Docs
PackagesWe recommend using Azure Native.
azure.core.SubscriptionPolicyExemption
Explore with Pulumi AI
Manages a Subscription Policy Exemption.
Example Usage
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;
return await Deployment.RunAsync(() =>
{
var exampleSubscription = Azure.Core.GetSubscription.Invoke();
var examplePolicySetDefinition = Azure.Policy.GetPolicySetDefinition.Invoke(new()
{
DisplayName = "Audit machines with insecure password security settings",
});
var exampleSubscriptionPolicyAssignment = new Azure.Core.SubscriptionPolicyAssignment("exampleSubscriptionPolicyAssignment", new()
{
SubscriptionId = exampleSubscription.Apply(getSubscriptionResult => getSubscriptionResult.Id),
PolicyDefinitionId = examplePolicySetDefinition.Apply(getPolicySetDefinitionResult => getPolicySetDefinitionResult.Id),
Location = "westus",
Identity = new Azure.Core.Inputs.SubscriptionPolicyAssignmentIdentityArgs
{
Type = "SystemAssigned",
},
});
var exampleSubscriptionPolicyExemption = new Azure.Core.SubscriptionPolicyExemption("exampleSubscriptionPolicyExemption", new()
{
SubscriptionId = exampleSubscription.Apply(getSubscriptionResult => getSubscriptionResult.Id),
PolicyAssignmentId = exampleSubscriptionPolicyAssignment.Id,
ExemptionCategory = "Mitigated",
});
});
package main
import (
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/policy"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
exampleSubscription, err := core.LookupSubscription(ctx, nil, nil)
if err != nil {
return err
}
examplePolicySetDefinition, err := policy.LookupPolicySetDefinition(ctx, &policy.LookupPolicySetDefinitionArgs{
DisplayName: pulumi.StringRef("Audit machines with insecure password security settings"),
}, nil)
if err != nil {
return err
}
exampleSubscriptionPolicyAssignment, err := core.NewSubscriptionPolicyAssignment(ctx, "exampleSubscriptionPolicyAssignment", &core.SubscriptionPolicyAssignmentArgs{
SubscriptionId: *pulumi.String(exampleSubscription.Id),
PolicyDefinitionId: *pulumi.String(examplePolicySetDefinition.Id),
Location: pulumi.String("westus"),
Identity: &core.SubscriptionPolicyAssignmentIdentityArgs{
Type: pulumi.String("SystemAssigned"),
},
})
if err != nil {
return err
}
_, err = core.NewSubscriptionPolicyExemption(ctx, "exampleSubscriptionPolicyExemption", &core.SubscriptionPolicyExemptionArgs{
SubscriptionId: *pulumi.String(exampleSubscription.Id),
PolicyAssignmentId: exampleSubscriptionPolicyAssignment.ID(),
ExemptionCategory: pulumi.String("Mitigated"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.CoreFunctions;
import com.pulumi.azure.core.inputs.GetSubscriptionArgs;
import com.pulumi.azure.policy.PolicyFunctions;
import com.pulumi.azure.policy.inputs.GetPolicySetDefinitionArgs;
import com.pulumi.azure.core.SubscriptionPolicyAssignment;
import com.pulumi.azure.core.SubscriptionPolicyAssignmentArgs;
import com.pulumi.azure.core.inputs.SubscriptionPolicyAssignmentIdentityArgs;
import com.pulumi.azure.core.SubscriptionPolicyExemption;
import com.pulumi.azure.core.SubscriptionPolicyExemptionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var exampleSubscription = CoreFunctions.getSubscription();
final var examplePolicySetDefinition = PolicyFunctions.getPolicySetDefinition(GetPolicySetDefinitionArgs.builder()
.displayName("Audit machines with insecure password security settings")
.build());
var exampleSubscriptionPolicyAssignment = new SubscriptionPolicyAssignment("exampleSubscriptionPolicyAssignment", SubscriptionPolicyAssignmentArgs.builder()
.subscriptionId(exampleSubscription.applyValue(getSubscriptionResult -> getSubscriptionResult.id()))
.policyDefinitionId(examplePolicySetDefinition.applyValue(getPolicySetDefinitionResult -> getPolicySetDefinitionResult.id()))
.location("westus")
.identity(SubscriptionPolicyAssignmentIdentityArgs.builder()
.type("SystemAssigned")
.build())
.build());
var exampleSubscriptionPolicyExemption = new SubscriptionPolicyExemption("exampleSubscriptionPolicyExemption", SubscriptionPolicyExemptionArgs.builder()
.subscriptionId(exampleSubscription.applyValue(getSubscriptionResult -> getSubscriptionResult.id()))
.policyAssignmentId(exampleSubscriptionPolicyAssignment.id())
.exemptionCategory("Mitigated")
.build());
}
}
import pulumi
import pulumi_azure as azure
example_subscription = azure.core.get_subscription()
example_policy_set_definition = azure.policy.get_policy_set_definition(display_name="Audit machines with insecure password security settings")
example_subscription_policy_assignment = azure.core.SubscriptionPolicyAssignment("exampleSubscriptionPolicyAssignment",
subscription_id=example_subscription.id,
policy_definition_id=example_policy_set_definition.id,
location="westus",
identity=azure.core.SubscriptionPolicyAssignmentIdentityArgs(
type="SystemAssigned",
))
example_subscription_policy_exemption = azure.core.SubscriptionPolicyExemption("exampleSubscriptionPolicyExemption",
subscription_id=example_subscription.id,
policy_assignment_id=example_subscription_policy_assignment.id,
exemption_category="Mitigated")
import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";
const exampleSubscription = azure.core.getSubscription({});
const examplePolicySetDefinition = azure.policy.getPolicySetDefinition({
displayName: "Audit machines with insecure password security settings",
});
const exampleSubscriptionPolicyAssignment = new azure.core.SubscriptionPolicyAssignment("exampleSubscriptionPolicyAssignment", {
subscriptionId: exampleSubscription.then(exampleSubscription => exampleSubscription.id),
policyDefinitionId: examplePolicySetDefinition.then(examplePolicySetDefinition => examplePolicySetDefinition.id),
location: "westus",
identity: {
type: "SystemAssigned",
},
});
const exampleSubscriptionPolicyExemption = new azure.core.SubscriptionPolicyExemption("exampleSubscriptionPolicyExemption", {
subscriptionId: exampleSubscription.then(exampleSubscription => exampleSubscription.id),
policyAssignmentId: exampleSubscriptionPolicyAssignment.id,
exemptionCategory: "Mitigated",
});
resources:
exampleSubscriptionPolicyAssignment:
type: azure:core:SubscriptionPolicyAssignment
properties:
subscriptionId: ${exampleSubscription.id}
policyDefinitionId: ${examplePolicySetDefinition.id}
location: westus
identity:
type: SystemAssigned
exampleSubscriptionPolicyExemption:
type: azure:core:SubscriptionPolicyExemption
properties:
subscriptionId: ${exampleSubscription.id}
policyAssignmentId: ${exampleSubscriptionPolicyAssignment.id}
exemptionCategory: Mitigated
variables:
exampleSubscription:
fn::invoke:
Function: azure:core:getSubscription
Arguments: {}
examplePolicySetDefinition:
fn::invoke:
Function: azure:policy:getPolicySetDefinition
Arguments:
displayName: Audit machines with insecure password security settings
Create SubscriptionPolicyExemption Resource
new SubscriptionPolicyExemption(name: string, args: SubscriptionPolicyExemptionArgs, opts?: CustomResourceOptions);@overload
def SubscriptionPolicyExemption(resource_name: str,
opts: Optional[ResourceOptions] = None,
description: Optional[str] = None,
display_name: Optional[str] = None,
exemption_category: Optional[str] = None,
expires_on: Optional[str] = None,
metadata: Optional[str] = None,
name: Optional[str] = None,
policy_assignment_id: Optional[str] = None,
policy_definition_reference_ids: Optional[Sequence[str]] = None,
subscription_id: Optional[str] = None)
@overload
def SubscriptionPolicyExemption(resource_name: str,
args: SubscriptionPolicyExemptionArgs,
opts: Optional[ResourceOptions] = None)func NewSubscriptionPolicyExemption(ctx *Context, name string, args SubscriptionPolicyExemptionArgs, opts ...ResourceOption) (*SubscriptionPolicyExemption, error)public SubscriptionPolicyExemption(string name, SubscriptionPolicyExemptionArgs args, CustomResourceOptions? opts = null)
public SubscriptionPolicyExemption(String name, SubscriptionPolicyExemptionArgs args)
public SubscriptionPolicyExemption(String name, SubscriptionPolicyExemptionArgs args, CustomResourceOptions options)
type: azure:core:SubscriptionPolicyExemption
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args SubscriptionPolicyExemptionArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args SubscriptionPolicyExemptionArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args SubscriptionPolicyExemptionArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args SubscriptionPolicyExemptionArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args SubscriptionPolicyExemptionArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
SubscriptionPolicyExemption Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The SubscriptionPolicyExemption resource accepts the following input properties:
- Exemption
Category string The category of this policy exemption. Possible values are
WaiverandMitigated.- Policy
Assignment stringId The ID of the Policy Assignment to be exempted at the specified Scope. Changing this forces a new resource to be created.
- Subscription
Id string The Subscription ID where the Policy Exemption should be applied. Changing this forces a new resource to be created.
- Description string
A description to use for this Policy Exemption.
- Display
Name string A friendly display name to use for this Policy Exemption.
- Expires
On string The expiration date and time in UTC ISO 8601 format of this policy exemption.
- Metadata string
The metadata for this policy exemption. This is a JSON string representing additional metadata that should be stored with the policy exemption.
- Name string
The name of the Policy Exemption. Changing this forces a new resource to be created.
- Policy
Definition List<string>Reference Ids The policy definition reference ID list when the associated policy assignment is an assignment of a policy set definition.
- Exemption
Category string The category of this policy exemption. Possible values are
WaiverandMitigated.- Policy
Assignment stringId The ID of the Policy Assignment to be exempted at the specified Scope. Changing this forces a new resource to be created.
- Subscription
Id string The Subscription ID where the Policy Exemption should be applied. Changing this forces a new resource to be created.
- Description string
A description to use for this Policy Exemption.
- Display
Name string A friendly display name to use for this Policy Exemption.
- Expires
On string The expiration date and time in UTC ISO 8601 format of this policy exemption.
- Metadata string
The metadata for this policy exemption. This is a JSON string representing additional metadata that should be stored with the policy exemption.
- Name string
The name of the Policy Exemption. Changing this forces a new resource to be created.
- Policy
Definition []stringReference Ids The policy definition reference ID list when the associated policy assignment is an assignment of a policy set definition.
- exemption
Category String The category of this policy exemption. Possible values are
WaiverandMitigated.- policy
Assignment StringId The ID of the Policy Assignment to be exempted at the specified Scope. Changing this forces a new resource to be created.
- subscription
Id String The Subscription ID where the Policy Exemption should be applied. Changing this forces a new resource to be created.
- description String
A description to use for this Policy Exemption.
- display
Name String A friendly display name to use for this Policy Exemption.
- expires
On String The expiration date and time in UTC ISO 8601 format of this policy exemption.
- metadata String
The metadata for this policy exemption. This is a JSON string representing additional metadata that should be stored with the policy exemption.
- name String
The name of the Policy Exemption. Changing this forces a new resource to be created.
- policy
Definition List<String>Reference Ids The policy definition reference ID list when the associated policy assignment is an assignment of a policy set definition.
- exemption
Category string The category of this policy exemption. Possible values are
WaiverandMitigated.- policy
Assignment stringId The ID of the Policy Assignment to be exempted at the specified Scope. Changing this forces a new resource to be created.
- subscription
Id string The Subscription ID where the Policy Exemption should be applied. Changing this forces a new resource to be created.
- description string
A description to use for this Policy Exemption.
- display
Name string A friendly display name to use for this Policy Exemption.
- expires
On string The expiration date and time in UTC ISO 8601 format of this policy exemption.
- metadata string
The metadata for this policy exemption. This is a JSON string representing additional metadata that should be stored with the policy exemption.
- name string
The name of the Policy Exemption. Changing this forces a new resource to be created.
- policy
Definition string[]Reference Ids The policy definition reference ID list when the associated policy assignment is an assignment of a policy set definition.
- exemption_
category str The category of this policy exemption. Possible values are
WaiverandMitigated.- policy_
assignment_ strid The ID of the Policy Assignment to be exempted at the specified Scope. Changing this forces a new resource to be created.
- subscription_
id str The Subscription ID where the Policy Exemption should be applied. Changing this forces a new resource to be created.
- description str
A description to use for this Policy Exemption.
- display_
name str A friendly display name to use for this Policy Exemption.
- expires_
on str The expiration date and time in UTC ISO 8601 format of this policy exemption.
- metadata str
The metadata for this policy exemption. This is a JSON string representing additional metadata that should be stored with the policy exemption.
- name str
The name of the Policy Exemption. Changing this forces a new resource to be created.
- policy_
definition_ Sequence[str]reference_ ids The policy definition reference ID list when the associated policy assignment is an assignment of a policy set definition.
- exemption
Category String The category of this policy exemption. Possible values are
WaiverandMitigated.- policy
Assignment StringId The ID of the Policy Assignment to be exempted at the specified Scope. Changing this forces a new resource to be created.
- subscription
Id String The Subscription ID where the Policy Exemption should be applied. Changing this forces a new resource to be created.
- description String
A description to use for this Policy Exemption.
- display
Name String A friendly display name to use for this Policy Exemption.
- expires
On String The expiration date and time in UTC ISO 8601 format of this policy exemption.
- metadata String
The metadata for this policy exemption. This is a JSON string representing additional metadata that should be stored with the policy exemption.
- name String
The name of the Policy Exemption. Changing this forces a new resource to be created.
- policy
Definition List<String>Reference Ids The policy definition reference ID list when the associated policy assignment is an assignment of a policy set definition.
Outputs
All input properties are implicitly available as output properties. Additionally, the SubscriptionPolicyExemption resource produces the following output properties:
- Id string
The provider-assigned unique ID for this managed resource.
- Id string
The provider-assigned unique ID for this managed resource.
- id String
The provider-assigned unique ID for this managed resource.
- id string
The provider-assigned unique ID for this managed resource.
- id str
The provider-assigned unique ID for this managed resource.
- id String
The provider-assigned unique ID for this managed resource.
Look up Existing SubscriptionPolicyExemption Resource
Get an existing SubscriptionPolicyExemption resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: SubscriptionPolicyExemptionState, opts?: CustomResourceOptions): SubscriptionPolicyExemption@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
description: Optional[str] = None,
display_name: Optional[str] = None,
exemption_category: Optional[str] = None,
expires_on: Optional[str] = None,
metadata: Optional[str] = None,
name: Optional[str] = None,
policy_assignment_id: Optional[str] = None,
policy_definition_reference_ids: Optional[Sequence[str]] = None,
subscription_id: Optional[str] = None) -> SubscriptionPolicyExemptionfunc GetSubscriptionPolicyExemption(ctx *Context, name string, id IDInput, state *SubscriptionPolicyExemptionState, opts ...ResourceOption) (*SubscriptionPolicyExemption, error)public static SubscriptionPolicyExemption Get(string name, Input<string> id, SubscriptionPolicyExemptionState? state, CustomResourceOptions? opts = null)public static SubscriptionPolicyExemption get(String name, Output<String> id, SubscriptionPolicyExemptionState state, CustomResourceOptions options)Resource lookup is not supported in YAML- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Description string
A description to use for this Policy Exemption.
- Display
Name string A friendly display name to use for this Policy Exemption.
- Exemption
Category string The category of this policy exemption. Possible values are
WaiverandMitigated.- Expires
On string The expiration date and time in UTC ISO 8601 format of this policy exemption.
- Metadata string
The metadata for this policy exemption. This is a JSON string representing additional metadata that should be stored with the policy exemption.
- Name string
The name of the Policy Exemption. Changing this forces a new resource to be created.
- Policy
Assignment stringId The ID of the Policy Assignment to be exempted at the specified Scope. Changing this forces a new resource to be created.
- Policy
Definition List<string>Reference Ids The policy definition reference ID list when the associated policy assignment is an assignment of a policy set definition.
- Subscription
Id string The Subscription ID where the Policy Exemption should be applied. Changing this forces a new resource to be created.
- Description string
A description to use for this Policy Exemption.
- Display
Name string A friendly display name to use for this Policy Exemption.
- Exemption
Category string The category of this policy exemption. Possible values are
WaiverandMitigated.- Expires
On string The expiration date and time in UTC ISO 8601 format of this policy exemption.
- Metadata string
The metadata for this policy exemption. This is a JSON string representing additional metadata that should be stored with the policy exemption.
- Name string
The name of the Policy Exemption. Changing this forces a new resource to be created.
- Policy
Assignment stringId The ID of the Policy Assignment to be exempted at the specified Scope. Changing this forces a new resource to be created.
- Policy
Definition []stringReference Ids The policy definition reference ID list when the associated policy assignment is an assignment of a policy set definition.
- Subscription
Id string The Subscription ID where the Policy Exemption should be applied. Changing this forces a new resource to be created.
- description String
A description to use for this Policy Exemption.
- display
Name String A friendly display name to use for this Policy Exemption.
- exemption
Category String The category of this policy exemption. Possible values are
WaiverandMitigated.- expires
On String The expiration date and time in UTC ISO 8601 format of this policy exemption.
- metadata String
The metadata for this policy exemption. This is a JSON string representing additional metadata that should be stored with the policy exemption.
- name String
The name of the Policy Exemption. Changing this forces a new resource to be created.
- policy
Assignment StringId The ID of the Policy Assignment to be exempted at the specified Scope. Changing this forces a new resource to be created.
- policy
Definition List<String>Reference Ids The policy definition reference ID list when the associated policy assignment is an assignment of a policy set definition.
- subscription
Id String The Subscription ID where the Policy Exemption should be applied. Changing this forces a new resource to be created.
- description string
A description to use for this Policy Exemption.
- display
Name string A friendly display name to use for this Policy Exemption.
- exemption
Category string The category of this policy exemption. Possible values are
WaiverandMitigated.- expires
On string The expiration date and time in UTC ISO 8601 format of this policy exemption.
- metadata string
The metadata for this policy exemption. This is a JSON string representing additional metadata that should be stored with the policy exemption.
- name string
The name of the Policy Exemption. Changing this forces a new resource to be created.
- policy
Assignment stringId The ID of the Policy Assignment to be exempted at the specified Scope. Changing this forces a new resource to be created.
- policy
Definition string[]Reference Ids The policy definition reference ID list when the associated policy assignment is an assignment of a policy set definition.
- subscription
Id string The Subscription ID where the Policy Exemption should be applied. Changing this forces a new resource to be created.
- description str
A description to use for this Policy Exemption.
- display_
name str A friendly display name to use for this Policy Exemption.
- exemption_
category str The category of this policy exemption. Possible values are
WaiverandMitigated.- expires_
on str The expiration date and time in UTC ISO 8601 format of this policy exemption.
- metadata str
The metadata for this policy exemption. This is a JSON string representing additional metadata that should be stored with the policy exemption.
- name str
The name of the Policy Exemption. Changing this forces a new resource to be created.
- policy_
assignment_ strid The ID of the Policy Assignment to be exempted at the specified Scope. Changing this forces a new resource to be created.
- policy_
definition_ Sequence[str]reference_ ids The policy definition reference ID list when the associated policy assignment is an assignment of a policy set definition.
- subscription_
id str The Subscription ID where the Policy Exemption should be applied. Changing this forces a new resource to be created.
- description String
A description to use for this Policy Exemption.
- display
Name String A friendly display name to use for this Policy Exemption.
- exemption
Category String The category of this policy exemption. Possible values are
WaiverandMitigated.- expires
On String The expiration date and time in UTC ISO 8601 format of this policy exemption.
- metadata String
The metadata for this policy exemption. This is a JSON string representing additional metadata that should be stored with the policy exemption.
- name String
The name of the Policy Exemption. Changing this forces a new resource to be created.
- policy
Assignment StringId The ID of the Policy Assignment to be exempted at the specified Scope. Changing this forces a new resource to be created.
- policy
Definition List<String>Reference Ids The policy definition reference ID list when the associated policy assignment is an assignment of a policy set definition.
- subscription
Id String The Subscription ID where the Policy Exemption should be applied. Changing this forces a new resource to be created.
Import
Policy Exemptions can be imported using the resource id, e.g.
$ pulumi import azure:core/subscriptionPolicyExemption:SubscriptionPolicyExemption exemption1 /subscriptions/00000000-0000-0000-000000000000/providers/Microsoft.Authorization/policyExemptions/exemption1
Package Details
- Repository
- Azure Classic pulumi/pulumi-azure
- License
- Apache-2.0
- Notes
This Pulumi package is based on the
azurermTerraform Provider.