Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Google Cloud (GCP) Classic
  4. API Docs
  5. chronicle
  6. FindingsRefinementDeployment
Viewing docs for Google Cloud v9.30.0
published on Monday, Jul 13, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-gcp

gcp.chronicle.FindingsRefinementDeployment

gcp logo
Viewing docs for Google Cloud v9.30.0
published on Monday, Jul 13, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-gcp

    The FindingsRefinementDeployment resource represents the deployment state of a findings refinement.

    Warning: This resource is in beta, and should be used with the terraform-provider-google-beta provider. See Provider Versions for more details on beta resources.

    To get more information about FindingsRefinementDeployment, see:

    Example Usage

    Chronicle Findings Refinement Deployment Full

    import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
import * as std from "@pulumi/std";

const my_findings_refinement = new gcp.chronicle.FindingsRefinement("my-findings-refinement", {
    location: "us",
    instance: "00000000-0000-0000-0000-000000000000",
    displayName: "findings_refinement_display_name",
    type: "DETECTION_EXCLUSION",
    query: "network.dns.response = true",
    outcomeFilters: [{
        outcomeVariable: "risk_score",
        outcomeFilterOperator: "EQUAL",
        outcomeValue: "value",
    }],
});
const example = new gcp.chronicle.FindingsRefinementDeployment("example", {
    location: "us",
    instance: "00000000-0000-0000-0000-000000000000",
    findingsRefinement: pulumi.all([std.split({
        separator: "/",
        text: googleChronicleFindingsRefinement["my-findings-refinement"].name,
    }), std.split({
        separator: "/",
        text: googleChronicleFindingsRefinement["my-findings-refinement"].name,
    }).then(invoke => invoke.result).length]).apply(([invoke, length]) => invoke.result[length - 1]).apply(x =>String(x)),
    enabled: true,
    archived: false,
});

    import pulumi
import pulumi_gcp as gcp
import pulumi_std as std

my_findings_refinement = gcp.chronicle.FindingsRefinement("my-findings-refinement",
    location="us",
    instance="00000000-0000-0000-0000-000000000000",
    display_name="findings_refinement_display_name",
    type="DETECTION_EXCLUSION",
    query="network.dns.response = true",
    outcome_filters=[{
        "outcome_variable": "risk_score",
        "outcome_filter_operator": "EQUAL",
        "outcome_value": "value",
    }])
example = gcp.chronicle.FindingsRefinementDeployment("example",
    location="us",
    instance="00000000-0000-0000-0000-000000000000",
    findings_refinement=len(std.split(separator="/",
        text=google_chronicle_findings_refinement["my-findings-refinement"]["name"]).result).apply(lambda length: std.split(separator="/",
        text=google_chronicle_findings_refinement["my-findings-refinement"]["name"]).result[int(length - 1)]).apply(lambda x: str(x)),
    enabled=True,
    archived=False)

    package main

import (
	"github.com/pulumi/pulumi-gcp/sdk/v9/go/gcp/chronicle"
	"github.com/pulumi/pulumi-std/sdk/go/std"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := chronicle.NewFindingsRefinement(ctx, "my-findings-refinement", &chronicle.FindingsRefinementArgs{
Location: pulumi.String("us"),
Instance: pulumi.String("00000000-0000-0000-0000-000000000000"),
DisplayName: pulumi.String("findings_refinement_display_name"),
Type: pulumi.String("DETECTION_EXCLUSION"),
Query: pulumi.String("network.dns.response = true"),
OutcomeFilters: chronicle.FindingsRefinementOutcomeFilterArray{
&chronicle.FindingsRefinementOutcomeFilterArgs{
OutcomeVariable: pulumi.String("risk_score"),
OutcomeFilterOperator: pulumi.String("EQUAL"),
OutcomeValue: pulumi.String("value"),
},
},
})
if err != nil {
return err
}
invokeSplit, err := std.Split(ctx, &std.SplitArgs{
Separator: "/",
Text: googleChronicleFindingsRefinement.MyFindingsRefinement.Name,
}, nil)
if err != nil {
return err
}
invokeSplit1, err := std.Split(ctx, &std.SplitArgs{
Separator: "/",
Text: googleChronicleFindingsRefinement.MyFindingsRefinement.Name,
}, nil)
if err != nil {
return err
}
_, err = chronicle.NewFindingsRefinementDeployment(ctx, "example", &chronicle.FindingsRefinementDeploymentArgs{
Location: pulumi.String("us"),
Instance: pulumi.String("00000000-0000-0000-0000-000000000000"),
FindingsRefinement: pulumi.String(len(invokeSplit.Result).ApplyT(func(length int) (pulumi.Any, error) {
%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference)).(pulumi.AnyOutput)),
Enabled: pulumi.Bool(true),
Archived: pulumi.Bool(false),
})
if err != nil {
return err
}
return nil
})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
using Std = Pulumi.Std;

return await Deployment.RunAsync(() => 
{
    var my_findings_refinement = new Gcp.Chronicle.FindingsRefinement("my-findings-refinement", new()
    {
        Location = "us",
        Instance = "00000000-0000-0000-0000-000000000000",
        DisplayName = "findings_refinement_display_name",
        Type = "DETECTION_EXCLUSION",
        Query = "network.dns.response = true",
        OutcomeFilters = new[]
        {
            new Gcp.Chronicle.Inputs.FindingsRefinementOutcomeFilterArgs
            {
                OutcomeVariable = "risk_score",
                OutcomeFilterOperator = "EQUAL",
                OutcomeValue = "value",
            },
        },
    });

    var example = new Gcp.Chronicle.FindingsRefinementDeployment("example", new()
    {
        Location = "us",
        Instance = "00000000-0000-0000-0000-000000000000",
        FindingsRefinement = Output.Tuple(Std.Split.Invoke(new()
        {
            Separator = "/",
            Text = googleChronicleFindingsRefinement.My_findings_refinement.Name,
        }), Std.Split.Invoke(new()
        {
            Separator = "/",
            Text = googleChronicleFindingsRefinement.My_findings_refinement.Name,
        }).Apply(invoke => invoke.Result).Length()).Apply(values =>
        {
            var invoke = values.Item1;
            var length = values.Item2;
            return invoke.Result[length - 1];
        }),
        Enabled = true,
        Archived = false,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.chronicle.FindingsRefinement;
import com.pulumi.gcp.chronicle.FindingsRefinementArgs;
import com.pulumi.gcp.chronicle.inputs.FindingsRefinementOutcomeFilterArgs;
import com.pulumi.gcp.chronicle.FindingsRefinementDeployment;
import com.pulumi.gcp.chronicle.FindingsRefinementDeploymentArgs;
import com.pulumi.std.StdFunctions;
import com.pulumi.std.inputs.SplitArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var my_findings_refinement = new FindingsRefinement("my-findings-refinement", FindingsRefinementArgs.builder()
            .location("us")
            .instance("00000000-0000-0000-0000-000000000000")
            .displayName("findings_refinement_display_name")
            .type("DETECTION_EXCLUSION")
            .query("network.dns.response = true")
            .outcomeFilters(FindingsRefinementOutcomeFilterArgs.builder()
                .outcomeVariable("risk_score")
                .outcomeFilterOperator("EQUAL")
                .outcomeValue("value")
                .build())
            .build());

        var example = new FindingsRefinementDeployment("example", FindingsRefinementDeploymentArgs.builder()
            .location("us")
            .instance("00000000-0000-0000-0000-000000000000")
            .findingsRefinement(StdFunctions.split(SplitArgs.builder()
                .separator("/")
                .text(googleChronicleFindingsRefinement.my-findings-refinement().name())
                .build()).result().size().applyValue(_length -> StdFunctions.split(SplitArgs.builder()
                .separator("/")
                .text(googleChronicleFindingsRefinement.my-findings-refinement().name())
                .build()).result()[_length - 1]))
            .enabled(true)
            .archived(false)
            .build());

    }
}

    Example coming soon!

    pulumi {
  required_providers {
    gcp = {
      source = "pulumi/gcp"
    }
    std = {
      source = "pulumi/std"
    }
  }
}

resource "gcp_chronicle_findingsrefinement" "my-findings-refinement" {
  location     = "us"
  instance     = "00000000-0000-0000-0000-000000000000"
  display_name = "findings_refinement_display_name"
  type         = "DETECTION_EXCLUSION"
  query        = "network.dns.response = true"
  outcome_filters {
    outcome_variable        = "risk_score"
    outcome_filter_operator = "EQUAL"
    outcome_value           = "value"
  }
}
resource "gcp_chronicle_findingsrefinementdeployment" "example" {
  location            = "us"
  instance            = "00000000-0000-0000-0000-000000000000"
  findings_refinement = element(split("/", googleChronicleFindingsRefinement.my-findings-refinement.name), length(split("/", googleChronicleFindingsRefinement.my-findings-refinement.name)) - 1)
  enabled             = "true"
  archived            = false
}

    Create FindingsRefinementDeployment Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new FindingsRefinementDeployment(name: string, args: FindingsRefinementDeploymentArgs, opts?: CustomResourceOptions);
    @overload
def FindingsRefinementDeployment(resource_name: str,
                                 args: FindingsRefinementDeploymentArgs,
                                 opts: Optional[ResourceOptions] = None)

@overload
def FindingsRefinementDeployment(resource_name: str,
                                 opts: Optional[ResourceOptions] = None,
                                 findings_refinement: Optional[str] = None,
                                 instance: Optional[str] = None,
                                 location: Optional[str] = None,
                                 archived: Optional[bool] = None,
                                 detection_exclusion_application: Optional[FindingsRefinementDeploymentDetectionExclusionApplicationArgs] = None,
                                 enabled: Optional[bool] = None,
                                 project: Optional[str] = None)
    func NewFindingsRefinementDeployment(ctx *Context, name string, args FindingsRefinementDeploymentArgs, opts ...ResourceOption) (*FindingsRefinementDeployment, error)
    public FindingsRefinementDeployment(string name, FindingsRefinementDeploymentArgs args, CustomResourceOptions? opts = null)
    public FindingsRefinementDeployment(String name, FindingsRefinementDeploymentArgs args)
public FindingsRefinementDeployment(String name, FindingsRefinementDeploymentArgs args, CustomResourceOptions options)

    type: gcp:chronicle:FindingsRefinementDeployment
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "gcp_chronicle_findings_refinement_deployment" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args FindingsRefinementDeploymentArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args FindingsRefinementDeploymentArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args FindingsRefinementDeploymentArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args FindingsRefinementDeploymentArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args FindingsRefinementDeploymentArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var findingsRefinementDeploymentResource = new Gcp.Chronicle.FindingsRefinementDeployment("findingsRefinementDeploymentResource", new()
{
    FindingsRefinement = "string",
    Instance = "string",
    Location = "string",
    Archived = false,
    DetectionExclusionApplication = new Gcp.Chronicle.Inputs.FindingsRefinementDeploymentDetectionExclusionApplicationArgs
    {
        CuratedRuleSets = new[]
        {
            "string",
        },
        CuratedRules = new[]
        {
            "string",
        },
        DeletedCuratedRuleSets = new[]
        {
            "string",
        },
        Rules = new[]
        {
            "string",
        },
    },
    Enabled = false,
    Project = "string",
});

    example, err := chronicle.NewFindingsRefinementDeployment(ctx, "findingsRefinementDeploymentResource", &chronicle.FindingsRefinementDeploymentArgs{
	FindingsRefinement: pulumi.String("string"),
	Instance:           pulumi.String("string"),
	Location:           pulumi.String("string"),
	Archived:           pulumi.Bool(false),
	DetectionExclusionApplication: &chronicle.FindingsRefinementDeploymentDetectionExclusionApplicationArgs{
		CuratedRuleSets: pulumi.StringArray{
			pulumi.String("string"),
		},
		CuratedRules: pulumi.StringArray{
			pulumi.String("string"),
		},
		DeletedCuratedRuleSets: pulumi.StringArray{
			pulumi.String("string"),
		},
		Rules: pulumi.StringArray{
			pulumi.String("string"),
		},
	},
	Enabled: pulumi.Bool(false),
	Project: pulumi.String("string"),
})

    resource "gcp_chronicle_findings_refinement_deployment" "findingsRefinementDeploymentResource" {
  lifecycle {
    create_before_destroy = true
  }
  findings_refinement = "string"
  instance            = "string"
  location            = "string"
  archived            = false
  detection_exclusion_application = {
    curated_rule_sets         = ["string"]
    curated_rules             = ["string"]
    deleted_curated_rule_sets = ["string"]
    rules                     = ["string"]
  }
  enabled = false
  project = "string"
}

    var findingsRefinementDeploymentResource = new FindingsRefinementDeployment("findingsRefinementDeploymentResource", FindingsRefinementDeploymentArgs.builder()
    .findingsRefinement("string")
    .instance("string")
    .location("string")
    .archived(false)
    .detectionExclusionApplication(FindingsRefinementDeploymentDetectionExclusionApplicationArgs.builder()
        .curatedRuleSets("string")
        .curatedRules("string")
        .deletedCuratedRuleSets("string")
        .rules("string")
        .build())
    .enabled(false)
    .project("string")
    .build());

    findings_refinement_deployment_resource = gcp.chronicle.FindingsRefinementDeployment("findingsRefinementDeploymentResource",
    findings_refinement="string",
    instance="string",
    location="string",
    archived=False,
    detection_exclusion_application={
        "curated_rule_sets": ["string"],
        "curated_rules": ["string"],
        "deleted_curated_rule_sets": ["string"],
        "rules": ["string"],
    },
    enabled=False,
    project="string")

    const findingsRefinementDeploymentResource = new gcp.chronicle.FindingsRefinementDeployment("findingsRefinementDeploymentResource", {
    findingsRefinement: "string",
    instance: "string",
    location: "string",
    archived: false,
    detectionExclusionApplication: {
        curatedRuleSets: ["string"],
        curatedRules: ["string"],
        deletedCuratedRuleSets: ["string"],
        rules: ["string"],
    },
    enabled: false,
    project: "string",
});

    type: gcp:chronicle:FindingsRefinementDeployment
properties:
    archived: false
    detectionExclusionApplication:
        curatedRuleSets:
            - string
        curatedRules:
            - string
        deletedCuratedRuleSets:
            - string
        rules:
            - string
    enabled: false
    findingsRefinement: string
    instance: string
    location: string
    project: string

    FindingsRefinementDeployment Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The FindingsRefinementDeployment resource accepts the following input properties:

    FindingsRefinement string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    Instance string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    Location string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    Archived bool
    The archive state of the findings refinement deployment. Cannot be set to true unless enabled is set to false. If currently set to true, enabled cannot be updated to true.
    DetectionExclusionApplication FindingsRefinementDeploymentDetectionExclusionApplication
    Describes the detectors a detection exclusion is applied to. Structure is documented below.
    Enabled bool
    Whether the findings refinement is currently deployed continuously against incoming findings.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    FindingsRefinement string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    Instance string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    Location string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    Archived bool
    The archive state of the findings refinement deployment. Cannot be set to true unless enabled is set to false. If currently set to true, enabled cannot be updated to true.
    DetectionExclusionApplication FindingsRefinementDeploymentDetectionExclusionApplicationArgs
    Describes the detectors a detection exclusion is applied to. Structure is documented below.
    Enabled bool
    Whether the findings refinement is currently deployed continuously against incoming findings.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    findings_refinement string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    instance string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    location string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    archived bool
    The archive state of the findings refinement deployment. Cannot be set to true unless enabled is set to false. If currently set to true, enabled cannot be updated to true.
    detection_exclusion_application object
    Describes the detectors a detection exclusion is applied to. Structure is documented below.
    enabled bool
    Whether the findings refinement is currently deployed continuously against incoming findings.
    project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    findingsRefinement String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    instance String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    location String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    archived Boolean
    The archive state of the findings refinement deployment. Cannot be set to true unless enabled is set to false. If currently set to true, enabled cannot be updated to true.
    detectionExclusionApplication FindingsRefinementDeploymentDetectionExclusionApplication
    Describes the detectors a detection exclusion is applied to. Structure is documented below.
    enabled Boolean
    Whether the findings refinement is currently deployed continuously against incoming findings.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    findingsRefinement string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    instance string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    location string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    archived boolean
    The archive state of the findings refinement deployment. Cannot be set to true unless enabled is set to false. If currently set to true, enabled cannot be updated to true.
    detectionExclusionApplication FindingsRefinementDeploymentDetectionExclusionApplication
    Describes the detectors a detection exclusion is applied to. Structure is documented below.
    enabled boolean
    Whether the findings refinement is currently deployed continuously against incoming findings.
    project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    findings_refinement str
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    instance str
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    location str
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    archived bool
    The archive state of the findings refinement deployment. Cannot be set to true unless enabled is set to false. If currently set to true, enabled cannot be updated to true.
    detection_exclusion_application FindingsRefinementDeploymentDetectionExclusionApplicationArgs
    Describes the detectors a detection exclusion is applied to. Structure is documented below.
    enabled bool
    Whether the findings refinement is currently deployed continuously against incoming findings.
    project str
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    findingsRefinement String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    instance String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    location String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    archived Boolean
    The archive state of the findings refinement deployment. Cannot be set to true unless enabled is set to false. If currently set to true, enabled cannot be updated to true.
    detectionExclusionApplication Property Map
    Describes the detectors a detection exclusion is applied to. Structure is documented below.
    enabled Boolean
    Whether the findings refinement is currently deployed continuously against incoming findings.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the FindingsRefinementDeployment resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    The resource name of the findings refinement deployment. Format: projects/{project}/locations/{location}/instances/{instance}/findingsRefinements/{findings_refinement}/deployment
    UpdateTime string
    The timestamp when the findings refinement deployment was last updated.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    The resource name of the findings refinement deployment. Format: projects/{project}/locations/{location}/instances/{instance}/findingsRefinements/{findings_refinement}/deployment
    UpdateTime string
    The timestamp when the findings refinement deployment was last updated.
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    The resource name of the findings refinement deployment. Format: projects/{project}/locations/{location}/instances/{instance}/findingsRefinements/{findings_refinement}/deployment
    update_time string
    The timestamp when the findings refinement deployment was last updated.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    The resource name of the findings refinement deployment. Format: projects/{project}/locations/{location}/instances/{instance}/findingsRefinements/{findings_refinement}/deployment
    updateTime String
    The timestamp when the findings refinement deployment was last updated.
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    The resource name of the findings refinement deployment. Format: projects/{project}/locations/{location}/instances/{instance}/findingsRefinements/{findings_refinement}/deployment
    updateTime string
    The timestamp when the findings refinement deployment was last updated.
    id str
    The provider-assigned unique ID for this managed resource.
    name str
    The resource name of the findings refinement deployment. Format: projects/{project}/locations/{location}/instances/{instance}/findingsRefinements/{findings_refinement}/deployment
    update_time str
    The timestamp when the findings refinement deployment was last updated.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    The resource name of the findings refinement deployment. Format: projects/{project}/locations/{location}/instances/{instance}/findingsRefinements/{findings_refinement}/deployment
    updateTime String
    The timestamp when the findings refinement deployment was last updated.

    Look up Existing FindingsRefinementDeployment Resource

    Get an existing FindingsRefinementDeployment resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: FindingsRefinementDeploymentState, opts?: CustomResourceOptions): FindingsRefinementDeployment
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        archived: Optional[bool] = None,
        detection_exclusion_application: Optional[FindingsRefinementDeploymentDetectionExclusionApplicationArgs] = None,
        enabled: Optional[bool] = None,
        findings_refinement: Optional[str] = None,
        instance: Optional[str] = None,
        location: Optional[str] = None,
        name: Optional[str] = None,
        project: Optional[str] = None,
        update_time: Optional[str] = None) -> FindingsRefinementDeployment
    func GetFindingsRefinementDeployment(ctx *Context, name string, id IDInput, state *FindingsRefinementDeploymentState, opts ...ResourceOption) (*FindingsRefinementDeployment, error)
    public static FindingsRefinementDeployment Get(string name, Input<string> id, FindingsRefinementDeploymentState? state, CustomResourceOptions? opts = null)
    public static FindingsRefinementDeployment get(String name, Output<String> id, FindingsRefinementDeploymentState state, CustomResourceOptions options)
    resources:  _:    type: gcp:chronicle:FindingsRefinementDeployment    get:      id: ${id}
    import {
  to = gcp_chronicle_findings_refinement_deployment.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Archived bool
    The archive state of the findings refinement deployment. Cannot be set to true unless enabled is set to false. If currently set to true, enabled cannot be updated to true.
    DetectionExclusionApplication FindingsRefinementDeploymentDetectionExclusionApplication
    Describes the detectors a detection exclusion is applied to. Structure is documented below.
    Enabled bool
    Whether the findings refinement is currently deployed continuously against incoming findings.
    FindingsRefinement string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    Instance string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    Location string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    Name string
    The resource name of the findings refinement deployment. Format: projects/{project}/locations/{location}/instances/{instance}/findingsRefinements/{findings_refinement}/deployment
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    UpdateTime string
    The timestamp when the findings refinement deployment was last updated.
    Archived bool
    The archive state of the findings refinement deployment. Cannot be set to true unless enabled is set to false. If currently set to true, enabled cannot be updated to true.
    DetectionExclusionApplication FindingsRefinementDeploymentDetectionExclusionApplicationArgs
    Describes the detectors a detection exclusion is applied to. Structure is documented below.
    Enabled bool
    Whether the findings refinement is currently deployed continuously against incoming findings.
    FindingsRefinement string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    Instance string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    Location string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    Name string
    The resource name of the findings refinement deployment. Format: projects/{project}/locations/{location}/instances/{instance}/findingsRefinements/{findings_refinement}/deployment
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    UpdateTime string
    The timestamp when the findings refinement deployment was last updated.
    archived bool
    The archive state of the findings refinement deployment. Cannot be set to true unless enabled is set to false. If currently set to true, enabled cannot be updated to true.
    detection_exclusion_application object
    Describes the detectors a detection exclusion is applied to. Structure is documented below.
    enabled bool
    Whether the findings refinement is currently deployed continuously against incoming findings.
    findings_refinement string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    instance string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    location string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    name string
    The resource name of the findings refinement deployment. Format: projects/{project}/locations/{location}/instances/{instance}/findingsRefinements/{findings_refinement}/deployment
    project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    update_time string
    The timestamp when the findings refinement deployment was last updated.
    archived Boolean
    The archive state of the findings refinement deployment. Cannot be set to true unless enabled is set to false. If currently set to true, enabled cannot be updated to true.
    detectionExclusionApplication FindingsRefinementDeploymentDetectionExclusionApplication
    Describes the detectors a detection exclusion is applied to. Structure is documented below.
    enabled Boolean
    Whether the findings refinement is currently deployed continuously against incoming findings.
    findingsRefinement String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    instance String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    location String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    name String
    The resource name of the findings refinement deployment. Format: projects/{project}/locations/{location}/instances/{instance}/findingsRefinements/{findings_refinement}/deployment
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    updateTime String
    The timestamp when the findings refinement deployment was last updated.
    archived boolean
    The archive state of the findings refinement deployment. Cannot be set to true unless enabled is set to false. If currently set to true, enabled cannot be updated to true.
    detectionExclusionApplication FindingsRefinementDeploymentDetectionExclusionApplication
    Describes the detectors a detection exclusion is applied to. Structure is documented below.
    enabled boolean
    Whether the findings refinement is currently deployed continuously against incoming findings.
    findingsRefinement string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    instance string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    location string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    name string
    The resource name of the findings refinement deployment. Format: projects/{project}/locations/{location}/instances/{instance}/findingsRefinements/{findings_refinement}/deployment
    project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    updateTime string
    The timestamp when the findings refinement deployment was last updated.
    archived bool
    The archive state of the findings refinement deployment. Cannot be set to true unless enabled is set to false. If currently set to true, enabled cannot be updated to true.
    detection_exclusion_application FindingsRefinementDeploymentDetectionExclusionApplicationArgs
    Describes the detectors a detection exclusion is applied to. Structure is documented below.
    enabled bool
    Whether the findings refinement is currently deployed continuously against incoming findings.
    findings_refinement str
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    instance str
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    location str
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    name str
    The resource name of the findings refinement deployment. Format: projects/{project}/locations/{location}/instances/{instance}/findingsRefinements/{findings_refinement}/deployment
    project str
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    update_time str
    The timestamp when the findings refinement deployment was last updated.
    archived Boolean
    The archive state of the findings refinement deployment. Cannot be set to true unless enabled is set to false. If currently set to true, enabled cannot be updated to true.
    detectionExclusionApplication Property Map
    Describes the detectors a detection exclusion is applied to. Structure is documented below.
    enabled Boolean
    Whether the findings refinement is currently deployed continuously against incoming findings.
    findingsRefinement String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    instance String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    location String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    name String
    The resource name of the findings refinement deployment. Format: projects/{project}/locations/{location}/instances/{instance}/findingsRefinements/{findings_refinement}/deployment
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    updateTime String
    The timestamp when the findings refinement deployment was last updated.

    Supporting Types

    FindingsRefinementDeploymentDetectionExclusionApplication, FindingsRefinementDeploymentDetectionExclusionApplicationArgs

    CuratedRuleSets List<string>
    The CuratedRuleSets this detection exclusion applies to. Format: projects/{project}/locations/{location}/instances/{instance}/curatedRuleSetCategories/{category}/curatedRuleSets/{rule_set}
    CuratedRules List<string>
    The CuratedRules this detection exclusion applies to. Format: projects/{project}/locations/{location}/instances/{instance}/curatedRules/{rule}
    DeletedCuratedRuleSets List<string>
    (Output) The deleted CuratedRuleSets this detection exclusion applies to. Indicates to the customer that the detection exclusion no longer applies to the rule sets, so the detection exclusion should be updated. Format: projects/{project}/locations/{location}/instances/{instance}/curatedRuleSetCategories/{category}/curatedRuleSets/{rule_set}
    Rules List<string>
    The Rules this detection exclusion applies to. Format: projects/{project}/locations/{location}/instances/{instance}/rules/{rule}
    CuratedRuleSets []string
    The CuratedRuleSets this detection exclusion applies to. Format: projects/{project}/locations/{location}/instances/{instance}/curatedRuleSetCategories/{category}/curatedRuleSets/{rule_set}
    CuratedRules []string
    The CuratedRules this detection exclusion applies to. Format: projects/{project}/locations/{location}/instances/{instance}/curatedRules/{rule}
    DeletedCuratedRuleSets []string
    (Output) The deleted CuratedRuleSets this detection exclusion applies to. Indicates to the customer that the detection exclusion no longer applies to the rule sets, so the detection exclusion should be updated. Format: projects/{project}/locations/{location}/instances/{instance}/curatedRuleSetCategories/{category}/curatedRuleSets/{rule_set}
    Rules []string
    The Rules this detection exclusion applies to. Format: projects/{project}/locations/{location}/instances/{instance}/rules/{rule}
    curated_rule_sets list(string)
    The CuratedRuleSets this detection exclusion applies to. Format: projects/{project}/locations/{location}/instances/{instance}/curatedRuleSetCategories/{category}/curatedRuleSets/{rule_set}
    curated_rules list(string)
    The CuratedRules this detection exclusion applies to. Format: projects/{project}/locations/{location}/instances/{instance}/curatedRules/{rule}
    deleted_curated_rule_sets list(string)
    (Output) The deleted CuratedRuleSets this detection exclusion applies to. Indicates to the customer that the detection exclusion no longer applies to the rule sets, so the detection exclusion should be updated. Format: projects/{project}/locations/{location}/instances/{instance}/curatedRuleSetCategories/{category}/curatedRuleSets/{rule_set}
    rules list(string)
    The Rules this detection exclusion applies to. Format: projects/{project}/locations/{location}/instances/{instance}/rules/{rule}
    curatedRuleSets List<String>
    The CuratedRuleSets this detection exclusion applies to. Format: projects/{project}/locations/{location}/instances/{instance}/curatedRuleSetCategories/{category}/curatedRuleSets/{rule_set}
    curatedRules List<String>
    The CuratedRules this detection exclusion applies to. Format: projects/{project}/locations/{location}/instances/{instance}/curatedRules/{rule}
    deletedCuratedRuleSets List<String>
    (Output) The deleted CuratedRuleSets this detection exclusion applies to. Indicates to the customer that the detection exclusion no longer applies to the rule sets, so the detection exclusion should be updated. Format: projects/{project}/locations/{location}/instances/{instance}/curatedRuleSetCategories/{category}/curatedRuleSets/{rule_set}
    rules List<String>
    The Rules this detection exclusion applies to. Format: projects/{project}/locations/{location}/instances/{instance}/rules/{rule}
    curatedRuleSets string[]
    The CuratedRuleSets this detection exclusion applies to. Format: projects/{project}/locations/{location}/instances/{instance}/curatedRuleSetCategories/{category}/curatedRuleSets/{rule_set}
    curatedRules string[]
    The CuratedRules this detection exclusion applies to. Format: projects/{project}/locations/{location}/instances/{instance}/curatedRules/{rule}
    deletedCuratedRuleSets string[]
    (Output) The deleted CuratedRuleSets this detection exclusion applies to. Indicates to the customer that the detection exclusion no longer applies to the rule sets, so the detection exclusion should be updated. Format: projects/{project}/locations/{location}/instances/{instance}/curatedRuleSetCategories/{category}/curatedRuleSets/{rule_set}
    rules string[]
    The Rules this detection exclusion applies to. Format: projects/{project}/locations/{location}/instances/{instance}/rules/{rule}
    curated_rule_sets Sequence[str]
    The CuratedRuleSets this detection exclusion applies to. Format: projects/{project}/locations/{location}/instances/{instance}/curatedRuleSetCategories/{category}/curatedRuleSets/{rule_set}
    curated_rules Sequence[str]
    The CuratedRules this detection exclusion applies to. Format: projects/{project}/locations/{location}/instances/{instance}/curatedRules/{rule}
    deleted_curated_rule_sets Sequence[str]
    (Output) The deleted CuratedRuleSets this detection exclusion applies to. Indicates to the customer that the detection exclusion no longer applies to the rule sets, so the detection exclusion should be updated. Format: projects/{project}/locations/{location}/instances/{instance}/curatedRuleSetCategories/{category}/curatedRuleSets/{rule_set}
    rules Sequence[str]
    The Rules this detection exclusion applies to. Format: projects/{project}/locations/{location}/instances/{instance}/rules/{rule}
    curatedRuleSets List<String>
    The CuratedRuleSets this detection exclusion applies to. Format: projects/{project}/locations/{location}/instances/{instance}/curatedRuleSetCategories/{category}/curatedRuleSets/{rule_set}
    curatedRules List<String>
    The CuratedRules this detection exclusion applies to. Format: projects/{project}/locations/{location}/instances/{instance}/curatedRules/{rule}
    deletedCuratedRuleSets List<String>
    (Output) The deleted CuratedRuleSets this detection exclusion applies to. Indicates to the customer that the detection exclusion no longer applies to the rule sets, so the detection exclusion should be updated. Format: projects/{project}/locations/{location}/instances/{instance}/curatedRuleSetCategories/{category}/curatedRuleSets/{rule_set}
    rules List<String>
    The Rules this detection exclusion applies to. Format: projects/{project}/locations/{location}/instances/{instance}/rules/{rule}

    Import

    FindingsRefinementDeployment can be imported using any of these accepted formats:

    • projects/{{project}}/locations/{{location}}/instances/{{instance}}/findingsRefinements/{{findings_refinement}}/deployment
    • {{project}}/{{location}}/{{instance}}/{{findings_refinement}}
    • {{location}}/{{instance}}/{{findings_refinement}}

    When using the pulumi import command, FindingsRefinementDeployment can be imported using one of the formats above. For example:

    $ pulumi import gcp:chronicle/findingsRefinementDeployment:FindingsRefinementDeployment default projects/{{project}}/locations/{{location}}/instances/{{instance}}/findingsRefinements/{{findings_refinement}}/deployment
$ pulumi import gcp:chronicle/findingsRefinementDeployment:FindingsRefinementDeployment default {{project}}/{{location}}/{{instance}}/{{findings_refinement}}
$ pulumi import gcp:chronicle/findingsRefinementDeployment:FindingsRefinementDeployment default {{location}}/{{instance}}/{{findings_refinement}}

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Google Cloud (GCP) Classic pulumi/pulumi-gcp
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the google-beta Terraform Provider.
    gcp logo
    Viewing docs for Google Cloud v9.30.0
    published on Monday, Jul 13, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-gcp

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial