    GovernanceRuleEmailNotificationResponse

    DisableManagerEmailNotification bool
    Defines whether manager email notifications are disabled
    DisableOwnerEmailNotification bool
    Defines whether owner email notifications are disabled
    DisableManagerEmailNotification bool
    Defines whether manager email notifications are disabled
    DisableOwnerEmailNotification bool
    Defines whether owner email notifications are disabled
    disable_manager_email_notification bool
    Defines whether manager email notifications are disabled
    disable_owner_email_notification bool
    Defines whether owner email notifications are disabled
    disableManagerEmailNotification Boolean
    Defines whether manager email notifications are disabled
    disableOwnerEmailNotification Boolean
    Defines whether owner email notifications are disabled
    disableManagerEmailNotification boolean
    Defines whether manager email notifications are disabled
    disableOwnerEmailNotification boolean
    Defines whether owner email notifications are disabled
    disable_manager_email_notification bool
    Defines whether manager email notifications are disabled
    disable_owner_email_notification bool
    Defines whether owner email notifications are disabled
    disableManagerEmailNotification Boolean
    Defines whether manager email notifications are disabled
    disableOwnerEmailNotification Boolean
    Defines whether owner email notifications are disabled

    GovernanceRuleMetadataResponse

    CreatedBy string
    Governance rule Created by object id (GUID)
    CreatedOn string
    Governance rule creation date
    UpdatedBy string
    Governance rule last updated by object id (GUID)
    UpdatedOn string
    Governance rule last update date
    CreatedBy string
    Governance rule Created by object id (GUID)
    CreatedOn string
    Governance rule creation date
    UpdatedBy string
    Governance rule last updated by object id (GUID)
    UpdatedOn string
    Governance rule last update date
    created_by string
    Governance rule Created by object id (GUID)
    created_on string
    Governance rule creation date
    updated_by string
    Governance rule last updated by object id (GUID)
    updated_on string
    Governance rule last update date
    createdBy String
    Governance rule Created by object id (GUID)
    createdOn String
    Governance rule creation date
    updatedBy String
    Governance rule last updated by object id (GUID)
    updatedOn String
    Governance rule last update date
    createdBy string
    Governance rule Created by object id (GUID)
    createdOn string
    Governance rule creation date
    updatedBy string
    Governance rule last updated by object id (GUID)
    updatedOn string
    Governance rule last update date
    created_by str
    Governance rule Created by object id (GUID)
    created_on str
    Governance rule creation date
    updated_by str
    Governance rule last updated by object id (GUID)
    updated_on str
    Governance rule last update date
    createdBy String
    Governance rule Created by object id (GUID)
    createdOn String
    Governance rule creation date
    updatedBy String
    Governance rule last updated by object id (GUID)
    updatedOn String
    Governance rule last update date

    GovernanceRuleOwnerSourceResponse

    Type string
    The owner type for the governance rule owner source
    Value string
    The source value e.g. tag key like owner name or email address
    Type string
    The owner type for the governance rule owner source
    Value string
    The source value e.g. tag key like owner name or email address
    type string
    The owner type for the governance rule owner source
    value string
    The source value e.g. tag key like owner name or email address
    type String
    The owner type for the governance rule owner source
    value String
    The source value e.g. tag key like owner name or email address
    type string
    The owner type for the governance rule owner source
    value string
    The source value e.g. tag key like owner name or email address
    type str
    The owner type for the governance rule owner source
    value str
    The source value e.g. tag key like owner name or email address
    type String
    The owner type for the governance rule owner source
    value String
    The source value e.g. tag key like owner name or email address

    SystemDataResponse

    CreatedAt string
    The timestamp of resource creation (UTC).
    CreatedBy string
    The identity that created the resource.
    CreatedByType string
    The type of identity that created the resource.
    LastModifiedAt string
    The timestamp of resource last modification (UTC)
    LastModifiedBy string
    The identity that last modified the resource.
    LastModifiedByType string
    The type of identity that last modified the resource.
    CreatedAt string
    The timestamp of resource creation (UTC).
    CreatedBy string
    The identity that created the resource.
    CreatedByType string
    The type of identity that created the resource.
    LastModifiedAt string
    The timestamp of resource last modification (UTC)
    LastModifiedBy string
    The identity that last modified the resource.
    LastModifiedByType string
    The type of identity that last modified the resource.
    created_at string
    The timestamp of resource creation (UTC).
    created_by string
    The identity that created the resource.
    created_by_type string
    The type of identity that created the resource.
    last_modified_at string
    The timestamp of resource last modification (UTC)
    last_modified_by string
    The identity that last modified the resource.
    last_modified_by_type string
    The type of identity that last modified the resource.
    createdAt String
    The timestamp of resource creation (UTC).
    createdBy String
    The identity that created the resource.
    createdByType String
    The type of identity that created the resource.
    lastModifiedAt String
    The timestamp of resource last modification (UTC)
    lastModifiedBy String
    The identity that last modified the resource.
    lastModifiedByType String
    The type of identity that last modified the resource.
    createdAt string
    The timestamp of resource creation (UTC).
    createdBy string
    The identity that created the resource.
    createdByType string
    The type of identity that created the resource.
    lastModifiedAt string
    The timestamp of resource last modification (UTC)
    lastModifiedBy string
    The identity that last modified the resource.
    lastModifiedByType string
    The type of identity that last modified the resource.
    created_at str
    The timestamp of resource creation (UTC).
    created_by str
    The identity that created the resource.
    created_by_type str
    The type of identity that created the resource.
    last_modified_at str
    The timestamp of resource last modification (UTC)
    last_modified_by str
    The identity that last modified the resource.
    last_modified_by_type str
    The type of identity that last modified the resource.
    createdAt String
    The timestamp of resource creation (UTC).
    createdBy String
    The identity that created the resource.
    createdByType String
    The type of identity that created the resource.
    lastModifiedAt String
    The timestamp of resource last modification (UTC)
    lastModifiedBy String
    The identity that last modified the resource.
    lastModifiedByType String
    The type of identity that last modified the resource.

    Package Details

    Repository
    Azure Native pulumi/pulumi-azure-native
    License
    Apache-2.0
    azure-native logo
    This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
    Viewing docs for Azure Native v3.21.0
    published on Tuesday, Jul 14, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-azure-native

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial