1. Packages
  2. Google Cloud (GCP) Classic
  3. API Docs
  4. cloudsecuritycompliance
  5. FrameworkDeployment
Google Cloud v9.6.0 published on Wednesday, Nov 26, 2025 by Pulumi
Schema (JSON)
pulumi/pulumi-gcp

gcp.cloudsecuritycompliance.FrameworkDeployment

gcp logo
Google Cloud v9.6.0 published on Wednesday, Nov 26, 2025 by Pulumi
Schema (JSON)
pulumi/pulumi-gcp

    Framework deployments represent the assignment of a framework to a target resource. Supported target resources are organizations, folders, and projects.

    To get more information about FrameworkDeployment, see:

    Example Usage

    Create FrameworkDeployment Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new FrameworkDeployment(name: string, args: FrameworkDeploymentArgs, opts?: CustomResourceOptions);
    @overload
def FrameworkDeployment(resource_name: str,
                        args: FrameworkDeploymentArgs,
                        opts: Optional[ResourceOptions] = None)

@overload
def FrameworkDeployment(resource_name: str,
                        opts: Optional[ResourceOptions] = None,
                        cloud_control_metadatas: Optional[Sequence[FrameworkDeploymentCloudControlMetadataArgs]] = None,
                        framework: Optional[FrameworkDeploymentFrameworkArgs] = None,
                        framework_deployment_id: Optional[str] = None,
                        location: Optional[str] = None,
                        organization: Optional[str] = None,
                        target_resource_config: Optional[FrameworkDeploymentTargetResourceConfigArgs] = None,
                        description: Optional[str] = None)
    func NewFrameworkDeployment(ctx *Context, name string, args FrameworkDeploymentArgs, opts ...ResourceOption) (*FrameworkDeployment, error)
    public FrameworkDeployment(string name, FrameworkDeploymentArgs args, CustomResourceOptions? opts = null)
    public FrameworkDeployment(String name, FrameworkDeploymentArgs args)
public FrameworkDeployment(String name, FrameworkDeploymentArgs args, CustomResourceOptions options)

    type: gcp:cloudsecuritycompliance:FrameworkDeployment
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args FrameworkDeploymentArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args FrameworkDeploymentArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args FrameworkDeploymentArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args FrameworkDeploymentArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args FrameworkDeploymentArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var frameworkDeploymentResource = new Gcp.CloudSecurityCompliance.FrameworkDeployment("frameworkDeploymentResource", new()
{
    CloudControlMetadatas = new[]
    {
        new Gcp.CloudSecurityCompliance.Inputs.FrameworkDeploymentCloudControlMetadataArgs
        {
            CloudControlDetails = new Gcp.CloudSecurityCompliance.Inputs.FrameworkDeploymentCloudControlMetadataCloudControlDetailsArgs
            {
                MajorRevisionId = "string",
                Name = "string",
                Parameters = new[]
                {
                    new Gcp.CloudSecurityCompliance.Inputs.FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameterArgs
                    {
                        Name = "string",
                        ParameterValue = new Gcp.CloudSecurityCompliance.Inputs.FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameterParameterValueArgs
                        {
                            BoolValue = false,
                            NumberValue = 0,
                            StringListValue = new Gcp.CloudSecurityCompliance.Inputs.FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameterParameterValueStringListValueArgs
                            {
                                Values = new[]
                                {
                                    "string",
                                },
                            },
                            StringValue = "string",
                        },
                    },
                },
            },
            EnforcementMode = "string",
        },
    },
    Framework = new Gcp.CloudSecurityCompliance.Inputs.FrameworkDeploymentFrameworkArgs
    {
        Framework = "string",
        MajorRevisionId = "string",
    },
    FrameworkDeploymentId = "string",
    Location = "string",
    Organization = "string",
    TargetResourceConfig = new Gcp.CloudSecurityCompliance.Inputs.FrameworkDeploymentTargetResourceConfigArgs
    {
        ExistingTargetResource = "string",
        TargetResourceCreationConfig = new Gcp.CloudSecurityCompliance.Inputs.FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfigArgs
        {
            FolderCreationConfig = new Gcp.CloudSecurityCompliance.Inputs.FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfigFolderCreationConfigArgs
            {
                FolderDisplayName = "string",
                Parent = "string",
            },
            ProjectCreationConfig = new Gcp.CloudSecurityCompliance.Inputs.FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfigProjectCreationConfigArgs
            {
                BillingAccountId = "string",
                Parent = "string",
                ProjectDisplayName = "string",
            },
        },
    },
    Description = "string",
});

    example, err := cloudsecuritycompliance.NewFrameworkDeployment(ctx, "frameworkDeploymentResource", &cloudsecuritycompliance.FrameworkDeploymentArgs{
	CloudControlMetadatas: cloudsecuritycompliance.FrameworkDeploymentCloudControlMetadataArray{
		&cloudsecuritycompliance.FrameworkDeploymentCloudControlMetadataArgs{
			CloudControlDetails: &cloudsecuritycompliance.FrameworkDeploymentCloudControlMetadataCloudControlDetailsArgs{
				MajorRevisionId: pulumi.String("string"),
				Name:            pulumi.String("string"),
				Parameters: cloudsecuritycompliance.FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameterArray{
					&cloudsecuritycompliance.FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameterArgs{
						Name: pulumi.String("string"),
						ParameterValue: &cloudsecuritycompliance.FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameterParameterValueArgs{
							BoolValue:   pulumi.Bool(false),
							NumberValue: pulumi.Float64(0),
							StringListValue: &cloudsecuritycompliance.FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameterParameterValueStringListValueArgs{
								Values: pulumi.StringArray{
									pulumi.String("string"),
								},
							},
							StringValue: pulumi.String("string"),
						},
					},
				},
			},
			EnforcementMode: pulumi.String("string"),
		},
	},
	Framework: &cloudsecuritycompliance.FrameworkDeploymentFrameworkArgs{
		Framework:       pulumi.String("string"),
		MajorRevisionId: pulumi.String("string"),
	},
	FrameworkDeploymentId: pulumi.String("string"),
	Location:              pulumi.String("string"),
	Organization:          pulumi.String("string"),
	TargetResourceConfig: &cloudsecuritycompliance.FrameworkDeploymentTargetResourceConfigArgs{
		ExistingTargetResource: pulumi.String("string"),
		TargetResourceCreationConfig: &cloudsecuritycompliance.FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfigArgs{
			FolderCreationConfig: &cloudsecuritycompliance.FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfigFolderCreationConfigArgs{
				FolderDisplayName: pulumi.String("string"),
				Parent:            pulumi.String("string"),
			},
			ProjectCreationConfig: &cloudsecuritycompliance.FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfigProjectCreationConfigArgs{
				BillingAccountId:   pulumi.String("string"),
				Parent:             pulumi.String("string"),
				ProjectDisplayName: pulumi.String("string"),
			},
		},
	},
	Description: pulumi.String("string"),
})

    var frameworkDeploymentResource = new FrameworkDeployment("frameworkDeploymentResource", FrameworkDeploymentArgs.builder()
    .cloudControlMetadatas(FrameworkDeploymentCloudControlMetadataArgs.builder()
        .cloudControlDetails(FrameworkDeploymentCloudControlMetadataCloudControlDetailsArgs.builder()
            .majorRevisionId("string")
            .name("string")
            .parameters(FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameterArgs.builder()
                .name("string")
                .parameterValue(FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameterParameterValueArgs.builder()
                    .boolValue(false)
                    .numberValue(0.0)
                    .stringListValue(FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameterParameterValueStringListValueArgs.builder()
                        .values("string")
                        .build())
                    .stringValue("string")
                    .build())
                .build())
            .build())
        .enforcementMode("string")
        .build())
    .framework(FrameworkDeploymentFrameworkArgs.builder()
        .framework("string")
        .majorRevisionId("string")
        .build())
    .frameworkDeploymentId("string")
    .location("string")
    .organization("string")
    .targetResourceConfig(FrameworkDeploymentTargetResourceConfigArgs.builder()
        .existingTargetResource("string")
        .targetResourceCreationConfig(FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfigArgs.builder()
            .folderCreationConfig(FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfigFolderCreationConfigArgs.builder()
                .folderDisplayName("string")
                .parent("string")
                .build())
            .projectCreationConfig(FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfigProjectCreationConfigArgs.builder()
                .billingAccountId("string")
                .parent("string")
                .projectDisplayName("string")
                .build())
            .build())
        .build())
    .description("string")
    .build());

    framework_deployment_resource = gcp.cloudsecuritycompliance.FrameworkDeployment("frameworkDeploymentResource",
    cloud_control_metadatas=[{
        "cloud_control_details": {
            "major_revision_id": "string",
            "name": "string",
            "parameters": [{
                "name": "string",
                "parameter_value": {
                    "bool_value": False,
                    "number_value": 0,
                    "string_list_value": {
                        "values": ["string"],
                    },
                    "string_value": "string",
                },
            }],
        },
        "enforcement_mode": "string",
    }],
    framework={
        "framework": "string",
        "major_revision_id": "string",
    },
    framework_deployment_id="string",
    location="string",
    organization="string",
    target_resource_config={
        "existing_target_resource": "string",
        "target_resource_creation_config": {
            "folder_creation_config": {
                "folder_display_name": "string",
                "parent": "string",
            },
            "project_creation_config": {
                "billing_account_id": "string",
                "parent": "string",
                "project_display_name": "string",
            },
        },
    },
    description="string")

    const frameworkDeploymentResource = new gcp.cloudsecuritycompliance.FrameworkDeployment("frameworkDeploymentResource", {
    cloudControlMetadatas: [{
        cloudControlDetails: {
            majorRevisionId: "string",
            name: "string",
            parameters: [{
                name: "string",
                parameterValue: {
                    boolValue: false,
                    numberValue: 0,
                    stringListValue: {
                        values: ["string"],
                    },
                    stringValue: "string",
                },
            }],
        },
        enforcementMode: "string",
    }],
    framework: {
        framework: "string",
        majorRevisionId: "string",
    },
    frameworkDeploymentId: "string",
    location: "string",
    organization: "string",
    targetResourceConfig: {
        existingTargetResource: "string",
        targetResourceCreationConfig: {
            folderCreationConfig: {
                folderDisplayName: "string",
                parent: "string",
            },
            projectCreationConfig: {
                billingAccountId: "string",
                parent: "string",
                projectDisplayName: "string",
            },
        },
    },
    description: "string",
});

    type: gcp:cloudsecuritycompliance:FrameworkDeployment
properties:
    cloudControlMetadatas:
        - cloudControlDetails:
            majorRevisionId: string
            name: string
            parameters:
                - name: string
                  parameterValue:
                    boolValue: false
                    numberValue: 0
                    stringListValue:
                        values:
                            - string
                    stringValue: string
          enforcementMode: string
    description: string
    framework:
        framework: string
        majorRevisionId: string
    frameworkDeploymentId: string
    location: string
    organization: string
    targetResourceConfig:
        existingTargetResource: string
        targetResourceCreationConfig:
            folderCreationConfig:
                folderDisplayName: string
                parent: string
            projectCreationConfig:
                billingAccountId: string
                parent: string
                projectDisplayName: string

    FrameworkDeployment Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The FrameworkDeployment resource accepts the following input properties:

    CloudControlMetadatas List<FrameworkDeploymentCloudControlMetadata>
    Deployment mode and parameters for each of the Cloud Controls in the framework. Every Cloud Control in the framework must have a CloudControlMetadata. Structure is documented below.
    Framework FrameworkDeploymentFramework
    FrameworkReference contains the reference of a framework. Structure is documented below.
    FrameworkDeploymentId string
    User provided identifier. It should be unique in scope of a parent. This is optional and if not provided, a random UUID will be generated.
    Location string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    Organization string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    TargetResourceConfig FrameworkDeploymentTargetResourceConfig
    TargetResourceConfig contains either the name of the target_resource or contains the config to create a new target_resource. Structure is documented below.
    Description string
    User provided description of the Framework deployment
    CloudControlMetadatas []FrameworkDeploymentCloudControlMetadataArgs
    Deployment mode and parameters for each of the Cloud Controls in the framework. Every Cloud Control in the framework must have a CloudControlMetadata. Structure is documented below.
    Framework FrameworkDeploymentFrameworkArgs
    FrameworkReference contains the reference of a framework. Structure is documented below.
    FrameworkDeploymentId string
    User provided identifier. It should be unique in scope of a parent. This is optional and if not provided, a random UUID will be generated.
    Location string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    Organization string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    TargetResourceConfig FrameworkDeploymentTargetResourceConfigArgs
    TargetResourceConfig contains either the name of the target_resource or contains the config to create a new target_resource. Structure is documented below.
    Description string
    User provided description of the Framework deployment
    cloudControlMetadatas List<FrameworkDeploymentCloudControlMetadata>
    Deployment mode and parameters for each of the Cloud Controls in the framework. Every Cloud Control in the framework must have a CloudControlMetadata. Structure is documented below.
    framework FrameworkDeploymentFramework
    FrameworkReference contains the reference of a framework. Structure is documented below.
    frameworkDeploymentId String
    User provided identifier. It should be unique in scope of a parent. This is optional and if not provided, a random UUID will be generated.
    location String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    organization String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    targetResourceConfig FrameworkDeploymentTargetResourceConfig
    TargetResourceConfig contains either the name of the target_resource or contains the config to create a new target_resource. Structure is documented below.
    description String
    User provided description of the Framework deployment
    cloudControlMetadatas FrameworkDeploymentCloudControlMetadata[]
    Deployment mode and parameters for each of the Cloud Controls in the framework. Every Cloud Control in the framework must have a CloudControlMetadata. Structure is documented below.
    framework FrameworkDeploymentFramework
    FrameworkReference contains the reference of a framework. Structure is documented below.
    frameworkDeploymentId string
    User provided identifier. It should be unique in scope of a parent. This is optional and if not provided, a random UUID will be generated.
    location string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    organization string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    targetResourceConfig FrameworkDeploymentTargetResourceConfig
    TargetResourceConfig contains either the name of the target_resource or contains the config to create a new target_resource. Structure is documented below.
    description string
    User provided description of the Framework deployment
    cloud_control_metadatas Sequence[FrameworkDeploymentCloudControlMetadataArgs]
    Deployment mode and parameters for each of the Cloud Controls in the framework. Every Cloud Control in the framework must have a CloudControlMetadata. Structure is documented below.
    framework FrameworkDeploymentFrameworkArgs
    FrameworkReference contains the reference of a framework. Structure is documented below.
    framework_deployment_id str
    User provided identifier. It should be unique in scope of a parent. This is optional and if not provided, a random UUID will be generated.
    location str
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    organization str
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    target_resource_config FrameworkDeploymentTargetResourceConfigArgs
    TargetResourceConfig contains either the name of the target_resource or contains the config to create a new target_resource. Structure is documented below.
    description str
    User provided description of the Framework deployment
    cloudControlMetadatas List<Property Map>
    Deployment mode and parameters for each of the Cloud Controls in the framework. Every Cloud Control in the framework must have a CloudControlMetadata. Structure is documented below.
    framework Property Map
    FrameworkReference contains the reference of a framework. Structure is documented below.
    frameworkDeploymentId String
    User provided identifier. It should be unique in scope of a parent. This is optional and if not provided, a random UUID will be generated.
    location String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    organization String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    targetResourceConfig Property Map
    TargetResourceConfig contains either the name of the target_resource or contains the config to create a new target_resource. Structure is documented below.
    description String
    User provided description of the Framework deployment

    Outputs

    All input properties are implicitly available as output properties. Additionally, the FrameworkDeployment resource produces the following output properties:

    CloudControlDeploymentReferences List<FrameworkDeploymentCloudControlDeploymentReference>
    The references to the cloud control deployments. It has all the CloudControlDeployments which are either directly added in the framework or through a CloudControlGroup. Example: If a framework deployment deploys two cloud controls, cc-deployment-1 and cc-deployment-2, then the cloud_control_deployment_references will be: { cloud_control_deployment_reference: { cloud_control_deployment: "organizations/{organization}/locations/{location}/cloudControlDeployments/cc-deployment-1" }, cloud_control_deployment_reference: { cloud_control_deployment: "organizations/{organization}/locations/{location}/cloudControlDeployments/cc-deployment-2" } Structure is documented below.
    ComputedTargetResource string
    The resource on which the Framework is deployed based on the provided TargetResourceConfig in the following format: organizations/{organization}, folders/{folder} or projects/{project}
    CreateTime string
    The time at which the resource was created.
    DeploymentState string
    The deployment state of the framework. Possible values: DEPLOYMENT_STATE_VALIDATING DEPLOYMENT_STATE_CREATING DEPLOYMENT_STATE_DELETING DEPLOYMENT_STATE_FAILED DEPLOYMENT_STATE_READY DEPLOYMENT_STATE_PARTIALLY_DEPLOYED DEPLOYMENT_STATE_PARTIALLY_DELETED
    Etag string
    To prevent concurrent updates from overwriting each other, always provide the etag when you update a FrameworkDeployment. You can also provide the etag when you delete a FrameworkDeployment, to help ensure that you're deleting the intended version of the FrameworkDeployment.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Identifier. FrameworkDeployment name in the following format: organizations/{organization}/locations/{location}/frameworkDeployments/{framework_deployment_id}
    TargetResourceDisplayName string
    The display name of the target resource.
    UpdateTime string
    The time at which the resource last updated.
    CloudControlDeploymentReferences []FrameworkDeploymentCloudControlDeploymentReference
    The references to the cloud control deployments. It has all the CloudControlDeployments which are either directly added in the framework or through a CloudControlGroup. Example: If a framework deployment deploys two cloud controls, cc-deployment-1 and cc-deployment-2, then the cloud_control_deployment_references will be: { cloud_control_deployment_reference: { cloud_control_deployment: "organizations/{organization}/locations/{location}/cloudControlDeployments/cc-deployment-1" }, cloud_control_deployment_reference: { cloud_control_deployment: "organizations/{organization}/locations/{location}/cloudControlDeployments/cc-deployment-2" } Structure is documented below.
    ComputedTargetResource string
    The resource on which the Framework is deployed based on the provided TargetResourceConfig in the following format: organizations/{organization}, folders/{folder} or projects/{project}
    CreateTime string
    The time at which the resource was created.
    DeploymentState string
    The deployment state of the framework. Possible values: DEPLOYMENT_STATE_VALIDATING DEPLOYMENT_STATE_CREATING DEPLOYMENT_STATE_DELETING DEPLOYMENT_STATE_FAILED DEPLOYMENT_STATE_READY DEPLOYMENT_STATE_PARTIALLY_DEPLOYED DEPLOYMENT_STATE_PARTIALLY_DELETED
    Etag string
    To prevent concurrent updates from overwriting each other, always provide the etag when you update a FrameworkDeployment. You can also provide the etag when you delete a FrameworkDeployment, to help ensure that you're deleting the intended version of the FrameworkDeployment.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Identifier. FrameworkDeployment name in the following format: organizations/{organization}/locations/{location}/frameworkDeployments/{framework_deployment_id}
    TargetResourceDisplayName string
    The display name of the target resource.
    UpdateTime string
    The time at which the resource last updated.
    cloudControlDeploymentReferences List<FrameworkDeploymentCloudControlDeploymentReference>
    The references to the cloud control deployments. It has all the CloudControlDeployments which are either directly added in the framework or through a CloudControlGroup. Example: If a framework deployment deploys two cloud controls, cc-deployment-1 and cc-deployment-2, then the cloud_control_deployment_references will be: { cloud_control_deployment_reference: { cloud_control_deployment: "organizations/{organization}/locations/{location}/cloudControlDeployments/cc-deployment-1" }, cloud_control_deployment_reference: { cloud_control_deployment: "organizations/{organization}/locations/{location}/cloudControlDeployments/cc-deployment-2" } Structure is documented below.
    computedTargetResource String
    The resource on which the Framework is deployed based on the provided TargetResourceConfig in the following format: organizations/{organization}, folders/{folder} or projects/{project}
    createTime String
    The time at which the resource was created.
    deploymentState String
    The deployment state of the framework. Possible values: DEPLOYMENT_STATE_VALIDATING DEPLOYMENT_STATE_CREATING DEPLOYMENT_STATE_DELETING DEPLOYMENT_STATE_FAILED DEPLOYMENT_STATE_READY DEPLOYMENT_STATE_PARTIALLY_DEPLOYED DEPLOYMENT_STATE_PARTIALLY_DELETED
    etag String
    To prevent concurrent updates from overwriting each other, always provide the etag when you update a FrameworkDeployment. You can also provide the etag when you delete a FrameworkDeployment, to help ensure that you're deleting the intended version of the FrameworkDeployment.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Identifier. FrameworkDeployment name in the following format: organizations/{organization}/locations/{location}/frameworkDeployments/{framework_deployment_id}
    targetResourceDisplayName String
    The display name of the target resource.
    updateTime String
    The time at which the resource last updated.
    cloudControlDeploymentReferences FrameworkDeploymentCloudControlDeploymentReference[]
    The references to the cloud control deployments. It has all the CloudControlDeployments which are either directly added in the framework or through a CloudControlGroup. Example: If a framework deployment deploys two cloud controls, cc-deployment-1 and cc-deployment-2, then the cloud_control_deployment_references will be: { cloud_control_deployment_reference: { cloud_control_deployment: "organizations/{organization}/locations/{location}/cloudControlDeployments/cc-deployment-1" }, cloud_control_deployment_reference: { cloud_control_deployment: "organizations/{organization}/locations/{location}/cloudControlDeployments/cc-deployment-2" } Structure is documented below.
    computedTargetResource string
    The resource on which the Framework is deployed based on the provided TargetResourceConfig in the following format: organizations/{organization}, folders/{folder} or projects/{project}
    createTime string
    The time at which the resource was created.
    deploymentState string
    The deployment state of the framework. Possible values: DEPLOYMENT_STATE_VALIDATING DEPLOYMENT_STATE_CREATING DEPLOYMENT_STATE_DELETING DEPLOYMENT_STATE_FAILED DEPLOYMENT_STATE_READY DEPLOYMENT_STATE_PARTIALLY_DEPLOYED DEPLOYMENT_STATE_PARTIALLY_DELETED
    etag string
    To prevent concurrent updates from overwriting each other, always provide the etag when you update a FrameworkDeployment. You can also provide the etag when you delete a FrameworkDeployment, to help ensure that you're deleting the intended version of the FrameworkDeployment.
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    Identifier. FrameworkDeployment name in the following format: organizations/{organization}/locations/{location}/frameworkDeployments/{framework_deployment_id}
    targetResourceDisplayName string
    The display name of the target resource.
    updateTime string
    The time at which the resource last updated.
    cloud_control_deployment_references Sequence[FrameworkDeploymentCloudControlDeploymentReference]
    The references to the cloud control deployments. It has all the CloudControlDeployments which are either directly added in the framework or through a CloudControlGroup. Example: If a framework deployment deploys two cloud controls, cc-deployment-1 and cc-deployment-2, then the cloud_control_deployment_references will be: { cloud_control_deployment_reference: { cloud_control_deployment: "organizations/{organization}/locations/{location}/cloudControlDeployments/cc-deployment-1" }, cloud_control_deployment_reference: { cloud_control_deployment: "organizations/{organization}/locations/{location}/cloudControlDeployments/cc-deployment-2" } Structure is documented below.
    computed_target_resource str
    The resource on which the Framework is deployed based on the provided TargetResourceConfig in the following format: organizations/{organization}, folders/{folder} or projects/{project}
    create_time str
    The time at which the resource was created.
    deployment_state str
    The deployment state of the framework. Possible values: DEPLOYMENT_STATE_VALIDATING DEPLOYMENT_STATE_CREATING DEPLOYMENT_STATE_DELETING DEPLOYMENT_STATE_FAILED DEPLOYMENT_STATE_READY DEPLOYMENT_STATE_PARTIALLY_DEPLOYED DEPLOYMENT_STATE_PARTIALLY_DELETED
    etag str
    To prevent concurrent updates from overwriting each other, always provide the etag when you update a FrameworkDeployment. You can also provide the etag when you delete a FrameworkDeployment, to help ensure that you're deleting the intended version of the FrameworkDeployment.
    id str
    The provider-assigned unique ID for this managed resource.
    name str
    Identifier. FrameworkDeployment name in the following format: organizations/{organization}/locations/{location}/frameworkDeployments/{framework_deployment_id}
    target_resource_display_name str
    The display name of the target resource.
    update_time str
    The time at which the resource last updated.
    cloudControlDeploymentReferences List<Property Map>
    The references to the cloud control deployments. It has all the CloudControlDeployments which are either directly added in the framework or through a CloudControlGroup. Example: If a framework deployment deploys two cloud controls, cc-deployment-1 and cc-deployment-2, then the cloud_control_deployment_references will be: { cloud_control_deployment_reference: { cloud_control_deployment: "organizations/{organization}/locations/{location}/cloudControlDeployments/cc-deployment-1" }, cloud_control_deployment_reference: { cloud_control_deployment: "organizations/{organization}/locations/{location}/cloudControlDeployments/cc-deployment-2" } Structure is documented below.
    computedTargetResource String
    The resource on which the Framework is deployed based on the provided TargetResourceConfig in the following format: organizations/{organization}, folders/{folder} or projects/{project}
    createTime String
    The time at which the resource was created.
    deploymentState String
    The deployment state of the framework. Possible values: DEPLOYMENT_STATE_VALIDATING DEPLOYMENT_STATE_CREATING DEPLOYMENT_STATE_DELETING DEPLOYMENT_STATE_FAILED DEPLOYMENT_STATE_READY DEPLOYMENT_STATE_PARTIALLY_DEPLOYED DEPLOYMENT_STATE_PARTIALLY_DELETED
    etag String
    To prevent concurrent updates from overwriting each other, always provide the etag when you update a FrameworkDeployment. You can also provide the etag when you delete a FrameworkDeployment, to help ensure that you're deleting the intended version of the FrameworkDeployment.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Identifier. FrameworkDeployment name in the following format: organizations/{organization}/locations/{location}/frameworkDeployments/{framework_deployment_id}
    targetResourceDisplayName String
    The display name of the target resource.
    updateTime String
    The time at which the resource last updated.

    Look up Existing FrameworkDeployment Resource

    Get an existing FrameworkDeployment resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: FrameworkDeploymentState, opts?: CustomResourceOptions): FrameworkDeployment
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        cloud_control_deployment_references: Optional[Sequence[FrameworkDeploymentCloudControlDeploymentReferenceArgs]] = None,
        cloud_control_metadatas: Optional[Sequence[FrameworkDeploymentCloudControlMetadataArgs]] = None,
        computed_target_resource: Optional[str] = None,
        create_time: Optional[str] = None,
        deployment_state: Optional[str] = None,
        description: Optional[str] = None,
        etag: Optional[str] = None,
        framework: Optional[FrameworkDeploymentFrameworkArgs] = None,
        framework_deployment_id: Optional[str] = None,
        location: Optional[str] = None,
        name: Optional[str] = None,
        organization: Optional[str] = None,
        target_resource_config: Optional[FrameworkDeploymentTargetResourceConfigArgs] = None,
        target_resource_display_name: Optional[str] = None,
        update_time: Optional[str] = None) -> FrameworkDeployment
    func GetFrameworkDeployment(ctx *Context, name string, id IDInput, state *FrameworkDeploymentState, opts ...ResourceOption) (*FrameworkDeployment, error)
    public static FrameworkDeployment Get(string name, Input<string> id, FrameworkDeploymentState? state, CustomResourceOptions? opts = null)
    public static FrameworkDeployment get(String name, Output<String> id, FrameworkDeploymentState state, CustomResourceOptions options)
    resources:  _:    type: gcp:cloudsecuritycompliance:FrameworkDeployment    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    CloudControlDeploymentReferences List<FrameworkDeploymentCloudControlDeploymentReference>
    The references to the cloud control deployments. It has all the CloudControlDeployments which are either directly added in the framework or through a CloudControlGroup. Example: If a framework deployment deploys two cloud controls, cc-deployment-1 and cc-deployment-2, then the cloud_control_deployment_references will be: { cloud_control_deployment_reference: { cloud_control_deployment: "organizations/{organization}/locations/{location}/cloudControlDeployments/cc-deployment-1" }, cloud_control_deployment_reference: { cloud_control_deployment: "organizations/{organization}/locations/{location}/cloudControlDeployments/cc-deployment-2" } Structure is documented below.
    CloudControlMetadatas List<FrameworkDeploymentCloudControlMetadata>
    Deployment mode and parameters for each of the Cloud Controls in the framework. Every Cloud Control in the framework must have a CloudControlMetadata. Structure is documented below.
    ComputedTargetResource string
    The resource on which the Framework is deployed based on the provided TargetResourceConfig in the following format: organizations/{organization}, folders/{folder} or projects/{project}
    CreateTime string
    The time at which the resource was created.
    DeploymentState string
    The deployment state of the framework. Possible values: DEPLOYMENT_STATE_VALIDATING DEPLOYMENT_STATE_CREATING DEPLOYMENT_STATE_DELETING DEPLOYMENT_STATE_FAILED DEPLOYMENT_STATE_READY DEPLOYMENT_STATE_PARTIALLY_DEPLOYED DEPLOYMENT_STATE_PARTIALLY_DELETED
    Description string
    User provided description of the Framework deployment
    Etag string
    To prevent concurrent updates from overwriting each other, always provide the etag when you update a FrameworkDeployment. You can also provide the etag when you delete a FrameworkDeployment, to help ensure that you're deleting the intended version of the FrameworkDeployment.
    Framework FrameworkDeploymentFramework
    FrameworkReference contains the reference of a framework. Structure is documented below.
    FrameworkDeploymentId string
    User provided identifier. It should be unique in scope of a parent. This is optional and if not provided, a random UUID will be generated.
    Location string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    Name string
    Identifier. FrameworkDeployment name in the following format: organizations/{organization}/locations/{location}/frameworkDeployments/{framework_deployment_id}
    Organization string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    TargetResourceConfig FrameworkDeploymentTargetResourceConfig
    TargetResourceConfig contains either the name of the target_resource or contains the config to create a new target_resource. Structure is documented below.
    TargetResourceDisplayName string
    The display name of the target resource.
    UpdateTime string
    The time at which the resource last updated.
    CloudControlDeploymentReferences []FrameworkDeploymentCloudControlDeploymentReferenceArgs
    The references to the cloud control deployments. It has all the CloudControlDeployments which are either directly added in the framework or through a CloudControlGroup. Example: If a framework deployment deploys two cloud controls, cc-deployment-1 and cc-deployment-2, then the cloud_control_deployment_references will be: { cloud_control_deployment_reference: { cloud_control_deployment: "organizations/{organization}/locations/{location}/cloudControlDeployments/cc-deployment-1" }, cloud_control_deployment_reference: { cloud_control_deployment: "organizations/{organization}/locations/{location}/cloudControlDeployments/cc-deployment-2" } Structure is documented below.
    CloudControlMetadatas []FrameworkDeploymentCloudControlMetadataArgs
    Deployment mode and parameters for each of the Cloud Controls in the framework. Every Cloud Control in the framework must have a CloudControlMetadata. Structure is documented below.
    ComputedTargetResource string
    The resource on which the Framework is deployed based on the provided TargetResourceConfig in the following format: organizations/{organization}, folders/{folder} or projects/{project}
    CreateTime string
    The time at which the resource was created.
    DeploymentState string
    The deployment state of the framework. Possible values: DEPLOYMENT_STATE_VALIDATING DEPLOYMENT_STATE_CREATING DEPLOYMENT_STATE_DELETING DEPLOYMENT_STATE_FAILED DEPLOYMENT_STATE_READY DEPLOYMENT_STATE_PARTIALLY_DEPLOYED DEPLOYMENT_STATE_PARTIALLY_DELETED
    Description string
    User provided description of the Framework deployment
    Etag string
    To prevent concurrent updates from overwriting each other, always provide the etag when you update a FrameworkDeployment. You can also provide the etag when you delete a FrameworkDeployment, to help ensure that you're deleting the intended version of the FrameworkDeployment.
    Framework FrameworkDeploymentFrameworkArgs
    FrameworkReference contains the reference of a framework. Structure is documented below.
    FrameworkDeploymentId string
    User provided identifier. It should be unique in scope of a parent. This is optional and if not provided, a random UUID will be generated.
    Location string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    Name string
    Identifier. FrameworkDeployment name in the following format: organizations/{organization}/locations/{location}/frameworkDeployments/{framework_deployment_id}
    Organization string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    TargetResourceConfig FrameworkDeploymentTargetResourceConfigArgs
    TargetResourceConfig contains either the name of the target_resource or contains the config to create a new target_resource. Structure is documented below.
    TargetResourceDisplayName string
    The display name of the target resource.
    UpdateTime string
    The time at which the resource last updated.
    cloudControlDeploymentReferences List<FrameworkDeploymentCloudControlDeploymentReference>
    The references to the cloud control deployments. It has all the CloudControlDeployments which are either directly added in the framework or through a CloudControlGroup. Example: If a framework deployment deploys two cloud controls, cc-deployment-1 and cc-deployment-2, then the cloud_control_deployment_references will be: { cloud_control_deployment_reference: { cloud_control_deployment: "organizations/{organization}/locations/{location}/cloudControlDeployments/cc-deployment-1" }, cloud_control_deployment_reference: { cloud_control_deployment: "organizations/{organization}/locations/{location}/cloudControlDeployments/cc-deployment-2" } Structure is documented below.
    cloudControlMetadatas List<FrameworkDeploymentCloudControlMetadata>
    Deployment mode and parameters for each of the Cloud Controls in the framework. Every Cloud Control in the framework must have a CloudControlMetadata. Structure is documented below.
    computedTargetResource String
    The resource on which the Framework is deployed based on the provided TargetResourceConfig in the following format: organizations/{organization}, folders/{folder} or projects/{project}
    createTime String
    The time at which the resource was created.
    deploymentState String
    The deployment state of the framework. Possible values: DEPLOYMENT_STATE_VALIDATING DEPLOYMENT_STATE_CREATING DEPLOYMENT_STATE_DELETING DEPLOYMENT_STATE_FAILED DEPLOYMENT_STATE_READY DEPLOYMENT_STATE_PARTIALLY_DEPLOYED DEPLOYMENT_STATE_PARTIALLY_DELETED
    description String
    User provided description of the Framework deployment
    etag String
    To prevent concurrent updates from overwriting each other, always provide the etag when you update a FrameworkDeployment. You can also provide the etag when you delete a FrameworkDeployment, to help ensure that you're deleting the intended version of the FrameworkDeployment.
    framework FrameworkDeploymentFramework
    FrameworkReference contains the reference of a framework. Structure is documented below.
    frameworkDeploymentId String
    User provided identifier. It should be unique in scope of a parent. This is optional and if not provided, a random UUID will be generated.
    location String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    name String
    Identifier. FrameworkDeployment name in the following format: organizations/{organization}/locations/{location}/frameworkDeployments/{framework_deployment_id}
    organization String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    targetResourceConfig FrameworkDeploymentTargetResourceConfig
    TargetResourceConfig contains either the name of the target_resource or contains the config to create a new target_resource. Structure is documented below.
    targetResourceDisplayName String
    The display name of the target resource.
    updateTime String
    The time at which the resource last updated.
    cloudControlDeploymentReferences FrameworkDeploymentCloudControlDeploymentReference[]
    The references to the cloud control deployments. It has all the CloudControlDeployments which are either directly added in the framework or through a CloudControlGroup. Example: If a framework deployment deploys two cloud controls, cc-deployment-1 and cc-deployment-2, then the cloud_control_deployment_references will be: { cloud_control_deployment_reference: { cloud_control_deployment: "organizations/{organization}/locations/{location}/cloudControlDeployments/cc-deployment-1" }, cloud_control_deployment_reference: { cloud_control_deployment: "organizations/{organization}/locations/{location}/cloudControlDeployments/cc-deployment-2" } Structure is documented below.
    cloudControlMetadatas FrameworkDeploymentCloudControlMetadata[]
    Deployment mode and parameters for each of the Cloud Controls in the framework. Every Cloud Control in the framework must have a CloudControlMetadata. Structure is documented below.
    computedTargetResource string
    The resource on which the Framework is deployed based on the provided TargetResourceConfig in the following format: organizations/{organization}, folders/{folder} or projects/{project}
    createTime string
    The time at which the resource was created.
    deploymentState string
    The deployment state of the framework. Possible values: DEPLOYMENT_STATE_VALIDATING DEPLOYMENT_STATE_CREATING DEPLOYMENT_STATE_DELETING DEPLOYMENT_STATE_FAILED DEPLOYMENT_STATE_READY DEPLOYMENT_STATE_PARTIALLY_DEPLOYED DEPLOYMENT_STATE_PARTIALLY_DELETED
    description string
    User provided description of the Framework deployment
    etag string
    To prevent concurrent updates from overwriting each other, always provide the etag when you update a FrameworkDeployment. You can also provide the etag when you delete a FrameworkDeployment, to help ensure that you're deleting the intended version of the FrameworkDeployment.
    framework FrameworkDeploymentFramework
    FrameworkReference contains the reference of a framework. Structure is documented below.
    frameworkDeploymentId string
    User provided identifier. It should be unique in scope of a parent. This is optional and if not provided, a random UUID will be generated.
    location string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    name string
    Identifier. FrameworkDeployment name in the following format: organizations/{organization}/locations/{location}/frameworkDeployments/{framework_deployment_id}
    organization string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    targetResourceConfig FrameworkDeploymentTargetResourceConfig
    TargetResourceConfig contains either the name of the target_resource or contains the config to create a new target_resource. Structure is documented below.
    targetResourceDisplayName string
    The display name of the target resource.
    updateTime string
    The time at which the resource last updated.
    cloud_control_deployment_references Sequence[FrameworkDeploymentCloudControlDeploymentReferenceArgs]
    The references to the cloud control deployments. It has all the CloudControlDeployments which are either directly added in the framework or through a CloudControlGroup. Example: If a framework deployment deploys two cloud controls, cc-deployment-1 and cc-deployment-2, then the cloud_control_deployment_references will be: { cloud_control_deployment_reference: { cloud_control_deployment: "organizations/{organization}/locations/{location}/cloudControlDeployments/cc-deployment-1" }, cloud_control_deployment_reference: { cloud_control_deployment: "organizations/{organization}/locations/{location}/cloudControlDeployments/cc-deployment-2" } Structure is documented below.
    cloud_control_metadatas Sequence[FrameworkDeploymentCloudControlMetadataArgs]
    Deployment mode and parameters for each of the Cloud Controls in the framework. Every Cloud Control in the framework must have a CloudControlMetadata. Structure is documented below.
    computed_target_resource str
    The resource on which the Framework is deployed based on the provided TargetResourceConfig in the following format: organizations/{organization}, folders/{folder} or projects/{project}
    create_time str
    The time at which the resource was created.
    deployment_state str
    The deployment state of the framework. Possible values: DEPLOYMENT_STATE_VALIDATING DEPLOYMENT_STATE_CREATING DEPLOYMENT_STATE_DELETING DEPLOYMENT_STATE_FAILED DEPLOYMENT_STATE_READY DEPLOYMENT_STATE_PARTIALLY_DEPLOYED DEPLOYMENT_STATE_PARTIALLY_DELETED
    description str
    User provided description of the Framework deployment
    etag str
    To prevent concurrent updates from overwriting each other, always provide the etag when you update a FrameworkDeployment. You can also provide the etag when you delete a FrameworkDeployment, to help ensure that you're deleting the intended version of the FrameworkDeployment.
    framework FrameworkDeploymentFrameworkArgs
    FrameworkReference contains the reference of a framework. Structure is documented below.
    framework_deployment_id str
    User provided identifier. It should be unique in scope of a parent. This is optional and if not provided, a random UUID will be generated.
    location str
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    name str
    Identifier. FrameworkDeployment name in the following format: organizations/{organization}/locations/{location}/frameworkDeployments/{framework_deployment_id}
    organization str
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    target_resource_config FrameworkDeploymentTargetResourceConfigArgs
    TargetResourceConfig contains either the name of the target_resource or contains the config to create a new target_resource. Structure is documented below.
    target_resource_display_name str
    The display name of the target resource.
    update_time str
    The time at which the resource last updated.
    cloudControlDeploymentReferences List<Property Map>
    The references to the cloud control deployments. It has all the CloudControlDeployments which are either directly added in the framework or through a CloudControlGroup. Example: If a framework deployment deploys two cloud controls, cc-deployment-1 and cc-deployment-2, then the cloud_control_deployment_references will be: { cloud_control_deployment_reference: { cloud_control_deployment: "organizations/{organization}/locations/{location}/cloudControlDeployments/cc-deployment-1" }, cloud_control_deployment_reference: { cloud_control_deployment: "organizations/{organization}/locations/{location}/cloudControlDeployments/cc-deployment-2" } Structure is documented below.
    cloudControlMetadatas List<Property Map>
    Deployment mode and parameters for each of the Cloud Controls in the framework. Every Cloud Control in the framework must have a CloudControlMetadata. Structure is documented below.
    computedTargetResource String
    The resource on which the Framework is deployed based on the provided TargetResourceConfig in the following format: organizations/{organization}, folders/{folder} or projects/{project}
    createTime String
    The time at which the resource was created.
    deploymentState String
    The deployment state of the framework. Possible values: DEPLOYMENT_STATE_VALIDATING DEPLOYMENT_STATE_CREATING DEPLOYMENT_STATE_DELETING DEPLOYMENT_STATE_FAILED DEPLOYMENT_STATE_READY DEPLOYMENT_STATE_PARTIALLY_DEPLOYED DEPLOYMENT_STATE_PARTIALLY_DELETED
    description String
    User provided description of the Framework deployment
    etag String
    To prevent concurrent updates from overwriting each other, always provide the etag when you update a FrameworkDeployment. You can also provide the etag when you delete a FrameworkDeployment, to help ensure that you're deleting the intended version of the FrameworkDeployment.
    framework Property Map
    FrameworkReference contains the reference of a framework. Structure is documented below.
    frameworkDeploymentId String
    User provided identifier. It should be unique in scope of a parent. This is optional and if not provided, a random UUID will be generated.
    location String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    name String
    Identifier. FrameworkDeployment name in the following format: organizations/{organization}/locations/{location}/frameworkDeployments/{framework_deployment_id}
    organization String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    targetResourceConfig Property Map
    TargetResourceConfig contains either the name of the target_resource or contains the config to create a new target_resource. Structure is documented below.
    targetResourceDisplayName String
    The display name of the target resource.
    updateTime String
    The time at which the resource last updated.

    Supporting Types

    FrameworkDeploymentCloudControlDeploymentReference, FrameworkDeploymentCloudControlDeploymentReferenceArgs

    CloudControlDeployment string
    (Output) The name of the CloudControlDeployment. The format is: organizations/{org}/locations/{location}/cloudControlDeployments/{cloud_control_deployment_id}
    CloudControlDeployment string
    (Output) The name of the CloudControlDeployment. The format is: organizations/{org}/locations/{location}/cloudControlDeployments/{cloud_control_deployment_id}
    cloudControlDeployment String
    (Output) The name of the CloudControlDeployment. The format is: organizations/{org}/locations/{location}/cloudControlDeployments/{cloud_control_deployment_id}
    cloudControlDeployment string
    (Output) The name of the CloudControlDeployment. The format is: organizations/{org}/locations/{location}/cloudControlDeployments/{cloud_control_deployment_id}
    cloud_control_deployment str
    (Output) The name of the CloudControlDeployment. The format is: organizations/{org}/locations/{location}/cloudControlDeployments/{cloud_control_deployment_id}
    cloudControlDeployment String
    (Output) The name of the CloudControlDeployment. The format is: organizations/{org}/locations/{location}/cloudControlDeployments/{cloud_control_deployment_id}

    FrameworkDeploymentCloudControlMetadata, FrameworkDeploymentCloudControlMetadataArgs

    CloudControlDetails FrameworkDeploymentCloudControlMetadataCloudControlDetails
    CloudControlDetails contains the details of a CloudControl. Structure is documented below.
    EnforcementMode string
    Enforcement mode for the framework deployment. Possible values: PREVENTIVE DETECTIVE AUDIT
    CloudControlDetails FrameworkDeploymentCloudControlMetadataCloudControlDetails
    CloudControlDetails contains the details of a CloudControl. Structure is documented below.
    EnforcementMode string
    Enforcement mode for the framework deployment. Possible values: PREVENTIVE DETECTIVE AUDIT
    cloudControlDetails FrameworkDeploymentCloudControlMetadataCloudControlDetails
    CloudControlDetails contains the details of a CloudControl. Structure is documented below.
    enforcementMode String
    Enforcement mode for the framework deployment. Possible values: PREVENTIVE DETECTIVE AUDIT
    cloudControlDetails FrameworkDeploymentCloudControlMetadataCloudControlDetails
    CloudControlDetails contains the details of a CloudControl. Structure is documented below.
    enforcementMode string
    Enforcement mode for the framework deployment. Possible values: PREVENTIVE DETECTIVE AUDIT
    cloud_control_details FrameworkDeploymentCloudControlMetadataCloudControlDetails
    CloudControlDetails contains the details of a CloudControl. Structure is documented below.
    enforcement_mode str
    Enforcement mode for the framework deployment. Possible values: PREVENTIVE DETECTIVE AUDIT
    cloudControlDetails Property Map
    CloudControlDetails contains the details of a CloudControl. Structure is documented below.
    enforcementMode String
    Enforcement mode for the framework deployment. Possible values: PREVENTIVE DETECTIVE AUDIT

    FrameworkDeploymentCloudControlMetadataCloudControlDetails, FrameworkDeploymentCloudControlMetadataCloudControlDetailsArgs

    MajorRevisionId string
    Major revision of cloudcontrol
    Name string
    The name of the CloudControl in the format: “organizations/{organization}/locations/{location}/ cloudControls/{cloud-control}”
    Parameters List<FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameter>
    Parameters is a key-value pair that is required by the CloudControl. The specification of these parameters will be present in cloudcontrol.Eg: { "name": "location","value": "us-west-1"}. Structure is documented below.
    MajorRevisionId string
    Major revision of cloudcontrol
    Name string
    The name of the CloudControl in the format: “organizations/{organization}/locations/{location}/ cloudControls/{cloud-control}”
    Parameters []FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameter
    Parameters is a key-value pair that is required by the CloudControl. The specification of these parameters will be present in cloudcontrol.Eg: { "name": "location","value": "us-west-1"}. Structure is documented below.
    majorRevisionId String
    Major revision of cloudcontrol
    name String
    The name of the CloudControl in the format: “organizations/{organization}/locations/{location}/ cloudControls/{cloud-control}”
    parameters List<FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameter>
    Parameters is a key-value pair that is required by the CloudControl. The specification of these parameters will be present in cloudcontrol.Eg: { "name": "location","value": "us-west-1"}. Structure is documented below.
    majorRevisionId string
    Major revision of cloudcontrol
    name string
    The name of the CloudControl in the format: “organizations/{organization}/locations/{location}/ cloudControls/{cloud-control}”
    parameters FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameter[]
    Parameters is a key-value pair that is required by the CloudControl. The specification of these parameters will be present in cloudcontrol.Eg: { "name": "location","value": "us-west-1"}. Structure is documented below.
    major_revision_id str
    Major revision of cloudcontrol
    name str
    The name of the CloudControl in the format: “organizations/{organization}/locations/{location}/ cloudControls/{cloud-control}”
    parameters Sequence[FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameter]
    Parameters is a key-value pair that is required by the CloudControl. The specification of these parameters will be present in cloudcontrol.Eg: { "name": "location","value": "us-west-1"}. Structure is documented below.
    majorRevisionId String
    Major revision of cloudcontrol
    name String
    The name of the CloudControl in the format: “organizations/{organization}/locations/{location}/ cloudControls/{cloud-control}”
    parameters List<Property Map>
    Parameters is a key-value pair that is required by the CloudControl. The specification of these parameters will be present in cloudcontrol.Eg: { "name": "location","value": "us-west-1"}. Structure is documented below.

    FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameter, FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameterArgs

    Name string
    The name of the parameter.
    ParameterValue FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameterParameterValue
    Possible parameter value types. Structure is documented below.
    Name string
    The name of the parameter.
    ParameterValue FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameterParameterValue
    Possible parameter value types. Structure is documented below.
    name String
    The name of the parameter.
    parameterValue FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameterParameterValue
    Possible parameter value types. Structure is documented below.
    name string
    The name of the parameter.
    parameterValue FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameterParameterValue
    Possible parameter value types. Structure is documented below.
    name str
    The name of the parameter.
    parameter_value FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameterParameterValue
    Possible parameter value types. Structure is documented below.
    name String
    The name of the parameter.
    parameterValue Property Map
    Possible parameter value types. Structure is documented below.

    FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameterParameterValue, FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameterParameterValueArgs

    BoolValue bool
    Represents a boolean value.
    NumberValue double
    Represents a double value.
    StringListValue FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameterParameterValueStringListValue
    A list of strings. Structure is documented below.
    StringValue string
    Represents a string value.
    BoolValue bool
    Represents a boolean value.
    NumberValue float64
    Represents a double value.
    StringListValue FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameterParameterValueStringListValue
    A list of strings. Structure is documented below.
    StringValue string
    Represents a string value.
    boolValue Boolean
    Represents a boolean value.
    numberValue Double
    Represents a double value.
    stringListValue FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameterParameterValueStringListValue
    A list of strings. Structure is documented below.
    stringValue String
    Represents a string value.
    boolValue boolean
    Represents a boolean value.
    numberValue number
    Represents a double value.
    stringListValue FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameterParameterValueStringListValue
    A list of strings. Structure is documented below.
    stringValue string
    Represents a string value.
    bool_value bool
    Represents a boolean value.
    number_value float
    Represents a double value.
    string_list_value FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameterParameterValueStringListValue
    A list of strings. Structure is documented below.
    string_value str
    Represents a string value.
    boolValue Boolean
    Represents a boolean value.
    numberValue Number
    Represents a double value.
    stringListValue Property Map
    A list of strings. Structure is documented below.
    stringValue String
    Represents a string value.

    FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameterParameterValueStringListValue, FrameworkDeploymentCloudControlMetadataCloudControlDetailsParameterParameterValueStringListValueArgs

    Values List<string>
    The strings in the list.
    Values []string
    The strings in the list.
    values List<String>
    The strings in the list.
    values string[]
    The strings in the list.
    values Sequence[str]
    The strings in the list.
    values List<String>
    The strings in the list.

    FrameworkDeploymentFramework, FrameworkDeploymentFrameworkArgs

    Framework string
    In the format: organizations/{org}/locations/{location}/frameworks/{framework}
    MajorRevisionId string
    Major revision id of the framework.
    Framework string
    In the format: organizations/{org}/locations/{location}/frameworks/{framework}
    MajorRevisionId string
    Major revision id of the framework.
    framework String
    In the format: organizations/{org}/locations/{location}/frameworks/{framework}
    majorRevisionId String
    Major revision id of the framework.
    framework string
    In the format: organizations/{org}/locations/{location}/frameworks/{framework}
    majorRevisionId string
    Major revision id of the framework.
    framework str
    In the format: organizations/{org}/locations/{location}/frameworks/{framework}
    major_revision_id str
    Major revision id of the framework.
    framework String
    In the format: organizations/{org}/locations/{location}/frameworks/{framework}
    majorRevisionId String
    Major revision id of the framework.

    FrameworkDeploymentTargetResourceConfig, FrameworkDeploymentTargetResourceConfigArgs

    ExistingTargetResource string
    CRM node in format organizations/{organization}, folders/{folder}, or projects/{project}
    TargetResourceCreationConfig FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfig
    TargetResourceCreationConfig contains the config to create a new resource to be used as the target_resource of a deployment. Structure is documented below.
    ExistingTargetResource string
    CRM node in format organizations/{organization}, folders/{folder}, or projects/{project}
    TargetResourceCreationConfig FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfig
    TargetResourceCreationConfig contains the config to create a new resource to be used as the target_resource of a deployment. Structure is documented below.
    existingTargetResource String
    CRM node in format organizations/{organization}, folders/{folder}, or projects/{project}
    targetResourceCreationConfig FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfig
    TargetResourceCreationConfig contains the config to create a new resource to be used as the target_resource of a deployment. Structure is documented below.
    existingTargetResource string
    CRM node in format organizations/{organization}, folders/{folder}, or projects/{project}
    targetResourceCreationConfig FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfig
    TargetResourceCreationConfig contains the config to create a new resource to be used as the target_resource of a deployment. Structure is documented below.
    existing_target_resource str
    CRM node in format organizations/{organization}, folders/{folder}, or projects/{project}
    target_resource_creation_config FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfig
    TargetResourceCreationConfig contains the config to create a new resource to be used as the target_resource of a deployment. Structure is documented below.
    existingTargetResource String
    CRM node in format organizations/{organization}, folders/{folder}, or projects/{project}
    targetResourceCreationConfig Property Map
    TargetResourceCreationConfig contains the config to create a new resource to be used as the target_resource of a deployment. Structure is documented below.

    FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfig, FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfigArgs

    FolderCreationConfig FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfigFolderCreationConfig
    FolderCreationConfig contains the config to create a new folder to be used as the target_resource of a deployment. Structure is documented below.
    ProjectCreationConfig FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfigProjectCreationConfig
    ProjectCreationConfig contains the config to create a new project to be used as the target_resource of a deployment. Structure is documented below.
    FolderCreationConfig FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfigFolderCreationConfig
    FolderCreationConfig contains the config to create a new folder to be used as the target_resource of a deployment. Structure is documented below.
    ProjectCreationConfig FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfigProjectCreationConfig
    ProjectCreationConfig contains the config to create a new project to be used as the target_resource of a deployment. Structure is documented below.
    folderCreationConfig FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfigFolderCreationConfig
    FolderCreationConfig contains the config to create a new folder to be used as the target_resource of a deployment. Structure is documented below.
    projectCreationConfig FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfigProjectCreationConfig
    ProjectCreationConfig contains the config to create a new project to be used as the target_resource of a deployment. Structure is documented below.
    folderCreationConfig FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfigFolderCreationConfig
    FolderCreationConfig contains the config to create a new folder to be used as the target_resource of a deployment. Structure is documented below.
    projectCreationConfig FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfigProjectCreationConfig
    ProjectCreationConfig contains the config to create a new project to be used as the target_resource of a deployment. Structure is documented below.
    folder_creation_config FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfigFolderCreationConfig
    FolderCreationConfig contains the config to create a new folder to be used as the target_resource of a deployment. Structure is documented below.
    project_creation_config FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfigProjectCreationConfig
    ProjectCreationConfig contains the config to create a new project to be used as the target_resource of a deployment. Structure is documented below.
    folderCreationConfig Property Map
    FolderCreationConfig contains the config to create a new folder to be used as the target_resource of a deployment. Structure is documented below.
    projectCreationConfig Property Map
    ProjectCreationConfig contains the config to create a new project to be used as the target_resource of a deployment. Structure is documented below.

    FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfigFolderCreationConfig, FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfigFolderCreationConfigArgs

    FolderDisplayName string
    Display name of the folder to be created
    Parent string
    The parent of the folder to be created. It can be an organizations/{org} or folders/{folder}
    FolderDisplayName string
    Display name of the folder to be created
    Parent string
    The parent of the folder to be created. It can be an organizations/{org} or folders/{folder}
    folderDisplayName String
    Display name of the folder to be created
    parent String
    The parent of the folder to be created. It can be an organizations/{org} or folders/{folder}
    folderDisplayName string
    Display name of the folder to be created
    parent string
    The parent of the folder to be created. It can be an organizations/{org} or folders/{folder}
    folder_display_name str
    Display name of the folder to be created
    parent str
    The parent of the folder to be created. It can be an organizations/{org} or folders/{folder}
    folderDisplayName String
    Display name of the folder to be created
    parent String
    The parent of the folder to be created. It can be an organizations/{org} or folders/{folder}

    FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfigProjectCreationConfig, FrameworkDeploymentTargetResourceConfigTargetResourceCreationConfigProjectCreationConfigArgs

    BillingAccountId string
    Billing account id to be used for the project.
    Parent string
    organizations/{org} or folders/{folder}
    ProjectDisplayName string
    Display name of the project to be created.
    BillingAccountId string
    Billing account id to be used for the project.
    Parent string
    organizations/{org} or folders/{folder}
    ProjectDisplayName string
    Display name of the project to be created.
    billingAccountId String
    Billing account id to be used for the project.
    parent String
    organizations/{org} or folders/{folder}
    projectDisplayName String
    Display name of the project to be created.
    billingAccountId string
    Billing account id to be used for the project.
    parent string
    organizations/{org} or folders/{folder}
    projectDisplayName string
    Display name of the project to be created.
    billing_account_id str
    Billing account id to be used for the project.
    parent str
    organizations/{org} or folders/{folder}
    project_display_name str
    Display name of the project to be created.
    billingAccountId String
    Billing account id to be used for the project.
    parent String
    organizations/{org} or folders/{folder}
    projectDisplayName String
    Display name of the project to be created.

    Import

    FrameworkDeployment can be imported using any of these accepted formats:

    • organizations/{{organization}}/locations/{{location}}/frameworkDeployments/{{framework_deployment_id}}

    • {{organization}}/{{location}}/{{framework_deployment_id}}

    When using the pulumi import command, FrameworkDeployment can be imported using one of the formats above. For example:

    $ pulumi import gcp:cloudsecuritycompliance/frameworkDeployment:FrameworkDeployment default organizations/{{organization}}/locations/{{location}}/frameworkDeployments/{{framework_deployment_id}}

    $ pulumi import gcp:cloudsecuritycompliance/frameworkDeployment:FrameworkDeployment default {{organization}}/{{location}}/{{framework_deployment_id}}

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Google Cloud (GCP) Classic pulumi/pulumi-gcp
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the google-beta Terraform Provider.
    gcp logo
    Google Cloud v9.6.0 published on Wednesday, Nov 26, 2025 by Pulumi
    Schema (JSON)
    pulumi/pulumi-gcp
      Meet Neo: Your AI Platform Teammate