Docs Packages
  1. Packages
  2. Google Cloud Native
  3. API Docs
  4. assuredworkloads
  5. assuredworkloads/v1
  6. Workload

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

google-native.assuredworkloads/v1.Workload

Explore with Pulumi AI

google-native logo

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

    Creates Assured Workload.

    Create Workload Resource

    new Workload(name: string, args: WorkloadArgs, opts?: CustomResourceOptions);
    @overload
def Workload(resource_name: str,
             opts: Optional[ResourceOptions] = None,
             billing_account: Optional[str] = None,
             compliance_regime: Optional[WorkloadComplianceRegime] = None,
             display_name: Optional[str] = None,
             enable_sovereign_controls: Optional[bool] = None,
             etag: Optional[str] = None,
             external_id: Optional[str] = None,
             kms_settings: Optional[GoogleCloudAssuredworkloadsV1WorkloadKMSSettingsArgs] = None,
             labels: Optional[Mapping[str, str]] = None,
             location: Optional[str] = None,
             name: Optional[str] = None,
             organization_id: Optional[str] = None,
             partner: Optional[WorkloadPartner] = None,
             partner_permissions: Optional[GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissionsArgs] = None,
             provisioned_resources_parent: Optional[str] = None,
             resource_settings: Optional[Sequence[GoogleCloudAssuredworkloadsV1WorkloadResourceSettingsArgs]] = None,
             violation_notifications_enabled: Optional[bool] = None)
@overload
def Workload(resource_name: str,
             args: WorkloadArgs,
             opts: Optional[ResourceOptions] = None)
    func NewWorkload(ctx *Context, name string, args WorkloadArgs, opts ...ResourceOption) (*Workload, error)
    public Workload(string name, WorkloadArgs args, CustomResourceOptions? opts = null)
    public Workload(String name, WorkloadArgs args)
public Workload(String name, WorkloadArgs args, CustomResourceOptions options)

    type: google-native:assuredworkloads/v1:Workload
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args WorkloadArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args WorkloadArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args WorkloadArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args WorkloadArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args WorkloadArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Workload Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The Workload resource accepts the following input properties:

    ComplianceRegime Pulumi.GoogleNative.AssuredWorkloads.V1.WorkloadComplianceRegime

    Immutable. Compliance Regime associated with this workload.

    DisplayName string

    The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload

    OrganizationId string
    BillingAccount string

    Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form billingAccounts/{billing_account_id}. For example, billingAccounts/012345-567890-ABCDEF.

    EnableSovereignControls bool

    Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.

    Etag string

    Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.

    ExternalId string

    Optional. A identifier associated with the workload and underlying projects which allows for the break down of billing costs for a workload. The value provided for the identifier will add a label to the workload and contained projects with the identifier as the value.

    KmsSettings Pulumi.GoogleNative.AssuredWorkloads.V1.Inputs.GoogleCloudAssuredworkloadsV1WorkloadKMSSettings

    Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    Deprecated:

    Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    Labels Dictionary<string, string>

    Optional. Labels applied to the workload.

    Location string
    Name string

    Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.

    Partner Pulumi.GoogleNative.AssuredWorkloads.V1.WorkloadPartner

    Optional. Partner regime associated with this workload.

    PartnerPermissions Pulumi.GoogleNative.AssuredWorkloads.V1.Inputs.GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissions

    Optional. Permissions granted to the AW Partner SA account for the customer workload

    ProvisionedResourcesParent string

    Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}

    ResourceSettings List<Pulumi.GoogleNative.AssuredWorkloads.V1.Inputs.GoogleCloudAssuredworkloadsV1WorkloadResourceSettings>

    Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.

    ViolationNotificationsEnabled bool

    Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.

    ComplianceRegime WorkloadComplianceRegime

    Immutable. Compliance Regime associated with this workload.

    DisplayName string

    The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload

    OrganizationId string
    BillingAccount string

    Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form billingAccounts/{billing_account_id}. For example, billingAccounts/012345-567890-ABCDEF.

    EnableSovereignControls bool

    Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.

    Etag string

    Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.

    ExternalId string

    Optional. A identifier associated with the workload and underlying projects which allows for the break down of billing costs for a workload. The value provided for the identifier will add a label to the workload and contained projects with the identifier as the value.

    KmsSettings GoogleCloudAssuredworkloadsV1WorkloadKMSSettingsArgs

    Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    Deprecated:

    Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    Labels map[string]string

    Optional. Labels applied to the workload.

    Location string
    Name string

    Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.

    Partner WorkloadPartner

    Optional. Partner regime associated with this workload.

    PartnerPermissions GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissionsArgs

    Optional. Permissions granted to the AW Partner SA account for the customer workload

    ProvisionedResourcesParent string

    Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}

    ResourceSettings []GoogleCloudAssuredworkloadsV1WorkloadResourceSettingsArgs

    Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.

    ViolationNotificationsEnabled bool

    Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.

    complianceRegime WorkloadComplianceRegime

    Immutable. Compliance Regime associated with this workload.

    displayName String

    The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload

    organizationId String
    billingAccount String

    Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form billingAccounts/{billing_account_id}. For example, billingAccounts/012345-567890-ABCDEF.

    enableSovereignControls Boolean

    Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.

    etag String

    Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.

    externalId String

    Optional. A identifier associated with the workload and underlying projects which allows for the break down of billing costs for a workload. The value provided for the identifier will add a label to the workload and contained projects with the identifier as the value.

    kmsSettings GoogleCloudAssuredworkloadsV1WorkloadKMSSettings

    Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    Deprecated:

    Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    labels Map<String,String>

    Optional. Labels applied to the workload.

    location String
    name String

    Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.

    partner WorkloadPartner

    Optional. Partner regime associated with this workload.

    partnerPermissions GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissions

    Optional. Permissions granted to the AW Partner SA account for the customer workload

    provisionedResourcesParent String

    Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}

    resourceSettings List<GoogleCloudAssuredworkloadsV1WorkloadResourceSettings>

    Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.

    violationNotificationsEnabled Boolean

    Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.

    complianceRegime WorkloadComplianceRegime

    Immutable. Compliance Regime associated with this workload.

    displayName string

    The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload

    organizationId string
    billingAccount string

    Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form billingAccounts/{billing_account_id}. For example, billingAccounts/012345-567890-ABCDEF.

    enableSovereignControls boolean

    Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.

    etag string

    Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.

    externalId string

    Optional. A identifier associated with the workload and underlying projects which allows for the break down of billing costs for a workload. The value provided for the identifier will add a label to the workload and contained projects with the identifier as the value.

    kmsSettings GoogleCloudAssuredworkloadsV1WorkloadKMSSettings

    Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    Deprecated:

    Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    labels {[key: string]: string}

    Optional. Labels applied to the workload.

    location string
    name string

    Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.

    partner WorkloadPartner

    Optional. Partner regime associated with this workload.

    partnerPermissions GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissions

    Optional. Permissions granted to the AW Partner SA account for the customer workload

    provisionedResourcesParent string

    Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}

    resourceSettings GoogleCloudAssuredworkloadsV1WorkloadResourceSettings[]

    Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.

    violationNotificationsEnabled boolean

    Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.

    compliance_regime WorkloadComplianceRegime

    Immutable. Compliance Regime associated with this workload.

    display_name str

    The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload

    organization_id str
    billing_account str

    Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form billingAccounts/{billing_account_id}. For example, billingAccounts/012345-567890-ABCDEF.

    enable_sovereign_controls bool

    Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.

    etag str

    Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.

    external_id str

    Optional. A identifier associated with the workload and underlying projects which allows for the break down of billing costs for a workload. The value provided for the identifier will add a label to the workload and contained projects with the identifier as the value.

    kms_settings GoogleCloudAssuredworkloadsV1WorkloadKMSSettingsArgs

    Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    Deprecated:

    Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    labels Mapping[str, str]

    Optional. Labels applied to the workload.

    location str
    name str

    Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.

    partner WorkloadPartner

    Optional. Partner regime associated with this workload.

    partner_permissions GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissionsArgs

    Optional. Permissions granted to the AW Partner SA account for the customer workload

    provisioned_resources_parent str

    Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}

    resource_settings Sequence[GoogleCloudAssuredworkloadsV1WorkloadResourceSettingsArgs]

    Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.

    violation_notifications_enabled bool

    Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.

    complianceRegime "COMPLIANCE_REGIME_UNSPECIFIED" | "IL4" | "CJIS" | "FEDRAMP_HIGH" | "FEDRAMP_MODERATE" | "US_REGIONAL_ACCESS" | "HIPAA" | "HITRUST" | "EU_REGIONS_AND_SUPPORT" | "CA_REGIONS_AND_SUPPORT" | "ITAR" | "AU_REGIONS_AND_US_SUPPORT" | "ASSURED_WORKLOADS_FOR_PARTNERS" | "ISR_REGIONS" | "ISR_REGIONS_AND_SUPPORT" | "CA_PROTECTED_B" | "IL5" | "IL2" | "JP_REGIONS_AND_SUPPORT"

    Immutable. Compliance Regime associated with this workload.

    displayName String

    The user-assigned display name of the Workload. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, and spaces. Example: My Workload

    organizationId String
    billingAccount String

    Optional. The billing account used for the resources which are direct children of workload. This billing account is initially associated with the resources created as part of Workload creation. After the initial creation of these resources, the customer can change the assigned billing account. The resource name has the form billingAccounts/{billing_account_id}. For example, billingAccounts/012345-567890-ABCDEF.

    enableSovereignControls Boolean

    Optional. Indicates the sovereignty status of the given workload. Currently meant to be used by Europe/Canada customers.

    etag String

    Optional. ETag of the workload, it is calculated on the basis of the Workload contents. It will be used in Update & Delete operations.

    externalId String

    Optional. A identifier associated with the workload and underlying projects which allows for the break down of billing costs for a workload. The value provided for the identifier will add a label to the workload and contained projects with the identifier as the value.

    kmsSettings Property Map

    Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    Deprecated:

    Input only. Settings used to create a CMEK crypto key. When set, a project with a KMS CMEK key is provisioned. This field is deprecated as of Feb 28, 2022. In order to create a Keyring, callers should specify, ENCRYPTION_KEYS_PROJECT or KEYRING in ResourceSettings.resource_type field.

    labels Map<String>

    Optional. Labels applied to the workload.

    location String
    name String

    Optional. The resource name of the workload. Format: organizations/{organization}/locations/{location}/workloads/{workload} Read-only.

    partner "PARTNER_UNSPECIFIED" | "LOCAL_CONTROLS_BY_S3NS" | "SOVEREIGN_CONTROLS_BY_T_SYSTEMS" | "SOVEREIGN_CONTROLS_BY_SIA_MINSAIT" | "SOVEREIGN_CONTROLS_BY_PSN"

    Optional. Partner regime associated with this workload.

    partnerPermissions Property Map

    Optional. Permissions granted to the AW Partner SA account for the customer workload

    provisionedResourcesParent String

    Input only. The parent resource for the resources managed by this Assured Workload. May be either empty or a folder resource which is a child of the Workload parent. If not specified all resources are created under the parent organization. Format: folders/{folder_id}

    resourceSettings List<Property Map>

    Input only. Resource properties that are used to customize workload resources. These properties (such as custom project id) will be used to create workload resources if possible. This field is optional.

    violationNotificationsEnabled Boolean

    Optional. Indicates whether the e-mail notification for a violation is enabled for a workload. This value will be by default True, and if not present will be considered as true. This should only be updated via updateWorkload call. Any Changes to this field during the createWorkload call will not be honored. This will always be true while creating the workload.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Workload resource produces the following output properties:

    ComplianceStatus Pulumi.GoogleNative.AssuredWorkloads.V1.Outputs.GoogleCloudAssuredworkloadsV1WorkloadComplianceStatusResponse

    Count of active Violations in the Workload.

    CompliantButDisallowedServices List<string>

    Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.

    CreateTime string

    Immutable. The Workload creation timestamp.

    EkmProvisioningResponse Pulumi.GoogleNative.AssuredWorkloads.V1.Outputs.GoogleCloudAssuredworkloadsV1WorkloadEkmProvisioningResponseResponse

    Represents the Ekm Provisioning State of the given workload.

    Id string

    The provider-assigned unique ID for this managed resource.

    KajEnrollmentState string

    Represents the KAJ enrollment state of the given workload.

    ResourceMonitoringEnabled bool

    Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.

    Resources List<Pulumi.GoogleNative.AssuredWorkloads.V1.Outputs.GoogleCloudAssuredworkloadsV1WorkloadResourceInfoResponse>

    The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.

    SaaEnrollmentResponse Pulumi.GoogleNative.AssuredWorkloads.V1.Outputs.GoogleCloudAssuredworkloadsV1WorkloadSaaEnrollmentResponseResponse

    Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.

    ComplianceStatus GoogleCloudAssuredworkloadsV1WorkloadComplianceStatusResponse

    Count of active Violations in the Workload.

    CompliantButDisallowedServices []string

    Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.

    CreateTime string

    Immutable. The Workload creation timestamp.

    EkmProvisioningResponse GoogleCloudAssuredworkloadsV1WorkloadEkmProvisioningResponseResponse

    Represents the Ekm Provisioning State of the given workload.

    Id string

    The provider-assigned unique ID for this managed resource.

    KajEnrollmentState string

    Represents the KAJ enrollment state of the given workload.

    ResourceMonitoringEnabled bool

    Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.

    Resources []GoogleCloudAssuredworkloadsV1WorkloadResourceInfoResponse

    The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.

    SaaEnrollmentResponse GoogleCloudAssuredworkloadsV1WorkloadSaaEnrollmentResponseResponse

    Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.

    complianceStatus GoogleCloudAssuredworkloadsV1WorkloadComplianceStatusResponse

    Count of active Violations in the Workload.

    compliantButDisallowedServices List<String>

    Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.

    createTime String

    Immutable. The Workload creation timestamp.

    ekmProvisioningResponse GoogleCloudAssuredworkloadsV1WorkloadEkmProvisioningResponseResponse

    Represents the Ekm Provisioning State of the given workload.

    id String

    The provider-assigned unique ID for this managed resource.

    kajEnrollmentState String

    Represents the KAJ enrollment state of the given workload.

    resourceMonitoringEnabled Boolean

    Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.

    resources List<GoogleCloudAssuredworkloadsV1WorkloadResourceInfoResponse>

    The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.

    saaEnrollmentResponse GoogleCloudAssuredworkloadsV1WorkloadSaaEnrollmentResponseResponse

    Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.

    complianceStatus GoogleCloudAssuredworkloadsV1WorkloadComplianceStatusResponse

    Count of active Violations in the Workload.

    compliantButDisallowedServices string[]

    Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.

    createTime string

    Immutable. The Workload creation timestamp.

    ekmProvisioningResponse GoogleCloudAssuredworkloadsV1WorkloadEkmProvisioningResponseResponse

    Represents the Ekm Provisioning State of the given workload.

    id string

    The provider-assigned unique ID for this managed resource.

    kajEnrollmentState string

    Represents the KAJ enrollment state of the given workload.

    resourceMonitoringEnabled boolean

    Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.

    resources GoogleCloudAssuredworkloadsV1WorkloadResourceInfoResponse[]

    The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.

    saaEnrollmentResponse GoogleCloudAssuredworkloadsV1WorkloadSaaEnrollmentResponseResponse

    Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.

    compliance_status GoogleCloudAssuredworkloadsV1WorkloadComplianceStatusResponse

    Count of active Violations in the Workload.

    compliant_but_disallowed_services Sequence[str]

    Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.

    create_time str

    Immutable. The Workload creation timestamp.

    ekm_provisioning_response GoogleCloudAssuredworkloadsV1WorkloadEkmProvisioningResponseResponse

    Represents the Ekm Provisioning State of the given workload.

    id str

    The provider-assigned unique ID for this managed resource.

    kaj_enrollment_state str

    Represents the KAJ enrollment state of the given workload.

    resource_monitoring_enabled bool

    Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.

    resources Sequence[GoogleCloudAssuredworkloadsV1WorkloadResourceInfoResponse]

    The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.

    saa_enrollment_response GoogleCloudAssuredworkloadsV1WorkloadSaaEnrollmentResponseResponse

    Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.

    complianceStatus Property Map

    Count of active Violations in the Workload.

    compliantButDisallowedServices List<String>

    Urls for services which are compliant for this Assured Workload, but which are currently disallowed by the ResourceUsageRestriction org policy. Invoke RestrictAllowedResources endpoint to allow your project developers to use these services in their environment.

    createTime String

    Immutable. The Workload creation timestamp.

    ekmProvisioningResponse Property Map

    Represents the Ekm Provisioning State of the given workload.

    id String

    The provider-assigned unique ID for this managed resource.

    kajEnrollmentState String

    Represents the KAJ enrollment state of the given workload.

    resourceMonitoringEnabled Boolean

    Indicates whether resource monitoring is enabled for workload or not. It is true when Resource feed is subscribed to AWM topic and AWM Service Agent Role is binded to AW Service Account for resource Assured workload.

    resources List<Property Map>

    The resources associated with this workload. These resources will be created when creating the workload. If any of the projects already exist, the workload creation will fail. Always read only.

    saaEnrollmentResponse Property Map

    Represents the SAA enrollment response of the given workload. SAA enrollment response is queried during GetWorkload call. In failure cases, user friendly error message is shown in SAA details page.

    Supporting Types

    GoogleCloudAssuredworkloadsV1WorkloadComplianceStatusResponse, GoogleCloudAssuredworkloadsV1WorkloadComplianceStatusResponseArgs

    AcknowledgedResourceViolationCount int

    Number of current resource violations which are not acknowledged.

    AcknowledgedViolationCount int

    Number of current orgPolicy violations which are acknowledged.

    ActiveResourceViolationCount int

    Number of current resource violations which are acknowledged.

    ActiveViolationCount int

    Number of current orgPolicy violations which are not acknowledged.

    AcknowledgedResourceViolationCount int

    Number of current resource violations which are not acknowledged.

    AcknowledgedViolationCount int

    Number of current orgPolicy violations which are acknowledged.

    ActiveResourceViolationCount int

    Number of current resource violations which are acknowledged.

    ActiveViolationCount int

    Number of current orgPolicy violations which are not acknowledged.

    acknowledgedResourceViolationCount Integer

    Number of current resource violations which are not acknowledged.

    acknowledgedViolationCount Integer

    Number of current orgPolicy violations which are acknowledged.

    activeResourceViolationCount Integer

    Number of current resource violations which are acknowledged.

    activeViolationCount Integer

    Number of current orgPolicy violations which are not acknowledged.

    acknowledgedResourceViolationCount number

    Number of current resource violations which are not acknowledged.

    acknowledgedViolationCount number

    Number of current orgPolicy violations which are acknowledged.

    activeResourceViolationCount number

    Number of current resource violations which are acknowledged.

    activeViolationCount number

    Number of current orgPolicy violations which are not acknowledged.

    acknowledged_resource_violation_count int

    Number of current resource violations which are not acknowledged.

    acknowledged_violation_count int

    Number of current orgPolicy violations which are acknowledged.

    active_resource_violation_count int

    Number of current resource violations which are acknowledged.

    active_violation_count int

    Number of current orgPolicy violations which are not acknowledged.

    acknowledgedResourceViolationCount Number

    Number of current resource violations which are not acknowledged.

    acknowledgedViolationCount Number

    Number of current orgPolicy violations which are acknowledged.

    activeResourceViolationCount Number

    Number of current resource violations which are acknowledged.

    activeViolationCount Number

    Number of current orgPolicy violations which are not acknowledged.

    GoogleCloudAssuredworkloadsV1WorkloadEkmProvisioningResponseResponse, GoogleCloudAssuredworkloadsV1WorkloadEkmProvisioningResponseResponseArgs

    EkmProvisioningErrorDomain string

    Indicates Ekm provisioning error if any.

    EkmProvisioningErrorMapping string

    Detailed error message if Ekm provisioning fails

    EkmProvisioningState string

    Indicates Ekm enrollment Provisioning of a given workload.

    EkmProvisioningErrorDomain string

    Indicates Ekm provisioning error if any.

    EkmProvisioningErrorMapping string

    Detailed error message if Ekm provisioning fails

    EkmProvisioningState string

    Indicates Ekm enrollment Provisioning of a given workload.

    ekmProvisioningErrorDomain String

    Indicates Ekm provisioning error if any.

    ekmProvisioningErrorMapping String

    Detailed error message if Ekm provisioning fails

    ekmProvisioningState String

    Indicates Ekm enrollment Provisioning of a given workload.

    ekmProvisioningErrorDomain string

    Indicates Ekm provisioning error if any.

    ekmProvisioningErrorMapping string

    Detailed error message if Ekm provisioning fails

    ekmProvisioningState string

    Indicates Ekm enrollment Provisioning of a given workload.

    ekm_provisioning_error_domain str

    Indicates Ekm provisioning error if any.

    ekm_provisioning_error_mapping str

    Detailed error message if Ekm provisioning fails

    ekm_provisioning_state str

    Indicates Ekm enrollment Provisioning of a given workload.

    ekmProvisioningErrorDomain String

    Indicates Ekm provisioning error if any.

    ekmProvisioningErrorMapping String

    Detailed error message if Ekm provisioning fails

    ekmProvisioningState String

    Indicates Ekm enrollment Provisioning of a given workload.

    GoogleCloudAssuredworkloadsV1WorkloadKMSSettings, GoogleCloudAssuredworkloadsV1WorkloadKMSSettingsArgs

    NextRotationTime string

    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.

    RotationPeriod string

    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.

    NextRotationTime string

    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.

    RotationPeriod string

    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.

    nextRotationTime String

    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.

    rotationPeriod String

    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.

    nextRotationTime string

    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.

    rotationPeriod string

    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.

    next_rotation_time str

    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.

    rotation_period str

    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.

    nextRotationTime String

    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.

    rotationPeriod String

    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.

    GoogleCloudAssuredworkloadsV1WorkloadKMSSettingsResponse, GoogleCloudAssuredworkloadsV1WorkloadKMSSettingsResponseArgs

    NextRotationTime string

    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.

    RotationPeriod string

    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.

    NextRotationTime string

    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.

    RotationPeriod string

    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.

    nextRotationTime String

    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.

    rotationPeriod String

    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.

    nextRotationTime string

    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.

    rotationPeriod string

    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.

    next_rotation_time str

    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.

    rotation_period str

    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.

    nextRotationTime String

    Input only. Immutable. The time at which the Key Management Service will automatically create a new version of the crypto key and mark it as the primary.

    rotationPeriod String

    Input only. Immutable. [next_rotation_time] will be advanced by this period when the Key Management Service automatically rotates a key. Must be at least 24 hours and at most 876,000 hours.

    GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissions, GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissionsArgs

    AssuredWorkloadsMonitoring bool

    Optional. Allow partner to view violation alerts.

    DataLogsViewer bool

    Allow the partner to view inspectability logs and monitoring violations.

    ServiceAccessApprover bool

    Optional. Allow partner to view access approval logs.

    AssuredWorkloadsMonitoring bool

    Optional. Allow partner to view violation alerts.

    DataLogsViewer bool

    Allow the partner to view inspectability logs and monitoring violations.

    ServiceAccessApprover bool

    Optional. Allow partner to view access approval logs.

    assuredWorkloadsMonitoring Boolean

    Optional. Allow partner to view violation alerts.

    dataLogsViewer Boolean

    Allow the partner to view inspectability logs and monitoring violations.

    serviceAccessApprover Boolean

    Optional. Allow partner to view access approval logs.

    assuredWorkloadsMonitoring boolean

    Optional. Allow partner to view violation alerts.

    dataLogsViewer boolean

    Allow the partner to view inspectability logs and monitoring violations.

    serviceAccessApprover boolean

    Optional. Allow partner to view access approval logs.

    assured_workloads_monitoring bool

    Optional. Allow partner to view violation alerts.

    data_logs_viewer bool

    Allow the partner to view inspectability logs and monitoring violations.

    service_access_approver bool

    Optional. Allow partner to view access approval logs.

    assuredWorkloadsMonitoring Boolean

    Optional. Allow partner to view violation alerts.

    dataLogsViewer Boolean

    Allow the partner to view inspectability logs and monitoring violations.

    serviceAccessApprover Boolean

    Optional. Allow partner to view access approval logs.

    GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissionsResponse, GoogleCloudAssuredworkloadsV1WorkloadPartnerPermissionsResponseArgs

    AssuredWorkloadsMonitoring bool

    Optional. Allow partner to view violation alerts.

    DataLogsViewer bool

    Allow the partner to view inspectability logs and monitoring violations.

    ServiceAccessApprover bool

    Optional. Allow partner to view access approval logs.

    AssuredWorkloadsMonitoring bool

    Optional. Allow partner to view violation alerts.

    DataLogsViewer bool

    Allow the partner to view inspectability logs and monitoring violations.

    ServiceAccessApprover bool

    Optional. Allow partner to view access approval logs.

    assuredWorkloadsMonitoring Boolean

    Optional. Allow partner to view violation alerts.

    dataLogsViewer Boolean

    Allow the partner to view inspectability logs and monitoring violations.

    serviceAccessApprover Boolean

    Optional. Allow partner to view access approval logs.

    assuredWorkloadsMonitoring boolean

    Optional. Allow partner to view violation alerts.

    dataLogsViewer boolean

    Allow the partner to view inspectability logs and monitoring violations.

    serviceAccessApprover boolean

    Optional. Allow partner to view access approval logs.

    assured_workloads_monitoring bool

    Optional. Allow partner to view violation alerts.

    data_logs_viewer bool

    Allow the partner to view inspectability logs and monitoring violations.

    service_access_approver bool

    Optional. Allow partner to view access approval logs.

    assuredWorkloadsMonitoring Boolean

    Optional. Allow partner to view violation alerts.

    dataLogsViewer Boolean

    Allow the partner to view inspectability logs and monitoring violations.

    serviceAccessApprover Boolean

    Optional. Allow partner to view access approval logs.

    GoogleCloudAssuredworkloadsV1WorkloadResourceInfoResponse, GoogleCloudAssuredworkloadsV1WorkloadResourceInfoResponseArgs

    ResourceId string

    Resource identifier. For a project this represents project_number.

    ResourceType string

    Indicates the type of resource.

    ResourceId string

    Resource identifier. For a project this represents project_number.

    ResourceType string

    Indicates the type of resource.

    resourceId String

    Resource identifier. For a project this represents project_number.

    resourceType String

    Indicates the type of resource.

    resourceId string

    Resource identifier. For a project this represents project_number.

    resourceType string

    Indicates the type of resource.

    resource_id str

    Resource identifier. For a project this represents project_number.

    resource_type str

    Indicates the type of resource.

    resourceId String

    Resource identifier. For a project this represents project_number.

    resourceType String

    Indicates the type of resource.

    GoogleCloudAssuredworkloadsV1WorkloadResourceSettings, GoogleCloudAssuredworkloadsV1WorkloadResourceSettingsArgs

    DisplayName string

    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.

    ResourceId string

    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.

    ResourceType Pulumi.GoogleNative.AssuredWorkloads.V1.GoogleCloudAssuredworkloadsV1WorkloadResourceSettingsResourceType

    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)

    DisplayName string

    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.

    ResourceId string

    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.

    ResourceType GoogleCloudAssuredworkloadsV1WorkloadResourceSettingsResourceType

    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)

    displayName String

    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.

    resourceId String

    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.

    resourceType GoogleCloudAssuredworkloadsV1WorkloadResourceSettingsResourceType

    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)

    displayName string

    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.

    resourceId string

    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.

    resourceType GoogleCloudAssuredworkloadsV1WorkloadResourceSettingsResourceType

    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)

    display_name str

    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.

    resource_id str

    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.

    resource_type GoogleCloudAssuredworkloadsV1WorkloadResourceSettingsResourceType

    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)

    displayName String

    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.

    resourceId String

    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.

    resourceType "RESOURCE_TYPE_UNSPECIFIED" | "CONSUMER_PROJECT" | "CONSUMER_FOLDER" | "ENCRYPTION_KEYS_PROJECT" | "KEYRING"

    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)

    GoogleCloudAssuredworkloadsV1WorkloadResourceSettingsResourceType, GoogleCloudAssuredworkloadsV1WorkloadResourceSettingsResourceTypeArgs

    ResourceTypeUnspecified
    RESOURCE_TYPE_UNSPECIFIED

    Unknown resource type.

    ConsumerProject
    CONSUMER_PROJECT

    Deprecated. Existing workloads will continue to support this, but new CreateWorkloadRequests should not specify this as an input value.

    ConsumerFolder
    CONSUMER_FOLDER

    Consumer Folder.

    EncryptionKeysProject
    ENCRYPTION_KEYS_PROJECT

    Consumer project containing encryption keys.

    Keyring
    KEYRING

    Keyring resource that hosts encryption keys.

    GoogleCloudAssuredworkloadsV1WorkloadResourceSettingsResourceTypeResourceTypeUnspecified
    RESOURCE_TYPE_UNSPECIFIED

    Unknown resource type.

    GoogleCloudAssuredworkloadsV1WorkloadResourceSettingsResourceTypeConsumerProject
    CONSUMER_PROJECT

    Deprecated. Existing workloads will continue to support this, but new CreateWorkloadRequests should not specify this as an input value.

    GoogleCloudAssuredworkloadsV1WorkloadResourceSettingsResourceTypeConsumerFolder
    CONSUMER_FOLDER

    Consumer Folder.

    GoogleCloudAssuredworkloadsV1WorkloadResourceSettingsResourceTypeEncryptionKeysProject
    ENCRYPTION_KEYS_PROJECT

    Consumer project containing encryption keys.

    GoogleCloudAssuredworkloadsV1WorkloadResourceSettingsResourceTypeKeyring
    KEYRING

    Keyring resource that hosts encryption keys.

    ResourceTypeUnspecified
    RESOURCE_TYPE_UNSPECIFIED

    Unknown resource type.

    ConsumerProject
    CONSUMER_PROJECT

    Deprecated. Existing workloads will continue to support this, but new CreateWorkloadRequests should not specify this as an input value.

    ConsumerFolder
    CONSUMER_FOLDER

    Consumer Folder.

    EncryptionKeysProject
    ENCRYPTION_KEYS_PROJECT

    Consumer project containing encryption keys.

    Keyring
    KEYRING

    Keyring resource that hosts encryption keys.

    ResourceTypeUnspecified
    RESOURCE_TYPE_UNSPECIFIED

    Unknown resource type.

    ConsumerProject
    CONSUMER_PROJECT

    Deprecated. Existing workloads will continue to support this, but new CreateWorkloadRequests should not specify this as an input value.

    ConsumerFolder
    CONSUMER_FOLDER

    Consumer Folder.

    EncryptionKeysProject
    ENCRYPTION_KEYS_PROJECT

    Consumer project containing encryption keys.

    Keyring
    KEYRING

    Keyring resource that hosts encryption keys.

    RESOURCE_TYPE_UNSPECIFIED
    RESOURCE_TYPE_UNSPECIFIED

    Unknown resource type.

    CONSUMER_PROJECT
    CONSUMER_PROJECT

    Deprecated. Existing workloads will continue to support this, but new CreateWorkloadRequests should not specify this as an input value.

    CONSUMER_FOLDER
    CONSUMER_FOLDER

    Consumer Folder.

    ENCRYPTION_KEYS_PROJECT
    ENCRYPTION_KEYS_PROJECT

    Consumer project containing encryption keys.

    KEYRING
    KEYRING

    Keyring resource that hosts encryption keys.

    "RESOURCE_TYPE_UNSPECIFIED"
    RESOURCE_TYPE_UNSPECIFIED

    Unknown resource type.

    "CONSUMER_PROJECT"
    CONSUMER_PROJECT

    Deprecated. Existing workloads will continue to support this, but new CreateWorkloadRequests should not specify this as an input value.

    "CONSUMER_FOLDER"
    CONSUMER_FOLDER

    Consumer Folder.

    "ENCRYPTION_KEYS_PROJECT"
    ENCRYPTION_KEYS_PROJECT

    Consumer project containing encryption keys.

    "KEYRING"
    KEYRING

    Keyring resource that hosts encryption keys.

    GoogleCloudAssuredworkloadsV1WorkloadResourceSettingsResponse, GoogleCloudAssuredworkloadsV1WorkloadResourceSettingsResponseArgs

    DisplayName string

    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.

    ResourceId string

    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.

    ResourceType string

    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)

    DisplayName string

    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.

    ResourceId string

    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.

    ResourceType string

    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)

    displayName String

    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.

    resourceId String

    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.

    resourceType String

    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)

    displayName string

    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.

    resourceId string

    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.

    resourceType string

    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)

    display_name str

    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.

    resource_id str

    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.

    resource_type str

    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)

    displayName String

    User-assigned resource display name. If not empty it will be used to create a resource with the specified name.

    resourceId String

    Resource identifier. For a project this represents project_id. If the project is already taken, the workload creation will fail. For KeyRing, this represents the keyring_id. For a folder, don't set this value as folder_id is assigned by Google.

    resourceType String

    Indicates the type of resource. This field should be specified to correspond the id to the right project type (CONSUMER_PROJECT or ENCRYPTION_KEYS_PROJECT)

    GoogleCloudAssuredworkloadsV1WorkloadSaaEnrollmentResponseResponse, GoogleCloudAssuredworkloadsV1WorkloadSaaEnrollmentResponseResponseArgs

    SetupErrors List<string>

    Indicates SAA enrollment setup error if any.

    SetupStatus string

    Indicates SAA enrollment status of a given workload.

    SetupErrors []string

    Indicates SAA enrollment setup error if any.

    SetupStatus string

    Indicates SAA enrollment status of a given workload.

    setupErrors List<String>

    Indicates SAA enrollment setup error if any.

    setupStatus String

    Indicates SAA enrollment status of a given workload.

    setupErrors string[]

    Indicates SAA enrollment setup error if any.

    setupStatus string

    Indicates SAA enrollment status of a given workload.

    setup_errors Sequence[str]

    Indicates SAA enrollment setup error if any.

    setup_status str

    Indicates SAA enrollment status of a given workload.

    setupErrors List<String>

    Indicates SAA enrollment setup error if any.

    setupStatus String

    Indicates SAA enrollment status of a given workload.

    WorkloadComplianceRegime, WorkloadComplianceRegimeArgs

    ComplianceRegimeUnspecified
    COMPLIANCE_REGIME_UNSPECIFIED

    Unknown compliance regime.

    Il4
    IL4

    Information protection as per DoD IL4 requirements.

    Cjis
    CJIS

    Criminal Justice Information Services (CJIS) Security policies.

    FedrampHigh
    FEDRAMP_HIGH

    FedRAMP High data protection controls

    FedrampModerate
    FEDRAMP_MODERATE

    FedRAMP Moderate data protection controls

    UsRegionalAccess
    US_REGIONAL_ACCESS

    Assured Workloads For US Regions data protection controls

    Hipaa
    HIPAA

    Health Insurance Portability and Accountability Act controls

    Hitrust
    HITRUST

    Health Information Trust Alliance controls

    EuRegionsAndSupport
    EU_REGIONS_AND_SUPPORT

    Assured Workloads For EU Regions and Support controls

    CaRegionsAndSupport
    CA_REGIONS_AND_SUPPORT

    Assured Workloads For Canada Regions and Support controls

    Itar
    ITAR

    International Traffic in Arms Regulations

    AuRegionsAndUsSupport
    AU_REGIONS_AND_US_SUPPORT

    Assured Workloads for Australia Regions and Support controls

    AssuredWorkloadsForPartners
    ASSURED_WORKLOADS_FOR_PARTNERS

    Assured Workloads for Partners;

    IsrRegions
    ISR_REGIONS

    Assured Workloads for Israel

    IsrRegionsAndSupport
    ISR_REGIONS_AND_SUPPORT

    Assured Workloads for Israel Regions

    CaProtectedB
    CA_PROTECTED_B

    Assured Workloads for Canada Protected B regime

    Il5
    IL5

    Information protection as per DoD IL5 requirements.

    Il2
    IL2

    Information protection as per DoD IL2 requirements.

    JpRegionsAndSupport
    JP_REGIONS_AND_SUPPORT

    Assured Workloads for Japan Regions

    WorkloadComplianceRegimeComplianceRegimeUnspecified
    COMPLIANCE_REGIME_UNSPECIFIED

    Unknown compliance regime.

    WorkloadComplianceRegimeIl4
    IL4

    Information protection as per DoD IL4 requirements.

    WorkloadComplianceRegimeCjis
    CJIS

    Criminal Justice Information Services (CJIS) Security policies.

    WorkloadComplianceRegimeFedrampHigh
    FEDRAMP_HIGH

    FedRAMP High data protection controls

    WorkloadComplianceRegimeFedrampModerate
    FEDRAMP_MODERATE

    FedRAMP Moderate data protection controls

    WorkloadComplianceRegimeUsRegionalAccess
    US_REGIONAL_ACCESS

    Assured Workloads For US Regions data protection controls

    WorkloadComplianceRegimeHipaa
    HIPAA

    Health Insurance Portability and Accountability Act controls

    WorkloadComplianceRegimeHitrust
    HITRUST

    Health Information Trust Alliance controls

    WorkloadComplianceRegimeEuRegionsAndSupport
    EU_REGIONS_AND_SUPPORT

    Assured Workloads For EU Regions and Support controls

    WorkloadComplianceRegimeCaRegionsAndSupport
    CA_REGIONS_AND_SUPPORT

    Assured Workloads For Canada Regions and Support controls

    WorkloadComplianceRegimeItar
    ITAR

    International Traffic in Arms Regulations

    WorkloadComplianceRegimeAuRegionsAndUsSupport
    AU_REGIONS_AND_US_SUPPORT

    Assured Workloads for Australia Regions and Support controls

    WorkloadComplianceRegimeAssuredWorkloadsForPartners
    ASSURED_WORKLOADS_FOR_PARTNERS

    Assured Workloads for Partners;

    WorkloadComplianceRegimeIsrRegions
    ISR_REGIONS

    Assured Workloads for Israel

    WorkloadComplianceRegimeIsrRegionsAndSupport
    ISR_REGIONS_AND_SUPPORT

    Assured Workloads for Israel Regions

    WorkloadComplianceRegimeCaProtectedB
    CA_PROTECTED_B

    Assured Workloads for Canada Protected B regime

    WorkloadComplianceRegimeIl5
    IL5

    Information protection as per DoD IL5 requirements.

    WorkloadComplianceRegimeIl2
    IL2

    Information protection as per DoD IL2 requirements.

    WorkloadComplianceRegimeJpRegionsAndSupport
    JP_REGIONS_AND_SUPPORT

    Assured Workloads for Japan Regions

    ComplianceRegimeUnspecified
    COMPLIANCE_REGIME_UNSPECIFIED

    Unknown compliance regime.

    Il4
    IL4

    Information protection as per DoD IL4 requirements.

    Cjis
    CJIS

    Criminal Justice Information Services (CJIS) Security policies.

    FedrampHigh
    FEDRAMP_HIGH

    FedRAMP High data protection controls

    FedrampModerate
    FEDRAMP_MODERATE

    FedRAMP Moderate data protection controls

    UsRegionalAccess
    US_REGIONAL_ACCESS

    Assured Workloads For US Regions data protection controls

    Hipaa
    HIPAA

    Health Insurance Portability and Accountability Act controls

    Hitrust
    HITRUST

    Health Information Trust Alliance controls

    EuRegionsAndSupport
    EU_REGIONS_AND_SUPPORT

    Assured Workloads For EU Regions and Support controls

    CaRegionsAndSupport
    CA_REGIONS_AND_SUPPORT

    Assured Workloads For Canada Regions and Support controls

    Itar
    ITAR

    International Traffic in Arms Regulations

    AuRegionsAndUsSupport
    AU_REGIONS_AND_US_SUPPORT

    Assured Workloads for Australia Regions and Support controls

    AssuredWorkloadsForPartners
    ASSURED_WORKLOADS_FOR_PARTNERS

    Assured Workloads for Partners;

    IsrRegions
    ISR_REGIONS

    Assured Workloads for Israel

    IsrRegionsAndSupport
    ISR_REGIONS_AND_SUPPORT

    Assured Workloads for Israel Regions

    CaProtectedB
    CA_PROTECTED_B

    Assured Workloads for Canada Protected B regime

    Il5
    IL5

    Information protection as per DoD IL5 requirements.

    Il2
    IL2

    Information protection as per DoD IL2 requirements.

    JpRegionsAndSupport
    JP_REGIONS_AND_SUPPORT

    Assured Workloads for Japan Regions

    ComplianceRegimeUnspecified
    COMPLIANCE_REGIME_UNSPECIFIED

    Unknown compliance regime.

    Il4
    IL4

    Information protection as per DoD IL4 requirements.

    Cjis
    CJIS

    Criminal Justice Information Services (CJIS) Security policies.

    FedrampHigh
    FEDRAMP_HIGH

    FedRAMP High data protection controls

    FedrampModerate
    FEDRAMP_MODERATE

    FedRAMP Moderate data protection controls

    UsRegionalAccess
    US_REGIONAL_ACCESS

    Assured Workloads For US Regions data protection controls

    Hipaa
    HIPAA

    Health Insurance Portability and Accountability Act controls

    Hitrust
    HITRUST

    Health Information Trust Alliance controls

    EuRegionsAndSupport
    EU_REGIONS_AND_SUPPORT

    Assured Workloads For EU Regions and Support controls

    CaRegionsAndSupport
    CA_REGIONS_AND_SUPPORT

    Assured Workloads For Canada Regions and Support controls

    Itar
    ITAR

    International Traffic in Arms Regulations

    AuRegionsAndUsSupport
    AU_REGIONS_AND_US_SUPPORT

    Assured Workloads for Australia Regions and Support controls

    AssuredWorkloadsForPartners
    ASSURED_WORKLOADS_FOR_PARTNERS

    Assured Workloads for Partners;

    IsrRegions
    ISR_REGIONS

    Assured Workloads for Israel

    IsrRegionsAndSupport
    ISR_REGIONS_AND_SUPPORT

    Assured Workloads for Israel Regions

    CaProtectedB
    CA_PROTECTED_B

    Assured Workloads for Canada Protected B regime

    Il5
    IL5

    Information protection as per DoD IL5 requirements.

    Il2
    IL2

    Information protection as per DoD IL2 requirements.

    JpRegionsAndSupport
    JP_REGIONS_AND_SUPPORT

    Assured Workloads for Japan Regions

    COMPLIANCE_REGIME_UNSPECIFIED
    COMPLIANCE_REGIME_UNSPECIFIED

    Unknown compliance regime.

    IL4
    IL4

    Information protection as per DoD IL4 requirements.

    CJIS
    CJIS

    Criminal Justice Information Services (CJIS) Security policies.

    FEDRAMP_HIGH
    FEDRAMP_HIGH

    FedRAMP High data protection controls

    FEDRAMP_MODERATE
    FEDRAMP_MODERATE

    FedRAMP Moderate data protection controls

    US_REGIONAL_ACCESS
    US_REGIONAL_ACCESS

    Assured Workloads For US Regions data protection controls

    HIPAA
    HIPAA

    Health Insurance Portability and Accountability Act controls

    HITRUST
    HITRUST

    Health Information Trust Alliance controls

    EU_REGIONS_AND_SUPPORT
    EU_REGIONS_AND_SUPPORT

    Assured Workloads For EU Regions and Support controls

    CA_REGIONS_AND_SUPPORT
    CA_REGIONS_AND_SUPPORT

    Assured Workloads For Canada Regions and Support controls

    ITAR
    ITAR

    International Traffic in Arms Regulations

    AU_REGIONS_AND_US_SUPPORT
    AU_REGIONS_AND_US_SUPPORT

    Assured Workloads for Australia Regions and Support controls

    ASSURED_WORKLOADS_FOR_PARTNERS
    ASSURED_WORKLOADS_FOR_PARTNERS

    Assured Workloads for Partners;

    ISR_REGIONS
    ISR_REGIONS

    Assured Workloads for Israel

    ISR_REGIONS_AND_SUPPORT
    ISR_REGIONS_AND_SUPPORT

    Assured Workloads for Israel Regions

    CA_PROTECTED_B
    CA_PROTECTED_B

    Assured Workloads for Canada Protected B regime

    IL5
    IL5

    Information protection as per DoD IL5 requirements.

    IL2
    IL2

    Information protection as per DoD IL2 requirements.

    JP_REGIONS_AND_SUPPORT
    JP_REGIONS_AND_SUPPORT

    Assured Workloads for Japan Regions

    "COMPLIANCE_REGIME_UNSPECIFIED"
    COMPLIANCE_REGIME_UNSPECIFIED

    Unknown compliance regime.

    "IL4"
    IL4

    Information protection as per DoD IL4 requirements.

    "CJIS"
    CJIS

    Criminal Justice Information Services (CJIS) Security policies.

    "FEDRAMP_HIGH"
    FEDRAMP_HIGH

    FedRAMP High data protection controls

    "FEDRAMP_MODERATE"
    FEDRAMP_MODERATE

    FedRAMP Moderate data protection controls

    "US_REGIONAL_ACCESS"
    US_REGIONAL_ACCESS

    Assured Workloads For US Regions data protection controls

    "HIPAA"
    HIPAA

    Health Insurance Portability and Accountability Act controls

    "HITRUST"
    HITRUST

    Health Information Trust Alliance controls

    "EU_REGIONS_AND_SUPPORT"
    EU_REGIONS_AND_SUPPORT

    Assured Workloads For EU Regions and Support controls

    "CA_REGIONS_AND_SUPPORT"
    CA_REGIONS_AND_SUPPORT

    Assured Workloads For Canada Regions and Support controls

    "ITAR"
    ITAR

    International Traffic in Arms Regulations

    "AU_REGIONS_AND_US_SUPPORT"
    AU_REGIONS_AND_US_SUPPORT

    Assured Workloads for Australia Regions and Support controls

    "ASSURED_WORKLOADS_FOR_PARTNERS"
    ASSURED_WORKLOADS_FOR_PARTNERS

    Assured Workloads for Partners;

    "ISR_REGIONS"
    ISR_REGIONS

    Assured Workloads for Israel

    "ISR_REGIONS_AND_SUPPORT"
    ISR_REGIONS_AND_SUPPORT

    Assured Workloads for Israel Regions

    "CA_PROTECTED_B"
    CA_PROTECTED_B

    Assured Workloads for Canada Protected B regime

    "IL5"
    IL5

    Information protection as per DoD IL5 requirements.

    "IL2"
    IL2

    Information protection as per DoD IL2 requirements.

    "JP_REGIONS_AND_SUPPORT"
    JP_REGIONS_AND_SUPPORT

    Assured Workloads for Japan Regions

    WorkloadPartner, WorkloadPartnerArgs

    PartnerUnspecified
    PARTNER_UNSPECIFIED
    LocalControlsByS3ns
    LOCAL_CONTROLS_BY_S3NS

    Enum representing S3NS (Thales) partner.

    SovereignControlsByTSystems
    SOVEREIGN_CONTROLS_BY_T_SYSTEMS

    Enum representing T_SYSTEM (TSI) partner.

    SovereignControlsBySiaMinsait
    SOVEREIGN_CONTROLS_BY_SIA_MINSAIT

    Enum representing SIA_MINSAIT (Indra) partner.

    SovereignControlsByPsn
    SOVEREIGN_CONTROLS_BY_PSN

    Enum representing PSN (TIM) partner.

    WorkloadPartnerPartnerUnspecified
    PARTNER_UNSPECIFIED
    WorkloadPartnerLocalControlsByS3ns
    LOCAL_CONTROLS_BY_S3NS

    Enum representing S3NS (Thales) partner.

    WorkloadPartnerSovereignControlsByTSystems
    SOVEREIGN_CONTROLS_BY_T_SYSTEMS

    Enum representing T_SYSTEM (TSI) partner.

    WorkloadPartnerSovereignControlsBySiaMinsait
    SOVEREIGN_CONTROLS_BY_SIA_MINSAIT

    Enum representing SIA_MINSAIT (Indra) partner.

    WorkloadPartnerSovereignControlsByPsn
    SOVEREIGN_CONTROLS_BY_PSN

    Enum representing PSN (TIM) partner.

    PartnerUnspecified
    PARTNER_UNSPECIFIED
    LocalControlsByS3ns
    LOCAL_CONTROLS_BY_S3NS

    Enum representing S3NS (Thales) partner.

    SovereignControlsByTSystems
    SOVEREIGN_CONTROLS_BY_T_SYSTEMS

    Enum representing T_SYSTEM (TSI) partner.

    SovereignControlsBySiaMinsait
    SOVEREIGN_CONTROLS_BY_SIA_MINSAIT

    Enum representing SIA_MINSAIT (Indra) partner.

    SovereignControlsByPsn
    SOVEREIGN_CONTROLS_BY_PSN

    Enum representing PSN (TIM) partner.

    PartnerUnspecified
    PARTNER_UNSPECIFIED
    LocalControlsByS3ns
    LOCAL_CONTROLS_BY_S3NS

    Enum representing S3NS (Thales) partner.

    SovereignControlsByTSystems
    SOVEREIGN_CONTROLS_BY_T_SYSTEMS

    Enum representing T_SYSTEM (TSI) partner.

    SovereignControlsBySiaMinsait
    SOVEREIGN_CONTROLS_BY_SIA_MINSAIT

    Enum representing SIA_MINSAIT (Indra) partner.

    SovereignControlsByPsn
    SOVEREIGN_CONTROLS_BY_PSN

    Enum representing PSN (TIM) partner.

    PARTNER_UNSPECIFIED
    PARTNER_UNSPECIFIED
    LOCAL_CONTROLS_BY_S3NS
    LOCAL_CONTROLS_BY_S3NS

    Enum representing S3NS (Thales) partner.

    SOVEREIGN_CONTROLS_BY_T_SYSTEMS
    SOVEREIGN_CONTROLS_BY_T_SYSTEMS

    Enum representing T_SYSTEM (TSI) partner.

    SOVEREIGN_CONTROLS_BY_SIA_MINSAIT
    SOVEREIGN_CONTROLS_BY_SIA_MINSAIT

    Enum representing SIA_MINSAIT (Indra) partner.

    SOVEREIGN_CONTROLS_BY_PSN
    SOVEREIGN_CONTROLS_BY_PSN

    Enum representing PSN (TIM) partner.

    "PARTNER_UNSPECIFIED"
    PARTNER_UNSPECIFIED
    "LOCAL_CONTROLS_BY_S3NS"
    LOCAL_CONTROLS_BY_S3NS

    Enum representing S3NS (Thales) partner.

    "SOVEREIGN_CONTROLS_BY_T_SYSTEMS"
    SOVEREIGN_CONTROLS_BY_T_SYSTEMS

    Enum representing T_SYSTEM (TSI) partner.

    "SOVEREIGN_CONTROLS_BY_SIA_MINSAIT"
    SOVEREIGN_CONTROLS_BY_SIA_MINSAIT

    Enum representing SIA_MINSAIT (Indra) partner.

    "SOVEREIGN_CONTROLS_BY_PSN"
    SOVEREIGN_CONTROLS_BY_PSN

    Enum representing PSN (TIM) partner.

    Package Details

    Repository
    Google Cloud Native pulumi/pulumi-google-native
    License
    Apache-2.0
    google-native logo

    Google Cloud Native is in preview. Google Cloud Classic is fully supported.

    Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
    pulumi/pulumi-google-native